[squid-users] acl entries in external text file?

Greetz, I have a large list of users that I currently maintain in the squid.conf file as part of an ACL. Can these entries be kept in an external file and included in squid.conf, somehow? -- Darren Spruell Sento I.S. Department [EMAIL PROTECTED]

Re: [squid-users] filtering access to certain sites for group of users...

squid's native's acl functions to set up the desired access control. The example config file should give you an idea of what options to set in the comments. -- Darren Spruell Sento I.S. Department [EMAIL PROTECTED]

Re: [squid-users] ACL "dst" with no netmask

Eric Geater 12/12/03 wrote: I need to block an IP address. So far I've read that I can't enter it into my dstdomain acl because it's not a FQDN. Fine, but the "dst" ACL type expects an IP address AND subnet mask, which isn't used for web addresses. Anyone who can clarify this for me would be a h

Re: [squid-users] Squid not caching

to Henrik for referring us to this enlightening knowledge. -- Darren Spruell Sento I.S. Department [EMAIL PROTECTED]

[squid-users] multiple redirector applications

Is it possible to use more than one redirector program at a time with squid? We would like to use squidGuard for access control and also use another redirector for antivirus scanning. If not, what is a good setup to accomplish this? TIA DS

[squid-users] parseHttpRequest/urlParse/failure ratio/hit-only-mode errors

ight make them differently. We do suspect that the number of file descriptors (1024) is too small for this cache's load and would like to set it higher. Might this cause the errors we are seeing? More detailed logs are available at the following URL: http://ganymede.sento.com/squidlogs/cache.log -- Darren Spruell

Re: [squid-users] parseHttpRequest/urlParse/failure ratio/hit-only-mode errors

Darren Spruell wrote: [...] It seems that every hour when we reload the cache, that error conditions occur on this second proxy. Here are entries from cache.log during one such occurance: 2004/04/10 13:01:01| Restarting Squid Cache (version 2.5.STABLE4)... 2004/04/10 13:01:01| FD 31 Closing

[squid-users] Guaging file descriptor need.

1024 range, is it reccomended to raise the FD max to a higher number? And would defaulting this number to 2048 or 4096 put excessive unneeded strain on system resources if the value was too high after all? TIA -- Darren Spruell

[squid-users] interpreting results of cachemgr.cgi

a correct number of redirector instances started (e.g., is 20 squidGuard processes overkill for my proxy?), file descriptors to allocate, disk/memory space/cache configuration/etc. TIA -- Darren Spruell

Re: [squid-users] can squid determine browser version

You could write a script to analyze the contents of this file at the end of your day once enabled... -- Darren Spruell

Re: [squid-users] winbind and proxy_auth

://blah.com is DENIED because, it matched 'AuthorizedUsers' When this happened during our setup, it was because the squid user did not have access to winbind's privileged pipe. -- Darren Spruell

Re: [squid-users] winbind and proxy_auth

Jim_Brouse/[EMAIL PROTECTED] wrote: I thought that the user was the user who was logged on the AD domian? How can I confirm what user is trying to access winbind's privileged pipe is that user basically just squid? Yeah, here's the setup of our installation: $ ls -ld /var/cache/samba/winbindd_pri

Re: [squid-users] winbind and ntlm auth

authentication. Here's some of our config: auth_param ntlm program /usr/bin/ntlm_auth \ --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 20 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes -- Darren Spruell Sento I.S. Department [

Re: [squid-users] OpenBSD hang problem

1 and it's been good for a few months now. OpenBSD 3.3-stable. Here are some settings from my squid.conf: httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on -- Darren Spruell Sento I.S. Department [EMAIL PROTECTED]

[squid-users] Windows passthrough auth and login prompts

can't view the page - no login prompt. Is this also related to the NTLM authentication not being supported, or is there a way we can make it so that users are still given the login prompt? TIA -- Darren Spruell Sento I.S. Department [EMAIL PROTECTED]