[squid-users] Blocking squireelmail web service

2004-02-03 Thread RAJNISH GANGWAR
Hi all, 1)-I want to restrict mail client service squireelmail on some dhcp clients on which I allow the internet access. 2)- I want to limit max no. of connection restriction on the same, for which I use- acl 3conn maxconn 3 But it does not work. suggest me , if anyone can Rajnish Gangwar

Re: [squid-users] Hotmail and other Ports

2004-02-03 Thread Henrik Nordstrom
On Mon, 2 Feb 2004, RAJNISH GANGWAR wrote: 1)- Can you suggest me to restrict squirrelmail webmail on dhcp client on which i givae the internet connectivity. Squirrelmail is just a web application running over http, no different than any other web site. It can be blocked by blocking the URLs

[squid-users] Some NTLM info which may explain failures

2004-02-03 Thread Henrik Nordstrom
Hello Squid Users, If you are using NTLM and have problem with random auth popups then the information in MS KB 312176 may be relevant to your problem url:http://support.microsoft.com/default.aspx?scid=kb;en-us;312176 I have not yet investigated how Squid reacts to this odd browser behaviour

[squid-users] Site spesific --File Blocking by extention

2004-02-03 Thread Leon Dippenaar
Hi there! I currently have a nice setup where I block HTTP downloads by extension , .exe,.mp3, etc However I want to allow all HTTP downloads from www.microsoft.com, windowsupdate.micorsoft.com downloads.microsoft.com The the clowns on microsnot O/S can run their windowsupdate without

[squid-users] Re: Some NTLM info which may explain failures

2004-02-03 Thread Henrik Nordstrom
Another possible workaround is mentioned in MS KB 820780 url:http://support.microsoft.com/default.aspx?scid=kb;en-us;820780 This suggests that it may help to make the ERR_CACHE_ACCESS_DENIED message larger than 1460 bytes. For high speed LAN users I suspect it needs to be substantially larger,

Re: [squid-users] Site spesific --File Blocking by extention

2004-02-03 Thread Henrik Nordstrom
On Tue, 3 Feb 2004, Leon Dippenaar wrote: acl download url_regex -i /usr/local/squid/denydownload.txt http_access deny download lan This is global and nails all MS downloads: Please give me a hint as to how I can make MS domain Http downloads possible You could enhance the existing

Re: [squid-users] Site spesific --File Blocking by extention

2004-02-03 Thread Leon Dippenaar
Thank a million its much appreciated, that makes sense.. Now i think im not getting my acl list the correct order quite correct because the MS downloads are still being nailed , have a quick look below let me know how bad the blunder is acl trust src 172.16.1.145 acl semi_trust src

Re: [squid-users] Site spesific --File Blocking by extention

2004-02-03 Thread Henrik Nordstrom
On Tue, 3 Feb 2004, Leon Dippenaar wrote: Thank a million its much appreciated, that makes sense.. Now i think im not getting my acl list the correct order quite correct because the MS downloads are still being nailed , have a quick look below let me know how bad the blunder is acl

[squid-users] network blocking -gettings stressed with it now :o)

2004-02-03 Thread Chris Burton
Hi All, im getting a bit stressed with squid now, finally got it all configured apart from one little bit, getting stuff banned by our internal IPs basicly as you can tell by our config file (pasted below) is that we pull a list of words that are banned from the file blocked, we would like todo

[squid-users] Réf. : [squid-users] Re: Some NTLM info which may explain failures

2004-02-03 Thread sdavy
I've reduced the number of popups using some acls: proxy authentication is not asked for images, js, css files acl password proxy_auth REQUIRED acl images urlpath_regex \.gif$ acl images urlpath_regex \.png$ acl images urlpath_regex

[squid-users] store.log

2004-02-03 Thread trainier
Is there a point in time at which squid's performance decreases because of the size of the store.log? Is there a mechanism to control the size of store.log? Do I need to control the size of store.log? What about access.log? If there's documentation, I'd be glad to read it and apologize for

Re: [squid-users] Re: Some NTLM info which may explain failures

2004-02-03 Thread Serassio Guido
Hi Henrik, At 12.36 03/02/2004, Henrik Nordstrom wrote: Another possible workaround is mentioned in MS KB 820780 url:http://support.microsoft.com/default.aspx?scid=kb;en-us;820780 This suggests that it may help to make the ERR_CACHE_ACCESS_DENIED message larger than 1460 bytes. For high speed

[squid-users] Who can help me out with some Squid ACL's? :)

2004-02-03 Thread Evert Meulie
Hi! Who can help me out with some Squid ACL's? I've tried, but am not able to get it to work 100%... I need the following to work: *localhost IP a.b.c.d should be the only ones being able to access the cachemgr.cgi. With a password and NOT being able to shut down the cache * all machines in

[squid-users] patch to suppress version string in HTTP headers and HTML error pages in 2.5.4

2004-02-03 Thread Nathan R. Valentine
I was searching the list archives and noticed that some people have asked to be able to suppress version information in the HTTP Server header. I wrote a quick patch and have uploaded it to bugzilla: http://www.squid-cache.org/bugs/show_bug.cgi?id=907 The patch is also available here:

[squid-users] compile error on AIX

2004-02-03 Thread Nerijus Baliunas
Hello, I am trying to compile latest squid 2.5.STABLE4 daily snapshot on AIX 5.1 with gcc 2.9-aix51-020209. It fails while compiling coss/async_io.c: In file included from ../../src/squid.h:203, from coss/async_io.c:17: /usr/include/sys/select.h:33: warning: empty declaration

[squid-users] proxy_auth repetition problems

2004-02-03 Thread Sylvester Manx
I am using smb_auth as the NTLM authenticating utility. When I put a user in an acl that, for example, denies them access to a site, they must enter their username 3 times before they get the deny_info page. Is there someway to avoid this? To have this page come up after the first successful

[squid-users] Problems with reverse SSL Proxy Squid 3 - Certificate related

2004-02-03 Thread Ben Keepper
Hello, My squid.conf(With a lot of help from Derek Winkler): visible_hostname squid.keepper.net cache_mgr [EMAIL PROTECTED] https_port 443 cert=/usr/local/squid/etc/server.crt key=/usr/local/squid/etc/server.key defaultsite=mail.keepper.net cache_peer mail.keepper.net parent 443 0 no-query

Re: [squid-users] Squid without permanent disk accesses?

2004-02-03 Thread Henrik Nordstrom
On Tue, 3 Feb 2004, Sören Lorenz wrote: thanks for your reply. Unfortunately I'm not a programmer, my knowledge is not sufficient to change source code. Isn't there another way to deactivate the mentioned function or perhaps an unofficial modified source package available? I have read the

Re: [squid-users] Re: Some NTLM info which may explain failures

2004-02-03 Thread Henrik Nordstrom
On Tue, 3 Feb 2004, Serassio Guido wrote: But, I have a doubt: why using ISA Server with NTLM they are never similar problems ? The problems with random auth popups and account lockouts have been identified. Currently working on a patch but it will take a while to get correct. See bug #908.

Re: [squid-users] network blocking -gettings stressed with it now :o)

2004-02-03 Thread Henrik Nordstrom
Please see Squid FAQ chapter 10 for a good description of how http_access works. Regards Herik On Tue, 3 Feb 2004, Chris Burton wrote: Hi All, im getting a bit stressed with squid now, finally got it all configured apart from one little bit, getting stuff banned by our internal IPs

Re: [squid-users] store.log

2004-02-03 Thread Henrik Nordstrom
On Tue, 3 Feb 2004 [EMAIL PROTECTED] wrote: Is there a point in time at which squid's performance decreases because of the size of the store.log? Not really. Is there a mechanism to control the size of store.log? Do I need to control the size of store.log? Recommended action is to have

Re: [squid-users] proxy_auth repetition problems

2004-02-03 Thread Henrik Nordstrom
On Tue, 3 Feb 2004, Sylvester Manx wrote: I am using smb_auth as the NTLM authenticating utility. When I put a user in an acl that, for example, denies them access to a site, they must enter their username 3 times before they get the deny_info page. They get the page on the first, but the

Re: [squid-users] Hotmail and other Ports

2004-02-03 Thread Simon Walters
Ok, just an update, I've found out that the PC's on the network can access hotmail. What is the difference between the setup of windows and mac? When I try to login on mac it doesn't even log the request. When I was using apache as the server, it worked fine, but now that squid is here, it says