[squid-users] LDAP questions

2003-12-29 Thread Antonio Manfreda
Hi everybody, I have two questions to ask about LDAP helpers. 1) Does squid_ldap_auth helper support crypt, md5 or sha password lookup over an LDAP server? 2) Does ldap_group external helper support the -Z option for TLS encryption beetween the cache server and the LDAP server? Thank you in adv

[squid-users] Help Me on block sites and reply body max

2003-12-29 Thread Nilesh
Hello Sir, I got two problem one is im not able to block pron sites i have given path but not working still goes to sites acl ourlan src 192.168.0.0/24 http_access allow ourlan acl block dstdomain "/etc/blocksites/block.txt" -i http_access deny !block http_access deny all another one is i ha

Re: [squid-users] WCCPv2 on FreeBSD

2003-12-29 Thread Roman Synyuk
Hello Henrik. I have made some modification to existing wccpv2 patch, for authentication and non-standard ports (up to 8 ports) redirection support. I can share it Everything work correct. > On Sat, 27 Dec 2003, Roman Synyuk wrote: > > > Does anybody implement non-standard HTTP port traffic r

Re: [squid-users] WCCPv2 on FreeBSD

2003-12-29 Thread Henrik Nordstrom
You are welcome to. Regards Henrik On Mon, 29 Dec 2003, Roman Synyuk wrote: > Hello Henrik. > > I have made some modification to existing wccpv2 patch, for authentication > and non-standard ports (up to 8 ports) redirection support. I can share it > Everything work correct. > > > On Sat, 27

Re: [squid-users] LDAP questions

2003-12-29 Thread Henrik Nordstrom
On Mon, 29 Dec 2003, Antonio Manfreda wrote: > 1) Does squid_ldap_auth helper support crypt, md5 or sha password lookup > over an LDAP server? Well.. squid_ldap_auth uses the simple bind LDAP authentication method. As a result it supports whatever password hashing methods supported by your LDAP

Re: [squid-users] Help Me on block sites and reply body max

2003-12-29 Thread Henrik Nordstrom
On Mon, 29 Dec 2003, Nilesh wrote: > but squid is not startting giving this error > can u please tell me how do i slove this problem Most likely there is a syntax error in your configuration file. Try asking Squid to check if the configuration is valid: squid -k parse > squid version : 2.4

[squid-users] Off Topic - Seeing Nat Table - Free BSD

2003-12-29 Thread Dan Pinheiro \(CPD\)
Hi All, sorry for the off message, but maybe someone can help me. I´d like to see the NAT mappings, including what connection the respective mapping is accessing. Is it possible in Free BSD? The IPFW is started. Tks in advance. Dan Pinheiro Brasil

[squid-users] Transparent cache error reporting

2003-12-29 Thread Berant Lemmenes
I'm running a transparent squid cache using WCCP. The cache is being used in an ASP/Hosting company that services both internal employees as well as hosted company's citrix farms etc... The problem is that as this one cache is servicing many different companies I don't want them all coming to m

Re: [squid-users] Transparent cache error reporting

2003-12-29 Thread Henrik Nordstrom
On Mon, 29 Dec 2003, Berant Lemmenes wrote: > I've had two thoughts... can squid just pass on the original error back > to the client? In the cases of Squid error messages the error generated by Squid is the original error message. > I know I'm not describing that well, what I would like is ins

[squid-users] Problem setting up accelerated proxy for multiple servers with HTTP and HTTPS support

2003-12-29 Thread Rafael Caceres
I'm trying to set up an accelerated proxy visible from the Internet, that proxies at least two internal web servers, which use HTTP and HTTPS. I have had success setting up the HTTP related configuration, but modifying it for both HTTP and HTTPS results in Squid refusing to start and quitting with

[squid-users] Squid bug #499 - not all Microsoft's fault (maybe)

2003-12-29 Thread Parkes, Lloyd
I experienced this problem and found out that the solution provided in Q331906 was a bit fragile. While looking at this I found that Squid seems to misbehaving and that this is what causes IE6SP1 to go off the deep end. I ran a packet capture and compared the TCP sequences of a bad run with IE6SP1

Re: [squid-users] Squid bug #499 - not all Microsoft's fault (maybe)

2003-12-29 Thread Henrik Nordstrom
On Tue, 30 Dec 2003, Parkes, Lloyd wrote: > What I noticed real quick in the bad case was that the connection was being > shutdown right after the 407 response from squid, and it was being initiated > by squid and not by IE. Which Squid version are you looking at? Regards Henrik

Re: [squid-users] Problem setting up accelerated proxy for multiple servers with HTTP and HTTPS support

2003-12-29 Thread Henrik Nordstrom
On 29 Dec 2003, Rafael Caceres wrote: > "Failed to aquire SSL certificate: error: 0200100E:system library:fopen: > Bad address" This is doe to an incorrect https_port specification. Regards Henrik

RE: [squid-users] Squid bug #499 - not all Microsoft's fault (may be)

2003-12-29 Thread Parkes, Lloyd
I always forget the useful info. I am using the RedHat rpm squid-2.4.STABLE6-1.7.2 when I get the problem. The working machine runs squid-2.4.STABLE6-6.7.3. Both squids are running on RedHat 7.3. Beats my why they are different versions of squid, probably just a patch mismatch. Thanks, Lloyd Parke

RE: [squid-users] Squid bug #499 - not all Microsoft's fault (may be)

2003-12-29 Thread Henrik Nordstrom
On Tue, 30 Dec 2003, Parkes, Lloyd wrote: > I always forget the useful info. I am using the RedHat rpm > squid-2.4.STABLE6-1.7.2 when I get the problem. Please check if the same problem applies to squid-2.5.STABLE4. To my knowledge what you saw with your very old (and no longer supported) Squid v

Re: [squid-users] ICP

2003-12-29 Thread Muthukumar
> The problem I have is even if the ICP reply is Hit, my requesting proxy will > still goes direct. > If u use two proxies for proxy-authentication then,the problem will occur as ICP proxy A - proxy B | client Proxy A sends and ICP query to Proxy B about an object,