Re: [squid-users] TCP_DENIED/407 with SSL-Sites, but the site is accessible...

2010-08-28 Thread Nick Cairncross
Tom, Just to say what I think (since you have almost the same setup as me I think): you will always get that 407 at the moment. Squid requires an authenticated user before allowing the page but you can't authenticate every method (at least that is what I have found) in my setup. Regardless of

Re: [squid-users] is squid 3.1.x is multiple chained ICAP server compliance ?

2010-08-28 Thread David Touzeau
On 28/08/2010 05:34, Amos Jeffries wrote: adaptation_access AV_scan deny MULTIMEDIA adaptation_access AV_scan allow all Amos, your are the king of squid specialists !!! It's working like a charm ! SquidGard is supported by C-ICAP so you can provide URL filtering using ICAP protocol that p

[squid-users] squid as a reverse proxy and exchange 2007- Mandating access with the certificate

2010-08-28 Thread Erwan Le Du
Hi, I'm using "squid" as a reverse proxy to allow the users to connect to exchange 2007 from the outside. All is ok(OWA and RPC overs https) but I would like to know if we can secure the connections with a certificate. I would like that the users must have inevitably the certificate to connect to t

[squid-users] performance question, 1 or 2 NIC's?

2010-08-28 Thread Andrei
This is a general Squid question. If you have experience with medium sized networks (300+ users) and Squid, this question is for you. I'm setting up a transparent Squid box for 300 users. All requests from the router are sent to the Squid box. Squid box has one NIC, eth0. This box receives request

[squid-users] squid no longer aborts bad request?

2010-08-28 Thread Kaiwang Chen
In 2.6.STALBE21, squid immediately responds with 400 when I enter 'a'; while in 3.1.6 the connection expects more characters, although it will definitively not get a good request. [r...@squid1 root]# telnet localhost 80 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. a HTTP/

Re: [squid-users] performance question, 1 or 2 NIC's?

2010-08-28 Thread Leonardo Rodrigues
Em 28/08/2010 12:29, Andrei escreveu: I'm setting up a transparent Squid box for 300 users. All requests from the router are sent to the Squid box. Squid box has one NIC, eth0. This box receives requests (from clients) and catches content from the web using this one NIC on its one WAN port, eth0

Re: [squid-users] squid as a reverse proxy and exchange 2007- Mandating access with the certificate

2010-08-28 Thread Amos Jeffries
Erwan Le Du wrote: Hi, I'm using "squid" as a reverse proxy to allow the users to connect to exchange 2007 from the outside. All is ok(OWA and RPC overs https) but I would like to know if we can secure the connections with a certificate. I would like that the users must have inevitably the certif

Re: [squid-users] performance question, 1 or 2 NIC's?

2010-08-28 Thread Amos Jeffries
Leonardo Rodrigues wrote: Em 28/08/2010 12:29, Andrei escreveu: I'm setting up a transparent Squid box for 300 users. All requests from the router are sent to the Squid box. Squid box has one NIC, eth0. This box receives requests (from clients) and catches content from the web using this one NI

Re: [squid-users] squid no longer aborts bad request?

2010-08-28 Thread Amos Jeffries
Kaiwang Chen wrote: In 2.6.STALBE21, squid immediately responds with 400 when I enter 'a'; while in 3.1.6 the connection expects more characters, although it will definitively not get a good request. [r...@squid1 root]# telnet localhost 80 Trying 127.0.0.1... Connected to localhost. Escape char

Re: [squid-users] performance question, 1 or 2 NIC's?

2010-08-28 Thread Andrei
Ooo... the line between Squid and the clients is 1000 MB. My internet connection is 12MB. Not sure if that changes things. Does it? Would it make a difference in that situation if clients (from 1000Mb) come on one line, eth0 and get cached on eth1 which is only 12MB. Sorry if I wasn't clear before

[squid-users] Kerberos authentication against AD 2003 server

2010-08-28 Thread Manoj Rajkarnikar
Hi all, I've been trying to get my squid 2.7 S9 to work with kerberos authentication against AD 2003 server for a couple weeks now but still failed. I've read through lots of posts in the list and different tutorials following them 1 at a time but still no go. I've been following tuts by Klaubert