Hi,
If your workstations are not behind NAT there is a
simple solution as below:
1- Block all local IP ranges to access the net as
default.
2- Change the error page so that the users which are
denied access to be redirected to login page.
3- Create a file which consists of allowed IP
addresses an
Dear Mr. Jones,
I think you are looking for an integration between
some different requirements and integration is somehow
complicated. That is captive portal, caching/proxying
and user accounting.
Squid hasn't written with a vision to support all of
above requirement. Although they can be added
Hi,
I think you can use tproxy patch as as solution.
Regards,
- Original Message
From: Keith M. Richard <[EMAIL PROTECTED]>
To: squid-users@squid-cache.org
Sent: Thursday, March 27, 2008 1:03:34 AM
Subject: [squid-users] Forwarding client ip address
I am using squid 2.6 Stable18 as a R
Dear Roma,
If you want to authenticate users through a captive portal mechanism you should
think to IP Address as user identity. Although it is possible to implement a
cookie-based authentication but it is more complex and needs to detailed
explanation.
Regards,
- Original Message
Fr
This solution only works when there is a one-to-one
mapping between users and ip addresses but imagine
circumstances where all users have same ip addresses(
e.g. terminal server users).
The definite solution to this problem is
"cookie-based authentication" which is implemented by
some commercia
Hi list,
Does any one know if there is a patch similar to
BalaBit patches for transparent proxying
(http://www.balabit.com/downloads/tproxy/) to Freebsd
kernel?
Another question: Is it necessary such patches to be
implemented in kernel level? May it be possible to
implement it using packet captur
Typically in a regular expression dollar sign
indicates the end of line. In this case it means URLs
which ends with pattern ".exe". Ommiting the dollar
sign causes blocking of URLs which contain pattern
".exe" in the middle, e.g. "my.exercise.jpeg".
--- [EMAIL PROTECTED] wrote:
>
> The mime.con
Probably you have run squid with "-k debug" option
which causes squid to generate full log messages.
--- Askar <[EMAIL PROTECTED]> wrote:
> hi,
>
> I duno why but one of our cache server's "cache.log"
> is full of messages
> like this
>
> 2005/06/01 10:40:25| WARNING: Forwarding loop
> d
It is important to know which kinds of reports and
analysis do you need? Do you want to monitor squid
itself or users activities? As far as I know each of
this tools covers some portions of needs and there is
not an integrated tool for log analysis, reporting and
some sorts of monitoring.
However
Yes, It has a nice web interface with many features.
--- [EMAIL PROTECTED] wrote:
> Thank you for the quick response.
>
> I'm interested in monitoring all aspects of a user's
> activities.
>
> A web interface would also be preferable since
> management may want to have direct access to this
>
What do you mean exactly? If you are looking for a web
based configuration for squid, you can use squid
webmin module.
--- ashkan almaspour <[EMAIL PROTECTED]>
wrote:
> i want configure squid based on web base.
> it is possible ?please help me.
>
Hi,
To answer your first question I suggest using squid
ICAP client. I think using ICAP can lead to better
performance.
--- Maxime Woznicki <[EMAIL PROTECTED]>
wrote:
> Hello,
> I'm trying to set up my own gateway using OpenBSD,
> Pf (filtering + QoS)
> and Squid.
>
> I have several problems :
It is part of Apache distribution. If you have
installed Apache before, you can do a locate to find
htpasswd. It usually resides beside apache
executables.
If you don't want to install apache you can download
and install htpasswd separately, for example from
here: http://www.squid-cache.org/htpa
Simply you can use top command. In addition there are
a number of ports in ports collection, mostly in
sysutils directory, which can provide you useful
information about system status.
--- Carstea Catalin <[EMAIL PROTECTED]> wrote:
> I run squid on my freebsd box and i need to know the
> free me
I recommend using ICAP (Ineternet Content Adaption
Protocol), a lightweight protocl to pass http message
to ICAP servers for modification or adaption. For more
information refer to ICAP RFC.
Today, It is the preferred approach in commercial
products. However, open source implementations are in
e
Hi,
You can simply make use of alias. For example to open
your squid.conf file with vim you can define an alias
in your bash as follow:
alias edit-squid="vim /path/to/squid.conf"
then by enetring edit-squid in command line you can
edit your squid.conf from any path. To make this alias
permanet p
Hi,
You should search for "reverse proxying".
--- Jeremy Pettet <[EMAIL PROTECTED]> wrote:
> hello,
>
> I think this question it too simple because I have
> not been able to
> find a definitive answer.
>
> I want to speed up a php-based web site and I was
> thinking of having a
> single mach
hi,
There is an external ACL helper in squid source tree
named ip_user which allows to restrict users to IP
addresses.
--- Varun <[EMAIL PROTECTED]> wrote:
> Hello,
> Can I combine ACL rules for IP based
> and NCSA auth together and bind them
> together ?
>
> Thanks
>
> Varun
>
_
Hi,
- Have you enabled delay pools during build of your
squid?
- As you may know you, lines which begin with hash
mark are not parsed by squid. To activate a
configuration you should remove hash marks.
Regards,
--- dharam paul <[EMAIL PROTECTED]> wrote:
> I write my delay pools like this afte
Hi,
How do you expect the browser to send authentication
information without user intervention? sending
authentication information automatically, contradicts
with authentication concept.
Maybe you look for an authentication mechanism like
web login?
Regards,
--- Rachel <[EMAIL PROTECTED]> w
Hi,
How do you expect the browser to send authentication
information without user intervention? sending
authentication information automatically, contradicts
with authentication concept.
Maybe you look for an authentication mechanism like
web login?
Regards,
--- Rachel <[EMAIL PROTECTED]> w
Dear Nima,
Which version of SARG do you use? Upgrade your SARG
to latest version. Some older versions have such bug.
Regards,
--- nima sadeghian <[EMAIL PROTECTED]> wrote:
> the cpu is 3.0 and free hard space is about 100GB.
> very strange. I
> used it in GNOME. could graphical interface eff
22 matches
Mail list logo