Hi Jay,
At 03.38 31/07/2003, Jay Turner wrote:
Hi Guido,
I don't think this is the problem.
Preliminary testing is pointing to incorrect security policies being
deployed to the client workstations with LAN Authentication set to "NTLM
Responses only" rather than "LM & NTLM Responses".
Right, I t
On Wednesday 30 July 2003 23.12, Raymond Norton wrote:
> I am trying to set up user authentication on my redhat 9.0 box
> using squid 2.5.stable1-2 with the following:
>
> auth_param basic program /usr/bin/ncsa_auth /usr/etc/passwd
> acl password proxy_auth REQUIRED
> http_access allow password
T
On Wednesday 30 July 2003 23.59, Bob Arctor wrote:
> hello.
> is it possible to configure squid to execute shell command with
> requested URL as an parameter, and give output to the client?
Yes and no.
You can set up Squid to forward the request to a CGI program running
on a web server of yours.
On Wednesday 30 July 2003 23.53, JOHNSON DAVID R wrote:
> how do i go about searching through the entire ldap store for a
> username? i would like to incorporate this option, if there is one,
> into the squid_ldap_auth program.
You set the base dn to the top of your ldap store, and then use the -f
On Thursday 31 July 2003 04.02, Adam Aube wrote:
> Divide the number of page faults by the "Number of HTTP requests
> received" statistic, then multiply by 100 to get a percentage. Let
> us know what this percentage is - I honestly couldn't say at what
> level one should be concerned.
And it very
On Thursday 31 July 2003 05.39, Jim Flowers wrote:
> SSL to the accel works with http://accel.server.tld:443/exchange
> but does not work with https://accel.server.tld/exchange with the
> following:
I think you are using http_port where you should be using
https_port...
Regards
Henrik
--
Dona
On Thursday 31 July 2003 9:34 am, atit jariwala wrote:
> Hello Squid Developers & Users
> I want to generate Graph showing Distribution of various sized cached
> objects
> U can see the link:
> http://www.isp-planet.com/img/cflow-contents-distrib.gif [This is the graph
> of Cache Flow] I want
On Thursday 31 July 2003 08.13, Mathew Thomas wrote:
> Is the above the best configuration for this server to have best
> performance?
Yes.
> Will multiple cache dir increase the performance?
You should use one cache_dir per disk for best performance is using
aufs. With diskd sometimes perfo
On Thursday 31 July 2003 05.01, [EMAIL PROTECTED] wrote:
> I have confirmed that the external ACL is working ok. If I remove
> the always_direct line then
> all requests go to the peer as expected. If I change the
> 'DirectProxyUsers' ACL to a standard 'SRC'
> or something then it also works as e
On Thursday 31 July 2003 08.19, Fajar Priyanto wrote:
> Can squid show Netbios name instead of IP of the client? I'm
> running a DHCP so the IP might change everyday and it's a bit
> difficult to track user activity based on IP that changes.
Make your network show netbios names via DNS, and then
Dear all,
A newly installed webserver running on NT IIS 4.0 on our local network to be
used on e-learning web based application, in order to have a decent domain
name, i added a new domain name to my dns server (which is another box which
only have registered ip) and point it to 192.168.50.201.
Hello Squid Developers and Users,
I am using squid 2.5 Stable 2 on Redhat linux 7.x
I gone through req_mime_type tag that allows to restrict File Upload
through HTTP POST method and it is working fine.
But enabling this makes squid to block file uploading for all upload
data regardless
Hello Squid Developers & Users
I want to generate Graph showing Distribution of various sized cached
objects
U can see the link: http://www.isp-planet.com/img/cflow-contents-distrib.gif
[This is the graph of Cache Flow] I want simillar kind of things for squid.
Squid has to provide Data only. O
On Thursday 31 July 2003 10.11, atit jariwala wrote:
> Hello Squid Developers and Users,
> I am using squid 2.5 Stable 2 on Redhat linux 7.x
> I gone through req_mime_type tag that allows to restrict File
> Upload through HTTP POST method and it is working fine.
> But enabling this make
On Thursday 31 July 2003 10.34, atit jariwala wrote:
> Hello Squid Developers & Users
> I want to generate Graph showing Distribution of various sized
> cached objects
> U can see the link:
> http://www.isp-planet.com/img/cflow-contents-distrib.gif [This is
> the graph of Cache Flow] I want sim
hello guys,
here is a Squid 2.5S2, on FreeBSD-4.8.
there was an upgrade, at last weekend, from 4.7 to 4.8. Squid
binari wasn't recompile - (may be) it creates many problems, so,
i recompiled it yesterday.
the new problem, what i don't understand:
Squid runs correctly - it seems -, i use msnt_auth
Hi all,
I have installed squid-2.5.STABLE3-0 from source
rpm on redhat linux 8.0 with the following options,
--enable-basic-auth-helpers="LDAP,NCSA,PAM,SMB,SASL,MSNT,winbind"
\
--enable-ntlm-auth-helpers="SMB,winbind" \
--enable-external-acl-helpers="ip_user,ldap_group,unix_group,wbin
Dumb dumb dumb, cut and paste. That did it. Thank you again for your help.
Where do you find the time to answer all these posts?
--
Jim Flowers<[EMAIL PROTECTED]>
-- Original Message ---
From: Henrik Nordstrom <[EMAIL PROTECTED]>
To: "Jim Flowers" <[EMAIL PROTECTED]>, [EMAIL PR
> FYI, the percentage is Page faults with physical i/o /
> Number of HTTP requests received is 0.29%. The physical
> memory is 256 DDR, and the swap cache dir is 5000 16 256.
> I use aufs, heap lfuda replacement policy.
I assume you mean that Page Faults / HTTP Requests = 0.0029,
which would be 0
Hi
Is it possible to configure delay pools so that if bandwidth in one pool
is not currently being used the other pools "burst" and are allowed to
use that bandwidth?
If not, is there a recommended mechanism for doing this?
Many thanks
___
Antony Russell
T
I've been having problems with squid crashing, especially during busier
times. This is with RH 7.2 on s390.
Squid Cache: Version 2.5.STABLE3
configure options: s390-redhat-linux --prefix=/usr --exec-prefix=/usr
--bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc
--datadir=/usr/share --includ
Hi everybody.
We installed squid 2.5 a few months ago and we are in need of help.
Using Perl, I am trying to determine the time a user spent per site
visited by parsing access.log.
For example: This particular user had 12 "hits" on the same site.
<1st line> 1059393881.234104 TCP_REFRESH_HI
> Using Perl, I am trying to determine the time a user spent per
> site visited by parsing access.log.
The access.log file only logs how much time Squid spent filling
the request. Squid has no way of knowing how much time the user
spent viewing the page after it loaded.
Adam
---
Outgoing mail is
On Wed, Jul 30, 2003 at 10:53:58AM +0200, Henrik Nordstrom wrote:
> Do you rin linkx locally on the proxy server? In such case you need to
> use NAT rules in OUTPUT as well I think, and use a kernel with
> support for NAT of local connections, and use a user match to allow
> Squid to go out (if
On Wed, 23 Jul 2003, Henrik Nordstrom wrote:
> ons 2003-07-23 klockan 15.42 skrev Merton Campbell Crockett:
>
> > Question: Is there any good documentation on the interaction between the
> > cache_peer, cache_peer_domain, neighbor_type_domain, always_direct, and
> > never_direct configuration dir
Hello,
I've seen this question on many posts (mostly old), but haven't gotten a very clear
answer:
Is it currently (July 03) possible to run squid as an https accelerator in any of the
following ways?
1) SSL all the way through from client, through proxy, to server, with no decryption
between
Hello All!
Question: can I create ACL, based on user's authenticated login?
I'm using NTLM authentication.
wb_group is not an answer, because I wand to get list of user's logins
for ACL from file.
External helper, which read file and %LOGIN, and give me OK or ERR will
be an answer ;o)
P.S. Th
Sukhjit,
I'm running WCCP since last 1 year and did not get any problem. please check
your i see you packets and also check is wccp module loaded via commaned
lsmod|grep wccp
--
Best Regs,
Masood Ahmad Shah
System Administrator
^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
| * * * * *
hello,
did someone from you already squid and activedirectory implemented? I
have a group in activedirectory, and only the members of this group can
use the proxy.
is there anyone who has the same scenario? when yes, could you send me
your squid.conf?
I read myself already some in the newsgroup,
Hi,
I've set up a squid proxy (not transparent) with squid 2.5.stable3 and
2.4.stable7.
With both versions I have a strange problem. They both work fine: no errors
in logs when starting and also downloads seem to be as fast as a direct
connection).
But there is one big problem: Uploads to web-fo
yeah, this is perfectly acceptable!
could you give me an example setup doing this?
forwarding every url requested to
http://mycgi.server/cgi-bin/download.sh?http://original.request/
so i could pick $QUERY_STRING in download.sh...
this way squid could use external download accelerator to downloa
On Thursday 31 July 2003 16.07, Merton Campbell Crockett wrote:
> The document could be retrieved by setting allow-miss for the
> parent in the first proxy.
If you need to specify allow-miss in the cache_peer line then either
this cache_peer line is configured as a siblibg, or you are using
nei
On Thursday 31 July 2003 19.12, Bob Arctor wrote:
> yeah, this is perfectly acceptable!
Then see the redirector chapter in the Squid FAQ.
Regards
Henrik
--
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need
On Thursday 31 July 2003 15.59, Sergio Chaves wrote:
> Hi everybody.
>
> We installed squid 2.5 a few months ago and we are in need of help.
> Using Perl, I am trying to determine the time a user spent per site
> visited by parsing access.log.
>
> For example: This particular user had 12 "hits" on
On Thursday 31 July 2003 16.00, Payal Rathod wrote:
> Can you give an example? I am not getting what you mean exactly.
> I use squid on Mdk Linux 9.1 2.4.21 default kernel.
Where did you run the browser?
Interception only works for other stations in your network, not for
requests initiated on t
On Thursday 31 July 2003 16.25, David Gibson wrote:
> 1) SSL all the way through from client, through proxy, to server,
> with no decryption between client & server. (Just a relay).
No.
Squid has no interest in providing this kind of service. A plain TCP
plug or NAT is what you want for this ki
Hey all. I am trying to replace some current MS proxies with Squid proxies,
and so far it's been going ok. I got the squid_ldap_auth working and
authenticating with AD properly. However I still have to enter a user name
and password when I open a browser window. With MS proxy, it used my login
cred
On Thursday 31 July 2003 16.42, Denis V. Terebiy wrote:
> Hello All!
>
> Question: can I create ACL, based on user's authenticated login?
Yes, by using the standard proxy_auth ACL type.
REQUIRED is just a magic user name which matches all user names. You
do not have to use the magic REQUIRED use
On Thursday 31 July 2003 17.39, [EMAIL PROTECTED] wrote:
> is there anyone who has the same scenario? when yes, could you send
> me your squid.conf?
See the squid_ldap_group man page.
Regards
Henrik
--
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xcli
What is the best way to determine how busy squid is, for example if there
is an Internet slow down. Some way to determine if the squid box is busy,
if the squid box can not get out to the Internet, or just a particulary
slow web page?
Also if I have a squid access.log and I want to determine a
On Thursday 31 July 2003 18.51, Marco Koch wrote:
> Uploading to our own webserver took about 2 Minutes for 100kbyte
> (100Mbit-Connection). When uploading without using the proxy, the
> upload takes about 2 seconds!!
Are you inside a parent proxy based firewall? If so, see the Squid
FAQ.
Do yo
On Thursday 31 July 2003 15.08, Tony Russell wrote:
> Is it possible to configure delay pools so that if bandwidth in one
> pool is not currently being used the other pools "burst" and are
> allowed to use that bandwidth?
The current delay pools implementation does not have any sharing among
the
On Thursday 31 July 2003 15.19, [EMAIL PROTECTED] wrote:
> Jul 28 12:46:31 linprox kernel: User process fault: interruption
> code 0x10
> Jul 28 12:46:31 linprox kernel: failing address: 101
> Jul 28 12:46:31 linprox kernel: CPU:0
> Jul 28 12:46:31 linprox kernel: Process squid (pid: 998,
On Wednesday 30 July 2003 7:42 am, Shunichi Tabata wrote:
> Hi! I'm Shunichi from Japan.
> I wanna make the squid to change HTML data partially according to a certain
> pattern when the data come through the squid. For example, I wanna
> substitute each and every word "America" on HTML data to "US
On Thursday 31 July 2003 19.33, FWAdmin wrote:
> Is there a way to do this with Squid? I don't want users prompted
> to login to the proxy every time they use their browser, as they
> are already prompted for domain authentication.
See the Squid FAQ entry on how to integrate Squid to NT domains w
> With MS proxy, it used my login credentials for the domain to allow
> access to the proxy server, so if I was logged in to the domain I
> didn't have to authenticate to the proxy.
> Is there a way to do this with Squid?
Yes, by using Squid's NTLM auth support.
See the Squid FAQ for the Winbind
On Thursday 31 July 2003 6:36 pm, Jim_Brouse/[EMAIL PROTECTED] wrote:
> What is the best way to determine how busy squid is, for example if there
> is an Internet slow down. Some way to determine if the squid box is busy,
Look at system load / CPU load?
> if the squid box can not get out to th
Jim_wrote:
> What is the best way to determine how busy squid is, for example if there
> is an Internet slow down. Some way to determine if the squid box is
busy,
> if the squid box can not get out to the Internet, or just a particulary
> slow web page?
"How busy squid is" would seem to me to be
Hi all,
1)
I have a number of files that are my blacklist.
acl blacklist url_regex -i "/etc/squid/block/blacklist1"
acl blacklist url_regex -i "/etc/squid/block/blacklist2"
Does squid search each file, in the order above,
trying to match the request? Or it reads the files
once at startup and mak
I am once again asking, in reference to justification at our location, if
anyone can give me an idea of any large networks using squid for their
caching requirements.
We are currently considering a move to squid as an alternative to our
current cache appliance. The powers that be here would like
On Thu, Jul 31, 2003 at 07:29:18PM +0200, Henrik Nordstrom wrote:
> On Thursday 31 July 2003 16.00, Payal Rathod wrote:
>
> > Can you give an example? I am not getting what you mean exactly.
> > I use squid on Mdk Linux 9.1 2.4.21 default kernel.
>
> Where did you run the browser?
>
> Intercepti
Hi all,
1)
I am using LDAP for authenticating. I would like my users to
be divided into groups with different access rights.
level1 - can access any site
level2 - can access any site not in blacklist
level3 - can access intranet sites only
2)
I configured squid for authenticate to LDAP.
auth_pa
The only cachemgr.cgi located on my harddrive is at the following location
/usr/share/webmin/webmin-1.090/squid/cachemgr.cgi
Can I use that cachemgr.cgi or is that specific to webmin?
I am using Debian with kernel 2.4.21
Jim
On Thursday 31 July 2003 20.26, Payal Rathod wrote:
> I ran from 127.0.0.1 itself.
> Shall I try it from other browser?
> I mean from any other machine?
Yes.
Your interception rule in iptables only applies to traffic forwarded,
not traffic originating from the box itself.
Regards
Henrik
Hi,
the squid is directly connected to the internet , no parents.
The problem occurs when trying to connect to local resources (from the LAN
in the DMZ) and also when trying to connect to remote ressources (in the
internet).
Another customer (also connected via fiber to the same provider) does n
Henrik,
Thank you for your response- things are as I hoped. Now I'd like to ask for a little
configuration assistance.
I have configured squid as an accelerator in virtual host mode, and things are working
well with http (though I'm having some ntlm issues) and multiple web servers behind
the
On Thursday 31 July 2003 21.35, Fernando Maior wrote:
> 1)
> I am using LDAP for authenticating. I would like my users to
> be divided into groups with different access rights.
Ok.
> 3)
> I inserted a new attribute to LDAP called internetClass,
> that can have "level1", "level2" or "level3" as c
On Thursday 31 July 2003 21.08, Fernando Maior wrote:
> acl blacklist url_regex -i "/etc/squid/block/blacklist1"
> acl blacklist url_regex -i "/etc/squid/block/blacklist2"
>
> Does squid search each file, in the order above,
> trying to match the request? Or it reads the files
> once at startup an
Stop the pigeon!
It was my firewall. Squid's working fine. Hope no one wasted any time. As a penance,
hope this config info below servers as a helper for those who may come after.
There's a demotivator that reads something like, "the sole purpose of some people's
lives is to serve as a warning
Hi,
I have Squid/2.4.STABLE1.
I closed ftp protocol but I need to give ftp access to some users and just
to one server.
I don´t know how to do it.
Thanks
Jose A. Zúñiga
I tried the below script although it did give back a file it only had one
entry in it. What I am interested in is all IP addresses that visited a
particular domains site and subdomains of that site.
egrep http://www.somesite.com access.log | egrep '192.168.1.[234]' | awk
egrep: access.log: No
On Thursday 31 July 2003 21.55, Marco Koch wrote:
> Both, the 2.5er and the 2.4er version of squid are compiled without
> any options (except --prefix=/usr/local/squid). And as I said,
> without using squid the connections are really fast, even uploading
> via http-post ...
Try posting directly
On Thursday 31 July 2003 22.40, David Gibson wrote:
> 2003/07/31 15:52:52| Parsing Config File: Unknown authentication
> scheme 'ntlm'.
You did not enable the ntlm scheme when you built your Squid binary
(the scheems are specified separately from the helpers)
Regards
Henrik
On Thursday 31 July 2003 21.48, Jim_Brouse/[EMAIL PROTECTED]
wrote:
> The only cachemgr.cgi located on my harddrive is at the following
> location /usr/share/webmin/webmin-1.090/squid/cachemgr.cgi
>
> Can I use that cachemgr.cgi or is that specific to webmin?
Might be useable, but I do not know.
--enable-ntlm?
-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: Thu 7/31/2003 5:27 PM
To: David Gibson; [EMAIL PROTECTED]
Cc:
Subject:Re: [squid-users] SSL accelerator- definitive answer? - STOP! it's
working
On Thursday 31 July 2003 22.40, D
I installed squid through apt-get install squid
If cachemngr.cgi is not there how can I get it there; do I need to
reinstall?
Jim
Henrik
--enable-auth=ntlm
-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: Thu 7/31/2003 5:27 PM
To: David Gibson; [EMAIL PROTECTED]
Cc:
Subject:Re: [squid-users] SSL accelerator- definitive answer? - STOP! it's
working
On Thursday 31 July 2003
On Thursday 31 July 2003 10:16 pm, Jim_Brouse/[EMAIL PROTECTED] wrote:
> I tried the below script although it did give back a file it only had one
> entry in it. What I am interested in is all IP addresses that visited a
> particular domains site and subdomains of that site.
Try a simpler versi
On Thursday 31 July 2003 23.32, David Gibson wrote:
> --enable-ntlm?
--enable-auth=
Regards
Henrik
On Thursday 31 July 2003 23.33, Jim_Brouse/[EMAIL PROTECTED]
wrote:
> I installed squid through apt-get install squid
>
> If cachemngr.cgi is not there how can I get it there; do I need to
> reinstall?
I always install Squid from source. This always includes cachemgr.cgi.
Regards
Henrik
On Thursday 31 July 2003 22.24, Ing. José A. Zuñiga wrote:
> Hi,
>
> I have Squid/2.4.STABLE1.
>
> I closed ftp protocol but I need to give ftp access to some users
> and just to one server.
>
> I don´t know how to do it.
Give them access before where you deny others access.
acl ftp_users ...
a
On Friday 01 August 2003 00.32, Jonathan Giles wrote:
> As best as I can tell, squid never looks at /etc/hosts.
It does, if you use a supported version of Squid.
Regards
Henrik
> There is more "auth_param basic" parameters you need to set. See
> squid.conf.default.
>
> Regards
> Henrik
Using squid-2.5.STABLE1-2
After reading squid.conf.default I have added the following to my squid.conf
file in hopes of getting proxy_auth to work:
auth_param basic program /usr/etc/pas
Hello all!!
I've followed every article and howto on the subject and still can't get
it to work!!
Basically: from the Win2k box's IE5 I can open "http://wpad/wpad.dat";
perfectly. Even "http://wpad.mydomain.com/wpad.dat";, etc. These in
reality point to an apache server.
The appropriate (applica
Hi Guido,
I have just returned from the client site.
After changing the LAN Authentication setting to "Send NTLM & LM responses"
the system worked correctly.
Thanks for your previous advice.
Should this be added to the FAQ until bug #610 is resolved?
I'm surprised it hasn't tripped more people
A great idea!
You could search the archive of the squid mailing list. Here you will find a
lot of qestions from users - and of course a lot of excellent answers from
Henrik.
Here are some examples:
I want that certain users could acces certain sites.
I also want that some users access all sites.
76 matches
Mail list logo
