RE: [squid-users] cache_peer with multiple IP addresses

2004-07-14 Thread Elsen Marc
During the last Millenium, we started using hierarchical Squid arrays with load balancing. We are currently using Squid 2.4 STABLE7. We have been migrating to a new network architecture and have noticed some problems with accessing the parent cache. This appears to be What are

RE: [squid-users] Difference b/w ufs, aufs and diskd

2004-07-14 Thread Elsen Marc
Hello all, Please let me know what is the Difference b/w ufs, aufs and diskd. and about async io. Let me some urls which should have information in detail. I want to know about thease in depth - Check comments on aufs, diskd, in squid.conf.default for 'initial' and summarizing

Re: [squid-users] Little help

2004-07-14 Thread Khawar Nehal
As far as I know the CGI and ? catching acls probably cause squid to try to access such URLs directly even if there are ACLs which suggest not going directly. If you next proxy is an ISA then it does not allow some ports. Not sure of the 8080 problem. On Monday 12 July 2004 12:15 pm, Romeo

Re: [squid-users] Re: Client can't connect but No log

2004-07-14 Thread Khawar Nehal
Internet explorer does not require a DNS server to internet Netscape, Mozilla, firebird, and firefox require a DNS server even if the proxy settings are set. Please specify which browser you are using and if the proxy settings are correct. Note : Internet explorer needs to be restarted for

[squid-users] Smb_auth

2004-07-14 Thread Leonardes Scheepers
Good day I need help with configuring smb_auth. Squid 2.5 stable 4 , Mandrake 10. First of all , I've tested it from command line , and it works fine , I get an OK returned. Now I want to insert this tested line into squid. Last time I did it , I used a line : authenticate_program

RE: [squid-users] Re: Client can't connect but No log

2004-07-14 Thread engineer
Thank for advice. Our user use windows98se and Internet Explorer 6.0 sp1. Because Company policy, We use win98se. After setting, IE and squid work good. After some hours or days, suddenly IE can't connect Internet via squid. Message is Can't found page. DNS error or not found squid is not

Re: [squid-users] Problems with Basic Auth

2004-07-14 Thread Christian Bode
Hi here some more information. It seems that just the usernames are garbled. can anyone confirm this problems ??? Regards Christian Bode On Tue, Jul 13, 2004 at 04:54:46PM +0200, Christian Bode wrote: Hi I have some problems with my authentification-script for squid. I wrote one

[squid-users] Cache corruption

2004-07-14 Thread david
I have problems with a IPCop firewall running squid 2.5stable5, but similar problems have happened with 2.4 on this machine. After a clean stop and restart: The proxy is in transparent mode and calls an acl banlist of domain names 2004/07/14 13:45:08| Starting Squid Cache version 2.5.STABLE5

RE: [squid-users] ldap authentication...

2004-07-14 Thread Chris Perreault
Rick, please respond to the mailing list, not just to me. Read up on the ACLs. If the destination is signup.com then you can REQUIRE authentication, or not... !REQUIRED acl newbies dst signup.com acl authenticated proxy_auth REQUIRED http_access allow newbies authenticated (I think this would

[squid-users] Some doubts on ufs, diskd, aufs

2004-07-14 Thread Pundaleek P Belamge
Hello all, Can you tell me the difference between the above three terms. And with which of the three async-io performs well and why? Please give any such links which should give detail information on the above terms and about async-io. Above information with respect to FreeBSD Thanks

[squid-users] Problem with Squid and COSS storage scheme

2004-07-14 Thread Yaraghchi, Stephan
Hi fellows! I ran into an error message in the cache.log of squid 2.5.STABLE5 for which I couldn't find any information, neither at squid-cache.org nor googling my way through the web: 2004/07/13 10:32:23| storeCossReadDone: error: (27) File too large 2004/07/13 10:32:23| storeCossReadDone:

[squid-users] allow browsing on certain times

2004-07-14 Thread Gert Brits
Hi all Does anyone have the configuration on hand, to only allow certain user to brows at certain times of the day ? Like allow user joe to brows between 08:00-17:00 and then extra to allow user joe to brows only on Mondays to brows between 08:00-17:00 Thanks

RE: [squid-users] Cache corruption

2004-07-14 Thread Elsen Marc
I have problems with a IPCop firewall running squid 2.5stable5, but similar problems have happened with 2.4 on this machine. After a clean stop and restart: The proxy is in transparent mode and calls an acl banlist of domain names 2004/07/14 13:45:08| Starting Squid Cache version

RE: [squid-users] Problem with Squid and COSS storage scheme

2004-07-14 Thread Elsen Marc
Hi fellows! I ran into an error message in the cache.log of squid 2.5.STABLE5 for which I couldn't find any information, neither at squid-cache.org nor googling my way through the web: 2004/07/13 10:32:23| storeCossReadDone: error: (27) File too large 2004/07/13 10:32:23|

RE: [squid-users] allow browsing on certain times

2004-07-14 Thread Elsen Marc
Hi all Does anyone have the configuration on hand, to only allow certain user to brows at certain times of the day ? Like allow user joe to brows between 08:00-17:00 and then extra to allow user joe to brows only on Mondays to brows between 08:00-17:00

Re: [squid-users] allow browsing on certain times

2004-07-14 Thread Peter Albrecht
Hi, On Wednesday 14 July 2004 14:07, Gert Brits wrote: Hi all Does anyone have the configuration on hand, to only allow certain user to brows at certain times of the day ? Like allow user joe to brows between 08:00-17:00 and then extra to allow user joe to brows only on Mondays to

RE: [squid-users] allow browsing on certain times

2004-07-14 Thread Gert Brits
Thanks for the info ... Is it possible to allow a user for let say 08:00-11:00 and then 14:00-16:00 ?? Then allow user 08:00-10:00 only to certain sites ? ... -Original Message- From: Elsen Marc [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 14, 2004 2:19 PM To: Gert Brits; [EMAIL

RE: [squid-users] cache_peer with multiple IP addresses

2004-07-14 Thread Merton Campbell Crockett
On Wed, 14 Jul 2004, Elsen Marc wrote: During the last Millenium, we started using hierarchical Squid arrays with load balancing. We are currently using Squid 2.4 STABLE7. We have been migrating to a new network architecture and have noticed some problems with accessing the

RE: [squid-users] allow browsing on certain times

2004-07-14 Thread Elsen Marc
Thanks for the info ... Is it possible to allow a user for let say 08:00-11:00 and then 14:00-16:00 ?? Then allow user 08:00-10:00 only to certain sites ? You'll just have to bring a 3th acl element in a http_access statement for instance : http_access allow joe

[squid-users] Implementation issues

2004-07-14 Thread Rick Whitley
Is there a way to have a user connect to the network and be forced to go to one website, at this site be given the opportunity to either activate their account or login to access the internet? 1. User boots computer 2. opens browser 3. Initial website displays Gives user option to Activate

Re: [squid-users] allow browsing on certain times

2004-07-14 Thread Peter Albrecht
Hi, On Wednesday 14 July 2004 14:37, Gert Brits wrote: Thanks for the info ... Is it possible to allow a user for let say 08:00-11:00 and then 14:00-16:00 ?? Then allow user 08:00-10:00 only to certain sites ? Sure, just define two time ranges and two http_access rules. Remember: squid

RE: [squid-users] cache_peer with multiple IP addresses

2004-07-14 Thread Elsen Marc
On Wed, 14 Jul 2004, Elsen Marc wrote: During the last Millenium, we started using hierarchical Squid arrays with load balancing. We are currently using Squid 2.4 STABLE7. We have been migrating to a new network architecture and have noticed some problems with

RE: [squid-users] cache_peer with multiple IP addresses

2004-07-14 Thread Merton Campbell Crockett
On Wed, 14 Jul 2004, Elsen Marc wrote: On Wed, 14 Jul 2004, Elsen Marc wrote: During the last Millenium, we started using hierarchical Squid arrays with load balancing. We are currently using Squid 2.4 STABLE7. We have been migrating to a new network

[squid-users] Re: Performance Troubleshooting

2004-07-14 Thread Adam Aube
Sturgis, Grant wrote: I recently moved our squid installation from SuSE 8 to RHEL ES 3 and the performance has decreased significantly. I attempted to keep the configuration largely the same, and the hardware is 100% the same The performance with SuSE: peak median response time = .250 s

RE: [squid-users] cache_peer with multiple IP addresses

2004-07-14 Thread Elsen Marc
On Wed, 14 Jul 2004, Elsen Marc wrote: ... ... Unfortunately, weight applies to all IP addresses assigned to a parent or sibling. I am, in essence, forced to change from using domain names to IP addresses to define parents and siblings until ARIN allows me to change name

[squid-users] Re: Encrypted traffic with proxy server?

2004-07-14 Thread Adam Aube
Rick Whitley wrote: We would like to encrypt all network traffic on the segment our proxy server is on. Will a proxy server work with enctypted traffic. If I am asking this wrong please forgive me. We would like to remove the ability for users on this segment to sniff packetts. Squid

[squid-users] Re: Client can't connect but No log

2004-07-14 Thread Adam Aube
[EMAIL PROTECTED] wrote: Our user use windows98se and Internet Explorer 6.0 sp1. After some hours or days, suddenly IE can't connect Internet via squid. Message is Can't found page. DNS error or not found squid is not transparent proxy. Are you using authentication? If so, this could be

[squid-users] Re: application/octet-stream

2004-07-14 Thread Adam Aube
Peter Marshall wrote: Is there a way to block this application/octet-stream I tried acl STREAM req_mime_type ^application/octet-stream but it did not seem to work That's because the MIME type of the sent content is in the reply, not the request. Change the acl to rep_mime_type and block

RE: [squid-users] Re: Client can't connect but No log

2004-07-14 Thread Angela Burrell
If you bypass squid (turn off the squid, change your firewall to allow HTTP through, and reconfigure and restart Internet explorer) maybe on one PC, does the Internet work again? I ask because I had the similar problems on my network with Windows XP. It turns out that on my DHCP server, it was

RE: [squid-users] Re: Encrypted traffic with proxy server?

2004-07-14 Thread Chris Perreault
We've set up a reverse proxy with the --enable-ssl option. Our back end webservers are http on port 80. Squid only accepts traffic from port 443. The browsers are connecting to the proxy (run in accelerator/reverse proxy mode) All traffic between internet users and the proxy are ssl. From the

[squid-users] Load Balancing with Cache_Peers

2004-07-14 Thread Kent, Mr. John \(Contractor\)
Greeting Squid Gurus, I read an interesting article on Load Balancing in Zope with Squid as an accelerator. http://www.zope.org/Members/htrd/howto/squid I wanted to try it using Apache servers as a backend instead of Zope The problem is the article didn't quite have enough info for me to figure

[squid-users] RE: Re: Encrypted traffic with proxy server?

2004-07-14 Thread Adam Aube
Chris Perreault wrote: We've set up a reverse proxy with the --enable-ssl option. Our back end webservers are http on port 80. Squid only accepts traffic from port 443. The browsers are connecting to the proxy (run in accelerator/reverse proxy mode) All traffic between internet users and the

Re: [squid-users] Re: application/octet-stream

2004-07-14 Thread Peter Marshall
Cool. Thanks. That worked. Do you know a link where I can read more about different types of data (like application/octet-stream) and also squid stuff like http_reply_access Thank you for your help Peter - Original Message - From: Adam Aube [EMAIL PROTECTED] To: [EMAIL

[squid-users] Re: Re: application/octet-stream

2004-07-14 Thread Adam Aube
Peter Marshall wrote: Adam Aube wrote: Peter Marshall wrote: Is there a way to block this application/octet-stream I tried acl STREAM req_mime_type ^application/octet-stream but it did not seem to work That's because the MIME type of the sent content is in the reply, not the request.

Re: [squid-users] cache_peer with multiple IP addresses

2004-07-14 Thread Khawar Nehal
You can define the same entry multiple times with round robin and this gives a percentage weight of requests. This can be used for load balancing of different sized parents with various bandwidths. Example peer 3 peer 1 peer 3 peer 2 peer 3 peer 1 peer 3 2/7 requests to peer 1 1/7

RE: [squid-users] Market Overview

2004-07-14 Thread Babar Kazmi
Dear Erkan Tough question, as I have never determined proxy servers share and my usage .. I have been Squid ... Squid till I die .. Regards Babar Kazmi. Hi all, I am actually looking for a market overview regarding Proxy Servers. Does something like www.netcraft.com exist for Proxy Servers

Re: [squid-users] Market Overview

2004-07-14 Thread Khawar Nehal
Does Novell's Border manager offer anything better than squid. Or does any commercial solution offer anything that is useful which suid does not offer ? On Wednesday 14 July 2004 12:32 pm, Babar Kazmi wrote: Dear Erkan Tough question, as I have never determined proxy servers share and my

[squid-users] arp based acl

2004-07-14 Thread Kashif Ali
i am using squid 2.5 stable5 on redhat linux 9 i had install it befor by ./configure --prefix=/usr/local/squid make all make install now i reinstall it by ./configure --enable-arp-acl --prefix=/usr/local/squid make clean make make install my access controls are acl mac1 arp 00:a0:c9:9b:3c:e7

RE: [squid-users] Re: One step away from getting winbind authentication working...

2004-07-14 Thread Herman \(ISTD\)
Thank's Rob, I have located the winbind pipe directory, will try it later for winbind authentication. However actually what is the function of the pipe ? I think I cannot find this information on squid FAQ. Regards, herman -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [squid-users] Re: Client can't connect but No log

2004-07-14 Thread engineer
Thanks all. Our client IP setting is static, because host program check ip and MAC address. So I set static ip address all PC. main offce set 192.168.1.0/24 and sub office set 192.168.3.0/24. squid IP is 192.168.1.237/24 main office client setting below IP 192.168.1.X/24 GW 192.168.1.2

RE: [squid-users] Encrypted traffic with proxy server?

2004-07-14 Thread Babar Kazmi
Dear Rick Squid though supports encrypted connections to clients but I am not sure if any browser supports encrypted connections to the proxy. SSL encrypts traffic, but it also puts some remarkable load on your system also .. here you would have to keep in view your system resources as well ..

RE: [squid-users] arp based acl

2004-07-14 Thread Elsen Marc
squid-users] arp based acl i am using squid 2.5 stable5 on redhat linux 9 i had install it befor by ./configure --prefix=/usr/local/squid make all make install now i reinstall it by ./configure --enable-arp-acl --prefix=/usr/local/squid make clean make make install my access