Re: [squid-users] tproxy on wccpv2 vs triangle routing

2011-02-14 Thread Amos Jeffries
On Tue, 15 Feb 2011 11:36:42 +0800, jiluspo wrote: would still be policy based routing(if thats what its called) wins if this squidbox uses single ethernet vs single-ethernet(i guess its single only) wccp tproxy? Number of NIC on the squid box does not matter. WCCP will not stop being a tunnel

Re: [squid-users] Help with a page cache thanks

2011-02-14 Thread Amos Jeffries
On Tue, 15 Feb 2011 10:18:58 +0800, Terry. wrote: Hello, A page with its response header as: (Status-Line) HTTP/1.1 200 OK Cache-Control no-cache Connection keep-alive Content-Typetext/html; charset=UTF-8 DateMon, 14 Feb 2011 11:11:09 GMT Expires Mon, 14 Feb 2011 11:11:08 GMT P

[squid-users] Help with a page cache thanks

2011-02-14 Thread Terry.
Hello, A page with its response header as: (Status-Line) HTTP/1.1 200 OK Cache-Control no-cache Connection keep-alive Content-Typetext/html; charset=UTF-8 DateMon, 14 Feb 2011 11:11:09 GMT Expires Mon, 14 Feb 2011 11:11:08 GMT Pragma No-cache Server nginx/0.8.54 Transfer-Encodi

Re: [squid-users] tproxy on wccpv2 vs triangle routing

2011-02-14 Thread Amos Jeffries
On Mon, 14 Feb 2011 22:11:53 +0800, jiluspo wrote: happy valentines day, tproxy on wccpv2 L2 vs triangle routing(router mode tproxy) single cache, gigatbit ethernet. which do you think would get high req/sec? and smaller overhead. Well, WCCP is a tunnel. So adds both bandwidth and processing o

Re: [squid-users] squid 3.2.0.5 - keeps reloading itself when using kerberos or ntlm authentication

2011-02-14 Thread Amos Jeffries
On Mon, 14 Feb 2011 14:34:30 +0100, guest01 wrote: Hi guys, For testing purposes I tried squid 3.2.0.5 beta. After a couple of smaller issues I ran into a bigger one which I will share with you :-) I compiled squid 3.2.0.5 beta on RHEL5.5 64Bit with following options: Squid Cache: Version 3

Re: [squid-users] squid dstdomain www. regex

2011-02-14 Thread Amos Jeffries
On Mon, 14 Feb 2011 17:35:17 -0500, alexus wrote: is there a way for me to block a list of domains that's reside in outside file and somehow append a small regular expression in front of it. That would be using regex. Not dstdomain. Two VERY different algorithms. the problem is that list

[squid-users] squid dstdomain www. regex

2011-02-14 Thread alexus
is there a way for me to block a list of domains that's reside in outside file and somehow append a small regular expression in front of it. the problem is that list contains only domains and if i use dstdomain then people put www. in front of domain and squid doesn't catch it :( any solution? --

RE: [squid-users] Reverse Proxy and Externally Generated Wildcard SSL Certificates

2011-02-14 Thread John Gardner
>They may already be stored in PEM format then, the JUNEOS that runs on most >Juniper devices was originally derived from FreeBSD and as such its SSL >>implementation is likely based on OpenSSL (of course that's just a guess). I >haven't worked on any Juniper devices myself, so I am of no help

RE: [squid-users] Reverse Proxy and Externally Generated Wildcard SSL Certificates

2011-02-14 Thread Dean Weimer
> -Original Message- > From: John Gardner [mailto:john.gard...@southtyneside.gov.uk] > Sent: Monday, February 14, 2011 8:25 AM > To: Dean Weimer; squid-users@squid-cache.org > Subject: RE: [squid-users] Reverse Proxy and Externally Generated Wildcard > SSL Certificates > > >John, > > I

[squid-users] R: [squid-users] Configuring SQUID in Windows to authenticate with Active Directory

2011-02-14 Thread Guido Serassio
Hi, You should test if the helper works running it from command line. But you really need LDAP authentication against Active Directory ? Are you sure that you cannot use native Windows helpers ? Regards Guido Serassio Acme Consulting S.r.l. Microsoft Gold Certified Partner VMware Professional Pa

RE: [squid-users] Reverse Proxy and Externally Generated Wildcard SSL Certificates

2011-02-14 Thread John Gardner
>John, > I believe what you need to do is export the Certificates from the IIS > servers, they will be saved in a .pfx file, which is the PKCS12 format. > >OpenSSL can convert these into the PEM format that squid supports, these > commands will give you the desired output. > >Exports the

[squid-users] tproxy on wccpv2 vs triangle routing

2011-02-14 Thread jiluspo
happy valentines day, tproxy on wccpv2 L2 vs triangle routing(router mode tproxy) single cache, gigatbit ethernet. which do you think would get high req/sec? and smaller overhead. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

RE: [squid-users] Reverse Proxy and Externally Generated Wildcard SSL Certificates

2011-02-14 Thread Dean Weimer
John, I believe what you need to do is export the Certificates from the IIS servers, they will be saved in a .pfx file, which is the PKCS12 format. OpenSSL can convert these into the PEM format that squid supports, these commands will give you the desired output. Exports the Certificat

[squid-users] squid 3.2.0.5 - keeps reloading itself when using kerberos or ntlm authentication

2011-02-14 Thread guest01
Hi guys, For testing purposes I tried squid 3.2.0.5 beta. After a couple of smaller issues I ran into a bigger one which I will share with you :-) I compiled squid 3.2.0.5 beta on RHEL5.5 64Bit with following options: Squid Cache: Version 3.2.0.5 configure options: '--enable-ssl' '--enable-icap-

Re: [squid-users] url blocking

2011-02-14 Thread Marcus Kool
Zartash, can you upload the files cache.log ufdbguardd.log ufdbGuard.conf to http://upload.urlfilterdb.com ? In case that the files are small you can send them directly to me. Marcus Zartash . wrote: Thanks, I have installed ufdbGuard and defined it in squid but it doesnt seem to redirect a

Re: [squid-users] 2 ssl servers with class-1 certificates through reverse proxy

2011-02-14 Thread Amos Jeffries
On 14/02/11 22:28, Javier wrote: Hello, i need to put site1 and site2 in ssl mode. (the sites work fine internaly whith https://) through Reverse proxy. here, the actual .conf: acl manager proto cache_object acl localhost src 127.0.0.1/32 ::1 acl to_localhost dst ip_of_DMZ/24 acl valid_dst ds

Re: [squid-users] RE: squid-users Digest 11 Feb 2011 21:14:30 -0000 Issue 3732

2011-02-14 Thread Amos Jeffries
On 14/02/11 20:53, John Gardner wrote: It does not matter where the files are generated. As long as they are stored on the Squid box for Squid to access. For Squid you do not have to install anything into OpenSSL, which is just a library. Thanks for the pointers Amos. Hopefully I'm going to a

[squid-users] 2 ssl servers with class-1 certificates through reverse proxy

2011-02-14 Thread Javier
Hello, i need to put site1 and site2 in ssl mode. (the sites work fine internaly whith https://) through Reverse proxy. here, the actual .conf: acl manager proto cache_object acl localhost src 127.0.0.1/32 ::1 acl to_localhost dst ip_of_DMZ/24 acl valid_dst dstdomain .domain1.com acl valid_dst