[squid-users] No access to HTTPS sites and funny error page.

2006-03-02 Thread Andre Labuschagne
Hi everyone, I am fairly new at running Squid and we are currently evaluating moving from ISA server to Squid. It now seems as if there is some difficulty in running Squid with https sites. I understand the concept of Squid effectively just passing through connections to https sites without

Re: [squid-users] No access to HTTPS sites and funny error page.

2006-03-02 Thread Kevin
On 3/2/06, Andre Labuschagne [EMAIL PROTECTED] wrote: I am fairly new at running Squid and we are currently evaluating moving from ISA server to Squid. It now seems as if there is some difficulty in running Squid with https sites. How are the clients configured to reach the proxy? e.g.

RE: [squid-users] No access to HTTPS sites and funny error page.

2006-03-02 Thread Andre Labuschagne
On 3/2/06, Andre Labuschagne [EMAIL PROTECTED] wrote: I am fairly new at running Squid and we are currently evaluating moving from ISA server to Squid. It now seems as if there is some difficulty in running Squid with https sites. How are the clients configured to reach the proxy? e.g.

[squid-users] Disable caching for a domain

2006-03-02 Thread Henrik Østergaard Madsen
Hi, I need to disable the caching of data to and from a specific remote domain (harmonyremote.com) and thus have Squid pass the data directly through either way. Is there a way to configure Squid to do this? Regards Henrik

Re: [squid-users] Performance Problems using Squid with ISA 2004

2006-03-02 Thread Mark Elsen
Hello Mark, thanks for your Reply. I have checked the cache.log file and there is a suspicious entry in it. Most of the time, when I try to access web-sites, I get this message: 2006/03/02 11:07:51| TCP connection to ourisaserver/portnumber failed 2006/03/02 11:07:51| TCP connection to

Re: [squid-users] Disable caching for a domain

2006-03-02 Thread Mark Elsen
I need to disable the caching of data to and from a specific remote domain (harmonyremote.com) and thus have Squid pass the data directly through either way. Is there a way to configure Squid to do this? acl harmony dstdomain harmonyremote.com no_cache allow harmony Offhand; so check

[squid-users] newbie question about authentication

2006-03-02 Thread p pap
Hello there I am new to squid and I have some problems to setup a basic authentication in anonymous squid I have install squid/2.5.STABLE12-20060228 under suse 9.2 and works fine (I thing) My setup is from http://www.squid-cache.org/Doc/FAQ/FAQ-23.html and I have it like this auth_param basic

[squid-users] Squid as reverse proxy with URL rewriting

2006-03-02 Thread samu tuomisto
Hi, Is it possible to set up Squid-Reverse-proxy server with URL rewriting - so that reverse proxy site visitor would stay inside Reverse proxy site instead of following absolutely links that actual site contains. With Apache-proxy (mod_proxy_html) it is possible (See e.g.

[squid-users] Access denials following Machine name change

2006-03-02 Thread Harry Putnam
setup: Gentoo linux (kernel 2.6.15) squid-2.5.12 Following a recent name change to the HOST squid runs on, I continue to get odd access denials after having carefully gone thru the squid config files I found only one place where the old HOST name appeared. `visible_hostname' and of

[squid-users] Squid no longer allows connections in accelerator mode

2006-03-02 Thread Schaefer, Charles
I have had squid 3.0 pre3 20050415 running on a RHEL 4.0 box since May of 2005, and now all the sudden, it times out on https connections accelerated through the firewall to an outlook web access server inside the network. I had been making changes to the squid.conf file to limit ssl traffic to

Re: [squid-users] Squid no longer allows connections in accelerator mode

2006-03-02 Thread Anders Nordby
Hi, On Thu, Mar 02, 2006 at 08:21:47AM -0500, Schaefer, Charles wrote: I have had squid 3.0 pre3 20050415 running on a RHEL 4.0 box since May of 2005, and now all the sudden, it times out on https connections accelerated through the firewall to an outlook web access server inside the

RE: [squid-users] Squid no longer allows connections in accelerator mode

2006-03-02 Thread Schaefer, Charles
none the less, it was working just fine, and now it does not. -Original Message- From: Anders Nordby [mailto:[EMAIL PROTECTED] Sent: Thursday, March 02, 2006 8:27 AM To: Schaefer, Charles Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Squid no longer allows connections in

Re: [squid-users] No access to HTTPS sites and funny error page.

2006-03-02 Thread Henrik Nordstrom
tor 2006-03-02 klockan 10:01 +0200 skrev Andre Labuschagne: Hi everyone, I am fairly new at running Squid and we are currently evaluating moving from ISA server to Squid. It now seems as if there is some difficulty in running Squid with https sites. Is your Squid behind another proxy, or

Re: [squid-users] newbie question about authentication

2006-03-02 Thread Henrik Nordstrom
tor 2006-03-02 klockan 13:04 +0200 skrev p pap: Why iis not prompt for login? Have you configured your browser to use the proxy? Regards Henrik signature.asc Description: Detta är en digitalt signerad meddelandedel

Re: [squid-users] newbie question about authentication

2006-03-02 Thread Henrik Nordstrom
tor 2006-03-02 klockan 13:04 +0200 skrev p pap: Why iis not prompt for login? Also, make sure you are not denying authentication headers in http_header_access (default is to allow all). Regards Henrik signature.asc Description: Detta är en digitalt signerad meddelandedel

Re: [squid-users] Squid as reverse proxy with URL rewriting

2006-03-02 Thread Henrik Nordstrom
tor 2006-03-02 klockan 13:31 +0200 skrev samu tuomisto: Hi, Is it possible to set up Squid-Reverse-proxy server with URL rewriting - so that reverse proxy site visitor would stay inside Reverse proxy site instead of following absolutely links that actual site contains. Nope. Squid

Re: [squid-users] Access denials following Machine name change

2006-03-02 Thread Henrik Nordstrom
tor 2006-03-02 klockan 06:25 -0600 skrev Harry Putnam: I'm able to get to the bank but get denied when I attempt to login: While trying to retrieve the URL: www.corusbankhb.com:443 The following error was encountered: * Access Denied. This is your http_access lines

Re: [squid-users] Squid no longer allows connections in accelerator mode

2006-03-02 Thread Henrik Nordstrom
tor 2006-03-02 klockan 08:21 -0500 skrev Schaefer, Charles: I have had squid 3.0 pre3 20050415 running on a RHEL 4.0 box since May of 2005, and now all the sudden, it times out on https connections accelerated through the firewall to an outlook web access server inside the network. Can you

[squid-users] Authentication against NDS {again} + large installation

2006-03-02 Thread Nikos Zaharioudakis
Dear all, I have a case of a customer that has about 1000 users {all stored in Novell 5.1}. I am trying to design a squid solution in order to have bandwidth allocation per user group. After some thought, there are going to be some 9-12 groups. At this point I must clear out that no url filtering

Re: [squid-users] newbie question about authentication

2006-03-02 Thread p pap
Regards Have you configured your browser to use the proxy? Yes i do it in firefox 1.0.7 from xp Also, make sure you are not denying authentication headers in http_header_access (default is to allow all). i dont have anything like http_header_access so i think use the default evan What

RE: [squid-users] Squid no longer allows connections in accelerator mode

2006-03-02 Thread Schaefer, Charles
Actually, yes I can. as a matter of fact, I am doing so as I write this! -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Thursday, March 02, 2006 8:47 AM To: Schaefer, Charles Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Squid no longer allows

[squid-users] How to: error page for non authenticated users

2006-03-02 Thread Nick Duda
All, I have squid working perfectly with NTLM (AD Domain for domain employees). I'd like it so if a non-logged in user account on the domain (non authenticated) tries to browse out to get an error page (which I will customize). Currently if they are not authenticated it pops them up with login

Re: [squid-users] Squid as reverse proxy with URL rewriting

2006-03-02 Thread samu tuomisto
Henrik Nordstrom wrote: Is it possible to set up Squid-Reverse-proxy server with URL rewriting - so that reverse proxy site visitor would stay inside Reverse proxy site instead of following absolutely links that actual site contains. Nope. Squid reverse proxy assumes the server gives out

[squid-users] bandwidth

2006-03-02 Thread M.
hi I have a connection with an ISP (100 Mbps) ... so i want to divide the bandwidth between groups of ip's the idea is to give priority to a specifics groups because this groups access to important sites... Someone have done this? Thanks!!! Michael.-

RE: [squid-users] bandwidth

2006-03-02 Thread Nick Duda
Check out delay pools. Youll need to rebuild your binary to support delay pools. -Original Message- From: Michael Fernández M. [mailto:[EMAIL PROTECTED] Sent: Thursday, March 02, 2006 10:48 AM To: squid-users@squid-cache.org Subject: [squid-users] bandwidth hi I have a connection

RE: [squid-users] Memory Error when using large acl files

2006-03-02 Thread Paul Mattingly
Yes that is what I was doing Now I have converted to a dstdomain acl and everything is fine. Squid is using 37MB memory on a PIII/1GHz with 512MB RAM. When I load the current squid configuration from cache manager, squid shoots up to 99% CPU load and then the browser crashes. I have to send a

Re: [squid-users] How to: error page for non authenticated users

2006-03-02 Thread Mark Elsen
All, I have squid working perfectly with NTLM (AD Domain for domain employees). I'd like it so if a non-logged in user account on the domain (non authenticated) tries to browse out to get an error page (which I will customize). Currently if they are not authenticated it pops them up with

Re: [squid-users] How to: error page for non authenticated users

2006-03-02 Thread Mark Elsen
Thanks for the reply, but that's a link to my old post. My new question is how to do it without a popup. - You can't. M.

[squid-users] IIS cachemanager error (Connection refused)

2006-03-02 Thread Stefano Del Furia
Hi all, i have configured my IIS machines for using cgi-bin and cache manager, but i have a problem. I have setup integrated windows security and all seems to works, but when i try to execute the script i get a cache manager error, connection refused. COuld someone help me ? TIA Stefano

[squid-users] passing a username and password

2006-03-02 Thread Bruce Ballou
Hello, I am trying to connect outside of my site with a script file, and I need to have the proxy username and password emmbedded so it can connect without human intervention. Is there a way I can put the proxy username and password on the URL address line to accomplish this? Thanx, Bruce

RE: [squid-users] bandwidth

2006-03-02 Thread Damian Mantelli \(A.C.A.R.A\)
Yes, you must to set up the delay_pools correctly. With that you can divide the bandwidth between groups of ip´s. Example of how I configure my squid.conf with those parameters ##Bandwith Control - Delay Pools### delay_pools 3 delay_class 1 2

[squid-users] Re: How to check caching and performance of Squid?

2006-03-02 Thread Maciej Koziński
Hi, I wrote a piece of script telling You how well Squid performs. It measures fetching speed from source web servers, peers, your Squid's disk spool and memory. It also tells you how important all those sources are form Your performance (you can evaluate which source is more important for

Re: [squid-users] Re: How to check caching and performance of Squid?

2006-03-02 Thread D E Radel
Check this out: http://sourceforge.net/projects/squidoptimizer/ Many thanks.

[squid-users] Squid WebInterface ?

2006-03-02 Thread David
Hi, Is it possible to have some kind of web interface for SQUID? What I am trying to do is the following. Let's say somebody requests: http://mySquidURL?actualRequestURL I want SQUID to take the above request and pass/relay the actualRequestURL. The idea may seem strange but I have my reasons

RE: [squid-users] bandwidth

2006-03-02 Thread laurentiu r
Hi, On Thu, 2 Mar 2006 16:04:53 -0300, Damian Mantelli (A.C.A.R.A) [EMAIL PROTECTED] said: Yes, you must to set up the delay_pools correctly. With that you can divide the bandwidth between groups of ip´s. Do you also know how to make those grops borrow bandwidth from eachother? (if the

Re: [squid-users] Squid WebInterface ?

2006-03-02 Thread boricua
On Thu, 2 Mar 2006 21:07:25 +0100 David [EMAIL PROTECTED] wrote: Hi, Is it possible to have some kind of web interface for SQUID? What I am trying to do is the following. Let's say somebody requests: http://mySquidURL?actualRequestURL I want SQUID to take the above request and

Re: [squid-users] IIS cachemanager error (Connection refused)

2006-03-02 Thread Guido Serassio
Hi, At 19.27 02/03/2006, Stefano Del Furia wrote: Hi all, i have configured my IIS machines for using cgi-bin and cache manager, but i have a problem. I have setup integrated windows security and all seems to works, but when i try to execute the script i get a cache manager error, connection

[squid-users] cachemgr problem

2006-03-02 Thread Raj
Hi All, I am having problems logging on to cachemgr.cgi web page. I am running squid-2.5.STABLE10 and apache 2.0.55 on an OpenBSD server. My squid.conf file: acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl CMGR src

RE: [squid-users] Memory Error when using large acl files

2006-03-02 Thread Henrik Nordstrom
tor 2006-03-02 klockan 16:10 + skrev Paul Mattingly: When I load the current squid configuration from cache manager, squid shoots up to 99% CPU load and then the browser crashes. I have to send a shutdown signal to regain normality. I guess the browser just cannot handle displaying

Re: [squid-users] Disable caching for a domain

2006-03-02 Thread Henrik Ostergaard Madsen
How about this? # TAG: no_cache # A list of ACL elements which, if matched, cause the request to # not be satisfied from the cache and the reply to not be cached. # In other words, use this to force certain objects to never be cached. # # You must use the word

Re: [squid-users] IIS cachemanager error (Connection refused)

2006-03-02 Thread Henrik Nordstrom
tor 2006-03-02 klockan 19:27 +0100 skrev Stefano Del Furia: Hi all, i have configured my IIS machines for using cgi-bin and cache manager, but i have a problem. I have setup integrated windows security and all seems to works, but when i try to execute the script i get a cache manager error,

Re: [squid-users] passing a username and password

2006-03-02 Thread Henrik Nordstrom
tor 2006-03-02 klockan 13:57 -0500 skrev Bruce Ballou: Hello, I am trying to connect outside of my site with a script file, and I need to have the proxy username and password emmbedded so it can connect without human intervention. Is there a way I can put the proxy username and password on

Re: [squid-users] cachemgr problem

2006-03-02 Thread Henrik Nordstrom
fre 2006-03-03 klockan 10:19 +1100 skrev Raj: While trying to retrieve the URL: cache_object://172.26.11.150/ The following error was encountered: Cache Access Denied. Sorry, you are not currently allowed to request: cache_object://172.26.11.150/from this cache until you

Re: [squid-users] cachemgr problem

2006-03-02 Thread Raj
Hi Henrik, Thanks a lot for the reply. I don't have any more ACL's before cachemgr rules. I just have this acl on top of cachemgr rules. external_acl_type wbinfo_group_helper ttl=900 children=125 %LOGIN /opt/squid/libexec/wbinfo_group.pl I have gone through all FAQ's and mailing lists. But I

Re: [squid-users] Squid as reverse proxy with URL rewriting

2006-03-02 Thread Merton Campbell Crockett
On 02 Mar 2006, at 07:34 PST, samu tuomisto wrote: Henrik Nordstrom wrote: Is it possible to set up Squid-Reverse-proxy server with URL rewriting - so that reverse proxy site visitor would stay inside Reverse proxy site instead of following absolutely links that actual site contains.

[squid-users] squid on solaris 10 x86 (Intel)

2006-03-02 Thread Dominique Bagnato
Hello, I am trying to install squid (squid-2.5.STABLE12) on a Solaris 10x86 = computer. I can do ./configure But When I try make, I have the following error: # make Making all in lib make[1]: Entering directory `/export/home/root/squid-2.5.STABLE12/lib' rm -f libdlmalloc.a /usr/bin/false cru

RE: [squid-users] No access to HTTPS sites and funny error page.

2006-03-02 Thread Andre Labuschagne
Sorry - for some reason I got the reply email before I got your original email. What happens if you hand compile squid including some options like ./configure --enable-ssl I used the rpm package included with Suse10, and I cannot find a way to see what options has been compiled in the

RE: [squid-users] No access to HTTPS sites and funny error page.

2006-03-02 Thread Andre Labuschagne
Hi Henrik, Is your Squid behind another proxy, or with direct connection to the Internet? If behind another proxy see the FAQ. Squid has direct communication with internet via firewall. Thanks Legal disclaimer: The views expressed in this email are, unless otherwise stated, those of the

[squid-users] what are the default units for connect_timeout in cache_peer options ?

2006-03-02 Thread mohinder garg
thanks

Re: [squid-users] IIS cachemanager error (Connection refused)

2006-03-02 Thread Stefano Del Furia
Thanks. i have configured the cachemgr.conf and squid.conf's ACL for access even for other machines and all works fine. Thanks again Stefano In data Thu, 02 Mar 2006 22:15:12 +0100, Guido Serassio [EMAIL PROTECTED] ha scritto: Hi, At 19.27 02/03/2006, Stefano Del Furia wrote: Hi all,

Re: [squid-users] what are the default units for connect_timeout in cache_peer options ?

2006-03-02 Thread Mark Elsen
There's no default; the syntax requires that the time unit is specified. M.

Re: [squid-users] squid on solaris 10 x86 (Intel)

2006-03-02 Thread Mark Elsen
Hello, I am trying to install squid (squid-2.5.STABLE12) on a Solaris 10x86 = computer. I can do ./configure But When I try make, I have the following error: # make Making all in lib make[1]: Entering directory `/export/home/root/squid-2.5.STABLE12/lib' rm -f libdlmalloc.a