[squid-users] Website Deny

2011-07-14 Thread Andrew Burger
HI There, I'm running squid with user authentication. Now I want to block a user from not accessing a website but I want to block them via there squid username login. Most of the stuff I'm finding is by ip, but the problem is that won't work in my network infrastructure as the user can then

Re: [squid-users] Website Deny

2011-07-14 Thread Amos Jeffries
On 14/07/11 20:35, Andrew Burger wrote: HI There, I'm running squid with user authentication. Now I want to block a user from not accessing a website but I want to block them via there squid username login. Most of the stuff I'm finding is by ip, but the problem is that won't work in my

[squid-users] Reverse proxy with Url path problem

2011-07-14 Thread Pschittt
Hi, i'd like to use Squid as a reverse proxy, in front of multiple web servers. When I want to access : http://mywebserver/serv1, i want Squid to be able to redirect the url to http://192.168.2.1:2048. and to be transparent for the users (the users should not see 192.168.2.1:2048 but

[squid-users] RFC2616 and old http

2011-07-14 Thread Mohsen Pahlevanzadeh
Dear all, I read in RFC2616 the following context: When a directive appears without any 1#field-name parameter, the directive applies to the entire request or response. When such a directive appears with a 1#field-name parameter, it applies only to the named field or fields, and not to

[squid-users] no-cache and origin servers

2011-07-14 Thread Mohsen Pahlevanzadeh
Dear all, Suppose i have an origin server and squid, my origin server fill cache header and send squid-box, now if put no-cache squid does cache my page? It's very important that squid doesn't response.How do i implement it? Yours, Mohsen signature.asc Description: This is a digitally signed

Re: [squid-users] Squid - Reverse Proxy

2011-07-14 Thread viswanathan sekar
Thank you very much Amos When sibling realtionship is configured in cache_peer without any protocols( icp/htcp), whether squid sends GET request to peers instead of ICP/HTCP requests ? Eg. cache_peer 172.16.1.10 sibling 3128 0 no-query cache_peer 172.16.1.11 sibling 3128 0 no-query Thanks

Re: [squid-users] no-cache and origin servers

2011-07-14 Thread Amos Jeffries
On 14/07/11 22:21, Mohsen Pahlevanzadeh wrote: Dear all, Suppose i have an origin server and squid, my origin server fill cache header and send squid-box, now if put no-cache squid does cache my page? Yes the page may be stored. no-cache from the origin is the same meaning as must-revalidate

[squid-users] How to create an ACL matching patterns from an URL

2011-07-14 Thread Supratik Goswami
Is there a way to create an acl in such a way that I can only block few pages from that domain ? Example: If there is a domain named example.com, I will allow all pages except when it matches the following in the URL. example.com/home.php example.com/home.php#!/profile.php Regards Supratik

Re: [squid-users] RFC2616 and old http

2011-07-14 Thread Amos Jeffries
On 14/07/11 22:05, Mohsen Pahlevanzadeh wrote: Dear all, I read in RFC2616 the following context: When a directive appears without any 1#field-name parameter, the directive applies to the entire request or response. When such a directive appears with a 1#field-name parameter, it applies

Re: [squid-users] Squid - Reverse Proxy

2011-07-14 Thread Amos Jeffries
On 14/07/11 23:45, viswanathan sekar wrote: Thank you very much Amos When sibling realtionship is configured in cache_peer without any protocols( icp/htcp), whether squid sends GET request to peers instead of ICP/HTCP requests ? Eg. cache_peer 172.16.1.10 sibling 3128 0 no-query cache_peer

Re: [squid-users] How to create an ACL matching patterns from an URL

2011-07-14 Thread Amos Jeffries
On 15/07/11 00:17, Supratik Goswami wrote: Is there a way to create an acl in such a way that I can only block few pages from that domain ? Example: If there is a domain named example.com, I will allow all pages except when it matches the following in the URL. example.com/home.php

Re: [squid-users] Reverse proxy with Url path problem

2011-07-14 Thread Amos Jeffries
On 14/07/11 21:59, Pschittt wrote: Hi, i'd like to use Squid as a reverse proxy, in front of multiple web servers. When I want to access : http://mywebserver/serv1, i want Squid to be able to redirect the url to http://192.168.2.1:2048. and to be transparent for the users (the users should not

Re: [squid-users] How to create an ACL matching patterns from an URL

2011-07-14 Thread Supratik Goswami
Hello Amos, I checked the documentation, it is working fine when I match only the domain. acl forbiddenURLs url_regex -i /etc/squid/forbiddenURL.txt http_access deny forbiddenURLs Any domain name I put in the forbiddenURL.txt is working fine. for example: .example.com can block everything for

Re: [squid-users] How to create an ACL matching patterns from an URL

2011-07-14 Thread Amos Jeffries
On 15/07/11 01:26, Supratik Goswami wrote: Hello Amos, I checked the documentation, it is working fine when I match only the domain. acl forbiddenURLs url_regex -i /etc/squid/forbiddenURL.txt http_access deny forbiddenURLs Any domain name I put in the forbiddenURL.txt is working fine. for

Re: [squid-users] Reverse proxy with Url path problem

2011-07-14 Thread Pschittt
Well, That will work if I have only one server behind squid. The fact is I have 2 servers behind squid : http://mywebserver/serv1 - http://192.168.2.1:2048 http://mywebserver/serv2 - http://192.168.2.2:4096 And those servers must be accessible only via Squid (the reverse proxy purpose...). I

Re: [squid-users] Unix Domain Sockets

2011-07-14 Thread Chris Conlon
Hi Amos, On Jul 13, 2011, at 5:01 PM, Amos Jeffries wrote: On Wed, 13 Jul 2011 10:06:10 -0600, Chris Conlon wrote: Hi, Does anyone know if there is a way to configure Squid to use unix domain sockets for input/output instead of using TCP? No. Squid is a proxy, for use transferring data

[squid-users] Re: Squid 3.2.0.9 problems and special reverse proxy configuration

2011-07-14 Thread niemidc
Thanks for the tips! Was my cache_peer line OK? The possibility of hitting an item from a different port could be disastrous, however. Are they identified by both host and URI, or if the URI is the same (say, both /index.html) could you get the wrong one? If this cannot be fixed through

Re: [squid-users] How to create an ACL matching patterns from an URL

2011-07-14 Thread Supratik Goswami
Hello Amos, Thanks for the information. Regards Supratik On Thu, Jul 14, 2011 at 7:11 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 15/07/11 01:26, Supratik Goswami wrote: Hello Amos, I checked the documentation, it is working fine when I match only the domain. acl forbiddenURLs

[squid-users] Re: Squid 3.2.0.9 problems and special reverse proxy configuration

2011-07-14 Thread niemidc
One more thing -- I'm using nf-hipac so iptables is not present. I've configured with --disable-linux-netfilter, but see this message on every request: kid1| WARNING: transparent proxying not supported The actual caching process is working fine without NAT, is there a way to suppress this

Re: [squid-users] Re: Squid 3.2.0.9 problems and special reverse proxy configuration

2011-07-14 Thread Amos Jeffries
On 15/07/11 02:38, niemidc wrote: Thanks for the tips! Was my cache_peer line OK? Yes. Though with only one round-robin wont do anything than change the log tag. I assumed you have several. The possibility of hitting an item from a different port could be disastrous, however. Are they

[squid-users] data transfer restriction

2011-07-14 Thread benjamin fernandis
Hi, I am using centos 5.6 with latest version.Now i want to configure bandwith restriction per ip and want to derive restriction for data transfer. Example , per ip want to set 2gb data transfer per month or 200Mb per day. Please guide me for that. Thanks, Benjamin

Re: [squid-users] Re: Squid 3.2.0.9 problems and special reverse proxy configuration

2011-07-14 Thread Amos Jeffries
On 15/07/11 03:05, niemidc wrote: One more thing -- I'm using nf-hipac so iptables is not present. I've configured with --disable-linux-netfilter, but see this message on every request: kid1| WARNING: transparent proxying not supported The actual caching process is working fine without NAT,

[squid-users] Re: Squid 3.2.0.9 problems and special reverse proxy configuration

2011-07-14 Thread niemidc
Further notes: the suggested myportname syntax does not seem to work for me. I will try your patch later to see if it helps. We are not using NAT at all. I haven't managed to find anything that thoroughly explains the differences between myport and myportname, though. -- View this message in

[squid-users] log message oddities -- what do they mean? how to interpret?

2011-07-14 Thread Linda Walsh
Most recent info as at the bottom, but am curious about things I ran into Still have 1 unknown error and no estimate on load handling ability, But think I will send this off now. Hopefully others will be able to give it a gander and offer insights Thanks! Linda... I recently

[squid-users] Squid Kerberos Authentication

2011-07-14 Thread Daniel Faulknor
Hi, I've followed the http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory howto, and I am now getting this error in my cache.log 2011/07/15 12:13:45| squid_kerb_auth: WARNING: received type 1 NTLM token 2011/07/15 12:13:45| authenticateNegotiateHandleReply: Error

Re: [squid-users] Re: Squid 3.2.0.9 problems and special reverse proxy configuration

2011-07-14 Thread Amos Jeffries
On 15/07/11 04:57, niemidc wrote: Further notes: the suggested myportname syntax does not seem to work for me. I will try your patch later to see if it helps. We are not using NAT at all. I haven't managed to find anything that thoroughly explains the differences between myport and myportname,

Re: [squid-users] log message oddities -- what do they mean? how to interpret?

2011-07-14 Thread Amos Jeffries
descriptors available squid[6023]: Initializing IP Cache... ...and restart... So What's a !commHasHalfClosedMonitor(fd)...and why does it cause death? pconn issues. We fixed those the other day, so the squid-3.2.0.9-20110714 dialy should be fixed. (before I sent this.going over and over

Re: [squid-users] Squid Kerberos Authentication

2011-07-14 Thread Amos Jeffries
On 15/07/11 13:47, Daniel Faulknor wrote: Hi, I've followed the http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory howto, and I am now getting this error in my cache.log 2011/07/15 12:13:45| squid_kerb_auth: WARNING: received type 1 NTLM token 2011/07/15 12:13:45|

Re: [squid-users] Reverse proxy with Url path problem

2011-07-14 Thread Amos Jeffries
On 15/07/11 01:41, Pschittt wrote: Well, That will work if I have only one server behind squid. The fact is I have 2 servers behind squid : http://mywebserver/serv1 - http://192.168.2.1:2048 http://mywebserver/serv2 - http://192.168.2.2:4096 And those servers must be accessible only via

Re: [squid-users] data transfer restriction

2011-07-14 Thread Amos Jeffries
On 15/07/11 04:16, benjamin fernandis wrote: Hi, I am using centos 5.6 with latest version.Now i want to configure bandwith restriction per ip and want to derive restriction for data transfer. Example , per ip want to set 2gb data transfer per month or 200Mb per day. Squid does not do quotas