Re: [squid-users] solved - dns timeout , but working dns servers. Unable to determine IP address from host name

2007-12-07 Thread phil curb
--- Chris Robertson wrote: phil curb wrote: ok, amos. there have been some developments, based on what you wrote.. I couldn`t find anything of your reply to say yes to.. Removing dns_nameservers from squid.conf, so it is like default. When I set windows to get IP

[squid-users] Proxy Auth and Neighbour Caches

2007-12-07 Thread John Halfpenny
Hi All Is it possible for me to cache at Server A using NTLM, and upstream the request to parent Server B, logging the web request with username at server B only? Server B also uses NTLM for it's local clients. As ever thanks in advance John

RE: [squid-users] Squid reverse proxy and port mapping

2007-12-07 Thread Mirabello Massimiliano
-Original Message- From: Amos Jeffries [mailto:[EMAIL PROTECTED] ACL == myport / myip acl port8080 myport 8080 cache_peer 120.0.0.1 parent 9080 0 name=local9080 cache_peer_access local9080 allow port8080 ... acl port8081 myport 8081 cache_peer 120.0.0.1 parent 9081 0

RE: [squid-users] Transparent WCCP/GRE HTTPS issue

2007-12-07 Thread Jason Gauthier
-Original Message- From: Adrian Chadd [mailto:[EMAIL PROTECTED] Sent: Thursday, December 06, 2007 9:53 PM To: Jason Gauthier Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Transparent WCCP/GRE HTTPS issue I'm pretty sure WCCPv2 is only supported on the same interface

Re: [squid-users] solved - dns timeout , but working dns servers. Unable to determine IP address from host name

2007-12-07 Thread Amos Jeffries
phil curb wrote: --- Chris Robertson wrote: phil curb wrote: ok, amos. there have been some developments, based on what you wrote.. I couldn`t find anything of your reply to say yes to.. Removing dns_nameservers from squid.conf, so it is like default. When I set windows to get IP

Re: [squid-users] Exclude embedded applications from ntlm auth

2007-12-07 Thread Adrian Chadd
The place to start is to grab a wireshark/ethereal trace of the embedded player to see exactly whats going on. Yes you can use ACLs based on request URL but I think mime type requires the reply to be seen and it might be difficult to enforce authentication. Henrik will know better. Adrian On

Re: [squid-users] Transparent WCCP/GRE HTTPS issue

2007-12-07 Thread Adrian Chadd
On Fri, Dec 07, 2007, Jason Gauthier wrote: I understand what you are saying. I will give it a go. Should I create an iptables rule for each interface to capture port 80 traffic in addition to that? It would seem I would want to. I don't have a PIX/ASA device here to work on and build

Re: [squid-users] Squid reverse proxy and port mapping

2007-12-07 Thread Adrian Chadd
use multiple cache_peer lines, one per port, and then define ACLs which match on the incoming port. I've posted an example to a related question to the mailing list a month or two ago. Adrian On Fri, Dec 07, 2007, Mirabello Massimiliano wrote: Hi all, I have a problem I couldn't solve.

[squid-users] Exclude embedded applications from ntlm auth

2007-12-07 Thread Olsson, Mattias
Hello! I have a cluster of Squid servers integrated with my AD. IE and Firefox is working most of the time. My biggest problem is that Windows Media Player, Quicktime and other embedded players fails to auth against the AD automaticly. I get a popup requesting my usename/password. This is

[squid-users] chunked encoding is not working after squid-2.6Stable9

2007-12-07 Thread sekar it
Hello all, We have an application that uses http proxy. It uses http version 1.0 for requests and the server sends a response (HTTP/1.0) with chunked transfer encoding. The application worked upto squid-2.6STABLE9 as I understand it does not handle the chunked transfer encoding. Currently I am

[squid-users] Squid Kill TCP Connection

2007-12-07 Thread Leandro Ferrrari
Hello, i have a problem and i think that squid kill tcp connection with skype between 1 or 2 hours in some computer. I saw with tcpdump that squid send a packet TCP with flags [FIN/ACK] to the client. Then, Skype reconnect the session again. My configuration is: Dansguardian + Squid 2.6 + Clamv

[squid-users] Squid reverse proxy and port mapping

2007-12-07 Thread Mirabello Massimiliano
Hi all, I have a problem I couldn't solve. I looked for documentation or examples but a could not find (or I didn't uderstand) a solution. I have an application that send http/https request on different ports of my http server. What I need is to proxy a request received on a specific port (e.g.

Re: [squid-users] Squid reverse proxy and port mapping

2007-12-07 Thread Amos Jeffries
Mirabello Massimiliano wrote: Hi all, I have a problem I couldn't solve. I looked for documentation or examples but a could not find (or I didn't uderstand) a solution. I have an application that send http/https request on different ports of my http server. What I need is to proxy a request

Re: [squid-users] Can't assign requested address

2007-12-07 Thread Tek Bahadur Limbu
Hi nix_kot, nix_kot wrote: Hello, squid-users. In my cache.log very many such messages 2007/12/06 08:44:37| commBind: Cannot bind socket FD 7703 to *:0: (49) Can't assign requested address 2007/12/06 08:44:37| commBind: Cannot bind socket FD 7703 to *:0: (49) Can't assign requested

Re: [squid-users] Can't assign requested address

2007-12-07 Thread nix_kot
Hello, squid-users. In my cache.log very many such messages 2007/12/06 08:44:37| commBind: Cannot bind socket FD 7703 to *:0: (49) Can't assign requested address 2007/12/06 08:44:37| commBind: Cannot bind socket FD 7703 to *:0: (49) Can't assign requested address 2007/12/06 08:44:38|

Re: [squid-users] Squid Kill TCP Connection

2007-12-07 Thread Adrian Chadd
On Fri, Dec 07, 2007, Leandro Ferrrari wrote: Hello, i have a problem and i think that squid kill tcp connection with skype between 1 or 2 hours in some computer. I saw with tcpdump that squid send a packet TCP with flags [FIN/ACK] to the client. Then, Skype reconnect the session again. My

Re: [squid-users] auto blacklist users

2007-12-07 Thread ian j hart
On Friday 07 December 2007 23:49:35 Amos Jeffries wrote: [Apologies in advance if I've miss-understood anything, it's late (early) and I'm somewhat brain dead. This time zone thing's a killer] ian j hart wrote: On Friday 07 December 2007 00:58:31 Adrian Chadd wrote: So if I get this right,

Re: [squid-users] auto blacklist users

2007-12-07 Thread Amos Jeffries
ian j hart wrote: On Friday 07 December 2007 00:58:31 Adrian Chadd wrote: So if I get this right, you'd like to log the acl list that passed or failed the user? Adrian Near enough. I want to log the aclname (or custom error page name) and the username. I'll probably want the url in short

Re: [squid-users] Can't assign requested address

2007-12-07 Thread ian j hart
On Friday 07 December 2007 11:54:45 Tek Bahadur Limbu wrote: Hi nix_kot, nix_kot wrote: Hello, squid-users. In my cache.log very many such messages 2007/12/06 08:44:37| commBind: Cannot bind socket FD 7703 to *:0: (49) Can't assign requested address 2007/12/06 08:44:37| commBind:

Re: [squid-users] auto blacklist users

2007-12-07 Thread ian j hart
On Friday 07 December 2007 00:41:30 Amos Jeffries wrote: On Thursday 06 December 2007 22:31:06 Amos Jeffries wrote: On Wednesday 05 December 2007 17:04:09 ian j hart wrote: Hello. [sorry, slightly off topic] I'm the ICT technician of a school. I have squid running to make the

Re: [squid-users] auto blacklist users

2007-12-07 Thread ian j hart
On Friday 07 December 2007 00:58:31 Adrian Chadd wrote: So if I get this right, you'd like to log the acl list that passed or failed the user? Adrian Near enough. I want to log the aclname (or custom error page name) and the username. I'll probably want the url in short order, followed by

Re: [squid-users] auto blacklist users

2007-12-07 Thread dhottinger
Quoting ian j hart [EMAIL PROTECTED]: On Friday 07 December 2007 23:49:35 Amos Jeffries wrote: [Apologies in advance if I've miss-understood anything, it's late (early) and I'm somewhat brain dead. This time zone thing's a killer] ian j hart wrote: On Friday 07 December 2007 00:58:31 Adrian

Re: [squid-users] chunked encoding is not working after squid-2.6Stable9

2007-12-07 Thread Adrian Chadd
I didn't think that a transfer-encoded response was valid to a HTTP/1.1 request. The latest Squid-2.6 will decode the chunked response and return a valid HTTP/1.0 body (minus chunking.) Its possible the server and client application are broken? Adrian On Fri, Dec 07, 2007, sekar it wrote: