RE: [squid-users] All NTLM auth RESERVED or DEFERRED

2009-08-14 Thread Берсенев Виктор Сергеевич
Get squid-3.0.STABLE18 from http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE18.tar.gz get patches cat bug2648.patch |patch -p0 patching file src/helper.cc Reversed (or previously applied) patch detected! Assume -R? [n] n Apply anyway? [n] n Skipping patch. 12 out of 12 hunks ignored -

[squid-users] R: [squid-users] acl order

2009-08-14 Thread Riccardo Castellani
>those won't do anything, use http_reply_access instead of http_access, >to deal with mime-types I attached "partial acl" to this email only for example, infact in real squid.conf there is also http_reply_access to deal with deal mime-types. But do you suggest to use both https_access and http_re

[squid-users] ACL

2009-08-14 Thread Riccardo Castellani
If I have 2 entries in squid.conf which reference to same machine, I have to define these 2 acl before to use them ? Or Squid can retrieve these info even if these 2 acl are not defined before ? It's necessary to define acl before use it ? Example: http_access allow test acl test sr

Re: [squid-users] ACL

2009-08-14 Thread Kinkie
On Fri, Aug 14, 2009 at 11:24 AM, Riccardo Castellani wrote: > If I have 2 entries in squid.conf which reference to same machine, I have to > define these 2 acl before to use them ? Or Squid can retrieve these info > even if these 2 acl are not defined before ? > It's necessary to define acl before

Re: [squid-users] All NTLM auth RESERVED or DEFERRED

2009-08-14 Thread Amos Jeffries
Берсенев Виктор Сергеевич wrote: Get squid-3.0.STABLE18 from http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE18.tar.gz get patches cat bug2648.patch |patch -p0 patching file src/helper.cc Reversed (or previously applied) patch detected! Assume -R? [n] n Apply anyway? [n] n Skipping

Re: [squid-users] Squid cache

2009-08-14 Thread Matus UHLAR - fantomas
On 10.08.09 16:02, Никоноров Григорий wrote: > I'm running Squid 2.5 on FreeBSD 6.4. 2.5 is obsolete. 2.7 and 3.0 are current and supported. > The problem with caching doc files,please help! > > Squid downloads a file and puts it in the cache. The file is then > updated on the server and downloa

Re: [squid-users] Squid - Not replace source IP address

2009-08-14 Thread Matus UHLAR - fantomas
>> Transparent is a good word but it means something completely different: >> >> A "transparent proxy" is a proxy that does not modify the request or >> response beyond what is required for proxy authentication and >> identification. >> >> This is a citation from RFC2616 which defines the HTT

Re: [squid-users] Problem with squid 3.0.STABLE18 installation

2009-08-14 Thread Matus UHLAR - fantomas
On 11.08.09 23:01, Aleksey Samostrelov wrote: > I'm trying to install squid-3.0.STABLE18 on AIX 5300-10-01-0921. > I've configured it with > ./configure --prefix=/opt/squid --enable-xmalloc-statistics > --enable-icmp --enable-delay-pools > --enable-default-err-language=English --with-large-files >

Re: [squid-users] Issue with multiple Squids / TPROXY / WCCP and DNS load balancing

2009-08-14 Thread Matus UHLAR - fantomas
On 12.08.09 18:28, Richard Wall wrote: > I'm seeing exactly the same problem as was described in this email (in 2004): > * http://www.squid-cache.org/mail-archive/squid-dev/200407/0008.html > > The http client does a DNS lookup, then Squid repeats the DNS lookup > and receives a different host IP

Re: [squid-users] Issue with multiple Squids / TPROXY / WCCP and DNS load balancing

2009-08-14 Thread Richard Wall
On Fri, Aug 14, 2009 at 5:15 PM, Matus UHLAR - fantomas wrote: > Squid ignores the original destination of connection in order to provide > correct content. Many servers provide the same (their own) content > independently on what Host: you ask for, so the cache would get filled with > incorrect c

[squid-users] squid on debian, amongst other clients (cisco router)

2009-08-14 Thread Sławomir Kozłowski
Hi, I have one little problem with squid. I use squid now as configured manually, but can't force it to work in transparent mode. My whole config is: 1. network {internet} -> router cisco 2821 (with 2 vlans) -> switch -> client is on vlan 201, squid is on vlan 2 2. cisco config: FastEthernet0/0 i

RE: [squid-users] Squid 3.1.0.13 Speed Test - Upload breaks?

2009-08-14 Thread Daniel
Henrik, I added 'pipeline_prefetch on' to my squid.conf and it still isn't working right. I've pasted my entire squid.conf below, if you have anything extra turned on/off or et cetera than please let me know and I'll try it. Thanks! acl manager proto cache_object acl localhost src 127

RE: [squid-users] Re: Kerberos Authentication - Squid 3.1.0.13

2009-08-14 Thread Daniel
Markus, First, please correct me if I'm wrong but I looked for 'gssapi.h' in config.log and I'm assuming that config.log contains all the log information from doing a /configure? Assuming that I am correct, I couldn't find 'gssapi' anywhere inside the log file so I'm not sure if that's a g

[squid-users] SSL Proxy Authentication

2009-08-14 Thread Daniel
Ok... as I continue to 'abuse' this list I started thinking about something. If we choose to authenticate against LDAP, I know that we can use SSL/TLS and secure the traffic between our LDAP servers and the Squid servers. However, wouldn't the usernames/passwords still be sent basically clear-text

Re: [squid-users] R: [squid-users] acl order

2009-08-14 Thread Henrik Nordstrom
fre 2009-08-14 klockan 10:21 +0200 skrev Riccardo Castellani: > This acl 'rep_mime_type audio video' contains all mime type of video audio > streams ?! I have to add ' req_mime_type audio video' too ? Using rep_mime_type in http_access is a no-op (will never match) as the reply is not yet availab

RE: [squid-users] All NTLM auth RESERVED or DEFERRED

2009-08-14 Thread Henrik Nordstrom
fre 2009-08-14 klockan 13:40 +0600 skrev Берсенев Виктор Сергеевич: > Get squid-3.0.STABLE18 from > http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE18.tar.gz get > patches > > cat bug2648.patch |patch -p0 > patching file src/helper.cc You need this patch for 3.0.STABLE18: http://www

Re: [squid-users] SSL Proxy Authentication

2009-08-14 Thread Henrik Nordstrom
fre 2009-08-14 klockan 16:40 -0400 skrev Daniel: > If we choose to authenticate against LDAP, I know that we can use SSL/TLS > and secure the traffic between our LDAP servers and the Squid servers. > However, wouldn't the usernames/passwords still be sent basically clear-text > from the Squid Clie

[squid-users] Building squid 3.1.0.13 on MS-Windows (minGW)

2009-08-14 Thread Nevil Thatcher
Hello all, We are currently looking at evaluating squid to use in an upcoming project. One of the requirements is to use SSL inspection using sslBump. To this end I have downloaded and attempted to built from source, the build completes successfully however squid dies with the following error:  

Re: [squid-users] Make squid problem

2009-08-14 Thread Henrik Nordstrom
tor 2009-08-13 klockan 14:42 +0400 skrev Aleksey Samostrelov: > Hello. > > Trying to install squid 3 stable 18 on AIX 5.3 > > Configuration is successfull, but make produces an error: > > "util.c", line 76.21: 1506-162 (W) No definition was found for > function default_failure_notify. Storage cl

Re: [squid-users] Script Check

2009-08-14 Thread Henrik Nordstrom
mån 2009-08-10 klockan 23:28 -0400 skrev mic...@casa.co.cu: > This Script could be in Perl? Yes, or any language you prefer. Something like the following should do fine, leaving it to you to define find_user_from_ip as suitable for your environment. #!/usr/bin/perl -an use URI::Escape; BEGIN {

Re: [squid-users] Building squid 3.1.0.13 on MS-Windows (minGW)

2009-08-14 Thread Henrik Nordstrom
lör 2009-08-15 klockan 07:45 +1000 skrev Nevil Thatcher: > 2009/08/14 22:45:11| aclIpParseIpData: unknown first address in > '127.0.0.1/32' > FATAL: Bungled squid.conf line 2: acl localhost src 127.0.0.1/32 Sounds like inet_pton is broken in your MinGW install somehow.. or that inet_pton is not

RE: [squid-users] caching dynamic image content

2009-08-14 Thread Jones, Keven
-Original Message- From: Terry Sent: Thursday, August 13, 2009 9:28 PM To: Amos Jeffries Cc: squid-users@squid-cache.org Subject: Re: [squid-users] caching dynamic image content On Thu, Aug 13, 2009 at 6:36 PM, Amos Jeffries wrote: > Terry wrote: >> >> On Thu, Aug 13, 2009 at 9:32 AM

Re: [squid-users] Squid cache

2009-08-14 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: On 10.08.09 16:02, Никоноров Григорий wrote: I'm running Squid 2.5 on FreeBSD 6.4. 2.5 is obsolete. 2.7 and 3.0 are current and supported. The problem with caching doc files,please help! Squid downloads a file and puts it in the cache. The file is then updated

Re: [squid-users] squid on debian, amongst other clients (cisco router)

2009-08-14 Thread Amos Jeffries
Sławomir Kozłowski wrote: Hi, I have one little problem with squid. I use squid now as configured manually, but can't force it to work in transparent mode. So first Q: __what version of squid__ ??? Debian has somewhere between 9 and a few hundred Squid versions currently in-use depending on h

Re: [squid-users] Re: Kerberos Authentication - Squid 3.1.0.13

2009-08-14 Thread Amos Jeffries
Daniel wrote: Markus, First, please correct me if I'm wrong but I looked for 'gssapi.h' in config.log and I'm assuming that config.log contains all the log information from doing a /configure? Assuming that I am correct, I couldn't find 'gssapi' anywhere inside the log file so I'm not su