[squid-users] squid-users Digest, Vol 66, Issue 13, Squid 4.10 for windows

Thu Feb 13 16:36:50 UTC 2020

Unfortunately due to design by architects here this will not be possible at this moment, but I will suggest this up the chain. So we will stick with v3.5.28. Is there plans to make the windows version available in the future.

Chris Latino
Systems Platform Engineer II

Mastercard
1 Angel Lane | London, EC4R 3AB

-----Original Message-----
From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On Behalf Of squid-users-request at lists.squid-cache.org
Sent: 13 February 2020 16:26
To: squid-users at lists.squid-cache.org
Subject: squid-users Digest, Vol 66, Issue 13

Send squid-users mailing list submissions to
	squid-users at lists.squid-cache.org

To subscribe or unsubscribe via the World Wide Web, visit
	https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.squid-2Dcache.org_listinfo_squid-2Dusers&d=DwIGaQ&c=uc5ZRXl8dGLM1RMQwf7xTCjRqXF0jmCF6SP0bDlmMmY&r=ZO_4u8yVNn_3q7TmkfoNDXPUaze1C-nxiq5H74Rmf8Y&m=E7G7-YCdvdwuhscn3KcjCIzHnY1HIdbZVfI2BbqgHWg&s=4AFST0RQi7tk2FMW7MRTtOlMTMORZwr4VWlcElN0uCk&e=
or, via email, send a message with subject or body 'help' to
	squid-users-request at lists.squid-cache.org

You can reach the person managing the list at
	squid-users-owner at lists.squid-cache.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of squid-users digest..."

Today's Topics:

   1. Re: Squid proxy incoming and outcoming connections?
      (Patrícia Sousa)
   2. Re: Squid proxy incoming and outcoming connections?
      (Felipe Arturo Polanco)
   3. Re: Squid 4.10 for windows (Rafael Akchurin)

----------------------------------------------------------------------

Message: 1
Date: Thu, 13 Feb 2020 16:18:34 +0000
From: Patrícia Sousa <psousadp at gmail.com>
To: Felipe Arturo Polanco <felipeapolanco at gmail.com>
Cc: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Squid proxy incoming and outcoming
	connections?
Message-ID:
	<CAJiPhfkf99t=L04BPHomTtSLKJihsLYoDKY4RmMA6ED+seF2DA at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

Hi,

Thanks for the tip,

Enabling debug_options I can see that the wget from the machine computer to the Squid machine does not goes through the proxy. Any idea why?

Felipe Arturo Polanco <felipeapolanco at gmail.com> escreveu no dia quinta,
13/02/2020 à(s) 15:32:

> Hi,
>
> For this, you need to use IPtables to block at the network level.
>
> SSH uses port 22/tcp but wget uses HTTP, it should have been blocked 
> by squid.
> Enabled debug_options in squid to see why it was allowed.
>
>
>
> On Thu, Feb 13, 2020 at 11:10 AM Patrícia Sousa <psousadp at gmail.com>
> wrote:
>
>> I'm using the squid proxy and I'm trying to block some connections 
>> (incoming and outcoming traffic) from a certain ip address. However, 
>> for example, if I deny all the connections (http_access deny all) it 
>> only blocks the connections that I made to websites for example, but 
>> if I use another PC and try to ssh or wget the PC that owns the proxy 
>> squid, it is allowed. How can I block the traffic from and to a 
>> specific IP or DNS? It is possible to do this with Squid?
>>
>> If not, what is the best way to do this?
>>
>> Thank you.
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.squid-2Dcac
>> he.org_listinfo_squid-2Dusers&d=DwIGaQ&c=uc5ZRXl8dGLM1RMQwf7xTCjRqXF0
>> jmCF6SP0bDlmMmY&r=ZO_4u8yVNn_3q7TmkfoNDXPUaze1C-nxiq5H74Rmf8Y&m=E7G7-
>> YCdvdwuhscn3KcjCIzHnY1HIdbZVfI2BbqgHWg&s=4AFST0RQi7tk2FMW7MRTtOlMTMOR
>> Zwr4VWlcElN0uCk&e=
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.squid-2Dcache.org_pipermail_squid-2Dusers_attachments_20200213_da75aa29_attachment-2D0001.html&d=DwIGaQ&c=uc5ZRXl8dGLM1RMQwf7xTCjRqXF0jmCF6SP0bDlmMmY&r=ZO_4u8yVNn_3q7TmkfoNDXPUaze1C-nxiq5H74Rmf8Y&m=E7G7-YCdvdwuhscn3KcjCIzHnY1HIdbZVfI2BbqgHWg&s=E5BhBm28H6iaiIKGkoVlaMCeSMKIOpmgffp1u2A0Q1M&e= >

------------------------------

Message: 2
Date: Thu, 13 Feb 2020 12:21:50 -0400
From: Felipe Arturo Polanco <felipeapolanco at gmail.com>
To: Patrícia Sousa <psousadp at gmail.com>
Cc: Squid Users <squid-users at lists.squid-cache.org>
Subject: Re: [squid-users] Squid proxy incoming and outcoming
	connections?
Message-ID:
	<CADcj3=7Mn3ESHNY=H6DyhAq5Y7GjY1sOPS0XX6s8GHZsRiFtgg at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

Did you configure Squid to accept both HTTP and HTTPS ports?

Please share your squid.conf file.

Thanks,

On Thu, Feb 13, 2020 at 12:18 PM Patrícia Sousa <psousadp at gmail.com> wrote:

> Hi,
>
> Thanks for the tip,
>
> Enabling debug_options I can see that the wget from the machine 
> computer to the Squid machine does not goes through the proxy. Any idea why?
>
> Felipe Arturo Polanco <felipeapolanco at gmail.com> escreveu no dia 
> quinta,
> 13/02/2020 à(s) 15:32:
>
>> Hi,
>>
>> For this, you need to use IPtables to block at the network level.
>>
>> SSH uses port 22/tcp but wget uses HTTP, it should have been blocked 
>> by squid.
>> Enabled debug_options in squid to see why it was allowed.
>>
>>
>>
>> On Thu, Feb 13, 2020 at 11:10 AM Patrícia Sousa <psousadp at gmail.com>
>> wrote:
>>
>>> I'm using the squid proxy and I'm trying to block some connections 
>>> (incoming and outcoming traffic) from a certain ip address. However, 
>>> for example, if I deny all the connections (http_access deny all) it 
>>> only blocks the connections that I made to websites for example, but 
>>> if I use another PC and try to ssh or wget the PC that owns the 
>>> proxy squid, it is allowed. How can I block the traffic from and to 
>>> a specific IP or DNS? It is possible to do this with Squid?
>>>
>>> If not, what is the best way to do this?
>>>
>>> Thank you.
>>> _______________________________________________
>>> squid-users mailing list
>>> squid-users at lists.squid-cache.org
>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.squid-2Dca
>>> che.org_listinfo_squid-2Dusers&d=DwIGaQ&c=uc5ZRXl8dGLM1RMQwf7xTCjRqX
>>> F0jmCF6SP0bDlmMmY&r=ZO_4u8yVNn_3q7TmkfoNDXPUaze1C-nxiq5H74Rmf8Y&m=E7
>>> G7-YCdvdwuhscn3KcjCIzHnY1HIdbZVfI2BbqgHWg&s=4AFST0RQi7tk2FMW7MRTtOlM
>>> TMORZwr4VWlcElN0uCk&e=
>>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.squid-2Dcache.org_pipermail_squid-2Dusers_attachments_20200213_db86f0df_attachment-2D0001.html&d=DwIGaQ&c=uc5ZRXl8dGLM1RMQwf7xTCjRqXF0jmCF6SP0bDlmMmY&r=ZO_4u8yVNn_3q7TmkfoNDXPUaze1C-nxiq5H74Rmf8Y&m=E7G7-YCdvdwuhscn3KcjCIzHnY1HIdbZVfI2BbqgHWg&s=_TmrQJSJ3OuJaLynfdQYRWTpY7kzpAzyzD9ra4sQyRA&e= >

------------------------------

Message: 3
Date: Thu, 13 Feb 2020 16:26:01 +0000
From: Rafael Akchurin <rafael.akchurin at diladele.com>
To: "Latino, Chris" <Chris.Latino at mastercard.com>,
	"squid-users at lists.squid-cache.org"
	<squid-users at lists.squid-cache.org>
Subject: Re: [squid-users] Squid 4.10 for windows
Message-ID:
	<AM0PR04MB4753CA7244BFD3628224DED38F1A0 at AM0PR04MB4753.eurprd04.prod.outlook.com>

Content-Type: text/plain; charset="utf-8"

Sorry Chris,

We still cannot find time to finish compilation of Squid 4 for Windows.
The Linux version running within Hyper-V works much better most probably. Why not to try it?

Best regards,
Rafael Akchurin
Diladele B.V.

From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of Latino, Chris
Sent: Thursday, 13 February 2020 17:17
To: squid-users at lists.squid-cache.org
Subject: [squid-users] Squid 4.10 for windows

Hi

Hoping you can help we are using squid for windows 3.5.28

Our vulnerability scanner is saying this isn't the latest version but I can't see a 4.10 version for windows and when I go to

https://urldefense.proofpoint.com/v2/url?u=https-3A__squid.diladele.com_&d=DwIGaQ&c=uc5ZRXl8dGLM1RMQwf7xTCjRqXF0jmCF6SP0bDlmMmY&r=ZO_4u8yVNn_3q7TmkfoNDXPUaze1C-nxiq5H74Rmf8Y&m=E7G7-YCdvdwuhscn3KcjCIzHnY1HIdbZVfI2BbqgHWg&s=Y0hsufOmiYEA7pVGmde7HI-FHkwvIn8Y5CETbQbLHW4&e= 

It's still showing the 3.5.28 version

Chris Latino
Senior Systems Platform Engineer II

Mastercard
1 Angel Lane | London, EC4R 3AB
[cid:image001.png at 01D5E292.B0BD8290]<http://www.mastercard.com>

CONFIDENTIALITY NOTICE This e-mail message and any attachments are only for the use of the intended recipient and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If you are not the intended recipient, any disclosure, distribution or other use of this e-mail message or attachments is prohibited. If you have received this e-mail message in error, please delete and notify the sender immediately. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.squid-2Dcache.org_pipermail_squid-2Dusers_attachments_20200213_fb7ecd56_attachment.html&d=DwIGaQ&c=uc5ZRXl8dGLM1RMQwf7xTCjRqXF0jmCF6SP0bDlmMmY&r=ZO_4u8yVNn_3q7TmkfoNDXPUaze1C-nxiq5H74Rmf8Y&m=E7G7-YCdvdwuhscn3KcjCIzHnY1HIdbZVfI2BbqgHWg&s=vNMJAXph8SKM41XdvJCYMr3sly9Wp1Pielj8PfD7sXU&e= >
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 3198 bytes
Desc: image001.png
URL: <https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.squid-2Dcache.org_pipermail_squid-2Dusers_attachments_20200213_fb7ecd56_attachment.png&d=DwIGaQ&c=uc5ZRXl8dGLM1RMQwf7xTCjRqXF0jmCF6SP0bDlmMmY&r=ZO_4u8yVNn_3q7TmkfoNDXPUaze1C-nxiq5H74Rmf8Y&m=E7G7-YCdvdwuhscn3KcjCIzHnY1HIdbZVfI2BbqgHWg&s=cxPx5sSkegRGwGAMSnBq-lOqaUBdmNG7zkTCB96m2aA&e= >

------------------------------

Subject: Digest Footer

_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.squid-2Dcache.org_listinfo_squid-2Dusers&d=DwIGaQ&c=uc5ZRXl8dGLM1RMQwf7xTCjRqXF0jmCF6SP0bDlmMmY&r=ZO_4u8yVNn_3q7TmkfoNDXPUaze1C-nxiq5H74Rmf8Y&m=E7G7-YCdvdwuhscn3KcjCIzHnY1HIdbZVfI2BbqgHWg&s=4AFST0RQi7tk2FMW7MRTtOlMTMORZwr4VWlcElN0uCk&e= 

------------------------------

End of squid-users Digest, Vol 66, Issue 13
*******************************************