Re: [squid-users] Block file upload

2008-04-05 Thread Amos Jeffries
[EMAIL PROTECTED] wrote: Is it possible to stop people from uploading files using squid ie is there some way to do an outbound mime type acl ? I have added these two lines to my squid.conf : acl fileupload req_mime_type -i ^multipart/form-data$ http_access deny fileupload That is the correct

RE: [squid-users] client ip's

2008-04-05 Thread Jorge Bastos
People, I updated to last STABLE-4 on debian, but this still happens this way. What can I do more? Jorge > -Original Message- > From: Jorge Bastos [mailto:[EMAIL PROTECTED] > Sent: quinta-feira, 3 de Abril de 2008 9:56 > To: 'Amos Jeffries' > Cc: 'Henrik Nordstrom'; sq

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-05 Thread Terry Dobbs
The internet line is DSL, and does use a username/password (PPoE). However, on the actual DSL router (provided by ISP) I don't see any MTU options. I will have to look into ip tables. I can add static routes via the interface card which are permanent, however doing it this way doesn't give me any

RE: [squid-users] client ip's

2008-04-05 Thread Henrik Nordstrom
lör 2008-04-05 klockan 14:24 +0100 skrev Jorge Bastos: > I updated to last STABLE-4 on debian, but this still happens this way. > What can I do more? Good question. One thing you can try is to downgrade to Squid-2.6. If that shows the same symptoms the problem is not within Squid but most likely

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-05 Thread Henrik Nordstrom
lör 2008-04-05 klockan 10:11 -0400 skrev Terry Dobbs: > The internet line is DSL, and does use a username/password (PPoE). > However, on the actual DSL router (provided by ISP) I don't see any MTU > options. PPPoE means a lower MTU than the internet default of 1500, so any sites not capable of pe

Re: [squid-users] transparent tproxy bridging

2008-04-05 Thread Henrik Nordstrom
tor 2008-04-03 klockan 18:53 +0300 skrev Abdock: > Anybody doing transparent tproxy and bridging on squid 2.6 or 3.1 ? > > Can you please share how to ? on centos 1. Configure the box as a bridge. 2. Use iptables to intercept the traffic as per the Squid FAQ section on transparent interception

Re: [squid-users] No userid in access.log

2008-04-05 Thread Henrik Nordstrom
fre 2008-04-04 klockan 10:56 +0800 skrev CC Ngu: > When I use Login=PASS in cache_peer option (i.e. pass the authentication > to the parent), there is no userid information in the access.log, is it > possible to show the userid in the local squid's access.log? You need to tech Squid how to sniff t

Re: [squid-users] ICAP: fake user and new icap header X-Authenticated-Groups

2008-04-05 Thread Henrik Nordstrom
fre 2008-04-04 klockan 14:27 +0200 skrev Arno _: > Any actual way of sending a fake information, or should I crate a new icap-= > fake-client-username and icap-fake-client-group on the icap config part of = > squid.conf ? Sounds like an interesting addition. > Anyone interested or it will be jus

Re: [squid-users] Transparent Proxy and iTunes/WinAmp

2008-04-05 Thread Henrik Nordstrom
lör 2008-04-05 klockan 00:49 -0400 skrev Adam Goldberg: > When I try to connect via my browser, this is what I see: > * Invalid Response What is said in cache.log? Regards Henrik

RE: [squid-users] client ip's

2008-04-05 Thread Jorge Bastos
This already worked with some of the 3.0 versions. Gonna try to play with my iptables rules and let you guys know. > -Original Message- > From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] > Sent: sábado, 5 de Abril de 2008 19:38 > To: Jorge Bastos > Cc: 'Amos Jeffries'; squid-users@squid

[squid-users] problem with transparent and invalid URLs

2008-04-05 Thread Leonardo Rodrigues Magalhães
Hello Guys, i'm having problems with the following scenario: Linux (Fedora 8) with kernel 2.6.24.3 squid 3.0-stable4 correctly compiled with --enable-linux-netfilter http_port 8080 transparent in squid.conf DNAT rule pointing tcp/80 traffic to squid port 8080 transpar

Re: [squid-users] problem with transparent and invalid URLs

2008-04-05 Thread Henrik Nordstrom
lör 2008-04-05 klockan 18:40 -0300 skrev Leonardo Rodrigues Magalhães: > if i manually point squid on firefox/IE proxy configurations, it > works. But if i let the connection be intercepted, then i only get > 'Invalid URL' errors. That's because your Squid doesn't realize the connection was

Re: [squid-users] cache "big" images ans use it on the LAN

2008-04-05 Thread Henrik Nordstrom
tor 2008-04-03 klockan 08:11 +0300 skrev Rakotomandimby Mihamina: > > An example URL of a object where you see this would help.. > > http://svn.infogerance.us for example. That's a 404 not found today. > I already provided that URL and its cacheability sounded OK. > > Is there a possibility

Re: [squid-users] problem with transparent and invalid URLs

2008-04-05 Thread Leonardo Rodrigues Magalhães
Henrik Nordstrom escreveu: lör 2008-04-05 klockan 18:40 -0300 skrev Leonardo Rodrigues Magalhães: if i manually point squid on firefox/IE proxy configurations, it works. But if i let the connection be intercepted, then i only get 'Invalid URL' errors. That's because your Squid

Re: [squid-users] problem with transparent and invalid URLs

2008-04-05 Thread Henrik Nordstrom
lör 2008-04-05 klockan 21:53 -0300 skrev Leonardo Rodrigues Magalhães: > The interesting part is that i'm actually migrating from 2.5 > directly to 3.0, and that exact scenario works just fine on 2.5-Stable14 > ! Squid 2.5 Stable 14 handles this scenario with no problems at all, > even inter

[squid-users] Request processing question

2008-04-05 Thread David Lawson
I've got a couple questions about how Squid chooses to fulfill a request. Basically, I've got a cache with a number of sibling peers defined. Some of the time it makes an ICP query to those peers and then does everything it should do, takes the first hit, makes the HTTP request for the ob