Re: [squid-users] How to limit user access

2008-12-14 Thread Nyamul Hassan
You'll have to use delay pools.  I've sent a post a few days back on 
limiting special sites like RapidShare, where users can download upto a 
certain size after which the download is limited.


Regards
HASSAN


- Original Message - 
From: "░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░" 

To: "andre wang" 
Cc: 
Sent: Monday, December 15, 2008 13:29
Subject: Re: [squid-users] How to limit user access



hmmm
that is blocking
i have already use that
i mean
to limit access not killing access

sorry my mistake if you got understanding :(

On Mon, Dec 15, 2008 at 2:15 PM, andre wang  wrote:

Maybe something like these:

acl YOUTUBE referer_regex -i youtube.com
acl CNN referer_regex -i cnn.com
acl MYALLOW src 192.168.1.1/32 192.168.1.2/32

http_access allow YOUTUBE MYALLOW
http_access deny YOUTUBE
http_access allow CNN MYALLOW
http_access deny CNN


On Mon, Dec 15, 2008 at 2:40 PM, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
 wrote:

sorry im newbie :(
can you give me the sample ?

On Mon, Dec 15, 2008 at 1:35 PM, andre wang  
wrote:

Tow ACLs : referer_regex and src may help you get it.


On Mon, Dec 15, 2008 at 2:08 PM, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
 wrote:

hello
how to limit some website based on url and/or ext ?
i mean e.g.

i only want to limit access from youtube.com and cnn.com only for user
192.168.1.1 and 192.168.1.2 but not limit for other user
but not other website

have any idea ?
if using delaypoll
can you put complete syntax for delaypolls ?
since i have a little bit difficulty to learn delaypoll

maybe can be use other command except delaypoll ?

--







--
-=-=-=-=
http://amyhost.com ( webhosting dengan budget terbatas )
Hot News !!! :
Pengin punya Layanan SMS PREMIUM ?
Contact me ASAP. dapatkan Share revenue MAXIMAL tanpa syarat traffic...







--
-=-=-=-=
http://amyhost.com ( webhosting dengan budget terbatas )
Hot News !!! :
Pengin punya Layanan SMS PREMIUM ?
Contact me ASAP. dapatkan Share revenue MAXIMAL tanpa syarat traffic...





Re: [squid-users] How to limit user access

2008-12-14 Thread ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
hmmm
that is blocking
i have already use that
i mean
to limit access not killing access

sorry my mistake if you got understanding :(

On Mon, Dec 15, 2008 at 2:15 PM, andre wang  wrote:
> Maybe something like these:
>
> acl YOUTUBE referer_regex -i youtube.com
> acl CNN referer_regex -i cnn.com
> acl MYALLOW src 192.168.1.1/32 192.168.1.2/32
>
> http_access allow YOUTUBE MYALLOW
> http_access deny YOUTUBE
> http_access allow CNN MYALLOW
> http_access deny CNN
>
>
> On Mon, Dec 15, 2008 at 2:40 PM, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
>  wrote:
>> sorry im newbie :(
>> can you give me the sample ?
>>
>> On Mon, Dec 15, 2008 at 1:35 PM, andre wang  wrote:
>>> Tow ACLs : referer_regex and src may help you get it.
>>>
>>>
>>> On Mon, Dec 15, 2008 at 2:08 PM, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
>>>  wrote:
 hello
 how to limit some website based on url and/or ext ?
 i mean e.g.

 i only want to limit access from youtube.com and cnn.com only for user
 192.168.1.1 and 192.168.1.2 but not limit for other user
 but not other website

 have any idea ?
 if using delaypoll
 can you put complete syntax for delaypolls ?
 since i have a little bit difficulty to learn delaypoll

 maybe can be use other command except delaypoll ?

 --

>>>
>>
>>
>>
>> --
>> -=-=-=-=
>> http://amyhost.com ( webhosting dengan budget terbatas )
>> Hot News !!! :
>> Pengin punya Layanan SMS PREMIUM ?
>> Contact me ASAP. dapatkan Share revenue MAXIMAL tanpa syarat traffic...
>>
>



-- 
-=-=-=-=
http://amyhost.com ( webhosting dengan budget terbatas )
Hot News !!! :
Pengin punya Layanan SMS PREMIUM ?
Contact me ASAP. dapatkan Share revenue MAXIMAL tanpa syarat traffic...


[squid-users] Experimental Squid 3.0.STABLE11-RC1 binary release for Windows

2008-12-14 Thread Guido Serassio


I'm pleased to announce the availability of an experimental Squid 
3.0.STABLE11-RC1 binary release for Windows.


The package is available here:
http://squid.acmeconsulting.it/download/squid-3.0.STABLE11-RC1-bin.zip

This package is totally unsupported by Acmeconsulting, and is 
provided as is for testing only purpose.

For any questions and for your feedbacks use the squid-users mailing list.

Due to the experimental nature of this release, please don't use it 
on production environment.


Any positive feedback will be welcome.

Regards

Guido Serassio



-

Guido Serassio - Squid Core Developer
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1   10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135  Fax. : +39.011.9781115
Email: guido.seras...@acmeconsulting.it
WWW: http://www.acmeconsulting.it/



Re: [squid-users] How to limit user access

2008-12-14 Thread ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
sorry im newbie :(
can you give me the sample ?

On Mon, Dec 15, 2008 at 1:35 PM, andre wang  wrote:
> Tow ACLs : referer_regex and src may help you get it.
>
>
> On Mon, Dec 15, 2008 at 2:08 PM, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
>  wrote:
>> hello
>> how to limit some website based on url and/or ext ?
>> i mean e.g.
>>
>> i only want to limit access from youtube.com and cnn.com only for user
>> 192.168.1.1 and 192.168.1.2 but not limit for other user
>> but not other website
>>
>> have any idea ?
>> if using delaypoll
>> can you put complete syntax for delaypolls ?
>> since i have a little bit difficulty to learn delaypoll
>>
>> maybe can be use other command except delaypoll ?
>>
>> --
>>
>



-- 
-=-=-=-=
http://amyhost.com ( webhosting dengan budget terbatas )
Hot News !!! :
Pengin punya Layanan SMS PREMIUM ?
Contact me ASAP. dapatkan Share revenue MAXIMAL tanpa syarat traffic...


Re: [squid-users] How to limit user access

2008-12-14 Thread andre wang
Tow ACLs : referer_regex and src may help you get it.


On Mon, Dec 15, 2008 at 2:08 PM, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
 wrote:
> hello
> how to limit some website based on url and/or ext ?
> i mean e.g.
>
> i only want to limit access from youtube.com and cnn.com only for user
> 192.168.1.1 and 192.168.1.2 but not limit for other user
> but not other website
>
> have any idea ?
> if using delaypoll
> can you put complete syntax for delaypolls ?
> since i have a little bit difficulty to learn delaypoll
>
> maybe can be use other command except delaypoll ?
>
> --
>


[squid-users] How to limit user access

2008-12-14 Thread ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
hello
how to limit some website based on url and/or ext ?
i mean e.g.

i only want to limit access from youtube.com and cnn.com only for user
192.168.1.1 and 192.168.1.2 but not limit for other user
but not other website

have any idea ?
if using delaypoll
can you put complete syntax for delaypolls ?
since i have a little bit difficulty to learn delaypoll

maybe can be use other command except delaypoll ?

--


Re: [squid-users] Invalid Requests in access.log

2008-12-14 Thread Amos Jeffries

w...@msdrd.com wrote:

Hello.

I was looking in my access.log file, again, and found other wierd stuff,
again, the log is full of stuff like these:

2008/12/14 22:40:25| clientProcessRequest: Invalid Request
2008/12/14 22:40:32| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|10117]
'
2008/12/14 22:40:32| clientProcessRequest: Invalid Request
2008/12/14 22:40:39| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|02519]
'
2008/12/14 22:40:39| clientProcessRequest: Invalid Request
2008/12/14 22:40:46| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|86755]
'
2008/12/14 22:40:46| clientProcessRequest: Invalid Request
2008/12/14 22:40:54| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|43887]
'
2008/12/14 22:40:54| clientProcessRequest: Invalid Request
2008/12/14 22:41:01| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|34635]
'
2008/12/14 22:41:01| clientProcessRequest: Invalid Request
2008/12/14 22:41:08| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|84846]
'
2008/12/14 22:41:08| clientProcessRequest: Invalid Request
2008/12/14 22:41:15| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|13599]
'
2008/12/14 22:41:15| clientProcessRequest: Invalid Request
2008/12/14 22:41:22| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|60428]
'
2008/12/14 22:41:22| clientProcessRequest: Invalid Request
2008/12/14 22:41:29| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|99030]
'
2008/12/14 22:41:29| clientProcessRequest: Invalid Request
2008/12/14 22:41:36| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|02937]
'
2008/12/14 22:41:36| clientProcessRequest: Invalid Request
2008/12/14 22:41:43| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|50998]
'
2008/12/14 22:41:43| clientProcessRequest: Invalid Request


What is all that? Is someone trying to hack the system or what?


Someone is trying to use SIP or similar software through your proxy.

A transparently intercepting proxy may expect to see that nowdays as 
more non-HTTP software are using the only unblocked port available.


If you don't use interception, then the client may be broken or your 
squid may need to use extension_methods for them.


Amos
--
Please be using
  Current Stable Squid 2.7.STABLE5 or 3.0.STABLE10
  Current Beta Squid 3.1.0.3 or 3.0.STABLE11-RC1


[squid-users] Invalid Requests in access.log

2008-12-14 Thread wh
Hello.

I was looking in my access.log file, again, and found other wierd stuff,
again, the log is full of stuff like these:

2008/12/14 22:40:25| clientProcessRequest: Invalid Request
2008/12/14 22:40:32| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|10117]
'
2008/12/14 22:40:32| clientProcessRequest: Invalid Request
2008/12/14 22:40:39| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|02519]
'
2008/12/14 22:40:39| clientProcessRequest: Invalid Request
2008/12/14 22:40:46| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|86755]
'
2008/12/14 22:40:46| clientProcessRequest: Invalid Request
2008/12/14 22:40:54| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|43887]
'
2008/12/14 22:40:54| clientProcessRequest: Invalid Request
2008/12/14 22:41:01| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|34635]
'
2008/12/14 22:41:01| clientProcessRequest: Invalid Request
2008/12/14 22:41:08| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|84846]
'
2008/12/14 22:41:08| clientProcessRequest: Invalid Request
2008/12/14 22:41:15| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|13599]
'
2008/12/14 22:41:15| clientProcessRequest: Invalid Request
2008/12/14 22:41:22| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|60428]
'
2008/12/14 22:41:22| clientProcessRequest: Invalid Request
2008/12/14 22:41:29| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|99030]
'
2008/12/14 22:41:29| clientProcessRequest: Invalid Request
2008/12/14 22:41:36| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|02937]
'
2008/12/14 22:41:36| clientProcessRequest: Invalid Request
2008/12/14 22:41:43| clientParseRequestMethod: Unsupported method in
request 'NICK [M|CRI|XP|50998]
'
2008/12/14 22:41:43| clientProcessRequest: Invalid Request


What is all that? Is someone trying to hack the system or what?

Thanks for your help.





Re: [squid-users] sarg segment fault must clean squid access.log to solved it

2008-12-14 Thread ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
@hendrik :
to bad i dont know about C Programming :(

@all " any solution : ?

On Sun, Dec 14, 2008 at 5:54 AM, Henrik Nordstrom
 wrote:
> On Fri, 2008-12-12 at 17:55 +0700, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote:
>> SARG: Reading access log file: /var/log/squid/access.log
>> Segmentation fault
>
> Should be easy to fix if you know a little C programming. Or even if you
> don't collect information on the crash and post them hoping that someone
> else picks up the task..
>
>  gdb /path/to/sarg
>  run -x
>  [wait for crash]
>  backtrace
>
>> - some ppl maybe use sarg and have this problem too
>
> Quite likely.
>
>> - ( maybe ) this problem can be prevent from squid.conf ?
>
> Possible, but better to fix sarg I think.
>
> Regards
> Henrik
>
>



-- 
-=-=-=-=
http://amyhost.com ( webhosting dengan budget terbatas )
Hot News !!! :
Pengin punya Layanan SMS PREMIUM ?
Contact me ASAP. dapatkan Share revenue MAXIMAL tanpa syarat traffic...


Re: [squid-users] WCCP2 service info

2008-12-14 Thread kgardenia42
On Tue, Dec 9, 2008 at 12:56 AM, Henrik Nordstrom
 wrote:
> mån 2008-12-08 klockan 20:51 + skrev kgardenia42:
>> Hi,
>>
>> When defining a wccp2 dynamic service group it seems that it only
>> allows for a finite list of up to 8 ports which should be redirected
>> to the squid box.  In my case I don't want to statically list the
>> ports to be redirected in the squid config and 8 is too few.
>>
>> Is there any way, whether in wccp2 config or router config, that I can
>> say "just redirect all ports to the squid box"?
>
> Should be to just define a service with no ports specified.

Yeah I thought so too but unless I missed something that doesn't
appear to work, or not on the latest 2.7 release.  For the record, I
was able to get it working by commenting out these lines :

if (!(flags & WCCP2_SERVICE_PORTS_DEFINED)) {
fatalf("parse_wccp2_service_info: service %d: no ports
defined!\n", service_id);
}

Thanks.


Re: [squid-users] Squid rpms for EL4

2008-12-14 Thread Vandaman
Henrik Nordstrom wrote:

> If you are interested then I can set up a repository for
> Squid-2.7 RPMs
> for a small administrative charge. Contact me privately to
> arrange this.
> 
> Regards
> Henrik

Thanks but the Red Hat squid developer replied and updated his page on
http://people.redhat.com/mnagy/squid/ 
I copied his reply to the list so please read the squid-users archive
at http://marc.info/?t=12290847625&r=1&w=2

Regards,
Vandaman.