[squid-users] help with the acl time param

hello Have been looking at restricting access to a site by time. The purpose is principally to overcome auto refresh from the browser. So its not as straightforward as allowed at some time of the day and not allowed at some other. Is there a way to express a time acl that means allow 'every' s

[squid-users] Congratulation

congratulation to you all squid.2.5.STABLE10 is very nice its working fine and having no problem -- Syed Kashif Ali Bukhari Network Associate Asia Net Cell :- +92-300-4018407 , +92-300-4295604 Ph +92-42-111-111-202 Fax +92-42-5840905 MSN:- [EMAIL PROTECTED] ; [EMAIL PROTECTED] http://asia.net.

Re: [squid-users] Cache size full !!

Sorry to all, the second time i issue the command it works, so my access.log and cache.log was trim. thanks to all, wennie - Original Message - From: "Wennie V. Lagmay" <[EMAIL PROTECTED]> To: "Henrik Nordstrom" <[EMAIL PROTECTED]> Cc: "squidrunner team" <[EMAIL PROTECTED]>; Sent: Tues

Re: [squid-users] Cache size full !!

I issue a command squid -k rotate, but its only cache.log which is trim down. the access.log remains the same. how can I do the trimming of both access.log and cache.log thanks, wennie - Original Message - From: "Henrik Nordstrom" <[EMAIL PROTECTED]> To: "Wennie V. Lagmay" <[EMAIL PROTE

[squid-users] Instant Messenger access

Hey everyone, The problem I have is the following, I've managed to block msn messenger with the following acl-http_access combo: . . . acl msn req_mime_type =96i ^application/x-msn-messenger$ . . . http_access deny msn This works fine but the problem I have now is that I have to give access to on

Re: [squid-users] Unparseable HTTP Headers

On Mon, 16 May 2005 [EMAIL PROTECTED] wrote: Linux Enterprise AS 4.0 Squid-2.5.STABLE6-3.4E.5 Support for this version of Squid is provided by your vendor (RedHat). 2005/05/12 10:37:34| ctx: enter level 0: 'http://download.novell.com/givefile/FREE/_ligPqMqn0Y~/clnt491e.exe' 2005/05/12 10:37:34| WAR

Re: [squid-users] Cache size full !!

On Mon, 16 May 2005, Wennie V. Lagmay wrote: Deleting the cache directory will delete all the objects, Am I right, It means that I will start from scartch, If I not mistaken there is a configuration in squid that depending on the threshold you define, It will automatically delete files. Am I ri

Re: [squid-users] Log file

On Mon, 16 May 2005, Wennie V. Lagmay wrote: Can I issue the command squid -k rotate without any interruption, I mean the proxy server should not be interrupted. Yes. Regards Henrik

Re: [squid-users] my squid box spoofed !!

On Mon, 16 May 2005, Alex wrote: i have a problem with my squid proxy.. suddenly its performance decrease and i never get the speed i expect from my squid box, and when i tail to access.log i find a weird line of information there,, please find it below : 1115668842.640 14680 61.224.206.211 TC

Re: [squid-users] 502 Bad Gateway ??

On Sun, 15 May 2005, Phibee Network operation Center wrote: when my users want going on www.pagesjaunes.fr, he have a "502 Bad Gateway" and when he connect directly without proxy that's work ... Anything in cache.log? What does access.log say? Regards Henrik

Re: [squid-users] AD Authentification and Acl ?

On Sun, 15 May 2005, Phibee Network operation Center wrote: acl dmz_network src 10.216.1.0/24 http_access allow dmz_network acl AllowedADUsers external AD_Group "/etc/squid/allowedntgroups" acl Winbind proxy_auth REQUIRED http_access allow AllowedADUsers http_access deny !AllowedADUsers http_access

Re: [squid-users] other cache_peer

On Sat, 14 May 2005, azeem ahmad wrote: i want to rediredct user's traffic over a certain size say 1 MB to another parent cache_peer. mean if a user requests a file that is big than 1 MB then its request must be completed through another cache_peer. This is hard as the size is only known when the

Re: [squid-users] Can I browse the Squid cache?

On Fri, 13 May 2005, Niels wrote: the Squid cache hold a lot of files, but they are not readily readable. Are there any tools I can use to get to the actual files? Yes. The purge tool linked from "Related Software". Regards Henrik

Re: [squid-users] close active connections

On Fri, 13 May 2005, Simeon Zaharici wrote: I have a script that uses squidclient cache_object://localhost/active_requests in order to identify the longest active connections through the proxy I am wondering if there is a way to direct squid to close an active connection on the proxy Not today no.

Re: [squid-users] Re: DNS lookup failure when transparent proxy

On Sat, 14 May 2005 [EMAIL PROTECTED] wrote: On my Win XP Home clients, I expunged all traces of DNS (Disabled DNS client and server services, and deleted IP addresses from DNS fields. There is no DNS on the internal LAN), and Firefox still happily browses the web through Squid. The DNS setting

Re: [squid-users] DNS lookup failure when transparent proxy

On Fri, 13 May 2005, Steven Morris wrote: I've installed squid version 2.5 release 9 on redhat linux fedora core 3 and setup a proxy server (with 2 ethernet ports) between my LAN and the internet. I've successfully configured Squid so the proxy server runs transparently and intercepts all http re

Re: [squid-users] How to get LOGIN and SRC on external script.

On Fri, 13 May 2005, Truong Tan Son wrote: Dear Sir, I use "external_acl_type" TAB to check the match of username and IP client but don't know how to get %LOGIN & %SRC on my script. external_acl_type checkip children=20 %LOGIN %SRC /usr/local/squid/bin/script.sh Please could help me howto get "%L

Re: [squid-users] Use parent proxy, but use fallback when parent is down?

On Thu, 12 May 2005, Ralf Hildebrandt wrote: Is it possible to make squid use a parent proxy, but fall back to e.g. direct if the parent is down? prefer_direct off makes Squid send most stuff via the parent if alive. Regards Henrik

Re: [squid-users] Squid-cache using <1/4th cache size

On Fri, 6 May 2005, Linda W wrote: So 1) is it a bug that squid -z ignores the number of dirs in a cache line? Works here. 2) Shouldn't object distribution, in the cache, be roughly equal in all "buckets"? I can see from the above, a bell curve with 8-11 files/dir being the most common -- except f

Re: [squid-users] sharepoint over ldap

On Fri, 6 May 2005, Tomas Palfi wrote: production servers, however, recently we encountered a problem with authenticating to sharepoint via http whilst going through squid. After we authenticated via ldap against our local AD server, we get prompted for login name and passwd to the sharepoint. I

Re: [squid-users] squid on AIX execution problem...

On Fri, 6 May 2005, marco antonioli wrote: Hi Squidders, I recently have downloaded a binary version of squid (2.5 STABLE 7) for AIX 4.3...Everything is ok during installation but while execution I got this error: -bash-2.05b# /usr/local/squid/sbin/squid Could not load

Re: [squid-users] wrong website

On Thu, 5 May 2005, Emilio Casbas wrote: We can´t to see the web site http://toxnet.nlm.nih.gov/ with squid-2.5Stable9, without proxy the site can be accessed without problems, but with proxy waiting some minutes The browser is empty and the access.log show: 1115300442.065 340873 X.X.X.X TCP_MI

Re: [squid-users] Bypass Squid for some sites

On Thu, 5 May 2005, Brett Simpson wrote: I'm trying to figure out how to bypass Squid for certain sites that don't work properly. I am not using a transparent firewall so I have to bypass it on the Squid server itself. You can't. You have to do this in the client config. PAC scripts is very suit

Re: [squid-users] chpasswd.cgi , how to refresh change ?

On Thu, 5 May 2005, Pablo Gietz wrote: I have Squid 2.4STABLE7 and chpasswd.cgi with basic auth. When I change the password this change never refresh into the squid until I do squid -k reconfigure. The screen say that password will be in place after 15 minutes but this never happen. There is some w

RE: [squid-users] How can I ignore 'form inputs' on a urlpath_reg ex ?

On Wed, 4 May 2005, Chris Robertson wrote: For the record, something like: ^[^?]*sex[^?]* should fit the bill(1), but would be an absolute CPU hog. Not to mention that you would have to do something to match other "bad" words (e.g. one regex for each word, or a single really long regex utilizing t

Re: [squid-users] Windows Automatic Update (WAU) and non-transparent squid proxy (was Re: [squid-users] Major malfunction: Squid and Windows Update)

I have just read about Windows Server Update Services which is seemingly a free service for Server 2003 and has a client for each XP machine. Not sure which is the best route to take though. SUS is a very good route in terms of bandwidth, allowing you to have local mirrors of windows update. Th

Re: [squid-users] Sarg Questions

From: "Ricardo López Urrutia" <[EMAIL PROTECTED]> Radel; Sarg doesn't run a Webserver, your server is the one running the Webserver and Sarg uses it to display the information collected from the logs. If you need further info about how to configure sarg sarg.conf will do the job,

Re: [squid-users] How can I ignore 'form inputs' on a urlpath_regex ?

On Wed, 4 May 2005 [EMAIL PROTECTED] wrote: I'd know if is possible to create an 'acl urlpath_regex ' that will ignore parameters sent by GET method on an url. I'm thinking on something like where squid will ignore 'www.cia.com/enroll.asp?sex=male', but will deny www.sex.com. acl sex urlpath_regex

Re: [squid-users] Sarg Questions

Radel; Sarg doesn't run a Webserver, your server is the one running the Webserver and Sarg uses it to display the information collected from the logs. If you need further info about how to configure sarg sarg.conf will do the job, the file is very self explaining. Regard

Re: [squid-users] squid unfriendly sites

On Wed, 4 May 2005, Aaron P. Martinez wrote: I read through the documentation and saw that there are some sites that are better set to DIRECT because they don't play well with caching. I'm wondering if there is any kind of compiled list for these just so that i can thwart any unnecessary user ca

Re: [squid-users] Windows Automatic Update (WAU) and non-transparent squid proxy (was Re: [squid-users] Major malfunction: Squid and Windows Update)

On Fri, 6 May 2005, D & E Radel wrote: I have just read about Windows Server Update Services which is seemingly a free service for Server 2003 and has a client for each XP machine. Not sure which is the best route to take though. SUS is a very good route in terms of bandwidth, allowing you to hav

[squid-users] Sarg Questions

Hi there. Can anyone point me in the direction of some decent Sarg info? The man page is minimal, as is the sarg website. I'd like to know more about how to configure it. I see it is running some kind of web-server on my machine after installing via Debian's apt-get, but would like to figure ou

Re: [squid-users] Parsing ntlm auth

On Mon, 16 May 2005, Ytzhak Levy wrote: It seems that my squid.conf is correct.So why do i receive a "Parsing Config File: Unknown authentication scheme 'ntlm'" when i try to use ntlm authentication ? What does /path/to/sbin/squid -v say about which options it was build with? Note: Make sure you a

Re: [squid-users] ssl-2.5.patch and squid-2.5Stable9

On Mon, 16 May 2005, Emilio Casbas wrote: Yes, this was my fault, I didn´t look updates for the ssl-patch though the http://www.geocities.com/squidrunner_dev/patches/v25/squid25S9SSL.txt patch is working for me while the last patch from http://devel.squid-cache.org/old_projects.html#ssl isn´t wor

[squid-users] Parsing ntlm auth

Hi, Im using squid 2.5 stable9 and im trying to authenticate using ntlm. I compiled my squid.conf as below: --enable-ssl --enable-default-err-language=Portuguese --enable-external-acl-helpers=ldap_group --enable-snmp --enable-delay-pools --enable-carp --enable-auth=ntlm,basic and i configured

[squid-users] Unparseable HTTP Headers

Hi I'm having problems downloading from this exact link: http://download.novell.com/givefile/FREE/_ligPqMqn0Y~/clnt491e.exe Seems to be something with my squid.conf, but I can't figure out what. The download works if I disable my proxy settings in either IE/Netscape or Firefox and go direc

RE: [squid-users] ident_lookup and mandrake 10.1

> -Original Message- From: James Sweet > [mailto:[EMAIL PROTECTED] Sent: Monday, May 16, 2005 > 2:22 AM To: squid-users@squid-cache.org Subject: [squid-users] > ident_lookup and mandrake 10.1 > > > hey all > > Im currently running squid 2.5 stable 6 on mandrake 10.1 and want to > make us

RE: [squid-users] trying to block exe files ...

> -Original Message- > From: Andrey Shorin [mailto:[EMAIL PROTECTED] > Sent: Sunday, May 15, 2005 12:07 AM > To: Chris Robertson > Cc: squid-users@squid-cache.org > Subject: Re: [squid-users] trying to block exe files ... > > > Hello Chris, > > Friday, May 13, 2005, 21:26:52, Chris Rober

Re: [squid-users] ssl-2.5.patch and squid-2.5Stable9

Henrik Nordstrom wrote: On Mon, 16 May 2005, Emilio Casbas wrote: The last 6 lines show this: Hunk #7 FAILED at 1004. Hunk #8 succeeded at 1076 (offset 9 lines). Hunk #9 succeeded at 1347 (offset 9 lines). 1 out of 9 hunks FAILED -- saving rejects to file src/structs.h.rej patching file src/typedef

Re: [squid-users] squid - IE - ftp - WWW-authenticate question

On Mon, 16 May 2005, Vinod Patel wrote: Now, a user requests ftp://hostname/ through his browser. Since the username and password are not mentioned in the url, squid tries to connect the remote-server using "anonymous" login and password. Now, if the remote server does not support "anonymous" lo

Re: [squid-users] ssl-2.5.patch and squid-2.5Stable9

On Mon, 16 May 2005, Emilio Casbas wrote: The last 6 lines show this: Hunk #7 FAILED at 1004. Hunk #8 succeeded at 1076 (offset 9 lines). Hunk #9 succeeded at 1347 (offset 9 lines). 1 out of 9 hunks FAILED -- saving rejects to file src/structs.h.rej patching file src/typedefs.h Hunk #1 succeeded at

Re: [squid-users] ssl-2.5.patch and squid-2.5Stable9

You can download the SSL update for squid-2.5stable9 from the following path. http://www.geocities.com/squidrunner_dev/patches/v25/squid25S9SSL.txt --- Emilio Casbas <[EMAIL PROTECTED]> wrote: > Henrik Nordstrom wrote: > > > On Mon, 16 May 2005, Emilio Casbas wrote: > > > >> Does the ssl-2.5.patc

[squid-users] Problem with NTLM

Hi, I am having a problem with Squid and NTLM authentication, on Fedora FC3 with the latest (release) squid and samba installed. Everything seems to be setup correctly; whenever I verify the connection between the linux box and the windows domain with kinit, wbinfo, and all other sorts of utili

[squid-users] Re: my squid box spoofed !!

> 1115668842.640 14680 61.224.206.211 TCP_MISS/200 824 CONNECT > 205.188.156.185:25 - DIRECT/205.188.156.185 - Next to the solutions offered, make an ACL that allows CONNECT attempts only to 'trusted ports', i.e. https(443) and possibly snews (563): acl CONNECT method CONNECT acl Safe_CONNECT_Po

[squid-users] problems streaming audio through the proxy

Hi The users of our proxy complain that they have problems listening to radio stations through the proxy. It works but every few seconds there is a hiccup. That does not happen when they do not use the proxy. Is there any connection settings I could tune for streaming to work smoothly ? Thank you

Re: [squid-users] ssl-2.5.patch and squid-2.5Stable9

Henrik Nordstrom wrote: On Mon, 16 May 2005, Emilio Casbas wrote: Does the ssl-2.5.patch works with squid-2.5STable9? I think it has been updated, but not 100% sure... will check later today. We had the squid-2.5Stable5 working with the patch, but compiling the squid-2.5Stable9 with the patch, sho

[squid-users] squid - IE - ftp - WWW-authenticate question

Hi all, I am using squid-2.5-STABLE2. I want my users to use squid for ftp requests and so, the browser is configured accordingly, to use squid for ftp requests. Now, a user requests ftp://hostname/ through his browser. Since the username and password are not mentioned in the url, squid tr

Re: [squid-users] Cache size full !!

On 16.05 13:58, Alex wrote: > im getting an error message in my cache.log stating that my squid cache > size has been reached !! and the proxy is not working anymore,, you need to use lower number for cache_dir setting and probably good cache_swap_low and cache_swap_high settings. see http://www

Re: [squid-users] Integrated Authentication

On Tue, 10 May 2005, fryxar wrote: - MS ISA 2004 support both (/NTLM and Kerberos) authentication protocols Not sure about the Kerberos part, at leas not when running as a HTTP proxy. The WINSOCKS proxy part most certainly supports both. - Squid support only NTLM authentication protocol K

Re: [squid-users] ssl-2.5.patch and squid-2.5Stable9

On Mon, 16 May 2005, Emilio Casbas wrote: Does the ssl-2.5.patch works with squid-2.5STable9? I think it has been updated, but not 100% sure... will check later today. We had the squid-2.5Stable5 working with the patch, but compiling the squid-2.5Stable9 with the patch, show this error: http.c:970:

Re: [squid-users] NTLM authentication parsing problem

Hi, At 13.23 16/05/2005, Ytzhak Levy wrote: Hello, Im using squid 2.5-STABLE9 and im trying to use ntlm auth, but when i do a squid-k parse it returns following message: Parsing Config File: Unknown authentication scheme 'ntlm' my squid.conf: auth_param ntlm program /usr/local/bin/ntlm_auth --he

Re: [squid-users] Cache size full !!

Deleting the cache directory will delete all the objects, Am I right, It means that I will start from scartch, If I not mistaken there is a configuration in squid that depending on the threshold you define, It will automatically delete files. Am I right? Is that that low water high water mark?

[squid-users] NTLM authentication parsing problem

Hello, Im using squid 2.5-STABLE9 and im trying to use ntlm auth, but when i do a squid-k parse it returns following message: Parsing Config File: Unknown authentication scheme 'ntlm' my squid.conf: auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_para

Re: [squid-users] Cache size full !!

> im getting an error message in my cache.log stating > that my squid cache size > has been reached !! and the proxy is not working > anymore,, > how can i flush the cache so that squid will have > its cache size 0 and start > caching again ?! Stop your squid and Remove cache directory. create

[squid-users] Cache size full !!

Dear All, im getting an error message in my cache.log stating that my squid cache size has been reached !! and the proxy is not working anymore,, how can i flush the cache so that squid will have its cache size 0 and start caching again ?! Regards, Alex

Re: [squid-users] Log file

Thank you vey much to all. - Original Message - From: "Armin Marxer" <[EMAIL PROTECTED]> To: Sent: Monday, May 16, 2005 1:54 PM Subject: RE: [squid-users] Log file Wennie V. Lagmay wrote on 16 May 2005 12:34 PM: Can I issue the command squid -k rotate without

RE: [squid-users] Log file

Wennie V. Lagmay wrote on 16 May 2005 12:34 PM: > Can I issue the command squid -k rotate without any > interruption, I mean the proxy server should not be > interrupted. > Indeed you can, and you should probably do it weekly so as to rotate your logfiles A

RE: [squid-users] Log file

Wennie V. Lagmay wrote on 16 May 2005 12:34 PM: > Can I issue the command squid -k rotate without any > interruption, I mean the proxy server should not be > interrupted. > Indeed you can, and you should probably do it weekly so as to rotate your logfiles A

Re: [squid-users] trying to block exe files ...

> the bext slution is that > > block urls like : > acl blockedfiles url_regex -i \.exe$ \.cab$ \.exe\?.*$ \.cab\?.*$ > http_access deny blockedfiles Note that this will also block CGI exe's. Joost

Re: [squid-users] Log file

Can I issue the command squid -k rotate without any interruption, I mean the proxy server should not be interrupted. thanks, wennie - Original Message - From: "PF" <[EMAIL PROTECTED]> To: "Wennie V. Lagmay" <[EMAIL PROTECTED]> Cc: Sent: Monday, May 16, 2005 12:12 PM Subject: Re: [squid-

[squid-users] ident_lookup and mandrake 10.1

hey all Im currently running squid 2.5 stable 6 on mandrake 10.1 and want to make use of the ident lookup feature to track users by the logged on user name instead of their IP. I tried to configure this in the squid.conf file but when i restarted squid it gave me and error saying the it did not

[squid-users] ssl-2.5.patch and squid-2.5Stable9

Does the ssl-2.5.patch works with squid-2.5STable9? We had the squid-2.5Stable5 working with the patch, but compiling the squid-2.5Stable9 with the patch, show this error: http.c:970: structure has no member named `front_end_https' http.c:1060: structure has no member named `front_end_https' http.c

Re: [squid-users] Log file

squid -k rotate On Mon, May 16, 2005 at 12:02:38PM +0300, Wennie V. Lagmay wrote: > Hi, > > My access.log file is this size 4443864799 May 16 11:56 access.log. can I > just copy this file into another machine and delete it on my squid server > without any problem? > > thank you, > > Wennie

Re: [squid-users] Log file

Hello, You could copy that file if you require a backup. Else type "squid -k rotate" which will rename your existing access.log to access.log.0 and create a new access.log file. Regards Srid > Hi, > > My access.log file is this size 4443864799 May 16 11:56 access.log. can I > just copy this f

[squid-users] Log file

Hi, My access.log file is this size 4443864799 May 16 11:56 access.log. can I just copy this file into another machine and delete it on my squid server without any problem? thank you, Wennie

[squid-users] Cache Disk querry

Hi all, My cache directory is 25 Gig and I already used 14 Gig. Based on my configuration when it reaches 20 Gig it is mark as low and 21.25 Gig it is mark high.My questions are: Am I correct on the above statement? Based on my config what will happen it it reaches the critical level? Will squi

Re: [squid-users] cache_dir slection criteria

> On Wed, 24 Nov 2004, Hendrik Voigtlaender wrote: > >I think I could solve my problem by using round-robin, which is pretty > >much self explaining. One question remains: What is squid's opinion of > >"least-load" ? On 09.12 00:07, Henrik Nordstrom wrote: > Depends on the cache_dir type. > > F

[squid-users] Fw: my squid box spoofed !!

Dear John, i just done this and im getting the following : 1115668842.640 14680 61.224.206.211 TCP_DENIED/200 824 CONNECT 205.188.156.185:25 seems its working now, Thanks to you :),,, i think i have a problem the the CONNECT acl rule .. but i still dont understand how such connection appears in

Re: [squid-users] my squid box spoofed !!

Dear Alex, Which version are you using? Did you try to set acl and allow requests from intranet (e.g. 192.168.1.0/255.255.255.0) only :- acl intranet src 192.168.0.0/255.255.255.0 http_access allow intranet http_access deny all Regards, John Mok Alex wrote: Dear All, i have a problem with my squ

Re: [squid-users] my squid box spoofed !!

Alex wrote: Dear All, i have a problem with my squid proxy.. suddenly its performance decrease and i never get the speed i expect from my squid box, and when i tail to access.log i find a weird line of information there,, please find it below : 1115668842.640 14680 61.224.206.211 TCP_MISS/200

[squid-users] Re: my squid box spoofed !!

Dear Chris, only the ip addresses configured in the access list are allowed to browse to the internet through my proxy server, meaning i just tried to browsethrough my proxy server and im using a different ip address than the ip addresses configured in my ACL and i was denied to browse . is the

Re: [squid-users] my squid box spoofed !!

On Mon, May 16, 2005 at 10:42:31AM +0300, Alex wrote: > Dear All, > > i have a problem with my squid proxy.. suddenly its performance decrease > and i never get the speed i expect from my squid box, and when i tail to > access.log i find a weird line of information there,, please find it below :

[squid-users] my squid box spoofed !!

Dear All, i have a problem with my squid proxy.. suddenly its performance decrease and i never get the speed i expect from my squid box, and when i tail to access.log i find a weird line of information there,, please find it below : 1115668842.640 14680 61.224.206.211 TCP_MISS/200 824 CONNECT