RE: [squid-users] Error installing squid 2.5 on solaris 8

2004-10-29 Thread Elsen Marc
I am attempting to install squid 2.5 stable 6 under solaris 8 using the gcc compiler. When I run ./configure I get the following: creating cache ./config.cache checking for a BSD compatible install... cfgaux/install-sh -c checking whether build environment is sane... yes checking

[squid-users] redirector exit

2004-10-29 Thread Deepa D
Hi All, I am using Squid-2.5STABLE5. I need a clarification regarding one scenario - what happens to the request that squid has assigned to a redirector but the redirector exits for some reason? Will squid process it assuming that a '\n' was returned by the redirector, will the request be lost

[squid-users] Choose OS for squid cache.

2004-10-29 Thread Milind Nanal
Dear list, I want to configure Squid cache engine on Intel based server with bsd operating system. Doing basic search I found there are 3 types of bsd 1) freebsd 2) openbsd 3) netbsd Which one out of there 3 would be best for squid wccp2 cache engine? Also please give my any links, which

[squid-users] cookies with redirector

2004-10-29 Thread Deepa D
Hi All, I am using squid-2.5STABLE5 with redirectors. I have a requirement wherein when the redirector returns back a different url for squid to service the cookies received from the browser should also be passed to that request. It doesn't seem to be happening now. Could somebody kindly

[squid-users] Problems with ntlm_auth

2004-10-29 Thread Ian Large
Hi all Environment: RHEL WS 3.0 Samba 3.0.7-1.3E (Red Hat RPM version) Squid 2.5.STABLE3-6.3E.2 (Red Hat RPM version) I posted a question a couple of days ago which got me finally pointed in the right direction to make this work. Thanks to those who responded. However I find myself with a little

Re: [squid-users] WCCP problem!--solved!

2004-10-29 Thread Yemi Fowe
Thanks a lot Henrik, I got the problem solved, your answer No! to my questions realy helped. The problem was that my router wasnt well configured. Thanks --yemi --- Henrik Nordstrom [EMAIL PROTECTED] wrote: On Thu, 28 Oct 2004, Yemi Fowe wrote: Hello, I am trying to setup wccp version

Re: [squid-users] Choose OS for squid cache.

2004-10-29 Thread Russ Uhte
Milind Nanal wrote: Dear list, I want to configure Squid cache engine on Intel based server with bsd operating system. Doing basic search I found there are 3 types of bsd 1) freebsd 2) openbsd 3) netbsd Which one out of there 3 would be best for squid wccp2 cache engine? Which one are you most

RE: [squid-users] Webmail POST

2004-10-29 Thread Jose Costa
Excuse me for the missing info... Squid Version 2.5.STABLE5 running on Fedora Core 2, Kernel 2.6.5-1.358. yum updates daily. Below the log. XXX is internal IP. 1098734256.638 1328 XXX.XXX.XXX.XXX TCP_MISS/200 28108 GET http://br.f602.mail.yahoo.com/ym/Compose? - DIRECT/216.109.118.111

[squid-users] transparent proxying

2004-10-29 Thread Giedrius
Hi all, Is there any way to detect transparent squid-proxy running? I want to share my internet connection, so that administrator couldn't detect this. I decided to use transparent proxying in squid. Will this work for me? Giedrius PS. Thanks for answers and sorry for bad english.

RE: [squid-users] Webmail POST

2004-10-29 Thread Jose Costa
Below my squid.conf, the access.log after I click attach(on yahoo mail) and the Squid version(rpm) output: I saw a TCP_MISS/503... [EMAIL PROTECTED] root]# tail -f /var/log/squid/access.log | grep XXX.XXX.XXX.XXX 1099053084.373142 XXX.XXX.XXX.XXX TCP_MISS/200 771 GET

Re: [squid-users] transparent proxying

2004-10-29 Thread Russ Uhte
Giedrius wrote: Hi all, Is there any way to detect transparent squid-proxy running? I want to share my internet connection, so that administrator couldn't detect this. I decided to use transparent proxying in squid. Will this work for me? Nothing's impossible to detect. It really depends on how

[squid-users] RE: Authing to ADS NT Groups in a file

2004-10-29 Thread Adam Aube
Jason Oakley wrote: http_access allow AllowedNTUsers LoggedInUsers http_access deny !AllowedNTUsers http_access deny !LoggedInUsers # And finally deny all other access to this proxy http_access deny all You can further simplify this: http_access allow AllowedNTUsers http_access deny all

Re: [squid-users] transparent proxying

2004-10-29 Thread Giedrius
Russ Uhte wrote: Giedrius wrote: Hi all, Is there any way to detect transparent squid-proxy running? I want to share my internet connection, so that administrator couldn't detect this. I decided to use transparent proxying in squid. Will this work for me? Nothing's impossible to detect. It

[squid-users] Re: Choose OS for squid cache.

2004-10-29 Thread Adam Aube
Milind Nanal wrote: I want to configure Squid cache engine on Intel based server with bsd operating system. Doing basic search I found there are 3 types of bsd 1) freebsd 2) openbsd 3) netbsd Which one out of there 3 would be best for squid wccp2 cache engine? Also please give my any

[squid-users] Problems with ntlm_auth...the continuing story...

2004-10-29 Thread Ian Large
Hello again I managed to get ntlm_auth working! Yay! Someone here pointed me towards disabling shadow passwords and straight away it started working correctly. The next thing on my to-do list is to trap expired passwords... Presumably, since ntlm_auth should give (according to my little book) an

[squid-users] Another query

2004-10-29 Thread Ian Large
I've been experimenting with the ntlm_auth versions on my Red Hat test server. I noticed that there are two different ones; one in /usr/bin and one in /usr/lib/squid. From a previous reply to my last post here I would imagine that one is the squid version and one is the samba version. I have

Re: [squid-users] Customize error pages.

2004-10-29 Thread Henrik Nordstrom
On Thu, 28 Oct 2004, Jim Nachlin wrote: FAQ 19.10 says The Squid default signature is added automatically unless %s is used in the error page. So there is no way to not indicate what software is being used? Seems like either you add %s or it gets added for you. Correct. The Squid developers

RE: [squid-users] Customize error pages.

2004-10-29 Thread Chris Perreault
A comment being !-- -- type html tag? What would I put? !-- %s -- anywhere on the page? I also tried something else, in reverse proxy mode, to make it so undefined directories get redirected when they hit that invalid url page. I added a meta refresh tag to direct users to the default homepage.

Re: [squid-users] large file support for logfiles ?

2004-10-29 Thread Henrik Nordstrom
On Thu, 28 Oct 2004, Dieter Bloms wrote: What do you think about large file support for the logfiles ? The problem with large tile support is that it is a all or nothing thing. Enabling it changes all file I/O and related C types to 64 bit which confuses some parts of Squid on otherwise 32bit

Re: [squid-users] IP addresses in log with log_FQDN on

2004-10-29 Thread Henrik Nordstrom
On Thu, 28 Oct 2004, DaveP wrote: I set up access control using srcdomain in the hope of 'forcing' a reverse lookup but there are still a few rogue log entries getting through. Should work... but there is a very small race window if the cached lookup expires before the request completes..

Re: [squid-users] transparent proxying

2004-10-29 Thread Russ Uhte
Giedrius wrote: Russ Uhte wrote: Giedrius wrote: Hi all, Is there any way to detect transparent squid-proxy running? I want to share my internet connection, so that administrator couldn't detect this. I decided to use transparent proxying in squid. Will this work for me? Nothing's impossible to

[squid-users] Hide squid behind nat

2004-10-29 Thread Debelius, Brian
I would like to have squid in a dmz behind nat as a reverse proxy. The real web server port number will not port 80. Is there a way to stop squid from revealing the redirected port number when it gives an error message back to the client?

Re: [squid-users] transparent proxying

2004-10-29 Thread Giedrius
Russ Uhte wrote: It really depends on what you call easy. Some people are better at recognizing patterns than others, and that would be what was really needed to detect a transparent proxy. Ok I got it. And about non transparent proxying? Is it more difficult to detect it? Again, I reiterate,

Re: [squid-users] transparent proxying

2004-10-29 Thread Russ Uhte
Giedrius wrote: Russ Uhte wrote: It really depends on what you call easy. Some people are better at recognizing patterns than others, and that would be what was really needed to detect a transparent proxy. Ok I got it. And about non transparent proxying? Is it more difficult to detect it? I

RE: [squid-users] GET and POST ACL's

2004-10-29 Thread Debelius, Brian
Thanks, that worked. -Original Message- From: Diego Woitasen [mailto:[EMAIL PROTECTED] Sent: Friday, October 29, 2004 12:43 AM To: Debelius, Brian Subject: Re: [squid-users] GET and POST ACL's yes, for example acl method_get method GET acl method_post method POST acl site1 dstdomain

Re: [squid-users] room for improvement in my proxy architecture

2004-10-29 Thread Gaylord Van Brocklin
And one last question on the NAT'ing subject.. I need to provide full redundancy with automatic failover on all devices (which would now include this NAT device between the Proxies and Internet). A couple of routers with a VIP and HSRP? Or is there an easy solution using Open/FreeBSD or

Re: [squid-users] Squid strange 100% cpu

2004-10-29 Thread Henrik Nordstrom
On Thu, 28 Oct 2004, Dan Didier wrote: When starting squid, cpu goes to 100% and I turned on debug and get this as output: Any ideas? It just keeps doing this... 2004/10/18 15:56:10| eventRun: RUN ID 158 2004/10/18 15:56:10| eventRun: Running 'MaintainSwapSpace', id 157 2004/10/18 15:56:10|

Re: [squid-users] client ip show up on error message

2004-10-29 Thread Henrik Nordstrom
On Fri, 29 Oct 2004, andry wrote: hi all, i've make policy for any junk sites on my squid, if client try to find one of the junk site standard error message appear, how if i want to make ip client which try that site appear on the error messages See the FAQ on how to write your own error

Re: [squid-users] redirector exit

2004-10-29 Thread Henrik Nordstrom
On Fri, 29 Oct 2004, Deepa D wrote: I am using Squid-2.5STABLE5. I need a clarification regarding one scenario - what happens to the request that squid has assigned to a redirector but the redirector exits for some reason? redirectors are not supposed to exit in this manner.. but if they do

[squid-users] reverse proxy and proxy in the same machine..

2004-10-29 Thread manolo cabeza
Hello , i have a question to configure fine proxy squid with proxy , and reverse proxy in the same machine. at this moment the users for my organization uses proxy every day and works ok , but i need to make a reverse proxy to connect to my owa from internet. my owa have the ip address

Re: [squid-users] Problem with ACL ???

2004-10-29 Thread Kashif Ali Bukhari
acl download urlpath_regex \.exe$ \.exe\?.*$ http_access download weekend http_access deny all \.exe\?.*$ will block any parameter after .exe like http://www.url.com/file.exe? Will block by squid and \.exe$ wil block siple url wit out ? On Thu, 28 Oct 2004 19:54:51 +0700, Luu Trung Duong [EMAIL

[squid-users] Login with invalid characters

2004-10-29 Thread L E O N
How to block user to write invalid characters in to the login field ? Is it possible? Brgds, Leon. _ MSN Messenger: converse com os seus amigos online. http://messenger.msn.com.br

Re: [squid-users] cookies with redirector

2004-10-29 Thread Henrik Nordstrom
On Fri, 29 Oct 2004, Deepa D wrote: I am using squid-2.5STABLE5 with redirectors. I have a requirement wherein when the redirector returns back a different url for squid to service the cookies received from the browser should also be passed to that request. Redirectors only change the URL, not

Re: [squid-users] Problems with ntlm_auth

2004-10-29 Thread Henrik Nordstrom
On Fri, 29 Oct 2004, Ian Large wrote: auth_param ntlm program /usr/lib/squid/ntlm_auth --helper-protocol=squid-2.5-ntlmssp You should use ntlm_auth from Samba, not the completely different helper with the same name from Squid.. Regards Henrik

Re: [squid-users] transparent proxying

2004-10-29 Thread Henrik Nordstrom
On Fri, 29 Oct 2004, Giedrius wrote: Is there any way to detect transparent squid-proxy running? Depends what is beeing looked for. I want to share my internet connection, so that administrator couldn't detect this. I decided to use transparent proxying in squid. Will this work for me? No

RE: [squid-users] Customize error pages.

2004-10-29 Thread Henrik Nordstrom
On Fri, 29 Oct 2004, Chris Perreault wrote: A comment being !-- -- type html tag? What would I put? !-- %s -- anywhere on the page? Would do. Regards Henrik

Re: [squid-users] Hide squid behind nat

2004-10-29 Thread Henrik Nordstrom
On Fri, 29 Oct 2004, Debelius, Brian wrote: I would like to have squid in a dmz behind nat as a reverse proxy. The real web server port number will not port 80. Is there a way to stop squid from revealing the redirected port number when it gives an error message back to the client? Squid should

Re: [squid-users] reverse proxy and proxy in the same machine..

2004-10-29 Thread Henrik Nordstrom
On Fri, 29 Oct 2004, manolo cabeza wrote: i have a question to configure fine proxy squid with proxy , and reverse proxy in the same machine. The same Squid can act as both, but I would recommend running two Squids, one for each purpose. Regards Henrik

Re: [squid-users] Login with invalid characters

2004-10-29 Thread Henrik Nordstrom
On Fri, 29 Oct 2004, L E O N wrote: How to block user to write invalid characters in to the login field ? Don't they get blocked automatically by login failure? Regards Henrik

Re: [squid-users] redirector with Shutdown flag

2004-10-29 Thread Henrik Nordstrom
On Thu, 28 Oct 2004, Valentin Chopov wrote: How squid handles the redirectors with shutdown flag on. It looks that the redirector functions normaly even there is a shutdown flag. The shutdown flag indicates Squid has requested this redirector to shut down, but the redirector has not yet

Re: [squid-users] Login with invalid characters

2004-10-29 Thread L E O N
Yes, but the problem is that an entry with garbage is created. Then when I try to use a program like SARG to generate a Report the program crashes. I was wondering if there is a way to avoid it. Many thanks, Leon. From: Henrik Nordstrom [EMAIL PROTECTED] To: L E O N [EMAIL PROTECTED] CC:

Re: [squid-users] flat file parsing vs db filter rules parsing

2004-10-29 Thread Muthukumar
Hello Henrik, Thanks for youe detailed explanations. We are trying to attain good performace compared to DB filters, so that which database will be appropriate to again this. Selection list is as, MySQL, .. BDB... As I said, most peole needing performance in this kind of applications

[squid-users] cache log status.

2004-10-29 Thread BusyBoy
Hello, First: I have recently installed a server system with following SPECS; IBM x-series XEON 1 GM RAM, 3 SCSI Drives During installation I did NOT configure any RAID Option and simply made two partitions : [EMAIL PROTECTED] root]# df -h FilesystemSize Used Avail Use% Mounted

[squid-users] store.log, store_log.c, storeLog() question

2004-10-29 Thread OTR Comm
Hello, Where is it that squid determines the cache directory, subdirectory, and filename to store a cache file? I see in storeLog() where e-swap_dirn and e-swap_filen are written to store.log, but e-swap_dirn doesn't give me the directory/subdirectory. I guess it is in either store.c,