Re: [squid-users] Firewall rule for dnsserver process on SquidNT-2.6 STABLE 13 on Windows

2007-07-29 Thread Santosh Rani
Though the hint was valuable, but still Agnitum Outpost Firewall does not allow Squid to start. Best Regards On 29/07/07, Henrik Nordstrom [EMAIL PROTECTED] wrote: On lör, 2007-07-28 at 20:48 +0530, Santosh Rani wrote: How do I allow inbuilt dnsserver process of Squid to access my ISP's

Re: [squid-users] How to override expires, maxage, s-maxage on reverse proxy?

2007-07-29 Thread Michael Pye
Ricardo Newbery wrote: latest version. But I'm not sure I should do this via s-maxage in the response as this setting might also apply to other proxies upstream of me. If you want other caches to take note of the cache-control max age headers, but you want your cache to cache for longer then

Re: [squid-users] url_regex problem

2007-07-29 Thread Michael Pye
Almighty 1 wrote: Could somebody tell me why url_regex -i \.php\?q isnt banning out the URL https://www.beareggs.com/dahr.php?q=aHR0cDovL3d3dy5iZWJvLmNvbQ%3D%3Dhl=3ed That works in squid2.6stable13 ok. What version are you running ? If you want to deny access to a URL that matches then use

Re: [squid-users] How to override expires, maxage, s-maxage on reverse proxy?

2007-07-29 Thread David Lawson
On Jul 29, 2007, at 1:47 PM, Michael Pye wrote: Ricardo Newbery wrote: latest version. But I'm not sure I should do this via s-maxage in the response as this setting might also apply to other proxies upstream of me. If you want other caches to take note of the cache-control max age

Re: [squid-users] How to override expires, maxage, s-maxage on reverse proxy?

2007-07-29 Thread Ricardo Newbery
On Jul 29, 2007, at 11:14 AM, David Lawson wrote: On Jul 29, 2007, at 1:47 PM, Michael Pye wrote: Ricardo Newbery wrote: latest version. But I'm not sure I should do this via s-maxage in the response as this setting might also apply to other proxies upstream of me. If you want other

Re: [squid-users] How to override expires, maxage, s-maxage on reverse proxy?

2007-07-29 Thread Michael Pye
Ricardo Newbery wrote: Again, I'm not sure refresh_pattern will solve my usecase since: 1) The docs above don't explicitly say that any of the options will override max-age and s-maxage, and 2) It appears that refresh_pattern can only be applied to a regex-matching URI, whereas I would like

Re: [squid-users] Entries are cached on the result of the URL rewriting process?

2007-07-29 Thread Michael Pye
Ricardo Newbery wrote: I'm pretty sure entries are cached (and are purgeable) based on the URL coming into squid, not whatever squid rewrites it to. No - they are cached as it states based on what URLs are rewritten to. You have to be careful in reverse proxy setups if you are attempting to

Re: [squid-users] How to override expires, maxage, s-maxage on reverse proxy?

2007-07-29 Thread Ricardo Newbery
On Jul 29, 2007, at 2:52 PM, Michael Pye wrote: Ricardo Newbery wrote: Again, I'm not sure refresh_pattern will solve my usecase since: 1) The docs above don't explicitly say that any of the options will override max-age and s-maxage, and 2) It appears that refresh_pattern can only be applied

Re: [squid-users] Route domain through different gateway

2007-07-29 Thread Henrik Nordstrom
On ons, 2007-07-25 at 11:02 +1000, Danny Gluch wrote: What I want to do is use squid to route any requests to a particular domain through a different gateway to everything else. If the domain only had a single IP address I could easily do this by adding a static route, but what about sites

Re: [squid-users] Re: squid ftp

2007-07-29 Thread Henrik Nordstrom
On ons, 2007-07-25 at 00:45 -0700, Nadeem Semaan wrote: So is there anything to be done on squid? thanks for your help. The FTP URL syntax for non-anonymous FTP is ftp://user:[EMAIL PROTECTED]/ and is understood by all browsers, most of the time.. Squid also supports requesting

Re: [squid-users] problem with transparent proxy

2007-07-29 Thread Henrik Nordstrom
On ons, 2007-07-25 at 17:57 +0800, Deephay wrote: But if I set: forwarded_for off it renders ok then, seems that this happens only on some MS IIS based sites. Could somebody explain me why? rules agains proxy? Of forwarded_for makes a difference then yes. Regards Henrik

Re: [squid-users] per-acl error messages not working

2007-07-29 Thread Henrik Nordstrom
On ons, 2007-07-25 at 13:31 -0400, Michael W. Lucas wrote: If a user logs in from too many machines, or if he enters a wrong password, he gets the error message in ERR_NO_SHARING. I would expect a user who signs on too often to get ERR_NO_SHARING and a user who fails to authenticate to get

Re: [squid-users] intermittent ERR_CANNOT_FORWARD

2007-07-29 Thread Henrik Nordstrom
On ons, 2007-07-25 at 12:32 -0700, Ben Drees wrote: 2) Why did some requests succeed and some fail? Is there a health test that blocks the opening of new connections but allows existing persistent connections to be reused? See cache.log for details. Regards Henrik

Re: [squid-users] HTTPS 8443 problem

2007-07-29 Thread Henrik Nordstrom
On tor, 2007-07-26 at 12:00 +1000, nick w wrote: Hi there, I have a slight problem whereby I am getting a 403: Access Forbidden type message when I try to browse a site which utilizes port 8443. Your configuration looks right to me. What does access.log say? Regards Henrik

Re: [squid-users] Proxy-Authenticate and WWW-Authenticate

2007-07-29 Thread Henrik Nordstrom
On tor, 2007-07-26 at 14:25 +1000, Matthew Smith wrote: Is it correct to say that a response can only have one authenticate in the headers? That a request containing a WWW-Authenticate cannot have a Proxy-Authenticate as well? It can have both, and is required if both the proxy and the web

Re: [squid-users] ldap and digest on squid for windows

2007-07-29 Thread Henrik Nordstrom
On tor, 2007-07-26 at 16:29 +0200, [EMAIL PROTECTED] wrote: auth_param digest program c:/squid/libexec/digest_ldap_auth.exe -e -A unicodePwd -b dc=aude,dc=com -D cn=Administrateur,cn=Users,dc=aude,dc=com -w toto -h 192.1.1.1 -v3 -Z You can't use Active Directory in that manner. The

Re: [squid-users] squid3 configure options question

2007-07-29 Thread Henrik Nordstrom
On fre, 2007-07-27 at 10:33 +0200, Ralf Hildebrandt wrote: The debian/unstable squid3 packages are configured using: ... --enable-storeio=ufs,aufs,coss \ --enable-diskio=AIO,Blocking,DiskDaemon,DiskThreads \ ... What exactly does --enable-diskio do? I notice that the --enable-storeio

Re: [squid-users] Squid and Authentication

2007-07-29 Thread Henrik Nordstrom
On fre, 2007-07-27 at 17:40 +0800, Yuz@|m|e M()hd Yu$()f wrote: Hi all, How to do squid proxy authentication without changing/modifiying user IE/firefox setting? Configure your network to use WPAD. Which authentication is suitable? Any, when the browser has discovered the proxy and uses

Re: [squid-users] url_regex problem

2007-07-29 Thread Henrik Nordstrom
On fre, 2007-07-27 at 12:09 +0100, Almighty 1 wrote: Could somebody tell me why url_regex -i \.php\?q isnt banning out the URL https://www.beareggs.com/dahr.php?q=aHR0cDovL3d3dy5iZWJvLmNvbQ%3D%3Dhl=3ed Because it's https, so the proxy only sees CONNECT www.bearegs.com:443, not the rest

Re: [squid-users] Bypass DNS-request for Privat-Addresses managed by PARENT

2007-07-29 Thread Henrik Nordstrom
On fre, 2007-07-27 at 14:10 +0200, Dirk Caspari wrote: I need Access (over squid) to some Internal-Websites of a company somewhere. I have configured my SQUID (2.6.STABLE13) like this: cache_peer REMOTE-COMPANY-SQUID-IP parent 3128 0 no-query acl REMOTE_DOMAINS dstdom_regex

Re: [squid-users] Weird 3 second delay between Squid and F5 LB (reverse proxy)

2007-07-29 Thread Henrik Nordstrom
On fre, 2007-07-27 at 20:08 -0700, Tory M Blue wrote: the tcpdumps are showing a reset from the LB, so this could be not internal to squid, although it felt like it. I think Squid is getting a reset and then taking sometime to create another connection and start all over again. I can post a

Re: [squid-users] Dead parent - Accelerator mode - Error page

2007-07-29 Thread Henrik Nordstrom
On lör, 2007-07-28 at 18:47 +0200, Pure Azal wrote: Is it possible to send the last version of an expired object when the parent peer is dead, in order to avoid getting this error page ? I get the expired object... Regards Henrik

Re: [squid-users] How to override expires, maxage, s-maxage on reverse proxy?

2007-07-29 Thread Henrik Nordstrom
On lör, 2007-07-28 at 14:50 -0700, Ricardo Newbery wrote: I looked at refresh_pattern and it's override-expire and ignore-no- cache options but I'm not sure I can leverage this. First, because it isn't clear whether these options will override max-age and s- maxage if they're present in