RE: [squid-users] time based Instant Message blocking

2003-10-30 Thread Manu C S
Hi Adam,

Like I mentioned yesterday I got my squid 2.5 running on IPCop.
Took awhile to figure out the new configuration and I finally
got it up  running. Thanks so very much for all your inputs.
Couldn't have done it without them.

I found that with the new Squid, I have partial success
with regards to my original problem.
(Recap: As an unprivileged user on Windows XP/2K, I was able to 
 browse the net via proxy, but couldn't use Yahoo  MSN messengers
 via proxy.)

I am able to successfully use MSN messenger with the new proxy.
But I still have the same problem with yahoo messenger.
I was just wondering: MSN allows you to specify 
user-authentication (user/password/realm) in its sign-in 
options whereas yahoo doesn't.

Do you think that could be the reason why yahoo fails to 
connect me through? And how do I get around it?

Regards,
Manu

The art of living is to gain this ability in life -
to free your mind of the past, to free your mind of future
fears, and to be able to play with every situation that
is in front of you, to be able to take every situation
that is in front of you.
- Sri Sri RaviShankar
http://www.artofliving.org



RE: [squid-users] Squid log format

2003-10-30 Thread Mark A. Lewis
The FAQ knows all...

http://www.squid-cache.org/Doc/FAQ/FAQ-6.html 

-Original Message-
From: Fadjar Tandabawana [mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 30, 2003 6:31 AM
To: [EMAIL PROTECTED]
Subject: [squid-users] Squid log format

Dear Gurus,

Is there anyone know the squid log format in access.log?
I mean the sequence of the log.

I want to know the number after timestamp (before client IP) and after
connection status (before URL).
What sequence show the bytes of the file

Regards,
Fadjar Tandabawana

**
This message was virus scanned at mail.siliconjunkie.net and any known
viruses were removed. For a current virus list see
http://www.siliconjunkie.net/antivirus/list.html



Re: [squid-users] Squid log format

2003-10-30 Thread Henrik Nordstrom
On Thu, 30 Oct 2003, Fadjar Tandabawana wrote:

 Dear Gurus,
 
 Is there anyone know the squid log format in access.log?

Yes, and it is fully documented in the Squid FAQ.

Regards
Henrik



Re: [squid-users] ICAP plans for SQUID?

2003-10-30 Thread zottmann
Fine !!! 

Can either project be used in a production environment, to integrate a 
antivirus solution to Squid (Symantec´s Scan Engine for Linux)? 

Regards, 
Carlos. 

On Tue, 28 Oct 2003 [EMAIL PROTECTED] wrote: 

 I have been reading about ICAP and Squid, but was not able to find 
anything 
 about its actual implementation, not even in the Squid 3.0 pages ... 

There is plenty of activities going on in this area. See 
http://devel.squid-cache.org/. At this time there is in fact two parallell 
projects working on ICAP for Squid-2.5 with slightly different goals and 
requirements. 

Hopefully there will eventually be a project working on ICAP support for 
Squid-3, ultimately allowing ICAP to be added to the mainstream Squid 
releases. 

Regards 
Henrik 

_
Voce quer um iGMail protegido contra vírus e spams? 
Clique aqui: http://www.igmailseguro.ig.com.br
Ofertas imperdíveis! Link: http://www.americanas.com.br/ig/



Re: [squid-users] ICAP plans for SQUID?

2003-10-30 Thread zottmann
Fine !!! 

Can either project be used in a production environment, to integrate a 
antivirus solution to Squid (Symantec´s Scan Engine for Linux)? 

Regards, 
Carlos. 

On Tue, 28 Oct 2003 [EMAIL PROTECTED] wrote: 

 I have been reading about ICAP and Squid, but was not able to find 
anything 
 about its actual implementation, not even in the Squid 3.0 pages ... 

There is plenty of activities going on in this area. See 
http://devel.squid-cache.org/. At this time there is in fact two parallell 
projects working on ICAP for Squid-2.5 with slightly different goals and 
requirements. 

Hopefully there will eventually be a project working on ICAP support for 
Squid-3, ultimately allowing ICAP to be added to the mainstream Squid 
releases. 

Regards 
Henrik 

_
Voce quer um iGMail protegido contra vírus e spams? 
Clique aqui: http://www.igmailseguro.ig.com.br
Ofertas imperdíveis! Link: http://www.americanas.com.br/ig/



[squid-users] Squid error using winbind!

2003-10-30 Thread Thomas . Bauer
Hi folks,

got a bit further with my squid - winbind - nt - seamless login problem, but squid is 
still showing n error and the prompt is
also still showing up.

Here are the error messages:

[EMAIL PROTECTED] root]# /etc/rc.d/init.d/squid restart
Stopping squid: 2003/10/30 10:41:59| Parsing Config File: Unknown authentication 
scheme 'ntlm'.
2003/10/30 10:41:59| Parsing Config File: Unknown authentication scheme 'ntlm'.
2003/10/30 10:41:59| parseConfigFile: line 1178 unrecognized: 'auth-param ntlm 
max_challenge_reuses 0'
2003/10/30 10:41:59| Parsing Config File: Unknown authentication scheme 'ntlm'.
.  [  OK  ]
Starting squid: .  [  OK  ]
[EMAIL PROTECTED] root]#

Here is an extract from my squid.conf:

auth_param ntlm program /usr/lib/squid/wb_ntlmauth
auth_param ntlm children 5
auth-param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param basic program /usr/lib/squid/wb_auth
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

Here are the winbind helpers:

[EMAIL PROTECTED] root]# /usr/lib/squid/wb_auth -d
/wb_auth[5070](wb_basic_auth.c:168): basic winbindd auth helper build Oct 30 200
3, 08:57:55 starting up...
ushgnt\temp1 Password
/wb_auth[5070](wb_basic_auth.c:129): Got 'ushgnt\temp1 Password' from squid (length: 
21).
/wb_auth[5070](wb_basic_auth.c:55): winbindd result: 1
/wb_auth[5070](wb_basic_auth.c:58): sending 'OK' to squid
OK

[EMAIL PROTECTED] root]# /usr/lib/squid/wb_group -d
/wb_group[5073](wb_check_group.c:322): External ACL winbindd group helper build Jun  5 
2003, 09:43:16 starting up...
temp1
/wb_group[5073](wb_check_group.c:343): Got 'temp1' from Squid (length: 5).
/wb_group[5073](wb_check_group.c:237): SID: 
S-1-5-21-2080928648-758920204-1539857752-513
/wb_group[5073](wb_check_group.c:237): SID: 
S-1-5-21-2080928648-758920204-1539857752-1174
/wb_group[5073](wb_check_group.c:237): SID: 
S-1-5-21-2080928648-758920204-1539857752-1007
ERR

What did I make wrong? What do the errors mean? Do I have to create a group where I 
define the authorized internet users that
the prompt in IE doesn't show up for valid internet users?
temp1 is not a valid internet user, but when the prompt pops up (still pops up for 
every user) and I enter temp1 and Password, I
can log on to the internet.
Hope someone can help me. If you need further informations let me know.
Thanks Tommy




Re: [squid-users] Squid error using winbind!

2003-10-30 Thread Marc Elsen


[EMAIL PROTECTED] wrote:
 
 Hi folks,
 
 got a bit further with my squid - winbind - nt - seamless login problem, but squid 
 is still showing n error and the prompt is
 also still showing up.
 
 Here are the error messages:
 
 [EMAIL PROTECTED] root]# /etc/rc.d/init.d/squid restart
 Stopping squid: 2003/10/30 10:41:59| Parsing Config File: Unknown authentication 
 scheme 'ntlm'.
 2003/10/30 10:41:59| Parsing Config File: Unknown authentication scheme 'ntlm'.
 2003/10/30 10:41:59| parseConfigFile: line 1178 unrecognized: 'auth-param ntlm 
 max_challenge_reuses 0'
 2003/10/30 10:41:59| Parsing Config File: Unknown authentication scheme 'ntlm'.
 .  [  OK  ]
 
...

 Did you build squid with ntlm support ?

 M.


Re: [squid-users] Transparency

2003-10-30 Thread Michael Buck
There is a good one at:

http://en.tldp.org/HOWTO/TransparentProxy.html

I hope this helps.

-MBUCK

 [EMAIL PROTECTED] 10/30/03 08:49AM 
I'm sure there's a faq or a specific document on setting up squid to
run 
transparently.  I cannot find it.
Can someone point me to one?

Regards,

Tim Rainier


Re: [squid-users] Transparency

2003-10-30 Thread trainier
Thank you.

Unfortunately, it seems we can't use transparency mode, for two reasons.

The first is authentication.  That howto specifically says that you cannot 
use authentication via transparency.
The sole purpose of us using the proxy is for authentication.

The second is because of https.  We have to allow https traffic, as well.

Can anyone please verify these two pieces before I tell my boss no?  :-)

Regards,

Tim Rainier





Michael Buck [EMAIL PROTECTED]
10/30/2003 10:57 AM

 
To: [EMAIL PROTECTED], [EMAIL PROTECTED]
cc: 
Subject:Re: [squid-users] Transparency


There is a good one at:

http://en.tldp.org/HOWTO/TransparentProxy.html

I hope this helps.

-MBUCK

 [EMAIL PROTECTED] 10/30/03 08:49AM 
I'm sure there's a faq or a specific document on setting up squid to
run 
transparently.  I cannot find it.
Can someone point me to one?

Regards,

Tim Rainier





Re: [squid-users] Squid error using winbind!

2003-10-30 Thread Henrik Nordstrom
On Thu, 30 Oct 2003 [EMAIL PROTECTED] wrote:

 
 Here are the error messages:
 
 [EMAIL PROTECTED] root]# /etc/rc.d/init.d/squid restart
 Stopping squid: 2003/10/30 10:41:59| Parsing Config File: Unknown authentication 
 scheme 'ntlm'.

You have not enabled support for the ntlm scheme when you compiled your 
Squid binary.

Regards
Henrik



Re: [squid-users] Squid error using winbind!

2003-10-30 Thread Henrik Nordstrom
On Thu, 30 Oct 2003 [EMAIL PROTECTED] wrote:

 [] --enable-basic-auth-helpers=LDAP, NCSA, PAM, SMB, SASL, MSNT 
 --enable-ntlm-auth-helpers=SMB,winbind
 --enable-external-acl-helpers=ip_user, ldap_group, unix_group, wbinfo_group, 
 winbind_group
 
 How can I get ntlm support without reinstalling squid? What should I do?

You need to reinstall Squid as you have not enabled the ntlm 
authentication scheme (enabling helpers is not the same as enabling the 
authentication scheme)

You need --enable-auth=ntlm, basic


Regards
Henrik



Re: [squid-users] Transparency

2003-10-30 Thread Henrik Nordstrom
On Thu, 30 Oct 2003 [EMAIL PROTECTED] wrote:

 The first is authentication.  That howto specifically says that you cannot 
 use authentication via transparency.

Correct.

Interception abuses fundamental TCP/IP design properties, and can not 
solve all problems. It is generally an evil hack.

 The sole purpose of us using the proxy is for authentication.

Then you need to investigate other means of getting the users to use the 
proxy.

There is 
  * WPAD
  * Proxy-PAC files
  * Manual browser proxy settings
  * Blocking access to port 80 and 443, giving an error message 
instructing the user to reconfigure their browser to enable one of the 
above. (same technique as interception, but sending the traffic to a web 
server instead of the proxy).
  * Automatic login script settings to have the above settings done 
automatically at login time. This method is used in many corporate 
environments to automate the above.

 The second is because of https.  We have to allow https traffic, as well.

As above..

 Can anyone please verify these two pieces before I tell my boss no?  :-)

The information you have found is correct. Not much to add.

But it is not the end of the world. In the long run you will be better of 
if you don't go for interception anyway.

Regards
Henrik



[squid-users] Webmin x Squid

2003-10-30 Thread Dan Pinheiro \(CPD\)
Hi all,
I´m needing a documentation to configure Squid through Webmim (Free
BSD). I´m a beginner with Linux world.
Someone can help me?
Tks in advance.

Dan Pinheiro
Brasil



RE: [squid-users] Webmin x Squid

2003-10-30 Thread Yosi Greenfield
Look at http://www.swelltech.com/support/webminguide/.
As a Linux newcomer, I found this to be a great, really
useful book.

It helps, of course, if you understand the program you're
webminning first.

hth,

Yosi


-Original Message-
From: Dan Pinheiro (CPD) [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 30, 2003 12:34 PM
To: [EMAIL PROTECTED]
Subject: [squid-users] Webmin x Squid


Hi all,
I´m needing a documentation to configure Squid through Webmim (Free
BSD). I´m a beginner with Linux world.
Someone can help me?
Tks in advance.

Dan Pinheiro
Brasil



RE: [squid-users] time based Instant Message blocking

2003-10-30 Thread Adam Aube
 I am able to successfully use MSN messenger with the new
 proxy. But I still have the same problem with yahoo
 messenger.

 I was just wondering: MSN allows you to specify
 user-authentication (user/password/realm) in its sign-in
 options whereas yahoo doesn't.

 Do you think that could be the reason why yahoo fails to
 connect me through? And how do I get around it?

Insert a rule allowing IM access before you require authentication in
http_access. You could also check with Yahoo to see if their messeger
program supports proxy authentication - the feature might either be
hidden or available in newer versions.

Adam



Re: [squid-users] OWA on Exchange 2003 proxy

2003-10-30 Thread Jonathan Giles
Thanks again for the help, Henrik.

I got squid3 to compile and install, now having trouble getting it to 
work.

in squid.conf in ver. 3, these are the options I have made:

https_port 443 cert=/etc/openssl/cacert.pem 
key=/etc/openssl/privkey.pem accel defaultsite=owa.clinedavis.com

cache_peer owa.clinedavis.com parent 80 0 no-query front-end-https=on
---
in /etc/hosts
---
10.1.16.67  owa.clinedavis.com
---
and when I go to the squid server I get this...
Bad Request (Invalid URL)

in access.log I get this

1067539553.232  1 10.1.16.100 TCP_NEGATIVE_HIT/400 270 GET 
https://owa.clinedavis.com/ - NONE/- text/html
1067543543.673 23 10.1.16.100 TCP_MISS/400 262 GET 
https://owa.clinedavis.com/ - FIRST_UP_PARENT/owa.clinedavis.com 
text/html

when I change the ip in etc/hosts to some other  web server, it works.



In squid2  this following config works, but still has that not loading 
folders problem.

squid.conf

https_port 443 cert=/etc/openssl/cacert.pem key=/etc/openssl/privkey.pem
httpd_accel_host owa.clinedavis.com

cache_peer owa.clinedavis.com parent 80 0 no-query front-end-https=on

Any help would be greatly appreciated.

Thanks,

jg

On Wednesday, October 29, 2003, at 05:00  PM, Henrik Nordstrom wrote:

On Wed, 29 Oct 2003, Jonathan Giles wrote:

1)  forms based authentication mode turns on ssl on the exchange
server.  Https connections fail because it does not like the test cert
we put on the exchange server.  Is there any way to tell squid to
ignore the problem with the ssl test cert on the 2003 exchange server?
If you use Squid-3 then you can tell Exchange that https is added by a
frontend server such as Squid. See the cache_peer directive in Squid-3.
We can skip forms based auths if we can cause squid to time out
sessions...  Seems as though exchange credentials are stored on the 
web
client, and are not destroyed until the web client is quit.
Correct.

2)  if using IE on Windows, exchange2003 goes into high gear mode and
gives special features to the client, and this does not work on the
squid system I configured for exchange2000.  I believe there is a
redirect that is causing the proxy to spin it's gears, as the mail
folder list never gets populated with mail messages.  So, if someone
here has a suggestion with regards to this issue, or if there is a way
to stop letting Exchange 2003 know that the client is IE on windows, 
it
would be very helpful.
You quite likely need to use the above Squid-3 feature for this to work
properly..
Modern Exchange OWA installations uses WebDAV for folder access etc 
when
accessed by MSIE clients and this requires that OWA knows exacly by 
which
means it is accessed. Any front-end server such as a Squid reverse 
proxy
MUST NOT modify the URL (including the host component) and if the
front-end uses SSL while using plain HTTP to the OWA server then it 
must
tell so to the OWA by using the custom X-Front-End-HTTPS header.

Regards
Henrik


---=---=---
Jonathan Giles
Senior Unix Administrator
Cline Davis Mann
---
Privileged/Confidential Information may be contained in this
message.  If you are not the addressee indicated in this message
(or responsible for delivery of the message to such person), you
may not copy or deliver this message to anyone.  In such case,
you should destroy this message and kindly notify the sender
by reply e-mail.  Please advise immediately if you or your
employer do not consent to Internet e-mail of this kind.
Opinions, conclusions, and other information in this message
that do not relate to the official business of CDM shall
be understood as neither given nor endorsed by it.



RE: [squid-users] Routing to multiple Parent proxies

2003-10-30 Thread Adeoye Oke
 3. I need the replacement and changing of these proxies to be as 
 dynamic as possible

Don't quite get what the requirement is here... care to give a few 
examples what you refer to by as dynamic as possible.

What I meant by this was the ability to change the list of parents, if
possible dynamically, say by reading a new set of parents, from a file
or list specified somewhere, in the event that one or more of the
existing parents goes offline. This is also necessary if I need to
maintain the parent list, without having to always modify the squid.conf
file.

I also would like to know the full syntax of specifying an acl that the
contents should be read from a file, instead of listing each entry on
the line. This will aid me in specifying my always_direct websites.



-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] 
Sent: Monday, October 27, 2003 7:49 PM
To: Adeoye Oke
Cc: [EMAIL PROTECTED]
Subject: Re: [squid-users] Routing to multiple Parent proxies


On Mon, 27 Oct 2003, Adeoye Oke wrote:

 The constraints I have to work with are:
 1. The parent proxies do not support ICP queries

So you need prefer_direct off or never_direct.

 2. Some of the proxies become really slow, so I would need to send 
 requests to the faster proxies first.

For this you basically need ICP.

Alternatively it might be possible to extend Squid with some statistics
trying to measure the slowness of a parent HTTP proxy to mostly avoid
very slow parents, but this is also heavily depending on the sites and
content accessed and not so easy to get correct.

 3. I need the replacement and changing of these proxies to be as 
 dynamic as possible

Don't quite get what the requirement is here... care to give a few 
examples what you refer to by as dynamic as possible.

Regards
Henrik




[squid-users] Transparent Proxy Problem

2003-10-30 Thread Adeoye Oke
Hello List,

I have a problem with a transparent squid cache, which I made using the
regular REDIRECT target for all http traffic to destination port 80. The
thing is, the cache works fine with the proxy port specified in the
browsers of all the windows machines (unfortunately only windows clients
on this network, but once the proxy is not specified (transparent mode)
all secure sites seem not to be accesible, though I have SNAT to the
internal network allowing forwarding to all internal machines on all
ports. I don't know what could be wrong, I did all the transparent proxy
Howto said but it still has this problem. Anyone have any ideas?

Regards,
Ade.




[squid-users] Re: Squid Cache

2003-10-30 Thread Henrik Nordstrom
On Thu, 30 Oct 2003, Roger Joseph wrote:

 Sorry about the personal email but it was not really list related. 

What makes this not list related?

 Is there a place that list out the features different between 
 Squid /2.5 Stable 1 vs Squid Stable 5 or later versions. What was
 improved. Should I do the upgrade , simply to upgrade. Or Quality speed
 improvements.

There is the release notes and the change log, both of which documents 
what you ask for in detail.

Note: There is no 2.5.STABLE5 release (yet). The latest is 2.5.STABLE4.

Regards
Henrik



RE: [squid-users] Routing to multiple Parent proxies

2003-10-30 Thread Henrik Nordstrom
On Thu, 30 Oct 2003, Adeoye Oke wrote:

 What I meant by this was the ability to change the list of parents, if
 possible dynamically, say by reading a new set of parents, from a file
 or list specified somewhere, in the event that one or more of the
 existing parents goes offline. This is also necessary if I need to
 maintain the parent list, without having to always modify the squid.conf
 file.

What is wrong with modifying squid.conf and issuing a squid -k 
reconfigure?

 I also would like to know the full syntax of specifying an acl that the
 contents should be read from a file, instead of listing each entry on
 the line. This will aid me in specifying my always_direct websites.

acl aclname acltype /path/to/file

Regards
Henrik



Re: [squid-users] OWA on Exchange 2003 proxy

2003-10-30 Thread Henrik Nordstrom
On Thu, 30 Oct 2003, Jonathan Giles wrote:

 in squid.conf in ver. 3, these are the options I have made:
 
 https_port 443 cert=/etc/openssl/cacert.pem 
 key=/etc/openssl/privkey.pem accel defaultsite=owa.clinedavis.com
 
 cache_peer owa.clinedavis.com parent 80 0 no-query front-end-https=on
 ---
 in /etc/hosts
 ---
 10.1.16.67  owa.clinedavis.com
 ---
 and when I go to the squid server I get this...
 
 Bad Request (Invalid URL)

Hmm.. you should not be seeing this error.

 in access.log I get this
 
 1067539553.232  1 10.1.16.100 TCP_NEGATIVE_HIT/400 270 GET 
 https://owa.clinedavis.com/ - NONE/- text/html

What was the first entry? This is a cache hit for an error which occurred 
earlier.

 1067543543.673 23 10.1.16.100 TCP_MISS/400 262 GET 
 https://owa.clinedavis.com/ - FIRST_UP_PARENT/owa.clinedavis.com 
 text/html

This looks better.

 when I change the ip in etc/hosts to some other  web server, it works.


Does the OWA server listen on 10.1.16.67 port 80?

Note: You do not need to specify the server by name in cache_peer. Using 
IP addresses is fine here.

 In squid2  this following config works, but still has that not loading 
 folders problem.

What URL is the client asking for? For this to work the client must be 
asking for https://owa.clinedavis.com/

Regards
Henrik




Re: [squid-users] Transparent Proxy Problem

2003-10-30 Thread Henrik Nordstrom
On Thu, 30 Oct 2003, Adeoye Oke wrote:

 on this network, but once the proxy is not specified (transparent mode)
 all secure sites seem not to be accesible, though I have SNAT to the
 internal network allowing forwarding to all internal machines on all
 ports. I don't know what could be wrong, I did all the transparent proxy
 Howto said but it still has this problem. Anyone have any ideas?

Most likely your SNAT rule is not properly set up, or you are not allowing 
IP forwarding.

Regards
Henrik



Re: [squid-users] Routing to multiple Parent proxies

2003-10-30 Thread Brett Lymn
On Thu, Oct 30, 2003 at 11:40:08PM +0100, Henrik Nordstrom wrote:
 
 What is wrong with modifying squid.conf and issuing a squid -k 
 reconfigure?
 

Because it can be seen as an interruption to service - squid actually
appears to refuse requests for a short period when it is reconfiguring
some users find that disturbing.

-- 
Brett Lymn


Re: [squid-users] Routing to multiple Parent proxies

2003-10-30 Thread Adam Aube
On Thursday 30 October 2003 07:34 pm, Brett Lymn wrote:
 On Thu, Oct 30, 2003 at 11:40:08PM +0100, Henrik Nordstrom wrote:
 What is wrong with modifying squid.conf and issuing a squid -k
 reconfigure?

 Because it can be seen as an interruption to service

Then a better solution might be some kind of hardware load balancer or 
clustering.

Adam


Re: [squid-users] Routing to multiple Parent proxies

2003-10-30 Thread Brett Lymn
On Thu, Oct 30, 2003 at 08:33:03PM -0500, Adam Aube wrote:
 
 Then a better solution might be some kind of hardware load balancer or 
 clustering.
 

Or just schedule the reloads for out of hours, since we are not a 24/7
operation that is ok for us but it does limit when we reconfigure our
squid.

-- 
Brett Lymn


[squid-users] grc scan

2003-10-30 Thread Fritz Mesedilla

Greetings!

I tried grc.com's security scanner and found this:

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, 
application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, 
application/x-shockwave-flash, */*
Accept-Language: en-ph
Connection: keep-alive
Host: grc.com
Referer: http://grc.com/x/ne.dll?rh1dkyd2
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Pragma: no-cache
Content-Length: 31
Content-Type: application/x-www-form-urlencoded
Via: 1.0 zerg.mesedilla.com:3128 (squid/2.5.STABLE3)
X-Forwarded-For: 192.168.247.21
Cache-Control: max-age=259200


It got my private ip address. How do I hide this including the line about squid?



Cheers,

fritz www.mesedilla.com
---
+ Basta Ikaw Lord


--
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender immediately by e-mail and delete this e-mail from your
system. Please note that any views or opinions presented in this
email are solely those of the author and do not necessarily represent
those of the company. Finally, the recipient should check this email
and any attachments for the presence of viruses. The company accepts
no liability for any damage caused by any virus transmitted by this
email. 

Overture Media, Inc.
Direct Line: (632) 635-4785
Trunkline:   (632) 631-8971 Local 146
Fax: (632) 637-2206
Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave., Quezon City 
1100



RE: [squid-users] grc scan

2003-10-30 Thread Fritz Mesedilla

Wups! Sorry for emailing quickly without checking the conf for myself. :)

#  TAG: forwarded_for   on|off
#   If set, Squid will include your system's IP address or name
#   in the HTTP requests it forwards.  By default it looks like
#   this:
#
#   X-Forwarded-For: 192.1.2.3
#
#   If you disable this, it will appear as
#
#   X-Forwarded-For: unknown
#
#Default:
# forwarded_for on

Thanks for your patience with me. :D

Cheers,

fritz www.mesedilla.com
---
+ Basta Ikaw Lord



 -Original Message-
 From: Fritz Mesedilla 
 Sent: Friday, October 31, 2003 11:39 AM
 To: Squid Mailing List (E-mail)
 Subject: [squid-users] grc scan
 
 
 
 Greetings!
 
 I tried grc.com's security scanner and found this:
 
 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, 
 application/vnd.ms-powerpoint, application/vnd.ms-excel, 
 application/msword, application/x-shockwave-flash, */*
 Accept-Language: en-ph
 Connection: keep-alive
 Host: grc.com
 Referer: http://grc.com/x/ne.dll?rh1dkyd2
 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
 Pragma: no-cache
 Content-Length: 31
 Content-Type: application/x-www-form-urlencoded
 Via: 1.0 zerg.mesedilla.com:3128 (squid/2.5.STABLE3)
 X-Forwarded-For: 192.168.247.21
 Cache-Control: max-age=259200
 
 
 It got my private ip address. How do I hide this including 
 the line about squid?
 
 
 
 Cheers,
 
 fritz www.mesedilla.com
 ---
 + Basta Ikaw Lord
 
 
 --
 This email and any files transmitted with it are confidential and
 intended solely for the use of the individual or entity to whom they
 are addressed. If you have received this email in error please notify
 the sender immediately by e-mail and delete this e-mail from your
 system. Please note that any views or opinions presented in this
 email are solely those of the author and do not necessarily represent
 those of the company. Finally, the recipient should check this email
 and any attachments for the presence of viruses. The company accepts
 no liability for any damage caused by any virus transmitted by this
 email. 
 
 Overture Media, Inc.
 Direct Line: (632) 635-4785
 Trunkline:   (632) 631-8971 Local 146
 Fax: (632) 637-2206
 Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. 
 Ortigas Ave., Quezon City 1100
 
 

--
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender immediately by e-mail and delete this e-mail from your
system. Please note that any views or opinions presented in this
email are solely those of the author and do not necessarily represent
those of the company. Finally, the recipient should check this email
and any attachments for the presence of viruses. The company accepts
no liability for any damage caused by any virus transmitted by this
email. 

Overture Media, Inc.
Direct Line: (632) 635-4785
Trunkline:   (632) 631-8971 Local 146
Fax: (632) 637-2206
Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave., Quezon City 
1100



[squid-users] how to init cache? URGENT HELP

2003-10-30 Thread Li Wei
hi,List

What a terrible!
The disk space of Squid server has already been exhausted.
I want to zeroize cache files. I just run squid -z, no effect,

How to do?


**
Li Wei   ^-^ HAVE A GOOD DAY ^-^
JFTT
E-mail: [EMAIL PROTECTED]
**



Re: [squid-users] how to init cache? URGENT HELP

2003-10-30 Thread jeff . richards

You need to remove the sub-directories within your Squid cache before
running squid -z. But remember that Squid doesn't just fill up and stop -
older stuff will get moved out to make room for newer objects.

Jeff

--
Jeff Richards
Technical Consultant
Unix Enterprise Services
[EMAIL PROTECTED]
Tel: +61 2 6219 8125



   
   
  Li Wei 
   
  [EMAIL PROTECTED]To:   Squid Forum  

  .comcc: 
   
   Subject:  [squid-users] how to init 
cache? URGENT HELP 
  31/10/2003 15:04 
   
   
   
|-|
   
| ( ) Urgent(4 hours) |
   
| (*) Normal(24-48)   |
   
| ( ) Low(72 hours)   |
   
|-|  Expires on
   
   
   
   
   
   
   
   
   
   
   





hi,List

What a terrible!
The disk space of Squid server has already been exhausted.
I want to zeroize cache files. I just run squid -z, no effect,

How to do?


**
Li Wei   ^-^ HAVE A GOOD DAY ^-^
JFTT
E-mail: [EMAIL PROTECTED]
**








Important:  This e-mail is intended for the use of the addressee and may contain 
information that is confidential, commercially valuable or subject to legal or 
parliamentary privilege.  If you are not the intended recipient you are notified that 
any review, re-transmission, disclosure, use or dissemination of this communication is 
strictly prohibited by several Commonwealth Acts of Parliament.  If you have received 
this communication in error please notify the sender immediately and delete all copies 
of this transmission together with any attachments.



[squid-users] Squid working with ssl between client and proxy server ?

2003-10-30 Thread Dany Pepin
 hello,

 there is anyway to run squid with all connection between client and
 proxy encrypted via ssl certificate ?

 i whant to encrypt all traffic between my client and the proxy event if
 the client browse only http site . . .
 not proxy accelerator mode, i need squid cache mode.

 hint, article or url are welcome.

 thx in advance.

 Dany



-- 
Ce message a été vérifié par MailScanner
pour des virus ou des polluriels et rien de
suspect n'a été trouvé.