Hi All!
At last I found out whats causing this trouble. It is
my DNS was causing this whole problem. If you get this
error make sure your DNS is working properly. Even
though I had specified the servers in hosts file still
somehow it was using my DNS which was pointing outside
my network. I thought
hi list,
is it possible to send out a html-page as answer for the first request of the
user when he normally would be asked to auth himself? what i want to do is run
squid with auth enabled and have the user to see a webpage at the beginning of
his session. didn't find something matching in the do
I have try to configure the squid proxy i till can't filter the IP
address to use proxy server. Please help me to figure out what is the
mistake of my setting. Below is my setting on /etc/squid/squid.conf :
debug_options ALL,9
> debug_options ALL,9
Change this to debug_options 32,9 to get log all acl
details.
> http_port 3128
>
>
> is it possible to send out a html-page as answer for
> the first request of the
> user when he normally would be asked to auth
> himself?
It is not possible to do it. You can change the
authentication window heading to ask people to provide
authentication details.
Else, create a local network
i have very strange behave in webalizer when i run it i get error like
Error: Skipping record (bad date): [01/jan/1970:05:03:22 -] [2984]
Error: Skipping record (bad date): [01/jan/1970:05:03:22 -] [2985]
Error: Skipping record (bad date): [01/jan/1970:05:03:22 -] [2986]
Error: Skipping
> I have a a few http web servers which point to www
> addressess on my
> proxy
> server I have ldap auhentication I would like to
> bypass authentication
> for
> those http servers but only those ones adn
> authenticate for the rest of
> the http traffic can anyone point me in the right
> direct
Look at http://www.freewebs.com/headsup/. 2 years ago I tested this tool, it
worked fine.
I think this is what Sebastian Pein ask for.
Mit freundlichem Gruß/Yours sincerely
Werner Rost
GMT-FIR - Netzwerk
ZF Boge Elastmetall GmbH
Friesdorfer Str. 175, 53175 Bonn, Deutschland/Germany
Telefon/Phon
good day.
we recently implemented proxy authentication. as a result, userids are
also being logged in the access.log. i have googled and searched thru
the squid archives but have not found anything. is there any way of
disabling the inclusion of userids in the access.log without disabling
loggi
I made the following experience using squid 2.5 as a reverse proxy:
Squid does not cache pages with the http-header
Cache-Control: max-age=60
Squid only begins to cache if the max-age in the http-header is more
than 100 seconds.
Is this a bad configuration on my side, a limitation, a bug ?
Gr
* Ralf Hildebrandt <[EMAIL PROTECTED]>:
> This sucks.
Ran squid in gdb. I got this:
# gdb /usr/sbin/squid
...
(gdb) set args -NsYC
(gdb) run
Starting program: /usr/sbin/squid -NsYC
[Thread debugging using libthread_db enabled]
[New Thread -1209899488 (LWP 1968)]
Program received signal SIGPIPE,
> we recently implemented proxy authentication. as a
> result, userids are
> also being logged in the access.log. i have googled
> and searched thru
> the squid archives but have not found anything. is
> there any way of
> disabling the inclusion of userids in the access.log
> without disabling
On 16.04 10:42, Irfan D Prastomo wrote:
> latest install with WCCP enable FreeBSD-5.X and installation options are:
> Squid Cache: Version 2.5.STABLE9-20050404
> configure options: --prefix=/usr/local/squid --enable-delay-pools
> --enable-snmp --disable-ident-lookups --enable-removal-policies
>
Hello all.
I'm in Italy therefore my Linux Server is set on CEST as you can see from:
proxy:/var/log/squid# date
Mon Apr 18 12:24:46 CEST 2005
Now, to my question: are squid's "access.log" files written with the
actual CEST timestamp, or do they ignore it and just write timestamps
according to GM
* Ralf Hildebrandt <[EMAIL PROTECTED]>:
> Ran squid in gdb. I got this:
Ran squid in gdb again:
(gdb) set args -NsYC
(gdb) handle SIGPIPE pass nostop noprint
SignalStop Print Pass to program Description
SIGPIPE NoNo Yes Broken pipe
(gdb) run
Starting
>
> Hello all.
> I'm in Italy therefore my Linux Server is set on CEST as you
> can see from:
>
> proxy:/var/log/squid# date
> Mon Apr 18 12:24:46 CEST 2005
>
> Now, to my question: are squid's "access.log" files written with the
> actual CEST timestamp, or do they ignore it and just write
"Henrik Nordstrom" wrote:
> These needs to be based on where you run cachemgr.cgi, not which station
> you run the browser at.
.. sorry but pheraps I don't understand !, cachemgr.cgi it's executed on
firwall/proxy machine, the permission on cachemgr.cgi are:
-rwxr-xr-x root root
..still thank
Hello!
I have a website running Apache 1.3.33 and a squid running 2.5-STABLE9 and also
a older version (cannot check the version number right now;).
My problem is that when i go to this website thru the squid proxys then some
pictures do not display correctly, somtimes they are missing or somet
>
> Hello!
>
> I have a website running Apache 1.3.33 and a squid running
> 2.5-STABLE9 and also a older version (cannot check the
> version number right now;).
>
> My problem is that when i go to this website thru the squid
> proxys then some pictures do not display correctly, somtimes
>
Hi all,
This is my existing acl and http_access config:
acl all src 0.0.0.0/0.0.0.0
acl ipaddr src xxx.xxx.85.104/255.255.255.248
acl natmot src 192.168.10.0/255.255.255.0
acl natmot2 src 192.168.11.0/255.255.255.0
acl natmot3 src 192.168.12.0/255.255.255.0
acl natcuda src 192.169.10.0/255.255.255
Seems like overkill then...cacheing can be disabled in the config file. If you
aren't participating in a neighbor cache then those functions aren't used
either. I do understand that you are trying to make the footprint
smaller...I think you could write your own redirector in perl or your
prefe
1113824315.723543 x.60.x.54 TCP_MISS/200 4485 GET
http://xxx.x.is/vyre4/servlet/download/preview.jpg? -
DIRECT/xxx.28.xxx.24 image/jpeg
The all url is:
/vyre4/servlet/download/preview.jpg?ITEM_ENT_ID=39&ITEM_COLL_SCHEMA_ID=32&ITEM_VERSION=1&FILE_SERVICE_CONF_ID=2&FILE_SERVI
>
> 1113824315.723543 x.60.x.54 TCP_MISS/200 4485 GET
> http://xxx.x.is/vyre4/servlet/download/preview
> .jpg? - DIRECT/xxx.28.xxx.24 image/jpeg
>
>
> The all url is:
> /vyre4/servlet/download/preview.jpg?ITEM_ENT_ID=39&ITEM_COLL_S
> CHEMA_ID=32&ITEM_VERSION=1&FILE_SERVIC
Hi everybody!
I have the same problem that [EMAIL PROTECTED] has posted about a while ago:
In short I configured squid 2.5.STABLE5 compiled with the following option:
--enable-ntlm-auth-helpers=winbind,SMB
--enable-external-acl-helpers=unix_group,wbinfo_group --enable-auth=ntlm,basic
--with-wi
D & E Radel schrieb:
The second problem was the way of reading the input from stdin.
I have here a complete script which should also work at your site.
---
#!/bin/sh
# read from stdin until EOF is received
while read INP; do
DOMAIN1=`echo $INP |
HI Folks,
I'm running Squid Cache: Version 2.5.STABLE7 under NetBSD 2.0
and I'm using calamaris to try and track performance. Calamaris seems
to be telling me that my TCP_REFRESH_HIT speed performance is poor; actually
lower than my MISS performance. I have some questions:
1) Why would this be
Hi all,
I'm having a problem using a combination of myip and cache peer
access. What I want to do is say if a user is pointing to the cache on ip
10.10.5.199 go to cache peer 10.10.0.1 and if its pointing to me on
10.10.5.200 go to the cache peer on 10.10.0.2
To do this I'm using two acls'
Hi all,
I'm having a problem using a combination of myip and cache peer
access. What I want to do is say if a user is pointing to the cache on ip
10.10.5.199 go to cache peer 10.10.0.1 and if its pointing to me on
10.10.5.200 go to the cache peer on 10.10.0.2
To do this I'm using two acls'
I downloaded the tclkit and the headsup.kit files. Ran the program from
LINUX (FC3) command line terminal and keep getting the following message
after running the tclkit command:
Can't find package limit
No .htaccess support: can't find package crypt.
But the program still run at port 8015.
I ca
Hi guys,
trying to get rid of inktomi traffic server as our main proxy cache
but we have a little bug.
Basic layout:
local-server + workstations ---> squid cache ---> Internet
Squid Cache: Version 2.5.STABLE9-20050415
configure options: --prefix=/opt/squid --sysconfdir=/etc/opt/squid
--localsta
On Mon, 18 Apr 2005, sasa wrote:
"Henrik Nordstrom" wrote:
These needs to be based on where you run cachemgr.cgi, not which station
you run the browser at.
.. sorry but pheraps I don't understand !, cachemgr.cgi it's executed on firwall/proxy machine, the permission on cachemgr.cgi are:
Then enter
Hi all,
I just want to know since the ordianry Squid config has its acl and
http_access lines, Do I need to dis able this lines when I'm going to enable
delay pool since I'm also defining acl and delay_access.
Thank you,
Wennie
Hello,
I've set up a Fedora Core 3 box with squid. Now i want that Squid uses
the ntlm_auth for using the Windows 2000 Active Directory Users and
Passwords.
My smb.conf looks like this:
[global]
realm = Heumann.local
workgroup = Heumann
server string = Samba Server
printcap name = /
On Mon, 18 Apr 2005, Thomas Rimmele wrote:
I made the following experience using squid 2.5 as a reverse proxy:
Squid does not cache pages with the http-header
Cache-Control: max-age=60
Squid only begins to cache if the max-age in the http-header is more than 100
seconds.
The limit is 60 seconds u
On Mon, 18 Apr 2005, Ralf Hildebrandt wrote:
Ran squid in gdb again:
(gdb) set args -NsYC
(gdb) handle SIGPIPE pass nostop noprint
SignalStop Print Pass to program Description
SIGPIPE NoNo Yes Broken pipe
Ah, you read the FAQ again?
Program received si
On Mon, 18 Apr 2005, [iso-8859-1] Finnur Örn Guðmundsson - TM Software Skyggnir
wrote:
Hello!
I have a website running Apache 1.3.33 and a squid running 2.5-STABLE9 and also
a older version (cannot check the version number right now;).
My problem is that when i go to this website thru the squid
On Mon, 18 Apr 2005, pt wrote:
Hi everybody!
I have the same problem that [EMAIL PROTECTED] has posted about a while ago:
In short I configured squid 2.5.STABLE5 compiled with the following option:
Try upgrading before digging too deap in the details. The current version
is 2.5.STABLE9 and there
On Mon, 18 Apr 2005, Dave Raven wrote:
I also have never direct all and always direct none. If I use the ip that's
bound to the card as the main ip (.200) it works perfectly and I get sent
through the right host. If I use the aliased ip however, I get a failed to
select source, and a message to say
On Mon, 18 Apr 2005, maverick 72 wrote:
The problem is that some local servers in our local domain (but not
all of them) use NTLM authentication and after reading some posts, I
found out that *its just not proxyable* by squid.
Correct.
How can I bypass without using some sort of technique on the cl
On Mon, 18 Apr 2005, Peter213 wrote:
Now I get the following error in the cache.log
You must specify at least one domain-controller!
(ntlm_auth) usage:
(ntlm_auth) [-b] [-f] [-d] [-l] domain\controller [domain\controller
...]
You are using the wrong ntlm_auth program. Ther is both a ntlm_auth
prog
"Henrik Nordstrom" wrote:
> Then enter localhost as the server address and the suggested default rules
> will be fine.
I am sorry for disturbance again but also with in httpd.conf use 'localhost'
the result on firewall/proxy machine:
Cache Manager Error
connect: (111) Connection refused
..sti
The second problem was the way of reading the input from stdin.
I have here a complete script which should also work at your site.
---
#!/bin/sh
# read from stdin until EOF is received
while read INP; do
DOMAIN1=`echo $INP | /usr/lib/squid/ldap_
On Mon, 18 Apr 2005, sasa wrote:
"Henrik Nordstrom" wrote:
Then enter localhost as the server address and the suggested default rules
will be fine.
I am sorry for disturbance again but also with in httpd.conf use
'localhost' the result on firewall/proxy machine:
Cache Manager Error
connect: (111)
On Mon, 18 Apr 2005, D & E Radel wrote:
Do you know anything about the squid_ldap_group program? I have tried so many
things but cannot get an "OK" from it. Do you have any samples that work?
It shares a lot of the configuration syntax with squid_ldap_auth. The
pieces needed is
a) User search fi
On Wed, 13 Apr 2005, Joost de Heer wrote:
I am running Squid on a 4-processor machine. When looking at the Squid
statistics I noticed the following:
CPU Usage: 24.20%
CPU Usage, 5 minute avg:77.07%
CPU Usage, 60 minute avg: 74.61%
I've never seen the first n
From: "Henrik Nordstrom" <[EMAIL PROTECTED]>
To: "D & E Radel" <[EMAIL PROTECTED]>
Cc: "Matthias Dettling" <[EMAIL PROTECTED]>;
Sent: Tuesday, April 19, 2005 8:52 AM
Subject: Re: [squid-users] Configuring authentication with ldap_auth and two
domains?
On Mon, 18 Apr 2005, D & E Radel wrote:
Do
"Henrik Nordstrom" write:
> Then the address + port combination is not correct. See http_port in your
> squid.conf
.. in squid.conf I have:
http_port 10.0.0.1:3128
and in httpd.conf I have:
listen 10.0.0.1:80
.. and I have tried with also:
listen localhost:80
..where is the error ??
..sti
On Fri, 15 Apr 2005, Oliver Joa wrote:
caching in accelerator mode is exactly the same as in proxy mode.
Ok, but why does it not still cache?
Good question.
Look into the access.log data with "log_mime_hdrs on". If in doubt send us
two lines where you think the second should have been a cache hit
Does squid compress data between cache peers?
--Thanks
* Henrik Nordstrom <[EMAIL PROTECTED]>:
> This looks familiar.. fixed another similar problem not long ago.
Well it took me a while... to work around all this #*~=?$ that I had
to go through...
> Please file a bug report on this issue. Have a patch ready for you.
Will do
--
Ralf Hildebrandt (
On Mon, 18 Apr 2005, sasa wrote:
.. in squid.conf I have:
http_port 10.0.0.1:3128
Then you need to enter 10.0.0.1 as server and 3128 as port, and also to
modify your squid.conf to allow 10.0.0.1 as cache manager.
Alternatively you can add
http_port 127.0.0.1:3128
and use localhost as server in ca
Currently access.log records various statistics for the client-side of
things. I was wondering how to enable similar settings for the server
side of things. For example:
Web server <-> Squid proxy <-> Client
access.log provides squid proxy <-> client numbers but I want the web
server <-> squid p
Yes, and if I configure both to use round robin or use both with icp they
both work.. Its something to do with the _access and myip
I hope to have more info tomorrow though
-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: 18 April 2005 09:52 PM
To: Dave Raven
Cc
Yes, and if I configure both to use round robin or use both with icp they
both work.. Its something to do with the _access and myip
I hope to have more info tomorrow though
-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: 18 April 2005 09:52 PM
To: Dave Raven
Cc
We are trying to allow block access to certain sites to a certain group,
but not another group. Am I too ambitious? ;-)
Pretty standard thing for using squid_ldap_group.
Regards
Henrik
Hi Henrik,
Note: changed the subject as the topic of my original post has evolved. :-)
I see that you co-wrote sq
Hello
I need a very easy way to log what user accesses what URL including date and
time of access. To make things a little harder, I do not want to install
Apache on the server. But I won't mind FTP'ing the results to my PC and
look at them with a browser if that's what it takes. I've looked at
- Original Message -
From: "D & E Radel" <[EMAIL PROTECTED]>
To: "Henrik Nordstrom" <[EMAIL PROTECTED]>
Cc:
Sent: Tuesday, April 19, 2005 10:39 AM
Subject: [squid-users] squid_ldap_group - url access restrictions based on
group
We are trying to allow block access to certain sites to a
# Define external authentication acl
external_acl_type ldap_group %LOGIN /usr/lib/squid/squid_ldap_group -B
ou=people,dc=yourcompany,ou=com -b ou=Group,dc=yourcompany,dc=com -f
(&(cn=%g)(memberUid=%u))" -h ldap.yourcompany.com
# Define the group
acl somegroup external ldap_group group_you_need_to_
See access.log and write a parser for that. See the FAQ
On 4/18/05, Bob Morrison <[EMAIL PROTECTED]> wrote:
> Hello
>
> I need a very easy way to log what user accesses what URL including date and
> time of access. To make things a little harder, I do not want to install
> Apache on the server.
Thanks Thien. :-)
grol
- Original Message -
From: "Thien Vu" <[EMAIL PROTECTED]>
To: "D & E Radel" <[EMAIL PROTECTED]>
Cc: "Henrik Nordstrom" <[EMAIL PROTECTED]>;
Sent: Tuesday, April 19, 2005 12:01 PM
Subject: Re: [squid-users] squid_ldap_group - url access restrictions based
on group
On our webserver I have some pages which I want you to have to log on, to be
able to access them. This is done by setting the permissions on the files so
that only a particular user (not iusr_server which is the anonymous web
user). When not using the proxy it pops up a box and prompts you for a
us
sir,
Im using squid 2.5 from my freebsd os, i have set up already the
restriction for downloading large files "reply_body_max_size 1MB allow
all", the problem is when i test to download files from the url it
didn't work, it bypass continuosly from 1 MB that i've set from my
squid config. Is there
sir,
Im using squid 2.5 from my freebsd os, i have set up already the
restriction for downloading large files "reply_body_max_size 1MB allow
all", the problem is when i test to download files from the url it
didn't work, it bypass continuosly from 1 MB that i've set from my
squid config. Is there
After this month's "Black Tuesday" (the Tuesday on which Microsoft
released a large number of bug fixes and patches and also
eliminated the pacing of Windows XP Service Pack 2 downloads), our
Squid caches went berserk, drawing massive amounts of data from the
Net and clogging our ISP's downstre
On Mon, 18 Apr 2005, Bob Morrison wrote:
> Hello
>
> I need a very easy way to log what user accesses what URL including date and
> time of access.
Squid's access log satisfies your stated requirement. It provides the
date and time of each access, the IP address or domain name of the system
u
Hi,
On Mon, 18 Apr 2005, Henrik Nordstrom wrote:
On Fri, 15 Apr 2005, Oliver Joa wrote:
caching in accelerator mode is exactly the same as in proxy mode.
Ok, but why does it not still cache?
Good question.
Look into the access.log data with "log_mime_hdrs on". If in doubt send us
two lines where y
sir,
After i installed squid proxy to my server, the problem is i cannot
access my outlook mail, error message from my outlook is "the host
could not be found, etc..."
Is there something wron with my squid config? How could i fix this
problem so that my outlook mail will work fine.
Thanks,
Adam
Hi adam,
I hav also got the similar problem so i masqueraded pop3 and smtp ports.
U can try this.
Regards
Dev
On 4/19/05, Alfredo Adam III <[EMAIL PROTECTED]> wrote:
> sir,
>
> After i installed squid proxy to my server, the problem is i cannot
> access my outlook mail, error message from my ou
Hi Wenni,
U don need do disable http_access parameter , they both work simultaneoulsy
Regards
dev
On 4/18/05, Wennie V. Lagmay <[EMAIL PROTECTED]> wrote:
> Hi all,
>
> I just want to know since the ordianry Squid config has its acl and
> http_access lines, Do I need to dis able this lines when
* Ralf Hildebrandt <[EMAIL PROTECTED]>:
> > Please file a bug report on this issue. Have a patch ready for you.
> Will do
Done, #1287
--
Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED]
Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155
Gemeinsame Einri
70 matches
Mail list logo
