RE: [squid-users] fedora, squid, cisco, transparent proxy and https/ssl

2005-01-19 Thread Elsen Marc
> > Hi Everyone, > > We have squid 2.5 setup and working beautifully as a > transparent proxy. Our > cisco firewall/router redirects the traffic outbound on port > 80 to the squid > box and it in turn is filtered and sent on it's merry way. > > Our problem lies with the https traffic, whi

[squid-users] centralised logging

2005-01-19 Thread Rolf
hello what do people use for centralised logging for multiple squid boxes? About to put in another server, didn't see any relevant directives in squid.conf for redirecting log output (but I could have missed). Is it best to setup a method to transfer the logs to a master machine and modify the r

Re: [squid-users] fedora, squid, cisco, transparent proxy and https/ssl

2005-01-19 Thread James Gray
On Thu, 20 Jan 2005 09:47 am, Flip Johnson wrote: > Hi Everyone, > > We have squid 2.5 setup and working beautifully as a transparent proxy. Our > cisco firewall/router redirects the traffic outbound on port 80 to the > squid box and it in turn is filtered and sent on it's merry way. > > Our proble

Re: [squid-users] Squid on W2K w/ AD Authentication

2005-01-19 Thread Robert Vangel
James Bruce wrote: [...] #The allowed domains for Restricted Web Users acl Restricted_Web_Access dstdomain .il.us acl Restricted_Web_Access dstdomain .mil acl Restricted_Web_Access dstdomain .msn.com acl Restricted_Web_Access dstdomain .windowsupdate.com acl Restricted_Web_Access dstdomain .edu a

[squid-users] service squid restart not good? must use service squid stop and start?

2005-01-19 Thread Yong Bong Fong
Dear all, I read from somewhere that says do not use "service squid restart", rather do the following: #service squid stop long wait 30s to 1 minute #service squid start Very long wait - half and hour or so if you have about a million urls in the squidguard block lists. It says the reason is "

Re: [squid-users] squid not caching files to disk

2005-01-19 Thread Ben O'Shea
Squid Cache: Version 2.5.STABLE5 On Wed, 19 Jan 2005 23:12:51 +0100 (CET), Henrik Nordstrom <[EMAIL PROTECTED]> wrote: > On Tue, 18 Jan 2005, Ben O'Shea wrote: > > > Now, my problem is that about a month or so later after, usage on my > > swap disk is still sitting at 126MB and i'm almost certai

[squid-users] fedora, squid, cisco, transparent proxy and https/ssl

2005-01-19 Thread Flip Johnson
Hi Everyone, We have squid 2.5 setup and working beautifully as a transparent proxy. Our cisco firewall/router redirects the traffic outbound on port 80 to the squid box and it in turn is filtered and sent on it's merry way. Our problem lies with the https traffic, which we are not rerouting at

Re: [squid-users] auth_param username rewrite

2005-01-19 Thread David Brown
On Wed, 19 Jan 2005 23:17:58 +0100 (CET), Henrik Nordstrom <[EMAIL PROTECTED]> wrote: > On Mon, 17 Jan 2005, Scott wrote: > > > Sorry Henrik, should have elaborated a little... I have over 1000 customer > > sites.. that would be a little ugly to set up and very ugly to maintain. > > Not very, but

Re: [squid-users] SSL Reverse Proxy to Exchange 2003 OWA - SQUID just shutsdown by itself.

2005-01-19 Thread Henrik Nordstrom
On Sun, 16 Jan 2005, Rakesh Kumar wrote: I have installed now Squid-3.0-PRE3-20050111. Now squid porcess is seems to be stable as I have not restarted for last 4-5 days but facing an other problem, now opening a box or a mail takes very long time (may be 10 minutes). We keep on seeing 'Loading' on

Re: [squid-users] Authentication Problems

2005-01-19 Thread Henrik Nordstrom
On Mon, 17 Jan 2005, Hement Gopal wrote: Does anyone have any other ideas regarding this problem? I am out of ideas. Everything looks correct from what I can see. Are you sure there is no related errors/warnings in cache.log? Regards Henrik

Re: [squid-users] auth_param username rewrite

2005-01-19 Thread Henrik Nordstrom
On Mon, 17 Jan 2005, Scott wrote: Sorry Henrik, should have elaborated a little... I have over 1000 customer sites.. that would be a little ugly to set up and very ugly to maintain. Not very, but a little yes. It must be another proxy (such as Squid) and it must support forwarding of the user cre

Re: [squid-users] transparent proxy + web content filter problem

2005-01-19 Thread Henrik Nordstrom
On Mon, 17 Jan 2005, DurgaPrasad Adusumalli wrote: I am using web proxy content filter (Dansguardian) to scan all outgoing traffic from my LAN. I am using transparent proxying with an iptable rule that forwards all outgoing traffic to web proxy. This setup works but all the browsing activity gets s

Re: [squid-users] squid not caching files to disk

2005-01-19 Thread Henrik Nordstrom
On Tue, 18 Jan 2005, Ben O'Shea wrote: Now, my problem is that about a month or so later after, usage on my swap disk is still sitting at 126MB and i'm almost certainly sure it should be showing much larger usage (this cache is fairly heavily used). Which version of Squid? Regards Henrik

Re: [squid-users] WG: failure notice

2005-01-19 Thread Henrik Nordstrom
On Tue, 18 Jan 2005, Albrecht, Robert-Manfred wrote: I`m trying to limit the upload via HTTP-Post. Squid can't. Delay pools only apply to traffic from the "Internet", not traffic from the clients. Regards Henrik

Re: [squid-users] Problems with Squid 2.5 and Squid 2.4 as parent

2005-01-19 Thread Henrik Nordstrom
On Tue, 18 Jan 2005, Jens Strohschnitter wrote: Ah, is it the acl INSIDE_IP dst x.x.x.x/24 ? In squid 2.3 there is a line that showes acl intern destdomain x.x.x.x acl proxy_access src "/etc/squid/block_doms" http_access allow intern proxy_access Now I changed it in squid 2.5 to: acl INSIDE_IP dst

Re: AW: [squid-users] "unsupported method 'cookie'

2005-01-19 Thread Henrik Nordstrom
On Wed, 19 Jan 2005, Kinkie wrote: On Tue, 2005-01-18 at 10:58 +0100, [EMAIL PROTECTED] wrote: But the applet works if my computer connect the web direct The best solution is to try and sniff the connection in both cases. It is probably a bug in the proxy-handling code of the applet. Or quite like

[squid-users] squid + squirm

2005-01-19 Thread Max Černý
Hi all. I set in our school squid working with squirm redirector. In squirm config files I put the webpages that I want to block from users. But they have discovered, that if they don't put www.google.com, but http://66.102.11.99 - the webpage will display. Is there any chance to block reguests,

Re: [squid-users] Ask about what neccessary configuration needed to server 200++ clients

2005-01-19 Thread Henrik Nordstrom
On Tue, 18 Jan 2005, Yong Bong Fong wrote: I have got a squid working with LDAP authentication, squidguard + viralator. The box is complete and can run well. However so far Ihave only used it on my own machine, I have never test it out to serve huge number of clients. I wish to know what are th

[squid-users] Squid on W2K w/ AD Authentication

2005-01-19 Thread James Bruce
I wanted to say a very many thanks to the people who made squid work on NT and the support this list provides. Without everyones help our company would of spent close to $1000 on ISA. Instead we are now using squid with Active Directory Authentication. I've included my squid.config to maybe help a

Re: [squid-users] is my cache working

2005-01-19 Thread Daniel Navarro
If any client is browsing through your proxy it is working. Otherwise internet browsers can´t navigate. Them I will provide the few moments proxies works. Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Siew Wing Loon <[EMAIL PROTECTED]> escribió: > H

RE: [squid-users] is my cache working

2005-01-19 Thread Elsen Marc
> > Hi, > > How can I confirm that my squid's cache is working > fine? > > Any log files can verify it? > - Check squid's access.log : watch out for TCP_HIT e.d entries. If you have them, then your cache is working. M.

[squid-users] is my cache working

2005-01-19 Thread Siew Wing Loon
Hi, How can I confirm that my squid's cache is working fine? Any log files can verify it? Regards, Siew __ Do you Yahoo!? Yahoo! Mail - You care about security. So do we. http://promotions.yahoo.com/new_mail

[squid-users] Radius Auth / Squid-2.5r6

2005-01-19 Thread Janno de Wit
Hi Folks, Have a problem here with squid-2.5r6: Situation: - LVS-DR with 2 Squidservers - User can go to whitelist-sites without authorisation - When entering a site out of the whitelist, basic password auth is required. The credentials will be checked via a radius auth helper. Symptom: - Som

Re: AW: [squid-users] "unsupported method 'cookie'

2005-01-19 Thread Kinkie
On Tue, 2005-01-18 at 10:58 +0100, [EMAIL PROTECTED] wrote: > But the applet works if my computer connect the web direct The best solution is to try and sniff the connection in both cases. It is probably a bug in the proxy-handling code of the applet.

RE: [squid-users] WindowsUpdate Problems.

2005-01-19 Thread Palmer J.D.F.
Hi, Thanks for all of your suggestions. :-) Someone from the list has kindly sent me a list of IPs for making holes in the FW with which was a quick fix, I have since set up WPAD autoproxy configuration as this seemed like the most transparent and resilient way of fixing it; WU does a WPAD discov

RE: [squid-users] WindowsUpdate Problems.

2005-01-19 Thread Steve Palmer
I would probably recommend setting up the free SUS server which would have direct or regular proxy access to the official servers, and use group policys to direct all your clients to your inhouse server. http://www.microsoft.com/windowsserversystem/sus/default.mspx ooo just noticed they're do

RE: [squid-users] WCCP

2005-01-19 Thread Luu Trung Duong
How can I do, I don't see this when recompile my kernel -Original Message- From: pmquan [mailto: Sent: Wednesday, January 19, 2005 8:17 PM To: Luu Trung Duong Subject: Re: [squid-users] WCCP recompile ur kernel with WCCP enabled On Wed, 19 Jan 2005 20:07:31 +0700, Luu Trung Duong <

[squid-users] WCCP

2005-01-19 Thread Luu Trung Duong
Hi ALL, Please help my with this [EMAIL PROTECTED] ip_wccp-1.7]# make install make -C /lib/modules/2.4.20-8/build SUBDIRS=$PWD modules make[1]: Entering directory `/usr/src/linux-2.4.20-8' The present kernel configuration has modules disabled. Type 'make config' and

[squid-users] Memory_pools.

2005-01-19 Thread Renato Policani
Hi all, I am again !! The trouble of memory pools is continue... My squid version is squid-3.0-PRE3... And squid return this error when I use squid -z: Memory pools are 'off'; limit: 2.00 MB My configuration for this session: # TAG: memory_pools on|off # If set, Squid will keep pools of al

[squid-users] unsubscrube

2005-01-19 Thread aaaee2
unsubscribe

[squid-users] Betr.: Re: [squid-users] WindowsUpdate Problems.

2005-01-19 Thread Janno de Wit
Hi folks, > > It appears that the Windows Update V5 client (not sure about V4) tries to > > open a port 80 connection directly to Microsoft servers to check for and > > download updates, this obviously fails as the router acls drop the packets. > > We had similar problems with WinXP clients tryi

[squid-users] Bandwidth Control using Delay Pool. Help !

2005-01-19 Thread Anandh G
I am running Squid (squid-2.5.STABLE5-4.fc2.2) on Redhat FC-2. I want to implement a Bandwidth control for my workstations to the Internet using Squid Delay pool. I am having a 256Kbps Internet link. I have some queries 1. someone from my office said me that Squid delay pool will some time loose