Re: [squid-users] IMAP support
Because all my traffic to internet is managed by squid. Do you have any suggestion? --- On Wed, 11/12/08, Matus UHLAR - fantomas <[EMAIL PROTECTED]> wrote: > From: Matus UHLAR - fantomas <[EMAIL PROTECTED]> > Subject: Re: [squid-users] IMAP support > To: squid-users@squid-cache.org > Date: Wednesday, November 12, 2008, 6:13 AM > On 12.11.08 05:57, julian julian wrote: > > Hello, how can I access to IMAP (gmail IMAP for > example)servers trough > > squid, I just add imap ports in squid.conf as > Safe_port and SSL_port, but > > it does not work. > > why would you want to access IMAP through squid ? > > -- > Matus UHLAR - fantomas, [EMAIL PROTECTED] ; > http://www.fantomas.sk/ > Warning: I wish NOT to receive e-mail advertising to this > address. > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek > reklamnu postu. > Boost your system's speed by 500% - DEL > C:\WINDOWS\*.*
Re: [squid-users] IMAP support
Ok, I'm using thunderbird and set the proxy manually, but when I try to conect I get an error, should I make some special config in squid? --- On Wed, 11/12/08, Amos Jeffries <[EMAIL PROTECTED]> wrote: > From: Amos Jeffries <[EMAIL PROTECTED]> > Subject: Re: [squid-users] IMAP support > To: [EMAIL PROTECTED] > Cc: "squid" > Date: Wednesday, November 12, 2008, 6:02 AM > julian julian wrote: > > Hello, how can I access to IMAP (gmail IMAP for > example)servers trough squid, I just add imap ports in > squid.conf as Safe_port and SSL_port, but it does not work. > > IMAP protocol is not HTTP protocol. Squid cannot handle > IMAP requests. > > They only way to do this is configure all the mail clients > to use a HTTP proxy and wrap the requests into HTTP first. > > Amos > -- Please be using > Current Stable Squid 2.7.STABLE5 or 3.0.STABLE10 > Current Beta Squid 3.1.0.2
Re: [squid-users] IMAP support
Because all my traffic to internet is managed by squid. Do you have any suggestion? --- On Wed, 11/12/08, Matus UHLAR - fantomas <[EMAIL PROTECTED]> wrote: > From: Matus UHLAR - fantomas <[EMAIL PROTECTED]> > Subject: Re: [squid-users] IMAP support > To: squid-users@squid-cache.org > Date: Wednesday, November 12, 2008, 6:13 AM > On 12.11.08 05:57, julian julian wrote: > > Hello, how can I access to IMAP (gmail IMAP for > example)servers trough > > squid, I just add imap ports in squid.conf as > Safe_port and SSL_port, but > > it does not work. > > why would you want to access IMAP through squid ? > > -- > Matus UHLAR - fantomas, [EMAIL PROTECTED] ; > http://www.fantomas.sk/ > Warning: I wish NOT to receive e-mail advertising to this > address. > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek > reklamnu postu. > Boost your system's speed by 500% - DEL > C:\WINDOWS\*.*
Re: [squid-users] IMAP support
Ok, I'm using thunderbird and set the proxy manually, but when I try to conect I get an error, should I make some special config in squid? --- On Wed, 11/12/08, Amos Jeffries <[EMAIL PROTECTED]> wrote: > From: Amos Jeffries <[EMAIL PROTECTED]> > Subject: Re: [squid-users] IMAP support > To: [EMAIL PROTECTED] > Cc: "squid" > Date: Wednesday, November 12, 2008, 6:02 AM > julian julian wrote: > > Hello, how can I access to IMAP (gmail IMAP for > example)servers trough squid, I just add imap ports in > squid.conf as Safe_port and SSL_port, but it does not work. > > IMAP protocol is not HTTP protocol. Squid cannot handle > IMAP requests. > > They only way to do this is configure all the mail clients > to use a HTTP proxy and wrap the requests into HTTP first. > > Amos > -- Please be using > Current Stable Squid 2.7.STABLE5 or 3.0.STABLE10 > Current Beta Squid 3.1.0.2
[squid-users] IMAP support
Hello, how can I access to IMAP (gmail IMAP for example)servers trough squid, I just add imap ports in squid.conf as Safe_port and SSL_port, but it does not work. Thanks
Re: [squid-users] Squid with two networks ...
You could probably use a set of static routes made by "route" command, where you can specify static gateway for each network. Defining as "gateway" each of yours public IP. --- On Mon, 6/23/08, Ramiro Sabastta <[EMAIL PROTECTED]> wrote: > From: Ramiro Sabastta <[EMAIL PROTECTED]> > Subject: [squid-users] Squid with two networks ... > To: squid-users@squid-cache.org > Date: Monday, June 23, 2008, 8:20 AM > Hi !!! > > I've installed a Squid box transparent mode (3STABLE7) > with two > network cards and I must to implement this scenario: > > - The network cards are connected at two diferents internal > Class C > network with public IP. > - If the http requeriment asking about an object that is in > the cache, > the Squid give the object throught the same interface that > the > original requermients comes (I tink that this is not a > problem, > because de origin IP is in the same network that the squid > have). > - If the http requeriment asking about an object that > isn't in the > cache, the Squid go direct to public network trought the > same > interface that the original requermients comes (This is the > problem). > > Are some configurations of squid.conf that allow me to do > that? > > I think resolve te problem, externally form Squid (with > iptables, for example) > > Thanks a lot !!! > > Regards !! > > Ramiro
Re: [squid-users] Searching squid logs for pornographic sites
I suggest to use a log analizer like webalizer o sarg, this is a bit more complete for user behavior analisys. Julián --- On Wed, 6/11/08, Steven Engebretson <[EMAIL PROTECTED]> wrote: > From: Steven Engebretson <[EMAIL PROTECTED]> > Subject: [squid-users] Searching squid logs for pornographic sites > To: squid-users@squid-cache.org > Date: Wednesday, June 11, 2008, 11:32 AM > I am looking for a tool that will scan the access.log file > for pornographic sites, and will report the specifics back. > We do not block access to any Internet sites, but need to > monitor for objectionable content. > > What I am doing now is just greping for some key words, and > dumping the output into a file. I am manually going through > about 60,000 lines of log file, following my grep. 99% of > these are false. Any help would be appreciated. > > Thank you all. > > > -Steven E.
RE: [squid-users] client ip's
The reference to 192.168.0.254 which are you looking when run route command is the default gateway.Your server is not resolving 192.168.0.254 to localhost. --- Jorge Bastos <[EMAIL PROTECTED]> wrote: > In fact I have 3 NIC's. > > Yes, the two interfaces I showed in the route print, > are defined in > /etc/network/interfaces. > > > > > > -Original Message- > > From: julian julian [mailto:[EMAIL PROTECTED] > > Sent: quinta-feira, 10 de Abril de 2008 15:47 > > To: Jorge Bastos > > Cc: squid > > Subject: RE: [squid-users] client ip's > > > > Jorge: have you set the network properly? Are you > > using 192.168.x.x net. The network parameter must > be > > wrote in > > ../ifcfg-eth0 and ../ifcfg-eth1 file (because I > > suspect that you have two nics). The route command > > shows some aspect of your network configuration. > > > > Julián > > > > --- Jorge Bastos <[EMAIL PROTECTED]> wrote: > > > > > Hum I got some news on this, > > > > > > I don't know why my system started to give me > this > > > information: > > > > > > Kernel IP routing table > > > Destination Gateway Genmask > > > Flags Metric RefUse Iface > > > 192.168.1.0 * 255.255.255.0 > U > > > 0 00 eth0 > > > 192.168.0.0 * 255.255.255.0 > U > > > 0 00 eth1 > > > default localhost 0.0.0.0 > UG > > > 0 00 eth1 > > > > > > Kernel IP routing table > > > Destination Gateway Genmask > > > Flags Metric RefUse Iface > > > 192.168.1.0 0.0.0.0 255.255.255.0 > U > > > 0 00 eth0 > > > 192.168.0.0 0.0.0.0 255.255.255.0 > U > > > 0 00 eth1 > > > 0.0.0.0 192.168.0.254 0.0.0.0 > UG > > > 0 00 eth1 > > > > > > > > > The fact is that the hosts file is correct: > > > > > > cisne:~# cat /etc/hosts > > > 127.0.0.1 localhost > > > > > > I only have this there > > > > > > I know this is not squid related but if you guys > can > > > give me a hand. > > > I have no idea why is it resolving 192.168.0.254 > to > > > localhost. > > > > > > > > > > > > > > > > > > > -Original Message- > > > > From: Jorge Bastos > [mailto:[EMAIL PROTECTED] > > > > Sent: sábado, 5 de Abril de 2008 21:23 > > > > To: 'Henrik Nordstrom' > > > > Cc: 'Amos Jeffries'; > squid-users@squid-cache.org > > > > Subject: RE: [squid-users] client ip's > > > > > > > > This already worked with some of the 3.0 > versions. > > > > Gonna try to play with my iptables rules and > let > > > you guys know. > > > > > > > > > > > > > > > > > > > > > -Original Message- > > > > > From: Henrik Nordstrom > > > [mailto:[EMAIL PROTECTED] > > > > > Sent: sábado, 5 de Abril de 2008 19:38 > > > > > To: Jorge Bastos > > > > > Cc: 'Amos Jeffries'; > squid-users@squid-cache.org > > > > > Subject: RE: [squid-users] client ip's > > > > > > > > > > lr 2008-04-05 klockan 14:24 +0100 skrev > Jorge > > > Bastos: > > > > > > > > > > > I updated to last STABLE-4 on debian, but > this > > > still happens this > > > > > way. > > > > > > What can I do more? > > > > > > > > > > Good question. > > > > > > > > > > One thing you can try is to downgrade to > > > Squid-2.6. If that shows the > > > > > same symptoms the problem is not within > Squid > > > but most likely in your > > > > > firewall ruleset or something else relevant > to > > > how the connections > > > > end > > > > > up at your Squid. > > > > > > > > > > Regards > > > > > Henrik > > > > > > > > > > > > > > > > > > > __ > > Do You Yahoo!? > > Tired of spam? Yahoo! Mail has the best spam > protection around > > http://mail.yahoo.com > > __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
RE: [squid-users] client ip's
Jorge: have you set the network properly? Are you using 192.168.x.x net. The network parameter must be wrote in ../ifcfg-eth0 and ../ifcfg-eth1 file (because I suspect that you have two nics). The route command shows some aspect of your network configuration. Julián --- Jorge Bastos <[EMAIL PROTECTED]> wrote: > Hum I got some news on this, > > I don't know why my system started to give me this > information: > > Kernel IP routing table > Destination Gateway Genmask > Flags Metric RefUse Iface > 192.168.1.0 * 255.255.255.0 U > 0 00 eth0 > 192.168.0.0 * 255.255.255.0 U > 0 00 eth1 > default localhost 0.0.0.0 UG > 0 00 eth1 > > Kernel IP routing table > Destination Gateway Genmask > Flags Metric RefUse Iface > 192.168.1.0 0.0.0.0 255.255.255.0 U > 0 00 eth0 > 192.168.0.0 0.0.0.0 255.255.255.0 U > 0 00 eth1 > 0.0.0.0 192.168.0.254 0.0.0.0 UG > 0 00 eth1 > > > The fact is that the hosts file is correct: > > cisne:~# cat /etc/hosts > 127.0.0.1 localhost > > I only have this there > > I know this is not squid related but if you guys can > give me a hand. > I have no idea why is it resolving 192.168.0.254 to > localhost. > > > > > > > -Original Message- > > From: Jorge Bastos [mailto:[EMAIL PROTECTED] > > Sent: sábado, 5 de Abril de 2008 21:23 > > To: 'Henrik Nordstrom' > > Cc: 'Amos Jeffries'; squid-users@squid-cache.org > > Subject: RE: [squid-users] client ip's > > > > This already worked with some of the 3.0 versions. > > Gonna try to play with my iptables rules and let > you guys know. > > > > > > > > > > > -Original Message- > > > From: Henrik Nordstrom > [mailto:[EMAIL PROTECTED] > > > Sent: sábado, 5 de Abril de 2008 19:38 > > > To: Jorge Bastos > > > Cc: 'Amos Jeffries'; squid-users@squid-cache.org > > > Subject: RE: [squid-users] client ip's > > > > > > lr 2008-04-05 klockan 14:24 +0100 skrev Jorge > Bastos: > > > > > > > I updated to last STABLE-4 on debian, but this > still happens this > > > way. > > > > What can I do more? > > > > > > Good question. > > > > > > One thing you can try is to downgrade to > Squid-2.6. If that shows the > > > same symptoms the problem is not within Squid > but most likely in your > > > firewall ruleset or something else relevant to > how the connections > > end > > > up at your Squid. > > > > > > Regards > > > Henrik > > > > > __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Re: [squid-users] stop anonymous browsing
You should choose one of the several validation option than offers by Squid (LDAP,ADS,SAMBA,NTLM local users, etc.) If you have many proxys I suggest try to integrate them with your actual user validation repository --- Anil Saini <[EMAIL PROTECTED]> wrote: > > > how to stop anonymous browsing > > we have huge collection of web-proxies to bybass > acl blocked list > Is thr any sol to block them all without making list > of them. > > -- > View this message in context: > http://www.nabble.com/stop-anonymous-browsing-tp16603009p16603009.html > Sent from the Squid - Users mailing list archive at > Nabble.com. > > __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Re: [squid-users] ICAP: fake user and new icap header X-Authenticated-Groups
I´ve experience with Windows 2003 ADS (also Windows NT domain) and Squid 2.5/2.6. I read windows group and manage it with several ACLs. It works without problem. Enviroment: SO: CentOS 4.4/5.1 Samba: 3.0xx Squid: 2.5/2.6 By the way, I've been suffering BC for many years and I hate it. --- Arno _ <[EMAIL PROTECTED]> wrote: > > Hello, > I'm my configuration I have 2 bluecoat proxy talking > to a webwasher via ICA= > P. > And I also have a squid 3.0 for my test and as a > backup of the bluecoat. > But my squid is not doing any authentication, I > can't and don't want to. > > So to be able to make it work with the ICAP > (webwasher) I need to send user= > name and user group to it. > > Any actual way of sending a fake information, or > should I crate a new icap-= > fake-client-username and icap-fake-client-group on > the icap config part of = > squid.conf ? > Anyone interested or it will be just for me ? > > That will let me (you, anyone) have a mix > environment with authenticated pr= > oxy and some other not ((can be for automated system > or whatever you want) > > regards, > > arno > > _ > Connect to the next generation of MSN Messenger > http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline You rock. That's why Blockbuster's offering you one month of Blockbuster Total Access, No Cost. http://tc.deals.yahoo.com/tc/blockbuster/text5.com
Re: [squid-users] Dub with access.log rotation ...
Squid, as other linux software use a daemon knows as logrotate who is the responsable of many log rotations. You should modify the logrotate.conf or ./logrotate.d/squid specify logrotate config for squid. --- Ramiro Sabastta <[EMAIL PROTECTED]> wrote: > Hi, > > I installed squid on a Debian box. > > Everithing is working well, but I have a issue that > I can't solve. > > The access.log log file always close an open new one > at 6 A.M. > > I try to change that with the squid -k rotate > option, including in the > crontab file this line: > > 0 0 * * * /usr/sbin/squid -k rotate > > but this configuration close the file at 00 AM and 6 > AM too. > > ¿What can i do to force the rotation only to 0 AM? > (but not to 6 AM) > > Thanks a lot ... > > Kind regards !! > > Ramiro > You rock. That's why Blockbuster's offering you one month of Blockbuster Total Access, No Cost. http://tc.deals.yahoo.com/tc/blockbuster/text5.com
Re: [squid-users] FTP access via proxy server
Squid have some limitations for manage ftp traffic. If you whant use Web browser for non-anonymous ftp access, you will find many troubles. Instead that I recomend use a real FTP clients (cuteFTP, FTPzilla, etc), combined with a FTP proxy (frox http://frox.sourceforge.net/) it works very well. I use those in a several production servers. --- R Pradeepa <[EMAIL PROTECTED]> wrote: > > when i try to access an ftp site i get the following > error > > The folder is readonly because the proxy server is > not set up to allow > full access. To move, paste, rename or delete files > you should use a > different proxy server. > > Without proxy server i am able to view the ftp sites > or add any files to > that ftp site in IE 6 without any issues. > > Please suggest me what ashould be enabled in squid > proxy to allow write > permission to that ftp site > > > Thanks & Regards > Pradeepa > Sys.Administrator > > > > You rock. That's why Blockbuster's offering you one month of Blockbuster Total Access, No Cost. http://tc.deals.yahoo.com/tc/blockbuster/text5.com
Re: [squid-users] DNS lookup errors when using squid
I never use squid on windows but I've use it a lot on Linux. You can set the DNS server in two ways: a) leaving commented the DNS setting in the squid.conf and it will use the operating system DNS setting. b) Setting DNS configuration into squid.conf file. The second one works well in Linux. Julián --- Oliver Marshall <[EMAIL PROTECTED]> wrote: > We run a very basic squid setup on a windows 2003 > box here. It's purely > used to route all web traffic over a cheap adsl line > leaving the leased > line free for important stuff. The 'squid server' > (win2k3) has the > gateway IP set to that of the adsl router meaning > that when someone sets > the proxy in their browser all the web traffic will > go over the adsl > line. If for some reason the adsl goes down, we just > change the gateway > address to the leased line router and the web comes > back. It's a basic > but workable solution. > > However. > > We have been having a lot of problems with people > getting DNS lookup > failures when using the squid proxy. If we remove > the proxy setting, the > web works for the users, put them on to squid again > and with an hour or > so DNS failures appear. Hitting F5 a few times > solves it and they carry > on until the next time, but it only happens with > Squid. I've tried > swapping from the ADSL to the SDSL but it still > happens if squid is > used. I've tried another Windows proxy, and the > problem doesn't happen, > nor does it happen without Squid involved at all. > > Any ideas why this might be? I know that squid > doesn't have a DNS > element as such, using the DNS settings and servers > specified on the > underlying OS, but the fact that it only happens > with Squid involved > does make me think something is wrong somewhere. > > Olly > You rock. That's why Blockbuster's offering you one month of Blockbuster Total Access, No Cost. http://tc.deals.yahoo.com/tc/blockbuster/text5.com
Re: [squid-users] Slow internet
I use CentOS 4.4 and 5.1. But I recomend to you CentOS 4.4 because is a bit more easy for configure due to the squid and samba versions included in this distro. Be careful if you are using some intel motherboard and how Linux see the hard disk. If there are SATA you should see that as sdx(x=a b or c) instead hdx, it could affect the read/write performance. --- Jeremy Kim <[EMAIL PROTECTED]> wrote: > I actually started with squid on a suse 10.2 but it > had problems of its > own. It would be working fine but once in a while > it would have these > long delays. I think it was when cache was being > swapped. > > Which linux version do you use for your linux? > > Also I am not running any user authentication right > now on my XP squid. > > > On Mon, 2008-03-31 at 10:56 -0700, julian julian > wrote: > > I really never used squid on Windows plataform, > but i > > think it culd be run as good as in linux > enviromet. > > What user validation method are you implemented? a > > missconfig squid.conf could be a cause. Check your > > cache.log for validation erros. > > > > > > > > > > > > --- Jeremy Kim <[EMAIL PROTECTED]> wrote: > > > > > Hello, > > > > > > Using the squid proxy is really slow. Is there > > > anyway to make it faster? > > > > > > > > > I have squid version Squid2.6STABLE18 on a XP. > > > > > > > > > The machine I am running this on is a Dell > PowerEdge > > > SC 1420 Xeon CPU > > > 2.80GHz and 4GB if ram. I am using three scsi > > > drives. One to host the > > > squid and operating system (est.75G Drive) and > the > > > other two drives > > > (est. each 210G drives) as cache drives. > > > > > > > > > Here are my configurations. Everything else is > > > pretty much set on > > > default. > > > > > > #Default: > > > # http_access deny all > > > #Recommended minimum configuration: > > > # Only allow cachemgr access from localhost > > > http_access allow biblical > > > http_access allow manager localhost > > > http_access deny manager > > > # Deny requests to unknown ports > > > http_access deny !Safe_ports > > > # Deny CONNECT to other than SSL ports > > > http_access deny CONNECT !SSL_ports > > > > > > > > > # And finally deny all other access to this > proxy > > > http_access deny all > > > > > > # MEMORY CACHE OPTIONS > > > #Default: > > > cache_mem 32 MB > > > > > > #Default: > > > maximum_object_size_in_memory 8 KB > > > > > > #Default: > > > memory_replacement_policy lru > > > > > > #Default: > > > cache_replacement_policy heap GDSF > > > > > > #Default: > > > cache_dir aufs e:/cache 512 16 256 > > > cache_dir aufs f:/cache 512 16 256 > > > > > > #Default: > > > store_dir_select_algorithm least-load > > > > > > #Default: > > > # max_open_disk_fds 0 > > > > > > #Default: > > > # minimum_object_size 0 KB > > > > > > #Default: > > > # maximum_object_size 4096 KB > > > > > > #Default: > > > cache_swap_low 90 > > > cache_swap_high 95 > > > > > > #Default: > > > # maximum_object_size 4096 KB > > > > > > #Default: > > > cache_swap_low 90 > > > cache_swap_high 95 > > > > > > > > > > > > > > > > > > > > Special deal for Yahoo! users & friends - No Cost. > Get a month of Blockbuster Total Access now > > http://tc.deals.yahoo.com/tc/blockbuster/text3.com > You rock. That's why Blockbuster's offering you one month of Blockbuster Total Access, No Cost. http://tc.deals.yahoo.com/tc/blockbuster/text5.com
Re: [squid-users] Slow internet
I really never used squid on Windows plataform, but i think it culd be run as good as in linux enviromet. What user validation method are you implemented? a missconfig squid.conf could be a cause. Check your cache.log for validation erros. --- Jeremy Kim <[EMAIL PROTECTED]> wrote: > Hello, > > Using the squid proxy is really slow. Is there > anyway to make it faster? > > > I have squid version Squid2.6STABLE18 on a XP. > > > The machine I am running this on is a Dell PowerEdge > SC 1420 Xeon CPU > 2.80GHz and 4GB if ram. I am using three scsi > drives. One to host the > squid and operating system (est.75G Drive) and the > other two drives > (est. each 210G drives) as cache drives. > > > Here are my configurations. Everything else is > pretty much set on > default. > > #Default: > # http_access deny all > #Recommended minimum configuration: > # Only allow cachemgr access from localhost > http_access allow biblical > http_access allow manager localhost > http_access deny manager > # Deny requests to unknown ports > http_access deny !Safe_ports > # Deny CONNECT to other than SSL ports > http_access deny CONNECT !SSL_ports > > > # And finally deny all other access to this proxy > http_access deny all > > # MEMORY CACHE OPTIONS > #Default: > cache_mem 32 MB > > #Default: > maximum_object_size_in_memory 8 KB > > #Default: > memory_replacement_policy lru > > #Default: > cache_replacement_policy heap GDSF > > #Default: > cache_dir aufs e:/cache 512 16 256 > cache_dir aufs f:/cache 512 16 256 > > #Default: > store_dir_select_algorithm least-load > > #Default: > # max_open_disk_fds 0 > > #Default: > # minimum_object_size 0 KB > > #Default: > # maximum_object_size 4096 KB > > #Default: > cache_swap_low 90 > cache_swap_high 95 > > #Default: > # maximum_object_size 4096 KB > > #Default: > cache_swap_low 90 > cache_swap_high 95 > > > Special deal for Yahoo! users & friends - No Cost. Get a month of Blockbuster Total Access now http://tc.deals.yahoo.com/tc/blockbuster/text3.com
Re: [squid-users] Transparent LDAP authentication
I use this config and works ok in producion. Scenario: AD Win2k3R2 CentOS: 4.4 and 5.1 SMB and winbind: 3.0.10 and 3.0.25b Squid 2.5.STABLE14 AND 2.6STABLE6 Using NTLM authentication #Define uthentications parameters #auth_param digest nonce_max_count 50 auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 10 auth_param ntlm max_challenge_reuses 2 auth_param ntlm max_challenge_lifetime 2 minutes auth_param ntlm use_ntlm_negotiate off auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 10 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours auth_param basic casesensitive off # ACCESS CONTROLS # define una acl para manejar los grupos de windows # define acls for user groups manage and indcate whith helper use (this is provided for SAMBA suite) external_acl_type nt_group ttl=2 children=10 %LOGIN /usr/lib/squid/wbinfo_group.pl # define acls acl Sistemas external nt_group sistemas_ # acl para el manejo del grupos Sistemas acl InetAccessControl external nt_group internet_control # acl para el manejo de grupo internet_control acl InetAccessFull external nt_group internet_full #acl para el manejo de grupo internet_full acl Autenticados proxy_auth REQUIRED # fuerza el pedido de autenticacion # get access using before defined acls http_access deny urlDenegadas !Sistemas http_access allow novalida http_access allow urlAuditoria auditoria http_access allow Sistemas http_access allow urlPermitidas InetAccessControl http_access allow InetAccessFull http_access deny !Autenticados http_access deny all --- Philip Kloppers <[EMAIL PROTECTED]> wrote: > I have an OpenSuse 10.2 box that runs Samba / > OpenLDAP as a PDC, as well as > Squid with delay pools to limit bandwidth dependant > upon user, group, time > of day and machine. I have managed to get everything > working and > authenticating correctly using smb_ldap_auth and > smb_ldap_group. However, I > would like to get the clients to authenticate > transparently using the domain > credentials from the initial domain logon, and not > having to re-authenticate > every time they open the browser. > > The clients (mostly XP with a few FreeNX terminals > on various Linux > flavours) are all set up to use the proxy, and then > iptables rules blocking > users from bypassing the proxy, so I am not > transparently intercepting web > traffic, as I understand that authentication cannot > be used with a > transparent proxy. > > Is single sign-on a possibility without using an M$ > PDC? All the searching > seems to point to using ntlm_auth for this sort of > thing. > > Philip > > PS: I have tried using ntlm_auth to authenticate > against the Samba server... > the users are able to authenticate correctly, but > still need to re-enter > their credentials every time they open their > browsers. > > Special deal for Yahoo! users & friends - No Cost. Get a month of Blockbuster Total Access now http://tc.deals.yahoo.com/tc/blockbuster/text3.com
[squid-users] cuteftp throught squid
Hello, I need to connec cuteftp client through squid, any suggestion? thanks Get easy, one-click access to your favorites. Make Yahoo! your homepage. http://www.yahoo.com/r/hs
Re: [squid-users] failed to start or stop squid
After check the cache.log and your squid.conf, and if its looks ok, delete these two files: /var/spool/squid/swap.state and swap.??clean (do not remember the exact name of the second file, but start whit swap) saludos Julián __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Re: [squid-users] failed to start or stop squid
After check the cache.log and your squid.conf, and if its looks ok, delete these two files: /var/spool/squid/swap.state and swap.??clean (do not remember the exact name of the second file, but start whit swap) saludos Julián --- Angela Williams <[EMAIL PROTECTED]> wrote: > Hi! > On Wednesday 07 November 2007, Chezhira Alice wrote: > > my squid service is failing to start or stop i've > tried to rebuild the > > squid cache but still its failing > > A look at your cache.log > Post the relevant bits! > Without your input we are dead in the water! > > Bit phuny though that it both fails to start and > stop! Could it be a zombie? > > > > Cheers > > Ang > > > -- > Angela Williams Enterprise Outsourcing > Unix/Linux & Cisco spoken here! Bedfordview > [EMAIL PROTECTED] Gauteng South Africa > > Smile!! Jesus Loves You!! > __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
[squid-users] How to Block MSN over HTTP
I want to deny access to IM services by web pages like www.meebo.com. I can block these domains but im looking for a bit more general solution. Any suggeestion? Thanks __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
