[SLUG] squid ACL question

2009-11-23 Thread Sonia Hamilton
A question about Squid ACL's (from an existing config I'm working on). Let's say the config file defines (in this order) these ACL's and rules: acl foo src 1.2.3.4 acl bar url_regex -i .bar.com http_access allow foo http_access allow foo bar http_access deny all The second http_access line is

Re: [SLUG] squid ACL question

2009-11-23 Thread Del
Sonia Hamilton wrote: A question about Squid ACL's (from an existing config I'm working on). Let's say the config file defines (in this order) these ACL's and rules: acl foo src 1.2.3.4 acl bar url_regex -i .bar.com http_access allow foo http_access allow foo bar http_access deny all The

Re: [SLUG] squid reverse proxy almost working - but only ever hitting default site

2009-08-26 Thread Ben Donohue
Hi Martin, All, thanks. I realized that vhost was missing and put it in. squid still fails. internally the ip addresses are as follows... 10.1.2.249 www.pamphlets.org.au 10.1.2.250 www.icafe.com.au 10.1.2.252 squid.icafe.com.au If I have the config as below, I only ever get www.icafe.com.au

Re: [SLUG] squid reverse proxy almost working - but only ever hitting default site

2009-08-26 Thread Ben Donohue
Hi Martin, just a straight copy and paste of your suggestion into a new default squid.conf file under the following line... #INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS acl our_sites dstdomain www.icafe.com.au www.pamphlets.org.au *.pamphlets.org.au *.icafe.com.au acl

Re: [SLUG] squid reverse proxy almost working - but only ever hitting default site

2009-08-26 Thread Ben Donohue
Hi Martin, Mate you are a genius! All working now. I just moved the lines as you suggested. Nothing else and both sites working. I'm going to run up a third site and add it in to the mix. Then carefully doco how this is done. I definitely owe you at least a beer. Thanks again. Ben

Re: [SLUG] squid reverse proxy working successfully

2009-08-26 Thread Ben Donohue
Hi all Just posting this here so that it gets saved in the SLUG archives and may help someone in the same situation in future. The following configuration has been successfully tested and more sites should be easily added by adding to the following config. The following was added to a default

[SLUG] squid reverse proxy almost working - but only ever hitting default site

2009-08-25 Thread Ben Donohue
Hi all, Just to get squid reverse proxy 2.6 working with two sites for now... it seems to be working in that the access.log is registering hits but only for the default site. Default site is www.icafe.com.au other site is www.pamphlets.org.au If I bypass squid, I can port forward port 80 to

Re: [SLUG] Squid and File Serving

2007-08-03 Thread Chris Deigan
On 7/30/07, Stephen Black [EMAIL PROTECTED] wrote: I have been hitting the Linux documentation hard and after much learning I think I have decided on a course of action. I would like to get another computer and set up a Proxy Server for my network security and peace of mind. I have no idea

Re: [SLUG] Squid and File Serving

2007-08-01 Thread max
Try a firewall distro like Clark Connect (there are others too). There is a free community version, great web interface and a lot of functions; email and web servers, routing, port forwarding, vpn. A good thing. Max Stephen Black wrote: I have been hitting the Linux documentation hard and

Re: [SLUG] Squid and File Serving

2007-07-31 Thread Dean Hamstead
squid is proxying software, youd best use apache for web serving Dean Stephen Black wrote: I have been hitting the Linux documentation hard and after much learning I think I have decided on a course of action. I would like to get another computer and set up a Proxy Server for my network

Re: [SLUG] Squid and File Serving

2007-07-31 Thread Erik de Castro Lopo
Stephen Black wrote: I hear that squid is a popular proxy server but could I also use Squid as a file server for a web site that I will develop on the server? Squid is an excellent http proxy. However, it cannot as far as I know act as a http server. However, if you want a http server,

[SLUG] Squid and File Serving

2007-07-29 Thread Stephen Black
I have been hitting the Linux documentation hard and after much learning I think I have decided on a course of action. I would like to get another computer and set up a Proxy Server for my network security and peace of mind. I hear that squid is a popular proxy server but could I also use

[SLUG] squid experts - ports 81,8000

2006-07-24 Thread Grant Parnell - EverythingLinux
I'm stumped at the moment and I've been doing firewalls and setting up squid for years. My client has an ISP firewall, their own firewall, a proxy on the DMZ and an internal firewall and wishes to access a couple of http based services on ports 81 and 8000. Not usually a problem. I have

Re: [SLUG] squid experts - ports 81,8000

2006-07-24 Thread John Clarke
On Tue, Jul 25, 2006 at 01:18:48 +1000, Grant Parnell - EverythingLinux wrote: lynx http://www.some.site:81/ it returns a 503 and I can see NO PACKETS going to the site with tcpdump. Exactly the same with port 8000. The error Is your access blocked by an acl, e.g. Safe_ports?: [EMAIL

[SLUG] Squid accelerator + SSL

2005-06-06 Thread Carlo Sogono
Title: Squid accelerator + SSL I'm not sure if this is even possible. We have an Exchange server behind our Linux firewall runnning webmail on port 80. Would it be possible to run Squid as an accelerator on the firewall but adding SSL to it? So basically within our lan it uses http but from

Re: [SLUG] Squid accelerator + SSL

2005-06-06 Thread Bruce Badger
On Tue, 2005-06-07 at 12:00 +1000, [EMAIL PROTECTED] wrote: I'm not sure if this is even possible. We have an Exchange server behind our Linux firewall runnning webmail on port 80. Would it be possible to run Squid as an accelerator on the firewall but adding SSL to it? So basically

Re: [SLUG] Squid accelerator + SSL

2005-06-06 Thread Matt Moor
So, the way that we do this, along with a million other suckers running IIS is to use apache and mod_proxy and/or mod_backhand. Our apache server is configured to only serve SSL (i.e. redirects requests to port 80 to 443), and we have a vhost for the site in question, with mod_proxy pushing

RE: [SLUG] Squid: Sometimes files stop downloading after 1 mb

2005-05-10 Thread Joel Heenan
it is an intermittent problem. I guess I will post a bug report. -Original Message- From: Kevin Saenz [mailto:[EMAIL PROTECTED] Sent: Monday, May 09, 2005 8:34 PM To: [EMAIL PROTECTED] Cc: slug@slug.org.au Subject: Re: [SLUG] Squid: Sometimes files stop downloading after 1 mb what is your config file

Re: [SLUG] Squid: Sometimes files stop downloading after 1 mb

2005-05-09 Thread Kevin Saenz
what is your config file like? are you caching sites? how much disk space do you have? is your system swapping heaps? We have one squid server with 1Ghz CPU, 1 Gb RAM and 2 TB of disk space looking after 2800 ppl Hey SLUG, We are experiencing a strange problem with Squid. We start Squid and it

[SLUG] Squid: Sometimes files stop downloading after 1 mb

2005-05-08 Thread Joel Heenan
Hey SLUG, We are experiencing a strange problem with Squid. We start Squid and it runs fine at first. Then after a period of time it gets into a state where when downloading a file after just before it reaches the 1 mb mark the download pauses as if it has timed out. Once Squid is in this state

[SLUG] Squid Porn filters

2005-03-22 Thread Howard Lowndes
Does anyone know of any addon to Squid (probably commercial) that will provide, and more importantly, maintain a database of porn sites that can be blocked. I have a church school wanting this and we are running Squid on Linux as a transparent proxy. -- Howard. LANNet Computing Associates; Your

Re: [SLUG] Squid Porn filters

2005-03-22 Thread Michael Fox
On Wed, 23 Mar 2005 14:24:07 +1100, Howard Lowndes [EMAIL PROTECTED] wrote: Does anyone know of any addon to Squid (probably commercial) that will provide, and more importantly, maintain a database of porn sites that can be blocked. I have a church school wanting this and we are running

Re: [SLUG] Squid Porn filters

2005-03-22 Thread Craige McWhirter
On Wed, 2005-03-23 at 14:27 +1100, Michael Fox wrote: On Wed, 23 Mar 2005 14:24:07 +1100, Howard Lowndes [EMAIL PROTECTED] wrote: Does anyone know of any addon to Squid (probably commercial) that will provide, and more importantly, maintain a database of porn sites that can be blocked.

[SLUG] Squid configuration

2004-11-12 Thread Trevor Tregoweth
Hi All Was wondering if someone had any ideas on a squid.conf file, as I can't seem to get mine to work, the error I'm getting in the logs is below. 1100265318.516666 10.1.1.40 TCP_DENIED/403 1345 GET http://www.google.com.au / - NONE/- text/html I have opend my firewall, at least I hope I

[SLUG] Squid Proxy Browser detection

2004-08-23 Thread Peter Rundle
Sluggers, Quick Squid Question, is it possible to detect the users browser (assume yes) and then block / ignore the request based on the browser being used (dunno). I've been asked if it's possible to prevent users for accessing the internet via I.E and force them to use Mozilla because of the

Re: [SLUG] Squid Proxy Browser detection

2004-08-23 Thread John Clarke
On Tue, Aug 24, 2004 at 10:55:49AM +1000, Peter Rundle wrote: is it possible to detect the users browser (assume yes) and then block / ignore the request based on the browser being used (dunno). Something like this should work (warning: completely untested, if it breaks you get to keep both

Re: [SLUG] Squid Proxy Browser detection

2004-08-23 Thread Robert Collins
On Tue, 2004-08-24 at 10:55 +1000, Peter Rundle wrote: Sluggers, Quick Squid Question, is it possible to detect the users browser (assume yes) and then block / ignore the request based on the browser being used (dunno). I've been asked if it's possible to prevent users for accessing

Re: [SLUG] Squid Proxy Browser detection

2004-08-23 Thread Graham Smith
On Tue, 24 Aug 2004 11:32, Robert Collins wrote: On Tue, 2004-08-24 at 10:55 +1000, Peter Rundle wrote: Sluggers, Quick Squid Question, is it possible to detect the users browser (assume yes) and then block / ignore the request based on the browser being used (dunno). I've been

[SLUG] Squid cache not updating for some urls

2004-05-17 Thread Peter Rundle
Sluggers, I've got a problem with my squid cache not refreshing for certain urls like; http://www.bom.gov.au/weather/national/charts/synoptic.shtml If I remove the proxy settings from the client it gets the latest chart. Also if I stop squid and remake the cache dirs (squid -z) then the latest

Re: [SLUG] Squid cache not updating for some urls

2004-05-17 Thread James Gray
On Tue, 2004-05-18 at 11:40, Peter Rundle wrote: Sluggers, I've got a problem with my squid cache not refreshing for certain urls like; http://www.bom.gov.au/weather/national/charts/synoptic.shtml If I remove the proxy settings from the client it gets the latest chart. Also if I

Re: [SLUG] Squid cache not updating for some urls

2004-05-17 Thread Peter Rundle
Looking at that URL the BoM has gone to the trouble of including meta http-equiv=Pragma content=no-cache in the page. Is your proxy honouring that? Apparently not but I'm not sure why. My refresh_pattern statement is a bland refresh_pattern .0 20% 1440 I've just changed

Re: [SLUG] squid authentication questions

2004-04-20 Thread Alexander Samad
On Tue, Apr 20, 2004 at 06:40:02PM +1000, Grant Parnell wrote: On Tue, 20 Apr 2004, Alexander Samad wrote: On Tue, Apr 20, 2004 at 12:04:02PM +1000, Broun, Bevan wrote: Well, squid is running on linux! Currently we run squid-2.4 latest stable, but upgrading to 2.5 lastest stable

[SLUG] squid authentication questions

2004-04-19 Thread Broun, Bevan
Well, squid is running on linux! Currently we run squid-2.4 latest stable, but upgrading to 2.5 lastest stable is an option and from my reading so far this is probably needed. The current squid was compiled with --enable-auth-modules=SMB and we have a file on NT domain controller to limit

Re: [SLUG] squid authentication questions

2004-04-19 Thread Alexander Samad
On Tue, Apr 20, 2004 at 12:04:02PM +1000, Broun, Bevan wrote: Well, squid is running on linux! Currently we run squid-2.4 latest stable, but upgrading to 2.5 lastest stable is an option and from my reading so far this is probably needed. The current squid was compiled with

Re: [SLUG] squid reverse proxy

2004-02-13 Thread ksaenz
Thank you all for your helpful links, for some reason when I searched for reverse proxy I found howtos using apache mod_proxy I guess it's testing time :). I have been searching high and low, I was wondering if squid is capable of doing reverse proxy? Yup, it sure is. The following

[SLUG] squid reverse proxy

2004-02-11 Thread ksaenz
I have been searching high and low, I was wondering if squid is capable of doing reverse proxy? -- Regards Kevin Saenz Spinaweb Security, Trust, and Service P: 02 46205130 F: 02 46259243 M: 04 18455661 W: www.spinaweb.com.au -- SLUG - Sydney Linux User's Group Mailing List -

Re: [SLUG] squid reverse proxy

2004-02-11 Thread Mike MacCana
On Thu, 12 Feb 2004, ksaenz wrote: I have been searching high and low, I was wondering if squid is capable of doing reverse proxy? Yup. Apparently its pretty good too, as Microsoft use it (on Linux too). Try 'squid reverse proxy' in google. Mike -- SLUG - Sydney Linux User's Group Mailing

Re: [SLUG] squid reverse proxy

2004-02-11 Thread Gonzalo Servat
On Thu, 2004-02-12 at 11:47, ksaenz wrote: I have been searching high and low, I was wondering if squid is capable of doing reverse proxy? Yup, it sure is. The following straight forward document should help: http://www.ngogeeks.com/node/view/272 Regards, Gonzalo -- SLUG - Sydney Linux

Re: [SLUG] squid reverse proxy

2004-02-11 Thread Gonzalo Servat
On Thu, 2004-02-12 at 12:02, Gonzalo Servat wrote: On Thu, 2004-02-12 at 11:47, ksaenz wrote: I have been searching high and low, I was wondering if squid is capable of doing reverse proxy? Yup, it sure is. The following straight forward document should help:

Re: [SLUG] squid question

2004-01-20 Thread Malcolm V
On Tue, 2004-01-13 at 12:22, David Kempe wrote: snipped How can I get squid to behave in the same way (ie as though you specified the upstream proxy in the browser) for just this domain? You've probably solved this already, however cache_peer_domain proxy.upstream.net.au partsales.com.au will

Re: [SLUG] squid question

2004-01-20 Thread Robert Collins
On Tue, 2004-01-20 at 18:45, Malcolm V wrote: On Tue, 2004-01-13 at 12:22, David Kempe wrote: snipped How can I get squid to behave in the same way (ie as though you specified the upstream proxy in the browser) for just this domain? You've probably solved this already, however

Re: [SLUG] squid question

2004-01-20 Thread David Kempe
Robert Collins wrote: never_direct is the thing you want. Rob I haven't solved it yet. I tried this: acl partsales dstdomain .partsales.com.au cache_peer proxy.syd.pacific.net.au parent 8080 3130 cache_peer_access proxy.pacific.net.au allow partsales never_direct allow partsales And it just

Re: [SLUG] squid question

2004-01-20 Thread David Kempe
David Kempe wrote: the browser does work - whats wrong with my cache_peer statement? replying to my own post :/ my cache_peer lacked a no-query qualifier. seems I can't get ICP off the pacific proxies. would have been nice for squid to tell me ICP didn't make it :/ oh well, thanks all for your

[SLUG] squid question

2004-01-12 Thread David Kempe
Hi sluggers, I have a question about squid. I am trying to allow access to a particular site for a client who has a squid proxy. Access to the site works if you specifiy the ISP's upstream cache in the browser prefs. Access does not work if you don't specify the upstream proxy and if you have

Re: [SLUG] Squid proxy Config

2003-12-29 Thread Malcolm V
On Wed, 2003-12-17 at 17:11, DE LUCA Ben wrote: I want to set up squid to pass all requests that it cant fulfill to my isp's non transparent proxy. Now I think the line is some thing like cache_peer proxy.my.isp.com parent 8080 0 default no-query snipped Can I tell my proxy to only use

[SLUG] Squid proxy Config

2003-12-16 Thread DE LUCA Ben
I want to set up squid to pass all requests that it cant fulfill to my isp's non transparent proxy. Now I think the line is some thing like cache_peer proxy.my.isp.com parent 8080 0 default no-query My machine still cache still seems to connect to not the parent but goes looking for sites by

Re: [SLUG] Squid + Winbind + squirrelmail

2003-07-08 Thread Alexander Samad
Tried the use defualt domain = yes , but did not seem to work. This is authencticating through apache+pam Alex On Mon, Jul 07, 2003 at 09:39:55AM +1000, Alexander Samad wrote: Nope but I did try winbind use default domain = yes - whihc gave me an error, not sure where I got it from.

[SLUG] Squid + Winbind + squirrelmail

2003-07-06 Thread Alexander Samad
Hi, I have a server with squirrelmail and cyrus (admin, common, imapd) install and samba + winbind. My question has any one gotten cyrus to authenticate users against a NT domain using winbind through pam ? I have been trying this, testing with squirrelmail. I have setup winbind, getent

Re: [SLUG] Squid + Winbind + squirrelmail

2003-07-06 Thread Alexander Samad
Well another 1/2 hour of playing with it fixed most of my problems, seems like there are 2 pwcheck programs, one compiled to check just /etc/shadow and the other to use the pam modules! so a quick reconfigure and bobs your uncle. But I still want to be able to map login ids to mailbox/email

Re: [SLUG] Squid + Winbind + squirrelmail

2003-07-06 Thread Simon Bryan
Alexander Samad said: Well another 1/2 hour of playing with it fixed most of my problems, seems like there are 2 pwcheck programs, one compiled to check just /etc/shadow and the other to use the pam modules! so a quick reconfigure and bobs your uncle. But I still want to be able to map

Re: [SLUG] Squid + Winbind + squirrelmail

2003-07-06 Thread Alexander Samad
Nope but I did try winbind use default domain = yes - whihc gave me an error, not sure where I got it from. Any way will give it a go and see what happens Thanks On Mon, Jul 07, 2003 at 08:29:26AM +1000, Simon Bryan wrote: Alexander Samad said: Well another 1/2 hour of playing with it

[SLUG] SQUID logfile parsers/analysers

2003-06-02 Thread Gareth Walters
G'day all, Now I have the ntlm authentication working I need a squid logfile parser/analyser that will handle the usernames. I am not having much luck, I have been using pwebstats but it doesn't handle usernames at all. Has anyone got any recommendations? Ideally I would like monthly reports

Re: [SLUG] SQUID logfile parsers/analysers

2003-06-02 Thread Peter Hardy
On Mon, 2 Jun 2003 12:02:11 +1000 Gareth Walters wrote: G'day all, Now I have the ntlm authentication working I need a squid logfile parser/analyser that will handle the usernames. I am not having much luck, I have been using pwebstats but it doesn't handle usernames at all. I've been

Re: [SLUG] SQUID logfile parsers/analysers

2003-06-02 Thread Jeff_Allison%BLACKSHAW
Sarg and webalizer both Handle usernames webalizer seems to be better for statistics and sarg for blaming people. Depends on what you want it for Jeff [EMAIL PROTECTED] wrote on 02/06/2003 12:02:11: G'day all, Now I have the ntlm authentication working I need a squid logfile

Re: [SLUG] SQUID logfile parsers/analysers

2003-06-02 Thread Simon Bryan
Gareth Walters said: G'day all, Now I have the ntlm authentication working I need a squid logfile parser/analyser that will handle the usernames. I am not having much luck, I have been using pwebstats but it doesn't handle usernames at all. Has anyone got any recommendations? Ideally I

[SLUG] squid authentication with winbind.

2003-05-30 Thread Gareth Walters
G'day all, I am setting up a new web proxy/cache using squid and I am trying to get authentication working with squid from winbind. The reasoning behind it was to avoid the username/password dialog for web access but still force authentication. The problem I am finding is after following the

Re: [SLUG] squid authentication with winbind.

2003-05-30 Thread Grant Parnell - LinuxHelp
On Fri, 30 May 2003, Gareth Walters wrote: I am setting up a new web proxy/cache using squid and I am trying to get authentication working with squid from winbind. I've not actually done this specific method myself but I have used various other proxy auth schemes. The reasoning behind it

Re: [SLUG] squid authentication with winbind.

2003-05-30 Thread Gareth Walters
- Original Message - From: James Gray [EMAIL PROTECTED] To: Gareth Walters [EMAIL PROTECTED] Sent: Friday, May 30, 2003 10:57 AM Subject: Re: [SLUG] squid authentication with winbind. Yeh it took me 3 days (on and off) to get squid+winbind (authenticating to a Win2K in^H^HActive

Re: [SLUG] squid authentication with winbind.

2003-05-30 Thread James Gray
On Fri, 30 May 2003 09:35 am, Gareth Walters wrote: G'day all, I am setting up a new web proxy/cache using squid and I am trying to get authentication working with squid from winbind. The reasoning behind it was to avoid the username/password dialog for web access but still force

Re: [SLUG] squid authentication with winbind.

2003-05-30 Thread James Gray
On Fri, 30 May 2003 11:51 am, Gareth Walters wrote: - Original Message - From: James Gray [EMAIL PROTECTED] To: Gareth Walters [EMAIL PROTECTED] Sent: Friday, May 30, 2003 10:57 AM Subject: Re: [SLUG] squid authentication with winbind. Yeh it took me 3 days (on and off) to get

Re: [SLUG] squid authentication with winbind.

2003-05-30 Thread James Gray
On Fri, 30 May 2003 12:18 pm, James Gray wrote: On Fri, 30 May 2003 11:51 am, Gareth Walters wrote: - Original Message - From: James Gray [EMAIL PROTECTED] To: Gareth Walters [EMAIL PROTECTED] Sent: Friday, May 30, 2003 10:57 AM Subject: Re: [SLUG] squid authentication

Re: [SLUG] squid authentication with winbind.

2003-05-30 Thread Simon Bryan
Gareth Walters said: I am using IE and Mozilla, neither one ask for a username/password if I get rid of the ntlm lines in squid.conf then it pops up a dialog and works but otherwise all it does is fail. I have checked and rechecked it. :( Any ideas? I also found that I needed to use the

Re: [SLUG] squid authentication with winbind.

2003-05-30 Thread Gareth Walters
Thanks for the help guys (James, Simon) It all worked as soon as I updated to a newer version of samba 2.2.8a ---Gareth Walters -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] squid authentication with winbind. (NTLM)

2003-05-30 Thread Robert Collins
Short summary of the needed steps: build samba with the winbindd channel enabled for client auth. Get squid 2.5Stable 3. DO NOT use stable 1. Really. build with --enable-auth=ntlm --enable-ntlm-auth-helpers=winbind --with-samba-sources=/path/to/samba.headers follow the samba FAQ on joining the

Re: [SLUG] Squid, smb_auth and transparent proxying.

2003-03-17 Thread mkraus
To: [EMAIL PROTECTED] cc: Subject:Re: [SLUG] Squid, smb_auth and transparent proxying. quote who=Robert Collins Is there a way to make smb_auth work with squid and transparent proxying? No. It's in the FAQ. IIRC it's in squid.conf.default

Re: [SLUG] Squid, smb_auth and transparent proxying.

2003-03-17 Thread Robert Collins
On Tue, 2003-03-18 at 09:05, [EMAIL PROTECTED] wrote: Theoretically, yes. No. NTLM does not fix the problems caused by interception (aka transparent) caching. What can I do to kill this meme? Rob Practically, I'm wading through documentation... Any pointers or references appreciated...

[SLUG] Squid, smb_auth and transparent proxying.

2003-03-16 Thread mkraus
G'day all, I'm trialling using smb_auth for access to our squid proxy. I'm using transparent proxying with squid, however I've found that this won't allow access to permitted users, and I have to point the browser at the proxy manually. Is there a way to make smb_auth work with squid and

Re: [SLUG] Squid, smb_auth and transparent proxying.

2003-03-16 Thread Matthew Palmer
On Mon, 17 Mar 2003 [EMAIL PROTECTED] wrote: I'm using transparent proxying with squid, however I've found that this won't allow access to permitted users, and I have to point the browser at the proxy manually. Is there a way to make smb_auth work with squid and transparent proxying? Can

Re: [SLUG] Squid, smb_auth and transparent proxying.

2003-03-16 Thread Robert Collins
On Mon, 2003-03-17 at 17:00, [EMAIL PROTECTED] wrote: G'day all, I'm trialling using smb_auth for access to our squid proxy. I'm using transparent proxying with squid, however I've found that this won't allow access to permitted users, and I have to point the browser at the proxy

Re: [SLUG] Squid, smb_auth and transparent proxying.

2003-03-16 Thread Jeff Waugh
quote who=Robert Collins Is there a way to make smb_auth work with squid and transparent proxying? No. It's in the FAQ. IIRC it's in squid.conf.default. And it was on this list about a week ago. There is a theoretical approach, but no-one has had time to implement it. You can do

Re: [SLUG] Squid, smb_auth and transparent proxying.

2003-03-16 Thread Kevin Saenz
I'm trialling using smb_auth for access to our squid proxy. I guess that is good for a small network what happens when the network grows to a larger size and fixing acls for each user in squid becomes a pain in the proverbial. But I can see an up side given that Authentication through smb

Re: [SLUG] Squid, smb_auth and transparent proxying.

2003-03-16 Thread Robert Collins
On Mon, 2003-03-17 at 17:21, Jeff Waugh wrote: quote who=Robert Collins Is there a way to make smb_auth work with squid and transparent proxying? No. It's in the FAQ. IIRC it's in squid.conf.default. And it was on this list about a week ago. There is a theoretical

Re: [SLUG] Squid, smb_auth and transparent proxying.

2003-03-16 Thread Anthony Wood
On Mon, Mar 17, 2003 at 05:23:08PM +1100, Kevin Saenz wrote: I'm trialling using smb_auth for access to our squid proxy. I guess that is good for a small network what happens when the network grows to a larger size and fixing acls for each user in squid becomes a pain in the

Re: [SLUG] Squid, smb_auth and transparent proxying.

2003-03-16 Thread Robert Collins
On Mon, 2003-03-17 at 17:31, Anthony Wood wrote: On Mon, Mar 17, 2003 at 05:23:08PM +1100, Kevin Saenz wrote: I'm trialling using smb_auth for access to our squid proxy. I guess that is good for a small network what happens when the network grows to a larger size and fixing acls

Re: [SLUG] Squid, smb_auth and transparent proxying.

2003-03-16 Thread Robert Collins
On Mon, 2003-03-17 at 17:23, Kevin Saenz wrote: I'm trialling using smb_auth for access to our squid proxy. I guess that is good for a small network what happens when the network grows to a larger size and fixing acls for each user in squid becomes a pain in the proverbial. But I can see

[SLUG] Squid / SMB / PAM

2003-03-11 Thread mkraus
G'day all We use Samba here (2.2.6) and Squid. Due to our high internet usage, I've had to block access for most people. I've been allowing access on an IP basis, however this isn't ideal (we use dhcp) and I'd like to be able to block/allow access on a user-level basis. Now, I understand

Re: [SLUG] Squid / SMB / PAM

2003-03-11 Thread Broun, Bevan
on Wed, Mar 12, 2003 at 10:01:11AM +1100, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: G'day all We use Samba here (2.2.6) and Squid. Due to our high internet usage, I've had to block access for most people. I've been allowing access on an IP basis, however this isn't ideal (we use

Re: [SLUG] Squid / SMB / PAM

2003-03-11 Thread James Gray
On Wed, 12 Mar 2003 10:01 am, [EMAIL PROTECTED] wrote: G'day all We use Samba here (2.2.6) and Squid. Due to our high internet usage, I've had to block access for most people. I've been allowing access on an IP basis, however this isn't ideal (we use dhcp) and I'd like to be able to

Re: [SLUG] Squid / SMB / PAM

2003-03-11 Thread Dave Airlie
I've been allowing access on an IP basis, however this isn't ideal (we use dhcp) and I'd like to be able to block/allow access on a user-level basis. Now, I understand that this can be done with PAM. Is winbind also required? you can do this with Squid and the NTLM stuff I think.. or you

Re: [SLUG] Squid / SMB / PAM

2003-03-11 Thread mkraus
PROTECTED] Subject:Re: [SLUG] Squid / SMB / PAM on Wed, Mar 12, 2003 at 10:01:11AM +1100, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: G'day all We use Samba here (2.2.6) and Squid. Due to our high internet usage, I've had to block access for most people. I've been allowing

Re: [SLUG] Squid / SMB / PAM

2003-03-11 Thread Broun, Bevan
on Wed, Mar 12, 2003 at 10:38:33AM +1100, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: The Samba server is a PDC (internal machine). Squid runs on the gateway/firewall (seperate machine). Both are Mandrake 8.2 machines. Squid is installed via the squid-2.4.STABLE4-2mdk.rpm (from Mandrake). Is

Re: [SLUG] Squid / SMB / PAM

2003-03-11 Thread Phil Scarratt
respond to brounb To: [EMAIL PROTECTED] cc: [EMAIL PROTECTED] Subject:Re: [SLUG] Squid / SMB / PAM on Wed, Mar 12, 2003 at 10:01:11AM +1100, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: G'day all We use Samba here (2.2.6) and Squid. Due to our high

RE: [SLUG] Squid / SMB / PAM

2003-03-11 Thread Simon Bryan
We use Samba here (2.2.6) and Squid. Due to our high internet usage, I've had to block access for most people. I've been allowing access on an IP basis, however this isn't ideal (we use dhcp) and I'd like to be able to block/allow access on a user-level basis. Now, I understand that this

Re: [SLUG] Squid / SMB / PAM

2003-03-11 Thread Stewart
On Wednesday, March 12, 2003, at 12:01 PM, Simon Bryan wrote: smb_auth is a doddle to setup if you have a Windows Domain, however it asks each user for a username and password when they start browsing, this can annoy some people. smb_auth is well documented. Winbind is not needed in this case.

Re: [SLUG] Squid / SMB / PAM

2003-03-11 Thread Robert Collins
On Wed, 2003-03-12 at 12:08, Stewart wrote: On Wednesday, March 12, 2003, at 12:01 PM, Simon Bryan wrote: smb_auth is a doddle to setup if you have a Windows Domain, however it asks each user for a username and password when they start browsing, this can annoy some people. smb_auth

[SLUG] SQUID on a dial-up gateway

2003-02-18 Thread Chris
Gday Everyone, Okay -- ive got a small Debian Server which serves samba shares, etc. Clients can connect to the net through a small php file, which executes pon. Now my problem is that im running (well, at least trying) to run a squid proxy server. However squid will refuse to work until the

Re: [SLUG] SQUID on a dial-up gateway

2003-02-18 Thread Robert Collins
On Tue, 2003-02-18 at 20:52, Chris wrote: Gday Everyone, Okay -- ive got a small Debian Server which serves samba shares, etc. Clients can connect to the net through a small php file, which executes pon. why not have ppp-up.d start squid? However how can i get squid to start without being

[SLUG] squid woes.

2003-02-15 Thread James Gregory
I'm once again attempting to get a transparent proxy running here. First, the problem: Forms that use the GET method (and conceivably the post method also, but I haven't checked) time out. eg, for google: 1045317375.516 1031 192.168.9.20 TCP_MISS/200 1746 GET http://www.google.com.au/ -

Re: [SLUG] squid woes.

2003-02-15 Thread umug
James Gregory [EMAIL PROTECTED] writes: 1045317625.028 239153 192.168.9.20 TCP_MISS/504 1055 GET http://www.google.com.au/search? - NONE/- - ^ # TAG: hierarchy_stoplist # A list of words which, if found in a URL, cause the object to # be handled directly

Re: [SLUG] squid woes.

2003-02-15 Thread Robert Collins
On Sun, 2003-02-16 at 01:06, James Gregory wrote: I'm once again attempting to get a transparent proxy running here. First, the problem: Forms that use the GET method (and conceivably the post method also, but I haven't checked) time out. eg, for google: Details: ISP block port 80

[SLUG] Squid - configuration or telstra issue

2003-02-02 Thread Nik Belajcic
Hello, I just joined the list and this is my first posting. I am new to Linux so some of the questions may be trivial. As an experiment I installed mandrake 9 on one old box with the intention to use it as a gateway/mail/proxy server replacing a w2k box with 602Pro LanSuite (which works

Re: [SLUG] Squid - configuration or telstra issue

2003-02-02 Thread mkraus
: Subject:[SLUG] Squid - configuration or telstra issue Hello, I just joined the list and this is my first posting. I am new to Linux so some of the questions may be trivial. As an experiment I installed mandrake 9 on one old box with the intention to use it as a gateway/mail/proxy server

[SLUG] SQUID and NTLM with winbind need help please - I am very close!

2003-01-25 Thread Simon Bryan
I originally posted this to the Squid list but have had no response so hoping someone here can help. Hi all, I am having trouble getting ntlm authentication to work!! Have installed winbind and it tests OK. Have finally worked out how to compile Squid with ntlm support. wb_group (see below)

Re: [SLUG] SQUID and NTLM with winbind need help please - I amvery close!

2003-01-25 Thread Robert Collins
On Sun, 2003-01-26 at 10:18, Simon Bryan wrote: I originally posted this to the Squid list but have had no response so hoping someone here can help. Not true - Henrik replied to your email. We're waiting for you to follow up on his suggestion. Rob -- GPG key available at:

[SLUG] squid without DNS?

2003-01-19 Thread mlh
(Apologies if you've seen this on the squid list, but I'm a bit desperate) Is it possible to use squid without using DNS at all? I am using single parent cache, and I don't need names in my log files. So I don't think I _need_ DNS, but I can't see if there is way to tell squid not to do any

Re: [SLUG] squid without DNS?

2003-01-19 Thread John Clarke
On Mon, Jan 20, 2003 at 05:10:24PM +1100, [EMAIL PROTECTED] wrote: Is it possible to use squid without using DNS at all? Why do you want to do this? I am using single parent cache, and I don't need names in my log files. That's easy: log_fqdn off So I don't think I _need_ DNS, but I

[SLUG] squid proxy setup

2002-11-19 Thread Ken Foskey
Schools net have disabled port 80 and I have to use the upstream proxy. As far as I understand it I have to setup the upstream under cache-peer and the type of parent. To actually find out the settings I 'should' be able to pull the .pac file and read it to find out the settings. Is there any

Re: [SLUG] squid proxy setup

2002-11-19 Thread Robert Collins
On Wed, 2002-11-20 at 09:00, Ken Foskey wrote: Schools net have disabled port 80 and I have to use the upstream proxy. As far as I understand it I have to setup the upstream under cache-peer and the type of parent. To actually find out the settings I 'should' be able to pull the .pac

[SLUG] Squid install problem

2002-10-02 Thread Simon Bryan
Hi all, I am just installing 2.5 on a new proxy server (Deltacom Super Skinny) P4 1.6ghz 512MB RAM RH7.2 Am having two major problems: 1. Squid is giving a 'Network Unreachable' error for any URL that contains a '?' see next line for log entry. 1033609694.017 17 10.192.1.14 TCP_MISS/503

Re: [SLUG] Squid install problem

2002-10-02 Thread Robert Collins
On Thu, 2002-10-03 at 13:55, Simon Bryan wrote: Hi all, I am just installing 2.5 on a new proxy server (Deltacom Super Skinny) P4 1.6ghz 512MB RAM RH7.2 Am having two major problems: 1. Squid is giving a 'Network Unreachable' error for any URL that contains a '?' see next line for log

  1   2   >