Re: [squid-users] Squid Peer´s problem.

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 21.57, Ampugnani, Fernando wrote:
> Henrik,
>   which is the best way to restrict all sites that go to internet in
> the second squid box except those I permit?

By only allowing access in http_access to the sites you permit.

> I must do they in first squid box or in second squid box?

Does not matter much.

> Because I suppose that the validation is managed by first squid
> box, the second squid box only forward all internet traffic to this
> isn´t is?

Both can do full validation. The fact that one forwards requests to 
another is just a routing decision and does not in any way modify the 
capabilities of either Squid.

If you have the rules in the Squid closest to the Internet then the 
rules matters no matter which internal proxy the user connects via.

If you have the rules on the proxy closest to the user then the 
processing of the rule is somewhat more efficient as there is no need 
to query the Internet connected Squid..

Regards
Henrik


Re: [squid-users] Squid Peer´s problem.

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 19.42, Ampugnani, Fernando wrote:

> When I go for Internet through second squid box, first squid box
> ask me user and password and don´t give access.

See the cache_peer directive on the second Squid..

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]


[squid-users] Squid Peer´s problem.

2003-08-19 Thread Ampugnani, Fernando
Hi all:
 I have two squid box the first for Internet (this use smb_auth) and
the second for intranet (don´t use validation). I need redirect the traffic
in the second squid box when this go for internet to first squid box.
I put the following rules in the squid conf. file of second squid box.

acl local-servers dstdomain  .eds.com .eds.com.ar
always_direct allow local-servers
cache_peer proxy.eds.com.ar parent 80 3130 no-query default

When I go for Internet through second squid box, first squid box ask me user
and password and don´t give access.

This is the first squid box log (Internet access)

1061314557.472 74 192.168.27.10 TCP_DENIED/407 1697 GET
http://www.yahoo.com.ar/ - NONE/- text/html

This is the second squid box log 

1061292795.554114 207.169.88.182 TCP_MISS/407 1746 GET
http://www.yahoo.com.ar/ xzsl81 DEFAULT_PARENT/proxy.eds.com.ar text/html


Thanks in advance.

Fernando Ampugnani
EDS Argentina - Software, Storage & Network
Global Operation Solution Delivery
Tel: 5411 4704 3428
Mail: [EMAIL PROTECTED]