Citeren Chris Vaughan <[EMAIL PROTECTED]>:
> I am trying to get to an intranet site on a remote host, that our office has
> a point to point connection for. We are trying to tell the server not to use
> proxy for the specific internal domain names for this site.
Chris,
You can use -for example:
I have tried to used squid acl for this. Infact i am currently using acl's
but for the new configuration somehow it is not working thats why i am using
squidguard to solve the problem.
I have denied everyone in my squid.conf.
My squidguard.conf is basic and simple for test.
acl
{
default
Chris Vaughan wrote:
Hello,
I am trying to identify an equivalent in squid to the apache NoProxy
directive. When I previously asked about this, I was told the answer was
held in the FAQ. However, having looked at the FAQ, I am unable to find what
I am supposed to be looking for. Any help is appre
Hello all,
Can squid block automatic Symantec Live Update by Norton Antivirus?
I can see in the access.log this activity:
79891 192.168.0.65 TCP_REFRESH_HIT/304 211 GET
http://liveupdate.symantecliveupdate.com/avenge$201.5$20microdefs2_microdefsb.curdefs_symalllanguages_livetri.zip
- - DIRECT/2
First of all I will suggest better to purchase some SCSI hard disks more
then 17 GB. 4 GB RAM is okk..
--
Best Regs,
Masood Ahmad Shah
System Administrator
^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
| * * * * * * * * * * * * * * * * * * * * * * * *
| Fibre Net (Pvt) Ltd. Lahore, Paki
Henrik Nordstrom wrote:
On Monday 07 July 2003 18.57, Jeremy Broadway wrote:
2003/07/07 12:46:33| The request GET
http://www.google.com/webhp?hl=en&edition=usa&q= is DENIED, because
it matched 'AuthorizedUsers'
This is normal and should correlate to a TCP_DENIED/407 entry in
cache.log.
Hello,
I have a problem when connecting to a destination site who are running DNS
round robin for its 3 web servers A, B & C. Upon opening the main page for
list of reports, whihch required user ID & password for SSL, it prompts for
login again when trying to traverse to next page quoting credenti
Richard,
We have a similar setup using two 6 GiG 5400Rpm drives one for OS and
one for Cache. Processor is PIII450Mhz with 384Mb Ram running on OpenBSD
3.3. It is more than ample for our needs.
Your suggested machine is fine, however if cost is important you can
spec your suggested machine down.
Hello,
I am trying to identify an equivalent in squid to the apache NoProxy
directive. When I previously asked about this, I was told the answer was
held in the FAQ. However, having looked at the FAQ, I am unable to find what
I am supposed to be looking for. Any help is appreciated.
<>
*
Hi,
> I am trying to access the internet using my Proxy Server
> http://192.168.22.6:3128, but when I hit any page, I got
>
> The following error was encountered:
>
> * Unable to forward this request at this time.
>
> This request could not be forwarded to the origin server or to any parent
> cac
hi,all
I faced the same problem as before again, which refer to my control rule
about blocking a few websites.
I set my rule as below:
acl badURL2 urlpath_regex -i \.mp3$ \.wma$ \.avi$ \.mpeg$ \.mpg$ \.swf$ \.asf$ \.rm$
\.ram$
http_access deny badURL2
However, when my colleague was accessing
h
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello all,
Can squid block automatic Symantec Live Update by Norton Antivirus?
I can see in the access.log this activity:
79891 192.168.0.65 TCP_REFRESH_HIT/304 211 GET
http://liveupdate.symantecliveupdate.com/avenge$201.5$20microdefs2_microdefsb.cu
how do i unsubscribe from this mailing list ??? It never seems to work !
- Original Message -
From: "Hasan, Irfan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 07, 2003 7:18 PM
Subject: [squid-users] Squid on port 80
> I'm running Squid 2.5 Stable3 NT on Windows 2000 P
Hi,
> On Tuesday 08 July 2003 00.47, Norman Zhang wrote:
>
>> * Unable to forward this request at this time.
>
> This message is only seen if you are using never_direct.
But default setting for squid.conf never_direct is none. I haven't touched
those fancy options yet 8)
Regards,
Norman
Hi,
Chijioke Kalu wrote:
> I figure http_access deny all should be the last
I swap the line http_access deny all to the end, restarted squid but problem
still persists. Is there something trivial I am missing?
Regards,
Norman
Norman Zhang wrote:
> I am trying to access the internet using my Pro
On Tuesday 08 July 2003 00.47, Norman Zhang wrote:
> * Unable to forward this request at this time.
This message is only seen if you are using never_direct.
Regards
Henrik
--
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-c
On Monday 07 July 2003 22.12, Jorge Umaña wrote:
> I am using squid-2.4.STABLE7, right now I have access to the http
> service and to
> the ftp service with an anonymous account, however when I try to
> access with a
> specific account it does not work I do not get any prompt to put
> the login and
On Monday 07 July 2003 21.27, Adam Aube wrote:
> > How can i make user credentials to expire on a specified time ?
> > I've tried credentialsttl with no result.
>
> Depends on what you mean by "expire". The credentialsttl setting
> will make Squid force the user to reauthenticate after a set time
>
On Monday 07 July 2003 21.09, Nick Bartos wrote:
> I am looking into writing some sort of plugin/mod that will query
> dhcpd and get the client-hostname for an ip address and somehow
> insert that into the log.
You can't query DHCP who an IP address belongs to using standard
protocols, but real
I figure http_access deny all should be the last
K
Hi,
I am trying to access the internet using my Proxy Server
http://192.168.22.6:3128, but when I hit any page, I got
The following error was encountered:
* Unable to forward this request at this time.
This request could not be forwarded to t
On Monday 07 July 2003 18.57, Jeremy Broadway wrote:
> 2003/07/07 12:46:33| The request GET
> http://www.google.com/webhp?hl=en&edition=usa&q= is DENIED, because
> it matched 'AuthorizedUsers'
This is normal and should correlate to a TCP_DENIED/407 entry in
cache.log.
> 2003/07/07 12:46:33| The
Hi,
I am trying to access the internet using my Proxy Server
http://192.168.22.6:3128, but when I hit any page, I got
The following error was encountered:
* Unable to forward this request at this time.
This request could not be forwarded to the origin server or to any parent
caches. The most l
Jeremy Broadway wrote:
Hello,
I am having an issue where every once in a while pages just do
not display. No error message is displayed by squid, no 404, the page
just doesn't load when I click on the link or it starts to load but
never finishes. Closing my browser (IE 6 sp1 + q331906 pat
2003/07/07 12:46:33| The request GET
http://www.google.com/webhp?hl=en&edition=usa&q= is DENIED, because it
matched 'AuthorizedUsers'
2003/07/07 12:46:33| The request GET
http://www.google.com/webhp?hl=en&edition=
sa&q= is ALLOWED, because it matched 'AuthorizedUsers'
Jeremy,
That's a strange
J.D. Bronson wrote:
sslReadServer: FD 23: read failure: (131) Connection reset by peer
Any idea what causes these? I also see FD errors on non SSL requests
as well and wondering what it is and how to fix it?
I am running a 0707 snapshot of squid on Solaris 9 Sparc.
J.D,
You don't need to wo
Jorge Umaña wrote:
I am using squid-2.4.STABLE7, right now I have access to the http
service and to
the ftp service with an anonymous account, however when I try to
access with a
specific account it does not work I do not get any prompt to put the
login and
password neither with ftp://[EMAIL PR
Thanks it is working.
Nooshin
-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 03, 2003 11:30 PM
To: Zand, Nooshin; [EMAIL PROTECTED]
Subject: Re: [squid-users] DNS question - running squid2.5Stable2
On Thursday 03 July 2003 23.14, Zand, Nooshin wr
I am using squid-2.4.STABLE7, right now I have access to the http service
and to
the ftp service with an anonymous account, however when I try to access with
a
specific account it does not work I do not get any prompt to put the login
and
password neither with ftp://[EMAIL PROTECTED] Could you s
> How can i make user credentials to expire on a specified time ?
> I've tried credentialsttl with no result.
Depends on what you mean by "expire". The credentialsttl setting will make
Squid force the user to reauthenticate after a set time period.
Since that setting didn't give you what you want
I had tested host_file directive; it seems it is not working.
I checked also /etc/nsswitch.conf file for hosts and it refers to file as well.
Any idea why?
Do I have to enable any functionality during compilation in order to get it work?
Thanks,
Nooshin
-Original Message-
From: Henrik No
> I have several small sites that would like to be able to monitor user's
> access. The problem I am running into is that most of them do not want to
> have the user enter a password when the browser opens up. Doing it by IP
> normally would not be all that bad since it can be tracked down to an
I have several small sites that would like to be able to monitor user's
access. The problem I am running into is that most of them do not want to
have the user enter a password when the browser opens up. Doing it by IP
normally would not be all that bad since it can be tracked down to an
individu
Richard Sumilang wrote:
My idea of how squid works is when you visit a website for the first
time (google.com) it will download all the images and html code into
cache and when you go back to the site in the future it will check if
it has been modified and if since last time you loaded it and i
you could get by with something signficantly less powerfull...
I'd probably runner a newer distro than rh7.2 just on principle...
joelja
On Mon, 7 Jul 2003, Richard Sumilang wrote:
> I have a network of about 30 users that use the internet to do their
> daily job. Would putting in place a de
I have a network of about 30 users that use the internet to do their
daily job. Would putting in place a dedicated squid server with about
30+ GB 7200 RPM, Red Hat 7.2, 512mb ram, AMD 1.3+ processor work or do
I need something more powerful or could I get by with something less
powerful? What w
> Thanks Henrik for the fast reply. I implemented your work-around and
> seems to work fine. I will look forward to the fix on this.
Glad to see you finally got that mess sorted out.
Adam
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Versio
My idea of how squid works is when you visit a website for the first
time (google.com) it will download all the images and html code into
cache and when you go back to the site in the future it will check if
it has been modified and if since last time you loaded it and if so
then load then refr
On Monday 07 July 2003 18.25, Adaíl Oliveira wrote:
> The server is a dell poweredge 2550 with scsi disks.
> My cache dir is in a diferent disk --> cache_dir ufs /cache/squid
> 17000 16 256
>
> What kind of configurations I have to do for my squid not become an
> I/O bound?
As mentioned your Squid
Hello,
I am having an issue where every once in a while pages just do
not display. No error message is displayed by squid, no 404, the page
just doesn't load when I click on the link or it starts to load but
never finishes. Closing my browser (IE 6 sp1 + q331906 patch on win2k
sp4) and ope
Thanks Henrik for the fast reply. I implemented your work-around and seems to work
fine. I will look forward to the fix on this.
-Mark
mån 2003-07-07 klockan 16.55 skrev Mark Pelkoski:
> This appears to be a bug to me. I have 800 users and many of them are
> complaining about this. I am trying
The server is a dell poweredge 2550 with scsi disks.
My cache dir is in a diferent disk --> cache_dir ufs /cache/squid 17000
16 256
What kind of configurations I have to do for my squid not become an I/O
bound?
Sar:
11:10:05 AM CPU %user %nice %system %idle
11:20:05 AM
sslReadServer: FD 23: read failure: (131) Connection reset by peer
Any idea what causes these? I also see FD errors on non SSL requests as
well and wondering what it is and how to fix it?
I am running a 0707 snapshot of squid on Solaris 9 Sparc.
Thanks :)
--
J.D. Bronson
Aurora Health Care /
mån 2003-07-07 klockan 16.19 skrev Adaíl Oliveira:
> Hi,
> I have a Dell Server with 4 GB ram + intel III 1
> GHz dual processor machine.I have a cache dir of 17 Gb for squid. Any
> suggestions how to
> improve performance in squid?
Without knowing what is your bottleneck we can only guess. Usin
mån 2003-07-07 klockan 16.55 skrev Mark Pelkoski:
> This appears to be a bug to me. I have 800 users and many of them are
> complaining about this. I am trying to get rid of our M$ proxy servers
> for other reasons mentioned in past postings. Please help with this. I
> can provide .conf files and
mån 2003-07-07 klockan 14.10 skrev Alejandro Javier Pomeraniec:
> Where did you specify the username?
>
> Suppose i have two users , Tom and John and i want to have a 2-limit
> for Tom and a 1-limit for John.
Then you need to define two proxy_auth acls, one matching Tom, another
matching John.
Where did you specify the username?
Suppose i have two users , Tom and John and i want to have a 2-limit for Tom and a
1-limit for John.
Thanks !
On 04 Jul 2003 11:38:58 +1000
Robert Collins <[EMAIL PROTECTED]> wrote:
> On Fri, 2003-07-04 at 03:11, Alejandro Javier Pomeraniec wrote:
> > Hi !
List,
This is related to a problem I have posted about dying active pages.
I've been testing this using a Yahoo web mail account. The problem is
when I try to send an e-mail to anybody and the window is open for more
than 1 minute, it will display a "page can not be found" error
immediately after h
I have noticed a memory problem in RedHat9 with Squid 2.5 Stable1-2 -
just seems to eat away all physical & swap until the server comes to a
complete stand still.
I installed the latest release stable 3 and my memory is nou at 2.5% --
Just something to keep in mind...
-Original Message-
F
Adaíl Oliveira wrote:
>
> Hi,
> I have a Dell Server with 4 GB ram + intel III 1
> GHz dual processor machine.I have a cache dir of 17 Gb for squid. Any
> suggestions how to
> improve performance in squid?
What are your current performance issues ?
M.
Must be a configuration problem, 4gb ram wow, send a summary of conf file and o/s you
are using.
-Original Message-
From: Adaíl Oliveira [mailto:[EMAIL PROTECTED]
Sent: Monday, July 07, 2003 5:20 PM
To: [EMAIL PROTECTED]
Subject: [squid-users] Improve performance in squid
Hi,
I have a
Where do you have performance problems?
> -Original Message-
> From: Adaíl Oliveira [mailto:[EMAIL PROTECTED]
> Sent: Monday, July 07, 2003 4:20 PM
> To: [EMAIL PROTECTED]
> Subject: [squid-users] Improve performance in squid
>
>
> Hi,
> I have a Dell Server with 4 GB ram + intel III 1
> G
Hi,
I have a Dell Server with 4 GB ram + intel III 1
GHz dual processor machine.I have a cache dir of 17 Gb for squid. Any
suggestions how to
improve performance in squid?
Thanks
A.O
mån 2003-07-07 klockan 15.47 skrev [EMAIL PROTECTED]:
> 2003/07/02 09:43:13| idnsSendQuery: Can't send query, no DNS socket!
> 2003/07/02 09:43:17| idnsSendQuery: Can't send query, no DNS socket!
> 2003/07/02 09:43:37| Shutting down...
>
> 2003/07/02 10:52:18| WARNING: Closing client 172.16.98.63
Hi !!
How can i make user credentials to expire on a specified time ?
I've tried credentialsttl with no result.
Thanks !
Sorry for the few informations logs i gave you, but the squid servers runs
in a big production.
with 600+ sim connexions on load-balanced squid servers.
Here is the only information i could give you.
The downtime was between 08:30 and 11:30
In access.log, nothing special, it seems to works, but
yes of course better to check IIS process.
You can run squid on any port but make sure no other service using that
port.
I will suggest better to not use well defined port.. but you want to listion
port to squid then you can use redirector like iptable in linux and ipsec in
Windows can do :)
-
IIS (as every other Web Server) uses this port as default.
Hermann
> -Original Message-
> From: Hasan, Irfan [mailto:[EMAIL PROTECTED]
> Sent: Monday, July 07, 2003 2:18 PM
> To: [EMAIL PROTECTED]
> Subject: [squid-users] Squid on port 80
>
>
> I'm running Squid 2.5 Stable3 NT on Window
I'm running Squid 2.5 Stable3 NT on Windows 2000 Professional,
yes yes I know it is not a good idea to run Windows 2000 Professional
but I've some other issues.
I'm running squid on port 80, the problem is intermittent connection.
Even when I telnet on local machine on port 80 sometime I can con
Hi,
On Mon, Jul 07, Kinkie wrote:
> It's just done in a different way. BTW, I tried to use linuxvirtualserver
> on the same host, but for some reason it didn't really work.
I use the software called pen for loadbalancing and it works greate for
tcp connections
http://siag.nu/pen/
For ha cluste
"Masood Ahmad Shah" <[EMAIL PROTECTED]> writes:
> In my sense if one proxy will down another will not take it's place because
> iptable rules are redirecting packets to both port and port instance is not
> running.. so what type of load balancing .:)
Load balancing _is_ in effect. It's t
>This is with Squid 2.5.STABLE3 and Samba 2.2.8a. NTLM authentication is
>working for the most part, but every so often a user is prompted with a
>basic password for some reason.
Hi,
I had the same behaviour.
I solved it with the following patch:
--- CUT HERE -
In my sense if one proxy will down another will not take it's place because
iptable rules are redirecting packets to both port and port instance is not
running.. so what type of load balancing .:)
Better to run Linux clustering that is much better then things like that...
--
Best Regs,
mån 2003-07-07 klockan 10.02 skrev James Wang:
> What do you mean as you write "If the login is a plain attribute on the
> users object and not what makes the users DN" ?
Each object (user, group, organization, computer, contact person, ...)
in an LDAP directory is named by a DN.
A DN indicate wh
"Masood Ahmad Shah" <[EMAIL PROTECTED]> writes:
> hmmm but what do u think if the proxy is transparent ..:)
[...]
The trick is the same. Just do two rules, one with source
-s 0.0.0.0/0.0.0.1
redirecting to the first instance of the transparent proxy, the other with
\! -s 0.0.0.0/0.0.
hmmm but what do u think if the proxy is transparent ..:)
--
Best Regs,
Masood Ahmad Shah
System Administrator
^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
| * * * * * * * * * * * * * * * * * * * * * * * *
| Fibre Net (Pvt) Ltd. Lahore, Pakistan
| Tel: +92-42-6677024
| Mobi
> What for? This is mere marketing bubblebabble.
>
> 1) Our mailservers don't have multiple porcessors, since they're I/O bound.
> 2) Our proxyservers don't have multiple porcessors, since they're I/O
> bound.
>
> Chose the right tool for the job, not what (IBM|HP|Compaq) recommends.
Correct,
Marc Elsen <[EMAIL PROTECTED]> writes:
> Dusan Djordjevic wrote:
>>
>> Monday 07 July 2003 10:56, Marc Elsen:
>> > > I plan to install few instances of Squid on one multiprocessor box
>> > > and balance load between them. I plan to use LinuxVirtualServer
>> > > for it. Do someone have that kin
Dusan Djordjevic wrote:
>
> Monday 07 July 2003 10:56, Marc Elsen:
> > > I plan to install few instances of Squid on one multiprocessor box
> > > and balance load between them. I plan to use LinuxVirtualServer
> > > for it. Do someone have that kind of solution ? What load
> > > balancing yo
Dusan Djordjevic wrote:
>
> Hi all,
>
> I plan to install few instances of Squid on one multiprocessor box and
> balance load between them. I plan to use LinuxVirtualServer for it. Do
> someone have that kind of solution ? What load balancing you suggest ?
> Any other recommendation ?
Do you
Dusan Djordjevic <[EMAIL PROTECTED]> writes:
> I plan to install few instances of Squid on one multiprocessor box and
> balance load between them. I plan to use LinuxVirtualServer for it. Do
> someone have that kind of solution ? What load balancing you suggest ?
> Any other recommendation ?
F
Hi all,
I plan to install few instances of Squid on one multiprocessor box and
balance load between them. I plan to use LinuxVirtualServer for it. Do
someone have that kind of solution ? What load balancing you suggest ?
Any other recommendation ?
Thanks in advance...
mån 2003-07-07 klockan 03.30 skrev James Wang:
> Thanks,
>
> I know the problem. The squid_ldap_auth needs a -f parameter even the user
> is just under the base DN.
Not here... if your users DN is
uid=,
then no -f argument is needed (uid may be anything specified by the -u
argument).
If the lo
* Schelstraete Bart <[EMAIL PROTECTED]>:
> That's maybe a good suggestion for Squid v3.0.. multitasking
> = work with multiple CPU's That should be something nice, as Squid is
> almost always used on servers...and most server have multiple
> CPU's.
What for? This is mere marketing bu
73 matches
Mail list logo
