RE: [squid-users] Allowing accidentally blocked sites

2007-07-16 Thread Henrik Nordstrom
sön 2007-07-15 klockan 11:46 -0400 skrev Osmany: If i do that, all clients will be allowed to Access these allowed sites without password or IPAddress verification. Considering that squid tries to find the first matching rule and doesn´t read any further. It will only reach that rule and

Re: [squid-users] block internal proxy servers

2007-07-16 Thread apee r
dear henrik, i am not able to trap the internal machines who run their own proxy server to connect to the main squid proxy server. i scanned the user_agent log. it only gives details about the connection application as MOZILLA, where as the clients are using proxy servers at their end. how to i

Re: [squid-users] NTLM auth and JAVA authentication

2007-07-16 Thread Joerg Schuetter
On Fri, 13 Jul 2007 13:17:22 +0200 Henrik Nordstrom [EMAIL PROTECTED] wrote: tor 2007-07-12 klockan 10:21 +0200 skrev Joerg Schuetter: I had the same issue. Reverting the patch http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE12-ntlm_nonpersistent.patch solved the problem

Re: [squid-users] block internal proxy servers

2007-07-16 Thread Henrik Nordstrom
sön 2007-07-15 klockan 23:35 -0700 skrev apee r: dear henrik, i am not able to trap the internal machines who run their own proxy server to connect to the main squid proxy server. i scanned the user_agent log. it only gives details about the connection application as MOZILLA, where as the

RE: [squid-users] How would Squid server sense authentication?

2007-07-16 Thread Vootla, Bhagwan
Thanks Martin. As you know there are no secured browsers in the market which encrypts user names/passwords. Everything is sent in plain text over LAN. (Sometime back Henrik shed some light to creating ssh tunnel, Which absolutely worked fine. Thanks to Henrik.) But I am instructed to AVOID

RE: [squid-users] How would Squid server sense authentication?

2007-07-16 Thread Henrik Nordstrom
mån 2007-07-16 klockan 09:43 -0400 skrev Vootla, Bhagwan: But I am instructed to AVOID putting anything on the client side. To avoid this, What I was trying to achieve is... Make apache as a secured web server and perform secured authentication against ldap server, and then inform squid

[squid-users] Muliple ports on single web backend

2007-07-16 Thread Jason Hitt
Ok I want the 80 site externally on 443 and the 8080 site accessible externally on a high port of 45678. Is this right? https_port 443 cert=/usr/local/squid/var/cert.pem urlgroup=1 vhost https_port 45678 cert=/usr/local/squid/var/cert.pem urlgroup=2 vhost cache_peer 10.10.59.01 parent 80 0

[squid-users] comm_select: kqueue event error: (9) Bad file descriptor

2007-07-16 Thread Paul clayton
Not sure if this is an problem. We have a squid 2.6 Stable 12 server on FreeBSD 7.0 as a transparent proxy. We regularly get timeouts and page errors on this server, and try and find out whether this is a problem, I raised the debug level to 5, and noticed these errors. comm_select: kqueue

Re: [squid-users] comm_select: kqueue event error: (9) Bad file descriptor

2007-07-16 Thread Tek Bahadur Limbu
Paul clayton wrote: Not sure if this is an problem. We have a squid 2.6 Stable 12 server on FreeBSD 7.0 as a transparent proxy. We regularly get timeouts and page errors on this server, and try and find out whether this is a problem, I raised the debug level to 5, and noticed these errors.

[squid-users] Squid not connectin to parent

2007-07-16 Thread Osmany
Hi, I have a Little problem. I've just installed Squid2.6stable6 and apparently it is not connecting to the parent proxy. In the cache.log it says that the parent is dead. I have confirmed with the net-admins that the parent is not dead. This is what I have in the squid.conf cache_peer

Re: [squid-users] comm_select: kqueue event error: (9) Bad file descriptor

2007-07-16 Thread Henrik Nordstrom
mån 2007-07-16 klockan 17:06 +0200 skrev Paul clayton: comm_select: kqueue event error: (9) Bad file descriptor Some of these kqueue event error: (9) Bad file descriptor warnings is expected in debug mode. Caused by the delayed nature of kqueue event lists. What we do not want to see is

Re: [squid-users] Squid not connectin to parent

2007-07-16 Thread Henrik Nordstrom
mån 2007-07-16 klockan 13:00 -0400 skrev Osmany: Hi, I have a Little problem. I've just installed Squid2.6stable6 and apparently it is not connecting to the parent proxy. In the cache.log it says that the parent is dead. I have confirmed with the net-admins that the parent is not dead.

[squid-users] squid dansguardian and privoxy

2007-07-16 Thread Dave
Hello, I've got squid running as a transparent proxy with squidguard as a redirector. To this i want to add dansguardian for content filtering and privoxy for privacy. I am having difficulties with these latter two, i'd like to keep squid's transparent mode as i think that makes it harder

Re: [squid-users] squid dansguardian and privoxy

2007-07-16 Thread Mar Matthias Darin
Hello, Dave writes: Hello, I've got squid running as a transparent proxy with squidguard as a redirector. To this i want to add dansguardian for content filtering and privoxy for privacy. I am having difficulties with these latter two, i'd like to keep squid's transparent mode as i

Re: [squid-users] comm_select: kqueue event error: (9) Bad file descriptor

2007-07-16 Thread Adrian Chadd
On Mon, Jul 16, 2007, Tek Bahadur Limbu wrote: [snip stuff about kqueue and EBADF] Adrian may have answers regarding this messages? Yup! [EBADF]The specified descriptor is invalid. IIRC, its because sometimes (under heavy loads) you'll end up hitting a minor race condition

[squid-users] How to configure Squid with SSL for a virtual hosting server?

2007-07-16 Thread fulan Peng
Hi, All! I have configured Squid 3.0 PRE4 to be an accelelator to reverse proxy a web site, say, www.google.com with a registered domain name, say www.google-proxy.com I am running squid as non-root user at port 8443. I use firewall to redirect 443 request to 8443. So browsers can

Re: [squid-users] squid dansguardian and privoxy

2007-07-16 Thread Mar Matthias Darin
Hello, Dave writes: Hi, Thanks. My dg is blocking the access right now, it's saying everything i download is infected so it's not letting anything through. Turning off content filtering stops everything. So i've taken dg out of the fix. I'm going to turn off squid transparently and go