[squid-users] block usres who create their own proxy behind main proxy

Hi, In our organization we have restricted access to only limited IPs as per company policy, but what some users are doing that they are building their own proxy servers on any single allowed IP addresses and distribute access to their locally formed group. In this way our main proxy thinks

Re: [squid-users] block usres who create their own proxy behind main proxy

goody goody ha scritto: Hi, In our organization we have restricted access to only limited IPs as per company policy, but what some users are doing that they are building their own proxy servers on any single allowed IP addresses and distribute access to their locally formed group. In this

[squid-users] Regarding Reverse proxy and Persistent connection

Hi All, I want to setup a reverse proxy for a web server.There are two web servers which has the same content. cache_peer parent 172.16.1.48 80 0 origin-server cache_peer parent 172.16.1.49 80 0 origin-server When client requests a web page if the server 172.16.1.49 serves the first request

Re: [squid-users] block usres who create their own proxy behind main proxy

goody goody ha scritto: Marcello Romani, 1) Ports are blocked on network firewall. 2) Siblings are also not allowed in main proxy. 3) We can stop the users only when we come to know what they are doing which is really difficult to identify presently. I am monitoring his browsing logs to

Re: [squid-users] Regarding Reverse proxy and Persistent connection

senthilkumaar2021 wrote: Hi All, I want to setup a reverse proxy for a web server.There are two web servers which has the same content. cache_peer parent 172.16.1.48 80 0 origin-server cache_peer parent 172.16.1.49 80 0 origin-server When client requests a web page if the server 172.16.1.49

Re: [squid-users] Regarding Reverse proxy and Persistent connection

Thank you very much So enabling client and server persistent connections does not perform maintaining connection to particular cache_peer is it so? Regards senthil Amos Jeffries wrote: senthilkumaar2021 wrote: Hi All, I want to setup a reverse proxy for a web server.There are two web

Re: [squid-users] block usres who create their own proxy behind main proxy

Marcello Romani wrote: goody goody ha scritto: Marcello Romani, 1) Ports are blocked on network firewall. 2) Siblings are also not allowed in main proxy. 3) We can stop the users only when we come to know what they are doing which is really difficult to identify presently. I am

Re: [squid-users] squid port

zakaria rais ha scritto: I mean , I want live just three port HTTP and HTTPS and FTP the other no . Thank you Then I think you should search for acl Safe_ports directives in squid.conf and delete those that refere to the ports you want to close. HTH 2010/7/26 Marcello Romani

Re: [squid-users] Regarding Reverse proxy and Persistent connection

hi Me too want clarification on persistent connection ... i having 3 web servers and i running squid server with cache_beer round robin for load balancing ... now i need persistent connection and also the load balancing ... is it possible ? Thanks - Viswa On 07/26/2010 02:00 PM, Amos

Re: [squid-users] Regarding Reverse proxy and Persistent connection

senthilkumaar2021 wrote: Thank you very much So enabling client and server persistent connections does not perform maintaining connection to particular cache_peer is it so? No. Only those only control the squid-server and client-squid links independently and independent even of whether they

Re: [squid-users] block usres who create their own proxy behind main proxy

You could fire these people, or at least some serious administration sanctions. On Mon, Jul 26, 2010 at 3:31 AM, goody goody think...@yahoo.com wrote: Hi, In our organization we have restricted access to only limited IPs as per company policy, but what some users are doing that they are

Re: [squid-users] Squid2-only plugin from Secure Computing

Their UrlRewriter/Redirector integration should work with both squid versions. Okay, I will try this. Didn't know that they are supporting two ways of integration. The integration that patches Squid-2 obviously won't work with Squid-3, and has always been a little muddy as licenses do not

Re: [squid-users] Can a cache be too big?

On 21.07.10 10:57, Marcus Kool wrote: 1) the index is in memory and needs 10-20 MB index in memory for each GB on disk 2) the housekeeping of the index costs more CPU cycles for a larger cache 3) the housekeeping of the cached objects on disk costs time and grows when the cache is larger.

Re: [squid-users] [ANNOUNCE] add the gzip feature to squid-2.7

On 22.07.10 11:43, Weibin Yao wrote: This patch add the feature of http compression on the fly for squid-2.7 =STATUS= This patch is at its very early phase of development and considered highly experimental. But you're encouraged to test it out on your side and report any quirks that you

[squid-users] Re: squid port

thanks in squid file I have : cl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt

Re: [squid-users] Re: squid port

squidACL ha scritto: thanks in squid file I have : cl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports

[squid-users] Password for ssl/https key file

Hi, I am using Squid 3.1.4 with ssl support. I have more thwo https certificates with 2 different https_port entries, e.g. https_port 443 ... cert/key_file1 https_port 444 ... cert/key_file2 What is the best way to set up Squid for a secure access to these key files? The directive

Re: [squid-users] Google SSL searches

If you want to block HTTPS for Google you need to block it for all domains including google.co.uk, google.com.br, google.co.nz google.com.au and 130 more. Henrik Nordström wrote: tor 2010-05-27 klockan 15:35 -0400 skrev Dave Burkholder: Is there some way to specify via a Squid ACL that

Re: [squid-users] Will Delayed Pools to help with squid fetching content?

Hi! On Fri, Jul 23, 2010 at 8:31 PM, Amos Jeffries squ...@treenet.co.nz wrote: Etienne Philip Pretorius wrote: Hello List, I am running Squid Cache: Version 3.1.3. and I wanted to cache windows updates and applied the suggested settings from

Re: [squid-users] Will Delayed Pools to help with squid fetching content?

On Mon, Jul 26, 2010 at 4:57 PM, Jose Ildefonso Camargo Tolosa ildefonso.cama...@gmail.com wrote: Hi! On Fri, Jul 23, 2010 at 8:31 PM, Amos Jeffries squ...@treenet.co.nz wrote: Etienne Philip Pretorius wrote: Hello List, I am running Squid Cache: Version 3.1.3. and I wanted to cache

Re: [squid-users] Will Delayed Pools to help with squid fetching content?

On Mon, Jul 26, 2010 at 3:41 PM, Leonardo Carneiro chesterma...@gmail.com wrote: On Mon, Jul 26, 2010 at 4:57 PM, Jose Ildefonso Camargo Tolosa ildefonso.cama...@gmail.com wrote: Hi! On Fri, Jul 23, 2010 at 8:31 PM, Amos Jeffries squ...@treenet.co.nz wrote: Etienne Philip Pretorius wrote:

Re: [squid-users] block usres who create their own proxy behind main proxy

Hi! On Mon, Jul 26, 2010 at 2:01 AM, goody goody think...@yahoo.com wrote: Hi, In our organization we have restricted access to only limited IPs as per company policy, but what some users are doing that they are building their own proxy servers on any single allowed IP addresses and

RE: [squid-users] Google SSL searches

Instead of dstdomain, you could use a regular expression. You could use a pattern like: ^(www\.)?(google\.com?(\...)?) Which would catch: google.co google.com google.co.XX where XX is any two characters google.com.XX (with and without www.) That would probably catch most of them without

RE: [squid-users] hi

Thanks Amos and flyinghawk2k. I think I actually got squid built and running. I ran ./configure with just the --prefix=/usr/local/squid option to get started. I didn't change anything in the squid.conf file. After I started squid, a ps command yielded expected results. I then configured my

Re: [squid-users] Google SSL searches

On 27/07/10 7:32 AM, Mellem, Dan dan.mel...@pomona.k12.ca.us wrote: Instead of dstdomain, you could use a regular expression. You could use a pattern like: ^(www\.)?(google\.com?(\...)?) Which would catch: google.co google.com google.co.XX where XX is any two characters

Re: [squid-users] hi

2010/7/27 Albert Wang albert_w...@hotmail.com: I seemed to have some trouble getting squid to stop with squid -k shutdown. Squid won't be stopped until it's serving the requests. To force to stop it, run squid -k kill.

Re: [squid-users] Will Delayed Pools to help with squid fetching content?

On Mon, 26 Jul 2010 15:27:22 -0430, Jose Ildefonso Camargo Tolosa ildefonso.cama...@gmail.com wrote: Hi! On Fri, Jul 23, 2010 at 8:31 PM, Amos Jeffries squ...@treenet.co.nz wrote: Etienne Philip Pretorius wrote: Hello List, I am running Squid Cache: Version 3.1.3. and I wanted to cache

Re: [squid-users] Will Delayed Pools to help with squid fetching content?

On Mon, 26 Jul 2010 15:56:12 -0430, Jose Ildefonso Camargo Tolosa ildefonso.cama...@gmail.com wrote: On Mon, Jul 26, 2010 at 3:41 PM, Leonardo Carneiro chesterma...@gmail.com wrote: On Mon, Jul 26, 2010 at 4:57 PM, Jose Ildefonso Camargo Tolosa ildefonso.cama...@gmail.com wrote: Hi! On Fri,

RE: [squid-users] hi

On Tue, 27 Jul 2010 00:04:27 +, Albert Wang albert_w...@hotmail.com wrote: Thanks Amos and flyinghawk2k. I think I actually got squid built and running. I ran ./configure with just the --prefix=/usr/local/squid option to get started. I didn't change anything in the squid.conf file.