[squid-users] Removing very old objects

2004-02-17 Thread David
Greetings Squid community, I have a proxy which is getting to the point where I am running of disk space that I can allocate. I am wishing to remove all older objects from the cache that are say +2 years old. I know that 2.5 doesn't have 'reference_age' setting anymore so I am wondering what I

[squid-users] connections limit

2004-02-17 Thread Emilio Casbas
It is possible to limit the number of connections to a server through proxy? Thanks in advance Emilio C. -- smime.p7s Description: S/MIME Cryptographic Signature

[squid-users] Messenger problem

2004-02-17 Thread martin . gotlund
Hello, I have a problem whit squid and msn messenger, messenger keeps losing the connection whit the msn messenger server, this happens about once ever hour. Does anyone know what can be the problem ? Thanks in advance Martin

[squid-users] Client hostnames

2004-02-17 Thread Chris Burton
Hi All After days of playing, reading and testing i cant find the solution to the following problem. In my access.log i have entrys like 1077012108.716 1445 10.3.181.32 TCP_MISS/200 1989 GET http://marc.theaimsgroup.com/? - DIRECT/63.238.77.237 text/html now what i want todo is make it

[squid-users] Squid_ldap_auth stupid question

2004-02-17 Thread Dave Raven
Hi all, I have a stupid question with ldap_auth, its really a squid question - when I use a user of test\test to get in the ldap domain it removes the \ on the authenticate parameters line, if I escape it (\\) it puts two backslashes - I've tried

Re: [squid-users] connections limit

2004-02-17 Thread Anthony M. Rasat
On Tuesday 17 February 2004 16:29, Emilio Casbas wrote: It is possible to limit the number of connections to a server through proxy? Thanks in advance Emilio C. -- I assume you said server means an internal web server. Am I correct? -- Regards, Anthony M. Rasat PT. Kalteng Pos Press

Re: [squid-users] connections limit

2004-02-17 Thread Emilio Casbas
Anthony M. Rasat wrote: On Tuesday 17 February 2004 16:29, Emilio Casbas wrote: It is possible to limit the number of connections to a server through proxy? Thanks in advance Emilio C. -- I assume you said server means an internal web server. Am I correct? Correct. Is a departmental

Re: [squid-users] Don't Know Topic For This Question

2004-02-17 Thread Henrik Nordstrom
On Mon, 16 Feb 2004, OTR Comm wrote: Okay! Something's not working though! Have you verified that the content you are trying to cache is cacheable? See the cacheability engine linked in related software. acl wget_prog proxy_auth wget acl our_networks src 192.168.1.0/24 ...

Re: [squid-users] store.log question

2004-02-17 Thread Henrik Nordstrom
On Mon, 16 Feb 2004, OTR Comm wrote: I just rebooted my server and restarted squid and several consecutive entries like this appeared in my store.log: snip 1076992457.790 RELEASE -1 CE8669ED92F5F708F87752CD9666DFAF ? ? ? ? ?/? ?/? ? ? snip What does

Re: [squid-users] Removing very old objects

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, David wrote: Greetings Squid community, I have a proxy which is getting to the point where I am running of disk space that I can allocate. Squid should automatically recycle disk space as needed. If you run out of disk space then either your cache_dir is configured

[squid-users] rep_mime_type, http_reply_access and external_acl

2004-02-17 Thread Christoph Haas
Hi, list... I'm trying to increase security a little at our company proxy. Until now we only used regexps to look for content we do not users to access. Obviously that is easy to work around (rename the .EXE to .JPG and you are set). So I wanted at least to use MIME header ACLs to block certain

Re: [squid-users] Squid_ldap_auth stupid question

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Dave Raven wrote: I have a stupid question with ldap_auth, its really a squid question - when I use a user of test\test to get in the ldap domain it removes the \ on the authenticate parameters line Is this in the auth_param basic program line for binding as a

Re: [squid-users] connections limit

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Emilio Casbas wrote: It is possible to limit the number of connections to a server through proxy? See the max-conn cache_peer parameter. Or if it is the number of connections by a single user see the maxconn acl type. Regards Henrik

Re: [squid-users] Client hostnames

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Chris Burton wrote: i have tried log_fqdn but its not changed anything, does anyone know how to fix it, its squid-2.5.STABLE4 running on Redhat 9 box with apache 2 installed. Is the names of the client stations registered in DNS? host ip.of.a.station Regards Henrik

Re: [squid-users] Client hostnames

2004-02-17 Thread Chris Burton
nope but they are in WINS Henrik Nordstrom [EMAIL PROTECTED] 02/17/04 11:43am On Tue, 17 Feb 2004, Chris Burton wrote: i have tried log_fqdn but its not changed anything, does anyone know how to fix it, its squid-2.5.STABLE4 running on Redhat 9 box with apache 2 installed. Is the names of

RE: [squid-users] Squid_ldap_auth stupid question

2004-02-17 Thread Dave Raven
To bind a search user - I have to use the test\ part or the login fails and I can't change the AD server.. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: 17 February 2004 01:40 PM To: Dave Raven Cc: [EMAIL PROTECTED] Subject: Re: [squid-users] Squid_ldap_auth

Re: [squid-users] Client hostnames

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Chris Burton wrote: nope but they are in WINS Then Squid won't find them as Squid uses DNS. If you compile Squid with --disable-internal-dns and configure your systems nsswitch to use WINS after DNS for host lookups then it may work, but no guarantees. Another alternative

RE: [squid-users] Squid_ldap_auth stupid question

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Dave Raven wrote: To bind a search user - I have to use the test\ part or the login fails and I can't change the AD server.. I never used \ in any AD LDAP logins, but I have to admit that I never have tried to create a user with \ in his name if this is what you refer

Re: [squid-users] connections limit

2004-02-17 Thread Anthony M. Rasat
You may find your answer in FAQ section. Probably this is what you're looking for : http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.22 -- Regards, Anthony M. Rasat PT. Kalteng Pos Press Palangkaraya - Indonesia.- On Tuesday 17 February 2004 18:04, you wrote: Anthony M. Rasat wrote:

Re: [squid-users] rep_mime_type, http_reply_access and external_acl

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Christoph Haas wrote: Unfortunately there seem to be problems still using rep_mime_header and external_acl. Hendrik once said (2003-08-10 06:50:55 PST/Re: [squid-users] external_acl and http_reply_access) that external acl methods is not suitable for use in

Re: [squid-users] connections limit

2004-02-17 Thread Emilio Casbas
Henrik Nordstrom wrote: On Tue, 17 Feb 2004, Emilio Casbas wrote: It is possible to limit the number of connections to a server through proxy? See the max-conn cache_peer parameter. Thanks, but the server is not a cache_peer, is a database server. Or if it is the number of

Re: [squid-users] connections limit

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Emilio Casbas wrote: Thanks, but the server is not a cache_peer, is a database server. Then make it a cache_peer and you gain this control. Regards Henrik

Re: [squid-users] connections limit

2004-02-17 Thread Emilio Casbas
Henrik Nordstrom wrote: On Tue, 17 Feb 2004, Emilio Casbas wrote: Thanks, but the server is not a cache_peer, is a database server. Then make it a cache_peer and you gain this control. Regards Henrik well, then it is possible to create a server as a peer without he is proxy?, if it

RE: [squid-users] Squid_ldap_auth stupid question

2004-02-17 Thread Dave Raven
-D binddn DN to bind as to perform searches -w bindpasswd password for binddn I'm using those two options - I assumed that -D domain\user -w userpassword was correct for what I'm trying - is this wrong? I have a Java ldap program - if I append the base DN

Re: [squid-users] connections limit

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Emilio Casbas wrote: well, then it is possible to create a server as a peer without he is proxy? Most servers work fine as a non-ICP parent to Squid. If yours do not then you could look into Squid-3 where origin server type peers exists, or layer the design with another

RE: [squid-users] Squid_ldap_auth stupid question

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Dave Raven wrote: -D binddn DN to bind as to perform searches -w bindpasswd password for binddn I'm using those two options - I assumed that -D domain\user -w userpassword was correct for what I'm trying - is this wrong? This is

[squid-users] Files not cached

2004-02-17 Thread Markus Linke
Hi, I am a new user to squid (and this mailing-list) and I have a question regarding the caching of files. The system is a new redhat 9 system with pre-configured squid. I checked the configuration parameters and it seems to be fine for our needs. Looking at the (access) log-file I can

[squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Carlos Simbaña
Hi, I have a big problem. My cache.log say: 2004/02/16 18:41:20| WARNING! Your cache is running out of filedescriptors 2004/02/16 18:41:36| WARNING! Your cache is running out of filedescriptors 2004/02/16 18:41:52| WARNING! Your cache is running out of filedescriptors and I can´t surfing I have

[squid-users] Refresh pattern in seconds?

2004-02-17 Thread Taneli Lepp
Hi, If Squid's manual is correct, is it true that I can only set an object's min and max age as minutes? Can I use fractions of minutes like 0.5 for 30 seconds? If not, is there a patch to change the age setting to seconds? Also if the setting is less than one minute, Squid will not cache the

RE: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Elsen Marc
Hi, I have a big problem. My cache.log say: 2004/02/16 18:41:20| WARNING! Your cache is running out of filedescriptors 2004/02/16 18:41:36| WARNING! Your cache is running out of filedescriptors 2004/02/16 18:41:52| WARNING! Your cache is running out of filedescriptors and I can´t

Re: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Carlos Simbaña wrote: I have already edit /usr/include/bits/types.h to define __FD_SETSIZE 8192 This is not needed. I have already set ulimit -HSn 8192 This is, both when recompiling Squid and when starting Squid. I have already recompile my squid 2.5 stable4 And

[squid-users] NTLM/wbinfo_group.pl with Samba 3.0.2

2004-02-17 Thread Jim Richey
Using Squid 2.5.STABLE4 with all listed patches. Squid is configured for NTLM authentication and also using wbinfo_group.pl as an external acl. Works fine with Samba 3.0.1. Something has apparently broke when using Samba 3.0.2 or 3.0.2a. Browser gets access denied error. The following appears

[squid-users] swap.state growing large

2004-02-17 Thread Chris Wilson
Hi all, I'm trying to configure Squid to run on machines with no writable permanent storage (just a ramdisk) and little memory. I've allocated a 4Mb ramdisk for the Squid cache. Ideally I would like to disable disk caching entirely and have Squid only use RAM, but I haven't figured out how to

Re: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Carlos Simbaña
2004/02/17 10:51:54| Restarting Squid Cache (version 2.5.STABLE4)... 2004/02/17 10:51:54| FD 6 Closing HTTP connection 2004/02/17 10:51:54| FD 13 Closing ICP connection 2004/02/17 10:51:54| Cache dir '/var/spool/squid' size remains unchanged at 1638400 KB 2004/02/17 10:51:54| Store logging

Re: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Carlos Simbaña
At the morning said: 2004/02/17 09:13:49| WARNING! Your cache is running out of filedescriptors 2004/02/17 09:14:05| WARNING! Your cache is running out of filedescriptors 2004/02/17 09:14:12| WARNING: All redirector processes are busy. 2004/02/17 09:14:12| WARNING: 5 pending requests queued

Re: [squid-users] NTLM/wbinfo_group.pl with Samba 3.0.2

2004-02-17 Thread Jan Heyelmann
Hi, try replacing the line $groupGID = `wbinfo -Y $groupSID`; with $groupGID = `wbinfo -Y $groupSID`; Hope that helps Jan Using Squid 2.5.STABLE4 with all listed patches. Squid is configured for NTLM authentication and also using wbinfo_group.pl as an external acl. Works fine with Samba

Re: [squid-users] Don't Know Topic For This Question - Got it!

2004-02-17 Thread OTR Comm
acl wget_prog proxy_auth wget acl our_networks src 192.168.1.0/24 ... redirector_access deny wget_prog http_access allow password http_access allow wget_prog #http_access allow our_networks (Commented out for this test) http_access deny all miss_access deny our_networks

RE: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Trevor
Add these lines to your /etc/squid/squid.conf file and restart squid. half_closed_clients off server_persistent_connections off client_persistent_connections off That should address your problem. I am running 2.4STABLE6. Trevor. -Original Message- From: Carlos Simbaña [mailto:[EMAIL

Re: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Carlos Simbaqa wrote: 2004/02/17 10:51:54| Restarting Squid Cache (version 2.5.STABLE4)... 2004/02/17 10:51:54| FD 6 Closing HTTP connection 2004/02/17 10:51:54| FD 13 Closing ICP connection 2004/02/17 10:51:54| Cache dir '/var/spool/squid' size remains unchanged at

Re: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Carlos Simbaña
cache log say: 2004/02/17 11:28:50| Starting Squid Cache version 2.5.STABLE4 for i686-pc-linux-gnu... 2004/02/17 11:28:50| Process ID 21861 2004/02/17 11:28:50| With 1024 file descriptors available but yesterday I set to 8192 (ulimit -HSn 8192 and squid was recompiled) Carlos - Original

Re: [squid-users] child squid proxy not saving data on disk, but anyway operating correctly.

2004-02-17 Thread Duane Wessels
Btw the pc wich operates squid on is working as a bridge, and I realised, that noone localhost connections are being processed. Interresting. Btw non locally originated connections are working well. Then you can copy the squidclient program to an external machine (or install Squid again

Re: [squid-users] Refresh pattern in seconds?

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, [ISO-8859-15] Taneli Leppä wrote: If Squid's manual is correct, is it true that I can only set an object's min and max age as minutes? Can I use fractions of minutes like 0.5 for 30 seconds? No. If not, is there a patch to change the age setting to seconds? Not that I

Re: [squid-users] swap.state growing large

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Chris Wilson wrote: Hi all, I'm trying to configure Squid to run on machines with no writable permanent storage (just a ramdisk) and little memory. I've allocated a 4Mb ramdisk for the Squid cache. Ideally I would like to disable disk caching entirely and have Squid

Re: [squid-users] Don't Know Topic For This Question - Got it!

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, OTR Comm wrote: acl wget_prog proxy_auth wget acl our_networks src 192.168.1.0/24 ... redirector_access deny wget_prog http_access allow password How is password defined? If this is all users then no further http_access rules is needed. miss_access allow wget_prog

Re: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Carlos Simbaña
After add the lines half_closed_clients off server_persistent_connections off client_persistent_connections off Squid start and I am Surfing!!! Thanks but I am worried because 3 lines say: 2004/02/17 11:51:22| WARNING: All redirector processes are busy. 2004/02/17 11:51:22| WARNING: 5

[squid-users] GET error

2004-02-17 Thread Gleidson Antonio Henriques
Hi list, For some reason i don't know why, i got this error in my access.log 192.168.33.7 TCP_DENIED/400 1527 GET /lib/image/0,,8578,00.gif - NONE/- text/html Note that the GET doesn't show the COMPLETE URL of request. The error not occur in ALL cases. I have more classes of

Re: [squid-users] back to Squid 2.3

2004-02-17 Thread Davide Vaghetti
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Duane Wessels wrote: | I had a lot of problems with squid 2.5stable6 on a Slackware 9.1. | I changed the configuration and the compile option a milion | times, enabling and disabling aufs and async-io, tuning the | cache_mem and cache_dir. After a

Re: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Muthukumar
half_closed_clients off server_persistent_connections off client_persistent_connections off 2004/02/17 11:51:22| WARNING: All redirector processes are busy. 2004/02/17 11:51:22| WARNING: 5 pending requests queued 2004/02/17 11:51:22| Consider increasing the number of redirector processes

Re: [squid-users] Transparent proxy issue

2004-02-17 Thread Mark Seamans
Sorry it took so long: Below is the squid.conf followed by the tcpdump of the XP box attempting transparent proxy. Last is the XP box trying to go directly to the proxy port. Both are not working. However. If I dialup with my Gentoo Linux, both proxy direct and transparent proxy works fine

Re: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Carlos Simbaña
I set redirect_children 10 and all is running ok. Thanks Carlos - Original Message - From: Muthukumar [EMAIL PROTECTED] To: Carlos Simbaña [EMAIL PROTECTED] Cc: squid-users [EMAIL PROTECTED] Sent: Tuesday, February 17, 2004 12:22 PM Subject: Re: [squid-users] Your cache is running out of

RE: [squid-users] swap.state growing large

2004-02-17 Thread Chris Wilson
Hi all, http://www.squid-cache.org/Doc/FAQ/FAQ-4.html#ss4.20 If you wan't to keep mem. caching ; then do NOT use acl all src 0/0 no_cache deny all Many thanks to all who responded, and sorry to have asked a FAQ. Cheers, Chris. -- __ __ _ / __/ /

[squid-users] Reporting on Squid

2004-02-17 Thread Jim_Brouse/PYT
I use the below command to determine who has been to a particular site but what would I need to add to determine how many times they did visit that site. grep givensite.com /var/log/squid/access-02-13-04.log |tr -s ' ' | cut -d' ' -f3 |sort -n|uniq Jim

[squid-users] Squid + MSAD.

2004-02-17 Thread Ampugnani, Fernando
Hi all, I want validate squid via squid_ldap_auth but don´t work. Is the syntax correct? ./squid_ldap_auth -b cn=InternetUsers,ou=Grupos,ou=Comunes,ou=UsuariosyGrupos,ou=Corporation,dc=a r,dc=Corp -h 207.169.88.202 -p 389 ar-testuser password ERR Thanks in advance. Fernando Ampugnani

Re: [squid-users] NTLM/wbinfo_group.pl with Samba 3.0.2

2004-02-17 Thread Jim Richey
That fixed it. Thanks Jan. Jan Heyelmann wrote: Hi, try replacing the line $groupGID = `wbinfo -Y $groupSID`; with $groupGID = `wbinfo -Y $groupSID`; Hope that helps Jan Using Squid 2.5.STABLE4 with all listed patches. Squid is configured for NTLM authentication and also using

Re: [squid-users] Reporting on Squid

2004-02-17 Thread Muthukumar
I use the below command to determine who has been to a particular site but grep givensite.com /var/log/squid/access-02-13-04.log |tr -s ' ' | cut -d' ' -f3 |sort -n|uniq what would I need to add to determine how many times they did visit that site. grep `grep givensite.com

[squid-users] Only send replies to the client once they are complete?

2004-02-17 Thread Graeme Bisset
Hi, Is there a way in SQUID to buffer the response for a client and only send it after the full response has been received from the server? If not, where might be a good place to add this functionality? I'd like to be able to see the full reply and do some processing on it before allowing the

[squid-users] Squid WCCPV2 Question

2004-02-17 Thread Wallace, Brian S.
Hi: I'm trying to get Squid with the wccpv2 code to talk with our Cisco router using L2. The router I SEE YOU packet is advertising: WCCP2_FORWARDING_METHOD_L2 WCCP2_ASSIGNMENT_METHOD_MASK WCCP2_PACKET_RETURN_METHOD_GRE I have added the WCCP2_CAPABILITY_INFO to the I AM

Re: [squid-users] Reporting on Squid

2004-02-17 Thread Jim_Brouse/PYT
grep `grep givensite.com /var/log/squid/access-02-13-04.log |tr -s ' ' | cut -d' ' -f3 |sort -n|uniq` /var/log/squid/access-02-13-04.log | wc -l The above command tells the total amount of times a particular site was visited by all ips but how could you change this so it says IP address so and

Re: [squid-users] Squid on SuSE Openexchange 4.1 (United Linux 1.0)

2004-02-17 Thread Gareth
From: Henrik Nordstrom [EMAIL PROTECTED] On Mon, 16 Feb 2004, Gareth wrote: I've added -xv to the '#! /bin/sh' line of the script to see what's happening, and it seems the kill 0 12345 doesn't actually succeed in killing the process, it tries this for 60 seconds, but nothing. kill 0

[squid-users] Transparent Proxy Trouble

2004-02-17 Thread mark
Hello, Folks - I have been using squid/squidGuard on our proxy servers here at the library I work at for about a year and a half, and have been having great success with them. I am now trying to set up a transparent proxy for a new wireless network so that we can let folks bring in there

Re: [squid-users] Transparent Proxy Trouble

2004-02-17 Thread Jim_Brouse/PYT
Can you browse the Internet from the squid server itself? Is it possibly a firewall rule rejecting the traffic from the wireless clients? Is it possibly a routing rule sending Internet traffic out the wrong interface? ping www.google.com for example then do ip route get IPaddressofgoogle.com

[squid-users] Compile errors - Nothing to be done for `all-am'.

2004-02-17 Thread Gareth
Hi Guys I decided I wanted to try and get Squid to authenticate users against a Windows 2000 Active Directory, but I didn't seem to have any of the auth programs on my installation. I decided to install squid-2.5.STABLE4, passing --enable-auth=basic,digest,ntlm (and others) to configure. The

Re: [squid-users] Compile errors - Nothing to be done for `all-am'.

2004-02-17 Thread Robert Collins
On Wed, 2004-02-18 at 07:35, Gareth wrote: Hi Guys I decided I wanted to try and get Squid to authenticate users against a Windows 2000 Active Directory, but I didn't seem to have any of the auth programs on my installation. I decided to install squid-2.5.STABLE4, passing

Re: [squid-users] Don't Know Topic For This Question - Got it!

2004-02-17 Thread OTR Comm
Henrik Nordstrom wrote: On Tue, 17 Feb 2004, OTR Comm wrote: acl wget_prog proxy_auth wget acl our_networks src 192.168.1.0/24 ... redirector_access deny wget_prog http_access allow password How is password defined? If this is all users then no further http_access rules is

Re: [squid-users] Compile errors - Nothing to be done for `all-am'.

2004-02-17 Thread Gareth
From: Robert Collins [EMAIL PROTECTED] On Wed, 2004-02-18 at 07:35, Gareth wrote: Hi Guys I decided I wanted to try and get Squid to authenticate users against a Windows 2000 Active Directory, but I didn't seem to have any of the auth programs on my installation. I decided to install

Re: [squid-users] Your cache is running out of filedescriptors

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Carlos Simbaña wrote: 2004/02/17 11:51:22| WARNING: All redirector processes are busy. 2004/02/17 11:51:22| WARNING: 5 pending requests queued 2004/02/17 11:51:22| Consider increasing the number of redirector processes in your config file. Is it normal? Depends on

Re: [squid-users] GET error

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Gleidson Antonio Henriques wrote: For some reason i don't know why, i got this error in my access.log 192.168.33.7 TCP_DENIED/400 1527 GET /lib/image/0,,8578,00.gif - NONE/- text/html Anything interesting in cache.log explaining why the request was rejected by

RE: [squid-users] swap.state growing large

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Chris Wilson wrote: Many thanks to all who responded, and sorry to have asked a FAQ. No problem. Your question is not an entirely obvious match for the FAQ. Regards Henrik

Re: [squid-users] Transparent proxy issue

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Mark Seamans wrote: Below is the squid.conf followed by the tcpdump of the XP box attempting transparent proxy. Last is the XP box trying to go directly to the proxy port. Both are not working. This is a low-level problem. squid.conf is not relevant. Looks like your XP

Re: [squid-users] Reporting on Squid

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004 Jim_Brouse/[EMAIL PROTECTED] wrote: I use the below command to determine who has been to a particular site but what would I need to add to determine how many times they did visit that site. uniq -c ? Regards Henrik

Re: [squid-users] Squid + MSAD.

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Ampugnani, Fernando wrote: I want validate squid via squid_ldap_auth but don´t work. See the MSAD examples in the squid_ldap_auth manual for some information as to what is required to set up the connection. Regards Henrik

Re: [squid-users] Only send replies to the client once they are complete?

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Graeme Bisset wrote: Is there a way in SQUID to buffer the response for a client and only send it after the full response has been received from the server? If not, where might be a good place to add this functionality? See the ICAP branches at

Fw: [squid-users] Solution: GET error

2004-02-17 Thread Gleidson Antonio Henriques
Thanks for your response Henrik, I found the solution for the problem in variable httpd_accel_uses_host_header on Thanks one more time, Gleidson Antonio Henriques - Original Message - From: Henrik Nordstrom [EMAIL PROTECTED] To: Gleidson Antonio Henriques [EMAIL

[squid-users] Dansguardian Squid

2004-02-17 Thread Enrique Charry
Dear List! I have two questions: 1. DG don´t pass domainname\username to squid log, How do i do for it? 2. What´s the best log analizer for Squid? Thank you! Enrique Charry _ Do You Yahoo!? Información de Estados Unidos y América

Re: [squid-users] Squid WCCPV2 Question

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Wallace, Brian S. wrote: I have added the WCCP2_CAPABILITY_INFO to the I AM HERE packet. Since we are running on Solaris 8, we don't have a GRE module and I am setting the return method to L2. That is fine. After talking with Cisco, they only support a return method

Re: [squid-users] Transparent proxy issue

2004-02-17 Thread Mark Seamans
Do you have firewalling enabled on the XP? No. I actually just tried it with an old Windows CE box...same thing... Of course...dialup with my linux box...works great! Can it talk to other network services in the same network? Have you tried for example pinging the proxy IP address or the

Re: [squid-users] Don't Know Topic For This Question - Got it!

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, OTR Comm wrote: acl password proxy_auth REQUIRED So once password is allowed, it is redundant to have the rule http_access allow wget_prog right? Right. You have already allowed all authenticated users access, including wget. The wget user is just a user like any

[squid-users] Reverse Proxy with Redirector and snort rules

2004-02-17 Thread squid
I've been using squid as a web cache for awhile. I read this great article on using Squid as a reverse proxy to prevent attacks against a web server (article at: http://www.unixreview.com/documents/s=8989/sam0402c/ ). Unfortunately I cannot find a redirector that is written for this purpose.

[squid-users] Re: Don't Know Topic For This Question

2004-02-17 Thread Gabriel Wicke
On Mon, 16 Feb 2004 18:25:27 -0700, OTR Comm wrote: Hello, I ma trying to setup a squid system that uses wget to 'feed' data into and then allows authenticated users to access the cached data in the system but not go beyond the cached data. That is, if the data is avalable in the cache,

[squid-users] redirect with transparent squid with squidguard expresionlist fails TCP_MISS/000

2004-02-17 Thread Ted Kaczmarek
http://www.squid-cache.org/mail-archive/squid-users/200311/0364.html I am also seeing this but neither the redirector, transparent squid or http server with my redirect has ENC enabled. I am running squidguard as a redirector and it works great, but for any hits on the expressionlist the redirect

Re: [squid-users] redirect with transparent squid with squidguard expresionlist fails TCP_MISS/000

2004-02-17 Thread Ted Kaczmarek
Whoops :-) squid-2.5.STABLE3-1rh redhat 9 squidGuard-1.2.0-3 Sorry for responding to my own post. Ted On Tue, 2004-02-17 at 21:13 -0500, Ted Kaczmarek wrote: http://www.squid-cache.org/mail-archive/squid-users/200311/0364.html I am also seeing this but neither the redirector, transparent

[squid-users] http_access .. please help (Top Urgent)

2004-02-17 Thread Winanjaya
I only allow some address to access 2 spesific URLs. my acl http_access goes below is my etc/squid.conf: acl brata src 172.16.2.11 acl farina src 172.16.2.21 acl meike1 src 172.16.2.32 acl meike2 src 172.16.2.52 acl polisy2000acl1 url_regex

Re: [squid-users] Re: Don't Know Topic For This Question

2004-02-17 Thread OTR Comm
Wwwoffle should be useful for this job. Thanks for the lead, it does look interesting, but I need to stay with Squid and wget for other functionality in the system that I am developing. Thank you, Murrah Boswell

RE: [squid-users] Re: Don't Know Topic For This Question

2004-02-17 Thread Mark A. Lewis
Then just use wget to make a local mirror Why bother with squid? -Original Message- From: OTR Comm [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 17, 2004 8:53 PM To: squid Subject: Re: [squid-users] Re: Don't Know Topic For This Question Wwwoffle should be useful for this job.

[squid-users] Malformed urls

2004-02-17 Thread Deepa D
Hi, Since the past two days, squid is passing lots of malformed urls to the redirector program. Samples are as follows :- ^Hý5^Hñ^RBongs.tamilsongs.net/songs/17/eahawtawkea/1599.rm ^Hý5^Hñ^RBongs3.tamilsongs.net/songs/17/eahawtawkea/1599.rm

Re: [squid-users] Transparent proxy issue

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Mark Seamans wrote: Purpose is when a user hasn't paid, radius will stick them in a special group. The 5300 gives them a special ip number and route-map's their traffic to the linux box (eth0) as the default gateway. Then, iptables grabs port 80 traffic, redirects it

[squid-users] Re: Malformed urls

2004-02-17 Thread Henrik Nordstrom
On Wed, 18 Feb 2004, Deepa D wrote: Hi, Since the past two days, squid is passing lots of malformed urls to the redirector program. Samples are as follows :- ^Hý5^Hñ^RBongs.tamilsongs.net/songs/17/eahawtawkea/1599.rm ^Hý5^Hñ^RBongs3.tamilsongs.net/songs/17/eahawtawkea/1599.rm

Re: [squid-users] redirect with transparent squid with squidguard expresionlist fails TCP_MISS/000

2004-02-17 Thread Henrik Nordstrom
On Tue, 17 Feb 2004, Ted Kaczmarek wrote: http://www.squid-cache.org/mail-archive/squid-users/200311/0364.html I am also seeing this but neither the redirector, transparent squid or http server with my redirect has ENC enabled. I am running squidguard as a redirector and it works great, but

Re: [squid-users] http_access .. please help (Top Urgent)

2004-02-17 Thread Henrik Nordstrom
On Wed, 18 Feb 2004, Winanjaya wrote: I only allow some address to access 2 spesific URLs. my acl http_access goes below is my etc/squid.conf: acl brata src 172.16.2.11 acl farina src 172.16.2.21 acl meike1 src 172.16.2.32 acl meike2 src 172.16.2.52 acl

[squid-users] Deny yahoo messager

2004-02-17 Thread Winanjaya
How to configure squid for denying my users to connect to yahoo messager? I need advice thanks winan