Re: [squid-users] cache_peer_access with acl_uses_indirect_client

2007-09-14 Thread Muhammad Tayseer Alquoatli
On 9/13/07, Henrik Nordström <[EMAIL PROTECTED]> wrote:
> tor 2007-09-13 klockan 16:58 +0300 skrev Muhammad Tayseer Alquoatli:
>
> > thanks, but upgrading to 2.6 the latest version didn't help
> > any other ideas ?
>
> File a bug report, with details of your configuration and the expected
> result...

Bugzilla – Bug 2082 Submitted

Best Regards,

>
> Regards
> Henrik
>
>


-- 
Muhammad Tayseer Alquoatli


[squid-users] Composite ACL

2007-09-14 Thread Arun Shrimali
Dear All,
I am new to Linux, but I have successfuly loaded Squid 2.6.STABLE 4 on Fedora 6
I am using NCSA authentication, chpasswd and sarg for reporting.

I want Squid to

1. Use NCSA authentication. (working fine)
2. Restrict users to download files with specific extentions (working fine)
3. Allow user 'xyz' to view our organisation site only ' www.xyz.co.in'
(not working - xyz is surfing all the other sites also. How to
restrict to one site only??)
4. Restrict other users to xxrn site (working fine)
5. Restrict users to use messengers (yet to check)
6. Allow user 'abc' to even download and user messenger. (confuse how
to write acl?)

Key portion of squid conf is as follows:

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd
acl ncsa_users proxy_auth REQUIRED
acl user1 proxy_auth xyz
acl site dstdomain .xyz.co.in
acl reso src 172.16.251.0/255.255.255.0
acl restricted_files urlpath_regex -i ftp \.exe$ \.zip$ \.tar.gz$
\.gz$ \.rar$ \.mp3$ \.mp4$ \.avi$ \.mpeg$ \.mpg$ \.ram$ \.rm$ \.iso$
\.wav$ \.mov$ \.tar$ \.mdb$ \.dat$
acl msn url_regex -i gateway.dll
acl yahoo url_regex -i ^http://shttp.msg.yahoo.com
acl yahoo url_regex -i ^ http://pgq.yahoo.com
acl yahoo url_regex -i ^http://mtab.games.yahoo.com
acl yahoo url_regex -i ^ http://insider.msg.yahoo.com
acl yahoo url_regex -i ^ http://address.yahoo.com
acl yahoo url_regex -i ^http://insider.msg.yahoo.com/ycontent/?
acl yahoo url_regex -i ^http://us.il.yimg.com
acl porn url_regex "/etc/squid/xxrn.txt"
acl noporn url_regex "/etc/squid/noxxrn.txt"

http_access deny xxrn !noxxrn
http_access deny yahoo
http_access deny msn
http_access deny restricted_files
http_access allow ncsa_users
http_access allow user1 site
http_access allow reso

# And finally deny all other access to this proxy
http_access allow localhost
http_access deny all

can any body help me to edit my acl to get the desired output.

Regards

Arun Shrimali


[squid-users] squid and webpage auth

2007-09-14 Thread fname lname
Iam trying to figure out how to redirect all web traffic to squid then
have squid display and users auth page with requires the end users to
type in a password, per session.

Any suggestions?


[squid-users] Composit ACL

2007-09-14 Thread Arun Shrimali
Dear All,
I am new to Linux, but I have successfuly loaded Squid 2.6.STABLE 4 on Fedora 6
I am using NCSA authentication, chpasswd and sarg for reporting.

I want Squid to

1. Use NCSA authentication. (working fine)
2. Restrict users to download files with specific extentions (working fine)
3. Allow user 'xyz' to view our organisation site only ' www.xyz.co.in'
(not working - xyz is surfing all the other sites also. How to
restrict to one site only??)
4. Restrict other users to porn site (working fine)
5. Restrict users to use messengers (yet to check)
6. Allow user 'abc' to even download and user messenger. (confuse how
to write acl?)

Key portion of squid conf is as follows:

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd
acl ncsa_users proxy_auth REQUIRED
acl user1 proxy_auth xyz
acl site dstdomain .xyz.co.in
acl reso src 172.16.251.0/255.255.255.0
acl restricted_files urlpath_regex -i ftp \.exe$ \.zip$ \.tar.gz$
\.gz$ \.rar$ \.mp3$ \.mp4$ \.avi$ \.mpeg$ \.mpg$ \.ram$ \.rm$ \.iso$
\.wav$ \.mov$ \.tar$ \.mdb$ \.dat$
acl msn url_regex -i gateway.dll
acl yahoo url_regex -i ^http://shttp.msg.yahoo.com
acl yahoo url_regex -i ^ http://pgq.yahoo.com
acl yahoo url_regex -i ^http://mtab.games.yahoo.com
acl yahoo url_regex -i ^ http://insider.msg.yahoo.com
acl yahoo url_regex -i ^ http://address.yahoo.com
acl yahoo url_regex -i ^http://insider.msg.yahoo.com/ycontent/?
acl yahoo url_regex -i ^http://us.il.yimg.com
acl porn url_regex "/etc/squid/porn.txt"
acl noporn url_regex "/etc/squid/noporn.txt"

http_access deny porn !noporn
http_access deny yahoo
http_access deny msn
http_access deny restricted_files
http_access allow ncsa_users
http_access allow user1 site
http_access allow reso

# And finally deny all other access to this proxy
http_access allow localhost
http_access deny all

can any body help me to edit my acl to get the desired output.

Regards

Arun Shrimali


[squid-users] Confusing about login name in AD-proxy authentication?

2007-09-14 Thread chowalit.lab Chowalit Lab Linux
Dear All
  First of all I will explain about my system.
  I have authenticate proxy with account from windows 2003 server.
I use ntlm.
  On login pop-up, I must use "MYDOMAIN\username"  into login box.
 My question is --> How to configurate my system (both of windows
and squid) to support login name like "[EMAIL PROTECTED]"?

Thanks you
Chong


Re: [squid-users] Squid :: ICAP methods

2007-09-14 Thread Alex Rousskov
On Thu, 2007-09-13 at 16:35 +0530, Shailesh Mishra wrote:

> The squid congfiguration says "reqmod_precache and respmod_postcache is
> not yet implemented" , Any idea by when will this be implemented?

REQMOD pre-cache is actually supported. REQMOD post-cache and RESPMOD
post-cache are not. I will fix this configuration documentation bug in
Squid3.

Post-cache vectoring points will be supported when we find somebody who
needs those features enough to co-sponsor their development.

Alex.




Re: [squid-users] Bungled squid.conf due to cache_dir

2007-09-14 Thread Guido Serassio

Hi,

At 13.09 14/09/2007, Paul Cocker wrote:

I'm setting up SquidNT 2.6STABLE14 using a fresh config on a Windows
2003 server. I've located it in the folder D:\Program Files\squid,
mainly because there are several other programs installed on the server
and it keep the folder list clean, they're all within this directory.

However, when I try to start the service I get the following:

FATAL: Bungled squid.conf line 1072: cache_dir ufs "D:/Program
Files/squid/var/cache" 2000 16 256

Now, I assume this is due to spaces in the directory path which I
thought the quotes would resolve. It occurred to me that perhaps the
options needed to be contained within the path, so I moved the closing
quote after the 256, though the error remained unchanged (barring
placement of the quote mark), but then this wouldn't work anyway unless
squid could read my mind regarding the chance of numbers being in a
directory name, or didn't accept them there at all.

I also considered the possibility that cachemgr.conf was to blame,
seeing as it simply had localhost in there, and I am using port 3129 for
this build of squid as an older, 2.5 version is running on 3128, though
so long as squid responds, regardless of version, it shouldn't matter
anyway should it? I tried changing localhost to localhost:3129 just in
case, but it made no difference.

Can this be made to work in a configuration where there are spaces in
the directory names?


Looking into Windows support section of Release Notes 
http://www.squid-cache.org/Versions/v2/2.6/RELEASENOTES.html#s6, 
about the Compatibility Notes, you can read:

"Paths with spaces (like 'C:\Programs Files\Squid) are NOT supported by Squid"
So the answer to your question is no.

In Theory this could work using Windows short path names, but this 
not a reliable solution because short path names generation is volume 
dependent.


Regards

Guido



-

Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1   10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135  Fax. : +39.011.9781115
Email: [EMAIL PROTECTED]
WWW: http://www.acmeconsulting.it/



Re: [squid-users] Password authentication: How to log _only failures_ to access_log?

2007-09-14 Thread Ralf G. R. Bergs
Talking to myself again... ;-)

On 14.09.2007 21:27, Ralf G. R. Bergs wrote:
> I'm providing Squid for my users to be able to surf the net
> "anonymously." Therefore I'm not interested in logging my users'
> requests (to access.log), but only those trying to access my Squid
> without authorization (i. e. those trying to abuse it.)
> 
> How do I configure Squid to behave this way? I simply can't figure it
> out, even tho I read the FAQ and searched thru this ML's archive.

This is probably a bit unclear -- what I want is that requests that
don't send the correct password will be logged, and *only* those requests.

Thanks,

Ralf



[squid-users] Password authentication: How to log _only failures_ to access_log?

2007-09-14 Thread Ralf G. R. Bergs
Hi there,

I'm providing Squid for my users to be able to surf the net
"anonymously." Therefore I'm not interested in logging my users'
requests (to access.log), but only those trying to access my Squid
without authorization (i. e. those trying to abuse it.)

How do I configure Squid to behave this way? I simply can't figure it
out, even tho I read the FAQ and searched thru this ML's archive.

Thanks,

Ralf


[squid-users] TomTom Home & ACLs

2007-09-14 Thread Tom Vivian
I'm new to Squid and so far have SquidNT 2.5 successfully running on Windows
2003 Server.
The problem is that I use TomTom on my phone which uses software on my PC to
get updates from the TomTom website. When I try to login with the software I
get this entry in the access log.

1189790207.772  0 192.168.2.100 TCP_DENIED/407 1723 POST
http://sweet.tomtom.com/cens/sweet/sd/ - NONE/- text/html

The link is clearly a link to a file. How can I configure an ACL to allow
this?

Many thanks,

Tom.

-
 Atomix Solutions - making technology simple
-
 Broadband / Networks / Email / Maintenance

 www:   http://www.atomixsolutions.net
 tel:   +44 (0)7980 560118
+44 (0)1765 605646
 fax:   +44 (0)1765 605646
 skype: tom_galphay
 msn:   [EMAIL PROTECTED]
=

IMPORTANT: The contents of this email, and any attachments, are CONFIDENTIAL
and intended only for the person(s) to whom they are addressed.  If you have
received the email in error please notify the sender immediately and delete
it from your computer system. Do not copy or distribute it or disclose its
contents to any person. Unless otherwise stated, the views and opinions
expressed in this email are personal to the sender and do not represent the
official view of the company. 

-- 
I am using the free version of SPAMfighter for private users.
It has removed 1714 spam emails to date.
Paying users do not have this message in their emails.
Get the free SPAMfighter here: http://www.spamfighter.com/len





RE: [squid-users] ACL problems for a newbie.

2007-09-14 Thread Tom Vivian
OK I found the problem, it is to do with the order in which the ACLs are
listed. See this post
http://cvs.squid-cache.org/mail-archive/squid-users/200501/0500.html

Thanks for your help.

Tom.

-Original Message-
From: Indunil Jayasooriya [mailto:[EMAIL PROTECTED] 
Sent: 14 September 2007 10:04
To: Tom Vivian
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] ACL problems for a newbie.

> On 9/14/07, Tom Vivian <[EMAIL PROTECTED]> wrote:
>
> >  SquidNT 2.5
> > ntlm auth
> > Windows Server 2003
> >
> > Everything is nearly working. The authentication against AD is fine, 
> > I can see the domain name\username in the logs etc. However I can't 
> > get Windows update to work, nor can my TomTom Home software logon to the
TomTom site.
> >
> > Below is a copy of the logs entries for each case and my config:
> >
> > acl WindowsUpdate dstdomain -i c:/squid/etc/msupdate.txt no_cache 
> > deny WindowsUpdate http_access allow WindowsUpdate
> >
> > msupdate.txt  contains:
> >
> > windowsupdate.microsoft.com
> > update.microsoft.com
> > activex.microsoft.com
> > download.windowsupdate.com
> > www.download.windowsupdate.com
> > codecs.microsoft.com
> > stats.updates.microsoft.com
> > c.microsoft.com

 pls add a DOT (.) in front of all above sites as below.

 NEW msupdate.txt contains:

 .windowsupdate.microsoft.com
 .update.microsoft.com
 .activex.microsoft.com
 .download.windowsupdate.com
 .download.windowsupdate.com
 .codecs.microsoft.com
 .stats.updates.microsoft.com
 .c.microsoft.com

 NOW, you may try.



--
Thank you
Indunil Jayasooriya


-- 
I am using the free version of SPAMfighter for private users.
It has removed 1714 spam emails to date.
Paying users do not have this message in their emails.
Get the free SPAMfighter here: http://www.spamfighter.com/len





RE: [squid-users] ACL problems for a newbie.

2007-09-14 Thread Tom Vivian
-Original Message-
From: Indunil Jayasooriya [mailto:[EMAIL PROTECTED] 
Sent: 14 September 2007 10:04
To: Tom Vivian
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] ACL problems for a newbie.

> On 9/14/07, Tom Vivian <[EMAIL PROTECTED]> wrote:
>
> >  SquidNT 2.5
> > ntlm auth
> > Windows Server 2003
> >
> > Everything is nearly working. The authentication against AD is fine, 
> > I can see the domain name\username in the logs etc. However I can't 
> > get Windows update to work, nor can my TomTom Home software logon to the
TomTom site.
> >
> > Below is a copy of the logs entries for each case and my config:
> >
> > acl WindowsUpdate dstdomain -i c:/squid/etc/msupdate.txt no_cache 
> > deny WindowsUpdate http_access allow WindowsUpdate
> >
> > msupdate.txt  contains:
> >
> > windowsupdate.microsoft.com
> > update.microsoft.com
> > activex.microsoft.com
> > download.windowsupdate.com
> > www.download.windowsupdate.com
> > codecs.microsoft.com
> > stats.updates.microsoft.com
> > c.microsoft.com

 pls add a DOT (.) in front of all above sites as below.

 NEW msupdate.txt contains:

 .windowsupdate.microsoft.com
 .update.microsoft.com
 .activex.microsoft.com
 .download.windowsupdate.com
 .download.windowsupdate.com
 .codecs.microsoft.com
 .stats.updates.microsoft.com
 .c.microsoft.com

 NOW, you may try.



--
Thank you
Indunil Jayasooriya

I have added the DOT as you suggested but still it doesn't work??

-- 
I am using the free version of SPAMfighter for private users.
It has removed 1714 spam emails to date.
Paying users do not have this message in their emails.
Get the free SPAMfighter here: http://www.spamfighter.com/len





Re: [squid-users] Bungled squid.conf due to cache_dir

2007-09-14 Thread Neil A. Hillard
Hi,

Amos Jeffries wrote:
> Paul Cocker wrote:
>> I'm setting up SquidNT 2.6STABLE14 using a fresh config on a Windows
>> 2003 server. I've located it in the folder D:\Program Files\squid,
>> mainly because there are several other programs installed on the server
>> and it keep the folder list clean, they're all within this directory.
>>
>> However, when I try to start the service I get the following:
>>
>> FATAL: Bungled squid.conf line 1072: cache_dir ufs "D:/Program
>> Files/squid/var/cache" 2000 16 256
>>
>> Now, I assume this is due to spaces in the directory path which I
>> thought the quotes would resolve.
> 
> You probably assume correct.
> 
>>
>> Can this be made to work in a configuration where there are spaces in
>> the directory names?
>>
> 
> You could, with a lot of code. Squid uses strtok([whitespace]) to parse
> each line, that is (sadly) buried into every module that has a
> squid.conf item.
> 
> So quotes don't generally mean a thing to squid, nor do [\ ]'s.
> 
> I'm not to up on the parsing in windows, but it might be possible in
> your case to use the %...% win32 default path variables. It would be
> easier to add code for those at certain places than change the parser to
> cope with spaces.

You should be able to use the DOS format name - d:\progra~1\...

Never tried it but you may have success.

HTH,


Neil.

-- 
Neil Hillard[EMAIL PROTECTED]
AgustaWestland  http://www.whl.co.uk/

Disclaimer: This message does not necessarily reflect the
views of Westland Helicopters Ltd.


Re: [squid-users] Bungled squid.conf due to cache_dir

2007-09-14 Thread Amos Jeffries

Paul Cocker wrote:

I'm setting up SquidNT 2.6STABLE14 using a fresh config on a Windows
2003 server. I've located it in the folder D:\Program Files\squid,
mainly because there are several other programs installed on the server
and it keep the folder list clean, they're all within this directory.

However, when I try to start the service I get the following:

FATAL: Bungled squid.conf line 1072: cache_dir ufs "D:/Program
Files/squid/var/cache" 2000 16 256

Now, I assume this is due to spaces in the directory path which I
thought the quotes would resolve.


You probably assume correct.



Can this be made to work in a configuration where there are spaces in
the directory names?



You could, with a lot of code. Squid uses strtok([whitespace]) to parse 
each line, that is (sadly) buried into every module that has a 
squid.conf item.


So quotes don't generally mean a thing to squid, nor do [\ ]'s.

I'm not to up on the parsing in windows, but it might be possible in 
your case to use the %...% win32 default path variables. It would be 
easier to add code for those at certain places than change the parser to 
cope with spaces.


Amos


Re: [squid-users] About option -d

2007-09-14 Thread Amos Jeffries

Anderson Donda wrote:

Hi list,

This is my first message here and i have a sample question..

Anybody knows how the option "-d  " of squid work?.

For example: I use squid -d 10, and this show me everything the squid 
executing, but if I execute squid -d 1, this show me same thing.


So, How squid work with each level?


The level is a single digit 0 (off) to 9(full).

What gets displayed is a mash of developer choices and debug needs going 
back years. I've yet to find a specific definition for any of it.



Amos


[squid-users] Bungled squid.conf due to cache_dir

2007-09-14 Thread Paul Cocker
I'm setting up SquidNT 2.6STABLE14 using a fresh config on a Windows
2003 server. I've located it in the folder D:\Program Files\squid,
mainly because there are several other programs installed on the server
and it keep the folder list clean, they're all within this directory.

However, when I try to start the service I get the following:

FATAL: Bungled squid.conf line 1072: cache_dir ufs "D:/Program
Files/squid/var/cache" 2000 16 256

Now, I assume this is due to spaces in the directory path which I
thought the quotes would resolve. It occurred to me that perhaps the
options needed to be contained within the path, so I moved the closing
quote after the 256, though the error remained unchanged (barring
placement of the quote mark), but then this wouldn't work anyway unless
squid could read my mind regarding the chance of numbers being in a
directory name, or didn't accept them there at all.

I also considered the possibility that cachemgr.conf was to blame,
seeing as it simply had localhost in there, and I am using port 3129 for
this build of squid as an older, 2.5 version is running on 3128, though
so long as squid responds, regardless of version, it shouldn't matter
anyway should it? I tried changing localhost to localhost:3129 just in
case, but it made no difference.

Can this be made to work in a configuration where there are spaces in
the directory names?

Many thanks,

Paul Cocker
IT Systems Administrator
IT Security Officer

01628 81(6647)

TNT Post (Doordrop Media) Ltd.
1 Globeside Business Park
Fieldhouse Lane
Marlow
Bucks
SL7 1HY





TNT Post is the trading name for TNT Post UK Ltd (company number: 04417047), 
TNT Post (Doordrop Media) Ltd (00613278), TNT Post Scotland Ltd (05695897),TNT 
Post North Ltd (05701709) and TNT Post South West Ltd (05983401). Emma's Diary 
and Lifecycle are trading names for Lifecycle Marketing (Mother and Baby) Ltd 
(02556692). All companies are registered in England and Wales; registered 
address: 1 Globeside Business Park, Fieldhouse Lane, Marlow, Buckinghamshire, 
SL7 1HY.



Re: [squid-users] ACL problems for a newbie.

2007-09-14 Thread Indunil Jayasooriya
> On 9/14/07, Tom Vivian <[EMAIL PROTECTED]> wrote:
>
> >  SquidNT 2.5
> > ntlm auth
> > Windows Server 2003
> >
> > Everything is nearly working. The authentication against AD is fine, I can
> > see the domain name\username in the logs etc. However I can't get Windows
> > update to work, nor can my TomTom Home software logon to the TomTom site.
> >
> > Below is a copy of the logs entries for each case and my config:
> >
> > acl WindowsUpdate dstdomain -i c:/squid/etc/msupdate.txt
> > no_cache deny WindowsUpdate
> > http_access allow WindowsUpdate
> >
> > msupdate.txt  contains:
> >
> > windowsupdate.microsoft.com
> > update.microsoft.com
> > activex.microsoft.com
> > download.windowsupdate.com
> > www.download.windowsupdate.com
> > codecs.microsoft.com
> > stats.updates.microsoft.com
> > c.microsoft.com

 pls add a DOT (.) in front of all above sites as below.

 NEW msupdate.txt contains:

 .windowsupdate.microsoft.com
 .update.microsoft.com
 .activex.microsoft.com
 .download.windowsupdate.com
 .download.windowsupdate.com
 .codecs.microsoft.com
 .stats.updates.microsoft.com
 .c.microsoft.com

 NOW, you may try.



-- 
Thank you
Indunil Jayasooriya


Re: [squid-users] Re: How to enable these FEATURES in SQUID

2007-09-14 Thread Adrian Chadd
On Fri, Sep 14, 2007, Indunil Jayasooriya wrote:

> mysql> show databases;
> +--+
> | Database |
> +--+
> | mysql|
> | netmrg   |
> | squid|
> | test |
> +--+
> 4 rows in set (0.02 se
> 
> What are the things I will have to do beyond this point?

You'll need to create a database with usernames, passwords and expiry 
information.

You'll then need to write a basic authentication helper for Squid which
reads the user/pass given, checks it against the table and returns OK or ERR.

Once you've got that (and its easy to test - you can run the helper yourself
at the command line and just enter userpassword at each line,
obviously substituting the real keys for the  and  bits. :)
you can configure up Squid to use it.

Google for "writing squid basic authentication helper"; perhaps start
here:

http://wiki.squid-cache.org/ProgrammingGuide/AuthenticationFramework

> > (But in an amusing twist of fate, thats one of the requirements for my
> > commercial squid appliance in its first round, so I've written it. ;)
> 
> May I see what you have written?

Not yet; its going in a commercial box, remember? :)




Adrian

-- 
- Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -
- $25/pm entry-level bandwidth-capped VPSes available in WA -


Re: [squid-users] Re: How to enable these FEATURES in SQUID

2007-09-14 Thread Indunil Jayasooriya
On 9/3/07, Adrian Chadd <[EMAIL PROTECTED]> wrote:
> Its not really a function of the Squid software; its a function of whatever
> authentication backend you decide to use.
>
> You could quite happily script up a bunch of stuff to store 
> usernames/passwords/
> expiry information in an SQL table and use a basic authentication helper to
> authenticate against that.

I would like to go with mysql. I am new to these. So could you pls
tell  me how to start it.

On the box running squid 2.5, I have installed mysql RPM and started
the service.
and got mysql promt and created a database called squid.

psl see below;

mysql> create database squid;
Query OK, 1 row affected (0.03 sec)

mysql> show databases;
+--+
| Database |
+--+
| mysql|
| netmrg   |
| squid|
| test |
+--+
4 rows in set (0.02 se

What are the things I will have to do beyond this point?

How use a basic authentication helper to authenticate against that ?
I think I will have to add something to squid.conf file. Am I right?


> Squid doesn't come with all of that by default.
>
> (But in an amusing twist of fate, thats one of the requirements for my
> commercial squid appliance in its first round, so I've written it. ;)

May I see what you have written?





> On Mon, Sep 03, 2007, Indunil Jayasooriya wrote:
> > > Hi,
> > >
> > > I want to enable below fetures in SQUID.
> > >
> > > features are,
> > >
> > > when users access Internet with nsca_auth featue, They are asked to
> > > type username and password.
> > >
> > >  Can I set a life time (5 days or 2 weeks like that) to that password
> > > .when that time period expires, Users SHOULD change their passwords.
> > >
> > > password should have below fetures.
> > >
> > > to add the new passwrd, old password should be entered.
> > > it should contain both numbers and letters.
> > > minimum lenth of the password should be 8 characters.
> > >
> > >  Finally,
> > >
> > > I need a Password change log too.
> > >
> > >
> > > YOUR COMMENTS?
> > >
> >
> >
> > --
> > Thank you
> > Indunil Jayasooriya
>
> --
> - Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support 
> -
> - $25/pm entry-level bandwidth-capped VPSes available in WA -
>



-- 
Thank you
Indunil Jayasooriya


[squid-users] ACL problems for a newbie.

2007-09-14 Thread Tom Vivian
SquidNT 2.5
ntlm auth
Windows Server 2003

Everything is nearly working. The authentication against AD is fine, I can
see the domain name\username in the logs etc. However I can't get Windows
update to work, nor can my TomTom Home software logon to the TomTom site.

Below is a copy of the logs entries for each case and my config:

acl WindowsUpdate dstdomain -i c:/squid/etc/msupdate.txt  
no_cache deny WindowsUpdate  
http_access allow WindowsUpdate

msupdate.txt contains:

windowsupdate.microsoft.com 
update.microsoft.com 
activex.microsoft.com 
download.windowsupdate.com 
www.download.windowsupdate.com 
codecs.microsoft.com 
stats.updates.microsoft.com 
c.microsoft.com

Log entry:

1189755514.809  0 192.168.2.100 TCP_DENIED/407 1723 POST
http://sweet.tomtom.com/cens/sweet/sd/ - NONE/- text/html
1189755522.542 30 192.168.2.100 TCP_DENIED/407 1798 GET
http://www.update.microsoft.com/microsoftupdate/v6/splash.aspx? - NONE/-
text/html
1189755522.562 20 192.168.2.100 TCP_DENIED/407 1864 GET
http://www.update.microsoft.com/microsoftupdate/v6/splash.aspx? - NONE/-
text/html
1189755523.013  0 192.168.2.100 TCP_DENIED/407 1816 GET
http://www.update.microsoft.com/microsoftupdate/v6/shared/js/tgar.js? -
NONE/- text/html
1189755523.043  0 192.168.2.100 TCP_DENIED/407 1882 GET
http://www.update.microsoft.com/microsoftupdate/v6/shared/js/tgar.js? -
NONE/- text/html
1189755523.183621 192.168.2.100 TCP_MISS/200 3493 GET
http://www.update.microsoft.com/microsoftupdate/v6/splash.aspx? home\tom
DIRECT/207.46.211.119 text/html
1189755523.484431 192.168.2.100 TCP_MISS/200 2563 GET
http://www.update.microsoft.com/microsoftupdate/v6/shared/js/tgar.js?
home\tom DIRECT/207.46.211.119 application/x-javascript
1189755524.095601 192.168.2.100 TCP_MISS/200 19663 GET
http://www.update.microsoft.com/microsoftupdate/v6/shared/js/content.js?
home\tom DIRECT/207.46.211.119 application/x-javascript
1189755524.435110 192.168.2.100 TCP_MISS/200 324 HEAD
http://download.windowsupdate.com/v7/windowsupdate/redir/wuredir.cab?
home\tom DIRECT/209.84.12.126 application/octet-stream
1189755524.466  0 192.168.2.100 TCP_DENIED/407 344 HEAD
http://www.update.microsoft.com/v7/windowsupdate/selfupdate/wuident.cab? -
NONE/- text/html
1189755524.486 20 192.168.2.100 TCP_DENIED/407 410 HEAD
http://www.update.microsoft.com/v7/windowsupdate/selfupdate/wuident.cab? -
NONE/- text/html
1189755524.656481 192.168.2.100 TCP_MISS/200 466 GET
http://c.microsoft.com/wupixel/wt_pixel.aspx? home\tom DIRECT/207.46.211.252
image/gif
1189755584.047  0 192.168.2.100 TCP_DENIED/407 1828 GET
http://www.update.microsoft.com/microsoftupdate/v6/errorinformation.aspx? -
NONE/- text/html
1189755584.047  0 192.168.2.100 TCP_DENIED/407 1894 GET
http://www.update.microsoft.com/microsoftupdate/v6/errorinformation.aspx? -
NONE/- text/html
1189755584.087  0 192.168.2.100 TCP_DENIED/407 1726 GET
http://c.microsoft.com/trans_pixel.asp? - NONE/- text/html
1189755584.107 20 192.168.2.100 TCP_DENIED/407 1792 GET
http://c.microsoft.com/trans_pixel.asp? - NONE/- text/html
1189755584.127  0 192.168.2.100 TCP_DENIED/407 1726 GET
http://c.microsoft.com/trans_pixel.asp? - NONE/- text/html
1189755584.137  0 192.168.2.100 TCP_DENIED/407 1792 GET
http://c.microsoft.com/trans_pixel.asp? - NONE/- text/html
1189755584.348241 192.168.2.100 TCP_MISS/000 0 GET
http://c.microsoft.com/trans_pixel.asp? home\tom DIRECT/207.46.211.252 -
1189755584.358  0 192.168.2.100 TCP_DENIED/407 1816 GET
http://www.update.microsoft.com/microsoftupdate/v6/shared/js/tgar.js? -
NONE/- text/html
1189755584.378 20 192.168.2.100 TCP_DENIED/407 1882 GET
http://www.update.microsoft.com/microsoftupdate/v6/shared/js/tgar.js? -
NONE/- text/html
1189755584.578441 192.168.2.100 TCP_MISS/200 466 GET
http://c.microsoft.com/trans_pixel.asp? home\tom DIRECT/207.46.211.252
image/gif
1189755584.628250 192.168.2.100 TCP_MISS/200 2563 GET
http://www.update.microsoft.com/microsoftupdate/v6/shared/js/tgar.js?
home\tom DIRECT/207.46.211.119 application/x-javascript
1189755584.648591 192.168.2.100 TCP_MISS/200 9440 GET
http://www.update.microsoft.com/microsoftupdate/v6/errorinformation.aspx?
home\tom DIRECT/207.46.211.119 text/html
1189755585.039411 192.168.2.100 TCP_MISS/200 19663 GET
http://www.update.microsoft.com/microsoftupdate/v6/shared/js/content.js?
home\tom DIRECT/207.46.211.119 application/x-javascript
1189755586.031932 192.168.2.100 TCP_MISS/200 466 GET
http://c.microsoft.com/wupixel/wt_pixel.aspx? home\tom DIRECT/207.46.211.252
image/gif
1189755586.441   1312 192.168.2.100 TCP_MISS/500 3310 GET
http://stats.update.microsoft.com/v5sitereporting/report.aspx? home\tom
DIRECT/207.46.211.250 text/html
1189755586.692551 192.168.2.100 TCP_MISS/200 466 GET
http://c.microsoft.com/trans_pixel.asp? home\tom DIRECT/207.46.211.252
image/gif

Tom.

-
 Atomix Solutions - making technology simple