[squid-users] squid, force refresh

2003-11-24 Thread * Tong*
Hi, What is the right way to tell squid to forget its cache and reload a fresh copy from the source? I've been googling around, scooping the right answer but still failed: ,- [from 'Caching Tutorial for Web Authors and Webmasters'] | you can force a reload (in Netscape, holding down shift

[squid-users] multihomed squid question

2003-11-24 Thread edison chalabi
I have a Multihomed Redhat 9 Linux server , one NIC connects it to the local LAN the other NIC is connected to a DMZ with internet access. I have Squid 2.5 installed, how do I configure it so the clients connect to the internal IP lets say: 10.120.16.1 but squid will retrieve web on the DMZ

RE: [squid-users] Squid CPU Performance

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003, Mark Pelkoski wrote: > I wish SOMEWHERE in the FAQ it would state that it is silly to run Squid > on a multi-proc platform... The FAQ surely needs someone who tries to maintain it a little more actively.. it is a ideal task for anyone who likes Squid, wants to contribute to t

Re: [squid-users] Exchange 2003 Conf Example

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003, Bones wrote: > I am setting up squid to be a reverse proxy for an exchange 2003 server, > does anyone have a sample configuration file for this? > > I think there are some special settings for webDAV but I am kinda lost. Squid-2.5 should support all the required WebDAV meth

Re: [squid-users] Clearing cache on SquidNT?

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003 [EMAIL PROTECTED] wrote: > could someone please tell me how to clear the cache of squidNT? > Is there a special command to use? Should be the same procedure as on any other Squid version. 1. Shut down Squid. 2. Remove (or move away) the cache directory 3. Run "squid -z" to

RE: [squid-users] Squid CPU Performance

2003-11-24 Thread Mark Pelkoski
Thank you for your reply to my post. I am replying to your e-mail and CC'ing the list so somebody else can make use of this thread... I wish SOMEWHERE in the FAQ it would state that it is silly to run Squid on a multi-proc platform... What would the directives in my squid.conf look like in order

[squid-users] Exchange 2003 Conf Example

2003-11-24 Thread Bones
Hi, I am setting up squid to be a reverse proxy for an exchange 2003 server, does anyone have a sample configuration file for this? I think there are some special settings for webDAV but I am kinda lost. Thanks in advance.

[squid-users] Clearing cache on SquidNT?

2003-11-24 Thread Thomas . Bauer
Hi there, could someone please tell me how to clear the cache of squidNT? Is there a special command to use? Thanks in advance, Tombone Hansgrohe, Inc. Information Service 1492 Bluegrass Lakes Parkway Alpharetta, GA 30004 phone (+001) 678 - 762 - 6994

Re: [squid-users] messages on store.log

2003-11-24 Thread Henrik Nordstrom
In store.log no.. these messages belong in cache.log. On the actual messages, if these had appeared in cache.log: The first messages indicates you have compiled squid with --enable-kill-parent-hack, most likely you do not want this or any other --enable... options you are not 100% sure what the

[squid-users] messages on store.log

2003-11-24 Thread Xpression
Hi list, I'm wondering about these messages on store.log, these are normal ??? 2003/11/24 12:28:00| Killing RunCache, pid 137 2003/11/24 12:28:00| kill 137: (1) Operation not permitted 2003/11/24 12:28:01| Preparing for shutdown after 3238 requests 2003/11/24 12:31:12| DNS Socket created at 0.0.0.0

Re: [squid-users] Blocking all addresses except a handful

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003, Ryan Nix wrote: > In looking at the FAQ > http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.11, I was wondering > if its possible to substitute IP addresses for domains. The company I > work for wants to block access to everything but a handful of websites. Then you sh

[squid-users] Re: squid problem

2003-11-24 Thread Henrik Nordstrom
This is most likely a syntax error in your squid.conf. Start squid manually (without using the init script) and give the command line option -k parse to see the error. Regards Henrik On Mon, 24 Nov 2003, Yemi Fowe wrote: > > Hello sir, > > I will appreciate it if u can give me an idea on wha

RE: [squid-users] Blocking all addresses except a handful

2003-11-24 Thread Adam Aube
> Any idea what line I should uncomment and where I > should insert the URLs we only want to allow > access to? See the Squid FAQ for access controls: http://www.squid-cache.org/Doc/FAQ/FAQ-10.html There is also documentation in the comments in squid.conf.default. Adam

Re: [squid-users] Blocking all addresses except a handful

2003-11-24 Thread Ryan Nix
I looked at the conf file and I found a lot of instances of dstdomain. Any idea what line I should uncomment and where I should insert the URLs we only want to allow access to? Adam Aube wrote: If you want to match by domain instead of IP address, use the dstdomain acl type. I'm usin

RE: [squid-users] Blocking all addresses except a handful

2003-11-24 Thread Adam Aube
>> If you want to match by domain instead of IP address, >> use the dstdomain acl type. > I'm using Webmin for the configuration but I don't see > that as an option. Any idea if its called something > else? Squid calls it dstdomain. If webmin doesn't use the same name, then I have no idea what w

Re: [squid-users] Blocking all addresses except a handful

2003-11-24 Thread Ryan Nix
I'm using Webmin for the configuration but I don't see that as an option. Any idea if its called something else? Adam Aube wrote: In looking at the FAQ http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.11, I was wondering if its possible to substitute IP addresses for domains. If you wan

RE: [squid-users] Blocking all addresses except a handful

2003-11-24 Thread Adam Aube
> In looking at the FAQ > http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.11, > I was wondering if its possible to substitute IP > addresses for domains. If you want to match by domain instead of IP address, use the dstdomain acl type. Adam

Re: [squid-users] Newbie question - Can anyone help with denied access

2003-11-24 Thread Raphael Maseko
By default the config file is set to deny access to the cache by the lines: acl all src 0.0.0.0/0.0.0.0 http_access deny all You will need to create an acl and set it to allow. e.g acl all src 0.0.0.0/0.0.0.0 acl myusers src 192.168.1.0/255.255.255.0 http_access myusers allow http_access deny al

[squid-users] Blocking all addresses except a handful

2003-11-24 Thread Ryan Nix
Hello, In looking at the FAQ http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.11, I was wondering if its possible to substitute IP addresses for domains. The company I work for wants to block access to everything but a handful of websites. Thanks in advance! Ryan Nix

Re: [squid-users] Newbie question - Can anyone help with denied access

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003 [EMAIL PROTECTED] wrote: > thanks for help in advance. I have read a lot of documents and have setup > my Squid 2.5 STABLE1 server according to a detailed document, I did find > differences in the location of the Squid binaries and files on my RH9 > installation of Squid. The S

Re: [squid-users] Squidalyser 1.0b search criteria

2003-11-24 Thread Mauro
On Monday 24 November 2003 14:29, Raphael Maseko wrote: > Hi All, > May be I should take the silence over my question below as a sign > that not may people use or attempt to use squidalyser. > Can someone, please, suggest an alternative application that I can > use to analyse proxy users' access pa

Re: [squid-users] Newbie question - Can anyone help with denied access

2003-11-24 Thread Thomas . Bauer
Hi Jonathan, did you set up ACLs in your squid.conf? It seems to me that you don't have the rights to use the proxy. Regards, Tommy Hansgrohe, Inc. Information Service 1492 Bluegrass Lakes Parkway Alpharetta, GA 30004 phone (+001) 678 - 762 - 6994

Re: [squid-users] Squid IPCache v. BIND Caching-Only DNS

2003-11-24 Thread Venkatesh. K
- Original Message - From: "Henrik Nordstrom" <[EMAIL PROTECTED]> To: "Venkatesh. K" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; "Mahmood Ahmed" <[EMAIL PROTECTED]> Sent: Monday, November 24, 2003 2:51 PM Subject: Re: [squid-users] Squid IPCache v. BIND Caching-Only DNS > On Mon, 24 No

[squid-users] Newbie question - Can anyone help with denied access

2003-11-24 Thread jonathan_hughes
List, thanks for help in advance. I have read a lot of documents and have setup my Squid 2.5 STABLE1 server according to a detailed document, I did find differences in the location of the Squid binaries and files on my RH9 installation of Squid. The Squid server daemon starts fine when I run the

Re: [squid-users] stopping squid error messages ...

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003, [EMAIL PROTECTED] wrote: > i use squid transparently and do not want end users to receive squid > error messages -- looked thru the archive, but could not find the > directive. There is none. If an error occurs after Squid has accepted the request it has little choice but t

Re: [squid-users] Squidalyser 1.0b search criteria

2003-11-24 Thread Raphael Maseko
Hi All, May be I should take the silence over my question below as a sign that not may people use or attempt to use squidalyser. Can someone, please, suggest an alternative application that I can use to analyse proxy users' access pattern without doing my own scripting? Ralph - Original Messa

[squid-users] stopping squid error messages ...

2003-11-24 Thread [EMAIL PROTECTED]
hi all, i use squid transparently and do not want end users to receive squid error messages -- looked thru the archive, but could not find the directive. thanks!! charles

Re: [squid-users] Squid Freezing

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003, Otávio_Fernandes wrote: > "Freeze" because I don't have more logs when this happen and the functions that > Squid has on my system, stoped ... But the telnet: > > $ [EMAIL PROTECTED] /root]# telnet 0 3128 > $ Trying 0.0.0.0... > $ Connected to 0. > $ Escape character is '^]'

Re: [squid-users] FTP from browser (Internet Explorer 6) with read-write-modify permission

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003, Emilio Salgari wrote: > My users can access ftp servers using their browser (Internet Explorer) but > they can ONLY see directories, and see and download files. > > When they access ftp servers (through squid), Internet Explorer tells them > that proxy server lets them ONLY

Re: [squid-users] store dirs...

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003, Chris Knipe wrote: > Very quickly... Can two separate squid proxies share a single store > directory?? No, but they can share the same parent Squid. Regards Henrik

Re: [squid-users] Squid Freezing

2003-11-24 Thread Otávio_Fernandes
Hi, Lucas, First ... Thank you. $ [EMAIL PROTECTED] /root]# tail -f /var/log/cache.log $ $ 2003/09/30 18:22:17| Cache dir '/var/spool/squid' size remains unchanged at 102400 KB $ 2003/09/30 18:22:17| DNS Socket created at 0.0.0.0, port 3411, FD 6 $ 2003/09/30 18:22:17| Adding nameserver 200.194

[squid-users] FTP from browser (Internet Explorer 6) with read-write-modify permission

2003-11-24 Thread Emilio Salgari
Hi guys! I have a problem with Squid 2.5 stable3. I configured successfully almost everything in squid.conf, but there is still one thing that doesn't work fine. My users can access ftp servers using their browser (Internet Explorer) but they can ONLY see directories, and see and download files

Re: [squid-users] Squid Freezing

2003-11-24 Thread Lucas Brasilino
Hi, Hi I'm using Squid (2.5-stable4) to do proxy and cache on Linux, and without explanation my squid freeze, and I don't have log's, if I try a telnet on squid port, I have normal return messages, if I try a "ps ax", the process are, aparently, executing whiout problems. This cases do not hav

[squid-users] store dirs...

2003-11-24 Thread Chris Knipe
Lo all, Very quickly... Can two separate squid proxies share a single store directory?? Say, two separate machines, sharing a single store directory via a SAN or a NAS. Thanks, me

Re: [squid-users] compiling LDAP authentcator with DS5.2 SDK\

2003-11-24 Thread Henrik Nordstrom
Try replacing LDAP_OPT_SUCCESS with 0 The LDAP_OPT_SUCCESS return value seems to be an OpenLDAP extension not documented in the Internet draft LDAP C-API document. This applies to both squid_ldap_auth and squid_ldap_group. Regards Henrik On Mon, 24 Nov 2003, Brett Clifford wrote: > Hi All, >

Re: [squid-users] Change password

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003, melvin melvin wrote: > Is there any other method for users to change their password without running > a web server? Not if the password used is unique for the proxy. But if you reuse the normal login account, such as connecting Squid to your MSAD then the normal password c

Re: [squid-users] Using squid with NTLM and BASIC authentication

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003, Matthew Richards wrote: > This confused me as I had read the following in the Squid FAQ (read it for yourself > here: > http://www.squid-cache.org/Doc/FAQ/FAQ-23.html - ss23.1 ): > > "although currently you can only use one scheme at a time." The FAQ is porely worded. The

Re: [squid-users] Squid IPCache v. BIND Caching-Only DNS

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003, Venkatesh. K wrote: > Nope. It is better to cache dns lookups in squid even though you end up > using some memory for ip and dns cache in squid. > > I don't have real stats on the performance hit if squid does not cache ip > and name lookups, but I like to play safe. You can

[squid-users] Change password

2003-11-24 Thread melvin melvin
Hi all, Is there any other method for users to change their password without running a web server? i am using a chpasswd.cgi and running ncsa_auth but due to security reasons has stop the apache server from running. Furthermore, we are in the midst of upgrading to a windows 2000 AD so any form

[squid-users] Re: ncsa password expiry

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003 [EMAIL PROTECTED] wrote: > There is no way i can configure the chpasswd.conf to have an expired date > for user passwords. And we want to tied according to our security > procedures. We want it in such a way that It must have one big character > with number as well. Can it be t

Re: [squid-users] Squid CPU Performance

2003-11-24 Thread Henrik Nordstrom
On Mon, 24 Nov 2003 [EMAIL PROTECTED] wrote: > >> b) Squid is the worst case application for RAID5 and will absolutely > kill > >> the performance of a RAID5. RAID1 is fine, and so is separate drives. > > Do you mean both hardware AND software Raid-5? What's the issue? RAID5 in general. Hardware

Re: [squid-users] Problems on squid+transparent proxy

2003-11-24 Thread Raphael Maseko
Which ACLs are you using? Also are you using route-map for redirection or WCCP? - Original Message - From: "Data Leung" <[EMAIL PROTECTED]> To: "'Raphael Maseko'" <[EMAIL PROTECTED]> Sent: Monday, November 24, 2003 10:12 AM Subject: RE: [squid-users] Problems on squid+transparent proxy

[squid-users] Problems on squid+transparent proxy

2003-11-24 Thread Data Leung
> Dear All : > I have a problems on transparent proxy + squid . > I want to build up a transparent proxy + Squid + nat + iptables . I hope > all of the users cannot be access the website that's i didn't premit on > ACL . > > The problems is . If i set the Proxy address on the browser