[squid-users] External ACL with Ident

2003-06-11 Thread Nathan_LeNevez
Hi Guys, I have a fairly unique squid setup that I still cannot get working 100%. I am hoping someone on this list may have a similar setup, or be able to shine some light on what it is I am doing wrong. Here goes: Every workstation in the building runs the IDENTD service under windows. This has

[squid-users] 2 different Proxy Authentication

2003-06-11 Thread Wildy Candra
Dear All, My network consist of: Checkpoint Firewall NT4 Domain Controller Proxy Server (using NAT with Checkpoint Firewall)-> Microsoft Proxy Server 2.0 Currently, the client is using IE to browse to internet through the Microsoft Proxy Server 2.0 with NT4 domain authentication(NTLM). I have

[squid-users] RE: Squid/Applet/SSL

2003-06-11 Thread Glenn Reynolds (DSL AK)
> Hi > > I'm having an interesting problem running a third party applet over SSL > thru Squid. The applet starts up ok and downloads a small amount of data > fine. It has 4 lines items that I can load more details about - 3 of the > line items don't have much detail so load fine. However, one o

[squid-users] Problem restarting all redirectors

2003-06-11 Thread Lightfoot.Michael
I am sometimes getting the following in cache.log when either a log rotation or a reconfigure takes place. It is a symptom of not all my redirectors (Ad Zapper) being restarted: 2003/06/12 09:30:14| ipcCreate: fork: (12) Not enough space 2003/06/12 09:30:14| WARNING: Cannot run '/usr/local/squid

[squid-users] load balancing HTTP servers using Squid

2003-06-11 Thread Bernhard Erdmann
Hi, I'm searching for a software load balancer for HTTP servers. Scenario: We have two web servers in Germany and two in the USA for german content. For US/english content there are two web servers in the USA and two in Germany. The setup is similar, so I'll concentrate to a single case. Dream

Re: [squid-users] Chaining squid to another vendor proxy....and F TP

2003-06-11 Thread Henrik Nordstrom
On Wednesday 11 June 2003 21.41, Clint Davis wrote: > microsoft KB article #199376 shows my error. This article deals > with FTP sessions "flipping" to read-only ( which implies that IE > can do R/W). At least thats what I gleam from this article. IE can do R/W FTP when it speaks FTP to a FTP se

Re: [squid-users] Chaining squid to another vendor proxy....and FTP

2003-06-11 Thread Henrik Nordstrom
On Wednesday 11 June 2003 19.44, Clint Davis wrote: > Im using my squid to forward to BlueCoat proxy device. HTTP works > fine. When my IE or Netscape issues an FTP request to squid, which > gets forwarded to BC proxy, the result is a read-only session. I > cannot do PUTs in this scenario. Squid

Re: [squid-users] still looking for help getting dns resolution done by the parent tests=IN_REP_TO,DOUBLE_CAPSWORD version=2.31 tests=IN_REP_TO version=2.31 tests=IN_REP_TO version=2.31 tests=IN_REP_TO version=2.31

2003-06-11 Thread Brian Hechinger
On Wed, Jun 11, 2003 at 07:19:53PM +0200, Henrik Nordstrom wrote: > > And the "all" acl is defined before this? yup. the default: acl all src 0.0.0.0/0.0.0.0 > (see "squid -k parse") complains not at all. -brian -- "You know, evil comes in many forms, be it a man-eating cow or Joseph Stalin.

[squid-users] Chaining squid to another vendor proxy....and FTP

2003-06-11 Thread Clint Davis
Im using my squid to forward to BlueCoat proxy device. HTTP works fine. When my IE or Netscape issues an FTP request to squid, which gets forwarded to BC proxy, the result is a read-only session. I cannot do PUTs in this scenario. Squid is 2.5. Is this an issue of chaining two proxies? Is it a

Re: [squid-users] Segmentation Fault

2003-06-11 Thread Henrik Nordstrom
ons 2003-06-11 klockan 18.38 skrev [EMAIL PROTECTED]: > I have just upgraded my squid to version 2.5.STABLE3 and now I'm receiving > a "Segmentation Fault" message when parsing the squid.conf file. > > This error is occurring in the second "DENY_INFO" line of my file. http://www.squid-cache.org

Re: [squid-users] still looking for help getting dns resolutiondone by the parent tests=IN_REP_TO,DOUBLE_CAPSWORD version=2.31tests=IN_REP_TO version=2.31 tests=IN_REP_TO version=2.31

2003-06-11 Thread Henrik Nordstrom
ons 2003-06-11 klockan 18.34 skrev Brian Hechinger: > On Wed, Jun 11, 2003 at 06:30:59PM +0200, Henrik Nordstrom wrote: > > > > Triple check your always_direct/never_direct rules. If the request is > > forced to not go direct (always_direct deny, never_direct allow) then > > Squid will either send

Re: [squid-users] windows update not working withsquid squid-2.4.STABLE7-4

2003-06-11 Thread Henrik Nordstrom
ons 2003-06-11 klockan 18.37 skrev John Weez: > > Here is the output of squids access.log when i try to connect to > window supdate page Nothing strange there... Have you enabled any anonymization features in Suqid? (http_header_access/http_header_replace in Squid-2.5) If you have then thes

RE: [squid-users] Location rewrites and rproxy

2003-06-11 Thread Mike Kelson
Henrik, I guess no response from my last email means that you are not interested. Could you suggest someone that might be? Regards Mike -Original Message- From: Mike Kelson Sent: 10 June 2003 13:57 To: Henrik Nordstrom Cc: [EMAIL PROTECTED] Subject: RE: [squid-users] Location rewrites

[squid-users] Segmentation Fault

2003-06-11 Thread tadm
Hi, I have just upgraded my squid to version 2.5.STABLE3 and now I'm receiving a "Segmentation Fault" message when parsing the squid.conf file. This error is occurring in the second "DENY_INFO" line of my file. deny_info ERRO_PORN porn deny_info ERRO_PORNSITES pornsites deny_info ERRO_CHAT chat

Re: [squid-users] still looking for help getting dns resolution done by the parent tests=IN_REP_TO,DOUBLE_CAPSWORD version=2.31 tests=IN_REP_TO version=2.31 tests=IN_REP_TO version=2.31

2003-06-11 Thread Brian Hechinger
On Wed, Jun 11, 2003 at 06:30:59PM +0200, Henrik Nordstrom wrote: > > Triple check your always_direct/never_direct rules. If the request is > forced to not go direct (always_direct deny, never_direct allow) then > Squid will either send the request to a parent or reject the request. there are no

Re: [squid-users] Proxy Chaining

2003-06-11 Thread Henrik Nordstrom
ons 2003-06-11 klockan 18.01 skrev Matthieu BOUCHINET: > Does everybody know if I can threat proxy chaining from a Squid Server to a > Windows 2000 server without proxy server ? > I cannot change the Squid configuration and must receive the requests like > this. What is the Windows 2000 server ru

Re: [squid-users] still looking for help getting dns resolutiondone by the parent tests=IN_REP_TO,DOUBLE_CAPSWORD version=2.31tests=IN_REP_TO version=2.31

2003-06-11 Thread Henrik Nordstrom
ons 2003-06-11 klockan 17.04 skrev Brian Hechinger: > yeah, it's in /etc/hosts, and i even tried the IP address right in the squid > config file, made no difference. Triple check your always_direct/never_direct rules. If the request is forced to not go direct (always_direct deny, never_direct all

[squid-users] Proxy Chaining

2003-06-11 Thread Matthieu BOUCHINET
Hi, Does everybody know if I can threat proxy chaining from a Squid Server to a Windows 2000 server without proxy server ? I cannot change the Squid configuration and must receive the requests like this. Thank, _ Matthieu BOUCHINET CERIEL, l'Architecte de vos projets i

Re: [squid-users] still looking for help getting dns resolution done by the parent tests=IN_REP_TO,DOUBLE_CAPSWORD version=2.31 tests=IN_REP_TO version=2.31

2003-06-11 Thread Brian Hechinger
On Wed, Jun 11, 2003 at 04:37:34PM +0200, Christoph Haas wrote: > > I believe that you need to have the plain IP address of your parent > proxy set in the "cache_peer" directive. Or at least put it into > /etc/hosts. If you have a policy where you forward all requests to the yeah, it's in /etc/ho

Re: [squid-users] simple SQUID config file

2003-06-11 Thread Christoph Haas
Hi, list... After having a PM talk with Daniel he told me that after using Squid 2.3 stable 5 the problem was solved. He saw his IE crashed when trying to authenticate users. However I'm sure that this is not a Squid problem. :) EOT Christoph -- ~ ~ ".signature" [Modified] 3 lines --100%--

Re: [squid-users] still looking for help getting dns resolution done by the parent tests=IN_REP_TO,DOUBLE_CAPSWORD version=2.31 tests=IN_REP_TO version=2.31 tests=IN_REP_TO version=2.31

2003-06-11 Thread Brian Hechinger
On Wed, Jun 11, 2003 at 10:27:54AM -0400, Brian Hechinger wrote: > > > > 1. never_direct allow all > > i use: never_direct allow my_networks, is that ok? or should i use all? i cahnged my_networks to all with no affect. it still insists on doing dns locally. -brian -- "You know, evil comes i

Re: [squid-users] still looking for help getting dns resolution done by the parent tests=IN_REP_TO,DOUBLE_CAPSWORD version=2.31

2003-06-11 Thread Christoph Haas
> On Wed, Jun 11, 2003 at 12:06:43AM +0200, Henrik Nordstrom wrote: > > You have to make your Squid not depend on any DNS lookups to forward > > the request to your parent. On Wed, Jun 11, 2003 at 09:16:27AM -0400, Brian Hechinger wrote: > and how do i do that? I believe that you need to have th

[squid-users] restrict downloads by time limit

2003-06-11 Thread RAHUL T. KARTHA
This mail is probably spam. The original message has been attached along with this report, so you can recognize or block similar unwanted mail in future. See http://spamassassin.org/tag/ for more details. Content preview: Hi list As you can see I with a lot of help from the mailing list have

Re: [squid-users] still looking for help getting dns resolution done by the parent tests=IN_REP_TO,DOUBLE_CAPSWORD version=2.31 tests=IN_REP_TO version=2.31

2003-06-11 Thread Brian Hechinger
On Wed, Jun 11, 2003 at 04:22:07PM +0200, Henrik Nordstrom wrote: > > 1. never_direct allow all i use: never_direct allow my_networks, is that ok? or should i use all? > 2. do not use dst or srcdomain acl types (well, in theory you can use > these if your dns properly rejects Internet data..)

Re: [squid-users] still looking for help getting dns resolutiondone by the parent tests=IN_REP_TO,DOUBLE_CAPSWORD version=2.31

2003-06-11 Thread Henrik Nordstrom
ons 2003-06-11 klockan 15.16 skrev Brian Hechinger: > On Wed, Jun 11, 2003 at 12:06:43AM +0200, Henrik Nordstrom wrote: > > > > You have to make your Squid not depend on any DNS lookups to forward > > the request to your parent. > > and how do i do that? 1. never_direct allow all 2. do not us

Re: [squid-users] Performance and stupid questions

2003-06-11 Thread Ralf Hildebrandt
I'll take Udo into this. When talking to him, he mentioned that our choice of XFS for the cache was mainly caused by XFS better performance when writing large amounts of data to disk. Also it seems that after a lot of creating and deleting files (which happens a lot in caches I would think), XFS ke

RE: [squid-users] Performance and stupid questions

2003-06-11 Thread Chaillot Nicolas
I tried squid on an other box : IBM Xseries 232, 1,13 GHz, 768 Mo Ram, 1 Hard drive (Raid0) for the system 3 Hard drive (Raid0) for the squid cache. Noatime, Reiserfs. Linux 9 out-of-the-box, no firewall, Kernel 2.4.20, squid build by me with this options: --enable-external-acl-helpers=winbind_grou

Re: [squid-users] still looking for help getting dns resolution done by the parent tests=IN_REP_TO,DOUBLE_CAPSWORD version=2.31

2003-06-11 Thread Brian Hechinger
On Wed, Jun 11, 2003 at 12:06:43AM +0200, Henrik Nordstrom wrote: > > You have to make your Squid not depend on any DNS lookups to forward > the request to your parent. and how do i do that? > A squid configured to unconditionally forward all requests to a parent > does not depend on DNS looku

Re: [squid-users] simple SQUID config file

2003-06-11 Thread Christoph Haas
On Wed, Jun 11, 2003 at 12:44:52PM +0200, Mr. Proxy wrote: > Hi SquitNT-Gurus, > > if have downloaded the stable3 2.5 nt version for the first Time. > I have the following env: > [...] > Please send me the params that I need for the squid.conf Do you really expect people to support your attitude?

[squid-users] simple SQUID config file

2003-06-11 Thread Mr. Proxy
Hi SquitNT-Gurus, if have downloaded the stable3 2.5 nt version for the first Time. I have the following env: -> NT4.0 192.168.2.1/16external interface 10.10.2.1/16internal interface -> Authentication: Schema: Basic NT Domain: OMELET Groups: ExternalSYS, InternalSYS -> proxy port 80

Re: [squid-users] Squidalyser version 2.55

2003-06-11 Thread Henrik Nordstrom
ons 2003-06-11 klockan 11.38 skrev Anthony M. Rasat: > Now I did not say that your Squidalyser may have malicious code within but I > only want to say that it will be much appreaciated if you can point us to a > well-known and has MD5 sites instead of directly offer others your copy of > Squida

Re: [squid-users] Squidalyser version 2.55

2003-06-11 Thread Cécile Leyman
Quoting Henrik Nordstrom <[EMAIL PROTECTED]>: > I think what you have is actually 0.2.55, not 2.55. > > There seems to be two "latest" versions of squidalyzer: > > 0.2.55STABLE > 1.0b alpha-but-stable with many added features > > Regards > Henrik > Oops, I did not pay attention to th

Re: [squid-users] windows update not working with squidsquid-2.4.STABLE7-4

2003-06-11 Thread Henrik Nordstrom
ons 2003-06-11 klockan 10.41 skrev John Weez: > Any ideas on how to get windowes update page working again? I do not get > any errors in the logs or any activity in the cache.log. What do you get in access.log? Regards Henrik -- Donations welcome if you consider my Free Squid support helpful.

Re: [squid-users] "-k rotate" partially rotating

2003-06-11 Thread Henrik Nordstrom
ons 2003-06-11 klockan 09.01 skrev Marc Elsen: > > Surprisingly YES. A SEG Violation in all of cache.log.[0-3] files. > > Look: > > > > # head cache.log > > > > 2003/06/10 04:00:00| storeDirWriteCleanLogs: Starting... > > FATAL: Received Segment Violation...dying. > > Since, this is about the

Re: [squid-users] Squidalyser version 2.55

2003-06-11 Thread Henrik Nordstrom
I think what you have is actually 0.2.55, not 2.55. There seems to be two "latest" versions of squidalyzer: 0.2.55 STABLE 1.0balpha-but-stable with many added features Regards Henrik ons 2003-06-11 klockan 10.27 skrev Cécile Leyman: > I have a more recent version of squidalyser => 2.55 (b

Re: [squid-users] Squidalyser version 2.55

2003-06-11 Thread Anthony M. Rasat
Hi Cecile, This is only my very personal opinion and I have no intention to persuade anyone else to adopt my opinion as theirs. Several months ago OpenBSD users have been warned about existence of trojan horse code in OpenSSH distribution. This incident has again underline the usefulness of MD

Re: [squid-users] problems with mail.yahoo.com

2003-06-11 Thread Wei Keong
Hi Edgardo, Probably due to too many invalid logins... you can try to email Yahoo <[EMAIL PROTECTED]> Rgds, Wei Keong On Tue, 10 Jun 2003, Edgardo Lust wrote: > I have problem with mail.yahoo.com when I try to logging the yahoo server returm me > : "Unfortunately, we are unable to process you

Re: [squid-users] squid build reccomendations

2003-06-11 Thread Henrik Nordstrom
ons 2003-06-11 klockan 07.29 skrev [EMAIL PROTECTED]: > My current parent proxys in peak times are running at about 2-3MBits/sec > My current busiest child proxy in peak times are running at no more than > 2MBits/sec Then you should have very little to worry about.. > Running Solaris 9, Squid 2.

[squid-users] Squidalyser version 2.55

2003-06-11 Thread Cécile Leyman
I have a more recent version of squidalyser => 2.55 (but I don't know if it is the latest). I have tested and it works fine for me. I don't remember where i had downloaded it, that goes back already to several months ! If someone is interested to have this... Maybe can I send a copy "to" squid-cac

[squid-users] windows update not working with squid squid-2.4.STABLE7-4

2003-06-11 Thread John Weez
Hi people, Since setting up Squid, I cannot longer go to the windows update site. The update web page gives me an error 0x80072F76 . I've added the following extension methods: extension_methods SEARCH SUBSCRIBE UNSUBSCRIBE POLL BCOPY BPROPPATCH GNUTELLA REPORT MERGE MKACTIVITY CHECKOUT GET H

Re: [squid-users] Squidalyser help still

2003-06-11 Thread Cécile Leyman
Quoting Simon Bryan <[EMAIL PROTECTED]>: > Hi all, > I have the Squidalyser that Henrik has kindly placed on the Squid site, > however it > has no instructions as to how to setup the database. If anybody has these or > knows > what to do I would appreciate some help > > Cheers, > > _

Re: [squid-users] "-k rotate" partially rotating

2003-06-11 Thread Marc Elsen
"Ethy H. Brito" wrote: > > On Tue, 10 Jun 2003 20:20:24 +0200 > "Marc Elsen" <[EMAIL PROTECTED]> wrote: > > > > Couldn find anything in the logs that mention access or store log > > > files. > > Any extra info in the beginning of cache.log and the end of > > cache.log.0 > > when this is bei