Re: [squid-users] Zero Sized Reply / Invalid response

2008-08-15 Thread Amos Jeffries
Pedro Mansito Pérez wrote: Hello, Our Company is using Squid 2.6.STABLE14 on a Slackware 12.0 box. A few weeks ago we began to have errors accessing some web pages, but not all, on a supplier web site. If we do not use a proxy server we can access those web pages; we have tested it with Safar

Re: [squid-users] Replacing an image based on the refer...

2008-08-15 Thread Amos Jeffries
John Doe wrote: You are much better off doing this with Apache's rewrite, if that happens to be your http server. Sadly Squid is pretty awkward for rewriting purposes. It's not Squid at fault. It's the HTTP standard and all compliant softwares do not react well when people playing games with t

Re: [squid-users] Cached objects to bypass bandwidth QoS

2008-08-15 Thread Amos Jeffries
Dhyanesh Ramaiya wrote: Greetings, I have implemented Squid on my network. What I want to do is bypass the bandwidth control enforced by Allot NetEnforcer or PacketShaper for cached objects. Please let me know if there is a possibility to mark cached objects so that a relevant rule can be setup

Re: [squid-users] Squid / HTTPS / Java

2008-08-15 Thread Amos Jeffries
Thompson, Scott (WA) wrote: Hi all We had this problem with Squid 2.5 and I am seeing it also with 2.6 which I was hoping would fix it Every time we try to access a site using HTTPS that uses Java we keep getting proxy authentication popups The specific site in question is gotomeeting.com when yo

Re: [squid-users] Problems with google ...

2008-08-15 Thread Amos Jeffries
Chris Robertson wrote: Ramiro Sabastta wrote: Hi !!! I've installed a Squid box transparent mode (3STABLE7) with Debian. A router send all the request to the port 80 to my squid box on 3128 port. I've problems with google pages. Sometimes when somedy try to sail in google the result is a http:

Re: [squid-users] Delay Pools question

2008-08-15 Thread Amos Jeffries
Chris Robertson wrote: Being able to name the pools would be a nice feature, as would giving the delay_classes names instead of numbers... Hmm, very nice idea. filed it in bugzilla. :-) Amos -- Please use Squid 2.7.STABLE3 or 3.0.STABLE8

Re: [squid-users] refresh_pattern questions

2008-08-15 Thread Amos Jeffries
Ritter, Nicholas wrote: Can someone answer these questions for me, I have read some conflicting information. 1) Does the refresh_pattern work when squid is in transparent mode? Yes. It's not related to the request handling, only to the reply object headers. 2) Is there a way to know when

Re: [squid-users] Squid3 (cvs) traffic https on proxy transparent

2008-08-15 Thread Amos Jeffries
Márcio Luciano Donada wrote: Hi list, I installed the squid by cvs (compiling the code) with the option --enable-ssl to use the SslBump aiming to direct the traffic https (443) for the squid, but the version on CVS (squid-cache.org) is not being transparent proxy. My question is whether this ve

[squid-users] Syntax and backslash problem

2008-08-15 Thread [EMAIL PROTECTED]
Hi all, I need urgently help cause I have a problem with the syntax of squid_ldap_group! I have this lines: ../squid_ldap_group -v "3" -s "sub" -b "dc=pippo, dc=org" -f "(&(objectClass=person)(sAMAccountName=% v)(memberOf=cn=%a,ou=groups,ou=Users F\+E etc.. Like you can see I have thi

Re: [squid-users] Problems with google ...

2008-08-15 Thread Matus UHLAR - fantomas
On 13.08.08 19:23, Ramiro Sabastta wrote: > I've installed a Squid box transparent mode (3STABLE7) with Debian. A > router send all the request to the port 80 to my squid box on 3128 > port. > > I've problems with google pages. Sometimes when somedy try to sail in > google the result is a http://w

[squid-users] 2 Problems

2008-08-15 Thread Dean, Barry
Hi, My setup: Sun X4200 Server 8GB RAM, Sun IPF 4.1.9 (592), Solaris 10 x86 Generic_137112-02 Problem 1: I compiled SQUID 3.0_STABLE5 no problem on Solaris 10 Generic_120012-14. Which is the one we are using. But since patching to Generic_137112-02 neither 3.0_STABLE5 or 3.0_STABLE8 will com

Re: [squid-users] https with squid

2008-08-15 Thread Márcio Luciano Donada
Chris Robertson escreveu: > What you are attempting is called a man-in-the-middle attack. > Transparent interception of HTTPS traffic is (by design) not possible. > Squid 3HEAD includes a feature called sslbump > (http://wiki.squid-cache.org/Features/SslBump) that will facilitate the > intercept

[squid-users] Denial of Service against serverfarm using Squid in Accel/LoadBalancer mode

2008-08-15 Thread Stefan Hartmann
Hello, we are running squid as accelerator and load balancer in front of a web server farm. the problem is that the main content of the farm is badly cacheable (some type of search engine, so HITs are mainly on pictures etc. but on content), so much of the traffic is hitting the web servers

[squid-users] WARNING: comm_open: setsockopt(IP_TRANSPARENT) not supported on this platform

2008-08-15 Thread Ted Kaczmarek
With squid-3.HEAD-20080814 I am seeing this message. WARNING: comm_open: setsockopt(IP_TRANSPARENT) not supported on this platform It does not matter if I configure wit or without --enable-tproxy and or --enable-linux-netfilter. What is the correct option for Tproxy4 support? Going throug

Re: [squid-users] WARNING: comm_open: setsockopt(IP_TRANSPARENT) not supported on this platform

2008-08-15 Thread Amos Jeffries
Ted Kaczmarek wrote: With squid-3.HEAD-20080814 I am seeing this message. WARNING: comm_open: setsockopt(IP_TRANSPARENT) not supported on this platform It does not matter if I configure wit or without --enable-tproxy and or --enable-linux-netfilter. What is the correct option for Tproxy4 s

Re: [squid-users] 2 Problems

2008-08-15 Thread Amos Jeffries
Dean, Barry wrote: Hi, My setup: Sun X4200 Server 8GB RAM, Sun IPF 4.1.9 (592), Solaris 10 x86 Generic_137112-02 Problem 1: I compiled SQUID 3.0_STABLE5 no problem on Solaris 10 Generic_120012-14. Which is the one we are using. But since patching to Generic_137112-02 neither 3.0_STABLE5 or

RE: [squid-users] 2 Problems

2008-08-15 Thread Dean, Barry
OK. I have bodged up the IPInterception.cc file and add the line from /usr/include/sys/types.h to get it to compile. Mu change to add the error string has resulted in the error coming out as: clientNatLookup: NAT lookup failed: ioctl(SIOCGNATL): (22) Invalid argument I think we have a smoking g

Re: [squid-users] Problem with authentication to IIS site for users behind squid proxy

2008-08-15 Thread Leonardo Rodrigues Magalhães
i must confess that even after reading several threads about 2.7 x 3.0 versions, i still cant understand why 2.7 has some features that 3.0 dont ! we are used to think that newer versions have all features that previous versions had, plus bug fixes and plus new features i al

Re: [squid-users] Problem with authentication to IIS site for users behind squid proxy

2008-08-15 Thread Adrian Chadd
Thats because the version numbers are misleading. Squid-2 and Squid-3 are different "paths", you can say. They probably would benefit from being called different names, but thats a different story. Squid-2 has seen continued development and will see continued development whilst people are using i

Re: [squid-users] Problem with authentication to IIS site for users behind squid proxy

2008-08-15 Thread Leonardo Rodrigues Magalhães
Adrian Chadd escreveu: Thats because the version numbers are misleading. Squid-2 and Squid-3 are different "paths", you can say. They probably would benefit from being called different names, but thats a different story. Squid-2 has seen continued development and will see continued developmen

Re: [squid-users] https with squid

2008-08-15 Thread Guy Helmer
Márcio Luciano Donada wrote: Chris Robertson escreveu: What you are attempting is called a man-in-the-middle attack. Transparent interception of HTTPS traffic is (by design) not possible. Squid 3HEAD includes a feature called sslbump (http://wiki.squid-cache.org/Features/SslBump) that will

Re: [squid-users] https with squid

2008-08-15 Thread Márcio Luciano Donada
Márcio Luciano Donada escreveu: > Guy Helmer escreveu: > >>> I am also conducting tests with the sslbump but driving in firewall >>> (iptables) https connection to the squid. I am using in squid.conf as >>> follows: >>> >>> http_port 3128 transparent sslBump cert = / etc/squid3/ssl/cacert.pem >>>

[squid-users] two methods of authentication

2008-08-15 Thread Luis Enrique
hi! Is possible to use two passwd files for autentication in squid, for example I need to separate the administrators of the normal users. thank

[squid-users] Setting up squid

2008-08-15 Thread mr.n
Hello, I am a fairly new squid user/administrator and i have difficulties implementing squid in even a testing environment. The limitations that i require in order to make squid work are that the network must user transparent proxying. I will be using squid as part of Ubuntu server operating sys

[squid-users] reverse proxy and single sign-on

2008-08-15 Thread juan romero
Hello users First I want to apologize if any of my questions has been asked already. I have two web applications running on my lan, every application has a main page with a box where you introduce an user and a password in order to log in that application, The applications are company made so I

[squid-users] Re: Delay Pools question

2008-08-15 Thread Chuck Kollars
> ... what the number after the slash in delay_parameters represents. [?] > [for example what means:] delay_parameters 2 64000/64000 1/1000 You can think of the two numbers separated by a slash as the "average rate" and the "peak burst size". In other words the first number is "how much

Re: [squid-users] https with squid

2008-08-15 Thread Márcio Luciano Donada
Guy Helmer escreveu: > Márcio Luciano Donada wrote: >> Guy Helmer escreveu: >> >> I am also conducting tests with the sslbump but driving in firewall (iptables) https connection to the squid. I am using in squid.conf as follows: http_port 3128 transparent sslBump cert = /

[squid-users] squid_session and authentication schema

2008-08-15 Thread Leonardo Rodrigues Magalhães
Hello Guys, I'm trying to setup squid_session exactly like squid_session.8 manpage, just for testing it. After putting example configuration on squid.conf, i got the following error during reconfigure: 2008/08/15 14:50:55| Can't use proxy auth because no authentication schemes are ful

Re: [squid-users] WARNING: comm_open: setsockopt(IP_TRANSPARENT) not supported on this platform

2008-08-15 Thread Ted Kaczmarek
On Aug 15, 2008, at 9:34 AM, Amos Jeffries wrote: Ted Kaczmarek wrote: With squid-3.HEAD-20080814 I am seeing this message. WARNING: comm_open: setsockopt(IP_TRANSPARENT) not supported on this platform It does not matter if I configure wit or without --enable-tproxy and or --enable-linux-n

[squid-users] sarg reports

2008-08-15 Thread Luis Enrique
hi! how I can see the addresses ip and the names of users at the same time in the reports of the squid??

Re: [squid-users] two methods of authentication

2008-08-15 Thread Chris Robertson
Luis Enrique wrote: hi! Is possible to use two passwd files for autentication in squid, for example I need to separate the administrators of the normal users. thank Sure thing. Just write your own authenticator, and you can do pretty much whatever you like. All it needs to do is loop en

Re: [squid-users] Setting up squid

2008-08-15 Thread Chris Robertson
mr.n wrote: Hello, I am a fairly new squid user/administrator and i have difficulties implementing squid in even a testing environment. The limitations that i require in order to make squid work are that the network must user transparent proxying. I will be using squid as part of Ubuntu server

Re: [squid-users] squid_session and authentication schema

2008-08-15 Thread Chris Robertson
Leonardo Rodrigues Magalhães wrote: Hello Guys, I'm trying to setup squid_session exactly like squid_session.8 manpage, just for testing it. After putting example configuration on squid.conf, i got the following error during reconfigure: 2008/08/15 14:50:55| Can't use proxy auth becau

Re: [squid-users] reverse proxy and single sign-on

2008-08-15 Thread Chris Robertson
juan romero wrote: Hello users First I want to apologize if any of my questions has been asked already. I have two web applications running on my lan, every application has a main page with a box where you introduce an user and a password in order to log in that application, The applications

Re: [squid-users] 2 Problems

2008-08-15 Thread Amos Jeffries
Dean, Barry wrote: OK. I have bodged up the IPInterception.cc file and add the line from /usr/include/sys/types.h to get it to compile. Mu change to add the error string has resulted in the error coming out as: clientNatLookup: NAT lookup failed: ioctl(SIOCGNATL): (22) Invalid argument I thin

Re: [squid-users] WARNING: comm_open: setsockopt(IP_TRANSPARENT) not supported on this platform

2008-08-15 Thread Amos Jeffries
Ted Kaczmarek wrote: On Aug 15, 2008, at 9:34 AM, Amos Jeffries wrote: Ted Kaczmarek wrote: With squid-3.HEAD-20080814 I am seeing this message. WARNING: comm_open: setsockopt(IP_TRANSPARENT) not supported on this platform It does not matter if I configure wit or without --enable-tproxy an

Re: [squid-users] reverse proxy and single sign-on

2008-08-15 Thread Amos Jeffries
Chris Robertson wrote: juan romero wrote: Hello users First I want to apologize if any of my questions has been asked already. I have two web applications running on my lan, every application has a main page with a box where you introduce an user and a password in order to log in that applic

Re: [squid-users] Problem with authentication to IIS site for users behind squid proxy

2008-08-15 Thread Amos Jeffries
Leonardo Rodrigues Magalhães wrote: Adrian Chadd escreveu: Thats because the version numbers are misleading. Squid-2 and Squid-3 are different "paths", you can say. They probably would benefit from being called different names, but thats a different story. Squid-2 has seen continued developm

[squid-users] Trying to setup a Proxy server - on local machine

2008-08-15 Thread O.R.Senthil Kumaran
Hello, I have a machine which connects directly to internet using ADSL Modem. Operating System is Fedora Core 2. I want to setup a squid proxy server to test certain scenarios for a bug-fix I am working on. Squid version in my system is Version 2.5.STABLE6 Following is my squid configuration: