Hi there!
I'm new to squid and i'm planning to use it with ncsa authentication
on Fedora 9.
I've installed the squid from rpm and it was runing successully with
default configuration (without any changes). But when i try to change
the configuration to use ncsa authentication it denied all access f
Hello,
i´m having problems to setup wccp with squid and freebsd,
my setup:
router:
!
!
ip wccp web-cache
interface Loopback0
ip address 10.254.254.2 255.255.255.255
!
interface FastEthernet0/0/0
description *** lan to clients ***
ip address 189.x.x.1 255.255.255.0
ip wccp web-cache redire
On ons, 2008-07-16 at 20:37 -0400, jason bronson wrote:
> Images wont use the /loginuat/ like the rest? weird?
Check your HTML.
Regards
Henrik
On ons, 2008-07-16 at 18:36 -0700, Ryan Raymond wrote:
> Hi Henrik
>
> Had found that squid restarts frequently when using L4 switch, any
> experiences
> about it ?
What's said in cache.log?
Regards
Henrik
On 15.07.08 23:46, Pablo García wrote:
> You want to balance your squid cache farm, using a URLHASH algorithm,
> to increase the hit ratio, that would be L7.
and if you proxy https, you should use something like sourcehash
(or not to proxy at all).
This may be also requirement for some sites that
On 16.07.08 13:20, Rhino wrote:
> Have Squid2.7STABLE1 running on Debian Linux box with 4 278 GB drives
> allotted for caching.
> System has 32 gig RAM, and serves approx. 10k users.
> Seeking input as to the most effective config options on this system in
> order to reduce latency
> and maximize
Abdessamad BARAKAT wrote:
Hi people,
Nobody for give me a feedback about this feature ( ntlm auth pass
through) ?
You know as much about this as most here. It don't work.
I'm no expert myself but I suspect the reason goes something like this:
(wild guess)
NTLM is a sub-band authenticatio
Geetha_Priya wrote:
Thanks for your response. I do have squid source code with me. The src
directory has bunch of C files. Cache_mngr.c, ipcache.c and so on, would it be
possible to nail down a few files which would possibly talk about squid's
techniques for caching so I can look into those.
Valter Brazzini wrote:
Hi everybody,
I use SQUID 2.6.STABLE3 on a Fedora Linux Core 2. My Squid uses squidGuard
to filter the url.
It works fine for every site except one.
This site is a bank site on https and it's used by my organization to signed
digitally on-line some documents.
The office
Robert V. Coward wrote:
Hmmm looks like I'll haev to find a kernel patch:
[EMAIL PROTECTED] squid-3.HEAD-20080716]# iptables -t tproxy -A PREROUTING -i
eth0 -p tcp -m tcp --dport 80
iptables v1.4.1.1: can't initialize iptables table `tproxy': Table does not
exist (do you need to insmod?)
Perha
Matus UHLAR - fantomas wrote:
On 16.07.08 13:20, Rhino wrote:
Have Squid2.7STABLE1 running on Debian Linux box with 4 278 GB drives
allotted for caching.
System has 32 gig RAM, and serves approx. 10k users.
Seeking input as to the most effective config options on this system in
order to reduce
Amos,
I've never been able to get NTLM pass thru to work with squid, I'm guessing
because of the double hop issue. Kerberos, on the other hand, works perfectly
once you've set up all the service principle names etc and is also much more
secure. If you can get Kerberos working between the client
Rich West wrote:
We have a rather disjointed network, primarily due to the way the
company works. As a result, not every one of our users is currently
logged in to the Windows domain.
However, we have squid acting as a proxy for everyone's web browsing
(wpad & etc), and our users don't know the
Hi All
By Default Squid supports only Standard HTTP request methods. For Squid
to support non-standard HTTP methods we need to add them explicitly in
squid.conf file for SQUID to allow these requests. Why does SQUID blocks
the unknown HTTP methods and why it doesn't just pass them on?
Is there a
Ok, thank you
-Messaggio originale-
Da: Amos Jeffries [mailto:[EMAIL PROTECTED]
Inviato: giovedì 17 luglio 2008 12:28
A: [EMAIL PROTECTED]
Cc: squid-users@squid-cache.org
Oggetto: Re: [squid-users] Squid GET and POST problem
Valter Brazzini wrote:
> Hi everybody,
>
> I use SQUID 2.6.STA
>
>Rich West wrote:
>>
>> I added NTLM authentication (via winbind back to AD), and that works
>> great. I can see the user names populated in the output. However, I
>> cannot seem to get it to allow traffic through for those
>users that the
>> NTLM authentication fails on.
>>
>> In other wor
Hello All,
We can limit the bandwidth with delay_pools based on users, file type
( .mp3 .flv ) like that.
But I have to limit the bandwidth if the download file size is 10MB.
If less than 10MB files we don't need to restrict the bandwidth.
Can i do this with delay_pools and can anyone give one e
Robert V. Coward wrote:
Yes. It's only needed for TPROXY v2.2. The v4 pieces are fully
integrated into latest netfilter kernel code. If its present in the
kernel Squid-3/HEAD can use it.
Is there a quick way I can determine if v4 is built into my netfilter kernel
code?
I'm not sure. All I kn
[EMAIL PROTECTED] wrote:
Rich West wrote:
I added NTLM authentication (via winbind back to AD), and that works
great. I can see the user names populated in the output. However, I
cannot seem to get it to allow traffic through for those
users that the
NTLM authentication fails on.
In other
Saurabh Agarwal wrote:
Hi All
By Default Squid supports only Standard HTTP request methods. For Squid
to support non-standard HTTP methods we need to add them explicitly in
squid.conf file for SQUID to allow these requests. Why does SQUID blocks
the unknown HTTP methods and why it doesn't just p
Redya Febriyanto wrote:
Hi there!
I'm new to squid and i'm planning to use it with ncsa authentication
on Fedora 9.
I've installed the squid from rpm and it was runing successully with
default configuration (without any changes). But when i try to change
the configuration to use ncsa authenticat
Its in Squid-2.HEAD at the present time - delay_body_max_size
allow|deny ( ..)
Adrian
2008/7/17 sekar it <[EMAIL PROTECTED]>:
> Hello All,
>
> We can limit the bandwidth with delay_pools based on users, file type
> ( .mp3 .flv ) like that.
>
> But I have to limit the bandwidth if the downl
Yup your always on to it.
it was a change from /images/ to ./images/
On Thu, Jul 17, 2008 at 4:39 AM, Henrik Nordstrom
<[EMAIL PROTECTED]> wrote:
> On ons, 2008-07-16 at 20:37 -0400, jason bronson wrote:
>
>> Images wont use the /loginuat/ like the rest? weird?
>
>
> Check your HTML.
>
> Rega
sekar it wrote:
Hello All,
We can limit the bandwidth with delay_pools based on users, file type
( .mp3 .flv ) like that.
But I have to limit the bandwidth if the download file size is 10MB.
If less than 10MB files we don't need to restrict the bandwidth.
Can i do this with delay_pools and can
i am trying to set up a squid but its not asking for authentication.. were am
i going wrong i not able to find out
this is what i am doing
i am using UBUNTU
NIC that i am using is having ip 192.168.7.253
static ip-192.168.7.253
netmask-255.255.255.0
gateway address-192.168.7.254
give my pc a
Richard Hubbell wrote:
--- On Fri, 7/11/08, Rhino <[EMAIL PROTECTED]> wrote:
From: Rhino <[EMAIL PROTECTED]>
Subject: Re: [squid-users] squid in ISP
To: [EMAIL PROTECTED]
Cc: squid-users@squid-cache.org
Date: Friday, July 11, 2008, 6:56 AM
Siu-kin Lam wrote:
Dear all
Any experience using s
Alexandre Correa wrote:
Hello,
i´m having problems to setup wccp with squid and freebsd,
my setup:
router:
!
!
ip wccp web-cache
interface Loopback0
ip address 10.254.254.2 255.255.255.255
!
interface FastEthernet0/0/0
description *** lan to clients ***
ip address 189.x.x.1 255.255.255.0
Thank you very much. That worked.
Have a great day!
-Original Message-
From: Luiz Felipe Ferreira [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 15, 2008 4:32 PM
To: squid-users@squid-cache.org
Subject: Re: [squid-users] ftp error
Hi, newbie! :)
try this: ftp://user:[EMAIL PROTECTED]
L
Are your ipfw rules blocking UDP? If so, you would need to add rules to
allow WCCP's UDP protocol to talk to the router, like this:
ipfw add allow udp from any 2048 to me dst-port 2048
ifpw add allow udp from me 2048 to any dst-port 2048
What does "sockstat | grep squid" show? There should be
ananttickoo wrote:
i am trying to set up a squid but its not asking for authentication.. were am
i going wrong i not able to find out
this is what i am doing
i am using UBUNTU
NIC that i am using is having ip 192.168.7.253
static ip-192.168.7.253
netmask-255.255.255.0
gateway address-192.16
Hi,
sorry, I was a bit busy.
So I did put back the tcp_outgoing_address.
Will I have to use it forever or just for testing?
Does it have to be an IP different than the regular IP?
Again, post a bit long...
squid1: 192.168.17.11 / tcp_ougoing 192.168.17.15
squid2: 192.168.17.12 / tcp_ougoing 192.
Hi,
I wish to configure squid in such a way that The client should be able
to authenticate proxy by Basic/Digest/NTLM. It should accept HTTP and
HTTPS requests on different ports. I am confused about how to enable
both simultaneously. I saw some examples using https_port but I got
none working so
Hi Bill,
Just to keep you up to date, I'm testing with 2.7 Stable 3 and the
behaviour as far as the client goes is identical, however the error in
cache.log has changed to:-
2008/07/17 16:57:22| httpAppendBody: Request not yet fully sent "POST
http://www.domain.com/administrator/index2.php";
Do
Has anyone on the list seen this cttproxy error in squid.cache log
before? I am tryign to figure out if I should be concerned about the
error.
2008/07/16 15:21:20| tproxy ip=10.48.1.3,0x301300a,port=0 ERROR ASSIGN
10.48.1.3 is the IP of a client behind the squid box. The setup is a
CentOS 5.2
Hello Squid world,
Is there a way to craft/construct and send/submit ICP queries as if I were a
sibling? Maybe using Netcat or the like?
--- On Thu, 7/17/08, Amos Jeffries <[EMAIL PROTECTED]> wrote:
> From: Amos Jeffries <[EMAIL PROTECTED]>
> Subject: Re: [squid-users] squid in ISP
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED], "Rhino" <[EMAIL PROTECTED]>,
> squid-users@squid-cache.org
> Date: Thursday, July 17, 2008, 6:26 AM
>
Hi list
I'm new user of mail-list and I hope someone will be able to help me
with the following problem:
I'm using squid-3.0.STABLE2 (non-transparent proxy) and I use a very
minimal configuration (see above my squid.conf).
In my firewall (PFSense) there is a rule granting access from any host
of
Hello,
I va installed squid 2.6 on a machine (openbsd 4.3) , i ve also
installed : jesred 1.2.1
The proxy cache works well. What i want : when a user use for example
google.fr, it replaces gif images with our logo (logo.gif)
Someone can help me please ?
thank's
smime.p7s
Description: S/MIME
ananttickoo wrote:
>
> i am trying to set up a squid but its not asking for authentication.. were
> am i going wrong i not able to find out
> this is what i am doing
>
>
> i am using UBUNTU
>
> NIC that i am using is having ip 192.168.7.253
>
> static ip-192.168.7.253
> netmask-255.255.255
I have been using a custom logformat in squid for sometime (to feed to a custom
AWStats).
The format is:
logformat awstats %>a %ui %un [%{%d/%b/%Y:%H:%M:%S +}tl] "%rm %ru HTTP/%rv"
%Hs %h"
The %tr works fine in squid-2.6.STABLE18. Here is a piece of a log entry:
JTS5RMFRIK8rPVUgpTcwBAD0rBm
Is it true that after you make active directory group changes the squid
service has to be restarted to pick up on the changes?
Thanks,
Zack
Thanks Amos and Joe for your opinion.
I will forget the idea to make this working...
Thanks again for your feedback.
Le 17 juil. 08 à 13:10, Joe Tiedeman a écrit :
Amos,
I've never been able to get NTLM pass thru to work with squid, I'm
guessing because of the double hop issue. Kerberos,
I am running into the standard "Open Source" fear at my local site. Can anyone
name some major companies that use Squid. We are talking enterprise or ISP
here. We currently have about 100,000 users with heavy streaming video use.
Some of the management are afraid Squid will not be able to handle
--- On Thu, 7/17/08, Robert V. Coward <[EMAIL PROTECTED]> wrote:
> From: Robert V. Coward <[EMAIL PROTECTED]>
> Subject: [squid-users] Squid in the Enterpise
> To: squid-users@squid-cache.org
> Date: Thursday, July 17, 2008, 11:51 AM
> I am running into the standard "Open Source" fear
> at my loca
Robert V. Coward escreveu:
I am running into the standard "Open Source" fear at my local site. Can anyone
name some major companies that use Squid. We are talking enterprise or ISP here. We
currently have about 100,000 users with heavy streaming video use. Some of the management
are afraid S
I have two caches in my LAN configured as siblings. Windows Server
2003. Squid 2.7 Stable 3.
One cache requires authentication, and the other not.
when the second one requests some cached site in the first one, it's
prompted for authentication.
can the second cache get a site in the
first cache w
Leonardo Rodrigues Magalhães wrote:
Robert V. Coward escreveu:
I am running into the standard "Open Source" fear at my local site.
Can anyone name some major companies that use Squid. We are talking
enterprise or ISP here. We currently have about 100,000 users with
heavy streaming video use.
Yes, I'm talking to myself. (^:
But I found two links to two perl programs for doing what I want to do.
Let's face it searching is good and all but sometimes search results are
optimized in ways that aren't relevant to us.
I ran across these by chance really.
Here's to hoping someone else might
Not sure if this is a squid or dnsmasq problem, so hope you don't
mind me asking same question in 2 lists.
I'm using squid3 as a transparent proxy by redirecting port 80
in iptables, and dnsmasq as well. This all works fine. But now
I'm trying to utilise the mvps hosts file to block malicious
UR
> I am running into the standard "Open Source" fear at my local
> site.
Ask the fearmongers if they've ever heard of a little piece of software called
BIND, or maybe Apache... Also, you should probably get pricing on commercial
squid support, to let management know that it can be had and how muc
> you should bear in mind that for a cache to be truly effective at
> bandwidth conservation (if that is your goal) it
> needs to be placed close to the users.
Maybe - it depends if you want to save bandwidth on your LAN or WAN/Internet
pipe. AFAIK most organisations are more concerned about WAN
> > Our planned deployment box is a 8-way, 16GB ram, 1TB (6 disks
> > I think) server which will be running RedHat Enterprise Linux.
There's been some recent list discussions about how squid uses CPU - you'd be
much better off with 4 load balanced dual core boxes than one 8 core box. RAM
is che
On Thu, Jul 17, 2008 at 8:15 PM, Adam Carter <[EMAIL PROTECTED]> wrote:
>
>> > Our planned deployment box is a 8-way, 16GB ram, 1TB (6 disks
>> > I think) server which will be running RedHat Enterprise Linux.
>
> There's been some recent list discussions about how squid uses CPU - you'd be
> much
On fre, 2008-07-18 at 01:26 +1200, Amos Jeffries wrote:
> I'll bet it isn't.
> 75 is not even close to half what squid was doing in Y2K. :)
Indeed. more like 1/10..
Regards
Henrik
On tor, 2008-07-17 at 10:33 -0700, Richard Hubbell wrote:
> Are there redhat packages for 2.7?
No, but it's trivial to update the latest 2.6 spec to 2.7 and build a
package.
Regards
Henrik
On ons, 2008-07-16 at 18:31 -0700, Zack Duchene wrote:
> I am having a very hard time getting the group external_acl to work with
> my active directory.
>
> Here is the command that I am using:
>
> external_acl_type InetGroup %LOGIN /usr/lib/squid/squid_ldap_group -R -b
> "dc=ADVANTAGE,dc=com"
Troy Piggins wrote:
Not sure if this is a squid or dnsmasq problem, so hope you don't
mind me asking same question in 2 lists.
I'm using squid3 as a transparent proxy by redirecting port 80
in iptables, and dnsmasq as well. This all works fine. But now
I'm trying to utilise the mvps hosts file
On tor, 2008-07-17 at 22:29 +1200, Amos Jeffries wrote:
> Robert V. Coward wrote:
> > Hmmm looks like I'll haev to find a kernel patch:
> >
> > [EMAIL PROTECTED] squid-3.HEAD-20080716]# iptables -t tproxy -A PREROUTING
> > -i eth0 -p tcp -m tcp --dport 80
> > iptables v1.4.1.1: can't initialize i
ananttickoo wrote:
ananttickoo wrote:
i am trying to set up a squid but its not asking for authentication.. were
am i going wrong i not able to find out
this is what i am doing
i am using UBUNTU
NIC that i am using is having ip 192.168.7.253
static ip-192.168.7.253
netmask-255.255.255.0
On tor, 2008-07-17 at 08:17 -0700, John Doe wrote:
> So I did put back the tcp_outgoing_address.
> Will I have to use it forever or just for testing?
You should have it for as long as you are running multiple instances on
the same server..
> Does it have to be an IP different than the regular IP?
Karandeep Malik wrote:
Hi,
I wish to configure squid in such a way that The client should be able
to authenticate proxy by Basic/Digest/NTLM. It should accept HTTP and
HTTPS requests on different ports. I am confused about how to enable
both simultaneously. I saw some examples using https_port
On tor, 2008-07-17 at 09:55 -0700, Richard Hubbell wrote:
> Is there a way to craft/construct and send/submit ICP queries as if I were a
> sibling? Maybe using Netcat or the like?
There is an Perl ICP library in CPAN, with a sample sibling answering
ICP requests...
Regards
Henrik
* Amos Jeffries wrote :
> Troy Piggins wrote:
>> Not sure if this is a squid or dnsmasq problem, so hope you don't
>> mind me asking same question in 2 lists.
>>
>> I'm using squid3 as a transparent proxy by redirecting port 80
>> in iptables, and dnsmasq as well. This all works fine. But now
>>
On tor, 2008-07-17 at 11:43 -0700, Zack Duchene wrote:
> Is it true that after you make active directory group changes the squid
> service has to be restarted to pick up on the changes?
You should only need to wait the ttl time set in external_acl_type.
Regards
Henrik
Wesley MOUEDINE ASSABY wrote:
Hello,
I va installed squid 2.6 on a machine (openbsd 4.3) , i ve also
installed : jesred 1.2.1
The proxy cache works well. What i want : when a user use for example
google.fr, it replaces gif images with our logo (logo.gif)
Someone can help me please ?
Contact
On tor, 2008-07-17 at 16:54 -0500, Felix Lazaro Carbonell Carbonell
wrote:
> I have two caches in my LAN configured as siblings. Windows Server
> 2003. Squid 2.7 Stable 3.
> One cache requires authentication, and the other not.
>
> when the second one requests some cached site in the first one, it
BARRY J BLUMENFELD wrote:
I have been using a custom logformat in squid for sometime (to feed to a custom
AWStats).
The format is:
logformat awstats %>a %ui %un [%{%d/%b/%Y:%H:%M:%S +}tl] "%rm %ru HTTP/%rv" %Hs %h"
The %tr works fine in squid-2.6.STABLE18. Here is a piece of a log entry:
Zack Duchene wrote:
Is it true that after you make active directory group changes the squid
service has to be restarted to pick up on the changes?
Not if squid is configured with sensible auth timeouts. The credentials
are cached for a short while sometimes, but usually expire shortly and
ne
Henrik Nordstrom wrote:
On tor, 2008-07-17 at 22:29 +1200, Amos Jeffries wrote:
Robert V. Coward wrote:
Hmmm looks like I'll haev to find a kernel patch:
[EMAIL PROTECTED] squid-3.HEAD-20080716]# iptables -t tproxy -A PREROUTING -i
eth0 -p tcp -m tcp --dport 80
iptables v1.4.1.1: can't initia
Amos Jeffries-2 wrote:
>
> ananttickoo wrote:
>>
>>
>> ananttickoo wrote:
>>> i am trying to set up a squid but its not asking for authentication..
>>> were
>>> am i going wrong i not able to find out
>>> this is what i am doing
>>>
>>>
>>> i am using UBUNTU
>>>
>>> NIC that i am using is ha
Troy Piggins wrote:
* Amos Jeffries wrote :
Troy Piggins wrote:
Not sure if this is a squid or dnsmasq problem, so hope you don't
mind me asking same question in 2 lists.
I'm using squid3 as a transparent proxy by redirecting port 80
in iptables, and dnsmasq as well. This all works fine. But
ananttickoo wrote:
Amos Jeffries-2 wrote:
ananttickoo wrote:
ananttickoo wrote:
i am trying to set up a squid but its not asking for authentication..
were
am i going wrong i not able to find out
this is what i am doing
i am using UBUNTU
NIC that i am using is having ip 192.168.7.253
s
> sorry i am a new to this .. if only you could explain. or just give me some
> link were i can get knowladge abt this
Pls click below Urls
http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#head-7cfff26a112769fccff8f4d507961cd27ebe5eac
http://www.squid-cache.org/mail-archive/squid-users
* Amos Jeffries wrote :
> Troy Piggins wrote:
>> * Amos Jeffries wrote :
>>> Troy Piggins wrote:
Not sure if this is a squid or dnsmasq problem, so hope you don't
mind me asking same question in 2 lists.
I'm using squid3 as a transparent proxy by redirecting port 80
in ipta
Good to know this. Thanks Amos
Regards,
Saurabh
-Original Message-
From: Amos Jeffries [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 17, 2008 6:25 PM
To: Saurabh Agarwal
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] why does squid have extension_methods to be
configurable?
The tool to use is polygraph, but the workloads may need updating to
match currently seen traffic patterns.
The tools are there - whats needed is equipment, time and manpower.
The project is lacking all of the above.
Adrian
2008/7/18 Richard Hubbell <[EMAIL PROTECTED]>:
> --- On Thu, 7/17/08,
76 matches
Mail list logo
