Re: [squid-users] Unwanted DNS queries

2013-09-25 Thread T Ls
Hi, Am 24.9.2013 23:38, schrieb Eliezer Croitoru: On 09/24/2013 03:56 PM, T Ls wrote: What kind of reconfigure do you mean? The plain command of squid -kreconf. This changed nothing. From your previous mail it seems like these dns queries are new.. SO you are not aware of the existence of

Re: [squid-users] Re: Squid + DansGuardian + Bridging

2013-09-25 Thread Amos Jeffries
On 25/09/2013 5:37 a.m., psd17j-jacob wrote: Hey guys, Thanks for all the suggestions and feedback. I really appreciate your time. I'd like to stick to (attempting) to use DG because I've already come so far. It just seems to be this little bridge issue. I followed the link and added the

[squid-users] wildcard reverse proxy (not ssl)

2013-09-25 Thread Luis Daniel Lucio Quiroz
Hello :) For a reason, dont ask. I need to configure a Squid that is able to do reverse lookup from a webapp that does dinamic hostdomains. So i need to configure a squid that does *.mydomain. I dont have too much control on *.mydomain IP's, so cache_peer wont be very helpful in this case. I

Re: [squid-users] Unwanted DNS queries

2013-09-25 Thread T Ls
Hi, Am 24.9.2013 16:25, schrieb Amos Jeffries: ...Perhase a debug_options ALL,1 11,6 78,6 trace would be more informative. To get an usefull example in the logfiles I requestet http://www.uni-leipzig.de, I found the following in cache.log: ... 2013/09/25 09:08:47.988| persistentConnStatus:

Re: [squid-users] Unwanted DNS queries

2013-09-25 Thread Eliezer Croitoru
Hey, This is indeed the issue I was aiming at.. It was never looked at before since nobody never seen this problem before If I am right. So I have a suggestion. Instead of just shooting at it we have the test subject in hands. The latest stable version of squid is 3.3 We can do run a basic test

[squid-users] Skype through SQUID integrated with AD

2013-09-25 Thread kazio wolny
Hello, I get tired of the topic already two days and I have no power, so please help ... I did install squid3 (v3.1.19) integrated with AD (according http://wiki.bitbinary.com/index.php/Active_Directory_Integrated_Squid_Proxy). Allowing only users who belong to the Admin-Internet. Everything

Re: [squid-users] Unwanted DNS queries

2013-09-25 Thread Amos Jeffries
On 25/09/2013 8:25 p.m., T Ls wrote: Hi, Am 24.9.2013 16:25, schrieb Amos Jeffries: ...Perhase a debug_options ALL,1 11,6 78,6 trace would be more informative. To get an usefull example in the logfiles I requestet http://www.uni-leipzig.de, I found the following in cache.log: ... This

Re: [squid-users] Skype through SQUID integrated with AD

2013-09-25 Thread Amos Jeffries
On 26/09/2013 12:58 a.m., kazio wolny wrote: Hello, I get tired of the topic already two days and I have no power, so please help ... I did install squid3 (v3.1.19) integrated with AD (according http://wiki.bitbinary.com/index.php/Active_Directory_Integrated_Squid_Proxy). Allowing only

Re: [squid-users] Unwanted DNS queries

2013-09-25 Thread Amos Jeffries
On 25/09/2013 10:46 p.m., Eliezer Croitoru wrote: Hey, This is indeed the issue I was aiming at.. It was never looked at before since nobody never seen this problem before If I am right. So I have a suggestion. Instead of just shooting at it we have the test subject in hands. The latest stable

Re: [squid-users] wildcard reverse proxy (not ssl)

2013-09-25 Thread Amos Jeffries
On 25/09/2013 6:30 p.m., Luis Daniel Lucio Quiroz wrote: Hello :) For a reason, dont ask. I need to configure a Squid that is able to do reverse lookup from a webapp that does dinamic hostdomains. So i need to configure a squid that does *.mydomain. I dont have too much control on *.mydomain

[squid-users] Re: Squid + DansGuardian + Bridging

2013-09-25 Thread psd17j-jacob
Thanks Amos, So I now have this for ebtables: :BROUTING ACCEPT -A BROUTING -p IPv4 -i eth1 --ip-proto tcp --ip-dport 80 -j redirect --redirect-target DROP -A BROUTING -p IPv6 -i eth0 --ip6-proto tcp --ip6-sport 80 -j redirect --redirect-target DROP -A BROUTING -p IPv4 -i eth0 --ip-proto tcp

[squid-users] Squid authentication stopped working

2013-09-25 Thread Eric Vanderveer
Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My

Re: [squid-users] Squid authentication stopped working

2013-09-25 Thread Kinkie
What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com

Re: [squid-users] Squid authentication stopped working

2013-09-25 Thread Eric Vanderveer
I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info

Re: [squid-users] Squid authentication stopped working

2013-09-25 Thread Kinkie
so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What

Re: [squid-users] Squid authentication stopped working

2013-09-25 Thread Eric Vanderveer
I am using /usr/bin/ntlm_auth with squid. On Wed, Sep 25, 2013 at 12:53 PM, Kinkie gkin...@gmail.com wrote: so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I already rejoined to the domain. I checked to make sure and I can

Re: [squid-users] Squid authentication stopped working

2013-09-25 Thread Kinkie
can you do a ntlm_auth -v? On Wed, Sep 25, 2013 at 6:54 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am using /usr/bin/ntlm_auth with squid. On Wed, Sep 25, 2013 at 12:53 PM, Kinkie gkin...@gmail.com wrote: so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric

Re: [squid-users] Squid authentication stopped working

2013-09-25 Thread Eric Vanderveer
I am assuming you mean -V and its Version 3.6.3 On Wed, Sep 25, 2013 at 12:56 PM, Kinkie gkin...@gmail.com wrote: can you do a ntlm_auth -v? On Wed, Sep 25, 2013 at 6:54 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am using /usr/bin/ntlm_auth with squid. On Wed, Sep 25, 2013 at

Re: [squid-users] Squid authentication stopped working

2013-09-25 Thread Eric Vanderveer
Still at a loss on this. If anyone has an idea let me know. On Wed, Sep 25, 2013 at 12:57 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am assuming you mean -V and its Version 3.6.3 On Wed, Sep 25, 2013 at 12:56 PM, Kinkie gkin...@gmail.com wrote: can you do a ntlm_auth -v? On Wed,

Re: [squid-users] Squid authentication stopped working

2013-09-25 Thread Eric Vanderveer
I see The reply for POST http://somedomain.com is DENIED because it matched 'ntlm_auth' but then right after I see the same thing but it says is ALLOWED. On Wed, Sep 25, 2013 at 1:30 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Still at a loss on this. If anyone has an idea let me know.

Re: [squid-users] Squid authentication stopped working

2013-09-25 Thread Kinkie
That's the way NTLM is supposed to work. It requires 2x 407 DENIED for each new tcp connection. On Wed, Sep 25, 2013 at 7:36 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I see The reply for POST http://somedomain.com is DENIED because it matched 'ntlm_auth' but then right after I see the

Re: [squid-users] wildcard reverse proxy (not ssl)

2013-09-25 Thread Luis Daniel Lucio Quiroz
Thank yu very much! Yes Im aware of DNS possible issues 2013/9/25 Amos Jeffries squ...@treenet.co.nz: On 25/09/2013 6:30 p.m., Luis Daniel Lucio Quiroz wrote: Hello :) For a reason, dont ask. I need to configure a Squid that is able to do reverse lookup from a webapp that does dinamic

Odp: Re: [squid-users] Skype through SQUID integrated with AD

2013-09-25 Thread kazio wolny
Dnia Środa, 25 Września 2013 16:17 Amos Jeffries squ...@treenet.co.nz napisał(a) On 26/09/2013 12:58 a.m., kazio wolny wrote: Hello, I get tired of the topic already two days and I have no power, so please help ... I did install squid3 (v3.1.19) integrated with AD (according

[squid-users] Do not refresh the cache if cache_peer is unavailable

2013-09-25 Thread Manuel
Is it possible to do not refresh the cache in case of an error in the newest request to the cache_peer? What I mean is; suppose that in a reverse proxy I want to refresh the cache of the base URL (the homepage of the website) around every 60 seconds but in case that the cache peers are