[squid-users] Squid doesn't trust to the first DNS-Response
Our squid PRE3 from 20040311 delivers SOMETIMES but TOO OFTEN the reqested page aprox 10 seconds after the request was made. I use the dns-capability from Squid. I use our private Nameserver. I have the same problem using an ext. Nameserver in Internet from our provider. I traced this with a packet analysator, here is the problem. - request from browser - DNS req from squid to the 1. Nameserver from resolv.conf - correct Answer from this Nameserver to Squid after 10 seconds - DNS req from squid to the 2. Nameserver from resolv.conf - correct Answer from this Nameserver to Squid - Squid loads the page - Browser displays the page Both DNS-Servers delivers the same DNS-Answer-Record-Set.
[squid-users] Corrupted image-Files when uploading Files
SQUID 3.0 daily created release from May Our user told me uploading files works, but sometimes (often) the files get corrupted. They are editors and upload files to our internet provider, who hosts our web content. This problem occurs using 2 different apps for uploading to 2 different locations. Is this bug or a feature :=) ? How can I help ? Mit freundlichen Grüßen Roman Krakovic Zeitungsgruppe Thüringen Systemtechnik / Informatik / Netzwerke Gottstedter Landstraße 6 99092 Erfurt Germany +49-(0)361 - 227 - 5506 +49-(0)172 - 36 17 927 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
[squid-users] Proxy.pac and DIRECT (not using the Proxy)
Squid 3 : We have to authenticate all users - but some websites shoult be FREE (without login). I put a DIRECT-Line for such Websites in our proxy.pac. It works, but some pages include some HTML-Code from other Sites - which are not free. So the user has to authenticate the comercial banner. How can i tell to my IE not to use the Proxy for the whole Website ? I think it is not possible ..., perhaps somebody knows .. Thx. Mit freundlichen Grüßen Roman Krakovic Zeitungsgruppe Thüringen Systemtechnik / Informatik / Netzwerke Gottstedter Landstraße 6 99092 Erfurt Germany +49-(0)361 - 227 - 5506 +49-(0)172 - 36 17 927 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
[squid-users] Proxy.pac and DIRECT (not using the Proxy)
The problem is not a squid problem, I agree... but it could be solver thru squid .. Everything works ...everybody uses a proxy.pac file, without pac file no access ... I try to explain it once more : There are some websites with FREE access (i.E. websites of our company and many more ..) Some of them include banners from other places ... i.E. For FREE : www.otz.de, this Site includes banners from http://mybanners,banner.com My users connects to this web site ... www.otz.de comes up the website is almost on the screen ... now prompts the squid for the login, as the IE tried to load my banner from a DIFFERENT address. And its almost impossible to write down every banner's website in the FREE Websites List. !! I can use DIRECT in my proxy.pac too for www.otz.de, but a can write DIRECT for every banner's website in the proxy.pac.file !! PERHAPS IT POSSIBLE FOR THE SQUID TO RECOGNIZE, THAT THE BANNER BELONGS TO THE FREE WEBSITE AND NOT TO PROMPT FOR THE LOGIN. Mit freundlichen Grüßen Roman Krakovic Zeitungsgruppe Thüringen Systemtechnik / Informatik / Netzwerke Gottstedter Landstraße 6 99092 Erfurt Germany +49-(0)361 - 227 - 5506 +49-(0)172 - 36 17 927 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Mit freundlichen Grüßen Roman Krakovic Zeitungsgruppe Thüringen Systemtechnik / Informatik / Netzwerke Gottstedter Landstraße 6 99092 Erfurt Germany +49-(0)361 - 227 - 5506 +49-(0)172 - 36 17 927 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
[squid-users] Problem with SSL-Deny error page .. not the whole text is display ed
Hi, SQUID 3 the access to https pages is forbidden, but there are allowed exceptions. My problem : The SSL deny rule works properly, the proper self made error page comes up but THE SQUID-ERROR-PAGE shows not the whole text .. there is more info in the error file then displayed. The same problem occurs with the standard error page. Example: Internetaccess Die angeforderte Seite konnte nicht geholt werden Während des Versuches, den URL www.xyz.com:443 zu laden, trat der folgende Fehle acl Safe_ports port 80 # http acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT http_access deny !Safe_ports http_access deny CONNECT !SSL_ports acl SSL_ports port 443 563 deny_info ERR_DENY_SSL SSL_ports http_access deny internetuser SSL_ports Thx Roman
[squid-users] memory access failure .. ?
Hi, once a day squid end ist work with an error speicherzugriffsfehler=memory access failure There is no info in the cache.log. Mit freundlichen Grüßen Roman Krakovic Zeitungsgruppe Thüringen Systemtechnik / Informatik / Netzwerke Gottstedter Landstraße 6 99092 Erfurt Germany +49-(0)361 - 227 - 5506 +49-(0)172 - 36 17 927 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
[squid-users] Using 2 Auth. modules simultaneously
Hi, is it possible to use 2 Auth. Modules (LDAP + my own Programm) simultaneously ? One part of our company would like to LDAP-authenticate, other part would like to auth. with a simple local Text-File. Possible ? Roman
[squid-users] Authenticate User Group and NON Authenticate User Group
Squid is great !! Is there a way to build 2 user (auth / non auth) groups ? 1. LDAP-Auth (just working), access to all sites 2. NO AUTH ... access to 2 sites only (special subnet) Mit freundlichen Grüßen Roman Krakovic Zeitungsgruppe Thüringen Systemtechnik / Informatik / Netzwerke Gottstedter Landstraße 6 99092 Erfurt Germany +49-(0)361 - 227 - 5506 +49-(0)172 - 36 17 927 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
[squid-users] WG: parseBytesUnits : unknown bytes unit 'allow' IN reply_body_ma x_size
I get this error when implementing this line : (Squid 3.0 March 2004) reply_body_max_size 2 allow internetuser OR reply_body_max_size 5000 allow internetuser OR similar. ERROR WHEN STARTING SQUID : parseBytesUnits : unknown bytes unit 'allow' It seems the bytes count cannot be read. BUT IT WORKED ONE TIME WITH reply_body_max_size 5000 MB allow internetuser ?? Roman Krakovic Zeitungsgruppe Thüringen Systemtechnik / Informatik / Netzwerke Gottstedter Landstraße 6 99092 Erfurt Germany +49-(0)361 - 227 - 5506 +49-(0)172 - 36 17 927 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
