Re: [squid-users] Delay pools RH7

2004-06-10 Thread Muthukumar
> From all these docs, it seems as if delay pools is by default DISABLED > on the squid that gets installed on the system (Red Hat 7.3 > squid-2.4.STABLE6). > Is this assumption correct? or how can I check whether delay pools is > enabled or disabled? > Yes. To check that go to the squid binary lo

Re: [squid-users] Help needed wrt testing

2004-06-10 Thread Deepa D
Hi, I need to know the time taken by squid to service each url request. I am running squid in the "no cache" mode and hence the cache related statistics is not required. I am using redirectors with squid. I can get the details for the redirectors but not for squid. Could somebody kindly suggest

[squid-users] Delay pools RH7

2004-06-10 Thread Johan Longland
Morning all, I want to implement throttling by using delay pools in squid. Have already read a few docs on the net, about delay pools. >From all these docs, it seems as if delay pools is by default DISABLED on the squid that gets installed on the system (Red Hat 7.3 squid-2.4.STABLE6). Is this a

Re: [squid-users] Dos scripts using a squid Proxy ???

2004-06-10 Thread Sunil S
Hi, Matthieu, There is no change needed on proxy config. hat you need to use at dos script/batch file is "curl". See http://curl.haxx.se/ For you to start off, a sample command line will be like below: curl -x proxy_ip:proxy_port -u proxy_uid:proxy_pwd -U ftp_site_uid:ftp_site_pwd -T /path/to/pa

Re: [squid-users] hotmail

2004-06-10 Thread Muthukumar
> Why my users can't access to hotmail or any https site since i already > declare and allow the acl port 443 ? Are you using squid in proxy mode? what is your comments removed squid.conf settings? Regards, Muthukumar. --- === It is a "Virus Free Mail" === Checked by

[squid-users] hotmail

2004-06-10 Thread Liew Toh Seng
Hi, Why my users can't access to hotmail or any https site since i already declare and allow the acl port 443 ? --- Best Regards Liew Toh Seng Icq No: >> 36835809 << MSN: >> [EMAIL PROTECTED] << * .--. * |o_o | * |:_/

Re: [squid-users] various problems

2004-06-10 Thread Alex
- Original Message - From: "Muthukumar" <[EMAIL PROTECTED]> To: "Alex" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, June 10, 2004 4:30 PM Subject: Re: [squid-users] various problems > > > I have delay pools setup like this: > > > > delay_pools 2 > > delay_class 1 2 > > delay

[squid-users] Dos scripts using a squid Proxy ???

2004-06-10 Thread DRUILHE Matthieu
Hi all, I need to run some dos scripts on my win2k pro that will ftp (with the help of my proxy server) datas to a remote host. But I can't find how to do it ... Do I have to set some environment variables? Is there some clients software that can help me ??? Many thanks in advance !

Re: [squid-users] various problems

2004-06-10 Thread Muthukumar
> I have delay pools setup like this: > > delay_pools 2 > delay_class 1 2 > delay_class 2 2 > You are having 2 delay pools and using the delay pools for class C (255.255.255.0 family) ip-address. > delay_parameters 1 -1/-1 7000/8000 delay pool number 1 is a class 2 delay pool to restict each h

Re: [squid-users] how ccan i block aplication and media file downloading in squid

2004-06-10 Thread Mohsin Khan
Try http_access allow mylan ! dlb. --- [EMAIL PROTECTED] wrote: > salam, > Thenx, for your kind reply my acl list is > <==> > acl all src 0.0.0.0/0.0.0.0 > acl manager proto cache_object > acl localhost src 127.0.0.1/255.255.2

Re: [squid-users] About squid log rotate

2004-06-10 Thread Mohsin Khan
how do you rotate log, squid -k rotate?use cat log_file > new_log_file;>log_file. Use a script like that. You must be having large log files, and processing them will slow down the system --- blade <[EMAIL PROTECTED]> wrote: > HI,ALL > I use squid 2.5.STABLE5 .And patch squid ,so i can > get

[squid-users] FATAL: xmalloc: Unable to allocate 87380 bytes!

2004-06-10 Thread McDermott, AS Amanda (5841) @ IS
To all, I am using squid and recently encountered a memory issue. When I ran top I noticed the free memory was decreasing drastically. Once it got to 5029 squid stopped for 2 minutes. The free memory increased back to 918316 and the following message showed up in cache.log: FATAL: xmalloc: Unable

[squid-users] Implementation recommendations?

2004-06-10 Thread Gaylord Van Brocklin
I am tasked with redesigning our current web proxy implementation to fix performance issues as well as to bring software up to current stable releases and just got through reading Duane's Squid book. We currently have a single FreeBSD box with Squid cache, which forwards all requests through a

[squid-users] I only get TCP_MISS/200

2004-06-10 Thread rohan
Hi all, I have recently installed squid as a transparent proxy. I see every http request that goes through squid but it doesn't cache anything. Well, all I see in the access.log is TCP_MISS/200. Any suggestions?? Thank you rohinsane

[squid-users] IE search from address bar + Squid

2004-06-10 Thread David Rippel
Greetings - I recently had a user complain that when they would type a search term (like dell instead of www.dell.com) in their address bar that squid would return an error page stating that it was an invalid URL instead of IE going to the MSN search page. Upon further investigation I found tha

[squid-users] Re: Incompatibilities between Samba and Squid

2004-06-10 Thread Norman Zhang
Hi, After making the changes I still cannot get through. /var/log/syslog shows the following, Jun 10 10:14:20 proxy (squid): authenticateNTLMHandleReply: called with no result string Jun 10 10:14:20 proxy squid[2229]: Squid Parent: child process 2273 exited due to signal 6 Jun 10 10:14:23 proxy

Re: [squid-users] HEAD requests on a reverse proxy

2004-06-10 Thread Emilio Casbas
Nick wrote: Thanks Emilio. How would I make that acl_type request so it rejects all other HEAD requests besides from my load balancer? Would it just be acl my_cisco dst 192.168.1.1 acl my_cisco method HEAD http_access deny HEAD http_access allow my_cisco Thanks, Nick The order in the http_acce

[squid-users] Squid Web Proxy Cache NTLM Authentication Helper Buffer Overflow Vulnerability

2004-06-10 Thread Mueller, Rex
How do you patch squid to handle this vulnerability?=20 1. Squid Web Proxy Cache NTLM Authentication Helper Buffer Overflow Vulnerability - Jun 9, 2004 Squid is a popular open source proxy server for POSIX platforms, allowing for caching as well as content filtering. A remote attacker can co

[squid-users] Help needed wrt testing

2004-06-10 Thread Deepa D
Hi, I want to use "wget" command in spider mode to test only squid(without redirector). I tried it with the proxy=on feature but I am getting connection refused for each url request. Could somebody kindly tell me how to go abt conducting this test. Regards and TIA, Deepa _

RE: [squid-users] Noob - OWA - Squid3 - SSL

2004-06-10 Thread Alex Zlaten
Thanks for your help Derek. I have everything running. Now I get to the exchange server and I authenticate. OWA starts to load (I see the frames) then the content in each frame cannot be displayed. I looked at the page source, and the BASE href is in the HTTP:// protocol. This is what the front-e

Re: Re: [squid-users] HEAD requests on a reverse proxy

2004-06-10 Thread Nick
Thanks Emilio. How would I make that acl_type request so it rejects all other HEAD requests besides from my load balancer? Would it just be acl my_cisco dst 192.168.1.1 acl my_cisco method HEAD http_access deny HEAD http_access allow my_cisco Thanks, Nick > > From: Emilio Casbas <[EMAIL PROTE

[squid-users] [Fwd: [Fwd: Re: squid & ntlm]]

2004-06-10 Thread dilox
Yes, I get this message when I reconfigure squid, thanks for explanation.. Now it seems authenication aganinst pdc is workin' well, but I can't see logs about authentication handshake. Someone can me explain why?

[squid-users] various problems

2004-06-10 Thread Alex
Hi all, I use squid 2.5stable3 with delay pools setup and I have 2 problems which are really starting to annoy me. I have delay pools setup like this: delay_pools 2 delay_class 1 2 delay_class 2 2 delay_parameters 1 -1/-1 7000/8000 delay_parameters 2 -1/-1 3000/4000 delay_access 1 deny nolimit

Re: [squid-users] NTLM Authentication Helper Buffer Overflow Vulnerability

2004-06-10 Thread victor
We are installing squid by compiling the source, so sound like I'm saved. ^^ Thank Emilio. Tor. In some distributions, for example Suse, Mandrake, the NTLM authentication is enabled by default in the squid package. The recommended is compile from the source code with the options that you will need.

Re: [squid-users] make all for squid 2.5 stable 5 has errors

2004-06-10 Thread Hement Gopal
hi for those who were following my first thread... i deleted all my squid binaries, deleted my squid src files... untarred squid again and ran ./configure (with dl-malloc, usergent-log, delay-pools , snmp and gnuregex options enabled) .but only after running the ulimit -HSn command. the con

[squid-users] About squid log rotate

2004-06-10 Thread blade
HI,ALL I use squid 2.5.STABLE5 .And patch squid ,so i can get log like apache log format. I use squid rotate to get squid log hourly for web analyzer , but sometimes after squid rotate log ,squid suddenly get ESTABLISHED links from 4000 to 8000 ,1,at the same time, the site can not be visi

RE: [squid-users] Re: Winbind authentication (HELP)

2004-06-10 Thread Herman (ISTD)
Thank you for your suggestion. But there is something very weird that I cannot authenticate squid with winbind. The winbind is working correctly : [EMAIL PROTECTED] logs]# /usr/local/samba/bin/wbinfo -t checking the trust secret via RPC calls succeeded [EMAIL PROTECTED] logs]# /usr/local/samba/bi

RE: [squid-users] Incompatibilities between Samba and Squid

2004-06-10 Thread SXB6300 Mailing
Hi, You should use the ntlm helper shipped with samba. wb_ntlmauth are the old helpers of squid 2.4x versions. For squid 2.5, it's highly recommended to use samba helpers : replace wb_ntlmauth by ntlm_auth (usually in /usr/bin) in squid .conf Regards, P-E -Message d'origine- De :

[squid-users] superfluous DNS queries

2004-06-10 Thread porte64
Hello, I set up SQUID to forward all HTTP traffic through a parent proxy (bound to internet) except when URL matches certain suffix domains (intranet). Upon receiving internet URL like www.thepurists.com, SQUID however queries DNS servers for www.squid-cache.org, www.squid-cache.org.sub.my.org, ..

Re: [squid-users] NTLM Authentication Helper Buffer Overflow Vulnerability

2004-06-10 Thread Emilio Casbas
victor wrote: http://marc.free.net.ph/message/20040608.190021.56abed9f.html From the article it sgugest disableing the feature will plug the hole, I think the NTLM handler is not enabled by default correct? If I didn't complie with NTLM handler enabled, does it mean I'm safe? Tor. In some distr

Re: [squid-users] how ccan i block aplication and media file downloading in squid

2004-06-10 Thread Muthukumar
< snip > > acl mylan src 10.1.1.1-10.1.1.150/255.255.255.255 > acl dlb urlpath_regex -i \.exe$ \.mp3$ \.mov$ \.mpg$ \.mp?$ \.avi$ \.rm$ > \.wma$ \.mpeg$ < snip > It is normal setting except the two acls dlb and mylan. > http_access allow mylan > http_access deny dlb It will allow allow all requ

Re: [squid-users] Where are the DNS entries stored?

2004-06-10 Thread Matus UHLAR - fantomas
> Denis Vlasenko wrote: > >Although I am not going to remove transparent setup on my router > >because it's not scalable to run around and configure proxy > >on each and every Internet Exploder-infested box. There are > >more than 400 of them here, spread across 30 km^2 area :( On 09.06 17:51, Hen

Re: [squid-users] how ccan i block aplication and media file downloading in squid

2004-06-10 Thread aol
salam, Thenx, for your kind reply my acl list is <==> acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_p

Re: [squid-users] HEAD requests on a reverse proxy

2004-06-10 Thread Emilio Casbas
Nick wrote: Hello, I have two servers running squid as a reverse proxy. The squid servers caches pages that come from another server running Apache. When squid was initially setup I denied HEAD requests but now I need to allow HEAD requests. We have a Cisco GSS load balancer that probes the s

Re: [squid-users] Re: Squid is falling periodically

2004-06-10 Thread Artem Stepanoff
On Wed, Jun 09, 2004 at 01:35:33PM -0400, Adam Aube wrote: > > Start with this page: > > http://www.squid-cache.org/Versions/v2/2.5/ > > Near the bottom are links to available patches and Bugzilla entries for > Squid 2.5STABLE5. See if any of those apply. If there is no bug, look at > the FAQ fo

RE: [squid-users] make all for squid 2.5 stable 5 has errors

2004-06-10 Thread Elsen Marc
> > hi all > > > starting a new thread on this as it is no more a file > descriptor problem > but make problem. > > /configure wokr great (with high FD number) but make all > results in ff > errors > What do you mean by 'high FD number' ; how did you accomplish using more FD's befo

[squid-users] make all for squid 2.5 stable 5 has errors

2004-06-10 Thread Hement Gopal
hi all starting a new thread on this as it is no more a file descriptor problem but make problem. /configure wokr great (with high FD number) but make all results in ff errors my OS/Platform info :- Intel box Linux athena2.wits.ac.za 2.4.20-31.9smp #1 SMP Tue Apr 13 17:40:10 EDT 2004 i686 i686