Re: [squid-users] Dual Level Authentication

2011-03-08 Thread Go Wow
Thanks for the reply. I think I will have to consider PAM. Regards On 8 March 2011 11:06, Amos Jeffries squ...@treenet.co.nz wrote: On 08/03/11 18:42, Go Wow wrote: Hi All,  I have implemented the AD authentication with squid3. I would like to add another level of authentication which

Re: [squid-users] Squid 3.1.8 and zero sized reply

2011-03-08 Thread Francesco
Hello Amos, and thank you for the very very interesting reply! Even though that website is not very standard, is there a way/patch to permit squid regularly browse? The problem, with these kind of sites, is that users complaint about the fact, at their home, these websites are surfed well!

[squid-users] positive_dns_ttl

2011-03-08 Thread jiluspo
Does squid honors the DNS TTL if it happens true ttl is lower than positive_dns_ttl ? -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

[squid-users] Proxying all traffic on all ports

2011-03-08 Thread Dotan Cohen
Hi all, new list member. A student asked me if he can proxy all his internet activity through a specific server in order to hide his IP address. He has found some hostility directed towards him in some online activities, including online gaming, and feels he would be better off appearing German

[squid-users] WARNING: Ignoring unknown protocol 'cache_object' in the ACL named 'manager'

2011-03-08 Thread Ralf Hildebrandt
Todays bzr checkout is logging: /usr/sbin/squid -k parse 2011/03/08 11:24:16| Initializing Authentication Schemes ... 2011/03/08 11:24:16| Initialized Authentication Scheme 'basic' 2011/03/08 11:24:16| Initialized Authentication Scheme 'digest' 2011/03/08 11:24:16| Initialized Authentication

Re: [squid-users] Proxying all traffic on all ports

2011-03-08 Thread Essad Korkic
Hi Dotan, I'm not sure if this is possible with Squid but it seems to me you just could create a VPN server on the server in Germany. Create a tunnel from the client pc to the server and point the client to only use the tunnel for all of it's traffic. I think that this will be the best

Re: [squid-users] Proxying all traffic on all ports

2011-03-08 Thread Dotan Cohen
On Tue, Mar 8, 2011 at 12:29, Essad Korkic essad.kor...@gmail.com wrote: Hi Dotan, I'm not sure if this is possible with Squid but it seems to me you just could create a VPN server on the server in Germany. Create a tunnel from the client pc to the server and point the client to only use

[squid-users] How can Squid behave gracefully when there is no Memory?

2011-03-08 Thread Saurabh Agarwal
Hi All What if there is no memory in System and memory allocation for Squid fails? I think default behavior is to Crash. Can we handle it gracefully? Regards, Saurabh

Re: [squid-users] Proxying all traffic on all ports

2011-03-08 Thread Amos Jeffries
On 08/03/11 23:16, Dotan Cohen wrote: Hi all, new list member. A student asked me if he can proxy all his internet activity through a specific server in order to hide his IP address. He has found some hostility directed towards him in some online activities, including online gaming, and feels

Re: [squid-users] positive_dns_ttl

2011-03-08 Thread Amos Jeffries
On 08/03/11 21:19, jiluspo wrote: Does squid honors the DNS TTL if it happens true ttl is lower than positive_dns_ttl ? Yes. Exactly that. BUT, only for DNS responses which contain an answer (ie positive results). Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.11 Beta

Re: [squid-users] How can Squid behave gracefully when there is no Memory?

2011-03-08 Thread Amos Jeffries
On 09/03/11 00:11, Saurabh Agarwal wrote: Hi All What if there is no memory in System and memory allocation for Squid fails? I think default behavior is to Crash. Can we handle it gracefully? Regards, Saurabh Correct. When the machine is not able to allocate memory Squid will crash. There

Re: [squid-users] Squid 3.1.8 and zero sized reply

2011-03-08 Thread Francesco
Hello Amos! The directive forwarded_for off will make it supply pages again. Though the results may not be what the webmaster intended. Nice reply, it works! Do you see any controindication by putting forwarded_for off by default? It can by applied only for a certain website or it is a general

Re: [squid-users] WARNING: Ignoring unknown protocol 'cache_object' in the ACL named 'manager'

2011-03-08 Thread Amos Jeffries
On 08/03/11 23:29, Ralf Hildebrandt wrote: Todays bzr checkout is logging: /usr/sbin/squid -k parse 2011/03/08 11:24:16| Initializing Authentication Schemes ... 2011/03/08 11:24:16| Initialized Authentication Scheme 'basic' 2011/03/08 11:24:16| Initialized Authentication Scheme 'digest'

Re: [squid-users] help with squid redirectors

2011-03-08 Thread Osmany
On Tue, 2011-03-08 at 12:21 +1300, Amos Jeffries wrote: On Tue, 08 Mar 2011 11:58:57 +1300, Amos Jeffries wrote: On Mon, 07 Mar 2011 16:59:07 -0500, Osmany wrote: Greetings everyone, So I'm having trouble with my squid proxy-cache server. I recently added a redirect program because I

Re: [squid-users] Resetting cache using HTCP clr

2011-03-08 Thread Amos Jeffries
On 05/03/11 13:46, Andy Nagai wrote: Our sites are template based, so a lot of pages share the same template. Problem with cache is a broken page will show up until the next refresh. We need the ability to reset the cache site wide so broken pages will not show after a fix. Amos mentioned using

Re: [squid-users] Squid 3.1.8 and zero sized reply

2011-03-08 Thread Amos Jeffries
On 09/03/11 00:53, Francesco wrote: Hello Amos! The directive forwarded_for off will make it supply pages again. Though the results may not be what the webmaster intended. Nice reply, it works! Do you see any controindication by putting forwarded_for off by default? Some like it, some

[Fwd: Re: [squid-users] help with squid redirectors]

2011-03-08 Thread Osmany
Forwarded Message From: Osmany osm...@oc.quimefa.cu Reply-to: osm...@oc.quimefa.cu To: squid-users squid-users@squid-cache.org Subject: Re: [squid-users] help with squid redirectors Date: Tue, 08 Mar 2011 07:20:11 -0500 On Tue, 2011-03-08 at 12:21 +1300, Amos Jeffries wrote: On

Re: [squid-users] WARNING: Ignoring unknown protocol 'cache_object' in the ACL named 'manager'

2011-03-08 Thread Ralf Hildebrandt
* Amos Jeffries squ...@treenet.co.nz: #Recommended minimum configuration: acl manager proto cache_object Can I omit that line? Ouch, sorry. Thanks for mentioning. I thought I got all those a few days ago with

Re: [squid-users] help with squid redirectors

2011-03-08 Thread Amos Jeffries
On 09/03/11 01:20, Osmany wrote: On Tue, 2011-03-08 at 12:21 +1300, Amos Jeffries wrote: On Tue, 08 Mar 2011 11:58:57 +1300, Amos Jeffries wrote: On Mon, 07 Mar 2011 16:59:07 -0500, Osmany wrote: Greetings everyone, So I'm having trouble with my squid proxy-cache server. I recently added a

Re: [squid-users] help with squid redirectors

2011-03-08 Thread Osmany
On Wed, 2011-03-09 at 01:33 +1300, Amos Jeffries wrote: On 09/03/11 01:20, Osmany wrote: On Tue, 2011-03-08 at 12:21 +1300, Amos Jeffries wrote: On Tue, 08 Mar 2011 11:58:57 +1300, Amos Jeffries wrote: On Mon, 07 Mar 2011 16:59:07 -0500, Osmany wrote: Greetings everyone, So I'm having

[Fwd: Re: [squid-users] help with squid redirectors]

2011-03-08 Thread Osmany
Forwarded Message From: Osmany osm...@oc.quimefa.cu Reply-to: osm...@oc.quimefa.cu To: squid-users squid-users@squid-cache.org Subject: Re: [squid-users] help with squid redirectors Date: Tue, 08 Mar 2011 07:41:47 -0500 On Wed, 2011-03-09 at 01:33 +1300, Amos Jeffries wrote: On

[squid-users] FreeBSD port for squid 3.2.0.5?

2011-03-08 Thread Guy Helmer
Is anyone working on a FreeBSD port for squid 3.2.0.5? Thanks, Guy This message has been scanned by ComplianceSafe, powered by Palisade's PacketSure.

Re: [squid-users] connection-auth

2011-03-08 Thread Vernon A. Fort
On 3/7/2011 7:28 PM, Amos Jeffries wrote: On Mon, 07 Mar 2011 17:14:40 -0600, Vernon A. Fort wrote: What do you mean by external groups? people accessing from out on the Internet? NP: NTLM does not work reliably across the wide Internet due to its design as a LAN protocol. Kerberos is

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) -DansGuardian-Squid3(proxy)

2011-03-08 Thread bwright
Thats a good idea... I can try that... I got a project thrown my way so not sure I'll have time this week, but this week or next I will try it out and see what I get. -- View this message in context:

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) - DansGuardian-Squid3(proxy)

2011-03-08 Thread bwright
I'll check it out... at first glance not sure if it does everything I want... be able to tie in with Active Directory (users/groups) and do better than url filtering (DG uses PICS categories and is a content filter not just url)... but I'll look at it more. -- View this message in context:

[squid-users] Squid 3.1 SSL bump and tarnsparent mode

2011-03-08 Thread Francesco
Hello, by activating SSL bump in Squid 3.1, is it possible to transparent proxy https request? I have read some documentation and posts, but i have not clear if it possible, with browser warning, or not... Any workaround/ideas? Thank you! Francesco

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) - DansGuardian-Squid3(proxy)

2011-03-08 Thread bwright
It does do true content filtering... I was going to start looking into the details (like if it can get users/groups from A.D. or squid) but then I noticed it cost $$$ (and I would prefer avoid spending $$$ on the project). -- View this message in context:

[squid-users] xcalloc Fatal (squid 3.1.9)

2011-03-08 Thread Víctor José Hernández Gómez
Hi all, I have found a message such as: FATAL: xcalloc: Unable to allocate 1 blocks of 536870912 bytes! Looks like a strange big block. My squid versión is 3.1.9. Any suggestion? Regards, -- Víctor Hernández Centro de Informatica y Comunicaciones

[squid-users] Performance between 2.x/3.1

2011-03-08 Thread Baird, Josh
Are there any docs that reference performance differences between 2.6/7 and 3.1? I'm running several 2.6 clusters (forward proxy) with all caching disabled doing 20-30mbps per node. The nodes are not far from idle in terms of CPU and memory. They are currently running RHEL5/x86_64. Should I

Re: [squid-users] Proxying all traffic on all ports

2011-03-08 Thread Dotan Cohen
On Tue, Mar 8, 2011 at 13:26, Amos Jeffries squ...@treenet.co.nz wrote: Either this is irrelevant sob story, or he has a case for getting some people banned from certain activities. That would be worth looking into IIWY. You do want to be protecting the innocent while abandoning the trolls to

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) - DansGuardian-Squid3(proxy)

2011-03-08 Thread sichent
On 3/8/2011 6:10 PM, bwright wrote: It does do true content filtering... I was going to start looking into the details (like if it can get users/groups from A.D. or squid) but then I noticed it cost $$$ (and I would prefer avoid spending $$$ on the project). -- View this message in

Re: [squid-users] Squid 3.1 SSL bump and tarnsparent mode

2011-03-08 Thread Amos Jeffries
On Tue, 8 Mar 2011 17:10:43 +0100 (CET), Francesco wrote: Hello, by activating SSL bump in Squid 3.1, is it possible to transparent proxy https request? No. It is not. I have read some documentation and posts, but i have not clear if it possible, with browser warning, or not... Any

Re: [squid-users] xcalloc Fatal (squid 3.1.9)

2011-03-08 Thread Amos Jeffries
On Tue, 08 Mar 2011 18:38:42 +0100, Víctor José Hernández Gómez wrote: Hi all, I have found a message such as: FATAL: xcalloc: Unable to allocate 1 blocks of 536870912 bytes! Looks like a strange big block. My squid versión is 3.1.9. Any suggestion? Probably bug

Re: [squid-users] Performance between 2.x/3.1

2011-03-08 Thread Amos Jeffries
On Tue, 8 Mar 2011 12:36:49 -0600, Baird, Josh wrote: Are there any docs that reference performance differences between 2.6/7 and 3.1? I'm running several 2.6 clusters (forward proxy) with all caching disabled doing 20-30mbps per node. The nodes are not far from idle in terms of CPU and

Re: [Fwd: Re: [squid-users] help with squid redirectors]

2011-03-08 Thread Amos Jeffries
On Tue, 08 Mar 2011 07:52:50 -0500, Osmany wrote: Forwarded Message From: Osmany osm...@oc.quimefa.cu Reply-to: osm...@oc.quimefa.cu To: squid-users squid-users@squid-cache.org Subject: Re: [squid-users] help with squid redirectors Date: Tue, 08 Mar 2011 07:41:47 -0500 On Wed,

[squid-users] Squid with AD Authendication problem (windows 2003)- please help

2011-03-08 Thread Sharik M
 I have configured squid with AD authentication its working fine but I am getting lots of error for authentication failed.     squid-2.5.STABLE14-1.4E samba-3.0.10-1.4E.11       Windows 2003 Domain Audit log failure.     Pre-authentication failed:     User Name:    proxy$  

[squid-users] possible to deactivate pre-authentification on the Linux (or windows)- Please help

2011-03-08 Thread Sharik M
Dear Friend, Is it possible to deactivate pre-authentification on the Linux (or Windows) side to avoid these messages ? Becouse i am getting lot of erro in windows 2003 domain. Hi, When validating users on my Linux system against an ActiveDirectory, the Windows event log are filled with