[squid-users] ntlm auth, unauthorized users without popup window

2006-01-17 Thread Horváth Szabolcs
Hi! I've successfully configured squid to use ntlm authentication. If the authenticated users go through the proxy, the web page will be loaded. In the opposite side, if any unauthorized users want to browse, popup window appears (username, password). I know is the default behaviour. Is there

Re: [squid-users] ntlm auth, unauthorized users without popup window

2006-01-17 Thread Lieven Marchand
"=?iso-8859-2?Q?Horv=E1th_Szabolcs?=" <[EMAIL PROTECTED]> writes: > Hi! > > I've successfully configured squid to use ntlm authentication. If the > authenticated users go through the proxy, the web page will be loaded. > In the opposite side, if any unauthorized users want to browse, popup windo

[squid-users] help on bandwidth but size wise

2006-01-17 Thread Remy Almeida
Hi all Can i limit the bandwidth based on the size of the file for example 120mb file to use 33kbps 200mb file to use 64kpbs. etc. is it possible to do so. Require some help Thanks & Regards, Remy Almeida NIO System Admin Ph Office: +91-0832-2450421

[squid-users] Re: ntlm auth, unauthorized users without popup window

2006-01-17 Thread Horváth Szabolcs
Hi, Lieven Marchand [mailto:[EMAIL PROTECTED] wrote: > > Hi! > > > > I've successfully configured squid to use ntlm authentication. If the > > authenticated users go through the proxy, the web page will be loaded. > > In the opposite side, if any unauthorized users want to browse, popup > > win

[squid-users] Squid & content filter

2006-01-17 Thread Guillaume
hi guys! I would like to know if there is a plugin for squid or an parameter in squid.conf to have the ability to filter word that are forbidden... Ex: sex, porn, etc... I'm on squid NT. thanks for your replies. Best regards, Guillaume

Re: [squid-users] help on bandwidth but size wise

2006-01-17 Thread Christoph Haas
On Tuesday 17 January 2006 10:59, Remy Almeida wrote: > Can i limit the bandwidth based on the size of the file > > for example 120mb file to use 33kbps > 200mb file to use 64kpbs. > etc. IMHO not. To set the appropriate bandwidth you would need to know

Re: [squid-users] Squid & content filter

2006-01-17 Thread Lieven Marchand
Guillaume <[EMAIL PROTECTED]> writes: > I would like to know if there is a plugin for squid or an parameter in > squid.conf to have the ability to filter word that are forbidden... > Ex: sex, porn, etc... > I'm on squid NT. > thanks for your replies. http://dansguardian.org/ -- A: Because it me

Re: [squid-users] Squid & content filter

2006-01-17 Thread Christoph Haas
On Tuesday 17 January 2006 11:12, Guillaume wrote: > I would like to know if there is a plugin for squid or an parameter in > squid.conf to have the ability to filter word that are forbidden... > Ex: sex, porn, etc... You can filter those words on URLs using "url_regex" ACLs. However that's prett

RE: [squid-users] Squid with SquidGuard

2006-01-17 Thread Ben Tanner
> If I run squidGuard on its own as root it seems to work. Is there any > way I can try to run it as user "squid" from the command line > to see if > I get any more information? Trying "su squid" obviously > didn't work (but > I had to try it anyway). Are you familiar with the sudo command? Whi

[squid-users] Thanks for help

2006-01-17 Thread Remy Almeida
Hi All Thanks to All FOR THE WONDERFULL HELP i have configure squid for x_forwarded_for and delay_pools and snmp mrtg with lot of troubles and lot of help from you'll. Thanks & Regards, Remy Almeida NIO System Admin Ph Office: +91-0832-2450421 Cell: 98225

Re: [squid-users] help on mrtg

2006-01-17 Thread Mark Elsen
> Hi All > I hvae configure mrtg for squid. > when i run indexmaker squid-mrtg.cfg --output=/var/www/html/squid.html > i get the following error > > WARNING: Option[proxy-hit]: "target[proxy-srvkbinout]:" is unknown > WARNING: Option[proxy-hit]: > "cacheserverinkb&cacheserveroutkb:[EMAIL PROTECTED]

[squid-users] Automatic restart squid when response time is too large

2006-01-17 Thread Joost de Heer
Hello, One of our proxies has a problem which causes the response time to explode. We've been unable to find a cause for this behaviour, but I want to implement a workaround: when the median response time grows over 1 second (normal behaviour is a median response time of about 100/110ms) I wan

Re: [squid-users] Automatic restart squid when response time is too large

2006-01-17 Thread Mark Elsen
> Hello, > > One of our proxies has a problem which causes the response time to explode. > We've been unable to find a cause for this behaviour, but I want to implement > a workaround: when the median response time grows over 1 second (normal > behaviour is a median response time of about 100/110ms

[squid-users] Squid NTLM Authentication broke

2006-01-17 Thread Geoff Varney
Hi, I arrived at work today to find that the NTLM authentication on one of my Squid servers has failed. It was working just fine up until now. Looking at the logs (messages) it appears that it stopped working sometime around 2:58 PM on Sunday, Jan. 15 (first error I see). Nothing was changed on

Re: [squid-users] Squid NTLM Authentication broke

2006-01-17 Thread Mark Elsen
> Hi, > I arrived at work today to find that the NTLM authentication on one of my > Squid servers has failed. It was working just fine up until now. Looking > at the logs (messages) it appears that it stopped working sometime around > 2:58 PM on Sunday, Jan. 15 (first error I see). Nothing was c

[squid-users] blacklist

2006-01-17 Thread Cristina Tanzi Tolenti
Hi, I would like yo use the blacklists that I downloaded from http://urlblacklist.com/, some files are very large: 10-15MB. I create an ACL for every blacklist Why SQUID don't work (or it's very very slow) with the largest blacklists? Thank you -- ---

RE: [squid-users] SOS with squid_ldap_auth !!

2006-01-17 Thread Meyerovich Aleksandr EB_NY
What would be the right openldap version for the following combination: RedHat 8.0 (2.4.18-14) and Squid 2.5.STABLE4-20031110. When compiling Squid with enable ldap options how to specify an alternate openldap location. Do squid_ldap_auth and squid_ldap_group support Kerberos bind? How to

RE: [squid-users] Squid NTLM Authentication broke

2006-01-17 Thread Geoff Varney
I started looking into what updates have been applied. I last applied several hotfixes last week. Here's the stupid thing about this that resolved it. I ran dcdiag on the Windows server and found that the NETLOGON service was in a PAUSED state! How that happened I have no idea. Anyway, started

Re: [squid-users] Automatic restart squid when response time is too large

2006-01-17 Thread Joost de Heer
Mark Elsen wrote: Hello, One of our proxies has a problem which causes the response time to explode. We've been unable to find a cause for this behaviour, but I want to implement a workaround: when the median response time grows over 1 second (normal behaviour is a median response time of about

Re: [squid-users] Automatic restart squid when response time is too large

2006-01-17 Thread Mark Elsen
> No. As I said, median time is normal about 110ms, and the highest (apart from > the strange irregular peaks) I've seen is about 150ms. Proxy averages 200-250 > requests/sec, peaking to 300 on the busiest time. Median time of 1000ms or > higher indicates a problem, and so far, restarting the proxy

Re: [squid-users] blacklist

2006-01-17 Thread Christoph Haas
On Tuesday 17 January 2006 19:01, Cristina Tanzi Tolenti wrote: > I would like yo use the blacklists that I downloaded from > http://urlblacklist.com/, some files are very large: 10-15MB. I create > an ACL for every blacklist > Why SQUID don't work (or it's very very slow) with the largest > blackl

Re: [squid-users] blacklist

2006-01-17 Thread trainier
I'm surpised squid even recovered from trying to do an acl for every blacklist entry. Use squidguard, it is very simple to use. www.squidguard.org Tim Christoph Haas <[EMAIL PROTECTED]> 01/17/2006 02:28 PM To squid-users@squid-cache.org cc Subject Re: [squid-users] blacklist On Tues

[squid-users] SOS with squid_ldap_auth !!

2006-01-17 Thread Meyerovich Aleksandr EB_NY
What would be the right openldap version for the following combination: RedHat 8.0 (2.4.18-14) and Squid 2.5.STABLE4-20031110. When compiling Squid with enable ldap options how to specify an alternate openldap location. Do squid_ldap_auth and squid_ldap_group support Kerberos bind? How to

Re: [squid-users] blacklist

2006-01-17 Thread Christoph Haas
Usual complaint... please reply to the original poster. /I/ wasn't the one having a question. (This is really a bad habit that I haven't seen to occur that frequently on any other mailing list.) On Tuesday 17 January 2006 20:59, [EMAIL PROTECTED] wrote: > I'm surpised squid even recovered from t

[squid-users] FW: SOS with squid_ldap_auth !!

2006-01-17 Thread Meyerovich Aleksandr EB_NY
One more question!! If there's no option to tell the "configure" under squid where openldap is installed where then openldap should be installed so that squid can find it? Which options openldap should be built with to support native AD domain (no NTLM) with Kerberos bind? Any help greatly appre

[squid-users] Certain web sites not opening...

2006-01-17 Thread Brian Chacon
Ok... I can't figure this one out. I've got my squid configured and minus a few issues, some of which I'm about to list, it seems to be working... ok. Here's the big ones: 1. Certain web sites come back with "Directory listing denied" Example: Ebay, www.imdb.com, www.hotmail.com 2. I

Re: [squid-users] blacklist

2006-01-17 Thread Kevin
On 1/17/06, Christoph Haas <[EMAIL PROTECTED]> wrote: > Usual complaint... please reply to the original poster. /I/ wasn't the one > having a question. (This is really a bad habit that I haven't seen to > occur that frequently on any other mailing list.) > > On Tuesday 17 January 2006 20:59, [EMAIL

[squid-users] Forward HTTPS requests using squid.conf

2006-01-17 Thread Kenrick
Hi, My current setup of proxy server is using MS ISA2000 Server. I'm planning to replace my MS ISA server with a Squid Proxy Server. Users who have internet access does not have to configure their proxy settings in Internet Explorer, they just have to configure their default gateway pointing to

Re: [squid-users] Forward HTTPS requests using squid.conf

2006-01-17 Thread Mark Elsen
> Hi, > > My current setup of proxy server is using MS ISA2000 > Server. I'm planning to replace my MS ISA server with > a Squid Proxy Server. Users who have internet access > does not have to configure their proxy settings in > Internet Explorer, they just have to configure their > default gatew

Re: [squid-users] Certain web sites not opening...

2006-01-17 Thread Mark Elsen
> Ok... I can't figure this one out. I've got my squid configured and > minus a few issues, some of which I'm about to list, it seems to be > working... ok. Here's the big ones: > > 1. Certain web sites come back with "Directory listing denied" > Example: Ebay, www.imdb.com, www.hotmail.com

Re: [squid-users] Forward HTTPS requests using squid.conf

2006-01-17 Thread Kenrick
Hi Mark, Thanks for the reply. What would be the best setup in Squid Proxy to replace my MS ISA Proxy server without manually adding proxy server IP address in IE settings on users PC? Transparent proxy in Squid would be the nearest option but I cannot browse HTTPS sites. I'm using Redhat Enter

[squid-users] Performance of antivirus proxy solutions?

2006-01-17 Thread Peter Olsson
Hello! This is maybe not strictly a squid question, but I still think/hope that the squid list is the best candidate for good answers. I have read a lot of archived messages about different antivirus solutions, but I haven't found many that deal with the performance issue. We have about 5000 use