[squid-users] subscription

2004-01-23 Thread Rajnish Kr. Gangwar
With Regards Rajnish Kr. Gangwar

[squid-users] can not perform search using search engine

2004-01-23 Thread N.Danny Matias
Dear all, I have tried to built a prox server using RedHat9.0 and squid 2.5. I have succesfully installed Redhat and the squid, and I also have already configure the squid.conf. Then I go to another PC and I direct my proxy connection to my new-proxy, I can open sites such as www.yahoo.com and ot

RE: [squid-users] "Impossible keep-alive header"

2004-01-23 Thread Henrik Nordstrom
s > (acceptble). > Today I have compiled squid-2.5.STABLE4-20040123.tar.bz2 to know if the > problem was solved but the cache.log file starts to increase those warnings. 2.5.STABLE4-20040123 should be identical to your previous sources. There has been no changes after the keep-alive.pa

Re: [squid-users] please help - looping 301/302 redirect in an ssl reverse proxy

2004-01-23 Thread Mike_Ring
Cool, it's good to know that squid is capable of doing what I needed it to. I must be doing something wrong with the redirector scripts. I'll dive back into it in the morning. I'll also consider the security implications of ending the ssl endpoint elsewhere than the application server. There wil

Re: [squid-users] please help - looping 301/302 redirect in an ssl reverse proxy

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004 [EMAIL PROTECTED] wrote: > Thank you for the reply, but I'm afraid I don't quite understand your > answer. I thought that configuring external DNS to point > 'backend.foo.com'at the squid box would be sufficient to deal with the link > problem. In fact, when I make squid listen

RE: [squid-users] "Impossible keep-alive header"

2004-01-23 Thread M J
that you sent (keep-alive.patch ) and the warning decreased from 1 warning per 10 seconds to 1 warning per 4 or 5 hours (acceptble). Today I have compiled squid-2.5.STABLE4-20040123.tar.bz2 to know if the problem was solved but the cache.log file starts to increase those warnings. My topology

Re: [squid-users] please help - looping 301/302 redirect in an ssl reverse proxy

2004-01-23 Thread Mike_Ring
Henrik, Thank you for the reply, but I'm afraid I don't quite understand your answer. I thought that configuring external DNS to point 'backend.foo.com'at the squid box would be sufficient to deal with the link problem. In fact, when I make squid listen to http on 8015, it handles the links fine.

Re: [squid-users] How to compile ldap_group

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, Listas SouthNet wrote: > Hi, I have a Squid2.5 stable 3 running on a RH8 box. I want add the ldap > group helper, so, I have downloaded squid 2.5 stable4. > I known that i need compile the helper and then compile the squid it self > with the option to use that helper. but I

Re: [squid-users] please help - looping 301/302 redirect in an ssl reverse proxy

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004 [EMAIL PROTECTED] wrote: > The login page to the backend server got proxyed correctly, but after logon > the return traffic to the client contained frames with links to > 'http://backend.foo.com:8015'. Then you need to fix your application to use relative links. Absolue paths

RE: [squid-users] "Impossible keep-alive header"

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, M J wrote: > I had the same problem using the following snapshot > squid-2.5.STABLE4-20040123.tar.bz2. > Henrik wasn4t the keep-alive.patch incorporeted in to the daily snapshot ? > Many thanks in advance, Leon. All the changes discussed are in the curr

Re: [squid-users] How do you exclude a specific URL from being logged to access.log.

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, Brendan Kelliher wrote: > I've been looking at your site: devel.squid-cache.org/customlog/ > I can see how it allows configuring everything in access.log, but I'm > missing how one might exclude a specific URL with it. > > > To exclude viewbonds.com, would it be something in

[squid-users] please help - looping 301/302 redirect in an ssl reverse proxy

2004-01-23 Thread Mike_Ring
Hello everyone, I'm new to squid and I've been pulling out hairs on this problem all morning. Perhaps someone on the list has some advice. Here's the situation: I need to setup an SSL reverse proxy that will handle https traffic on port 443 from client (IE6) to proxy, and http traffic on port 80

RE: [squid-users] "Impossible keep-alive header"

2004-01-23 Thread M J
I had the same problem using the following snapshot squid-2.5.STABLE4-20040123.tar.bz2. Henrik wasn´t the keep-alive.patch incorporeted in to the daily snapshot ? Many thanks in advance, Leon. From: Henrik Nordstrom <[EMAIL PROTECTED]> To: Mike Mitchell <[EMAIL PROTECTED]> CC: [EMA

Re: [squid-users] eSafe Gateway as parent proxy

2004-01-23 Thread Stephen J. McCracken
On Thu, 2004-01-22 at 15:24, Stephen J. McCracken wrote: > Is the following correct? Should I blame esafe and go after the problem > there? Just to wrap up the thread, yes, the problem was with the eSafe Gateway. It requires a proxy between it and the Internet. We installed a small squid betwee

[squid-users] How to compile ldap_group

2004-01-23 Thread Listas SouthNet
Hi, I have a Squid2.5 stable 3 running on a RH8 box. I want add the ldap group helper, so, I have downloaded squid 2.5 stable4. I known that i need compile the helper and then compile the squid it self with the option to use that helper. but I don't know how to compile the ldap group, there is n

Re: [squid-users] How do you exclude a specific URL from being logged to access.log.

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, Brendan Kelliher wrote: > My squid access.log fills up with connections to the site www.viewbonds.com. > I want to exclude this one site from showing up in the access.log file > without denying it to users. See the customlog patch or Squid-3.0 when it gets released. Regards

Re: [squid-users] Transparent User ACL under Windows Terminal Server

2004-01-23 Thread Jaime Nebrera Herrera
Hi Henrik, > > Ajah, yes that might be a choice, but some of the systems dont depend on > > us (preciselly the AD server :) but is a good choice > > For both access methods to AD (Winbind or LDAP) you need some cooperation > from the directory managers. Yes, indeed. We are working with the c

Re: [squid-users] Access Control configuration prevents your request

2004-01-23 Thread Henrik Nordstrom
What does access.log say? On Fri, 23 Jan 2004, michel lodap wrote: > Hi All, > In the ACL section of my squid.conf file I have port 7101 allowed, but when > I try to connect to a remote site > siteapp.ancheimservices.ie:7101 > I am getting a access denied. Access Control configuration prevents y

Re: [squid-users] How does an external helper works ?

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, Riccardo Fontana wrote: > Is it enough to write an endless loop in perl script that read data from > stdin (username) and return OK or ERR checking soma basic functions ? Yes, until there is no input. You need to remember to make stdout unbuffered thou. > Where can I found

Re: [squid-users] Iptables rules for squid

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, Mathew Thomas wrote: > transparent caching. I would like to know how should I set the Ip > tables rules, like which port should be opened for LAN and which port > should be opened for internet, etc. The LAN needs to be able to access the proxy port (http_port). In addition

Re: [squid-users] Cache_dir not found

2004-01-23 Thread Henrik Nordstrom
yOn Fri, 23 Jan 2004, David Kirk wrote: > When I ran squid -z to create the cache, it must have read that line in the > squid.conf because it created all the cache subdirectories on the D drive, > so I can't figure out why it won't work when I start up squid? Did you remember to specify the corre

Re: [squid-users] Squid Java Applet Authentication Request

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Burnes, James wrote: > Perhaps I just didn't see this feature in the Squid docs, but does Squid > by default try to launch an authentication dialog when it see's Java > applet content in the stream? No. But if your proxy requires authentication then Squid insist on login cr

Re: [squid-users] cache digest based sibling selection

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Stuart Smith wrote: > Can someone please explain to me the mechanism squid uses to select > a sibling to fulfil a request if more than one sibling has the object, > and I am using cache digests ? In case of ICP the first one that answers. > The faq says that it will use Ne

[squid-users] How do you exclude a specific URL from being logged to access.log.

2004-01-23 Thread Brendan Kelliher
My squid access.log fills up with connections to the site www.viewbonds.com. I want to exclude this one site from showing up in the access.log file without denying it to users. Is this possible? I'm using Squid Version 2.4.STABLE1 on FreeBSD. Thanks in advance,

Re: [squid-users] ntlm_auth utils not working as non-root user

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Stephen W. Corey - 5535 wrote: > I restarted the smb service yesterday (I haven't restarted it in a long > time) and now the ntlm_auth command doesn't work as a non-root user. I > discovered this when Squid started prompting everyone for login info, > and it never accepts the

Re: [squid-users] MySql Authorization

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Riccardo Fontana wrote: > Tha problem is that I don't know how to make squid pass username checked > with wb_auth to this helper. As you do when you are not using this helper. The two are independent. > I've tried the following configuration but it doesn't work. Probably I

Re: [squid-users] fqdncache

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004 [EMAIL PROTECTED] wrote: > The default fqdncache is 1024. Is this low? Depends. How many clients do you have? And are you really using the fqdncache? (only used if you use srcdomain acls or have log_fqdn enabled) Maybe your question is actually about ipcache? In such case,

Re: [squid-users] Transparent User ACL under Windows Terminal Server

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Jaime Nebrera Herrera wrote: > Ajah, yes that might be a choice, but some of the systems dont depend on us > (preciselly the AD server :) but is a good choice For both access methods to AD (Winbind or LDAP) you need some cooperation from the directory managers. In case of

Re: [squid-users] Reverse proxy for ssl site

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Steve Hodges wrote: > I know that what I am describing so far is just a reverse proxy. But -- in > the case of the https server, I need SSL negotiation to happen between the > client and the *target* server, not between the client and the squid In such case you need a TCP pl

Re: [squid-users] squid-3 and epoll

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, unixware wrote: > FATAL: comm_select_init: epoll_create(): (38) Function > not implemented Looks like your kernel does not have epoll support compiled. Regards Henrik

Re: [squid-users] MySql Authorization

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Riccardo Fontana wrote: > I'm already using Netbios authentication but instead of the group helper > i would prefer to create an ACL based on a mysql table. Then you need to create a small helper to query your mysql table. See the external_acl_type directive. Regards Henri

RE: [squid-users] Access Control configuration prevents your request

2004-01-23 Thread Elsen Marc
> > Hi, > I fixed it. It was a secure http connection . I just had to > edit my SSL acl. > Thanks for your help Ok ! Marc.

RE: [squid-users] squid can ' t load acl's

2004-01-23 Thread Elsen Marc
> Em Sex, 2004-01-23 Ãs 06:30, Elsen Marc escreveu: > > > > > > > > Iá trying to use squid w/ a huge list ( more tham 200.000 > sites) and > > > when I start squid , after +_1 min I receive a message > saying that it > > > could not start. > > > > > > Starting proxy server: 2004/01/22 18:0

RE: [squid-users] squid can ' t load acl's

2004-01-23 Thread Paulo Ricardo
Em Sex, 2004-01-23 Ãs 06:30, Elsen Marc escreveu: > > > > > Iá trying to use squid w/ a huge list ( more tham 200.000 sites) and > > when I start squid , after +_1 min I receive a message saying that it > > could not start. > > > > Starting proxy server: 2004/01/22 18:01:45 > > /etc/init.d/squi

Re: [squid-users] Cache_dir not found

2004-01-23 Thread Serassio Guido
Hi, Il 01.49 23/01/2004 David Kirk ha scritto: Hey, I have installed Squid-2.5.STABLE4-NT on a Windows 2000 Professional PC in our DMZ. It seems to be proxying all right, but it is not caching anything. I had a look at the cache.log and found the following error: chdir: c:/squid/var/cache: (

Re: [squid-users] Cache_dir not found

2004-01-23 Thread Serassio Guido
Hi, At 04.05 23/01/2004, damk wrote: SquidNT by default use c:/ as root directory. You can play around a bit with regedit, find "Registry stored HKLM\SOFTWARE\GNU\SquidNT\2.5\squid\ConfigFile value c:/squid/etc/squid.conf" this line appear when you do squid -i -n Just change c:/ with root di

RE: [squid-users] Access Control configuration prevents your request

2004-01-23 Thread Elsen Marc
> > Hi All, > In the ACL section of my squid.conf file I have port 7101 > allowed, but when > I try to connect to a remote site > siteapp.ancheimservices.ie:7101 > I am getting a access denied. Access Control configuration > prevents your > request. > It's working fine when I bypass the proxy

Re: [squid-users] Block port to users

2004-01-23 Thread michel lodap
Hi Christoph, Thanks for the ACL but how can I block the ports to a specific range of ip addresses?Michel _ Trouvez l'âme soeur sur MSN Rencontres ! http://g.msn.fr/FR1000/9551

[squid-users] connection time

2004-01-23 Thread Leo
Hi, can somebody explain to me, how sarg calculates the connection time to a site. This to understand the total connection time to a specific site during a day or a week. thanks in advance X-LINK TELECOM LTDA Leo van Bussel Departamento Técnico de T.I. End : R: Camoes ,1684 Curitiba - Parana Tel

[squid-users] Access Control configuration prevents your request

2004-01-23 Thread michel lodap
Hi All, In the ACL section of my squid.conf file I have port 7101 allowed, but when I try to connect to a remote site siteapp.ancheimservices.ie:7101 I am getting a access denied. Access Control configuration prevents your request. It's working fine when I bypass the proxy. Am I missing something

[squid-users] Resolving local addresses

2004-01-23 Thread Koppen, Peter van
I've only recently become a member of [squid-users] so bare with me. We are using an old version of Squid, version 2.2 on SuSe 7.1 We are working on an upgrade to Suse 8.2 with Squid 2.5 stable1. On our old squid if we browse to a local server with the short name (intranet) the proxy would re

Re: [squid-users] does squid work with content filter tools?

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Mrvka Andreas wrote: > does squid work with content filter tools > to keep surfing safe? Depends on the content filter tool. Many have some form of integration for Squid to various degrees. Be warned that some require proprietary patches which can not be supported by the Sq

RE: [squid-users] squid can ' t load acl's

2004-01-23 Thread Elsen Marc
> > Iá trying to use squid w/ a huge list ( more tham 200.000 sites) and > when I start squid , after +_1 min I receive a message saying that it > could not start. > > Starting proxy server: 2004/01/22 18:01:45 > /etc/init.d/squid: line 133: 9223 Terminated > start-stop-daemon -

[squid-users] How does an external helper works ?

2004-01-23 Thread Riccardo Fontana
I'm trying to write a simple external helper that suite my needs. Is it enough to write an endless loop in perl script that read data from stdin (username) and return OK or ERR checking soma basic functions ? I've tried it but it doesn't get the username variable from the auth_helper I'm using