[squid-users] question about acl

2003-11-30 Thread Kashif Awan
Hi alll I am using squid-2.3.stable4 on my redhat linux 7.1 . I want to block msn messenger but when I add the following acl in my squid.conf it shows an error that invalid acl type. acl msn req_mime_type ^application/x-msn-messenger http_access deny msn. Somebody pls tell me what to do. ___

[squid-users] diskd - option

2003-11-30 Thread shadha nker
Hello all, I've seen that diskd_program in squid.conf. I've configured with diskd storeio. My Q! is there a way to run ./libexec/diskd with any command line option(if so how? one example plz) or there is a only with diskd_program with squid.conf? Any help would be greatly appreciated. Regs, sad

[squid-users] Autodetect proxy in IE

2003-11-30 Thread mwestern
Hi All, We have a perfect squid 2.5 stable 3 setup with NTLM auth working like a bought one. however, quite a number of other lazy(or something) site don't have a proxy setup at all and must simply NAT out or something. how would i make the auto detect proxy setting work in IE so that it finds

[squid-users] Does delay pool affect LAN Speed?

2003-11-30 Thread Cafe Admin
Hi, I'm on a 1.7Mbps line, but I'm trying to simulate a slow line, which is where my Squid will eventually be deployed. I've setup a delay pool (Aggregate limit for class 1, 2, and 3) to limit bandwidth to 40kbps and have conviced myself that my download is limited to this speed. I have a 100Mbps L

[squid-users] Best conf for dial-up

2003-11-30 Thread Fajar Priyanto
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear all, I have Squid Cache: Version 2.4.STABLE7 installed with pppd since I use dial up. Problem: Many times squid just "hangs". In access.log, there is no internet activity at all, only some denyings for certain program (gator, statsmachine, etc

RE: [squid-users] out.offset=0

2003-11-30 Thread Raja R
Thank you for your mail. But the point is, the URL works fine when connecting directly (w/o squid proxy). Any clues ? Regards, Raja. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Friday, November 28, 2003 7:46 PM To: Raja R Cc: [EMAIL PROTECTED]; [EMAIL PROTE

[squid-users] [squid-users]: How to prevent IP Address scanning using Squid?

2003-11-30 Thread Hwee Khoon, Neo
Hi everyone, We notice that a number of our cache user are doing a port 80 scan across a range of IP addresses. As the destination IP are rather random, is there any way we can configure Squid to deny such a request pattern? Squid's access log--

Re: [squid-users] Q: How to set up squid for MSN messenger

2003-11-30 Thread Henrik Nordstrom
On Sun, 30 Nov 2003, Chris Selwyn wrote: > However, I still get 404 entries in the squid access log as follows... > > 1070223380.986 2 172.16.0.51 TCP_MISS/404 0 CONNECT > login.passport.com:443 - DIRECT/- - This indiated your Squid proxy could not reslove the login.passport.com DNS name.

[squid-users] Q: How to set up squid for MSN messenger

2003-11-30 Thread Chris Selwyn
I am trying to set up squid so that MSN messenger works. I am using squid with authentication but there appears to be no way to setup a username/password in MSN messenger when I enable the proxy settings. I have, therefore, setup the cache so that it does not require authentication when accessing

Re: [squid-users] so slow: part 3

2003-11-30 Thread Henrik Nordstrom
All I can say is that your symptoms is not normal. The first thing to test if possible is what the browsing responsiveness is when running a browser locally on the same server as you run Squid but without using the proxy. This to rule out any networking errors on the Squid server. Regards Henrik

Re: [squid-users] Squid problem

2003-11-30 Thread Henrik Nordstrom
Most likely you have a syntax error in your squid configuration. Start Squid manually with the "-k parse" option to verify the syntax of the configuration file. Regards Henrik On Sun, 30 Nov 2003 [EMAIL PROTECTED] wrote: > Hi, > > I have REDHET linux installed on my. It's a full installation

Re: [squid-users] Re: Re: Re: Hardware filewall + squid: blocking kazaa/kazaa lite

2003-11-30 Thread Henrik Nordstrom
On Sun, 30 Nov 2003, Robert S wrote: > I omitted to say that I have port 80 blocked in the hardware firewall - its > therefore necessary for client machines to access port 80 through squid. But Kazaa etc is not using port 80.. Regards Henrik

Re: [squid-users] so slow: part 3

2003-11-30 Thread Chris Wilcox
http_port 192.168.3.1:3128 hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY cache_dir ufs /hdd1/squidcache 1000 16 256 acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1 acl to_localhost dst 127.0.0.0/8 acl MyLan src 192.168.3.1

[squid-users] so slow: part 3

2003-11-30 Thread Maciej Wosko
Hello everyone, Im totaly disappointed with Squid. I use it as proxy server for http,https,ftp traffic. The problem is with speed. I waiting about 20 seconds untill any thing can be displayed on browser. There is no problem when I turn off squid and set iptables to forward - then sites load in abo

[squid-users] Squid problem

2003-11-30 Thread murugan.enom
Hi, I have REDHET linux installed on my. It's a full installation..Now when i start the SQUID service it gives me a error : # service squid start init_cache_dir /var/spool/squid... /etc/init.d/squid: line 162: 2054 Aborted $SQUID -z -F -D 2>/dev/null Starting squid: /etc/init.d/s

Re: [squid-users] Re: Hardware filewall + squid: blocking kazaa/kazaa lite

2003-11-30 Thread zottmann
Hi! I sent a message that I think didn´t get to the list, regarding this issue .. You can block Kazaa using string-match blocking, through a device capable of doing so (cisco router, linux iptables firewall, etc...) If you block string that Kazaa uses ("X-Kazaa-Client", or "get ./hash", for

Re: [squid-users] Re: Hardware filewall + squid: blocking kazaa/kazaa lite

2003-11-30 Thread zottmann
Hi! I sent a message that I think didn´t get to the list, regarding this issue .. You can block Kazaa using string-match blocking, through a device capable of doing so (cisco router, linux iptables firewall, etc...) If you block string that Kazaa uses ("X-Kazaa-Client", or "get ./hash", for

[squid-users] Re: Re: Re: Hardware filewall + squid: blocking kazaa/kazaa lite

2003-11-30 Thread Robert S
> You need to have the firewall block direct access to the applications from > the client PCs. As long as the clients can use the application when the > Squid proxy is not in your network they will still be able to use the > application when the proxy is connected. > > The proxy can only control tr

Re: [squid-users] Re: Re: Hardware filewall + squid: blocking kazaa/kazaa lite

2003-11-30 Thread Henrik Nordstrom
On Sun, 30 Nov 2003, Robert S wrote: > I am getting the impression that I would have to have my linux box acting as > the firewall. At the moment I operate my entire network behind a hardware > filewall. Short of blocking all of the ports for my client PCs, it looks as > if there is no way of bl

Re: [squid-users] Re: Re: Hardware filewall + squid: blocking kazaa/kazaa lite

2003-11-30 Thread Henrik Nordstrom
On Sun, 30 Nov 2003, Robert S wrote: > Here is a sketch of how my network operates. > > +--- Linux box / > squid server > H'WARE | > INTERNET -> FIREWALL +--- Client PC >

[squid-users] Re: Re: Hardware filewall + squid: blocking kazaa/kazaa lite

2003-11-30 Thread Robert S
I am getting the impression that I would have to have my linux box acting as the firewall. At the moment I operate my entire network behind a hardware filewall. Short of blocking all of the ports for my client PCs, it looks as if there is no way of blocking these sites. I tried using snort, but

[squid-users] Squid server Configuration

2003-11-30 Thread Firas Mubarak
Dear All, in order to have my linux box a proxy server i have to configure and enable the squid service. anyway i have nop problem doing such configuration - i guess - but im still facing some kind of problems, like users who are connected through the squid are not able to start msn messenger o