RE: [squid-users] MAC bacsed ACL

You can write The MAC addresses in a file: macs.arp 00:76:45:89:89:45 00:76:45:89:89:46 00:76:45:89:89:47 . . . Then in squid.conf acl secure_mac arp "/usr/local/squid/etc/macs.arp" . . . http_access allow secure_mac Dámaso. -Mensaje original- De: hare ram [mailto:[EMAIL PROTECTED]] E

Re: [squid-users] advanced caching question!!

You surely do not want to do this, or your are likely to make many web server owners very upset. Regards Henrik On Wednesday 19 February 2003 05.18, chuckdutrow wrote: > I have just added a satellite link to my network, I am using squid > to cache http requests for my large network, I want to k

Re: [squid-users] Refresh pattern

>From the squid.conf documentation; 'Min' is the time (in minutes) an object without an explicit expiry time should be considered fresh. The recommended value is 0, any higher values may cause dynamic applications to be erroneously cached unless the application desi

Re: [squid-users] MAC bacsed ACL

And if you use MAC he can change to any free MAC address.. The generally recommended identification method if IP is not sufficient is to use authentication. This way your access logs and access controls will show within reasonable doubt who the user really is. Regards Henrik On Wednesday 19

Re: [squid-users] MAC bacsed ACL

On Wednesday 19 February 2003 05.38, Raja R wrote: > Also I think MAC can not cross subnets. It will work fine if the > squid server and the client PCs are in the same subnet. > AM I Right Henrik ? Yes. MAC addresses only exists within a single Ethernet network (including bridged/switched segmen

Re: [squid-users] Winbind and Windows groups

http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#ss23.5 third paragraph under "supported samba releases". 'Squid-2.5.STABLE2 will support Samba-2.2.6 to Samba-2.2.7a and hopefully later Samba versions. To use Squid-2.5.STABLE2 with Samba versions 2.2.5 or ealier the new --with-samba-sources=.

RE: [squid-users] MAC bacsed ACL

This has been the problem with win9x machine where they can freely reconfigure everything. I used the policy editor for this where they dont have access to the network configuration plus i barred them running regedit and dos prompts. I guess thats enough for them stop messing around. With your 2

Re: [squid-users] MAC bacsed ACL

Hi thanks for the suggestion Lets take example if X- have IP address 192.168.1.1 X is not Online and Y - Try to use the same IP 192.168.1.1 he will get access, if X - want connect then they will be conflict right ? how to solve this kind of problem thanks hare - Original Message - Fro

RE: [squid-users] MAC bacsed ACL

This will be accomplished by making a pinpoint ACL ip address in a file Example: acl limited src "/etc/squid/limited" and inside limited file you can have 192.168.100.2/32 . . . 192.168.xxx.yyy/32 AND ACL full_access src "/etc/squid/full" xxx.xxx.xxx.xxx/32 and so on That would ease your

Re: [squid-users] MAC bacsed ACL

Hi Henrik You were saying the MAC based ACL is no so Secure then what methode is secure, if i does the the IP based Access List User can change any free IP and Start Browsing, and other PC who have the same IP will have IP conflict or so. what is the recomendation for the securing the access for

RE: [squid-users] url blocking

try the http://www.squid-cache.org/Doc/FAQ/. But it is something like acl allowed_url dst yahoo.com http_access allow allowed_url http_access deny all -lp > -Original Message- > From: Glen Hernaez Supan [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, 19 February 2003 2:08 PM > To: [EMAIL

Re: [squid-users] SAFE WAY TO DELETE CACHE

On Tue, 18 Feb 2003, Marc Elsen wrote: Hello Marc My squid is seems to be in serious problem. My cache size is 256MB and although around 150 clents(win98 & 2000) are browsing. for quite some time It is showing CONNECTION FAILED (111) system returned. My cache seems to be fulled. I am unabl

RE: [squid-users] MAC bacsed ACL

Also I think MAC can not cross subnets. It will work fine if the squid server and the client PCs are in the same subnet. AM I Right Henrik ? Raja. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 18, 2003 10:07 PM To: hare ram Cc: [EMAIL PROTEC

[squid-users] advanced caching question!!

I have just added a satellite link to my network, I am using squid to cache http requests for my large network, I want to know if anyone knows how I can conf squid to use the satellite link to just constantly update my cache. I want this to work non stop, I dont want any of my users to ever h

[squid-users] url blocking

dear all i'm a newbie linux user, anybody here help me how to configure my squid to allow only specific url? ex. yahoo.com hotmail.com. my squid is configured without restriction to all url, meaning all url are accessible to all clients with internet access. more power glen

[squid-users] Refresh pattern

Hi, I would like to know what is the unit of min and max in refresh_pattern? I have override the expire and lastmod header so that i can cache non-cachable content. but doing this causes the server keeping old cache even though the server has made the modification. my current setting is like this

[squid-users] No buffer space available

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, Since this morning I ocasionally receive the message "(105) No buffer space available". I'd been trying to "do my homework" with Google but the recommended answers vary from kernel recompilation to modifications in the squid.conf file. This

[squid-users] Fwd: Re: Accept-Language caching?

-- Forwarded Message -- Subject: Re: Accept-Language caching? Date: Tue, 18 Feb 2003 23:03:22 +0100 From: Henrik Nordstrom <[EMAIL PROTECTED]> To: Jason Geffner <[EMAIL PROTECTED]>, [EMAIL PROTECTED] On Tuesday 18 February 2003 20.58, Jason Geffner wrote: > I am a student at C

Re: [squid-users] client autoconfig setup question

I got it to work, must of had a syntax error in my javascript. Thanks, Nick On Tue, 2003-02-18 at 15:37, Nicholas Ritter wrote: > I have the file in the document root, and I see the client fetching the > file, but the file doesn't seem to be configuring the browser to use the > proxy server for

Re: [squid-users] client autoconfig setup question

I got it to work, must of had a syntax error in my javascript. Thanks, Nick On Tue, 2003-02-18 at 15:37, Nicholas Ritter wrote: > I have the file in the document root, and I see the client fetching the > file, but the file doesn't seem to be configuring the browser to use the > proxy server for

Re: [squid-users] client autoconfig setup question

Have you reconfigured your web server (Apache?) to provide the correct mime type? If not many browsers will not accept the configuration script. To debug the configuration scripts look at the javascript error console and make use of alert() or other methods to provide feedback... a javascript

Re: [squid-users] Squid and LDAP

Well.. you are looking at an old helper then. Grab one from a more recent Squid version than Squid-2.5 (i.e. the Squid-3 development snapshots). Using a or even less looking at a helper from a obsolete and no longer supported Squid version (Squid-2.4) is defenitely not recommended. Note: The

Re: [squid-users] Compile with SSL Fails

On Tuesday 18 February 2003 22.28, John Peak wrote: > Sorry. I have tried that as well. > > This should work as long as md5.h and the other headers are in the > /usr/local/include/openssl/include directory, correct?! Thanks. Your OpenSSL md5.h file in in /usr/local/include/openssl/md5.h riht?

Re: [squid-users] *****SPAM***** Compile with SSL Fails

On Tuesday 18 February 2003 22.01, Robert Collins wrote: > On Wed, 2003-02-19 at 07:31, John Peak wrote: > > - I have OpenSSL 0.9.6 installed and the header files are > > definately in /usr/local/include. I have checked and rechecked > > this numerous times. - Specifying the "--with-openssl" does

Re: [squid-users] browsing from cache?

On Tuesday 18 February 2003 19.42, Michael wrote: > How would I set up Squid to return the cached page if neither the > parent proxy or a direct connection is available (like when my lan > losses connection to the Internet)? I've been working with it for a > while but am not having much luck. Thank

Re: [squid-users] Compile with SSL Fails

Sorry. I have tried that as well. This should work as long as md5.h and the other headers are in the /usr/local/include/openssl/include directory, correct?! Thanks. John > On Wed, 2003-02-19 at 07:31, John Peak wrote: > > >> - I have OpenSSL 0.9.6 installed and the header files are definatel

Re: [squid-users] client autoconfig setup question

I have the file in the document root, and I see the client fetching the file, but the file doesn't seem to be configuring the browser to use the proxy server for some reason. I figure it is an error in the javascript code, but I am not all that familiar with javascript. As stands, i copied the jav

Re: [squid-users] client autoconfig setup question

I keep mine on my local webserver; in DocumentRoot if your running Apache. (I would just read the httpd.conf file to see where that is - I used to know where it was on Apache but that slipped my mind) Then I set the location http://www.myserver.au/proxy.pac on the browser setup. On Sun, Feb 16, 2

Re: [squid-users] *****SPAM***** Compile with SSL Fails

On Wed, 2003-02-19 at 07:31, John Peak wrote: > - I have OpenSSL 0.9.6 installed and the header files are definately in > /usr/local/include. I have checked and rechecked this numerous times. > - Specifying the "--with-openssl" does not seem to help. I have tried the > following configurations

Re: [squid-users] Squid and LDAP

he he !!! I tought it was working !!! This helper is LDAPv2 ! :=( It was "upgraded" to v3 on the newer versions ? (I'm using squid-2.4STABLE7) - Original Message - From: "Estevam Viragh Junior" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 18, 2003 5:20 PM Subject: R

[squid-users] *****SPAM***** Compile with SSL Fails

SPAM: Start SpamAssassin results -- SPAM: This mail is probably spam. The original message has been altered SPAM: so you can recognise or block similar unwanted mail in future. SPAM: See http://spamassassin.org/tag/ for more details. SPAM: SPAM: Content an

Re: [squid-users] Squid and LDAP

> ld is looking for libldap.[a or so], the main LDAP function library > where all the LDAP client code is found.. and once it fins this it will > also look for liblber.[a or so], the ASN1 encoding (and more) function > library of OpenLDAP. :-) That's It !!! I just changed "XTRA_LIBS=-L /usr/local

[squid-users] browsing from cache?

How would I set up Squid to return the cached page if neither the parent proxy or a direct connection is available (like when my lan losses connection to the Internet)? I've been working with it for a while but am not having much luck. Thanks. Peace, Love, Linux ;):):-):):-):):-)8') Michael McGl

Re: [squid-users] a problem with access denied

Am 18 Feb 2003 08:39:35 +1100 schrieb Robert Collins: > > But now the problem. As soon as I configure the proxy in the Netscape > > cache-settings I get an Access denied. > > You need to enable acceleration *and* proxying if you want this. > see httpd_accel_with_proxy. I already did that. Meanwh

Re: [squid-users] external_acl_type in squid2.5

Thanks again and congratulations ! Quoting Henrik Nordstrom <[EMAIL PROTECTED]>: > As a man page the Squid distribution tarball, automatically installed in > prefix/man/man8/squid_ldap_auth.8 if you select to build the helper. > > The current version of the helper and corresponding documentatio

Re: [squid-users] Squid and LDAP

ld is looking for libldap.[a or so], the main LDAP function library where all the LDAP client code is found.. and once it fins this it will also look for liblber.[a or so], the ASN1 encoding (and more) function library of OpenLDAP. The error is seen when the helper does exit before Squid has clos

Re: [squid-users] Transparent PROXY error with port 8080

As you suspect for this to even have a chance of working correctly you need to use httpd_accel_port virtual or else Squid will use port 80 even if the request was intercepted from port 8080.. (at least in theory..) Regards Henrik tis 2003-02-18 klockan 17.32 skrev Marcelo M. Miranda: > Hel

Re: [squid-users] external_acl_type in squid2.5

As a man page the Squid distribution tarball, automatically installed in prefix/man/man8/squid_ldap_auth.8 if you select to build the helper. The current version of the helper and corresponding documentation can also be found from the authors at http://marasystems.com/download/LDAP_Group/ Regards

[squid-users] Squid and LDAP

Hy list, (I've search about this, but I couldn't find nothing related...) I have two questions regarding squid with LDAP: 1 - I'm trying to make the LDAP module which comes with squid-2.4STABLE7 on a OpenBSD3.2 system, but I'm having the following error: --- [root@raphsody ~/pkg/squid-2.4.S

Re: [squid-users] external_acl_type in squid2.5

Thanks a lot Sorry to ask so but where could I find the documentation on the squid_ldap_group helper (I think I have gone through all the links and I could not find it) > It is a generic method for defining ACLs relying on external programs > performing the actual match. > > A common use is

Re: [squid-users] MAC bacsed ACL

Why are you using MAC based ACLs? MAC based acls are technically NOT more secure than IP based ACLs, only more complex to define as each MAC address is 12 hex numbers.. 200 MAC addresses is not very many for Squid to manage. To ease management I would recommend putting them in a separate file and

Re: [squid-users] external_acl_type in squid2.5

It is a generic method for defining ACLs relying on external programs performing the actual match. A common use is for group membership lookups, for example to give different LDAP groups different privileges. For instructions relating how to use the directive for this purpose see the documentation

Re: [squid-users] cache_dir

Either way is fine. General recommendation for cache_dir is one cache_dir per disk. However, 64GB och cache will require quite a bit of memory. See the Squid FAQ for details. (not really related to the question, but is good to know) Regards Henrik tis 2003-02-18 klockan 15.38 skrev Jack: > He

[squid-users] Transparent PROXY error with port 8080

Hello, I have a linux gateway acting as a firewall and a proxy server with transparent proxy enabled. I am running RedHat 7.2 with iptables and squid 2.4STABLE7 compiled with transparent proxy support. I make redirections from requests coming on ports 80 and 8080 as follows: iptables -t n

Re: [squid-users] SAFE WAY TO DELETE CACHE

Thanks, I am already using these commands but I didn't know they could be added to the file ! Marie If you have a tool for editing the "trusted sites" ACL then extending this tool to shut down squid, remove the cache, run "squid -z" and then start Squid again should be a simple task. Regard

[squid-users] MAC bacsed ACL

Hi all iam trying to make MAC based ACL, i have 200PC MAC based ACL, looks very long, does any one have alternative method to use this 200 MAC address ACL in short thanks hare

RE: [squid-users] NTLM/wb_group/Multiple Domains

Reviewing the Changelog for Samba 2.2.8pre1 turned up the following entry: '7. Fix bug in group enumeration in winbindd' Anyone think this might be the root cause of my problem? I may install 2.2.8pre1 on another test box and see what happens. -Original Message- From: Sorisio,Chris [mai

[squid-users] external_acl_type in squid2.5

Hello again, I am using Squid2.5 with basic authentication from an LDAP serveur and it works fine. However, there is a new tag on this version which is "external_acl_type" and I don't manage to understand its use. Has anyone ever used it ? Thanks in advance --

RE: [squid-users] cache_dir

> I divided my cache directory does not exceed first level directories to 16 > > Which will be the best option for better performance ? I think both would be the same. There is no need to let the first level directories below 16. You can rise that number as you need. Hermann

[squid-users] cache_dir

Hello All, I configured squid and set 64GB for cache_dir. Can i set whole 64 GB as single cache_dir as cache_dir aufs /cache01 65535 158 255 or cache_dir aufs /cache01 6656 16 256 cache_dir aufs /cache02 6656 16 256 cache_dir aufs /cache03 6656 16 256 cache_dir aufs /cache04 6656 16 256 cac

[squid-users] Re: delay class 4 - announcement

Great! This is a commonly requested feature. Regards Henrik mån 2003-02-17 klockan 13.05 skrev Robert Collins: > Just an small announcement: > > class 4 delay pools are fully integrated into squid-3 HEAD. > > a class 4 delay pool is just like a class 3 pool, but with an additional > collectio

Re: [squid-users] Authentication & IE 6

This is covered nicely in the FAQ, most specifically http://www.squid-cache.org/Doc/FAQ/FAQ-5.html#ss5.12 Boniforti Flavio wrote: > > Hy everybody! > I've just started to administer a squid proxy which uses authentication. > > Now I get this trouble: > > When I access the web from a client,

RE: [squid-users] Authentication & IE 6

Try setting up IE6 to check for new page with every visit. Tools - Internet Options - Settings *button* - > -Original Message- > From: Boniforti Flavio [mailto:[EMAIL PROTECTED]] > Sent: 18 February 2003 03:20 > To: [EMAIL PROTECTED] > Subject: [squid-users] Authentication & IE 6 > > >

Re: [squid-users] Authentication & IE 6

Boniforti Flavio wrote: > > Hy everybody! > I've just started to administer a squid proxy which uses authentication. > > Now I get this trouble: > > When I access the web from a client, I (obviously) get the logon mask. I > put the correct username/password and press OK. > What now happens is

[squid-users] Authentication & IE 6

Hy everybody! I've just started to administer a squid proxy which uses authentication. Now I get this trouble: When I access the web from a client, I (obviously) get the logon mask. I put the correct username/password and press OK. What now happens is that my browser (IE6SP1) returns an error pag

Re: [squid-users] SAFE WAY TO DELETE CACHE

If you have a tool for editing the "trusted sites" ACL then extending this tool to shut down squid, remove the cache, run "squid -z" and then start Squid again should be a simple task. Regards Henrik tis 2003-02-18 klockan 10.51 skrev [EMAIL PROTECTED]: > Hi all, > > concerning this issue, I ha

[squid-users] Bandwidth gone.

I have compiled squid-2.5Stable1 on a Redhat linux 7.1 box ... I am running delay pools, but seem to use mauch more bandwidth than before ... I have a 1Mbit line for surfing and email, but have limited it to 768Kb, which works. I do have a parent cache setup too. I graph my server with mrtg from

RE: [squid-users] auth. user against AD group

(works with all > modes of AD, but cannot provide NTLM) > > Regards > Henrik > > > tis 2003-02-18 klockan 09.50 skrev [EMAIL PROTECTED]: > > Hello, > > > > I'm using Squid-2.5.STABLE1 and samba-2.2.5 (also tried > samba-2.2.4) i > > also

Re: [squid-users] Too many open files

You may try this: echo "65535" > /proc/sys/fs/file-max Ciao Cliff - Original Message - From: "HBK" <[EMAIL PROTECTED]> To: "Henrik Nordstrom" <[EMAIL PROTECTED]>; "HBK" <[EMAIL PROTECTED]> Cc: "squid-users" <[EMAIL PROTECTED]> Sent: Saturday, February 15, 2003 1:22 PM Subject: Re: [squi

Re: [squid-users] SAFE WAY TO DELETE CACHE

Hi all, concerning this issue, I have an additional question: I need to clear my cache every time the file "trusted sites" related to the acl trusted_sites dstdomain "trsuted sites" is updated. Is there a way to have it done automatically ? Regards, Marie-Carmen Rey

RE: [squid-users] auth. user against AD group

id-2.5.STABLE1 and samba-2.2.5 (also tried samba-2.2.4) > i also tried samba-2.2.7a and squid-2.5.STABLE1-20030218 > > but always the same. I see the trusted Domain`s groups. And the AD is "DISCONNECTED" > > ...sorry but could there be something at the Win2000 AD Box?

Re: [squid-users] Content analysis

On Tue, 2003-02-18 at 19:31, Henrik Nordstrom wrote: > On Tuesday 18 February 2003 08.46, Robert Collins wrote: > > On Tue, 2003-02-18 at 11:00, Chris Monson wrote: > > > > I'd suggest you work with squid-3, it's got an interface for > > hooking into the client side - clientStreams. > > > > Also, t

RE: [squid-users] auth. user against AD group

Hello, I'm using Squid-2.5.STABLE1 and samba-2.2.5 (also tried samba-2.2.4) i also tried samba-2.2.7a and squid-2.5.STABLE1-20030218 but always the same. I see the trusted Domain`s groups. And the AD is "DISCONNECTED" ...sorry but could there be something at the Win2000 AD Box?

Re: [squid-users] auth. user against AD group

Which Samba version are you using? And which Squid version? Regards Henrik On Tuesday 18 February 2003 08.59, [EMAIL PROTECTED] wrote: > Hallo, > > changing the config do not solve the problem. > I think there is something wrong whit the winbindd, is it possible? > > when i make a wbinfo "--sequ

Re: [squid-users] Content analysis

On Tuesday 18 February 2003 08.46, Robert Collins wrote: > On Tue, 2003-02-18 at 11:00, Chris Monson wrote: > > Is there an easy way to configure squid to filter reply content > > through an external program? I'm interested in doing analysis on > > the content that squid returns to the client. > >

Re: [squid-users] Winbind and Windows groups

For the current snapshots you need to see the information regarding Squid-2.5.STABLE2. What is said about Squid-2.5.STABLE1 does not apply to the current snapshots as the solution for 2.5.STABLE2 is already in place there. When you use a snapshot it is recommended to look into on the Known Bug

Re: [squid-users] SAFE WAY TO DELETE CACHE

"Mr. Singh" wrote: > > Dear/users > > What is the safest way to clear cache ? Can I delete cache dirs and run > squid -z safely. Normally yes, if squid is stopped first. > My cache is full now? If adequate cache dir's are specified in squid.conf , then the cache can be 'full' in terms of

[squid-users] MRTG chart shows lower throughput

Hi all ! We currently have a Squid Cache (Version 2.4.STABLE6) installed on a = FreeBSD box (OS 4.7). This cache was placed behind a PIX FIREWALL 515 = connected directly to a Cisco Router 3600. Prior the days when we had not put our cache to our campus, the MRTG = chart monitoring the throughou

Re: [squid-users] SAFE WAY TO DELETE CACHE

On Tue, 2003-02-18 at 19:04, Mr. Singh wrote: > Dear/users > > What is the safest way to clear cache ? Why? There is no need to manually delete the cache - squid will do that for you. Rob -- GPG key available at: . signature.asc Description: Th

[squid-users] SAFE WAY TO DELETE CACHE

Dear/users What is the safest way to clear cache ? Can I delete cache dirs and run squid -z safely. My cache is full now? Help Me ? T. Singh --