Re: [squid-users] Bypassing 403 and 404 status to ICAP using icap_access

2008-04-03 Thread selvi nandu
Hello Alex, Thanks for the reply. I had submitted a bug report. I am just placing few lines from the debug log here for your reference. 2008/04/03 14:24:58.788| ACLChecklist::preCheck: 0x604dfdc8 checking 'icap_access class_1 deny HS' 2008/04/03 14:24:58.788| ACLList::matches: checking

[squid-users] squid transparent proxy

2008-04-03 Thread Wennie V. Lagmay
Dear all, I am trying to activate transparent proxy on my setup but I cannot run it. with the standard setup (configuring the client PC with browser configuration) everything is working good, squid is responding and the client can browse the internet. Now we are trying to implement a setup

[squid-users] Need Original IP address

2008-04-03 Thread piyush joshi
Dear All, Can anyone tell me how can we get the users original ip instead of proxy ip on those application which shows last connection. -- Regards Piyush Joshi 9415414376

Re: [squid-users] Bypassing 403 and 404 status to ICAP using icap_access

2008-04-03 Thread Alex Rousskov
On Thu, 2008-04-03 at 12:00 +0530, selvi nandu wrote: Thanks for the reply. I had submitted a bug report. I am just placing few lines from the debug log here for your reference. 2008/04/03 14:24:58.788| ACLChecklist::preCheck: 0x604dfdc8 checking 'icap_access class_1 deny HS'

Re: [squid-users] client ip's

2008-04-03 Thread Henrik Nordstrom
tor 2008-04-03 klockan 18:08 +1300 skrev Amos Jeffries: If squid is running on this same box I would recommend the REDIRECT target instead of DNAT. It's less work for the kernel. Actually REDIRECT is more work than DNAT as it has to look up the primary IP of the incoming interface and

Re: [squid-users] squid transparent proxy

2008-04-03 Thread Wennie V. Lagmay
Hi, You are right I am using port 8080. As I mentioned I have 2 machine the 1st machine is my Firewall/NAT server wherein the iptables configuration already stated that it should redirect port 80 to 8080 iptables -t nat -A PREROUTING -s 192.168.10.0/255.255.255.0 -p tcp -m tcp --dport 80 -j

Re: [squid-users] Why has Sarg has stopped working?

2008-04-03 Thread Amos Jeffries
Ed Flecko wrote: Hmmm. I don't have a /var/log/cron directory or anything that looks like a log file relative to cron within the /var/log directory. ??? Ed On Wed, Apr 2, 2008 at 9:42 AM, Trevor Akers [EMAIL PROTECTED] wrote: For #3 /var/log/cron -Original Message- From: Ed

Re: [squid-users] squid transparent proxy

2008-04-03 Thread Amos Jeffries
Wennie V. Lagmay wrote: Hi, You are right I am using port 8080. As I mentioned I have 2 machine the 1st machine is my Firewall/NAT server wherein the iptables configuration already stated that it should redirect port 80 to 8080 iptables -t nat -A PREROUTING -s 192.168.10.0/255.255.255.0 -p

Re: [squid-users] Need Original IP address

2008-04-03 Thread Amos Jeffries
piyush joshi wrote: Dear All, Can anyone tell me how can we get the users original ip instead of proxy ip on those application which shows last connection. Web requests that have gone through a proxy should contain an X-Forwarded-For: header, or on some proxies a Client-IP:

RE: [squid-users] client ip's

2008-04-03 Thread Jorge Bastos
Hum, the last one's on debian. They were 3.0 PRE-X, but don't remember the number. -Original Message- From: Amos Jeffries [mailto:[EMAIL PROTECTED] Sent: quinta-feira, 3 de Abril de 2008 6:08 To: Jorge Bastos Cc: 'Henrik Nordstrom'; squid-users@squid-cache.org Subject: Re:

RE: [squid-users] https -- http reverse proxy problem (SOLVED)

2008-04-03 Thread Mirabello Massimiliano
-Original Message- From: Amos Jeffries [mailto:[EMAIL PROTECTED] I already tryed to symlink both the openssl binary and the openssl directory. The error still remain the same. I tryed also to add openssl to $PATH. Any other suggestion? If that is not working

Re: [squid-users] Bypassing 403 and 404 status to ICAP using icap_access

2008-04-03 Thread selvi nandu
Hello Alex, Thanks for the quick reply and the fix.. Selvi On 4/3/08, Alex Rousskov [EMAIL PROTECTED] wrote: On Thu, 2008-04-03 at 12:00 +0530, selvi nandu wrote: Thanks for the reply. I had submitted a bug report. I am just placing few lines from the debug log here for your reference.

[squid-users] using rep_mime_type in icap_access

2008-04-03 Thread selvi nandu
Hello, One more relevant questions like this. Is rep_mime_type if only for http_reply_access restrictions? I only want the responses with the mime-types starting with text or application or multipart to enter the icap server. My squid config says: acl mimeblockp rep_mime_type ^text acl

Re: [squid-users] squid transparent proxy

2008-04-03 Thread Indunil Jayasooriya
You are right I am using port 8080. As I mentioned I have 2 machine the 1st machine is my Firewall/NAT server wherein the iptables configuration already stated that it should redirect port 80 to 8080 Oh , Squid is Not running on this box. then, REDIRECT will not work. What Your firewall can

[squid-users] FTP access via proxy server

2008-04-03 Thread R Pradeepa
when i try to access an ftp site i get the following error The folder is readonly because the proxy server is not set up to allow full access. To move, paste, rename or delete files you should use a different proxy server. Without proxy server i am able to view the ftp sites or add any files

[squid-users] FTP access via proxy server

2008-04-03 Thread R Pradeepa
when i try to access an ftp site i get the following error The folder is readonly because the proxy server is not set up to allow full access. To move, paste, rename or delete files you should use a different proxy server. Without proxy server i am able to view the ftp sites or add any

[squid-users] limiting upload bandwidth? pls

2008-04-03 Thread Tvrtko Majstorović
Hi, I need to limit 'upload' bandwidth on my network but for just one particular application that uses 'x' port. I know it has to be done using delay pools, but just don't know how to configure squid. Can someone please tell me what must I do to achieve this? Do I need transparent proxy

Re: [squid-users] All url_rewriter processes are busy x Too many open files

2008-04-03 Thread Marcio Augusto Stocco
On Wed, Apr 2, 2008 at 1:18 AM, Amos Jeffries [EMAIL PROTECTED] wrote: Is there any way to increase SQUID_MAXFD from 8192 to 65536, so I can try using the sugested number of url_rewriter processes? Squid 2.6: --with-maxfd=65536 Squid 3.x: --with-filedescriptors=65536 At the time I was

Re: [squid-users] squid transparent proxy

2008-04-03 Thread dhottinger
Quoting Wennie V. Lagmay [EMAIL PROTECTED]: Hi, You are right I am using port 8080. As I mentioned I have 2 machine the 1st machine is my Firewall/NAT server wherein the iptables configuration already stated that it should redirect port 80 to 8080 iptables -t nat -A PREROUTING -s

RE: [squid-users] limiting upload bandwidth? pls

2008-04-03 Thread Jorge Bastos
The best thing to do this is with QoS -Original Message- From: Tvrtko Majstorović [mailto:[EMAIL PROTECTED] Sent: quinta-feira, 3 de Abril de 2008 13:08 To: squid-users@squid-cache.org Subject: [squid-users] limiting upload bandwidth? pls Hi, I need to limit 'upload' bandwidth

[squid-users] DNS lookup errors when using squid

2008-04-03 Thread Oliver Marshall
We run a very basic squid setup on a windows 2003 box here. It's purely used to route all web traffic over a cheap adsl line leaving the leased line free for important stuff. The 'squid server' (win2k3) has the gateway IP set to that of the adsl router meaning that when someone sets the proxy in

Re: [squid-users] upgrade process

2008-04-03 Thread Allen Schmidt Sr.
Reverse. Internet browsers hit squid and are redirected to our zope servers for content. Thanks for the info. I will start reading. Allen Henrik Nordstrom wrote: ons 2008-04-02 klockan 08:22 -0400 skrev Allen Schmidt Sr.: We currently are on SUSE and squid is the only thing on this box.

Re: [squid-users] using rep_mime_type in icap_access

2008-04-03 Thread Alex Rousskov
On Thu, 2008-04-03 at 16:22 +0530, selvi nandu wrote: I only want the responses with the mime-types starting with text or application or multipart to enter the icap server. My squid config says: acl mimeblockp rep_mime_type ^text acl mimeblockp rep_mime_type ^application acl mimeblockp

[squid-users] transparent tproxy bridging

2008-04-03 Thread Abdock
Hello, Anybody doing transparent tproxy and bridging on squid 2.6 or 3.1 ? Can you please share how to ? on centos Or point me to some links !! Thanks.

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-03 Thread Terry Dobbs
I tried adding the first route, but it didn't seem to make a difference. The ethereal capture still shows my squid box sending window size of 1460? Do I need to restart networking to take effect, when I do this it wipes out the route? Also, the second command gives me an error and says mss is a

Re: [squid-users] Slow internet

2008-04-03 Thread julian julian
I use CentOS 4.4 and 5.1. But I recomend to you CentOS 4.4 because is a bit more easy for configure due to the squid and samba versions included in this distro. Be careful if you are using some intel motherboard and how Linux see the hard disk. If there are SATA you should see that as sdx(x=a b or

Re: [squid-users] DNS lookup errors when using squid

2008-04-03 Thread julian julian
I never use squid on windows but I've use it a lot on Linux. You can set the DNS server in two ways: a) leaving commented the DNS setting in the squid.conf and it will use the operating system DNS setting. b) Setting DNS configuration into squid.conf file. The second one works well in Linux.

Re: [squid-users] FTP access via proxy server

2008-04-03 Thread Jakob Curdes
R Pradeepa wrote: Please suggest me what ashould be enabled in squid proxy to allow write permission to that ftp site SQUID is not a full FTP proxy. It only implements FTP get to be able to download files from FTP servers. If you want to proxy FTP, you need an additional proxy server for

Re: [squid-users] FTP access via proxy server

2008-04-03 Thread julian julian
Squid have some limitations for manage ftp traffic. If you whant use Web browser for non-anonymous ftp access, you will find many troubles. Instead that I recomend use a real FTP clients (cuteFTP, FTPzilla, etc), combined with a FTP proxy (frox http://frox.sourceforge.net/) it works very well. I

[squid-users] No userid in access.log

2008-04-03 Thread CC Ng
When I use Login=PASS in cache_peer option (i.e. pass the authentication to the parent), there is no userid information in the access.log, is it possible to show the userid in the local squid's access.log?

[squid-users] Limiting download size

2008-04-03 Thread piyush joshi
Dear All, I want to only allow users using squid server to download only those files from internet which are less than 5 MB in size but do not know how to do this. Please help me so that i can add this feature in my squid server. -- Regards Piyush Joshi 9415414376

[squid-users] what to block from the proxy to speed up?

2008-04-03 Thread Rakotomandimby Mihamina
Hi, I want to speedup the websurfing of my LAN. I have a squid running on the gateway, not transparent (people choose to use the proxy or not. I would like to know if there is a list of url patterns to block in order to have a more fluent surfing. For example, I already blocked -