[squid-users] Anti-Virus Exclusions

The proxy server running squid will soon be getting a real-time anti-virus scanner on it. Are there any exclusions which need to be configured in regards to squid? Paul Cocker TNT Post is the trading name for TNT Post UK Ltd (company number: 04417047), TNT Post (Doordrop Media) Ltd (00613278)

[squid-users] block internet access from same users on squid with ntlm authentication

Good morning, I have configured squid -2.5.STABLE3-6 on Rh3 ES Squid is configured to use ntlm authentication To an Active Directoy Server in such to give internet access only to authenticated users,it works optimally all. I would know how to block a single user's internet access from different i

[squid-users] cachemgr - how to read the histogram page ?

Hi, How to read and interpret the cachemgr's "Full History Count" page ? Ionel -- Ionel GARDAIS System-Network Engineer begin:vcard fn:Ionel GARDAIS n:GARDAIS;Ionel org:Tech'Advantage;IT adr:;;1 Rue Isabey;Rueil Malmaison;FR;92500;FR email;internet:[EMAIL PROTECTED] tel;work:+33(0)147088131 te

Re: [squid-users] block internet access from same users on squid with ntlm authentication

On fre, 2008-06-13 at 11:12 +0200, [EMAIL PROTECTED] wrote: > I would know how to block a single user's internet access from different > ip at the same time. See the max_user_ip acl acl more_than_one_ip max_user_ip -s 1 http_access deny more_than_one_ip Regards Henrik signature.asc Descripti

[squid-users] authorization with openldap

Is there any way to do the authorization with openldap authentication so that people can only access those site defined by Administrator of squid server.. -- Regards Piyush Joshi 9415414376

[squid-users] How can I turn off TCP_DENIED/403 and 407 logging?

I use squid since 1.1. Now it 2.6s17, on linux, of course! Since 1.1, squid always runs in Proxy_Authen mode. Now the 2.6s17 serves about 1,200 clients . There's new clients, around 100 every month (the old one just fade away). All clients (and software) have to log in to Squid Proxy before a

Re: [squid-users] Anti-Virus Exclusions

Hi Paul, At 10.23 13/06/2008, Paul Cocker wrote: The proxy server running squid will soon be getting a real-time anti-virus scanner on it. Are there any exclusions which need to be configured in regards to squid? Exclude the cache directory (and subfolders) is really a good idea. This is bette

Re: [squid-users] authorization with openldap

On fre, 2008-06-13 at 17:18 +0530, piyush joshi wrote: > Is there any way to do the authorization with openldap authentication > so that people can only access those site defined by Administrator of > squid server.. Yes, squid_ldap_group can be used for this purpose. Behinds it's "group" name is

Re: [squid-users] How can I turn off TCP_DENIED/403 and 407 logging?

On fre, 2008-06-13 at 18:56 +0700, docdiz wrote: > My access.log size is 400-1,200 MB everyday (yes, I rotate it > everyday at 23:55pm) > Worse, 3/4 of access.log is just TCP_DENIED/403 and TCP_DENIED/407. > > I have to pipe it to grep -v after every rotation. But ... wrote 3/4 > gigabyte of us

[squid-users] Remote access acls

I'm trying to provide an externally available proxy to our employees. This way they can have the same basic protection when traveling that they get when they're inside our corporate walls. What acls or rules do I need to be looking at? I'm a newbie and just trying to keep my job. Thank you in

Re: [squid-users] Remote access acls

[EMAIL PROTECTED] wrote: I'm trying to provide an externally available proxy to our employees. This way they can have the same basic protection when traveling that they get when they're inside our corporate walls. What acls or rules do I need to be looking at? I'm a newbie and just trying to

Re: [squid-users] Remote access acls

-- Original message -- From: Amos Jeffries <[EMAIL PROTECTED]> > [EMAIL PROTECTED] wrote: > > I'm trying to provide an externally available proxy to our employees. This > > way > they can have the same basic protection when traveling that they get when > they're

Re: [squid-users] Remote access acls

I use simple NCSA. Then add small password file to NCSA directory. This password file is changed EVERY day, at 08:00am and 17:00pm. User have to call in to get the username/password of that day before they're able to use this office's squid (another way to audit who's working or not :-D) # heh!

Re: [squid-users] Remote access acls

[EMAIL PROTECTED] wrote: -- Original message -- From: Amos Jeffries <[EMAIL PROTECTED]> [EMAIL PROTECTED] wrote: I'm trying to provide an externally available proxy to our employees. This way they can have the same basic protection when traveling that they get w

[squid-users] Squid + AD Auth - popup

Hi all I will migrate my proxy infrastructure to use Squid. I´m doing a LDAP (MS AD) authentication without problems but, i´m in trouble to authenticate my users against MS AD without web popup.(asking for user and password) I need to do it as a "transparent mode" for authentication could you

Re: [squid-users] Squid + AD Auth - popup

Alexandre augusto escreveu: Hi all I will migrate my proxy infrastructure to use Squid. I´m doing a LDAP (MS AD) authentication without problems but, i´m in trouble to authenticate my users against MS AD without web popup.(asking for user and password) I need to do it as a "transparent mode

RE: [squid-users] Squid + AD Auth - popup

Alexandre, Poderia enviar "uma parte" do log para verificarmos o que acontece. (PS: no arquivo de log, envie apenas a parte que trata-se da popup). Fabiano Cese Arantes CLE9 - Certified Linux Engineer Suse 9 CLP9 - Certified Linux Professional Suse 9 P An

[squid-users] Where are the ircache.net cgi for creating graphs?

Hello squid world, I was looking for the scripts that create the graphs on ircache.net, I found everything but the cgi scripts. Does anyone know where to get them? Or maybe there's another package that's preferred to make use of RRD for Squid?

Re: [squid-users] Remote access acls

I would recommend you use digest instead of basic. That way the password is not transmitted in plain text. almost the same setup as basic, except for the auth_param settings. auth_param digest program /usr/local/squid/libexec/digest_pw_auth /usr/local/squid/etc/registered.htdigest and change th

Re: [squid-users] Where are the ircache.net cgi for creating graphs?

On fre, 2008-06-13 at 14:53 -0700, Richard Hubbell wrote: > Hello squid world, > > I was looking for the scripts that create the graphs on ircache.net, I found > everything but the cgi scripts. Does anyone know where to get them? > > Or maybe there's another package that's preferred to make use

[squid-users] Squid + AD (LDAP)

Hi All, I was wrong when said that my authentication was working in last email... I´m trying work Squid with MS AD So this is my squid.conf entry about LDAP auth: auth_param basic program /usr/local/squid/libexec/squid_ldap_auth -R -b "CN=user_admin,OU=ABC,DC=abc,DC=com,DC=br" -D "CN=user_adm

[squid-users] Debug Problem

Dear all , this is , in fact two question , any idea on cause of this : #dmesg | grep -i squid3 squid3[27598]: segfault at eip 0810f3e9 esp bfaa73f4 error 4 squid3[32012]: segfault at eip 0810f3e9 esp bfeb7804 error 4 squid3[32042]: segfault at eip 0810f3e9 esp bfcdf63

[squid-users] Urgent Help Needed: Any suggestion on CPU utiliztion increased from 73% to 97.5 after cache_mem increased from 4 GB to 8 GB

Hey , guys, Recently I did some interesting performance testing . I used memory only for the squid configuration . when I set the the cache_mem to following value , I got incresed CPU utilization . cache_mem 4096 MB, cpu :73% (the value from top or squidclient mgr:info) cache_mem 6144 MB , c