I will have to double check. The server is offsite, so I will need to go and
run some more tests. We have bypassed the issue by allowing users to connect
directly to this address via the BorderManager child.
I am just pursuing this now in order to determine if this is actually a bug
that needs fix
Jack wrote:
> Is it possible to use W2K native mode active directory for authenticating
> proxy users.
Yes.
You can use either LDAP (always works) or winbind (requires that support
for NTLM is enabled in your AD, is by default)
Regards
Henrik
What do you get in Squid access.log on a request for
http://webmail.company.com/?
Are you using any redirectors?
Regard
Henrik
Jay Turner wrote:
>
> Hi Robert,
>
> Thanks for your reply. Checking the log file the CONNECT method is provided
> to squid with the hostname webmail.company.com howev
Jason Parlevliet wrote:
> Works fine with 2.4, and it should work with 2.5. Because it
> uses external hooks in Squid, it should work with any version
> that supports external redirectors
It does.
Regards
Henrik
"Lightfoot.Michael" wrote:
> I have tried both striping across two or more disks and
> individual disk filesystems and concur with Robert.
> There is no measurable performance gain in striping and
> there is a cache availablility gain in using more than
> one cache directory (you never lose the wh
Jay Turner wrote:
>
> But it is maintained by Red Hat who backport any security patches to the 2.4
> version they ship with 7.3.
Sure.. you get the most blatant security fixes, but nearly no other bug
fixes.
If you have any issue with Squid-2.4 and ask here on Squid-users the
first response will
Daniel Barron wrote:
> > I would recommend matching the member attribute of group objects.
>
> I agree, however that seems more difficult as squid only passes the user name
> in the form 'daniel' where as the filter needs it in
> 'cn=daniel,ou=test,dc=jadeb,dc=com' so I opted for (b).
This is wh
See http://devel.squid-cache.org/projects.html#follow_xff
Regards
Henrik
"Jason M. Kusar" wrote:
>
> Not sure if this is possible, but does anyone know whether it is
> possible for squid to look at the ip specified in the X-Forwarded-For
> header instead of the origin ip? Basically I want to us
louie miranda wrote:
>
> You mean add this line? Or add a meta-refresh rate?
>
>
No. This line only tells your browser to expect that the document is
written using UTF-8 character encoding.. has nothing to do with
freshness.
What robert is talking about is the Expires: and/or Cache-Control:
ma
[EMAIL PROTECTED] wrote:
> > The correct question is: How do you get a version of the AIM client
> > which supports HTTP proxy authentication.
>
> The AIM client does support HTTP proxy and I have had it work with
> Netscape Proxy in the past with no problems.
With authentication?
Regards
Henri
You can try the experimental log_access directive:
http://devel.squid-cache.org/projects.html#log_access
Please report any success or failure using this directive to
[EMAIL PROTECTED]
Regards
Henrik
leon wrote:
>
> Hi to all
>
> I want to know if is it possible, to exclude some ip address
Hello All,
Is it possible to use W2K native mode active directory for authenticating
proxy users.
Thanks and Regards
Jack
__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.y
Hi Robert,
Thanks for your reply. Checking the log file the CONNECT method is provided
to squid with the hostname webmail.company.com however the IP address that
is shown is the world address rather than the address specified in the
/etc/hosts file.
ie
/etc/hosts entry: 10.14.12.122 webmail.compa
You mean add this line? Or add a meta-refresh rate?
> You need to issue appropriate metadata from your web server.
> Squid only knows what the webserver tells it about the freshness and
> lifetime of the cached obejcts.
--
thanks,
louie miranda
chikka asia, inc.
noc +63-2(7535000-511)
Engin
On Wed, 2003-02-05 at 15:38, louie miranda wrote:
> hello im having problems on my squid server, here's the scenario.
> I have a website outside of my ip/block i update it once' a while
> like every minute. Now when i try to reload the page that i have
> update squid does not update it i mean it st
hello im having problems on my squid server, here's the scenario.
I have a website outside of my ip/block i update it once' a while
like every minute. Now when i try to reload the page that i have
update squid does not update it i mean it still cache the old one.
when i tried to access it directly
>
> Would it make sense to configure the remaining 5 drives using
> LVM to create one large cache disk... or simply create 5
> individual cache disks???
>
I have tried both striping across two or more disks and individual disk filesystems
and concur with Robert. There is no measurable perf
On Wed, 2003-02-05 at 12:02, Jay Turner wrote:
> But it is maintained by Red Hat who backport any security patches to the 2.4
> version they ship with 7.3.
>
> If you could please re-read my post you will note that I have recompiled
> with --disable-internal-dns and it successfully references /etc
But it is maintained by Red Hat who backport any security patches to the 2.4
version they ship with 7.3.
If you could please re-read my post you will note that I have recompiled
with --disable-internal-dns and it successfully references /etc/hosts for
http:// pages. My question relates to https://
Hello
>i would appreciate to use squidguard. I have been looking on its website for
>quite a while but the latest version I see is 1.2.0 which works AFAIK with
>squid 2.3.
>Anybody using this with squid 2.4 or 2.5? Or does anybody know if there is a
>newer version to come?
Works fine with 2.4, an
On Wed, 2003-02-05 at 10:41, la. w wrote:
> Last time I asked about this I got the impression that I was 'on my
> own' and this functionality wasn't included in a standard squid
> distribution:
Definately not.
> Feel free to shred the design ideas with alternates -- I can either
> justify,
Last time I asked about this I got the impression that I was 'on my own' and this
functionality wasn't included in a standard squid distribution:
In rough order of complexity:
1) Be able to log squid traffic to a file: not just headers or status, but content of
requests, posts, cookies, and res
On Wed, 2003-02-05 at 10:03, leon wrote:
> Hi to all
>
> I want to know if is it possible, to exclude some ip address from logging ,
> cause i'm using squid also as icq-proxy
> and i don't want to log all this type of connection .
>
> Is possible ?
Not today :p. There is a custom logging projec
Hi to all
I want to know if is it possible, to exclude some ip address from logging ,
cause i'm using squid also as icq-proxy
and i don't want to log all this type of connection .
Is possible ?
Leon Zimmer
On Wed, 2003-02-05 at 07:34, Cavanagh, Kevin B wrote:
> Hi there,
>
> We have six (6) Proliant DL380 G3 servers running RedHat Linux V8.0 with
> 2.5GB of RAM and 6 x 18.2GB disks (configured as JBODs). We've installed
> Squid V2.5 and are now wondering about how best to configure our disks.
>
Thanks Henerik,
Does that mean then that my acl lines are OK, I don't need to switch
them ? I just need to add
Other cases to my acl i.e.
Acl UnauthorisedUser proxy_auth MyDomain\BlockedUser
MyDomain\blockeduser BlockedUser blockeduser
Despite the case sensitive issue, it does seem to ignore the
You may need to list the user both with and without domain name (the acl
matches the name exacly as typed in the login box).
Also, keep in mind that Squid by default is case sensitive. See the
proxy_auth acl documentation for details.
Regards
Henrik
Chris & Val Bamber wrote:
>
> Hi,
>
> I hav
This is a known problem. See bug #199 (also includes a workaround).
Regards
Henrik
Fernando Caba wrote:
>
> Hi Squid Users, i'm tryng to compile squid-2.5.STABLE1 with IP-Filter in
> Solaris 8x86 with gcc 2.95.3.
> Running ./configure --enable-ipf-transparent i got no problems, besides
> ipfil
Do you see any ill effects besides this being logged?
The fix is most likely to lower the debug detail of this message to not
have it logged in the normal debug level 1..
Regards
Henrik
[EMAIL PROTECTED] wrote:
>
> Hi,
>
> Someone can help us about the message below:
>
> 2003/02/04 13:29:36|
Sure thing.
See the following squid.conf directives: (you need all of them)
cache_peer, to teach Squid that there is another proxy
cache_peer_access, to teach Squid for what this other proxy may be
used
never_direct, to teach Squid that certain sites cannot be reached
directly on the Inter
On 4 Feb 2003, Henrik Nordstrom wrote:
> mån 2002-09-30 klockan 13.58 skrev [EMAIL PROTECTED]:
>
> > I am attempting to run AIM configured to use port 80 and setup for HTTP
> > proxy and I put in my proxy server, proxy port, and authentication
> > information.
> >
> > However, when I try to co
Hi there,
We have six (6) Proliant DL380 G3 servers running RedHat Linux V8.0 with
2.5GB of RAM and 6 x 18.2GB disks (configured as JBODs). We've installed
Squid V2.5 and are now wondering about how best to configure our disks.
Would it make sense to configure the remaining 5 drives using LVM
Hi,
I have implemented NTLM and it works very nice. We have a well Know
public user on our network which I want to block completely from
anything.
If the user logs on and launches Internet Explorer then all that is
presented the Username/logon banner and despite entering the correct
password the
Hi Squid Users, i'm tryng to compile squid-2.5.STABLE1 with IP-Filter in
Solaris 8x86 with gcc 2.95.3.
Running ./configure --enable-ipf-transparent i got no problems, besides
ipfilter package was found.
But, when i run make i got the following errors:
gcc -DHAVE_CONFIG_H
-DDEFAULT_CONFIG_FILE=\"/
hi folks,
following situation:
I have a squid running which all users use for internet access. Our
Co-Bussiness has another proxy
which controls who can access there _intranet_ (the Proxy IP is the only
allowed one).
So, i want my users to use my proxy if they want to access the internet, and
if
[EMAIL PROTECTED] wrote:
>
> We have a squid-2.5.STABLE1 in a RedHat 7.3 kernel 2.4.18-3 with authentication
> in AD (W2K), winbind and NTLM.
There has been a thread on this during the previous month.
It seems that the error is due to browsers aborting requests before
NTLM negotiation is com
[EMAIL PROTECTED] wrote:
>
> Hi,
>
> Someone can help us about the message below:
>
> 2003/02/04 13:29:36| AuthenticateNTLMHandleReply: invalid callback data.
> Releasing helper '0x823ed58'.
> 2003/02/04 13:30:19| AuthenticateNTLMHandleReply: invalid callback data.
> Releasing helper '0x823cca
Hi,
Someone can help us about the message below:
2003/02/04 13:29:36| AuthenticateNTLMHandleReply: invalid callback data.
Releasing helper '0x823ed58'.
2003/02/04 13:30:19| AuthenticateNTLMHandleReply: invalid callback data.
Releasing helper '0x823cca8'.
2003/02/04 13:32:51| AuthenticateNTLMHan
mån 2002-09-30 klockan 13.58 skrev [EMAIL PROTECTED]:
> I am attempting to run AIM configured to use port 80 and setup for HTTP
> proxy and I put in my proxy server, proxy port, and authentication
> information.
>
> However, when I try to connect I get an Authentication error back from
> squid
tis 2003-02-04 klockan 13.57 skrev zulkarnain:
> I've 2GB RAM on my squid box, 4GB swap file and 145GB
> cache dir. The squid use ALL of 2GB RAM,
> I think it would be great if I could use the 4GB swap
> file (it is totaly unused). Is it possible to
> configure squid to use swap file?
Yes, remove
All Squid-2.X versions does.
Regards
Henrik
tis 2003-02-04 klockan 13.18 skrev Ampugnani, Fernando:
> Hi all,
> Squid 2.5 STABLE1 support smb_auth?
>
> Thanks in advanvce.
>
> > Fernando Ampugnani
> > EDS Argentina
> > Tel: 5411 4704 3428
> > Mail: [EMAIL PROTECTED]
> >
> >
-
tis 2003-02-04 klockan 11.45 skrev Jost Krieger:
> squid.conf has
> cache_dir ufs /net/sunu426/disc2 28000 64 256
You want to use aufs or diskd. With ufs Squid will quickly be limited by
disk I/O.
both aufs and diskd works fine on Solaris.
aufs is simpler to install but make sure to use a curre
Yes, that's right. I have understood now, but what
what is the solution of my problem, I still don't
understand? Why do I have to restart my SuSEfirewall2
sometimes to make my user can visit internet?
Please tell me.
--- Henrik Nordstrom <[EMAIL PROTECTED]> wrote:
> tis 2003-02-04 klockan 11.24 sk
zulkarnain wrote:
>
> I'm using squid-2.4.STABLE7 on Redhat 7.3.
> I prefer to tweak the cache_mem parameter rather then
> reduce the cache_dir. would you please let me know the
> 1rst step to tweak the cache_mem?
cache_mem is specified in squid.conf.
Note that this parameter does not contro
I have squid setup with NTLM and Basic authentication both authenticating
against an NT domain.
I am attempting to run AIM configured to use port 80 and setup for HTTP
proxy and I put in my proxy server, proxy port, and authentication
information.
However, when I try to connect I get an Authen
I'm using squid-2.4.STABLE7 on Redhat 7.3.
I prefer to tweak the cache_mem parameter rather then
reduce the cache_dir. would you please let me know the
1rst step to tweak the cache_mem?
best regards,
zulkarnain
--- Marc Elsen <[EMAIL PROTECTED]> wrote:
>
>
> zulkarnain wrote:
> >
> > HI,
> >
> I've 2GB RAM on my squid box, 4GB swap file and 145GB
> cache dir. The squid use ALL of 2GB RAM,
> I think it would be great if I could use the 4GB swap
> file (it is totaly unused). Is it possible to
> configure squid to use swap file?
Squid uses swap automatically, if there is not enough memor
zulkarnain wrote:
>
> HI,
>
> I've 2GB RAM on my squid box, 4GB swap file and 145GB
> cache dir. The squid use ALL of 2GB RAM,
> I think it would be great if I could use the 4GB swap
> file (it is totaly unused). Is it possible to
> configure squid to use swap file?
Which version of squid are
HI,
I've 2GB RAM on my squid box, 4GB swap file and 145GB
cache dir. The squid use ALL of 2GB RAM,
I think it would be great if I could use the 4GB swap
file (it is totaly unused). Is it possible to
configure squid to use swap file?
FYI, here is my squid.conf:
cache_mem 256 MB
cache_swap_low 94
Hi all,
Squid 2.5 STABLE1 support smb_auth?
Thanks in advanvce.
> Fernando Ampugnani
> EDS Argentina
> Tel: 5411 4704 3428
> Mail: [EMAIL PROTECTED]
>
>
"Steck, Steffen M." wrote:
>
> Hi,
> i would appreciate to use squidguard. I have been looking on its website for
> quite a while but the latest version I see is 1.2.0 which works AFAIK with
> squid 2.3.
> Anybody using this with squid 2.4 or 2.5? Or does anybody know if there is a
> newer versi
Dear Choth
you can add the following in squid.conf as
acl denywebsite dstdomain .xyz.com .
http_access deny denywebsite
This will probably solve your problem
Singh
On Tue, 4 Feb 2003, Puth Chan Choth wrote:
> Dear Marc,
>
> Thank you so much for your answer. You're really help m
Hi,
I am not quite comfortable yet with using the delay
pools feature of SQUID. So a few basic questions.
I have created acls for specific ip address ranges for
which I need to limit the bandwidth usage. Now do I
need to enter the " http_access allow aclname " for
the every new acl created for usin
On Mon, Feb 03, 2003 at 08:42:39PM +0100, Henrik Nordstrom wrote:
> What OS?
Solaris 8 (didn't I have that in the subject?).
> What Squid version? (STABLE1 is not a Squid version.. 2.5.STABLE1 is)
Yep.
> What tuning have you applied to TCP/IP for high rate proxies? Most OS:es
> needs to be slig
I would recommend upgrading to Squid-2.5.. Squid-2.4 is no longer
maintained or bugfixed by the Squid developers, and Squid-2.5 supports
/etc/hosts (squid-2.4 does not unless compiled with
--disable-internal-dns)
Regards
Henrik
tis 2003-02-04 klockan 10.19 skrev Jay Turner:
> Hi All,
>
> I have
tis 2003-02-04 klockan 11.24 skrev Prabu Subroto:
> Hi Ilker...
>
> I am using IP "192.168.23.237" and if try to "grep" a
> ccording to my IP number, I found nothing.
> Strange...
> And if do "tail -n 1000 ./access.log" than I only find
> my network number "192.168.23.0" but I don't know
> what's
Hi,
i would appreciate to use squidguard. I have been looking on its website for
quite a while but the latest version I see is 1.2.0 which works AFAIK with
squid 2.3.
Anybody using this with squid 2.4 or 2.5? Or does anybody know if there is a
newer version to come?
Thx
Steffen
On Mon, Feb 03, 2003 at 01:41:53PM -0600, Peter Smith wrote:
> I would make 2 guesses. First is, what type of NICs do you have? There
> have been many problems with the TG3/Broadcom series of cards.
I'm working with a totally unloaded Gigabit interface. The bottleneck is
on the Internet connect
The error looks harmless to me. If Squid starts you can most likely
ignore this error.
But I am a little confused on your Squid configuration for other
reasons.. is this Squid to act as a reverse proxy infront of your HTTP
server, or as a transparent intercepting proxy for your local users?
The c
having http_port at the default of "any address" is perfectly fine for
dialup use. It does not make Squid request any specific IP address but
will accept requests on whatever IP address your box currently have,
even if those addresses did not exists when Squid started.
The cause is somewhere else.
Hi Ilker...
I am using IP "192.168.23.237" and if try to "grep" a
ccording to my IP number, I found nothing.
Strange...
And if do "tail -n 1000 ./access.log" than I only find
my network number "192.168.23.0" but I don't know
what's wrong.
Today morning the problem comes again. I had to
restart my
/etc/hosts is supported for squid 2.5, not for squid 2.4.
> Mit freundlichen Grüßen / regards
> Werner Rost
>
> -
> ZF Boge GmbH
> Werner Rost
> IT
> Friesdorfer Str. 175
> D-53175 Bonn
>
>
> phone:+49/228/3825 420
> fa
Hi All,
I have resolved this issue I posted about last week by simply rebuilding the
RedHat src RPM with --disable-internal-dns.
I have now added the internal IP address of the web server to the proxy
servers /etc/hosts file and all is well. The proxy connects to the internal
address of the proxy
Hi list:
I´ve been configured Squid-2.5_1STABLE to caching my WWW server,
this is the configuration, everything is Ok, but I´m getting one error
message and I can´t fix it, any suggestion...
cache_mem 16 MB
shutdown_lifetime 0 seconds
memory_po
Dear Marc,
Thank you so much for your answer. You're really help me a lot.
Thanks,
Choth
Marc Elsen wrote:
> Puth Chan Choth wrote:
> >
> > Dear All,
> >
> > I am very new to SQUID and I would like to block some porn
> > websites? How can I do it via squid.conf file?
> >
> > Thank you so much
Puth Chan Choth wrote:
>
> Dear All,
>
> I am very new to SQUID and I would like to block some porn
> websites? How can I do it via squid.conf file?
>
> Thank you so much for your assistance.
ACL mechanism's can be used as in :
http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.4
If y
Dear All,
I am very new to SQUID and I would like to block some porn
websites? How can I do it via squid.conf file?
Thank you so much for your assistance.
Regards,
Choth
67 matches
Mail list logo
