Dear All,
Can anyone tell me how can we get the users original
ip instead of proxy ip on those application which shows last
connection.
--
Regards
Piyush Joshi
9415414376
On Thu, 2008-04-03 at 12:00 +0530, selvi nandu wrote:
> Thanks for the reply. I had submitted a bug report. I am just placing
> few lines from the debug log here for your reference.
>
> 2008/04/03 14:24:58.788| ACLChecklist::preCheck: 0x604dfdc8
> checking 'icap_access class_1 deny HS'
>
tor 2008-04-03 klockan 18:08 +1300 skrev Amos Jeffries:
> If squid is running on this same box I would recommend the REDIRECT
> target instead of DNAT. It's less work for the kernel.
Actually REDIRECT is more work than DNAT as it has to look up the
primary IP of the incoming interface and dynami
Hi,
You are right I am using port 8080. As I mentioned I have 2 machine the 1st
machine is my Firewall/NAT server wherein the iptables configuration already
stated that it should redirect port 80 to 8080
iptables -t nat -A PREROUTING -s 192.168.10.0/255.255.255.0 -p tcp -m tcp
--dport 80 -j
Ed Flecko wrote:
Hmmm. I don't have a /var/log/cron directory or anything that looks
like a log file relative to cron within the /var/log directory.
???
Ed
On Wed, Apr 2, 2008 at 9:42 AM, Trevor Akers <[EMAIL PROTECTED]> wrote:
For #3 /var/log/cron
-Original Message-
From: Ed Fle
Wennie V. Lagmay wrote:
Hi,
You are right I am using port 8080. As I mentioned I have 2 machine the 1st
machine is my Firewall/NAT server wherein the iptables configuration already
stated that it should redirect port 80 to 8080
iptables -t nat -A PREROUTING -s 192.168.10.0/255.255.255.0 -p
piyush joshi wrote:
Dear All,
Can anyone tell me how can we get the users original
ip instead of proxy ip on those application which shows last
connection.
Web requests that have gone through a proxy should contain an
X-Forwarded-For: header, or on some proxies a Client-IP: he
Hum, the last one's on debian.
They were 3.0 PRE-X, but don't remember the number.
> -Original Message-
> From: Amos Jeffries [mailto:[EMAIL PROTECTED]
> Sent: quinta-feira, 3 de Abril de 2008 6:08
> To: Jorge Bastos
> Cc: 'Henrik Nordstrom'; squid-users@squid-cache.org
> Subject: Re: [
> -Original Message-
> From: Amos Jeffries [mailto:[EMAIL PROTECTED]
> >
> > I already tryed to symlink both the openssl binary and the openssl
> > directory.
> > The error still remain the same.
> >
> > I tryed also to add openssl to $PATH.
> >
> > Any other suggestion?
>
> If t
Hello Alex,
Thanks for the quick reply and the fix..
Selvi
On 4/3/08, Alex Rousskov <[EMAIL PROTECTED]> wrote:
> On Thu, 2008-04-03 at 12:00 +0530, selvi nandu wrote:
>
> > Thanks for the reply. I had submitted a bug report. I am just placing
> > few lines from the debug log here for your refere
Hello,
One more relevant questions like this.
Is rep_mime_type if only for http_reply_access restrictions?
I only want the responses with the mime-types starting with text or
application or multipart to enter the icap server.
My squid config says:
acl mimeblockp rep_mime_type ^text
acl mimebl
> You are right I am using port 8080. As I mentioned I have 2 machine the 1st
> machine is my Firewall/NAT server wherein the iptables configuration already
> stated that it should redirect port 80 to 8080
Oh , Squid is Not running on this box. then, REDIRECT will not work.
What Your firewall c
when i try to access an ftp site i get the following error
The folder is readonly because the proxy server is not set up to allow
full access. To move, paste, rename or delete files you should use a
different proxy server.
Without proxy server i am able to view the ftp sites or add any files
when i try to access an ftp site i get the following error
The folder is readonly because the proxy server is not set up to allow
full access. To move, paste, rename or delete files you should use a
different proxy server.
Without proxy server i am able to view the ftp sites or add any files
Hi,
I need to limit 'upload' bandwidth on my network but for just one
particular application that uses 'x' port. I know it has to be done
using delay pools, but just don't know how to configure squid. Can
someone please tell me what must I do to achieve this? Do I need
transparent proxy f
On Wed, Apr 2, 2008 at 1:18 AM, Amos Jeffries <[EMAIL PROTECTED]> wrote:
> > Is there any way to increase SQUID_MAXFD from 8192 to 65536, so I can
> > try using the sugested number of url_rewriter processes?
> >
>
> Squid 2.6: --with-maxfd=65536
> Squid 3.x: --with-filedescriptors=65536
At the
Quoting "Wennie V. Lagmay" <[EMAIL PROTECTED]>:
Hi,
You are right I am using port 8080. As I mentioned I have 2 machine
the 1st machine is my Firewall/NAT server wherein the iptables
configuration already stated that it should redirect port 80 to 8080
iptables -t nat -A PREROUTING -s 19
The best thing to do this is with QoS
> -Original Message-
> From: Tvrtko Majstorović [mailto:[EMAIL PROTECTED]
> Sent: quinta-feira, 3 de Abril de 2008 13:08
> To: squid-users@squid-cache.org
> Subject: [squid-users] limiting upload bandwidth? pls
>
> Hi,
>
> I need to limit 'upload' b
We run a very basic squid setup on a windows 2003 box here. It's purely
used to route all web traffic over a cheap adsl line leaving the leased
line free for important stuff. The 'squid server' (win2k3) has the
gateway IP set to that of the adsl router meaning that when someone sets
the proxy in th
Reverse. Internet browsers hit squid and are redirected to our zope
servers for content.
Thanks for the info. I will start reading.
Allen
Henrik Nordstrom wrote:
ons 2008-04-02 klockan 08:22 -0400 skrev Allen Schmidt Sr.:
We currently are on SUSE and squid is the only thing on this box.
On Thu, 2008-04-03 at 16:22 +0530, selvi nandu wrote:
> I only want the responses with the mime-types starting with text or
> application or multipart to enter the icap server.
>
> My squid config says:
>
> acl mimeblockp rep_mime_type ^text
> acl mimeblockp rep_mime_type ^application
> acl mim
Hello,
Anybody doing transparent tproxy and bridging on squid 2.6 or 3.1 ?
Can you please share how to ? on centos
Or point me to some links !!
Thanks.
I tried adding the first route, but it didn't seem to make a difference.
The ethereal capture still shows my squid box sending window size of
1460? Do I need to restart networking to take effect, when I do this it
wipes out the route?
Also, the second command gives me an error and says "mss" is a
I use CentOS 4.4 and 5.1. But I recomend to you CentOS
4.4 because is a bit more easy for configure due to
the squid and samba versions included in this distro.
Be careful if you are using some intel motherboard and
how Linux see the hard disk. If there are SATA you
should see that as sdx(x=a b or
I never use squid on windows but I've use it a lot on
Linux. You can set the DNS server in two ways: a)
leaving commented the DNS setting in the squid.conf
and it will use the operating system DNS setting. b)
Setting DNS configuration into squid.conf file. The
second one works well in Linux.
Juliá
R Pradeepa wrote:
Please suggest me what ashould be enabled in squid proxy to allow write
permission to that ftp site
SQUID is not a full FTP proxy. It only implements FTP get to be able to
download files from FTP servers. If you want to proxy FTP, you need an
additional proxy server for tha
Squid have some limitations for manage ftp traffic. If
you whant use Web browser for non-anonymous ftp
access, you will find many troubles. Instead that I
recomend use a real FTP clients (cuteFTP, FTPzilla,
etc), combined with a FTP proxy (frox
http://frox.sourceforge.net/) it works very well. I
us
When I use Login=PASS in cache_peer option (i.e. pass the authentication
to the parent), there is no userid information in the access.log, is it
possible to show the userid in the local squid's access.log?
Dear All,
I want to only allow users using squid server to
download only those files from internet which are less than 5 MB in
size but do not know how to do this. Please help me so that i can add
this feature in my squid server.
--
Regards
Piyush Joshi
9415414376
Hi,
I want to speedup the websurfing of my LAN.
I have a squid running on the gateway, not transparent (people choose to
use the proxy or not.
I would like to know if there is a list of url patterns to "block" in
order to have a more fluent surfing.
For example, I already "blocked"
- googlesyn
30 matches
Mail list logo