[squid-users] content logging

2011-04-13 Thread Klaus Darilion
Hi! For debugging of certain http clients I need to log the whole HTTP(S) traffic passed through squid, i.e. complete HTTP request and the HTTP response (all headers and bodies). I read lots on the wiki and it seems like SslBump and DynamicSslCert will help to break the SSL connection. But

Re: [squid-users] content logging

2011-04-13 Thread Amos Jeffries
On 13/04/11 21:11, Klaus Darilion wrote: Hi! For debugging of certain http clients I need to log the whole HTTP(S) traffic passed through squid, i.e. complete HTTP request and the HTTP response (all headers and bodies). I read lots on the wiki and it seems like SslBump and DynamicSslCert will

Re: [squid-users] content logging

2011-04-13 Thread Eliezer Croitoru
On 13/04/2011 12:48, Amos Jeffries wrote: On 13/04/11 21:11, Klaus Darilion wrote: Hi! For debugging of certain http clients I need to log the whole HTTP(S) traffic passed through squid, i.e. complete HTTP request and the HTTP response (all headers and bodies). I read lots on the wiki and it

Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-13 Thread Marcos
Hi David, could you run and publish your benchmark with squid 2.7 ??? i'd like to know if is there any regression between 2.7 and 3.x series. thanks. Marcos - Mensagem original De: da...@lang.hm da...@lang.hm Para: Amos Jeffries squ...@treenet.co.nz Cc: squid-users@squid-cache.org;

[squid-users] Re: best hardware for squid

2011-04-13 Thread yogii
should i compile or not? which is better? how i install manually with ./configure and option on ./configure command? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/best-hardware-for-squid-tp3444622p3446871.html Sent from the Squid - Users mailing list archive

[squid-users] Java external acl

2011-04-13 Thread edward_ryan
Hi Guys, Just for a learning experience (I'm learning java at uni and we have a squid proxy at work) I am trying to create an external acl using Java that will check if the user has a list of websites that they can access (the name of the list will just be their username) that other users cannot

Re: [squid-users] Re: best hardware for squid

2011-04-13 Thread jeffrey j donovan
On Apr 13, 2011, at 7:19 AM, yogii wrote: should i compile or not? which is better? how i install manually with ./configure and option on ./configure command? without getting into all of the options, here is a sample of how I configure for my osx systems. #3.1.11 curl -O

Re: [squid-users] How to Hide Proxy detected at whatismyip.com

2011-04-13 Thread AZHAR CHOWDHURY
Hi Helmut, After adding following lines in the squid.conf, the problem over. Is it the right configuration? == request_header_access Allow allow all request_header_access Authorization allow all request_header_access WWW-Authenticate

Re: [squid-users] Java external acl

2011-04-13 Thread Amos Jeffries
On 14/04/11 00:45, edward_ryan wrote: Hi Guys, Just for a learning experience (I'm learning java at uni and we have a squid proxy at work) I am trying to create an external acl using Java that will check if the user has a list of websites that they can access (the name of the list will just be

[squid-users] acls for deny facebook to one ip.

2011-04-13 Thread Soporte Técnico
Hi, i´m a basic (basic basic as gwbasic) configurator of squid, and I need to deny facebook to some users on my network. I think deny1.txt (content) .facebook.com .fbcdn.net acl denied1 dstdomain “/usr/local/etc/squid/deny1.txt” how I apply this to only one ip ? (for example 192.168.5.60)

Re: [squid-users] acls for deny facebook to one ip.

2011-04-13 Thread Chad Naugle
Correct, just when you need to restrict a particular IP, you need a second ACL to match it, and stack the http_access deny line. ie: acl denied_ip src 192.168.5.60 http_access deny denied1 denied_ip FYI, Facebook added another domain recently, so you may want to add it. I don't recall what it

Re: [squid-users] content logging

2011-04-13 Thread Klaus Darilion
Am 13.04.2011 12:23, schrieb Eliezer Croitoru: but if it certain clients you can might setup specific parent proxy for this purpose as parosproxy. it's not suppose to be as fast as squid but built for http\s traffic interrogation. Thanks for the hint - that was exactly I was looking for.

Re: [squid-users] content logging

2011-04-13 Thread Eliezer Croitoru
On 13/04/2011 17:45, Klaus Darilion wrote: Am 13.04.2011 12:23, schrieb Eliezer Croitoru: but if it certain clients you can might setup specific parent proxy for this purpose as parosproxy. it's not suppose to be as fast as squid but built for http\s traffic interrogation. Thanks for the

[squid-users] Re: best hardware for squid

2011-04-13 Thread yogii
actually i am not understand with options, but i'll try first. thanks a lot Mr.Jeffrey :) -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/best-hardware-for-squid-tp3444622p3447721.html Sent from the Squid - Users mailing list archive at Nabble.com.

[squid-users] The system returned: (111) Connection refused

2011-04-13 Thread Kauffman, Derek E (SA-1)
ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://forums.digitalpoint.com/showthread.php? Connection to 216.9.35.60 failed. The system

[squid-users] The requested URL could not be retrieved

2011-04-13 Thread Bilal J.Mahdi
Dear All I have change the config file of my cache box and I start get this error during the traffic time, when the limit start cross 10meg real: even when I disable the timeout limit (#dead_peer_timeout 60 seconds) but error still appear: The requested URL could not be retrieved

[squid-users] Squid + NTLM Auth + MSN

2011-04-13 Thread Diego
Hi, I´m using squid 2.7 as web proxy with NTLM auth to an Active Directory, everything works perfectly with the exception of live msn. I found on the logs that msn is not sending the authentication information so squid is denying the connection. As a workarround I have created an ACL to allow

Re: Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-13 Thread david
sorry, haven't had time to do that yet. I will try and get this done today. David Lang On Wed, 13 Apr 2011, Marcos wrote: Date: Wed, 13 Apr 2011 04:11:09 -0700 (PDT) From: Marcos mczue...@yahoo.com.br To: da...@lang.hm, Amos Jeffries squ...@treenet.co.nz Cc: squid-users@squid-cache.org,

RE: [squid-users] Squid + NTLM Auth + MSN

2011-04-13 Thread Joseph L. Casale
I found on the logs that msn is not sending the authentication information so squid is denying the connection. How have you configured Windows to use a proxy? Does Live know about this?

[squid-users] Squid 2.7 + SquidGuard + Squidclamav

2011-04-13 Thread childrenofchaos
Hey, The configuration listet above, runs longer 1 year without an probs. Now we get the Squid Message: Timeout - DNS Error. first step i tried: dig google.de from the squid maschine. No probs. i saw in the cache.log that all url_rewrite_children are busy, so i screwd em up from 8 to 16. Okey

Re: [squid-users] Squid + NTLM Auth + MSN

2011-04-13 Thread Diego
Yes i have configured windows and also msn has an option to setup a proxy... But when i see the request on the logs it didn't has the authentication 2011/4/13 Joseph L. Casale jcas...@activenetwerx.com: I found on the logs that msn is not sending the authentication information so squid is

Re: [squid-users] Squid 2.7 + SquidGuard + Squidclamav

2011-04-13 Thread Chad Naugle
Personally, I would setup a caching-only instance of BIND on the proxy, and using that for DNS, or using your internal DNS system on your network, rather than depending on an outside source for all of your DNS. childrenofch...@freenet.de 4/13/2011 3:06 PM Hey, The configuration listet above,

RE: Re: [squid-users] Squid 2.7 + SquidGuard + Squidclamav

2011-04-13 Thread Chad Naugle
Does your internal DNS configuration use the root method, or does it forward to your ISP's DNS? I've noticed strange behavior (Notably DNS timeouts) recently with using the root method at one of my branch offices, and had to ditch it for the ISP forwarders ... In my case, it seemed to have

Re: [squid-users] The system returned: (111) Connection refused

2011-04-13 Thread Amos Jeffries
On Wed, 13 Apr 2011 13:19:51 -0400, Kauffman, Derek E (SA-1) wrote: ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL:

Re: [squid-users] Re: best hardware for squid

2011-04-13 Thread Amos Jeffries
On Wed, 13 Apr 2011 09:52:54 -0700 (PDT), yogii wrote: actually i am not understand with options, but i'll try first. thanks a lot Mr.Jeffrey :) -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/best-hardware-for-squid-tp3444622p3447721.html Sent from the

Re: [squid-users] Squid 2.7 + SquidGuard + Squidclamav

2011-04-13 Thread Eliezer Croitoru
On 13/04/2011 22:06, childrenofch...@freenet.de wrote: Hey, The configuration listet above, runs longer 1 year without an probs. Now we get the Squid Message: Timeout - DNS Error. first step i tried: dig google.de from the squid maschine. No probs. i saw in the cache.log that all

Re: [squid-users] TCP Flooding attack and DNS Poisioning attack

2011-04-13 Thread Eliezer Croitoru
On 12/04/2011 08:37, Amos Jeffries wrote: On 12/04/11 15:51, Eliezer Croitoru wrote: On 12/04/2011 06:15, Amos Jeffries wrote: On Mon, 11 Apr 2011 22:34:02 +0300, Eliezer Croitoru wrote: On 11/04/2011 20:53, sq...@sourcesystemsonline.com wrote: Good day, Some times when i check my ESET

Re: [squid-users] acls for deny facebook to one ip.

2011-04-13 Thread Amos Jeffries
On Wed, 13 Apr 2011 10:37:12 -0300, Soporte Técnico wrote: Hi, i´m a basic (basic basic as gwbasic) configurator of squid, and I need to deny facebook to some users on my network. I think deny1.txt (content) .facebook.com .fbcdn.net acl denied1 dstdomain “/usr/local/etc/squid/deny1.txt” how

[squid-users] Re: best hardware for squid

2011-04-13 Thread yogii
thanks a lot Mr.amos. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/best-hardware-for-squid-tp3444622p3448501.html Sent from the Squid - Users mailing list archive at Nabble.com.