Re: [squid-users] caching windows update

nothing wrong may b your clients not using windows update ;-) On 8/25/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Hi > > I have recently started using refresh pattern in squid configuration. > My objective is to cache windows update for long time. > > Below is my configuration. > > > r

RE: [squid-users] caching windows update

Thanks My maximum_object_size value is only 8MB. Should I increase this to get more caching? Will it affect performance if I increase to 32MB. Is there any farmula to calculate these values? Thanks - Lokesh -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thu

Re: [squid-users] caching windows update

yeah u can increase it but it will directly effact on your cache size and memory size so first read about somf FAQs on it thanks On 8/25/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Thanks > > My maximum_object_size value is only 8MB. Should I increase this to get > more caching? Will it

RE: [squid-users] caching windows update

Hi Below is my current access.log. My users are accessing windowsupdate but I don't see any TCP_HIT. Am I giving correct regexp?? Thanks ### 1124941122.867 1467 10.18.24.227 TCP_MISS/206 6604 GET http://au.download.windowsupdate.com/msdownload/update/v5

Re: [squid-users] caching windows update

Yes mine access.log also shows same ...though i had configured refresh_pattern option for windows update.. What might be the reason ? Thanks, uglyjoe [EMAIL PROTECTED] wrote: >Hi > >Below is my current access.log. My users are accessing windowsupdate but >I don't see any TCP_HIT. Am I giving cor

RE: [squid-users] caching windows update

I think regexp is not correct We need to put refresh_pattern http://au\.download\.windowsupdate\.com/ 4320 80% 43200 As per my understanding this should give us tcp_hit for http://au.download.windowsupdate.com/* Thanks -Original Message- From: Raj Kumar Gurung [mailto:[EMAIL P

Re: [squid-users] caching windows update

:-D hm i can see user are assecing cab files you should use refresh_pattern for .cab and .dll from windows update i am seding you this refresh_pattern windowsupdate.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims refresh_pattern download.microsoft.com/.*\.(cab|exe|dll) 4320 100% 432

RE: [squid-users] caching windows update

Thanks. Will this rule also match any cab/exe/dll file from http://au.download.windowsupdate.com Or do i need to use refresh_pattern http://*\windowsupdate\.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims Thanks -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED]

Re: [squid-users] caching windows update

just use refresh_pattern http://*\windowsupdate\.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims On 8/25/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Thanks. > Will this rule also match any cab/exe/dll file from > http://au.download.windowsupdate.com > Or do i need to use > > refre

Re: [squid-users] caching windows update

hatsoever for any loss, >>> >>> >>> >>> >>be it direct, indirect or consequential, >> >> >> >> >>>arising from information made available in this e-mail and actions >>> >>> >>> >>> >>resulting there from. >> >> >> >> >>>For more information about Accelon Nigeria Limited, please see our >>> >>> >>> >>> >>website at >> >> >> >> >>>http://www.accelonafrica.com >>> >>> >>> >>> >>> >>*** >> >> >* > > >>** >> >> >> >> >> >> >> >> >Disclaimer > >The information contained in this e-mail, any attached files, and response >threads are confidential and >may be legally privileged. It is intended solely for the use of individual(s) >or entity to which it is addressed >and others authorised to receive it. If you are not the intended recipient, >kindly notify the sender by return >mail and delete this message and any attachment(s) immediately. > >Save as expressly permitted by the author, any disclosure, copying, >distribution or taking action in reliance >on the contents of the information contained in this e-mail is strictly >prohibited and may be unlawful. > >Unless otherwise clearly stated, and related to the official business of >Accelon Nigeria Limited, opinions, >conclusions, and views expressed in this message are solely personal to the >author. > >Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it >direct, indirect or consequential, >arising from information made available in this e-mail and actions resulting >there from. > >For more information about Accelon Nigeria Limited, please see our website at >http://www.accelonafrica.com >** > > > >__ NOD32 1.1201 (20050825) Information __ > >This message was checked by NOD32 Antivirus System. >http://www.nod32.com > > > > >

[squid-users] Re: Which deny rule was used?

Ken Ara said: > I have seen this question asked before but I have been > unable to find the answer. > > Using squid-2.5.STABLE9 as reverse proxy, I try to > defend my server against assorted nasties using lots > of 'src' and 'browser' acls. > > But in access.log, when a 403 is reported, there seems

[squid-users] Changing the port on which Squid starts during compilation

Hello, I want the port on which Squid starts to be 8080. Default it's port 3128. But I can't seem to get Squid compiled with the start-port on 8080. What I did: - Set the environment variable CACHE_HTTP_PORT to 8080 - ./configure --with-lots-of-options - Checked include/autoconf.h, in it I see '#

[squid-users] Re: Changing the port on which Squid starts during compilation

I forgot to mention: - OS: Linux RHES (Taroon update 4) - Squid version: 2.5STABLE10 Joost

Re: [squid-users] Changing the port on which Squid starts during compilation

On Thu, 2005-08-25 at 11:36 +0200, Joost de Heer wrote: > Hello, > > I want the port on which Squid starts to be 8080. Default it's port 3128. > But I can't seem to get Squid compiled with the start-port on 8080. > > What I did: > - Set the environment variable CACHE_HTTP_PORT to 8080 > - ./confi

Re: [squid-users] Changing the port on which Squid starts during compilation

> I want the port on which Squid starts to be 8080. > Default it's port 3128. > But I can't seem to get Squid compiled with the > start-port on 8080. > > What I did: > - Set the environment variable CACHE_HTTP_PORT to > 8080 > - ./configure --with-lots-of-options > - Checked include/autoconf.h, i

Re: [squid-users] Re: Which deny rule was used?

Thanks for these answers. --- Christoph Haas <[EMAIL PROTECTED]> wrote: > > Set 'debug_options ALL,1 33,2' in your squid.conf > and run 'squid -k > reconfig'. The cache.log should then tell you why an > access is denied. > So, Googling for "debug_options ALL,1 33,2" I see this is an FAQ.. Ac

Re: [squid-users] Squid Dead, yet again,

Move all the cache files and log files to a mount point with 20 gig, The Drive is not full and I turned debug on in squid.conf just recently, Waiting for it to fail again. When it does, I'll look for the debug file. __ |

[squid-users] Ncsa_auth problem

I am using squid2.5stable9 and receiving the following error in the log: WARNING: Cannot run '/usr/lib/squid/ncsa_auth' process. I am able to run the ncsa_auth from the terminal without failure. Additionally, I created a user and made it part of the squid group and was able to run the ncsa_aut

Re: [squid-users] Reverse Proxy Multiple IP Addresses

You can easily do this by starting multiple squid instances on your 1 squid box. Start squid with the -f option to point to a unique squid.conf for each IP address. Make sure each squid.conf has the correct http_port tag which is the ip address squid is listening on and the correct httpd_acce

[squid-users] Cache Authentitifaction LDAP

Hy, I use squid_ldap_auth for the authentification. I would like to know if squid carries out a request LDAP in each consulted page ? My conf ? auth_param basic program /usr/lib/squid/squid_ldap_auth -f uid=%s -b ou=cicoa,o=cnamts,c=fr -h 55.7.4.62 -p 389 auth_param basic children 10 auth_para

[squid-users] RE: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject

Thanks Dan. This may work. But have a couples questions. You said "Make sure each squid.conf has the correct http_port tag which is the ip address squid is listening on" Did you mean Port or IP address? I need to make sure squid is listening on all IP addresses. If I want three instances of squid

[squid-users] RE: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject

One more thing, can I share the cache directories? Each real server will contain the content and therefore each cache would be the same. -Original Message- From: Dan DeLong [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:54 AM To: Squid Users Subject: [SPAM] - Re: [squid-users

[squid-users] What antivirus solution do u recommend?

I found two solutions that use squid but which one i cant decide to use. One is squid+ dansguardian+clmav and the other is squd+HAVP. I want to scan all traffic through squid. Any recommendations?

[squid-users] RE: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject

I do see now that http_port allows an IP address in addition to a port. Thanks for the help. -Original Message- From: Dan DeLong [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:54 AM To: Squid Users Subject: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Emai

Re: [squid-users] What antivirus solution do u recommend?

I recommend using ICAP (Ineternet Content Adaption Protocol), a lightweight protocl to pass http message to ICAP servers for modification or adaption. For more information refer to ICAP RFC. Today, It is the preferred approach in commercial products. However, open source implementations are in e

[squid-users] squid firwall rules for windowsupdate validation?

Hi All A bit off topic, but I've had some users complain that they are having problems when going to windowsupdate and it tries to validate their copy of windows. It seems like a timeout issue. What are people who are running squid as a firewall allowing through to allow for windowsupdate? Matt

Re: [squid-users] Changing the port on which Squid starts during compilation

>> So what else do I need to change to get the default start port to 8080? >> I >> know I can set it with http_port in the configuration, but things like >> squidclient still need the -p argument then, and I wanted to avoid that. > The relevant configuration directive is http_port. > Please check

Re: [squid-users] 2 different types of proxy_auth

Hi, At 23.58 24/08/2005, Covington, Chris wrote: Hi all, Is it possible to configure 2.5-10 to allow NTLM for users connecting from certain networks (let's say 10.2.5.0), and Basic Auth for users connecting from other networks (let's say 10.2.6.0)? If so, how? You can't do this with Squid.

Re: [squid-users] Changing the port on which Squid starts during compilation

Hi, At 11.36 25/08/2005, Joost de Heer wrote: Hello, I want the port on which Squid starts to be 8080. Default it's port 3128. But I can't seem to get Squid compiled with the start-port on 8080. What I did: - Set the environment variable CACHE_HTTP_PORT to 8080 - ./configure --with-lots-of-op

Re: [squid-users] 2 different types of proxy_auth

> >Hi all, > > > >Is it possible to configure 2.5-10 to allow NTLM for users > connecting > >from certain networks (let's say 10.2.5.0), and Basic Auth for users > >connecting from other networks (let's say 10.2.6.0)? If so, how? > > You can't do this with Squid. Could I perhaps run 2 instanc

Re: [squid-users] What antivirus solution do u recommend?

* On 25/08/05 18:09 +, Pavel M. Ivanchev wrote: > I found two solutions that use squid but which one i cant decide to use. > One is squid+ dansguardian+clmav and the other is squd+HAVP. > I want to scan all traffic through squid. > Any recommendations? Did you say all traffic, or "all http tra

RE: [squid-users] Cache Authentitifaction LDAP

> -Original Message- > From: ROUTIER Gilles [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 25, 2005 5:49 AM > To: squid-users@squid-cache.org > Subject: [squid-users] Cache Authentitifaction LDAP > > > Hy, > > I use squid_ldap_auth for the authentification. > > I would like to know

Re: [squid-users] RE: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject

Brad, I think you're all set on the http_port tag (xx.xx.xx.xx:port) and yes you have to have multiple IP addresses on the box to handle the multiple squid instances. As far as sharing the cache directory, I don't know of any reason you can't. The best answer I can give you for why we have t

Re: [squid-users] squid firwall rules for windowsupdate validation?

Hi!! Windows Update really has problems authenticating to squid, so you need to use some rules in order to get it working. The rules that we are using are the following: acl WindowsUpdateSites dstdomain .windowsupdate.com .windowsupdate.microsoft.com .update.microsoft.com Then, before the

[squid-users] windows 2003 server active directory authentication

Dear friends, Is it possible to authenticate proxy users through windows server 2003 active directory? I read from the mailing list windows NT 2000 possible, what about 2003? To configure it, is it related to NTLM? thanks for taking time reading my mail! -- Yong Bong Fong (Ah Fong) Rookie

[squid-users] cache peering question

Hi list i have configured two squid servers running Redhat 9.My current configuration for cache_peer is as : CACHE 1: cache_peer cache2.xxx.comsibling3128 3130 proxy-only icp_port 3130 CACHE 2: cache_peer cache1.xxx.comsibling3128 3130 proxy-only icp_port 3130 Both have GRE tu

Re: [squid-users] caching windows update

At 02:32 AM 8/25/2005, Raj Kumar Gurung wrote: >Yes mine access.log also shows same ...though i had configured >refresh_pattern option for windows update.. >What might be the reason ? Because the entire update is too big to cache and the client is trying to fetch it in small pieces. This can tie