[squid-users] NAT Question

2008-08-08 Thread Thompson, Scott (WA)
Hi all One I would put out there in the hope there might be a better way of doing this Currently we have a PIX that does NAT and PAT translations for the users accessing the internet All HTTP traffic is passed thru the PIX to a Linux box running Squid on Ubuntu 8.04 via a Global Address Pool When t

Re: [squid-users] Squid 2.7 access log and url_rewrite_program

2008-08-08 Thread Henrik Nordstrom
http://www.squid-cache.org/Versions/v2/HEAD/changesets/12328.patch http://www.squid-cache.org/Versions/v2/2.7/changesets/12329.patch Regards Henrik On fre, 2008-08-08 at 16:07 +1000, Mark Nottingham wrote: > Did the changeset for the new code get into HEAD? > > Cheers, > > On 22/07/2008, at 8:

Re: [squid-users] NAT Question

2008-08-08 Thread Adrian Chadd
I think thats a limitation of the PIX environment. If you've placed the Squid box in a lower security zone then I believe the only way to access it is via a translation rule. Later versions of the ASA software may have different options but I can't at the moment claim to know any better. (I'm or

[squid-users] squid ldap helpers crashing

2008-08-08 Thread [EMAIL PROTECTED]
Dear Squid-Users, I would like just to ask a bit of help regarding squid_ldap_group. I tried with success the helper from commandline about a match between a user and a group and everything works perfectly. Now, using the same set in squid.conf, it shows me in the log that the helpers are cras

[squid-users] compile squid 3.0HEAD Tproxy

2008-08-08 Thread Abdock
Hello, I have patched the kernel and also iptables, but then i compile squid (make) i get the below error. Anything i missed ? make[3]: Leaving directory `/usr/local/software/squid-3.HEAD-20080808/src' make[2]: Leaving directory `/usr/local/software/squid-3.HEAD-20080808/src' make[1

[squid-users] squid_ldap * fina from commandl ine but don´t work from squid!!

2008-08-08 Thread [EMAIL PROTECTED]
Sorry, I don´t wanna bother nobody, but since March I´m working on the pssibility to have squid for the security here at the company. After many problems we got squid working on the server but for sevral reasons, we had to abandone the mswin_check_ad_group cause no flexible for Universal groups

Re: [squid-users] Need help on Client IP address.

2008-08-08 Thread Niladri Mukherjee
The external LDAP authentication will work with TPROXY in Squid 3.0.STABLE8 ? Thankx, Niladri Mukherjee Amos Jeffries <[EMAIL PROTECTED]

[squid-users] geoblock

2008-08-08 Thread Stephen Ryan
Hi, I was hoping to use my squid proxy to watch some live streaming video on the web. Imagine my dismay when I access the stream and found I was 'geo-blocked' :) . Somehow the streaming site site realises my PC is remote, even though my squid proxy is local to the streaming site. Is there a

Re: [squid-users] geoblock

2008-08-08 Thread Leonardo Rodrigues Magalhães
Stephen Ryan escreveu: Hi, I was hoping to use my squid proxy to watch some live streaming video on the web. Imagine my dismay when I access the stream and found I was 'geo-blocked' :) . Somehow the streaming site site realises my PC is remote, even though my squid proxy is local to the str

[squid-users] delay_pool vs rapidshare

2008-08-08 Thread Leandro Oliveira da Silva
Hello all! One of my clients reported today that the internet access was slow and i have delay_pool configured and qos in the linux server. I saw the following in the access.log: 1218206547.680 39373 TCP_MISS/206 13166 GET http://rs319tg2.rapidshare.com/...part02.rar - DIRECT/80.231.128.120

RE: [squid-users] compile squid 3.0HEAD Tproxy

2008-08-08 Thread Abdock
Same error, on make all, even if i do bootstrap.sh before. make[3]: Leaving directory `/usr/local/software/squid-3.HEAD-20080808/src' make[2]: Leaving directory `/usr/local/software/squid-3.HEAD-20080808/src' make[1]: Leaving directory `/usr/local/software/squid-3.HEAD-20080808/src&#

Re: [squid-users] compile squid 3.0HEAD Tproxy

2008-08-08 Thread Amos Jeffries
Abdock wrote: Hello, I have patched the kernel and also iptables, but then i compile squid (make) i get the below error. Anything i missed ? Squid now does automated translation from .PO files. Some of the transition snapshots got broken. configure --without-po2html and download the pre-tr

Re: [squid-users] delay_pool vs rapidshare

2008-08-08 Thread Amos Jeffries
Leandro Oliveira da Silva wrote: Hello all! One of my clients reported today that the internet access was slow and i have delay_pool configured and qos in the linux server. I saw the following in the access.log: 1218206547.680 39373 TCP_MISS/206 13166 GET http://rs319tg2.rapidshare.com/...p

Re: [squid-users] squid ldap helpers crashing

2008-08-08 Thread Amos Jeffries
[EMAIL PROTECTED] wrote: Dear Squid-Users, I would like just to ask a bit of help regarding squid_ldap_group. I tried with success the helper from commandline about a match between a user and a group and everything works perfectly. Now, using the same set in squid.conf, it shows me in the lo

Re: Re: [squid-users] delay_pool vs rapidshare

2008-08-08 Thread Leandro Oliveira da Silva
Hello Amos! Thanks for your response. Bellow is my delay_pool rules. I use 2.7STABLE3 because i used 3.0 and every time I use squid -k reconfigure it increases the memory usage by 396K . So i was recommended to try 2.7 and it's ok now. I was thinking on have a generic solution because if other

[squid-users] Architecture advice

2008-08-08 Thread Rob Williams
After doing some more research, I wonder if I'm approaching the problem I want to solve the right way. I am creating a large-scale website with a large amount (terabytes) of static content. What I need is a way to scale access to my static content. I could do this many ways, but an efficient way

Re: [squid-users] geoblock

2008-08-08 Thread Stephen Ryan
Leonardo Rodrigues Magalhães wrote: Stephen Ryan escreveu: Hi, I was hoping to use my squid proxy to watch some live streaming video on the web. Imagine my dismay when I access the stream and found I was 'geo-blocked' :) . Somehow the streaming site site realises my PC is remote, even thou

Re: [squid-users] Architecture advice

2008-08-08 Thread Adrian Chadd
Of course its been done. You have a few options. For example, see if your LB environment lets you load balance based on requested URL. Adiran 2008/8/9 Rob Williams <[EMAIL PROTECTED]>: > After doing some more research, I wonder if I'm approaching the > problem I want to solve the right way. >

Re: [squid-users] Calling redirect_program only for some users

2008-08-08 Thread Lorenzo Milesi
On Wed, Aug 6, 2008 at 3:20 PM, Adrian Chadd <[EMAIL PROTECTED]> wrote: > Yup: > And it looks like it uses the ACL calls the 'right' way - it may work i had missed that! thank you very much, it works! ciao lorenzo

[squid-users] DNS name lookup tests failed.

2008-08-08 Thread Shaine
Dear Friends In my Fedora core 6 box installed squid-3.0.STABLE8 by it's source in port 8080 and squid-2.6.STABLE13-1.fc6 installed by it's rpm in port 3128. I had to do go for that option according to my requirement. anyway this set-up is working very well. DNS taken form /etc/resolve.conf Bu

Re: [squid-users] geoblock

2008-08-08 Thread Amos Jeffries
Stephen Ryan wrote: Leonardo Rodrigues Magalhães wrote: Stephen Ryan escreveu: Hi, I was hoping to use my squid proxy to watch some live streaming video on the web. Imagine my dismay when I access the stream and found I was 'geo-blocked' :) . Somehow the streaming site site realises my PC

Re: [squid-users] DNS name lookup tests failed.

2008-08-08 Thread Amos Jeffries
Shaine wrote: Dear Friends In my Fedora core 6 box installed squid-3.0.STABLE8 by it's source in port 8080 and squid-2.6.STABLE13-1.fc6 installed by it's rpm in port 3128. I had to do go for that option according to my requirement. anyway this set-up is working very well. DNS taken form /etc/r