[squid-users] Unblocking a specific URl for a specific group

2008-10-01 Thread Tejpal Amin
HI, I am using Squid 3.0 and squidguard. Users are authenticated via squid_ldap_auth program from Windows 2003 AD. I want to provide access to a specific url to users belonging to XYZ group in Windows 2003 AD. How do I achieve it?? Tejpal Amin Disclaimer & Privilege Notice: This e-Mail may

[squid-users] Squid reverse proxy problem (HTTPS to HTTP)

2008-10-01 Thread Russell Phillips
Hi list, I'm trying to set up a squid reverse proxy for an Outlook Web Access webmail server. I want the connection to squid to be encrypted with SSL, but the connection to the web server to be simple HTTP, ie: client_browser <---HTTPS---> squid <---HTTP---> outlook_web_access Below is the confi

[squid-users] Squid Access

2008-10-01 Thread Michel Venter
Hi Would like to know how to allow specific user in squid (Centos 5) to specific sites only? Can anyone help? Thanks Mike - This e-mail is subjected to the disclaimer that can be viewed at: * http://www.cut.ac.za/www

Re: [squid-users] COSS causing squid Segment Violation on FreeBSD 6.2S (store_io_coss.c)

2008-10-01 Thread Mark Powell
On Fri, 12 Sep 2008, Adrian Chadd wrote: Well, I fixed the thing up under FreeBSD so it certainly was working for me at some point. I'm one server away from getting my polygraph test cluster going and I'll hopefully be installing that tomorrow; I'll make sure COSS gets a decent thrashing when t

Re: [squid-users] Squid reverse proxy problem (HTTPS to HTTP)

2008-10-01 Thread Amos Jeffries
Russell Phillips wrote: Hi list, I'm trying to set up a squid reverse proxy for an Outlook Web Access webmail server. I want the connection to squid to be encrypted with SSL, but the connection to the web server to be simple HTTP, ie: client_browser <---HTTPS---> squid <---HTTP---> outlook_web_

[squid-users] Squid dying

2008-10-01 Thread Dietmar Braun
Hi, we have latest Squid 3 STABLE9 running... this night we saw it dying: 2008/09/30 23:33:27| idnsGrokReply: Malformed DNS response FATAL: Received Segment Violation...dying. 2008/09/30 23:33:31| storeDirWriteCleanLogs: Starting... 2008/09/30 23:33:31| WARNING: Closing open FD 10 2008/09/30 23

[squid-users] access denied without prompting for login

2008-10-01 Thread Gregory Machin
Hi I have the following squid config (below) that worked for a while then squid started giving page faults so I removed squid then reinstalled it now when I try to open a site I get access denied with out even being prompted for my username and password. I have tested the ldap auth and that is work

[squid-users] MSN Messenger File Transfer

2008-10-01 Thread Tiago Durante
Hi all, Sorry if the question sounds little dumb, but there is any way to block just the file transfer feature for MSN Messenger using Squid? Thanks! -- Tiago Durante ,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,.,., Perseverance is the hard work you do after you get tired of

Re: [squid-users] cache size

2008-10-01 Thread Matus UHLAR - fantomas
On 30.09.08 20:15, Stand H wrote: > Suppose that I have 100GB cache size. Roughly, how much hit rate or byte > rate can I improve if I increase the size to 500GB? Is larger cache better > than smaller cache, say 500GB vs 1TB? Suppose I have enough RAM. Yes. However, to have more effective cache yo

RE: [squid-users] Squid reverse proxy problem (HTTPS to HTTP)

2008-10-01 Thread Andrew Struiksma
> http://wiki.squid-cache.org/ConfigExamples/SquidAndOutlookWebAccess > > The example has to be followed almost exactly to get around > OWA bugs and design issues. > > Amos Has that been tested with Exchange 2007? Andrew

[squid-users] Can someone help me block samba users at a particular time.

2008-10-01 Thread Avinash Rao
Hi all, I have configured the latest version of squid on Ubuntu Studio 8.0 - AMD 64bit. I have also configured samba. I am in need of blocking the samba users from accessing the internet anytime except 18:00 - 20:00 Hrs everyday. How do i do this? The samba is configured as a PDC with WinXP client

[squid-users] Can we use "no-cache" or "max-age=0" to refresh the cached objects

2008-10-01 Thread Christian Tzolov
Dear all, We have a Squid (2.6) server installed as a reverse proxy and connected to an original-server that uses the "Expire" header field to specify when the response should be considered stale. If the client requests includes a "no-cache" cache-control directive can we assume that Squid wil

[squid-users] ICP and sibling peers in reverse proxies?

2008-10-01 Thread Christian Tzolov
Dear all, If we conceder the following deployment diagram: INTERNET | +--+ |Load Balancer | +--+ | | +---+ +---+ |Squid_1| |Squid_2| +---+ +---+ | | ++ ++ |Apa

RE: [squid-users] Squid reverse proxy problem (HTTPS to HTTP)

2008-10-01 Thread Amos Jeffries
> >> http://wiki.squid-cache.org/ConfigExamples/SquidAndOutlookWebAccess >> >> The example has to be followed almost exactly to get around >> OWA bugs and design issues. >> >> Amos > > Has that been tested with Exchange 2007? Not sure on the exact versions tried. It has worked for all people who h

Re: [squid-users] ICP and sibling peers in reverse proxies?

2008-10-01 Thread Amos Jeffries
> Dear all, > > If we conceder the following deployment diagram: > > INTERNET > | > +--+ > |Load Balancer | > +--+ > | | > +---+ +---+ > |Squid_1| |Squid_2| > +---+ +---+ > | | > +--

Re: [squid-users] Can we use "no-cache" or "max-age=0" to refresh the cached objects

2008-10-01 Thread Amos Jeffries
> Dear all, > > We have a Squid (2.6) server installed as a reverse proxy and connected to > an original-server that uses the "Expire" header field to specify when the > response should be considered stale. > > If the client requests includes a "no-cache" cache-control directive can > we assume tha

Re: [squid-users] Can someone help me block samba users at a particular time.

2008-10-01 Thread Amos Jeffries
> Hi all, > > I have configured the latest version of squid on Ubuntu Studio 8.0 - > AMD 64bit. I have also configured samba. > I am in need of blocking the samba users from accessing the internet > anytime except 18:00 - 20:00 Hrs everyday. How do i do this? > The samba is configured as a PDC with

Re: [squid-users] MSN Messenger File Transfer

2008-10-01 Thread Amos Jeffries
> Hi all, > > Sorry if the question sounds little dumb, but there is any way to > block just the file transfer feature for MSN Messenger using Squid? > That depends on two things: MSN transferring the file through squid as HTTP. Being able to identify the file transfer. If either of the above f

Re: [squid-users] access denied without prompting for login

2008-10-01 Thread Amos Jeffries
> Hi > I have the following squid config (below) that worked for a while then > squid started giving page faults so I removed squid then reinstalled > it now when I try to open a site I get access denied with out even > being prompted for my username and password. I have tested the ldap > auth and

Re: [squid-users] Squid dying

2008-10-01 Thread Amos Jeffries
> Hi, > > we have latest Squid 3 STABLE9 running... this night we saw it dying: > > 2008/09/30 23:33:27| idnsGrokReply: Malformed DNS response > FATAL: Received Segment Violation...dying. > 2008/09/30 23:33:31| storeDirWriteCleanLogs: Starting... > Is this a known bug or anything out there we can

Re: [squid-users] Squid Access

2008-10-01 Thread Rafael Gomes
U will need authenticate your proxy on an user base. So, i am using Active Directory with auth_ntlm and is working well. There are many docs about this in internet. The docs that I have is in portugueses, so... I think won't help you... On Wed, Oct 1, 2008 at 4:37 AM, Michel Venter <[EMAIL PROTEC

Re: [squid-users] MSN Messenger File Transfer

2008-10-01 Thread Rafael Gomes
I dont know with Squid, but using Iptables Layer7 yes! There are some software to work like "Msn Proxy". May be u could take a look at one of these. On Wed, Oct 1, 2008 at 11:21 AM, Tiago Durante <[EMAIL PROTECTED]> wrote: > Hi all, > > Sorry if the question sounds little dumb, but there is any w

Re: [squid-users] Can someone help me block samba users at a particular time.

2008-10-01 Thread Amos Jeffries
> Amos, > > Thank you for the information. I will go through the doc, test it and get > back if necessary. > If i wrote my requirement right in my last email, the samba users can get > access to internet only between 18:00 - 20:00 Hrs everyday. Ah, sorry. you wrote it right. I read it wrong. The

Re: [squid-users] Squid Access

2008-10-01 Thread Amos Jeffries
Michel Venter wrote: Hi Would like to know how to allow specific user in squid (Centos 5) to specific sites only? Can anyone help? http://wiki.squid-cache.org/SquidFaq/ProxyAuthentication Amos -- Please use Squid 2.7.STABLE4 or 3.0.STABLE9

Re: [squid-users] Can someone help me block samba users at a particular time.

2008-10-01 Thread Avinash Rao
thanks and i will check it today. On Thu, Oct 2, 2008 at 9:09 AM, Amos Jeffries <[EMAIL PROTECTED]> wrote: > > > Amos, > > > > Thank you for the information. I will go through the doc, test it and get > > back if necessary. > > If i wrote my requirement right in my last email, the samba users can

[squid-users] SSL settings

2008-10-01 Thread Joel Duckworth
Hi I'm running squid on Ubuntu Gutsy (2.6.14). I'm getting problems with SSL connections intermittently, I'm wondering what SSL options should be setting in squid.conf and if there any best practices. My conf has the following values which is basically the default Ubuntu vaules. Should we be settin

Re: [squid-users] Expires: vs. Cache-Control: max-age

2008-10-01 Thread Alex Rousskov
On Wed, 2008-10-01 at 15:42 +1000, Mark Nottingham wrote: > No, that's not true. RFC2616: > > > 13.2.4 Expiration Calculations > > In order to decide whether a response is fresh or stale, we need to > > compare its freshness lifetime to its age. The age is calculated as > > described in sectio

Re: [squid-users] Expires: vs. Cache-Control: max-age

2008-10-01 Thread Mark Nottingham
On 02/10/2008, at 3:37 PM, Alex Rousskov wrote: I.e., the max-age cache-control directive takes precedence over Expires. I've tested Squid and a number of other caches with Co-Advisor, and if Expires indicates the response is fresh, but CC: max-age says it's stale, it will treat it as stal

[squid-users] negative_ttl vs. an Expires header -- which should win?

2008-10-01 Thread Gordon Mohr
Using 2.6.14-1ubuntu2 in an reverse/accelerator setup. My backend/parent is by design setting explicit 'Expires' headers 1 day into the future, even on 404/403/302 response codes. I'm seeing the 4XX responses later served as TCP_NEGATIVE_HITs, which is good. It appears, from my testing, tha