[squid-users] Does Squid supports header translation between IPv4 IPv6 packets?

2005-09-21 Thread Naresh Kumar
Hi, I am looking for a http https proxy that supports the header translation between IPv4 IPv6 packets... would appreciate if someone can confirm if the Squid does this and point to some relevent links that can help to configure this... Thanks in advance Naresh

Re: [squid-users] Does Squid supports header translation between IPv4 IPv6 packets?

2005-09-21 Thread Mark Elsen
Hi, I am looking for a http https proxy that supports the header translation between IPv4 IPv6 packets... would appreciate if someone can confirm if the Squid does this and point to some relevent links that can help to configure this... Squid , by definition can not do this because

Re: [squid-users] Can't show the 413 Request entity too large error page

2005-09-21 Thread Victor Tsang
Version is 2.5 stable 2 and log, cache log doesn't show anything, while access log suggest a 413 with payload of 2373 byte has been returned. Tor. On 9/21/05, Henrik Nordstrom [EMAIL PROTECTED] wrote: On Tue, 20 Sep 2005, Victor Tsang wrote: I have tested this with the lastest IE and

[squid-users] slower connections using squid (squid is slowing down all connections)

2005-09-21 Thread Alex
Hello squid experts, I have a problem with my squid on Centos 4 (squid-2.5.STABLE6-3.4E.11). Squid is configured to allow http acces to all our users with authentication. Everithing is going well when there are just few users connected. Between arround 11 AM up to 15-16 PM, http access via

Re: [squid-users] Can't show the 413 Request entity too large error page

2005-09-21 Thread Henrik Nordstrom
On Wed, 21 Sep 2005, Victor Tsang wrote: Version is 2.5 stable 2 Try upgrading. There has been some changes in this area over the years and also several security issues. Your Squid is over two years old. Current version is 2.5.STABLE10, with 2.5.STABLE11 due out tomorrow unless some

[squid-users] record domain\\username without doing any kind of authentication

2005-09-21 Thread Arno . STREULI
Hello, is it possible to record the username (with domain) of all request made through squid, but without doing any kind of authnetication ? how can I do that ? (on squid 2.5S10 on Solaris 8) thanks for the info, regards, Arno Streuli

[squid-users] Cached pages in Google and Proxy avoid

2005-09-21 Thread Fabio Gomes Baptista
Hi all, We are using url_regex acl´s to block sites containing some words, but if the users use the cached pages in a google search, for example, they can access the blocked urls. Other way to access those urls is using some proxy avoid sites avaiable on the internet. Is there a way to block

Re: [squid-users] Cached pages in Google and Proxy avoid

2005-09-21 Thread Mark Elsen
Hi all, We are using url_regex acl´s to block sites containing some words, but if the users use the cached pages in a google search, for example, they can access the blocked urls. No they can´t because http_access rules (configuration) is checked first, then the object is fetched; if

Re: [squid-users] Does Squid supports header translation between IPv4 IPv6 packets?

2005-09-21 Thread Mark Elsen
Thanks for the prompt response... I have another query then... How does Squid handle the IPv6 and IPv4 requests when serving both the networks. In case there is a client on IPv6 address is trying to contact www.squid-cache.org which is on IPv4 address. Assuming that the squid has both the

[squid-users] Squid Clustered configuration

2005-09-21 Thread Alessandro Favretto
Hi to everybody, i have a little question on clustered squid configuration. I installed a precompiled squid version (squid-2.5.STABLE3-6.3E.9 on RedHat ES3 up5)and i bind the listen port on a virtual ip (ie: eth:0:1) using: http_port ip on virtual nic:port and now squid

[squid-users] Problems Settup Up a Transparent Proxy

2005-09-21 Thread Paul Thompson
I'm trying to set up up one SuSE 9.3 system as a gateway for another SuSE 9.3 system. Following a recommendation I'm using the instructions for setting up a Squid transparent proxy from the SuSE Administration Guide, section 33.5. The gateway system has a fixed IP address of 192.168.1.52, and

Re: [squid-users] Cached pages in Google and Proxy avoid

2005-09-21 Thread Squidrunner
We are using url_regex acl´s to block sites containing some words, but if the users use the cached pages in a google search, for example, they can access the blocked urls. Other way to access those urls is using some proxy avoid sites avaiable on the internet. Is there a way to block these

[squid-users] Re: Squid Clustered configuration

2005-09-21 Thread Joost de Heer
On firewall logs i see that squid requests has the original ip source (ie eth0) and not the virtual one (eth0:1). tcp_outgoing_address is your friend. Joost

Re: [squid-users] record domain\\username without doing any kind of authentication

2005-09-21 Thread Christoph Haas
On Wed, Sep 21, 2005 at 10:35:06AM +0200, [EMAIL PROTECTED] wrote: is it possible to record the username (with domain) of all request made through squid, but without doing any kind of authnetication ? Funny question. What is the username if you don't authenticate? Christoph -- ~ ~ ~

[squid-users] slower connections using squid (squid is slowing down all connections)

2005-09-21 Thread Alex
Hello squid experts, I have a problem with my squid on Centos 4 (squid-2.5.STABLE6-3.4E.11). Squid is configured to allow http acces to all our users with authentication. Everithing is going well when there are just few users connected. Between arround 11 AM up to 15-16 PM, http access via

RES: [squid-users] Cached pages in Google and Proxy avoid

2005-09-21 Thread Fabio Gomes Baptista
I was really doing something wrong with the url_regex. It is now fixed and working. But, I am still not getting the proxy avoid access being blocked. Ex. www.megaproxy.com The users don´t have http and https access. It is only possible via squid. When I try a url with the megaproxy.com the only

RE: [squid-users] Cached pages in Google and Proxy avoid

2005-09-21 Thread Chris Robertson
-Original Message- From: Fabio Gomes Baptista [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 21, 2005 10:56 AM To: 'Squidrunner'; squid-users@squid-cache.org Subject: RES: [squid-users] Cached pages in Google and Proxy avoid I was really doing something wrong with the

RE: [squid-users] SPNEGO patch

2005-09-21 Thread Dave Raven
Hi Henrik, Thanks for the reply. I have downloaded the patch and applied it successfully but I can't get it to compile... /usr/bin/ar cru libheap.a heap/store_heap_replacement.o heap/store_repl_heap.o ranlib libheap.a Making all in auth Making all in basic Making all in ntlm Making all

RE: [squid-users] SPNEGO patch

2005-09-21 Thread Dave Raven
Hi Henrik, Thanks for the reply. I have downloaded the patch and applied it successfully but I can't get it to compile... /usr/bin/ar cru libheap.a heap/store_heap_replacement.o heap/store_repl_heap.o ranlib libheap.a Making all in auth Making all in basic Making all in ntlm Making all

RE: [squid-users] slower connections using squid (squid is slowing down all connections)

2005-09-21 Thread Chris Robertson
-Original Message- From: Alex [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 20, 2005 11:49 PM To: squid-users@squid-cache.org Subject: [squid-users] slower connections using squid (squid is slowing down all connections) Hello squid experts, I have a problem with my

RE: [squid-users] SPNEGO patch

2005-09-21 Thread Chris Robertson
-Original Message- From: Dave Raven [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 21, 2005 12:19 PM To: 'Henrik Nordstrom' Cc: squid-users@squid-cache.org Subject: RE: [squid-users] SPNEGO patch Hi Henrik, Thanks for the reply. I have downloaded the patch and

RES: [squid-users] Cached pages in Google and Proxy avoid

2005-09-21 Thread Fabio Gomes Baptista
Hi Chris, Thanks for your help, but doing this way I will have to know all the sites like this one to build a black list. Anyway, thanks for your help. I´m receiving all the messages from the list duplicated, Is it only me ? Regards, Fabio Baptista. -Mensagem original- De: Chris

RE: [squid-users] SPNEGO patch

2005-09-21 Thread Dave Raven
Thanks Chris, after running bootstrap.sh and a little tweaking its compiled! Thanks again Dave -Original Message- From: Chris Robertson [mailto:[EMAIL PROTECTED] Sent: 21 September 2005 10:35 PM To: Dave Raven Cc: squid-users@squid-cache.org Subject: RE: [squid-users] SPNEGO patch

RE: [squid-users] SPNEGO patch

2005-09-21 Thread Dave Raven
Thanks Chris, after running bootstrap.sh and a little tweaking its compiled! Thanks again Dave -Original Message- From: Chris Robertson [mailto:[EMAIL PROTECTED] Sent: 21 September 2005 10:35 PM To: Dave Raven Cc: squid-users@squid-cache.org Subject: RE: [squid-users] SPNEGO patch

[squid-users] Re: purge using squidclient

2005-09-21 Thread Joe Acquisto
Joost de Heer[EMAIL PROTECTED] 9/17/05 10:03:24 AM Joe Acquisto said: Docs say I can purge objects using squidclient after setting up acl and http_allow. Cannot find squidclient file on the server. In 2.4, it's called 'client' (located in the bin-directory) Joost Thanks, found it.

[squid-users] NTLM without username/password prompt

2005-09-21 Thread Paul Matthews
Hi there, I've setup NTLM authentication on my fedora box a few times before and it all went off without a problem, seamless authentication, it was great. But now I'm trying to get it done on a RHEL 4 box and it's not going so well, I've got samba authenticating against my Active directory

RE: [squid-users] NTLM without username/password prompt

2005-09-21 Thread David Gameau
From: Paul Matthews [mailto:[EMAIL PROTECTED] Subject: [squid-users] NTLM without username/password prompt I've setup NTLM authentication on my fedora box a few times before and it all went off without a problem, seamless authentication, it was great. But now I'm trying to get it done on a

Re: [squid-users] record domain\\username without doing any kind of authentication

2005-09-21 Thread Arno . STREULI
the username is who is logged on the computer. I don't see what is funny, that can help to trace who access what on the net !?! Since a computer can be used by many person. I was thinking about doing a kind of ntlm excahnge without testing the the result with the Windows DC (or LDAP) Arno

[squid-users] maps.google.com image cacheing

2005-09-21 Thread Brett
Greetings, Recently I have observed that the images on google maps are not getting caught in the squid cache (squid-2.5.9-10 on Debian Sarge). The actual images come in the form: http://kh.google.com/kh?v=3t=tsrrtsqrrqqsq Is there any way I can cache these images in squid at all? (I don't mind

RE: [squid-users] NTLM without username/password prompt

2005-09-21 Thread Paul Matthews
I tried to put the ntlm authentication on top of the basic and restart the squid service, but the same result. auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 30 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2

RE: [squid-users] NTLM without username/password prompt

2005-09-21 Thread David Gameau
NTLMSSP doesn't really use username/password like basic authentication, so you can't really confirm it from the command line. The best you can do is: # /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp KK and that should give you back a 'TT Tl...AA' type response. What versions of