Re: [squid-users] No forward-proxy ports error in 3.3

2012-04-25 Thread Ahmed Talha Khan
Looking at the explanation you gave it seems that forward_proxy is not a necessary if my setup allows for it. My case is that of simple forward proxy. I do not have any proxy peers, nor am i accessing the cachemgr.cgi. So in the case of normal webpage requests e.g www.google.com none of these

Re: [squid-users] Squid 3.0.STABLE19 and TPROXY

2012-04-25 Thread Amos Jeffries
On 25/04/2012 5:41 p.m., Kirk Hoganson wrote: On 04/24/2012 10:17 PM, Amos Jeffries wrote: On 25/04/2012 2:54 p.m., Kirk Hoganson wrote: I modified the squid.conf to add support for TPROXY: http_port 3128 transparent http_port 3129 tproxy Or: http_port 3128 tproxy Both changes result in

Re: [squid-users] Re: DNS Squid tree with parent - child

2012-04-25 Thread Amos Jeffries
On 25/04/2012 5:44 p.m., anita wrote: Hi Amos, Thanks for the reply. I could now understand the meaning of transparent proxy wrt DNS lookups ! http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0801 In order to prevent malicious clients using the proxy to bypass browser security,

Re: [squid-users] Problems whith Hotmail attachements

2012-04-25 Thread Amos Jeffries
On 25/04/2012 6:59 p.m., Jose A. Vidal wrote: Thank you for your suggestions Amos. To describe the actual problem I'll write down the steps: 1.- Open hotmail account (via http://www.hotmail.com) - OK 2.- Create new mail - OK 3.- Try to add some attachement - the popup screen to select the file

[squid-users] how the big guys are doing it - Caching dynamic content with squid

2012-04-25 Thread x-man
Hello, I was bugging my head recently with different approaches on how to cache dynamic content with squid, especially youtube content, but also other similar video sites. The solutions I found on the internet and tried ranged from url_rewriters with php scripts running on apache, to cache_peer

Re: [squid-users] No forward-proxy ports error in 3.3

2012-04-25 Thread Amos Jeffries
On 25/04/2012 6:04 p.m., Ahmed Talha Khan wrote: Looking at the explanation you gave it seems that forward_proxy is not a necessary if my setup allows for it. My case is that of simple forward proxy. I do not have any proxy peers, nor am i accessing the cachemgr.cgi. So in the case of normal

Re: [squid-users] Encrypted (Basic) Authentication

2012-04-25 Thread Christoph Mitasch
Hi Amos, thanks for your response. On 04/20/2012 04:22 PM, Amos Jeffries wrote: I found the following solution, but I'm not suire if that's a good way to go. http://www.mikealeonetti.com/wiki/index.php/Squid_LDAP_transparent_proxy_authentication_script Not relevant. That is for

Re: [squid-users] No forward-proxy ports error in 3.3

2012-04-25 Thread Ahmed Talha Khan
On Wed, Apr 25, 2012 at 2:26 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 25/04/2012 6:04 p.m., Ahmed Talha Khan wrote: Looking at the explanation you gave it seems that forward_proxy is not a necessary if my setup allows for it. My case is that of simple forward proxy. I do not have any

Re: [squid-users] No forward-proxy ports error in 3.3

2012-04-25 Thread Ahmed Talha Khan
Hey Amos, I tried this patch http://bugs.squid-cache.org/attachment.cgi?id=2660action=diff which you mentioned in the bug and it worked :) This bug describes the case of host header forgery hang issue. I think it relates to the DNS IP of the host name in the request not matching the destination

[squid-users] squid kerberos auth for multiple proxy servers

2012-04-25 Thread Rietzler, Markus (RZF, SG 324 / RIETZLER_SOFTWARE)
i am planing to setup kerberos auth in squid. At the moment we are using ntlm auth but want also to provide Kerberos/negotiate auth. A few questions: 1) Do we need a keytab file? 2) We have multiple squid-servers, do I need an individual keytab-file for each server or would it be enough to

Re: [squid-users] anyone knows some info about youtube range parameter?

2012-04-25 Thread Eliezer Croitoru
On 25/04/2012 06:02, Amos Jeffries wrote: On 25/04/2012 6:02 a.m., Eliezer Croitoru wrote: as for some people asking me recently about youtube cache i have checked again and found that youtube changed their video uris and added an argument called range that is managed by the youtube player. the

Re: [squid-users] how the big guys are doing it - Caching dynamic content with squid

2012-04-25 Thread Marcus Kool
I don't know how others (a.k.a. the big guys) are doing it, but I have a suggestion: YouTube and others sometimes change the way they redirect a browser to different stream servers and use different URLs for the same video, so the solution should be configurable with a configuration file saying

Re: [squid-users] slow internet browsing.

2012-04-25 Thread Muhammad Yousuf Khan
Thanks , i learn some thing new from you all. however ill update the results in few days as i am monitoring the stuff as how things are going. Thanks, On Wed, Apr 25, 2012 at 7:38 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 25/04/2012 3:34 a.m., Eliezer Croitoru wrote: On 24/04/2012

Re: [squid-users] anyone knows some info about youtube range parameter?

2012-04-25 Thread Ghassan Gharabli
Hello, As i remember I already discussed this subject before mentioning that Youtube several months ago added a new variable/URI RANGE. I tried to deny all URLs that comes with RANGE to avoid presenting the error at Youtube Player butb tried to investigate more and came with a solution like that

Re: [squid-users] anyone knows some info about youtube range parameter?

2012-04-25 Thread Hasanen AL-Bana
wouldn't be better if we save the video chunks ? youtube is streaming files with 1.7MB flv chunks, youtube flash player knows how to merge them and play themso the range start and end will alaways be the same for the same video as long as user doesn't fast forward it or do something

[squid-users] Removing dashes from user field in access.log

2012-04-25 Thread Isamar Maia
Hi Folks, I am using squid version Version 2.6.STABLE22 which comes included in Endian Firewall version 2.4.1, with Windows AD authentication(NTLM) I am exporting access logs to Mysar Web log reporter and in the reports, I can see WIndows AD user logins and some records come with a dash(-) sign.

[squid-users] Improve flash loading time

2012-04-25 Thread Fuhrmann, Marcel
Hello list, I am a squid newbie, but i am working on it. So please forgive my lack of knowledge. Sometimes several flash videos don't load or it takes a long time for starting the video. I have read that dns resolution is often a problem for long loading times. But DNS works fine, the squid

Re: [squid-users] Removing dashes from user field in access.log

2012-04-25 Thread Amos Jeffries
On 26.04.2012 07:06, Isamar Maia wrote: Hi Folks, I am using squid version Version 2.6.STABLE22 which comes included in Endian Firewall version 2.4.1, with Windows AD authentication(NTLM) I am exporting access logs to Mysar Web log reporter and in the reports, I can see WIndows AD user logins

[squid-users] Re: squid kerberos auth for multiple proxy servers

2012-04-25 Thread Markus Moeller
Hi Markus, The answers are: 1) Yes 2) The keytab contains the hostname of the squid server. So you would need multiple keytabs 3) The principal name will be based on a fixed part HTTP and the name you use in the Browser configuration. If you use in IE squid1.domain.com then you must

Re: [squid-users] Improve flash loading time

2012-04-25 Thread Amos Jeffries
On 26.04.2012 08:17, Fuhrmann, Marcel wrote: Hello list, I am a squid newbie, but i am working on it. So please forgive my lack of knowledge. Sometimes several flash videos don't load or it takes a long time for starting the video. I have read that dns resolution is often a problem for long

Re: [squid-users] anyone knows some info about youtube range parameter?

2012-04-25 Thread Eliezer Croitoru
On 25/04/2012 20:39, Ghassan Gharabli wrote: Hello, As i remember I already discussed this subject before mentioning that Youtube several months ago added a new variable/URI RANGE. I tried to deny all URLs that comes with RANGE to avoid presenting the error at Youtube Player butb tried to

Re: [squid-users] anyone knows some info about youtube range parameter?

2012-04-25 Thread Eliezer Croitoru
On 25/04/2012 20:48, Hasanen AL-Bana wrote: wouldn't be better if we save the video chunks ? youtube is streaming files with 1.7MB flv chunks, youtube flash player knows how to merge them and play themso the range start and end will alaways be the same for the same video as long as user