Re: [squid-users] How to know which ACL triggered an Access Denied?

2012-07-14 Thread Amos Jeffries
On 13/07/2012 11:06 p.m., Mike wrote: Hi all, Has the subject says, I'm having problems with NTLM in *some* users, the logs show this when I request the page ? subject of this thread does not talk about NTLM, only ACLs. You hijacking someone elses question? Amos

Re: [squid-users] block all torrents connections through squid

2012-07-14 Thread Amos Jeffries
On 14/07/2012 11:54 a.m., Ali Esf wrote: hi list is there any way to block BitTorrent and any other torrent connection throught squid? When a user begins a torrent download they fetch a file with extension type .torrent. Once they have those details the rest of the torrent is not trackable

Re: [squid-users] How to know which ACL triggered an Access Denied?

2012-07-14 Thread Amos Jeffries
On 13/07/2012 10:01 p.m., Dayo wrote: Hi I've got a bunch of ACLs that block sites based on various criteria. Sometimes I get an Access Denied that I can't match to any of my ACLs just by looking at the URL. How do I get squid to tell me which ACL triggered it? debug_options 28,3 Or post

[squid-users] ext_session_acl active mode

2012-07-14 Thread Jack Black
Hi. According to this page: http://wiki.squid-cache.org/ConfigExamples/Portal/Splash Active Mode is supposed to prevent random software like anti-viruses from resetting the session when using ext_session_acl. Is this only true for software that uses TCP port 80, but NOT HTTP? I have configured

Re: [squid-users] HTTPS interception and proxy to origin server clear traffic / FTP Proxy

2012-07-14 Thread Amos Jeffries
On 14/07/2012 3:22 a.m., Abdessamad BARAKAT wrote: Hi, 1) HTTPS Interception I try to setup https transparent configuration with squid 3.1.20 The traffic was correctly forwarded to the proxy port 3129 via WCCP (Cisco ASA GW) , but the proxy doesn't use ssl connection to join the final server

Re: [squid-users] block all torrents connections through squid

2012-07-14 Thread Jason Leschnik
Blocking .torrents doesn't resolve people downloading magnet links. You would need to block all *.torrent .txt (you can download a torrent as a .txt from some sites). It would be easier to filter your users at the gateway... i.e If all you want is users to have Internet access, block all ports

Re: [squid-users] WCCP2+tproxy and Cisco LNS

2012-07-14 Thread Eliezer Croitoru
On 7/13/2012 2:33 PM, Wayne Lee wrote: Hello List My first post here but have been using squid for a while. Trying to implement a transparent proxy for some of our DSL users. I've setup a test LNS on a Cisco 2821, the connections come in via the standard PPPoA and are sent via L2TP from the

Re: [squid-users] ext_session_acl active mode

2012-07-14 Thread Amos Jeffries
On 14/07/2012 3:13 p.m., Jack Black wrote: Hi. According to this page: http://wiki.squid-cache.org/ConfigExamples/Portal/Splash Active Mode is supposed to prevent random software like anti-viruses from resetting the session when using ext_session_acl. Is this only true for software that uses

Re: [squid-users] WCCP2+tproxy and Cisco LNS

2012-07-14 Thread Wayne Lee
HI Eliezer Thanks for your reply. SNIP if you could be more accurate about the cables setup and logic and not just ip it can help understand things. squid-SwitchCisco router | | | gateway Cat 5 ethernet the problem is that

Re: [squid-users] ext_session_acl active mode

2012-07-14 Thread Jack Black
Hmm. The configuration I'm using in squid.conf is this: # Set up the session helper in active mode. Mind the wrap - this is one line: external_acl_type session ipv4 concurrency=100 ttl=3 %SRC /usr/local/squid/libexec/ext_session_acl -a -T 60 -b /usr/local/squid/var/lib/squid/session/ # Pass the

Re: [squid-users] WCCP2+tproxy and Cisco LNS

2012-07-14 Thread Eliezer Croitoru
On 7/14/2012 3:21 PM, Wayne Lee wrote: HI Eliezer Thanks for your reply. SNIP if you could be more accurate about the cables setup and logic and not just ip it can help understand things. squid-SwitchCisco router | | |

Re: [squid-users] ext_session_acl active mode

2012-07-14 Thread Jack Black
It appears that this is happening because according to the above configuration, http://192.168.13.3 is the page that it should redirect clients to while only the page http://192.168.13.3/renew_session.html is allowed to be loaded. http://192.168.13.3/renew_session.html is also the page that resets

Re: [squid-users] ext_session_acl active mode

2012-07-14 Thread Jack Black
Ok - it appears that my new configuration is working: acl splash_page url_regex -i ^http://192.168.13.3 # Set up the session helper in active mode. external_acl_type session ipv4 concurrency=100 ttl=3 %SRC /usr/local/squid/libexec/ext_session_acl -a -T 60 -b