Re: [squid-users] VIGOS eCAP GZIP Adapter 1.1 released

2009-07-22 Thread Henrik Nordstrom
lör 2009-07-18 klockan 03:16 -0700 skrev Elli Albek: The web serer only gzip static files. We want squid to gzip dynamic (from DB) cacheable files. Are you saying the gzip adapter removes ETag from content which was not modified by the adapter? Regards Henrik

Re: [squid-users] Squid options for Secure Authentication

2009-07-22 Thread Henrik Nordstrom
fre 2009-07-17 klockan 14:23 -0400 skrev Mike Diggins: I've been asked to investigate eliminating the Basic authentication option due to the obvious security risks (I need to maintain NTLM though). After some brief reading, it appears that Digest Authentication might work. Can I use Digest

[squid-users] squid error message

2009-07-22 Thread Jigar Raval
Hello, We have configure squid and we are getting following type of erro in log file TCP_DENIED/400 0 HEAD error:invalid-request - NONE/- text/html This is especially appears to be related with windows vista update. We are getting lots of such error messages. What could be the reason ? How

Re: [squid-users] squid error message

2009-07-22 Thread Amos Jeffries
Jigar Raval wrote: Hello, We have configure squid and we are getting following type of erro in log file TCP_DENIED/400 0 HEAD error:invalid-request - NONE/- text/html This is especially appears to be related with windows vista update. We are getting lots of such error messages. What could

Re: Fw: [squid-users] NTLM Auth and Java applets (Any update)

2009-07-22 Thread Henrik Nordstrom
mån 2009-07-20 klockan 12:30 +0200 skrev Gontzal: In the access.log of the parent proxy I get: 1248084163.393 131533 172.28.129.250 TCP_MISS/000 2696 CONNECT tp.seg-social.es:443 - DEFAULT_PARENT/172.16.100.230 - Which says the request as successfully forwarded to the parent 172.16.100.230,

Re: [squid-users] Cache-Control problems with Korean sites

2009-07-22 Thread Henrik Nordstrom
mån 2009-07-20 klockan 09:49 -0400 skrev Mike Mitchell: My guess is there is a firewall protecting the remote web servers. Has anyone seen this behavior before? Have not seen it on this level. Generally the type of issues you describe is either Window Scaling or ECN related (both are

Re: [squid-users] Cache-Control problems with Korean sites

2009-07-22 Thread Henrik Nordstrom
mån 2009-07-20 klockan 09:49 -0400 skrev Mike Mitchell: We're having problems accessing Korean Government sites like parcel.epost.go.kr and www.g2b.go.krhttp://www.g2b.go.kr from a squid cache that is physically in Seoul, Korea. I performed network captures and found that if the request

Re: [squid-users] squid error message

2009-07-22 Thread Jigar Raval
Hello, The cache log show following clientReadRequest: FD 277 (192.168.1.142:49241) Invalid Request Should i upgrade with new squid version ? Regards Jigar --- On Wed, 7/22/09, Amos Jeffries squ...@treenet.co.nz wrote: From: Amos Jeffries squ...@treenet.co.nz Subject: Re:

Re: [squid-users] howto block audio/video streaming

2009-07-22 Thread Gopinath Achari
simply block based on extentions of files using url_pathregex On Tuesday 21 July 2009 16:13, Muhammad Sharfuddin wrote: Squid 2.7 STABLE 5 how can I block audio/video streaming via squid ? I have blocked a lot many streaming wesbites(like youtube) but I want to block all of them.. and I

Re: [squid-users] RE: Squid on Windows, slow file transfers

2009-07-22 Thread Henrik Nordstrom
tis 2009-07-21 klockan 22:07 +0200 skrev Serassio Guido: The problem could be Windows itself: the network I/O capability of Squid when running on Windows is limited by design because select() is the only multiplatform compatible comm loop available, but it's the worse Just a comment

Re: [squid-users] Changing HTTP BASIC 'Realm' to force user logout / reauthentication

2009-07-22 Thread Henrik Nordstrom
tis 2009-07-21 klockan 10:15 +0200 skrev David (Dave) Donnan: Background: http://httpd.apache.org/docs/1.3/howto/auth.html so that if other resources are requested *from the same realm*, the same username and password can be returned to authenticate Yes.. However, I surf

Re: [squid-users] Ident and 3.1

2009-07-22 Thread Henrik Nordstrom
tis 2009-07-21 klockan 11:53 +0100 skrev twintu...@f2s.com: acl validuser ident REQUIRED http_access allow valideuser Where is this in relation to your other http_access rules? Regards Henrik

Re: [squid-users] squid error message

2009-07-22 Thread Amos Jeffries
Jigar Raval wrote: Hello, The cache log show following clientReadRequest: FD 277 (192.168.1.142:49241) Invalid Request Should i upgrade with new squid version ? I expect there will be no change. This is showing most of the signs of a broken client. But feel free if you wish to try

Re: [squid-users] howto block audio/video streaming

2009-07-22 Thread Indunil Jayasooriya
Pls try this acl magic_words url_regex -i .mp3 .mp4 .wmv .wave .mpeg .dat .ac3 .midi .rm http_access deny magic_words and type below command squid -k reconfigure On Wed, Jul 22, 2009 at 3:17 PM, Gopinath Acharigopin...@signal-networks.com wrote: simply block based on extentions of files

Re: [squid-users] Squid3 / NTLM / token id cache

2009-07-22 Thread Henrik Nordstrom
tis 2009-07-21 klockan 14:18 +0200 skrev Frederic THOMAS: On previous version we could use following settings (ntlm parameters on 2.5 squid and i noticed they didnt exists after 2.6) : max_challenge_reuses number max_challenge_lifetime timespan These settings were removed as the technique

RE: [squid-users] next Squid 2.7 release?

2009-07-22 Thread Henrik Nordstrom
tis 2009-07-21 klockan 11:30 -0700 skrev Balaji Ganesan: As per below email, 2.7 STABLE 7 was supposed to support Windows 7. Windows 7 is releasing on October 2009 and we would like to have our product support that as well. To do that, we need Squid to support Windows 7. Can you please tell

Re: [squid-users] squid error message

2009-07-22 Thread Henrik Nordstrom
ons 2009-07-22 klockan 01:26 -0700 skrev Jigar Raval: Hello, We have configure squid and we are getting following type of erro in log file TCP_DENIED/400 0 HEAD error:invalid-request - NONE/- text/html cache.log may contain more information about the malformed request. Regards Henrik

Re: [squid-users] howto block audio/video streaming

2009-07-22 Thread Erwann PENCREACH
Not a good Idea, for instance if you block avi You will block all avi file but also all site with url containing navigon, aviation . Gopinath Achari a écrit : simply block based on extentions of files using url_pathregex On Tuesday 21 July 2009 16:13, Muhammad Sharfuddin wrote: Squid

[squid-users] Bypass NTLM authentication on regex in URL

2009-07-22 Thread Nickcx
Hi, I am new to everything Linux as of 2 days ago and I'd like a bit of guidance on something.. bear with me, I'm ultra new, but loving it... My setup so far: I'm configuring a 2.6 Squid box forwarding to a parent proxy - OK I'm using NTLM authentication, with fall back of Basic - OK I am

Re: [squid-users] Bypass NTLM authentication on regex in URL

2009-07-22 Thread Henrik Nordstrom
ons 2009-07-22 klockan 04:54 -0700 skrev Nickcx: can give more details on what I see in the logs but basically on the BC and ISA I add a rule to bypass authentication if the URL contains '/open/1' or http://*:1935/. And you can easily do the same in Squid. Just keep your order of http_access

[squid-users] Opening a second ssh port

2009-07-22 Thread Dayo Adewunmi
Hi I'm trying to give a user on the internet ssh access to a machine on my LAN. I want them to be able to ssh to my public IP on a port other than the default 22 and get automatically logged into the lan machine. What do I need to do in squid.conf? I tried acl SSL_ports port 10122 as well as

Re: [squid-users] Opening a second ssh port

2009-07-22 Thread Tech W.
No, that's unmeaning. Squid can't proxy for SSH connection. What you needed is something like iptables to do a NAT for you. Regards, Wah.. --- On Wed, 22/7/09, Dayo Adewunmi contactd...@gmail.com wrote: From: Dayo Adewunmi contactd...@gmail.com Subject: [squid-users] Opening a second ssh

[squid-users] squid-3.0.STABLE16

2009-07-22 Thread alexus
su-3.2# gmake Making all in lib gmake[1]: Entering directory `/usr/local/src/squid-3.0.STABLE16/lib' Making all in libTrie gmake[2]: Entering directory `/usr/local/src/squid-3.0.STABLE16/lib/libTrie' gmake all-recursive gmake[3]: Entering directory `/usr/local/src/squid-3.0.STABLE16/lib/libTrie'

[squid-users] Bypassing certain IP/Subnet via IPTables

2009-07-22 Thread Jamie Orzechowski
Here is my problem. All port 80 traffic is being intercepted by the iptables configuration and redirecting to squid. Some of my users have static IP addresses and host their own webservers. When the Squid box is up and running none of their sites are accessible. If I shut down the squid box

Re: [squid-users] Bypass NTLM authentication on regex in URL

2009-07-22 Thread Nickcx
Hi, Great! That looks to have done the trick - I just need to get to grips with setting up text files for various sites and having a play with various configurations. Think I can manage that. One question though: I want to ensure ALL HTTP traffic is directed via the the parent proxy

Re: [squid-users] Bypass NTLM authentication on regex in URL

2009-07-22 Thread Chris Robertson
Nickcx wrote: Hi, Great! That looks to have done the trick - I just need to get to grips with setting up text files for various sites and having a play with various configurations. Think I can manage that. One question though: I want to ensure ALL HTTP traffic is directed via the the parent

[squid-users] Collapsed Forwarding on Squid 3.0

2009-07-22 Thread Jason Spegal
Is there a patch or way to compile in collapsed forwarding on Squid 3.0?

Re: [squid-users] VIGOS eCAP GZIP Adapter 1.1 released

2009-07-22 Thread Constantin Rack
Am 22.07.2009 um 08:24 schrieb Henrik Nordstrom: lör 2009-07-18 klockan 03:16 -0700 skrev Elli Albek: The web serer only gzip static files. We want squid to gzip dynamic (from DB) cacheable files. Are you saying the gzip adapter removes ETag from content which was not modified by the

Re: [squid-users] squid-3.0.STABLE16

2009-07-22 Thread Amos Jeffries
On Wed, 22 Jul 2009 10:31:39 -0400, alexus ale...@gmail.com wrote: su-3.2# gmake Making all in lib gmake[1]: Entering directory `/usr/local/src/squid-3.0.STABLE16/lib' Making all in libTrie gmake[2]: Entering directory `/usr/local/src/squid-3.0.STABLE16/lib/libTrie' gmake all-recursive

[squid-users] Squid gzip compression

2009-07-22 Thread wh
Hello. Has anyone tried the new squid option to compress served pages? I guess is called gzip compression with eCAP. I would like to know how it behaves before giving it a try. Thanks.

[squid-users] Squid gzip compression

2009-07-22 Thread wh
Hello. Has anyone tried the new squid option to compress served pages? I guess is called gzip compression with eCAP. I would like to know how it behaves before giving it a try. Thanks.

Re: [squid-users] Bypassing certain IP/Subnet via IPTables

2009-07-22 Thread Amos Jeffries
On Wed, 22 Jul 2009 10:57:11 -0400, Jamie Orzechowski jamie.orzechow...@gmail.com wrote: Here is my problem. All port 80 traffic is being intercepted by the iptables configuration and redirecting to squid. Some of my users have static IP addresses and host their own webservers. When the

Re: [squid-users] Collapsed Forwarding on Squid 3.0

2009-07-22 Thread Amos Jeffries
On Wed, 22 Jul 2009 15:32:07 -0400, Jason Spegal jspe...@comcast.net wrote: Is there a patch or way to compile in collapsed forwarding on Squid 3.0? There is a very old and outdated patch for 3.0 floating around in bugzilla and devel.squid-cache.org that need a fair bit of re-coding. If you wish

RE: [squid-users] next Squid 2.7 release?

2009-07-22 Thread Amos Jeffries
On Wed, 22 Jul 2009 12:08:45 +0200, Henrik Nordstrom hen...@henriknordstrom.net wrote: tis 2009-07-21 klockan 11:30 -0700 skrev Balaji Ganesan: As per below email, 2.7 STABLE 7 was supposed to support Windows 7. Windows 7 is releasing on October 2009 and we would like to have our product