Re: [squid-users] if this is posted somewhere.. please tell me where to go... AD groups

2008-08-21 Thread nairb rotsak
Fantastic! I will try this in the morning! Thanks Chris! This is exactly what I was looking for! - Original Message From: chris brain <[EMAIL PROTECTED]> To: squid-users@squid-cache.org Sent: Thursday, August 21, 2008 10:26:15 PM Subject: Re: [squid-users] if this is posted somewher

Re: [squid-users] (111) Connection refused

2008-08-21 Thread ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
can you give the the iptables rule ? :( On Fri, Aug 22, 2008 at 10:50 AM, Michael Alger <[EMAIL PROTECTED]> wrote: > On Fri, Aug 22, 2008 at 10:07:53AM +0700, ? z??up?? ??z?? > ? wrote: >> ## Forward port 80 ke mail server >> /sbin/iptables -t nat -A PREROUTING -p tcp

Re: [squid-users] (111) Connection refused

2008-08-21 Thread Michael Alger
On Fri, Aug 22, 2008 at 10:07:53AM +0700, ? z??up?? ??z?? ? wrote: > ## Forward port 80 ke mail server > /sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d 202.169.51.119 >--dport 80 -j DNAT --to-destination 172.16.0.2 This looks like you're redirect

Re: [squid-users] if this is posted somewhere.. please tell me where to go... AD groups

2008-08-21 Thread chris brain
Hi From my experience with NTLM and AD this is the best way we found to implement group membership : ntlm_auth already has a mechanism to provide this its just that the doco is difficult to follow. squid.conf : auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic --r

Re: [squid-users] Cache URL with "?"

2008-08-21 Thread Amos Jeffries
>> On tis, 2008-07-22 at 23:37 +1200, Amos Jeffries wrote: >> >> Only one issue has come up: under sibling relationships, squids method >> of >> relaying requests to sibling is slightly bad and may break the proper >> expected >> behavior. All other setups should be fine. >> >> >>> Also seen in par

[squid-users] (111)

2008-08-21 Thread ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
hello i have problem please see h++p://amyhost[dot]com/data/1.jpg and this is my squid conf... -start--- #logformat squid %>a [%tl] "%rm %ru HTTP/%rv" %Hs % /proc/sys/net/ipv4/ip_forward /etc/init.d/networking restart #- # eth0 =

Re: [squid-users] compiling, installing and running

2008-08-21 Thread Amos Jeffries
> hello I want to enable authentication digest. > recently I configured I installed and executed squid3.0STABLE8 with these > parameters: > . / it > configures--prefix=/usr--localstatedir=/var--with-default-user=proxy--sysconfdir=/etc/squid--datadir=${prefix}/share/squid--libexecdir=${prefix}/lib/s

Re: [squid-users] Can Squid hide all 404s from clients?

2008-08-21 Thread Amos Jeffries
> Hello, Leonardo. > > Thanks for your prompt reply! > > On 8/21/08 3:02 PM, "Leonardo Rodrigues Magalhães" > <[EMAIL PROTECTED]> wrote: >> are you sure you wanna do this kind of configuration ??? > Yes. I am aware that my request is unusual, as this is to be a > special-purpose installation of

Re: [squid-users] Blocking ".com" blocks "gmail.com"

2008-08-21 Thread Amos Jeffries
> Hi, > >I'm using Squidguard to manage users,groups and acl's of my proxy > server but I have a problem: When I put ".com" on my expressionlist of > blocks, "gmail.com" is blocked too... > > My expressionlis file is > "(.*)?(\.com(\?.*)?$|\.zip(\?.*)?$|message|messages)(.*)?" > > > Anyone

Re: [squid-users] Problem when adding another hard disk.. squid cannot create any files or dir on another hard disk

2008-08-21 Thread Mr Crack
chown squid.squid /mnt/cache2 and Disable Selinux works for me Sorry i forget to tell I use RHEL 5 Thanks you for your reply On Thu, Aug 21, 2008 at 4:25 AM, John Doe <[EMAIL PROTECTED]> wrote: >> My problem is i dont know how to mount /mnt/cache2 as squid user >> If i can mount /mnt/cache2 as s

Re: [squid-users] Can Squid hide all 404s from clients?

2008-08-21 Thread Benton Roberts
Hello, Leonardo. Thanks for your prompt reply! On 8/21/08 3:02 PM, "Leonardo Rodrigues Magalhães" <[EMAIL PROTECTED]> wrote: > are you sure you wanna do this kind of configuration ??? Yes. I am aware that my request is unusual, as this is to be a special-purpose installation of squid. > have

[squid-users] compiling, installing and running

2008-08-21 Thread Luis Enrique
hello I want to enable authentication digest. recently I configured I installed and executed squid3.0STABLE8 with these parameters: . / it configures--prefix=/usr--localstatedir=/var--with-default-user=proxy--sysconfdir=/etc/squid--datadir=${prefix}/share/squid--libexecdir=${prefix}/lib/squid--e

Re: [squid-users] Cache URL with "?"

2008-08-21 Thread murray lotnicz
> On tis, 2008-07-22 at 23:37 +1200, Amos Jeffries wrote: > > Only one issue has come up: under sibling relationships, squids method of > relaying requests to sibling is slightly bad and may break the proper expected > behavior. All other setups should be fine. > > >> Also seen in parent relations.

Re: [squid-users] Can Squid hide all 404s from clients?

2008-08-21 Thread Leonardo Rodrigues Magalhães
Benton Roberts escreveu: Dear Squid-masters, I would like to configure Squid so that it always serves the "latest available" version of any given URL, even if the URL is no longer available at the original server. In this way, Squid's clients would never receive an error for a given URL, as lo

[squid-users] Can Squid hide all 404s from clients?

2008-08-21 Thread Benton Roberts
Dear Squid-masters, I would like to configure Squid so that it always serves the "latest available" version of any given URL, even if the URL is no longer available at the original server. In this way, Squid's clients would never receive an error for a given URL, as long as that URL had been avail

Re: [squid-users] how to force to refresh when at offline_mode is on

2008-08-21 Thread Chris Robertson
Vikram Goyal wrote: Hello, I am new to squid. Could you guide exactly which settings should be tweaked and what values should be appropriate. I am using squid-3.0.STABLE7-1.fc9.i386 Thanks! For a start, see http://wiki.squid-cache.org/KnowledgeBase/PerformanceAnalysis: and http://wiki.

[squid-users] Blocking ".com" blocks "gmail.com"

2008-08-21 Thread William Knob
Hi, I'm using Squidguard to manage users,groups and acl's of my proxy server but I have a problem: When I put ".com" on my expressionlist of blocks, "gmail.com" is blocked too... My expressionlis file is "(.*)?(\.com(\?.*)?$|\.zip(\?.*)?$|message|messages)(.*)?" Anyone knows what is t

Re: [squid-users] Problem when adding another hard disk.. squid cannot create any files or dir on another hard disk

2008-08-21 Thread John Doe
> My problem is i dont know how to mount /mnt/cache2 as squid user > If i can mount /mnt/cache2 as squid, the problem should be OK > My cache_effective_user is squid and cache_effective_group also squid Once /mnt/cache2 is mounted, do chown squid:squid /mnt/cache2 JD

[squid-users] Problem when adding another hard disk.. squid cannot create any files or dir on another hard disk

2008-08-21 Thread Mr Crack
I add anohter disk for cache here is what i have done 1. mkfs.ext3 /dev/sda1 2. add the following line to /etc/fstab /dev/sda1 /mnt/cache2 ext3defaults1 2 3. add the following to /etc/squid/squid.conf cache_dir ufs /mnt/cache2 27 16 256 4. squid -z

Re: [squid-users] if this is posted somewhere.. please tell me where to go... AD groups

2008-08-21 Thread nairb rotsak
Sorry Henrik, think I just sent this reply back to you.. not the whole group.. Great.. thanks, Just to clarify, to use wbinfo_group.pl, I need to: 1. Add Domain Local group to Active Directory called Internet-Allowed (name not important) 2. Add 'external_acl_type ADS %LOGIN /usr/lib/squid/wbi

Re: [squid-users] how to force to refresh when at offline_mode is on

2008-08-21 Thread Mr Crack
I dont understand what you want pls tell me exactly what you want... On 8/21/08, Vikram Goyal <[EMAIL PROTECTED]> wrote: > On Tue, Aug 19, 2008 at 03:04:48PM +0200, Matus UHLAR - fantomas wrote: >> On 18.08.08 23:10, Mr Crack wrote: >> > Subject: [squid-users] how to force to refresh when at offl

Re: [squid-users] how to force to refresh when at offline_mode is on

2008-08-21 Thread Vikram Goyal
On Tue, Aug 19, 2008 at 03:04:48PM +0200, Matus UHLAR - fantomas wrote: > On 18.08.08 23:10, Mr Crack wrote: > > Subject: [squid-users] how to force to refresh when at offline_mode is on > > > > when offline_mode is off, it becomes slow > > when offline_mode is on, old webpages comes out from cach

Re: [squid-users] Advantages of Squid

2008-08-21 Thread Amos Jeffries
bijayant kumar wrote: Hello to lists, I was meeting a consultant to an ISP today who plans to implement a caching solution for his network. I guess they are already impressed with Blue Coats which undoubtedly seems to be a very good product which I have not used or seen physically. Being a s

[squid-users] Advantages of Squid

2008-08-21 Thread bijayant kumar
Hello to lists, I was meeting a consultant to an ISP today who plans to implement a caching solution for his network. I guess they are already impressed with Blue Coats which undoubtedly seems to be a very good product which I have not used or seen physically. Being a staunch believer of Open

Re: [squid-users] Squid is aborting and restarting its child process very often

2008-08-21 Thread Amos Jeffries
Henrik Nordstrom wrote: On ons, 2008-08-20 at 14:00 +0800, Adrian Chadd wrote: Run the latest Squid-3.0 ; PRE5 is old and buggy. Shout at the debian distribution for shipping such an old version. Nor only old & buggy, also not a stable release for production use only a pre-release for early a

Re: [squid-users] I enable offline_mode, after 3 days... access denied error occurs

2008-08-21 Thread Matus UHLAR - fantomas
On 21.08.08 10:37, Mr Crack wrote: > If offline_mode is disable, connection is slow but Ok > To speed up connection speed, I enable offline_mode and connection is fast. > But after 3 days, the following error occurs when accessing some sites... I guess those pages have expired and squid doesn't pr

Re: [squid-users] squid/ftps

2008-08-21 Thread Matus UHLAR - fantomas
On 21.08.08 00:30, [EMAIL PROTECTED] wrote: > i know that ftps is not "usual" , by the way if someone have experience > about proxying ftps with squid or can explain why we can't do it , thx for > your answers proxying FTPS, as long as any ssl-encrypted protocol, has not much usage. You only can c

Re: [squid-users] Reverse Proxy

2008-08-21 Thread Amos Jeffries
Mario Almeida wrote: Hi, After adding the below option always_direct allow all prevent peer being used? An error there is kind of expected if the peer is not listening on port 80 for web traffic. Amos I get a different error The following error was encountered: * Connection to 172

[squid-users] Generating cache file hash - continued

2008-08-21 Thread John =)
Further to my request yesterday... I would prefer to be able to just generate the md5 hash manually, rather than writing code to use storeKeyPublic() in src/store_key_md5.c. However, I must not be interpreting that function correctly as my hashes do not match the hashes produced in store.log:

Re: [squid-users] external_acl children...

2008-08-21 Thread John Doe
> Generally one should use the concurrency= > children=when making your own helper. You only need > a lot of children if your helper may block for extended periods of time > for example performing DNS lookups.. I just want to be sure that, in case of a traffic spike, there are no connections deni