RE: [squid-users] blocking porn sites ?

2004-04-26 Thread Babar Kazmi
Hello Herment I used squid version 2.4.STABLE7 and squidGuard version 1.2.0 to block porn. I made a url list of porn sites in my Squid Guard url list and it blocked on access .. U have to edit yr squidGuard.conf. Regards Babar Kazmi. hi all i am running Squid Cache: Version 2.4.STABLE1.

[squid-users] Re: NTLM helper performance problem

2004-04-26 Thread SXB6300 Mailing
Sorry for answering lately, I can't check my mailbox during Week-ends. I'm not sure where I can exactly see the number of concurrent users during peak times. If it's in the general info page in the cache manager, we have beetwen 500 and 600 concurrent users during these peak times. I currently

[squid-users] attwireless page problem

2004-04-26 Thread Fritz Mesedilla
Greetings! We seem to be having problems visiting http://www.attwireless.com Is it with the sessions of the website? When I visit the site I get redirected to: 1) http://www.attwireless.com/index_b.jhtml?_requestid=93897 OR 2)

RE: [squid-users] NTLM helper performance problem

2004-04-26 Thread SXB6300 Mailing
I will check the ping time of the domain controller during the disturbed time (normally in a few hours). From the beginning I have thought of the problem coming from the DC. First, we had a DC that was really busy (Windows AD serving for the Exchange servers and a lot of other things). But I set

Re: [squid-users] blocking porn sites ?

2004-04-26 Thread Muthukumar
i am running Squid Cache: Version 2.4.STABLE1. I've tried to implement a block to porn sites using the acls with the following entries : acl porn1 url_regex /usr/local/squid/etc/porn1 http_access deny porn1 http_access allow all What is in /usr/local/squid/etc/porn1 file? Are you

RE: [squid-users] attwireless page problem

2004-04-26 Thread Elsen Marc
Greetings! We seem to be having problems visiting http://www.attwireless.com Are you disabling X-Forwarded-for in squid.conf ? Someone recently posted that this site (webserver) doesn't like : X-Forwarded-for:unknown in http request headers. M. Is it with the

RE: [squid-users] attwireless page problem

2004-04-26 Thread Fritz Mesedilla
Oh! Yes we have it disabled for security. :) Thank you so much for the quick reply! Cheers, fritz www.mesedilla.com --- + Basta Ikaw Lord -Original Message- From: Elsen Marc [mailto:[EMAIL PROTECTED] Sent: Monday, April 26, 2004 2:48 PM To: Fritz Mesedilla; [EMAIL PROTECTED]

Re: [squid-users] FATAL: Received Segment Violation...dying. (SOLVED)

2004-04-26 Thread Raymond A. Meijer
On Fri 23 April 2004 22:31, Henrik Nordstrom wrote: I saw earlier in this thread that -O6 was used. Using any -O level above -O2 is generally not advisable as there very often lurks compiler bugs at those higher levels, and it is in addition not expected higher -O levels will give any better

[squid-users] Transparent squid on FreeBSD 4.8

2004-04-26 Thread
hi, i'm beginner of proxy and FreeBSD. i want to make transparent proxy box on FreeBSD 4.8, using squid-2.5.STABLE4. 1. fist, i compiled my kernel with --- options IPFIREWALL

RE: [squid-users] Squid Statistic

2004-04-26 Thread Herman (ISTD)
-Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Saturday, April 24, 2004 3:40 PM To: Herman (ISTD) Cc: [EMAIL PROTECTED] Subject: Re: [squid-users] Squid Statistic On Sat, 24 Apr 2004, Herman (ISTD) wrote: Dear all, Is there any tools that can

RE: [squid-users] NTLM helper performance problem

2004-04-26 Thread Henrik Nordstrom
On Mon, 26 Apr 2004, SXB6300 Mailing wrote: Just another question : do you recommand using challenge reuse or not? Because I was thinking of it as a way to limit the communication with the DC... I don't recommend challenge reuse, but if you have a small number of users and a very busy DC then

RE: [squid-users] attwireless page problem

2004-04-26 Thread Henrik Nordstrom
On Mon, 26 Apr 2004, Fritz Mesedilla wrote: Are you disabling X-Forwarded-for in squid.conf ? Oh! Yes we have it disabled for security. :) In such case it is better to deny the header in header_access. This will completely remove the header from the requests sent by Squid. Regards Henrik

Re: [squid-users] Transparent squid on FreeBSD 4.8

2004-04-26 Thread Henrik Nordstrom
On Mon, 26 Apr 2004, [ks_c_5601-1987] ¿ì´ëÈ« wrote: WARNING: Cannot find necessary IP-Filter header files Transparent Proxy support WILL NOT be enabled - so, i install without [--enable-ipf-transparent]

RE: [squid-users] attwireless page problem

2004-04-26 Thread Fritz Mesedilla
Thanks Henrik! I'll check on that! Cheers, fritz www.mesedilla.com --- + Basta Ikaw Lord -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Monday, April 26, 2004 8:39 PM To: Fritz Mesedilla Cc: Elsen Marc; [EMAIL PROTECTED] Subject: RE: [squid-users]

[squid-users] reverse proxy with squid 3.0

2004-04-26 Thread teddy . saporte
Hi all I want to know if it's possible with squid 3.0 to make a reverse proxy like this https squid reverse proxy -- https back end server Thanks PS : Excuse for the english I am a french student # Ce courrier et les documents qui y sont joints peuvent contenir des

[squid-users] Invalid Request Errors

2004-04-26 Thread Serge Paquin
Hello, This is driving me nuts. I'm _trying_ to use squid with wccp. Soon after I start the service people can't log into hotmail, yahoo, ebay or others. They can get to the home pages but not log in. As well there are various other sites that people cannot get to. I get log entries

RE: [squid-users] squid and firefox

2004-04-26 Thread David Brodbeck
-Original Message- From: Prashant Kumar [mailto:[EMAIL PROTECTED] Sent: Saturday, April 24, 2004 2:55 PM To: [EMAIL PROTECTED] Subject: Re: [squid-users] squid and firefox Problem is I've disabled popups completely. The other thing about cache and stuff .. I've disabled caching

FW: [squid-users] blocking porn sites ?

2004-04-26 Thread Angela Burrell
Just a quick note to update the list here. It seems we have solved Hement's problem about blocking sites. I just wanted to pass this on to the list as an FYI. Regards, A -Original Message- From: Hement Gopal [mailto:[EMAIL PROTECTED] Sent: Friday, April 23, 2004 10:55 AM To: [EMAIL

RE: [squid-users] NTLM helper performance problem

2004-04-26 Thread SXB6300 Mailing
I'm completely convinced of the performance lost using NTLM authentication, but if I'm right, it's the only way to do a transparent authentication for a client using IE. That's why I'm trying it... I'm actually testing a new conf without challenge reuse, but I got no luck today, no peak time

[squid-users] occasionaly very long response time

2004-04-26 Thread squidml
Hello, I do have sometimes very long response time as shown in my log : 1080314249.401 235456 xx.xx.xx.xx TCP_MISS/200 442 GET http://us.i1.yimg.com/us.yimg.com/i/us/pim/f/inbc1.gif - DIRECT /212.73.231.97 image/gif It seems to be more often with yahoo webmail(user complains) I do have [EMAIL

RE: [squid-users] NTLM helper performance problem

2004-04-26 Thread Henrik Nordstrom
On Mon, 26 Apr 2004, SXB6300 Mailing wrote: I'm actually testing a new conf without challenge reuse, but I got no luck today, no peak time until now. I'll post results as soon as I get some. As NTLMv2 is supported since samba 3.0.2 (I think), is there a way to do NTLMv2 authentication in

Re: [squid-users] reverse proxy with squid 3.0

2004-04-26 Thread Henrik Nordstrom
On Mon, 26 Apr 2004 [EMAIL PROTECTED] wrote: Hi all I want to know if it's possible with squid 3.0 to make a reverse proxy like this https squid reverse proxy -- https back end server Yes. Regards Henrik

Re: [squid-users] Invalid Request Errors

2004-04-26 Thread Henrik Nordstrom
On Mon, 26 Apr 2004, Serge Paquin wrote: Soon after I start the service people can't log into hotmail, yahoo, ebay or others. They can get to the home pages but not log in. As well there are various other sites that people cannot get to. I get log entries like:

[squid-users] request_body_max_size ?

2004-04-26 Thread Michael Gale
Hello, Can I use request_body_max_size inside a acl ? For example: acl allowuploads src 10.10.1.3/255.255.255.255 http_access allow allowuploads AND request_body_max_size 20480 KB then further download just have request_body_max_size 100 KB Thanks --- I hope I explained it well

[squid-users] Exclude one URL from cache

2004-04-26 Thread Nick
I have squid setup as a reverse proxy and am trying to get one page excluded from cache. I thought I could do this with url_regex or urlpath_regex. Is my syntax wrong because the page still gets cached? How do I get one URL excluded? 2 examples of the URLs that would be excluded are

Re: [squid-users] Exclude one URL from cache

2004-04-26 Thread Andreas Pettersson
You have to escape the ? also. acl excludeURL url_regex test.test.com\/classifieds-bin\/classifieds\?temp_type=detailcategory_numbe r=333classification =autodate=today,sunday_before(today)orderby=start_date:d /Andreas - Original Message - From: Nick [EMAIL PROTECTED] To: [EMAIL

RE: [squid-users] Looks like cookie set up browser issue but it is not

2004-04-26 Thread Zand, Nooshin
Henrik, I am just wonder why it is always WORKING with Squid2.4STABLE7. There is no issue at all connecting to that server when Squid2.4STABLE7 is in use. Regards, nooshin -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Friday, April 23, 2004 5:47 PM To: Zand,

RE: [squid-users] Looks like cookie set up browser issue but it is not

2004-04-26 Thread Henrik Nordstrom
On Mon, 26 Apr 2004, Zand, Nooshin wrote: Henrik, I am just wonder why it is always WORKING with Squid2.4STABLE7. There is no issue at all connecting to that server when Squid2.4STABLE7 is in use. Me to. Big mystery so far on what makes this server work in certain conditions. But there

Re: [squid-users] Exclude one URL from cache

2004-04-26 Thread Henrik Nordstrom
On Mon, 26 Apr 2004, Nick wrote: I have squid setup as a reverse proxy and am trying to get one page excluded from cache. I thought I could do this with url_regex or urlpath_regex. Is my syntax wrong because the page still gets cached? How do I get one URL excluded? 2 examples of the

Re: [squid-users] Exclude one URL from cache

2004-04-26 Thread Nick
Thanks Andreas, sorry my fault. I escaped the '?' but the page appears to still be cached after I restart squid by doing a ./squid -k kill then a ./squid. I am I still seeing a TCP_HIT:NONE in the access log not TCP_MISS:DIRECT - Original Message - From: Andreas Pettersson

Re: [squid-users] mantainance for swap.state

2004-04-26 Thread Gaetano Mendola
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Henrik Nordstrom wrote: | On Sun, 25 Apr 2004, Gaetano Mendola wrote: | | |I wish to know what I have to do for mantainance for |this file that is growing each day till reach the maximum |size for the FS ( 2 GB ), is it safe delete it regulary

Re: [squid-users] Exclude one URL from cache

2004-04-26 Thread Andreas Pettersson
Maybe you have to purge the already cached copy. Try: # squidclient -p port -m PURGE 'http://test.test.com/classifieds-bin/classifieds?temp_type' /Andreas - Original Message - From: Nick [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, April 26, 2004 7:54 PM Subject: Re:

[squid-users] Squid 3 PRE 3 on Debian Woody Compile erros when using --enable-s sl

2004-04-26 Thread Andrew Jackman
Hello There, I am getting some frustrating errors when trying to compile Squid 3 PRE 3 on Debian 3 (Woody) when I try to enable ssl support. I am using openssl openssl-0.9.7c, Debian Kernel 2.4.18-bf2.4. I have searched the web... inc Google and the closest thing I could find was this

RE: [squid-users] Antivirus

2004-04-26 Thread Herman (ISTD)
Dear Martial, By the day, does squid support ICAP ? However using iwss we will have some kind of cascade proxy, is it possible to install iwss on the same machine of squid to perform http, ftp traffic filtering. We are currently using e-Trust CA Antivirus on the squid machine. The problem is

RE: [squid-users] Antivirus

2004-04-26 Thread Herman (ISTD)
Dear Dieter, How do you configure trendmicro with squid, is it like proxy cascading ? Is it possible to install both squid and trendmicro on the same server. Currently we are using e-Trust with squid installed on the same server, though the real time monitoring of e-Trust already enabled, to

Re: [squid-users] mantainance for swap.state

2004-04-26 Thread Henrik Nordstrom
On Mon, 26 Apr 2004, Gaetano Mendola wrote: /usr/local/squid/sbin/squid -f /usr/local/squid/etc/squid.conf -k rotate and now I have a file swap.state.last-clean of 0 bytes and the swap.state is still growing. swap.state is always growing, but each time you run -k rotate it shrinks down to

Re: [squid-users] Squid 3 PRE 3 on Debian Woody Compile erros when using --enable-s sl

2004-04-26 Thread Henrik Nordstrom
On Tue, 27 Apr 2004, Andrew Jackman wrote: /usr/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_load': dso_dlfcn.o(.text+0x4a): undefined reference to `dlopen' You need to add -ldl somewhere after -lcrypto. Regards Henrik