Tag Info

Hot answers tagged

2

can I go for virtual server environment using entry level desktop board having i3 or i5, 8GB RAM and 500 MB HDD without compromising any performance compared to existing machine? With the exception of th hard discs (if you can go with an SSD that will make a hugh difference) the answer is clearly yes. The P4 is ancient - seriously ancient. Likely my ...


2

I am not sure,but please take a look with this checklist: Edit the the squid.conf file and change the following line to enable transparent proxy mode: http_port 3128 to http_port 3128 intercept service squid restart service squid reload Add an entry to iptables NAT table to port-forward inbound traffic on the inside interface (LAN side) to the ...


1

So in looking at your logs we can pretty clearly see that your system is attempting to use an IPv6 address for mail.google.com (DIRECT/2607:f8b0:4004:803::1015). This would happen if you have an IPv6 somewhat configured on your system. But I suspect you don't have it completely configured, or perhaps your ISP doesn't have IPv6 fully configured. The point ...


1

Here's the full list you need:- via off forwarded_for off follow_x_forwarded_for deny all request_header_access X-Forwarded-For deny all header_access X_Forwarded_For deny all


1

I don't think squid implements any logic to automatically retry and SSL downgrade if the connection failed. So you have only the following options: Downgrade everything to SSLv3 like you propose. This is bad for security and will probably cause other problems, when servers refuse to connect with SSLv3 for security reasons. Don't use servers which cannot ...


1

Efficient usage of dual connection where one is high bandwidth + high latency and the other is low bandwidth + low latency is one of the problems MPTCP is trying to address. MPTCP isn't widely deployed yet, so you should probably just stick with the solution you found. But if anybody comes back to this question in a few years time, then MPTCP might be the ...


1

Normally the proxy server does the resolving (at least for plain HTTP, although I'm not 100% sure about HTTPS) so you simply point your proxy to a customized DNS server. In Squid with the configuration directive dns_nameservers. The clients need to be explicitly configured to use the proxy. DNSmasq is relatively light weight DNS server that can use a ...


1

According to the Squid WiKi you have the wrong setting in the http_port option, with Squid 3.1+ and DNAT it should be intercept instead of transparent. http_port 3128 intercept Although the output of your Squid log does seem to indicate intercepted sockets being active. A second thing is that the Linux server needs to allow TCP-IP forwarding with sysctl ...



Only top voted, non community-wiki answers of a minimum length are eligible