Re: [squid-users] Disallow users to download files bigger then a specified size?

2011-06-14 Thread Amos Jeffries
On 14/06/11 14:40, Michelle Konzack wrote: Hello * I am in GSM/UMTS/HSPA and allow some peoples to access my WaveLAN to get E-Mails. Unfortunately some of those users like to kill my GSM account by downloading tonns of HTTP stuff. Is there a possibility to use squit to limit the filesize

Re: [squid-users] WWW-Authenticate header

2011-06-14 Thread Amos Jeffries
On 14/06/11 15:38, Mike Bordignon (GMI) wrote: Hello I'm trying to proxy access to a .Net Web application which requires IWA (Integrated Windows Authentication). From what I understand the server Not another one. Good luck. If you have any influence or contact with the devs of that app

Re: [squid-users] A way/hack to force squid to die?

2011-06-14 Thread Tom Tux
2011/6/10 Amos Jeffries squ...@treenet.co.nz: On 10/06/11 20:41, Tom Tux wrote: Mmm... Now I were able to force squid to die (with gdb):  From cache.log: --- SNIP --- (squid)(death+0x37)[0x564d37] /lib64/libpthread.so.0(+0xf5d0)[0x7f99ebe705d0] FATAL: Received Segment Violation...dying.

Re: [squid-users] Delay Pool metered by requests/second ?

2011-06-14 Thread Amos Jeffries
Please set your mailer to wrap lines. Around 72 is usually good. On 14/06/11 02:29, Russell M. Allen wrote: Is it possible to configure Squid to delay delivery of the http response, without constraining the transmission rate? I think this is effectively a Delay Pool which meters by requests

Re: [squid-users] A way/hack to force squid to die?

2011-06-14 Thread Amos Jeffries
On 14/06/11 18:42, Tom Tux wrote: 2011/6/10 Amos Jeffriessqu...@treenet.co.nz: On 10/06/11 20:41, Tom Tux wrote: Mmm... Now I were able to force squid to die (with gdb): From cache.log: --- SNIP --- (squid)(death+0x37)[0x564d37] /lib64/libpthread.so.0(+0xf5d0)[0x7f99ebe705d0] FATAL:

[squid-users] https proxying with squid and on the fly local CA produced site certificates

2011-06-14 Thread Oguz Yilmaz
At the moment I redirect http(443) requests into squid configured https_port. It works as expected. It terminate ssl connection with the ssl certificate installed in Squid. And then proxies traffic. In this setup, end users get illegal certificate errors, of course. I want to established a local

[squid-users] Re: possible SYN flooding on port 3128. Sending cookies

2011-06-14 Thread Omid Kosari
Thanks . but as i said before it is already disabled net.ipv4.tcp_syncookies=0 -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/possible-SYN-flooding-on-port-3128-Sending-cookies-tp2242687p3595942.html Sent from the Squid - Users mailing list archive at

Re: [squid-users] A way/hack to force squid to die?

2011-06-14 Thread Tom Tux
2011/6/14 Amos Jeffries squ...@treenet.co.nz: On 14/06/11 18:42, Tom Tux wrote: 2011/6/10 Amos Jeffriessqu...@treenet.co.nz: On 10/06/11 20:41, Tom Tux wrote: Mmm... Now I were able to force squid to die (with gdb):  From cache.log: --- SNIP --- (squid)(death+0x37)[0x564d37]

[squid-users] Unsupported method in request dropbox.com

2011-06-14 Thread Gontzal
Hi everybody!! I get these messages on cache.log: 2011/06/14 10:23:54| clientParseRequestMethod: Unsupported method attempted by client_ip: This is not a bug. see squid.conf extension_methods 2011/06/14 10:23:54| clientParseRequestMethod: Unsupported method in request 'X-Dropbox-Locale: es'

Re: [squid-users] WWW-Authenticate header

2011-06-14 Thread Mike Bordignon (GMI)
On 14/06/2011 6:32 p.m., Amos Jeffries wrote: Not another one. Good luck. If you have any influence or contact with the devs of that app please help educate them of the safety issues involved with sending users internal machine logins out over the global Internet. And HTTPS is no longer a

Re: [squid-users] WWW-Authenticate header

2011-06-14 Thread Amos Jeffries
On Wed, 15 Jun 2011 08:48:31 +1200, Mike Bordignon (GMI) wrote: On 14/06/2011 6:32 p.m., Amos Jeffries wrote: Not another one. Good luck. If you have any influence or contact with the devs of that app please help educate them of the safety issues involved with sending users internal machine

Re: [squid-users] Unsupported method in request dropbox.com

2011-06-14 Thread Amos Jeffries
On Tue, 14 Jun 2011 10:43:17 +0200, Gontzal wrote: Hi everybody!! I get these messages on cache.log: 2011/06/14 10:23:54| clientParseRequestMethod: Unsupported method attempted by client_ip: This is not a bug. see squid.conf extension_methods 2011/06/14 10:23:54| clientParseRequestMethod:

Re: [squid-users] WWW-Authenticate header

2011-06-14 Thread Michael Hendrie
On 15/06/2011, at 8:09 AM, Amos Jeffries wrote: On Wed, 15 Jun 2011 08:48:31 +1200, Mike Bordignon (GMI) wrote: On 14/06/2011 6:32 p.m., Amos Jeffries wrote: Not another one. Good luck. If you have any influence or contact with the devs of that app please help educate them of the safety

Re: [squid-users] WWW-Authenticate header

2011-06-14 Thread Mike Bordignon (GMI)
Which indicates the credentials are fine as is the proxy part of the transaction. Firefox appears not have security access to the OS properly to do the background stuff required. 2/3 of NTLM and related protocols is done in background actions. If it's working in IE then its probably one of