RE: [squid-users] URL cnbc.com : Video Streaming Problems.

2007-04-16 Thread vincent.blondel
ons 2007-04-11 klockan 20:42 +0200 skrev Vincent Blondel: On Wed, 2007-04-11 at 15:49 +0200, Henrik Nordstrom wrote: ons 2007-04-11 klockan 14:36 +0200 skrev [EMAIL PROTECTED]: Hello all, Our dealing room is trying to read some video streaming on www.cnbc.com ( Menu Video / Click

Re: [squid-users] SQUID configuration for HTTP 0.9

2007-04-16 Thread George Ciuperca
--- Henrik Nordström [EMAIL PROTECTED] wrote: fre 2007-04-13 klockan 02:22 -0700 skrev George Ciuperca: We have a squid 2.5.14 deployed here and we have simple HTTP 0.9 GET requests for an apache server.The problem is that squid is converting our request to HTTP 1.0 and the

Re: [squid-users] Forward Reverse Proxy run togather

2007-04-16 Thread Kenny Lee
Hi Micheal, i have put in the DEBUG_OPTIONS into my squid.conf, and when i checked on my access.log, i found this ... but dont know what it's mean, can you help to explain? Below are the records copied out from my access.log 1176708775.803 0 123.123.123.123 TCP_DENIED/403 1424 POST

Re: [squid-users] SQUID configuration for HTTP 0.9

2007-04-16 Thread Henrik Nordstrom
mån 2007-04-16 klockan 00:43 -0700 skrev George Ciuperca: But from what you're saying I understand that SQUID knows when a client sends a HTTP/0.9 request, converts it in a HTTP/1.0 one and when the response comes from Apache in 1.0 form, it will change it back into HTTP/0.9 form.

Re: [squid-users] Forward Reverse Proxy run togather

2007-04-16 Thread Henrik Nordstrom
mån 2007-04-16 klockan 15:51 +0800 skrev Kenny Lee: Below are the records copied out from my access.log 1176708775.803 0 123.123.123.123 TCP_DENIED/403 1424 POST http://www.example.com/test/testing/welcome.asp - NONE/- text/html This means the request was denied. 1176708775.804 3

Re: [squid-users] SQUID configuration for HTTP 0.9

2007-04-16 Thread George Ciuperca
--- Henrik Nordstrom [EMAIL PROTECTED] wrote: mån 2007-04-16 klockan 00:43 -0700 skrev George Ciuperca: But from what you're saying I understand that SQUID knows when a client sends a HTTP/0.9 request, converts it in a HTTP/1.0 one and when the response comes from Apache in

[squid-users] Squid ACL settings

2007-04-16 Thread antolik
Hello, I would like to setup squid this way. All client from internal network(172.16.0.0) could reach external server 15.14.13.12 on all port. Many thanks.

Re: [squid-users] http_reply_access processing

2007-04-16 Thread Eugene
Hello Chris, Friday, April 6, 2007, 11:53:15 PM, you wrote: CR Eugene wrote: Hello! I've upgraded my squid from 2.5.14 to 2.6.12 and get into trouble with http_reply_access rules processing. In our configuration, client's programs without proxy authentication support is allowed to get

[squid-users] HTTP redirect and HTTPS

2007-04-16 Thread Jack Murray
Hello, we are using Squid as a HTTPS gateway to backend servers, and we would like to have squid also force redirects from HTTP to HTTPS. I tried doing this with v2.5.14 using a rewriter that returns a 302:url, but it gets into an infinite loop because when it gets a HTTPS request the rewriter

[squid-users] Squid - NTLM auth

2007-04-16 Thread Ganesh Balasubramanian
Hello, I've squid 2.5x version installed in 2003 server which is also my domain server. I've my portal page running in port 80. Loggin into the machine as domain user and accessing my portal page, http://server-name displays forbidden page. What changes should i make in my squid

Re: [squid-users] http_reply_access processing

2007-04-16 Thread Chris Robertson
Eugene wrote: Hello Chris, Friday, April 6, 2007, 11:53:15 PM, you wrote: CR # Allow domain computers to perform updates w/o proxy authentication CR http_access allow domain_comp files CR # Allow logged in users to access anything CR http_access allow domain_user CR # Deny non-logged in

Re: [squid-users] Delay pools to certain users+sites

2007-04-16 Thread Chris Robertson
Vladi Lemurov wrote: Hello! Is it possible to configure delay pools to certain users AND sites? E.g. when user 'michael' goes to 'google.com' no delay pools are applied. But when 'michael' aims at 'www.mp3.com' delay pools are applied. I tried to do this the following way but it doesn't work:

Re: [squid-users] Squid ACL settings

2007-04-16 Thread Chris Robertson
[EMAIL PROTECTED] wrote: Hello, I would like to setup squid this way. All client from internal network(172.16.0.0) could reach external server 15.14.13.12 on all port. Many thanks. acl clients src 172.16.0.0/16 acl server dst 15.14.13.12 http_access allow clients server Proper placement

Re: [squid-users] HTTP redirect and HTTPS

2007-04-16 Thread Chris Robertson
Jack Murray wrote: Hello, we are using Squid as a HTTPS gateway to backend servers, and we would like to have squid also force redirects from HTTP to HTTPS. I tried doing this with v2.5.14 using a rewriter that returns a 302:url, but it gets into an infinite loop because when it gets a HTTPS

Re: [squid-users] Squid - NTLM auth

2007-04-16 Thread Chris Robertson
Ganesh Balasubramanian wrote: Hello, I've squid 2.5x version installed in 2003 server which is also my domain server. I've my portal page running in port 80. Loggin into the machine as domain user and accessing my portal page, http://server-name displays forbidden page. What changes

Re: [squid-users] SQUID configuration for HTTP 0.9

2007-04-16 Thread Henrik Nordstrom
mån 2007-04-16 klockan 02:04 -0700 skrev George Ciuperca: Our SQUID version is 2.5.14 and we only want to make a request (GET) without headers and get a response without headers. Thanks again! Upgrade to Squid-2.6. If you still see the problem file a bug report. But be warned that HTTP/0.9

Re: [squid-users] HTTP redirect and HTTPS

2007-04-16 Thread Henrik Nordstrom
mån 2007-04-16 klockan 08:16 -0700 skrev Jack Murray: Hello, we are using Squid as a HTTPS gateway to backend servers, and we would like to have squid also force redirects from HTTP to HTTPS. I tried doing this with v2.5.14 using a rewriter that returns a 302:url, but it gets into an

Re: [squid-users] Squid - NTLM auth

2007-04-16 Thread Henrik Nordstrom
mån 2007-04-16 klockan 10:54 -0700 skrev Ganesh Balasubramanian: What changes should i make in my squid configuration file, for the NTLM auth to work. In access_domain key i've given my domain server name .ad.domain.com. But it doesn't display my portal page. For proxying of NTLM auth to a

Re: [squid-users] Delay pools to certain users+sites

2007-04-16 Thread Henrik Nordstrom
mån 2007-04-16 klockan 11:16 -0800 skrev Chris Robertson: If I'm reading the Wiki entry correctly (http://wiki.squid-cache.org/SquidFaq/MiscFeatures#head-75a75a2d52fe4fb1447a5e2e428cfd504af56b01), delay pools won't wait for a DNS lookup (as required by the dstdomain ACL) to determine if

Re: [squid-users] client ip

2007-04-16 Thread Henrik Nordstrom
lör 2007-04-14 klockan 10:49 +0700 skrev [EMAIL PROTECTED]: i did read the pdf file, but in build on linux. does anyone ever tried this on FreeBSD machines? please share the steps and tips. You can do a similar trick playing with tcp_outgoing_address and NAT. Map your users with

[squid-users] gzip compression?

2007-04-16 Thread Edward Muller
Can squid do on the fly gzip compression? If not will it cache gzipd pages provided by an origin server? -- Edward Muller Interlix, LLC Owner Zope, Plone Zimbra Hosting phone: +1.417.862.0573 fax: +1.770.818.5437 --

Re: [squid-users] HTTP redirect and HTTPS

2007-04-16 Thread Henrik Nordstrom
mån 2007-04-16 klockan 13:34 -0700 skrev Jack Murray: Okay, so how would it be done with 2.6? Does chris robertson's reply work in 2.6 also? Both methods from his response works in 2.6. Only one of them works in 2.5. If I understand that correctly, a redirect is sent when a denied access is

Re: [squid-users] gzip compression?

2007-04-16 Thread Henrik Nordstrom
mån 2007-04-16 klockan 16:26 -0500 skrev Edward Muller: Can squid do on the fly gzip compression? No, not yet. On the fly content-encoding is inherently tricky to get right as HTTP is not designed for this (in fact, most get it wrong to various degrees, some major ones worse than others). If

[squid-users] SSL White List

2007-04-16 Thread Steven Sporen
Hi, Is there any method to pickup the common name of the certificate used for SSL tunnels? I'd like to be able to restrict users SSL connectivity to specific (or deny specific) sites. I realise that Squid tunnels the connection however I do believe that this functionality would be very useful.

Re: [squid-users] SSL White List

2007-04-16 Thread Henrik Nordstrom
tis 2007-04-17 klockan 00:00 +0200 skrev Steven Sporen: Is there any method to pickup the common name of the certificate used for SSL tunnels? I'd like to be able to restrict users SSL connectivity to specific (or deny specific) sites. Squid does no attempts in parsing the tunneled data. It's

[squid-users] Session helper question

2007-04-16 Thread Tuc at T-B-O-H.NET
Hi, Fot the helpers/external_acl/session, how does it determine if the user has been seen or not? Cookie? MAC? IP? Other? Thanks, Tuc

Re: [squid-users] Session helper question

2007-04-16 Thread Henrik Nordstrom
mån 2007-04-16 klockan 18:39 -0400 skrev Tuc at T-B-O-H.NET: Fot the helpers/external_acl/session, how does it determine if the user has been seen or not? Cookie? MAC? IP? Other? Time since last seen. Where user == whatever you send to the helper in the external_acl_type definition

[squid-users] How to Dansguardian+Squid via an ISPs port:80 proxy?

2007-04-16 Thread tim
Hi, I need to go through a web proxy at my ISP. How can I configure Dansguardian/Squid to use that proxy instead of connecting directly to the Internet. It's NOT a case of a peer or parent proxy because the ISPs proxy is not designed/permitted to handle these kinds of requests.Do I have

Re: [squid-users] How to Dansguardian+Squid via an ISPs port:80 proxy?

2007-04-16 Thread Adrian Chadd
On Mon, Apr 16, 2007, tim wrote: Hi, I need to go through a web proxy at my ISP. How can I configure Dansguardian/Squid to use that proxy instead of connecting directly to the Internet. It's NOT a case of a peer or parent proxy because the ISPs proxy is not designed/permitted to

Re: [squid-users] client ip

2007-04-16 Thread zen
Henrik Nordstrom wrote: lör 2007-04-14 klockan 10:49 +0700 skrev [EMAIL PROTECTED]: i did read the pdf file, but in build on linux. does anyone ever tried this on FreeBSD machines? please share the steps and tips. You can do a similar trick playing with tcp_outgoing_address and NAT.

[squid-users] How to use MRTG of Multiple httpd-accelerator mode ?

2007-04-16 Thread Seonkyu Park
Hello Everyone I'm using squid for reverse proxy of several domains. My squid.conf is below. cache_peer 1.1.1.1 parent 80 0 no-query originserver no-digest cache_peer 2.2.2.2 parent 80 0 no-query originserver no-digest cache_peer 3.3.3.3 parent 80 0 no-query originserver no-digest

[squid-users] how to filter squid's logs?

2007-04-16 Thread Jen mlists
hello members, Because our squid logs get very big so I want to filter some items from squid's access.log. For example,I only need urls including .html or .php to be appeared in access.log,all others should not included. How can I customize the logformat of squid?Thanks. --jen

[squid-users] Re: how to filter squid's logs?

2007-04-16 Thread Jen mlists
Sorry after checking the docs I got it.Like: acl php urlpath_regex \.php access_log /home/squid/var/logs/access.log squid php 2007/4/17, Jen mlists [EMAIL PROTECTED]: hello members, Because our squid logs get very big so I want to filter some items from squid's access.log. For example,I only