[squid-users] How to know which ACL triggered an Access Denied?

Hi I've got a bunch of ACLs that block sites based on various criteria. Sometimes I get an Access Denied that I can't match to any of my ACLs just by looking at the URL. How do I get squid to tell me which ACL triggered it? Thanks Dayo

Re: [squid-users] Denying https access to websites

On Fri, 23 Sep 2011 09:32:01 +0100, Dayo Adewunmi wrote: Hi I've noticed that some sites which I deny access to with http_access deny are blocked when accessed with http://example.com but accessible through https://example.com. How do I ensure the https://example.com is also blocked? De

[squid-users] test

sorry

[squid-users] Denying https access to websites

Hi I've noticed that some sites which I deny access to with http_access deny are blocked when accessed with http://example.com but accessible through https://example.com. How do I ensure the https://example.com is also blocked? Thanks Dayo

[squid-users] Limiting upload size

Hi I'm trying to set a limit of 10MB for the upload. request_body_max_size 10240 KB # 10MB upload limit I tested it by trying to upload a 50MB file with rsync -aEPhu and it did not cut off after reaching 10MB transfer. How come? Specs: ubuntu 8.04 2.6.18-1ubuntu3 Best regards Dayo

[squid-users] Chromium browser suppressing squid error pages

Hi I noticed that chromium-browser does not display the error pages in /usr/share/squid/errors. Does anyone know how to get it to display them? Thanks Dayo

[squid-users] Delay pools for VPN users

Hi Is there any feasible way of limiting VPN users? They seem to be maxing out my link, every now and then. So far, what I've been able to do is find out what URL they VPN to and adding that to a delay pool. Best regards Dayo

[squid-users] Differences between squid2.x and squid3.x

but it's refusing connections. Must have bungled something. Here's my squid3 config: http://pastebin.com/UNuRa9ww Thanks Dayo

[squid-users] Store rebuilding is >100% complete?

/63e6hw68http://pastebin.com/63e6hw68 2.6.18-1ubuntu3 on Ubuntu 8.04 Thanks Dayo

Fwd: Re: [squid-users] Time-based shift of bandwidth from delay pool

On 03/19/2011 12:51 AM, Amos Jeffries wrote: On 19/03/11 07:37, Dayo Adewunmi wrote: Hi I've got a number of delay pools,one of which is only really used during daytime. Is there anyway for me to take the bandwidth allocated to that daytime pool and assign it to the other pools?

Re: [squid-users] Time-based shift of bandwidth from delay pool

On 03/19/2011 12:51 AM, Amos Jeffries wrote: On 19/03/11 07:37, Dayo Adewunmi wrote: Hi I've got a number of delay pools,one of which is only really used during daytime. Is there anyway for me to take the bandwidth allocated to that daytime pool and assign it to the other pools? Not as

Re: [squid-users] Time-based shift of bandwidth from delay pool

On 03/19/2011 12:51 AM, Amos Jeffries wrote: On 19/03/11 07:37, Dayo Adewunmi wrote: Hi I've got a number of delay pools,one of which is only really used during daytime. Is there anyway for me to take the bandwidth allocated to that daytime pool and assign it to the other pools? Not as

[squid-users] Time-based shift of bandwidth from delay pool

Hi I've got a number of delay pools,one of which is only really used during daytime. Is there anyway for me to take the bandwidth allocated to that daytime pool and assign it to the other pools? My specs are: 2.6.18-1ubuntu3 on Ubuntu 8.04. Best regards Dayo

Re: [squid-users] Delay not stopping hogs

On 03/13/2011 09:57 AM, Amos Jeffries wrote: On 13/03/11 20:50, Dayo Adewunmi wrote: Hi Got an issue with my delay pools. My specs are 2.6.18-1ubuntu3 on Ubuntu 8.04. Somehow the group lan-unknown seem to keep hogging all the bandwidth. How do I keep them firmly inside their allocated delay

[squid-users] Delay not stopping hogs

ess 6 deny hires delay_access 6 deny local_dest delay_access 6 deny html_pages delay_access 6 deny text_pages delay_access 6 allow lan-cc-admins delay_access 6 deny all Best regards Dayo

Re: [squid-users] No more cache hits

On 03/02/2011 10:04 AM, Hasanen AL-Bana wrote: Please paste the output of : squidclient mgr:info You might have ran out of disk space and your squid for some reason is not purging objects as it should. On Wed, Mar 2, 2011 at 11:59 AM, Dayo Adewunmi wrote: Hi For about 3 hours now, I

[squid-users] No more cache hits

ation: http://pastebin.com/fJFV5dD0 Munin graph:http://i.imgur.com/b2hDu.png Thanks Dayo

[squid-users] Changing cache_dir line

about 60GB free space on that partition. I was thinking of using about 50GB for cache_dir. I read that for linux aufs is better than ufs. What else do I need to consider except change "ufs" to "aufs" and change "100" to "5"? Thanks Dayo

[squid-users] Transparent squid and apt-cacher on the same box

er (not -ng) to work on top of a transparent squid box? Thanks Dayo

[squid-users] Limiting upload speed with squid

Hi I just had someone max out my bandwidth with an upload. How do I slow down upload speeds in squid 2.6.18-1ubuntu3? Thanks Dayo

[squid-users] Limiting upload speed

Hi I just had someone max out my bandwidth with an upload. How do I slow down upload speeds in squid 2.6.18-1ubuntu3? Thanks Dayo

[squid-users] [Fwd: Daily per MAC addr bandwidth caps]

Nobody? Original Message Subject:Daily per MAC addr bandwidth caps Date: Mon, 24 May 2010 10:59:52 +0100 From: Dayo Adewunmi Reply-To: contactd...@gmail.com To: squid-users@squid-cache.org Hi Is it possible to set daily bandwidth caps in squid, and

[squid-users] Daily per MAC addr bandwidth caps

Hi Is it possible to set daily bandwidth caps in squid, and automatically deny access to a MAC address when that limit has been reached? Thanks Dayo

[squid-users] nagios check_http module being denied on transparent proxy

ound and the solutions I've been finding are people doing things like not adding "transparent" to their http_port line, or defining the line twice, etc. Which doesn't apply to my case, because I check my squid.conf and the http_port line is fine. What could be causing this HTTP issue? Thanks Dayo

[squid-users] ACL or file containing allowed MACs?

Hi everyone Is it possible to give a list of allowed MAC addresses in squid, i.e. via ACLs or a file and then have it block unauthorized MACs? Thanks Dayo

Re: [squid-users] follow_x_forwarded_for

Dieter Bloms wrote: Hi, On Wed, Mar 31, Dayo Adewunmi wrote: There's no other proxy between clients and squid. I'm trying to get squid to include LAN IPs for external servers. So, for that it's "forwarded_for on"? Or do you mean "follow_x_forwarded_for on&qu

Re: [squid-users] follow_x_forwarded_for

Dieter Bloms wrote: Hi, On Wed, Mar 31, Dayo Adewunmi wrote: How do I use `follow_x_forwarded_for` to allow X-Forwarded-For header for all IP's in my LAN 192.168.0.0/21. They all go through the squid proxy, 192.168.0.1. it depends on what you want. Do you have an another

[squid-users] follow_x_forwarded_for

Hi How do I use `follow_x_forwarded_for` to allow X-Forwarded-For header for all IP's in my LAN 192.168.0.0/21. They all go through the squid proxy, 192.168.0.1. Thanks Dayo

[squid-users] Including LAN IP in email header

How do I set squid to always allow the user's LAN IP to be included in outgoing email headers? Sometimes the LAN IP is there, sometimes it isn't. And when it isn't, just the public IP is included in the "Received from" field. Best regards Dayo

[squid-users] Re: blocking users from x amount of connections with acl maxconn

Problem Existed Between Keyboard And Chair. It's working now. Dayo Original Message Subject:blocking users from x amount of connections with acl maxconn Date: Mon, 22 Mar 2010 12:00:53 +0100 From: Dayo Adewunmi Reply-To: contactd...@gmail.com To:

[squid-users] blocking users from x amount of connections with acl maxconn

Hi I'm trying to set a limit of no more than three connections per user with maxconn acl lan-ebola dst 192.168.24.18 acl limitebola maxconn 3 http_access deny limitebola lan-ebola http_access allow !limitebola It's not limiting anything, though. Best regards Dayo

Re: [squid-users] Wrong error page showing in browser

0 acl labs src 192.168.3.19-192.168.3.200 http_access deny labs !academic01 deny_info ERR_LAB_SCHEDULE labs However, they keep getting the default error msg, and not the customized one. What am I missing here? Thanks

Re: [squid-users] Wrong error page showing in browser

ssing here? Thanks Dayo _ Tell us your greatest, weirdest and funniest Hotmail stories http://clk.atdmt.com/UKM/go/195013117/direct/01/ Restarting didn't help. I usually just reload. However, I've noticed

[squid-users] Wrong error page showing in browser

0 acl labs src 192.168.3.19-192.168.3.200 http_access deny labs !academic01 deny_info ERR_LAB_SCHEDULE labs However, they keep getting the default error msg, and not the customized one. What am I missing here? Thanks Dayo

[squid-users] [SOLVED] Re: [squid-users] Date time format in access.log

Amos Jeffries wrote: Dayo Adewunmi wrote: Hi all In /var/log/squid/access.log on Ubuntu 8.04, squid 2.6.18-1ubuntu3 the log lines get written to file with the epoch time, instead of the human-readable time. How can I get squid to write to access.log with human-readable time? You need a

[squid-users] Date time format in access.log

Hi all In /var/log/squid/access.log on Ubuntu 8.04, squid 2.6.18-1ubuntu3 the log lines get written to file with the epoch time, instead of the human-readable time. How can I get squid to write to access.log with human-readable time? Thanks Best regards Dayo

[squid-users] Transparent proxying thru parent cache

0.0/8 gw 192.168.5.2 Please help Dayo

[squid-users] Bypass proxy for one user

Preferrably, without him hogging all the bandwidth. Which wouldn't be an issue if I could put the proxy settings into his browser, as squid is configured to use delay pools. Thanks Dayo

[squid-users] Splitting a subnet for delay pools

Hi I want to split a subnet in two, and have two different class 2 delay pools take effect. Can I define the ACLs like this: acl first-group dst 192.168.4.0-20 acl second-group dst 192.168.4.21-254 Thanks Best regards Dayo

Re: [squid-users] ACL ordering in squid.conf

Kinkie wrote: On Sun, Dec 13, 2009 at 6:36 PM, Dayo Adewunmi wrote: Hi all I was wondering if there needs to be any consideration that needs to be taken when it comes to ordering ACLs. My first block is a group of ACLs determining access to various sites. The block after that (further down

[squid-users] ACL ordering in squid.conf

w lan-servers delay_access 1 deny all delay_class 2 1 delay_parameters 2 14000/14000 delay_access 2 allow lan-unknown bad-downloads delay_access 2 allow lan-unknown ftp-downloads delay_access 2 allow lan-unknown delay_access 2 deny all . . . . Best regards Dayo

Re: [squid-users] Delay pool for wifi APs?

Amos Jeffries wrote: On Wed, 09 Dec 2009 02:49:07 +0100, Dayo Adewunmi wrote: Hi guys? I have delay pools for the various subnets in my network, the majority of which are on wired LAN. There are some wifi APs with static IPs, and these don't run any dhcp for clients that connect to

[squid-users] Delay pool for wifi APs?

in a single separate subnet. Should I be configuring delay pools for the wifi APs, too? Thanks Dayo

Re: [squid-users] Block a set of sites for a set of users

Amos Jeffries wrote: Dayo Adewunmi wrote: Hi all I'm using squid 2.6.18-1ubuntu3 on Ubuntu 8.04. So far I've configured it to deny access to a set of sites for all users, during the period of 8am-8pm. Now, I want to grant certain users 24/7 access to the restricted sites. I'v

[squid-users] Block a set of sites for a set of users

o grant the exempted user access, but the problem is, after 8pm the others are still blocked from accessing the restricted sites. Please help. Best regards Dayo

[squid-users] Re: acl regex not working right [SOLVED]

Original Message Subject:acl regex not working right Date: Sun, 11 Oct 2009 13:15:43 +0100 From: Dayo Adewunmi Reply-To: contactd...@gmail.com To: squid-users@squid-cache.org Hi guys the following acl is supposed to deny access to any sites with the

[squid-users] acl regex not working right

Hi guys the following acl is supposed to deny access to any sites with the word "warez" in the URL. But it's not working. What am I doing wrong? acl warez-sites url_regex -i warez http_access deny warez-sites OS: Ubuntu 8.04 Squid: 2.6.18-1ubuntu3 Thanks Dayo

Re: [squid-users] logrotate in squid

Ubuntu 8.04 I use the command "/usr/sbin/squid -k rotate" in a script that runs weekly in cron. Best regards Dayo Thank you for your answer , me i use fedora . If you know how to do in fedora will be thankfull many thanks It's probably the same. Check "man squid

Re: [squid-users] logrotate in squid

id -k rotate" in a script that runs weekly in cron. Best regards Dayo

Re: [squid-users] httpReadReply: Excess data from

Kinkie wrote: On Mon, Sep 14, 2009 at 9:59 AM, Dayo Adewunmi wrote: Hi I get these lines in my cache.log often. What do they mean? A broken client or server. You can ignore them. Ok, thanks

[squid-users] httpReadReply: Excess data from

d=197041&cmp_id=bbcworld_fjfa283558FJFA" Squid: 2.6.18-1ubuntu3 OS: Ubuntu 8.04 Hardy Heron Best regards Dayo

Re: [squid-users] Limiting upload for a subnet

Henrik Nordstrom wrote: fre 2009-08-28 klockan 09:44 +0100 skrev Dayo Adewunmi: users? Is there a way to make an ACL that would limit the upload of just a subset of my network? It can be done as an external acl based on the source IP and Content-Length request header. Regards Henrik

[squid-users] Limiting upload for a subnet

Hi I'm want to limit the upload rate of the users of one subnet. I was looking through the config file and found 'request_body_max_size', but that seems to apply all users? Is there a way to make an ACL that would limit the upload of just a subset of my network? Thanks Bes

[squid-users] Re: Time-based ACL for noaccess.dat

Dayo Adewunmi wrote: Hi Usually, I have cron job that rotates two squid.conf files for me. One with an ACL for noaccess.dat (a list of sites not allowed during working hours), and the other with the noaccess.dat line commented out. Now, I want to move away from the cron and use time-based

[squid-users] Time-based ACL for noaccess.dat

es listed in noaccess.dat. But right now it's allowing access during the noaccess period. Please help. squid: 2.6.18-1ubuntu3 OS: Ubuntu 8.04 Kernel: 2.6.24-24-server Best regards Dayo

Re: [squid-users] delay_access line

Amos Jeffries wrote: On Sun, 09 Aug 2009 15:03:10 +0100, Dayo Adewunmi wrote: Amos Jeffries wrote: Dayo Adewunmi wrote: Amos Jeffries wrote: Dayo Adewunmi wrote: Hi Is this a valid config line? delay_access 6 allow lan-students magic_words url_words

[squid-users] delay_access line

Hi Is this a valid config line? delay_access 6 allow lan-students magic_words url_words Or do I need one for each acl? Best regards Dayo Adewunmi

[squid-users] Zero Sized Reply with some websites

any data for this request. (squid/2.6.STABLE18) I'm using squid on Ubuntu 8.04 Best regards Dayo

[squid-users] Opening a second ssh port

ll as acl Safe_ports port 10122 but they're both not working. Best regards Dayo Adewunmi

[squid-users] CSS not being downloaded for some sites

That is no background images, no layout, just a blank page with a long scroll of left-aligned text and images. What's going on? Best regards Dayo Adewunmi

Re: [squid-users] squid2 doesn't understand "deny/allow all"

Chris Robertson wrote: Dayo Adewunmi wrote: Hi all I've installed squid 2.6.STABLE18 and made my changes to /etc/squid/squid.conf Now, when I run squid -z I get this error: # squid -z 2009/07/13 20:44:16| ACL name 'all' not defined! FATAL: Bungled squid.conf line 691: http_

[squid-users] squid2 doesn't understand "deny/allow all"

ed abnormally. What am I doing wrong here? Dayo

Re: [squid-users] Blocking an entire TLD

Amos Jeffries wrote: Dayo Adewunmi wrote: Amos Jeffries wrote: Dayo Adewunmi wrote: Is it possible to use noaccess.dat to block access to an entire top-level domain? Yes. Now, what type of software are you using? and is it related to Squid in any way? Amos I'm using 3.0.ST

Re: [squid-users] Blocking an entire TLD

Amos Jeffries wrote: Dayo Adewunmi wrote: Is it possible to use noaccess.dat to block access to an entire top-level domain? Yes. Now, what type of software are you using? and is it related to Squid in any way? Amos I'm using 3.0.STABLE1-1ubuntu1 on an Ubuntu 8.04 server. In /etc/s

[squid-users] Blocking an entire TLD

Is it possible to use noaccess.dat to block access to an entire top-level domain? Best regards Dayo

[squid-users] Squid3 compile option. Which features are included by default?

e Digests see http://www.squid-cache.org/Doc/FAQ/FAQ-16.html Which of these options are included by default? For example, when I install squid with apt, I get delay pools enabled by default. Is this the same for installing squid from source? Thanks Best regards, Dayo

Re: [squid-users] Banning MAC addresses in squid3

I installed squid3 on ubuntu with apt. How would I go about enabling arp ACL with this? Jeff Pang wrote: 2009/6/24 Dayo Adewunmi : Hi all, I'm trying to block MAC address with this ACL: Is there something else that needs to be included for 'arp' to become a valid ACL type

[squid-users] Banning MAC addresses in squid3

2009/06/24 10:34:52| FD 15 Closing ICP connection 2009/06/24 10:34:52| aclParseAclLine: Invalid ACL type 'arp' Is there something else that needs to be included for 'arp' to become a valid ACL type? Best regards Dayo

Re: [squid-users] bandwidht control with delay_pools

english Have a look at the delay_pools page on the wiki: http://wiki.squid-cache.org/Features/DelayPools Regards Dayo

[squid-users] How to set different delay_initial_bucket_level for different pools

Hi, can this line appear more than once in squid.conf? delay_initial_bucket_level 100 Say, at the top of each delay pool definition block? I'm trying to give different init ial buckets to different pools. Regards Dayo

Re: [squid-users] Squid ICP

Thys de Beer wrote: HI All, Dayo ...thanks...but i got the problem..and you wont believe this...the child proxies are netcache appliances that ONLY want to work to parent proxy on http port 3128 , i had my setup on 8080 (squid) , when i added 3128 again and setup netcache to use 3128 its

Re: [squid-users] Squid ICP

a squid2.6 and a squid3, so maybe I can spot a mistake in your configs somewhere. Regards Dayo

Re: [squid-users] Attempt to retrieve interface list failed: (9) Bad file descriptor

http://www.experts-exchange.com/Networking/Linux_Networking/Q_23432218.html > > but that didn't help. > > Regards > > Dayo Live.com'u deneyin - hızlı ve kişiselleştirilmiş giriş sayfanızla istediğini

[squid-users] Attempt to retrieve interface list failed: (9) Bad file descriptor

rking/Q_23432218.html but that didn't help. Regards Dayo