[squid-users] Allow access to just one site, blocking all the others.

2012-03-22 Thread Carlos Vaz
Hi, I ' m using squidNT 2.7 on Windows 2003. I'm new to squid, using it for a few days now. Is there a way to achieve the above condition imposed by HR for a group of people? []'s Carlos Vaz Sent from my iPhone 4

AW: [squid-users] DB Error ?

2012-03-22 Thread Jarosch, Ralph
Thanks Amos Is there any way to change the location where squidguard store the temp DB files? Ralph -Ursprüngliche Nachricht- Von: Amos Jeffries [mailto:squ...@treenet.co.nz] Gesendet: Mittwoch, 21. März 2012 23:53 An: squid-users@squid-cache.org Betreff: Re: [squid-users] DB Error ?

Re: [squid-users] DB Error ?

2012-03-22 Thread Helmut Hullen
Hallo, Jarosch,, Du meintest am 22.03.12: Is there any way to change the location where squidguard store the temp DB files? File squidGuard.conf Line dbhome /var/lib/squidGuard/db or whatever you want. Viele Gruesse! Helmut

AW: [squid-users] DB Error ?

2012-03-22 Thread Jarosch, Ralph
But this is only the location where the Blacklist DB is stored. My files where created from the Berkely DB I think -Ursprüngliche Nachricht- Von: Helmut Hullen [mailto:hul...@t-online.de] Gesendet: Donnerstag, 22. März 2012 10:45 An: squid-users@squid-cache.org Betreff: Re: [squid-users]

[squid-users] Re: Allow access to just one site, blocking all the others.

2012-03-22 Thread GarethC
Hi Carlos, Yes you can achieve this by using an ACL (Access control list), for example... acl allowedsites dstdomain google.com http_access allow allowedsites This will allow users to connect to www.google.com (and any other subdomain of google.com), and it will deny access to all other

Re: [squid-users] DB Error ?

2012-03-22 Thread Helmut Hullen
Hallo, Jarosch,, Du meintest am 21.03.12: Hi together I think I have some trouble with my Berkely Database. When I start up my Squid I get following error in my cache.log 2012-03-21 15:50:28 [2325] init domainlist /usr/local/squidGuard/list/BL/warez/domains 2012-03-21 15:50:28 [2325] init

AW: [squid-users] DB Error ?

2012-03-22 Thread Jarosch, Ralph
I couldn´t believe Red Hat change in Version 6 the SELinux process and this piece of sh*** blocked my Berkely DB. Thanks 4 any help -Ursprüngliche Nachricht- Von: Helmut Hullen [mailto:hul...@t-online.de] Gesendet: Donnerstag, 22. März 2012 12:42 An: squid-users@squid-cache.org

RE: TR: [squid-users] https analyze, squid rpc proxy to rpc proxy ii6 exchange2007 with ntlm

2012-03-22 Thread Clem
Hello all I'm glad to inform you that's I have found a workaround solution for outlook anywhere client via NTLM. I really didn't want to change any config of my clients outlook, who are actually configured on NTLM auth via Outlook RPC Proxy settings. Outlook Anywhere is configured in NTLM.

[squid-users] Unusual Denied Request

2012-03-22 Thread Momen, Mazdak
Hi, we have recently noticed unusual denied requests on our Squid servers. Thu Mar 22 03:00:24 2012 3 ***.***.***.*** TCP_DENIED/403 3437 CONNECT https:443 - NONE/- text/html We're not sure what https:443 exactly is or how it is produced. This was not caused by a user, the servers behind

RE: TR: [squid-users] https analyze, squid rpc proxy to rpc proxy ii6 exchange2007 with ntlm

2012-03-22 Thread Clem
Forgot the powershell command : get-outlookanywhere | set-outlookanywhere -IISauthentication basic,Ntlm Infos there : http://marckean.wordpress.com/2009/02/06/exchange-2007-sp1-outlook-anywhere- ntlm-authentication-for-domain-based-and-workgroup-based-computers/ -Message d'origine- De :

Re: [squid-users] Re: Allow access to just one site, blocking all the others.

2012-03-22 Thread Jose Ildefonso Camargo Tolosa
Hi all, On Thu, Mar 22, 2012 at 6:08 AM, GarethC gar...@garethcoffey.com wrote: Hi Carlos, Yes you can achieve this by using an ACL (Access control list), for example... acl allowedsites dstdomain google.com http_access allow allowedsites This will allow users to connect to

TR: TR: [squid-users] https analyze, squid rpc proxy to rpc proxy ii6 exchange2007 with ntlm

2012-03-22 Thread Clem
I've tested activesync with this tool https://store.accessmylan.com/main/diagnostic-tools , all is OK ! I will be able to put my front-end squid proxy for exchange 2007 in production soon ! -Message d'origine- De : Clem [mailto:clemf...@free.fr] Envoyé : jeudi 22 mars 2012 14:40 À :

Re: [squid-users] Unusual Denied Request

2012-03-22 Thread Kinkie
On Thu, Mar 22, 2012 at 2:38 PM, Momen, Mazdak mmo...@cvent.com wrote: Hi, we have recently noticed unusual denied requests on our Squid servers. Thu Mar 22 03:00:24 2012      3 ***.***.***.*** TCP_DENIED/403 3437 CONNECT https:443 - NONE/- text/html We're not sure what https:443 exactly is

Re: [squid-users] Re: Need some help about delay_parameters directive

2012-03-22 Thread Carlos Manuel Trepeu Pupo
The delay_parameter it's in bytes not bits. Try and tell if work !! On Wed, Mar 21, 2012 at 2:11 AM, Muhammad Yousuf Khan sir...@gmail.com wrote: please help me. delay_parameter 1 32000/1024 this means  if i complete10MB what ever the size would be regardless of that my bandwidth would

Re: [squid-users] Squid 3.2, reverse proxy, deny_info http/https redirect problems.

2012-03-22 Thread Cliff Hill
Yes, my config used to have the vhost defined in it, however with 3.2, I found out it wasn't needed any more, so I cleared it up, in an effort to figure out what is going on. I guess I need to show the whole config. I'll also note I am using it as a reverse proxy, as well as a transparent proxy

Re: [squid-users] Squid 3.2, reverse proxy, deny_info http/https redirect problems.

2012-03-22 Thread Cliff Hill
Oh, I've found another situation that seems potentially related -- when I use a SSH tunnel to the proxy (port 3128) from a computer outside my network, and try to use it as my browser proxy, it hangs on everything, completely refusing to send any web traffic my way. 3.1 didn't have this problem --

[squid-users] limiting connections

2012-03-22 Thread Carlos Manuel Trepeu Pupo
I need to block each user to make just one connection to download specific extension files, but I dont know how to tell that can make just one connection to each file and not just one connection to every file with this extension. i.e: www.google.com #All connection that required

Re: [squid-users] Re: Allow access to just one site, blocking all the others.

2012-03-22 Thread Eliezer Croitoru
On 22/03/2012 12:38, GarethC wrote: Hi Carlos, Yes you can achieve this by using an ACL (Access control list), for example... acl allowedsites dstdomain google.com http_access allow allowedsites i would recommend to use another acl for matching the source like: acl localnet src

[squid-users] Ldap Digest and basic

2012-03-22 Thread FredB
Hi, I'd like to know if there is a way to mix Ldap digest and basic ? This year I want migrate my users progressively How I can, if I can, use ldap basic and ldap digest on same proxy ? A user with good attribute on digest and otherwise with ldap basic Thanks

[squid-users] Delay pool and Class A network

2012-03-22 Thread FredB
Hi, I'm working with a squid like concentrator for different networks, and I want limited the traffic by user, so i defined my network range in class A like 10.0.0.0/8 But sadly I saw that delay_pool doesn't works with this network's class # # The delay pool classes are: # #

Re: TR: TR: [squid-users] https analyze, squid rpc proxy to rpc proxy ii6 exchange2007 with ntlm

2012-03-22 Thread Clem
For infos, I'm using squid 3.2016 beta, exchange 2007 sp3 and a test client on XP, I'll test a client on windows7. No config for blackberry devices, they don't use activesync but the connection to blackberry server directly connected to our exchange. Le 22/03/2012 15:50, Clem a écrit :

Re: [squid-users] Re: Need some help about delay_parameters directive

2012-03-22 Thread Muhammad Yousuf Khan
ok i did every thing byes bits i achieve the gole but value as per my calculation is wrong. can you please tell me which value do you think i shell put to limit download till 10MB then bandwidth may limit to specific bytes. i tries 1024000 it wokes till 1 MB file downloaded in full speed after

Re: [squid-users] Re: Need some help about delay_parameters directive

2012-03-22 Thread Carlos Manuel Trepeu Pupo
If you want to limit to 128 KB/s when the download reach 10 MB, then must be something like this: delay_parameters 1 131072/10485760 Remember that 1 MB = 1*1024*1024 bytes , thats why 1024000 bytes represent 1 MB, I hope can help you !!! On Thu, Mar 22, 2012 at 4:41 PM, Muhammad Yousuf Khan

Re: [squid-users] Re: Need some help about delay_parameters directive

2012-03-22 Thread Amos Jeffries
On 23/03/2012 9:41 a.m., Muhammad Yousuf Khan wrote: ok i did every thing byes bits i achieve the gole but value as per my calculation is wrong. can you please tell me which value do you think i shell put to limit download till 10MB then bandwidth may limit to specific bytes. i tries 1024000 it

Re: [squid-users] Delay pool and Class A network

2012-03-22 Thread Amos Jeffries
On 23/03/2012 7:11 a.m., FredB wrote: Hi, I'm working with a squid like concentrator for different networks, and I want limited the traffic by user, Limiting the traffic by user is class-4 pools type. so i defined my network range in class A like 10.0.0.0/8 But sadly I saw that

Re: [squid-users] Ldap Digest and basic

2012-03-22 Thread Amos Jeffries
On 23/03/2012 5:51 a.m., FredB wrote: Hi, I'd like to know if there is a way to mix Ldap digest and basic ? This year I want migrate my users progressively How I can, if I can, use ldap basic and ldap digest on same proxy ? A user with good attribute on digest and otherwise with ldap basic

Re: [squid-users] limiting connections

2012-03-22 Thread Amos Jeffries
On 23/03/2012 5:42 a.m., Carlos Manuel Trepeu Pupo wrote: I need to block each user to make just one connection to download specific extension files, but I dont know how to tell that can make just one connection to each file and not just one connection to every file with this extension. i.e:

Re: [squid-users] Squid 3.2, reverse proxy, deny_info http/https redirect problems.

2012-03-22 Thread Amos Jeffries
On 23/03/2012 4:30 a.m., Cliff Hill wrote: Yes, my config used to have the vhost defined in it, however with 3.2, I found out it wasn't needed any more, so I cleared it up, in an effort to figure out what is going on. Okay that makes sense. I guess I need to show the whole config. I'll also

Re: [squid-users] question about setting TOS for specific media types

2012-03-22 Thread Amos Jeffries
On 21/03/2012 10:19 a.m., Brian Landy wrote: On Mar 20, 2012, at 10:20 AM, Amos Jeffries wrote: On 21/03/2012 2:26 a.m., Brian Landy wrote: Hi, I was hoping to use traffic shaping to reserve bandwidth for http streaming video, and use squid to tag the video traffic separately from other

[squid-users] Accessing Squid by telnet - differences in behavior?

2012-03-22 Thread Justin Lawler
Hi, Comparing a legacy instance of squid (squid 3.0.15) with the latest (3.1.19), and we noticed some differences. Wondering what the change was. When we telnet into the port do a Get http://www.gmail.com http/1.1 - on legacy squid, once it returns the content it closes the connection

Re: [squid-users] Accessing Squid by telnet - differences in behavior?

2012-03-22 Thread Amos Jeffries
On 23/03/2012 5:22 p.m., Justin Lawler wrote: Hi, Comparing a legacy instance of squid (squid 3.0.15) with the latest (3.1.19), and we noticed some differences. Wondering what the change was. When we telnet into the port do a Get http://www.gmail.com http/1.1 - on legacy squid, once it

RE: [squid-users] Accessing Squid by telnet - differences in behavior?

2012-03-22 Thread Justin Lawler
Thanks Amos, Should this affect performance of squid for clients using HTTP1.1? For instance: * will number of connections at any one time increase to squid so we'll need to increase squid file descriptors? * will the increase in connections affect the performance/capacity of