Re: [squid-users] Prefetch patch test

2012-02-16 Thread Helmut Hullen
Hallo, anita.sivakumar, Du meintest am 16.02.12: Sorry Amos. But where else do I post this ? I thought I can mail it to this mail id squid-users@squid-cache.org. But if there is some other place, please let me know. [full quote deleted - don't top post, please, don't full quote, please] The

Re: [squid-users] Squid block list

2012-02-16 Thread Muhammad Yousuf Khan
thank you all for your helpful suggestions. i will check and let you know if i found any difficulty in installing any selected option. On Thu, Feb 16, 2012 at 1:41 AM, Mr J Potter jpotter...@because.org.uk wrote: I've been using squidguard for years. Its great - you can block/allow by user,

[squid-users] problem with auth_ntlm and javascript

2012-02-16 Thread Esteban Torres Rodríguez
Hi everyone, We have a problem with firefox, auth_ntlm and javascript. Our squid server autenticate with AD through ntlm for Single Sign On. There is no problem when we use IE, but when we use Firefox and the web page requires Javascript, the client asks for the user/password for each javascript

[squid-users] Email , VOIP , RDP with SQUID

2012-02-16 Thread Muhammad Yousuf Khan
hello all, I need to enable Email , Voice over ip , Microsof Remote Desktop and other software to communicate with target machine. i know squid can not do that. but we can achieve that via iptables. i have found few solutions on internet but didn't cope up with our need. just want to share my

[squid-users] ACL compisition

2012-02-16 Thread Paolo Supino
Hi I have the following scenario: I have a subnet that needs to get out on the internet to 2 different subnets. To subnet1 it needs to be able to access only in HTTP while to subnet2 it needs to be able to access only in HTTPS. Is it possible to do the follwoing: acl source_subnet src

Re: [squid-users] Help blocking connections at a certain time

2012-02-16 Thread Luis Daniel Lucio Quiroz
Le 7 février 2012 08:45, Stephen McGuinness webm...@gmail.com a écrit : I am trying to force the users behind my proxy to be forced into a human interaction ACL at a certain time every night. I have it working pretty well, but there is still traffic that is not getting blocked. From what I

Re: [squid-users] finding the bottleneck

2012-02-16 Thread Luis Daniel Lucio Quiroz
Comments, behind... Le 12 janvier 2012 06:53, E.S. Rosenberg e...@g.jct.ac.il a écrit : 2012/1/11 jeffrey j donovan dono...@beth.k12.pa.us: On Jan 10, 2012, at 7:45 AM, E.S. Rosenberg wrote: Hi, We run a setup where our users are passing through 0-2 proxies before reaching the Internet: -

Re: [squid-users] Login\password only once

2012-02-16 Thread Luis Daniel Lucio Quiroz
Le 31 janvier 2012 23:36, CyberSoul cybers...@gmx.com a écrit : Hi all,   could anyone give any suggestion for realize next scheme:   User turn on the computer after booting operate system, he enter login\password for authorize in domain (Active Directory).   After logon in AD, he did not

Re: [squid-users] squid sessions behind NAT

2012-02-16 Thread Vyacheslav Maliev
Thanks for your answer, but both variants are not suitable in my situation. My proxy is working in transparent mode and there is not possible to authenticate in this mode as i know. I can`t expose networks behind routers because there might be duplicated networks and routes. 2012/2/14 Matus UHLAR

Re: [squid-users] HTTP 407 responses

2012-02-16 Thread Amos Jeffries
On 16/02/2012 9:31 a.m., Mr J Potter wrote: Hi Alex, I've got it working fine on domain members. I should have explained better - I'm setting up a guest wireless network in a school, so all devices that attach will be personal, non domain, and as a rule I won't get the chance to configure

Re: [squid-users] cachemgr.cfi General Runtime Information shows negative memory values

2012-02-16 Thread Amos Jeffries
On 16/02/2012 8:16 p.m., Sebastian Muniz wrote: Hello all. I am trying to understand how Squid allocates resources. It is weir for me that the General Runtime Information shows negative values! You can check it here: http://pastebin.com/EyVPB3Qu It is a bug or a problem in my installation?

Re: [squid-users] Email , VOIP , RDP with SQUID

2012-02-16 Thread Amos Jeffries
On 17/02/2012 12:45 a.m., Muhammad Yousuf Khan wrote: hello all, I need to enable Email , Voice over ip , Microsof Remote Desktop and other software to communicate with target machine. i know squid can not do that. but we can achieve that via iptables. i have found few solutions on internet

Re: [squid-users] Authorisation fails sometimes

2012-02-16 Thread Amos Jeffries
On 17/02/2012 1:31 a.m., Günter Merz wrote: I tested if an earlier ACL might prevent those transfers from being allowed by inserting an ACL right before the external_acl_type to allow all transfers from the host I was using. This didn't show any TCP_DENIEDs. Um, of course not. allow

Re: [squid-users] squid sessions behind NAT

2012-02-16 Thread Amos Jeffries
On 17/02/2012 8:32 a.m., Vyacheslav Maliev wrote: 2012/2/14 Matus UHLAR - fantomas: On 11.02.12 07:36, Vyacheslav Maliev wrote: Hi! Tell me please, how i could delimit sessions in session helper for users behind the NAT against proxy squid? For example, users connect to proxy squid server

Re: [squid-users] ACL compisition

2012-02-16 Thread Amos Jeffries
On 17/02/2012 3:51 a.m., Paolo Supino wrote: Hi I have the following scenario: I have a subnet that needs to get out on the internet to 2 different subnets. To subnet1 it needs to be able to access only in HTTP while to subnet2 it needs to be able to access only in HTTPS. Is it possible to do

Re: [squid-users] finding the bottleneck

2012-02-16 Thread E.S. Rosenberg
2012/2/16 Luis Daniel Lucio Quiroz luis.daniel.lu...@gmail.com: Comments, behind... Le 12 janvier 2012 06:53, E.S. Rosenberg e...@g.jct.ac.il a écrit : 2012/1/11 jeffrey j donovan dono...@beth.k12.pa.us: On Jan 10, 2012, at 7:45 AM, E.S. Rosenberg wrote: Hi, We run a setup where our users

[squid-users] Squid as lb: can handle 503 answer from application server as faliure and retry next peer?

2012-02-16 Thread Albert Petit
Hi, We use squid as LB for HTTP Traffic (by defining cache-peers), It works quite well when we have a connectivity failure between squid and one of the application servers so then it will try next possible cache-peer However we would like to handle following scenario: If our application is

Re: [squid-users] finding the bottleneck

2012-02-16 Thread Eliezer Croitoru
hey there Eli(i think i know you) any ssl interception will make the connection slower but it can be tricky. gmail is one big example of a site that has problems while working on plain http and on https will work better also will solve many problems because most ISP's wont do ssl interception.

Re: [squid-users] finding the bottleneck

2012-02-16 Thread E.S. Rosenberg
2012/2/17 Eliezer Croitoru elie...@ec.hadorhabaac.com: hey there Eli(i think i know you) Hi (maybe), any ssl interception will make the connection slower but it can be tricky. gmail is one big example of a site that has problems while working on plain http and on https will work better also

[squid-users] blocking one user one way yet allowing other users to surf

2012-02-16 Thread alexus
is there a way to make different rules based on user ip? I need to block 1 IP of everything except for 1 site, yet any other users should be able to access everything else no problem -- http://alexus.org/

[squid-users] Error Pages

2012-02-16 Thread Roman Gelfand
Is there a way I could access error pages from a web browser? Thanks

[squid-users] Rewriting URL

2012-02-16 Thread Roman Gelfand
Consider the following configuration... acl host1 dst host1.dom.com http_port 80 accel defaultsite=host1.dom.com vhost cache_peer 192.168.1.42 parent 80 0 no-query originserver name=host1server never_direct allow host1 http_access allow host1 cache_peer_access host1server allow host1

Re: [squid-users] finding the bottleneck

2012-02-16 Thread Amos Jeffries
On 17/02/2012 2:29 p.m., E.S. Rosenberg wrote: 2012/2/17 Eliezer Croitoru: it also depends on your ISP interception machines. if they have a lot of users and less powerfull machines it will cause slowdowns! Yeah, we don't know what they have exactly, we hope it's good stuff the problem is

Re: [squid-users] Error Pages

2012-02-16 Thread Amos Jeffries
On 17/02/2012 5:17 p.m., Roman Gelfand wrote: Is there a way I could access error pages from a web browser? Thanks Access? in what way? You can *view* at least one by clicking on this link: http://example.com.invalid/ Amos

Re: [squid-users] Rewriting URL

2012-02-16 Thread Amos Jeffries
On 17/02/2012 6:10 p.m., Roman Gelfand wrote: Consider the following configuration... acl host1 dst host1.dom.com dst is not a good idea. Any phisher attacker who wants to make their website resolve to your servers internal IP can do so and connect through this proxy to it. dstdomain is

Re: [squid-users] blocking one user one way yet allowing other users to surf

2012-02-16 Thread Amos Jeffries
On 17/02/2012 2:48 p.m., alexus wrote: is there a way to make different rules based on user ip? I need to block 1 IP of everything except for 1 site, yet any other users should be able to access everything else no problem Squid uses things called access controls. How they work and how to

Re: [squid-users] Squid as lb: can handle 503 answer from application server as faliure and retry next peer?

2012-02-16 Thread Amos Jeffries
On 17/02/2012 12:51 p.m., Albert Petit wrote: Hi, We use squid as LB for HTTP Traffic (by defining cache-peers), It works quite well when we have a connectivity failure between squid and one of the application servers so then it will try next possible cache-peer However we would like to