Re: [squid-users] how ccan i block aplication and media file downloading in squid

2004-06-09 Thread Muthukumar
> my acl is for blocking downloading > acl dlb urlpath_regex -i \.exe$ \.mp3$ \.mov$ \.mpg$ \.mp?$ \.avi$ \.rm$ > \.wma$ \.mpeg$ > http_access deny dlb > but it is not working Are you using anymore http_access rules with this. You have to be very careful while setting the http_access rules. >

[squid-users] NTLM Authentication Helper Buffer Overflow Vulnerability

2004-06-09 Thread victor
http://marc.free.net.ph/message/20040608.190021.56abed9f.html From the article it sgugest disableing the feature will plug the hole, I think the NTLM handler is not enabled by default correct? If I didn't complie with NTLM handler enabled, does it mean I'm safe? Tor. --

[squid-users] Squid + Active Directory - Need to allow Windows Update and SSL

2004-06-09 Thread Jonathan Pace
Hi Guys, This is the first time I have ever posted on a mailing list so I hope I have done it correctly. We currently have Squid 2.5 Stable5 installed on Redhat 7.2. I have setup Samba 3, Kerberos, Winbind, PAM and squid to authenticate with my active directory. (Via the helpers) Here are my qu

[squid-users] Incompatibilities between Samba and Squid

2004-06-09 Thread Norman Zhang
Hi, I'm running Squid-2.5.STABLE4-1.100mdk with samba-server-3.0.2a-3mdk. When I tried to go the internet, I see the following in /var/log/syslog Jun 9 17:06:07 proxy (squid): authenticateNTLMHandleReply: called with no result string Jun 9 17:06:07 proxy squid[1571]: Squid Parent: child proces

[squid-users] HEAD requests on a reverse proxy

2004-06-09 Thread Nick
Hello, I have two servers running squid as a reverse proxy. The squid servers caches pages that come from another server running Apache. When squid was initially setup I denied HEAD requests but now I need to allow HEAD requests. We have a Cisco GSS load balancer that probes the server using

RE: [squid-users] Noob - OWA - Squid3 - SSL

2004-06-09 Thread Derek Winkler
You only need to modify the cache_peer line, I believe... cache_peer exchange.domain.com parent 80 0 no-query proxy-only originserver login=PASS It's very important that squid listen on port 443 since the OWA server will not return port number in the URLs. You may also need to use some other owa

Re: [squid-users] NTLM web site problem

2004-06-09 Thread Mohsin Khan
What do you get in cache.log and access.log, for both proxies.? --- Serassio Guido <[EMAIL PROTECTED]> wrote: > Hi, > > At 13.56 09/06/2004, [EMAIL PROTECTED] > wrote: > > >Hello > > > > > >I have problem, and I hop somone can help me. > > > >I installed 2 Squid proxy : > >Proxy 1 : Squid 2.5 >

RE: [squid-users] Noob - OWA - Squid3 - SSL

2004-06-09 Thread Alex Zlaten
Derek, Thanks for the response. In your conf, it seems that you are communication with the exchange server via ssl port 443. I want squid to listen on 443 with https then retrieve the pages from exchange on 80 with http. I understand this is a major reason to use the pre-release of version 3. Is

[squid-users] Squid and mod_expires

2004-06-09 Thread Kent, Mr. John \(Contractor\)
Greetings, Writing to find out if the interaction between Squid and Apache with mod-expires is what I think it is (that Squid will honor the Apache expires tags just as a browser would). Using Squid as an accelerator on top of an Apache server farm. If I have a directory of images and for that

RE: [squid-users] Noob - OWA - Squid3 - SSL

2004-06-09 Thread Derek Winkler
Remember externally for testing exchange.domain.com should point to the squid server, the squid server itself should be able to resolve exchange.domain.com to the actual owa server. For testing you can make an entry in your workstation host file to point exchange.domain.com to the squid server. T

Re: [squid-users] NTLM web site problem

2004-06-09 Thread Serassio Guido
Hi, At 13.56 09/06/2004, [EMAIL PROTECTED] wrote: Hello I have problem, and I hop somone can help me. I installed 2 Squid proxy : Proxy 1 : Squid 2.5 Proxy 2 : Squid 2.4 Both have (quite) same config files and upstram. The problem appear when I try to access an NTLM authentificated web site. With

[squid-users] Noob - OWA - Squid3 - SSL

2004-06-09 Thread Alex Zlaten
Hi, I have been working with squid 3 for a few days now, I don't want to bother you guys with questions that have already been answered a million times but here goes. Is there a good post of a squif.conf for using squid3 as an SSL front-end? Does the URL in the browser have to be the FQDN of the

[squid-users] Re: Squid is falling periodically

2004-06-09 Thread Adam Aube
Artem Stepanoff wrote: > I have just finished the store rebuilding and squid have fallen again. > > 19:[EMAIL PROTECTED]/cache2>gdb /usr/local/sbin/squid squid.core > [Information about GDB skipped] > > Core was generated by `squid'. > Program terminated with signal 6, Abort trap. > > Log

[squid-users] Re: how ccan i block aplication and media file downloading in squid

2004-06-09 Thread Adam Aube
[EMAIL PROTECTED] wrote: > my acl is for blocking downloading > acl dlb urlpath_regex -i \.exe$ \.mp3$ \.mov$ \.mpg$ \.mp?$ \.avi$ \.rm$ > \.wma$ \.mpeg$ > http_access deny dlb > but it is not working and also how can i block down loading in a time > range This is a free mailing list, where quest

[squid-users] Re: how ccan i block aplication and media dfile downloading in squid

2004-06-09 Thread Adam Aube
[EMAIL PROTECTED] wrote: > my acl is for blocking downloading > acl dlb urlpath_regex -i .exe$ .mp3$ .mov$ .mpg$ .mp?$ .avi$ .rm$ > .wma$ .mpeg$ > http_access deny dlb > but it is not working and also how can i block down loading in a time > range The '.' is a special character in regex matching.

[squid-users] Re: NTLM web site problem

2004-06-09 Thread Adam Aube
[EMAIL PROTECTED] wrote: > I have problem, and I hop somone can help me. > > I installed 2 Squid proxy : > Proxy 1 : Squid 2.5 > Proxy 2 : Squid 2.4 > Both have (quite) same config files and upstram. > > The problem appear when I try to access an NTLM authentificated web site. The website uses

[squid-users] Re: Wrong username with SAMBA

2004-06-09 Thread Adam Aube
[EMAIL PROTECTED] wrote: > I'm working with the following configuration: > Squid 2.5STABLE4 > Samba 2.2.8a > I've joined my box to my ROOT domain controller (it's the root of my AD > forest). > It's working well except for a particular username that is very similar to > another one. With this u

[squid-users] Re: SSHA authentication

2004-06-09 Thread Adam Aube
Roberto Puertas Lorenzo wrote: > I'd like to validate the users by using an authenticator. Their ids/pwds > are in a SunONE users file but i can't seem to find a way to check for > the password which is SSHA coded. Hint? You will probably have to use basic authentication and write your own helper

[squid-users] how ccan i block aplication and media file downloading in squid

2004-06-09 Thread aol
my acl is for blocking downloading acl dlb urlpath_regex -i \.exe$ \.mp3$ \.mov$ \.mpg$ \.mp?$ \.avi$ \.rm$ \.wma$ \.mpeg$ http_access deny dlb but it is not working and also how can i block down loading in a time range

[squid-users] how ccan i block aplication and media dfile downloading in squid

2004-06-09 Thread aol
my acl is for blocking downloading acl dlb urlpath_regex -i .exe$ .mp3$ .mov$ .mpg$ .mp?$ .avi$ .rm$ .wma$ .mpeg$ http_access deny dlb but it is not working and also how can i block down loading in a time range

Re: [squid-users] Squid is falling periodically

2004-06-09 Thread Artem Stepanoff
On Wed, Jun 09, 2004 at 05:55:14PM +0200, Emilio Casbas wrote: > What is your squid version? > It seems a bug. > http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.19 > > I have just finished the store rebuilding and squid have fallen again. 19:[EMAIL PROTECTED]/cache2>gdb /usr/local/sbin/squ

Re: [squid-users] Squid is falling periodically

2004-06-09 Thread Artem Stepanoff
On Wed, Jun 09, 2004 at 05:55:14PM +0200, Emilio Casbas wrote: > What is your squid version? > It seems a bug. > http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.19 > > 18:[EMAIL PROTECTED]/var/log/squid>squid -v Squid Cache: Version 2.5.STABLE5 configure options: --prefix=/usr/local --loc

Re: [squid-users] Squid is falling periodically

2004-06-09 Thread Emilio Casbas
Artem Stepanoff wrote: Hello. I have a squid, installed on i386 server. Memory: real memory = 3791126528 (3702272K bytes) avail memory = 3693056000 (3606500K bytes) Processor: CPU: AMD Athlon(tm) MP 2400+ (2000.08-MHz 686-class CPU) - dual OS: FreeBSD 4.10-RELEASE Squid configuration file

Re: [squid-users] Where are the DNS entries stored?

2004-06-09 Thread Hendrik Voigtländer
Denis Vlasenko wrote: Although I am not going to remove transparent setup on my router because it's not scalable to run around and configure proxy on each and every Internet Exploder-infested box. There are more than 400 of them here, spread across 30 km^2 area :( You could try to use automatic pr

[squid-users] Squid is falling periodically

2004-06-09 Thread Artem Stepanoff
Hello. I have a squid, installed on i386 server. Memory: real memory = 3791126528 (3702272K bytes) avail memory = 3693056000 (3606500K bytes) Processor: CPU: AMD Athlon(tm) MP 2400+ (2000.08-MHz 686-class CPU) - dual OS: FreeBSD 4.10-RELEASE Squid configuration file (ACCESS CONTR

[squid-users] Tuning Squid / Memory usage

2004-06-09 Thread Janno de Wit
Hi list, I've got a question about memory usage of squid. In a box here I chained squid1 -> dansguardian -> squid2. squid1 = squidIdent squid2 = squidBack (for caching). squidIdent contains a whitelist ~ 7 domains/url's dansguardian contains ~ 85 blacklist domains and around 1 weight

Re: [squid-users] Denying specific browser clients from using Squid

2004-06-09 Thread Chris Horry
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Muthukumar wrote: |>What I would like to do is ban certain browser clients (specifically |>Internet Explorer) from using the squid proxy, | | | We can do it by using the browser acl's type. They are using user-agent header to retrieve the browser types

Re: [squid-users] Fwd: digest_pw_auth from Squid 3.0DEV with Squid 2.5STABLE5

2004-06-09 Thread Robert Collins
On Wed, 2004-06-09 at 13:37, [EMAIL PROTECTED] wrote: > A lightbulb popped up over my head after reading this piece: > http://www.squid-cache.org/mail-archive/squid-users/200112/0960.html > > So instead of ./pam_auth, I tried ./digest_pw_auth. The resulting error gave the > clue: > > Usage: dige

Re: [squid-users] Customize LogFormat patch not work

2004-06-09 Thread Mrvka Andreas
thanks for response! i will try it. am i right if i use your text in the following way: - copy your diff text and store it in a file.patch - copy the file.patch into the installation directory (where configure file exists) - type "patch -p0 < file.patch" - configure; make; make install right

RE: [squid-users] Where are the DNS entries stored?

2004-06-09 Thread Elsen Marc
> > On Wednesday 09 June 2004 10:27, Elsen Marc wrote: > > > On Wednesday 09 June 2004 08:48, Elsen Marc wrote: > > > > > Hi everyone, > > > > > > > > > > I have recently started using squid (not transparent yet). I > > > > > have a few questions: > > > > > > > > Not transparant = good = keep

RE: [squid-users] Where are the DNS entries stored?

2004-06-09 Thread Denis Vlasenko
On Wednesday 09 June 2004 10:27, Elsen Marc wrote: > > On Wednesday 09 June 2004 08:48, Elsen Marc wrote: > > > > Hi everyone, > > > > > > > > I have recently started using squid (not transparent yet). I > > > > have a few questions: > > > > > > Not transparant = good = keep it that way. > > > >

Re: [squid-users] file descriptor problem]

2004-06-09 Thread Hement Gopal
hi all anyone closer to solving this one for me?? i feel like i'm almost there... rgds, hement hi i hashed out the FD_SETSIZE entry from my types.h and the ./configure ran great...even picked up the large fd size (see below) checking for tempnam... (cached) yes checking for strerror... (cache

[squid-users] NTLM web site problem

2004-06-09 Thread Lilian . Gix
Hello I have problem, and I hop somone can help me. I installed 2 Squid proxy : Proxy 1 : Squid 2.5 Proxy 2 : Squid 2.4 Both have (quite) same config files and upstram. The problem appear when I try to access an NTLM authentificated web site. With proxy 2, I'm prompted for a user/pass With Pr

[squid-users] Problem with ftp permissions

2004-06-09 Thread DOUHINE Davy
Hi all, I use Squid/2.4.STABLE6 and have some problems accessing a particular ftp site. _ When trying to access the site using my squid I get a 404 error page that tells me: The following URL could not be retrieved: ftp://[EMAIL PROTECTED]/directory1/directory2 Squid sent the following FTP comm

Re: [squid-users] how to stop downloading

2004-06-09 Thread Christoph Haas
On Wed, Jun 09, 2004 at 09:50:25AM +, vaibhav naldurgkar wrote: > I want to stop downloading from the sites using squid acl. > So please tell me how can I deny some of the nodes in my LAN to stop > downloading from sites.. What do you exactly mean by "downloading"? Christoph -- ~ ~ ".sign

Re: [squid-users] how to stop downloading

2004-06-09 Thread Emilio Casbas
vaibhav naldurgkar wrote: Hi all, I want to stop downloading from the sites using squid acl. So please tell me how can I deny some of the nodes in my LAN to stop downloading from sites.. Thanking you Regards, VVN _ For deny some nod

[squid-users] how to stop downloading

2004-06-09 Thread vaibhav naldurgkar
Hi all, I want to stop downloading from the sites using squid acl. So please tell me how can I deny some of the nodes in my LAN to stop downloading from sites.. Thanking you Regards, VVN _ Get ready to dream with Citibank Ready Cash.

[squid-users] Wrong username with SAMBA

2004-06-09 Thread dogbert
Hi, I'm working with the following configuration: Squid 2.5STABLE4 Samba 2.2.8a I've joined my box to my ROOT domain controller (it's the root of my AD forest). It's working well except for a particular username that is very similar to another one. With this user try to use the proxy i see in th

Re: [squid-users] Customize LogFormat patch not work

2004-06-09 Thread Mirosław Jaworski
Cytowanie Mrvka Andreas <[EMAIL PROTECTED]>: > Hi guys, > > i use awstats and wanted to analyse squid 2.5-Stable5. > i heard to use a patch for customizable logformat. Hi About year ago I was looking for a working patch and didn't find one, so I came up with my own hard hack, which causes squ

RE: [squid-users] Where are the DNS entries stored?

2004-06-09 Thread Elsen Marc
> > On Wednesday 09 June 2004 08:48, Elsen Marc wrote: > > > Hi everyone, > > > > > > I have recently started using squid (not transparent yet). I > > > have a few questions: > > > > Not transparant = good = keep it that way. > > Why? Because transparant proxying violates TCP/IP networki

Re: [squid-users] Where are the DNS entries stored?

2004-06-09 Thread Muthukumar
>> Not transparant = good = keep it that way. >Why? Transparent proxy has some disadvantages. Check there in http://squid.visolve.com/squid/trans_caching.htm We can not use the authentication method also. Regards, Muthukumar. --- === It is a "Virus Free Mail" ===

[squid-users] Customize LogFormat patch not work

2004-06-09 Thread Mrvka Andreas
Hi guys, i use awstats and wanted to analyse squid 2.5-Stable5. i heard to use a patch for customizable logformat. but after patching and recompiling nothing changed. parseConfigFile: line 26 unrecognized: 'LogFormat combined %>a %ui %un [%{%d/%b/%Y:%H:%M:%S +}tl] "%rm %ru HTTP/%rv" %Hs %h"

RE: [squid-users] Where are the DNS entries stored?

2004-06-09 Thread Denis Vlasenko
On Wednesday 09 June 2004 08:48, Elsen Marc wrote: > > Hi everyone, > > > > I have recently started using squid (not transparent yet). I > > have a few questions: > > Not transparant = good = keep it that way. Why? -- vda