RE: [squid-users] certain pages loading correctly in Firefox but not IE
That's what I thought initially, however the pages load fine in both browsers when the proxy server is bypassed completely. -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Friday, 12 June 2009 8:32 PM To: Timothy Larrea Cc: squid-users@squid-cache.org Subject: Re: [squid-users] certain pages loading correctly in Firefox but not IE Timothy Larrea wrote: Hi All, we currently have a squid proxy (2.6.stable5 ) running, and it seems that certain pages, such as our google docs site, and youtube don't load correctly when using IE as the browser, but Firefox is fine. In IE, the page loads all the text, but it seems to be missing the CSS data and javascripts, so the text is large and all over the place. Another odd thing is that if you attempt to load a page, close IE, then reopen it and load that page again, it works 2nd time around. I've tested this on a clean XP install with IE6 IE7, Vista, Windows 7 etc. Any suggestions would be appreciated. IE has trouble loading things sometimes. That other browsers can get it shows its unlikely to be a Squid issue. Look at the headers being sent by each browser in their requests for the CSS and compare. Amos -- Please be using Current Stable Squid 2.7.STABLE6 or 3.0.STABLE15 Current Beta Squid 3.1.0.8 or 3.0.STABLE16-RC1
[squid-users] certain pages loading correctly in Firefox but not IE
Hi All, we currently have a squid proxy (2.6.stable5 ) running, and it seems that certain pages, such as our google docs site, and youtube don't load correctly when using IE as the browser, but Firefox is fine. In IE, the page loads all the text, but it seems to be missing the CSS data and javascripts, so the text is large and all over the place. Another odd thing is that if you attempt to load a page, close IE, then reopen it and load that page again, it works 2nd time around. I've tested this on a clean XP install with IE6 IE7, Vista, Windows 7 etc. Any suggestions would be appreciated.
[squid-users] recaching squid via PHP.
Hi, I'm trying to trigger a recache of the squid config files from a PHP file, reason being I've got a web page that staff members can use to enable or disable specific computer labs (subnets) from being able to access the internet. The PHP file currently adds and removes lines from a specific file referenced by squid to determine allowable source subnets, however I need to execute basically a squid -k reconfigure command from the PHP page each time the config file is changed. I tried using a shell script that did the command, with the SUID flag set so it would execute as root but this doesn't work (and is perhaps not very secure?) Any suggestions? Thanks. Tim.
[squid-users] filtering access logs
Hi list, I'd like to be able to filter out UDP_MISS/000 lines from my access log, is there any way I can do that? Thanks.
[squid-users] squid, NTLM and dansguardian
At the moment I have squid setup to use NTLM authentication transparently, and control access to the internet based on active directory group membership. What I'd like to do now is have all traffic that doesn't originate from the localhost to go parent cache which is dansguardian on same machine. DG then of course redirects traffic back to squid which allows the traffic coming from localhost through to the net. So: Squid (NTLM auth) - DG - Squid - Internet. What I don't understand is how to mix the http_access rules I'm currently wanting to use, with DG, since from what I can understand, the http_access is ignored as the traffic isn't actually going through, but rather be redirected to the parent proxy? Can I simply replace my http_access rules with cache_peer_access? Squid.conf snippets. http_port 3128 hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? cache deny QUERY acl apache rep_header Server ^Apache broken_vary_encoding allow apache auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 10 auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 5 hours external_acl_type wb_group ttl=60 %LOGIN /usr/lib/squid/wbinfo_group.pl acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 cache_peer 127.0.0.1 parent 8080 3130 cache_peer_access 127.0.0.1 deny localhost always_direct allow localhost acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 443 563 # https acl FTP_ports port 21 # ftp acl Java_ports port 1026 acl Mail_ports port 25 110 # pop3, smtp acl adminpcs src /etc/squid/adminpcs.txt acl staff external wb_group Staff acl nonet external wb_group NoInternet acl students external wb_group wcstudents acl alllabs src /etc/squid/alllabs.txt acl firewall dst 192.168.0.9 acl enabledlabs src /etc/squid/enabledlabs.txt acl purge method PURGE acl CONNECT method CONNECT acl auth proxy_auth REQUIRED http_access allow manager localhost http_access deny manager http_access allow purge localhost http_access deny purge http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost http_access deny nonet http_access allow admins FTP_ports http_access allow adminpcs all http_access allow Java_ports http_access allow staff Mail_ports http_access allow students Safe_ports enabledlabs !firewall http_access allow staff Safe_ports http_access deny all http_reply_access allow all icp_access allow all
RE: [squid-users] whitespace in windows domain group name
Thanks Henrik, that solved my problem. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Tuesday, 21 August 2007 7:59 PM To: Timothy Larrea Cc: squid-users@squid-cache.org Subject: Re: [squid-users] whitespace in windows domain group name On tis, 2007-08-21 at 13:36 +1000, Timothy Larrea wrote: I have squid installed and functioning with winbind/samba to do NTLM auth. The problem I'm having is where i try to use a windows group name with a space in it. I get the error: To define acl words with spaces in them you currently have to use an acl include file. acl name type /path/to/file.txt in this file acl words is read one per line, ignoring leading and trailing whitespace, or comments (#). Regards Henrik
[squid-users] whitespace in windows domain group name
I have squid installed and functioning with winbind/samba to do NTLM auth. The problem I'm having is where i try to use a windows group name with a space in it. I get the error: 2007/08/21 12:46:33| strtokFile: Domain not found The relevant section of Squid.conf is: external_acl_type wb_group ttl=60 %LOGIN /usr/lib/squid/wbinfo_group.pl acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 443 563 # https acl FTP_ports port 21 # ftp acl staff external wb_group Staff acl nonet external wb_group NoInternet acl domainadmins external wb_group Domain Admins if I comment out the domain admins line everything works fine, so i can only guess that it's balking at the space? Any ideas?
