Re: [squid-users] Re: Duration Access Limits

2014-04-04 Thread Edmonds Namasenda
Thanks Meyer. While I always want to get my hands dirty, I have not yet written any squid helpers. Point me somewhere for starters. And please note that because the WiFi will be a free service, I do not want to incur more costs on equipment (Mikrotik) unless it is the only alternative. Any specific

Re: [squid-users] Re: Duration Access Limits

2014-04-04 Thread Edmonds Namasenda
Okay! Unless I am getting it wrong ...are you telling me to find (or propose) a solution to my problem? Else, what is required of me for the helper? Must it be external? Such tend to be slow. I want to offer free WiFi internet to people at an eatery but it should disable their connection after som

Re: [squid-users] Duration Access Limits

2014-04-03 Thread Edmonds Namasenda
0 > > > > http_access allow workdays who_access > > > > -----Original Message- > > From: Edmonds Namasenda [mailto:namase...@gmail.com] > > Sent: Thursday, April 03, 2014 9:08 AM > > To: squid-users > > Subject: [squid-users] Duration Access

[squid-users] Duration Access Limits

2014-04-03 Thread Edmonds Namasenda
Hello All, Is there a possibility for Squid to drop connections of particular IP Addresses after a specific period of time, and only enable those addresses after a specified period of time? NO authentication required. Just DHCP & Squid For example ..a device connects for 30 minutes then that IP A

Re: Re: [squid-users] Issues with Opensuse12.3 with squid

2014-03-26 Thread Edmonds Namasenda
and it should then be able to find the latest version available Good luck. # Edmonds On Wed, Mar 26, 2014 at 2:43 PM, Edmonds Namasenda wrote: > Back up your squid config file or any other associated files with custom > info before stopping and uninstalling the old squid. Someone suggested

Re: [squid-users] You don't have permission to access /squidreport/ on this server.

2013-12-03 Thread Edmonds Namasenda
Check the ownership and or mode of the "squidreport" directory / folder. Else, you are missing some entries for that directory in your httpd.conf # Edmonds

[squid-users] Config Analysis for VPN Access

2013-10-17 Thread Edmonds Namasenda
Hi Squid Users / Admins, Below is my squid.conf of 3.1.23 running on openSuSe 11.4 32-bit using transparent mode and Shoreline Firewall. The server controls five networks, four of them through VPNs. Problems... - Failure to access Internet on VPNs unless proxy settings are added - Failure to reac

[squid-users] Access Groups Problem

2013-10-16 Thread Edmonds Namasenda
Hello All, We use one openSuSe 11.4 server to manage access of five networks four of which are connected through VPN. Initial configuration used in-built Squid (3.0 Stable 18) in transparent mode. We recently ran an upgrade and got Squid 3.1.23 on the same oS 11.4 We realized some admin IP addres

[squid-users] Access Groups Problem

2013-10-16 Thread Edmonds Namasenda
Hello All, We use one openSuSe 11.4 server to manage access of five networks four of which are connected through VPN. Initial configuration used in-built Squid (3.0 Stable 18) in transparent mode. We recently ran an upgrade and got Squid 3.2 on the same oS 11.4 We realized some admin IP addresses

Re: [squid-users] Re: squidblacklist.org

2013-09-02 Thread Edmonds Namasenda
Ricardo, Did you ask a question and answered it yourself?! Anyway, the ideas of the SquidBlacklists are good & I used it initially. Quite good and "developing". Yes some URLs had issues as well as contradictions when reloading squid & reading the related ACLs. However, I stopped testing them whe

[squid-users] Squidblacklists Now Commercial ONLY?!

2013-08-01 Thread Edmonds Namasenda
Hello Nichols (Squid Blacklists Team) & Fellow Squid Users, Please enlighten me as I seem to be confused. A couple of weeks back I realized accumulative 401.shtml files in my Squid Blacklists update script folder only to check the website and I must subscribe (and pay). When did this take effect

Re: [squid-users] Squid monitering Tool

2013-07-30 Thread Edmonds Namasenda
Squid Analyzer on http://squidanalyzer.darold.net did me good thanks to Darold. On Tue, Jul 30, 2013 at 2:24 PM, javed_samtiah wrote: > Hi, > > Is there any squid monitering tool. > *1. I want to monitor Web trafic that which Ip or PC is accessing to which > Website. > 2. How much bandwidth is ut

Re: [squid-users] Time spent on website?

2013-05-09 Thread Edmonds Namasenda
Matt, Take time and install / used Darold's Squid Analyzer. It might give you close or more than you are looking for. So far, I am not complaining and he is often available for assistance. On Mon, May 6, 2013 at 5:55 PM, matthew vassallo wrote: > Hi, > > I am currently using squid to gather info

Re: [squid-users] Deny URLs with Transparent proxy

2012-08-30 Thread Edmonds Namasenda
acl sites_bloqueados url_regex -i /etc/squid/acls/sites_bloqueados.txt acl sites_bloqueados dstdomain -i "/etc/squid/acls/sites_bloqueados.txt" http_access deny sites_bloqueados http_access allow lan in the sites sites_bloqueados.txt there is the url facebook.c

Re: [squid-users] Time based access

2012-07-20 Thread Edmonds Namasenda
Try the below, acl urlsFB dstdomain -r .facebook.com .fbcdn.net # Sample Facebook domains acl timedFB time SMTWHFA 12:30-13:29 # Accessible time for Facebook # Place the below above all access rules http_access deny urlsFB !timedFB # Rule to deny Face

Re: [squid-users] DSTDOMAIN Wildcards and Multiple http_port

2012-07-04 Thread Edmonds Namasenda
>> # Assuming namasenda.com is a registered domain, and the outcome is >> controlling any domain with the word "namasenda" like >> hatenamasenda.com or .net >> a) .\namasenda\. >> b) .namasenda. >> c) .namasenda.com >> d) .\namasenda\.com >> >> Is a) & b) correct, anyway? > > > No they are not. Nei

[squid-users] DSTDOMAIN Wildcards and Multiple http_port

2012-07-04 Thread Edmonds Namasenda
Hello Team, Please bare with me if this was resolved before, but I am asking out of curiosity and need to test it soon What is the difference and implications of the following as dstdomain entries? # Assuming namasenda.com is a registered domain, and the outcome is controlling any domain with the

Re: [squid-users] Allowing downloads from certain sites

2012-06-29 Thread Edmonds Namasenda
"example.com" domain while still > restricting downloads from other domains. > Any ideas? > > Thanks. > > On Fri, Jun 29, 2012 at 5:32 PM, Edmonds Namasenda > wrote: >>>> Shastri, try the below >>>> >>>> Assume... >>>> 1

Re: [squid-users] Allowing downloads from certain sites

2012-06-29 Thread Edmonds Namasenda
>> Shastri, try the below >> >> Assume... >> 1. Preventing Downloads File (nodowns.txt) has the following >> \.msi$ >> \.exe$ >> \.zip$ >> \.etc$ The above is regex >> >> 2. Trusted Sites File (goodsites.txt) has the following >> *.*microsoft*.com* >> *.*windows*.com* >> *.*etc*.com*.com* > > > W

Re: [squid-users] Allowing downloads from certain sites

2012-06-29 Thread Edmonds Namasenda
Shastri, try the below Assume... 1. Preventing Downloads File (nodowns.txt) has the following \.msi$ \.exe$ \.zip$ \.etc$ 2. Trusted Sites File (goodsites.txt) has the following *.*microsoft*.com* *.*windows*.com* *.*etc*.com*.com* 3. Accompanying ACLs for files above acl nodowns urlpath_regex -

Re: [squid-users] whitelisted IP problem

2012-03-19 Thread Edmonds Namasenda
# Leave coredumps in the first cache dir > coredump_dir /var/spool/squid > > # Add any of your own refresh_pattern entries above these. > refresh_pattern ^ftp:           1440    20%     10080 > refresh_pattern ^gopher:        1440    0%      1440 > refresh_pattern -i (/cgi-bin/|\?) 0     0%

Re: [squid-users] whitelisted IP problem

2012-03-19 Thread Edmonds Namasenda
Vijay, Just a quick look has shown me you did not specify your network and there are a few typo errors. Re-adjust, test, and fill us in some more. I.P.N Edmonds Systems | Networks | ICTs UgM: +256 71 227 3374 | TzM: +255 68 422 1561 # 22249, Kampala Uganda. -Original Message- From: Vijay

[squid-users] Connectivity Choke With Squid 3.1

2012-02-09 Thread Edmonds Namasenda
Hello Group, I am using Squid 3.1 in transparent mode with basic settings enforced by a redirect rule in Shoreline Firewall. I have two LANs; 172.x.x.x for LAN servers not controlled by the proxy, and 10.x.x.x for LAN users. The squid server has 2 NICs to create the users LAN & routing. My main p

Re: [squid-users] Make Squid in interception mode completely

2011-12-06 Thread Edmonds Namasenda
I use an other linux box from LAN to check out by > curl -I http://something.com/ it's returned the header fields that has > "Via: 1.1 (squid 3.2)". I have no idea why. > > At this moment, I still don't find more documentation from IPfilter > for deeper discove

Re: [squid-users] Make Squid in interception mode completely

2011-12-05 Thread Edmonds Namasenda
Hai, Seems your network set-up is what might be ruining your connection expectations or the "default gateway" needs a rule (possibly using a firewall) to direct all HTTP traffic to the squid box rather than to the internet. Otherwise, think of the set-up below (with the Squid box the same as the G

[squid-users] Squid URL / Network Free Access

2011-11-24 Thread Edmonds Namasenda
Dear Friends, I am using Squid 3.1 in transparent mode. How can I stop Squid from scanning and logging traffic to particular URLs or networks? Something like users can connect to the URLs or networks freely without Squid's interception. There is an official video access portal which seems to be ea

Re: [squid-users] Need advise about Squid statistics.

2011-10-30 Thread Edmonds Namasenda
Siur, Look for Squid Analyzer on freshmeat.net Easy to install and customize. It will do the magic for you. # Edmonds Namasenda. On Sun, Oct 30, 2011 at 2:56 AM, siur wrote: > > Hello! > I've got 500 archived squid log files. Now I need to analyze all of > them and make a stati

[squid-users] Explicit Allow / Deny

2011-04-26 Thread Edmonds Namasenda
Hello there. Is there a possibility in Squid 3.0 on openSuSe to explicitly allow or deny ACLs? ### Example acl admins src 10.0.0.245-10.0.0.255 acl updates dstdomain -i /path/to_file_with/updates_domain/urls http_access allow admins http_access allow updates reply_body_max_size 10 MB !admins reply

Re: [squid-users] Dedicate Bandwidth to IP Address

2011-02-23 Thread Edmonds Namasenda
Eliezer, these are general video calls; Skype, Sonix etc On Wed, Feb 23, 2011 at 12:45 PM, Eliezer wrote: > Well it depends on the protocol that is used on the video conference > and not necessarily related to  the cache proxy. > > > Regards Eliezer > > > On 23/02/2011

[squid-users] Dedicate Bandwidth to IP Address

2011-02-22 Thread Edmonds Namasenda
Dear all. I would like to have a video conference call on my LAN using a particular I.P Address. This is going to be for a limited time and I want a clear connection. We are already running Squid in transparent proxy mode with some ACLs limiting HTTP access, downloads, streaming to a particular gr

[squid-users] Default Home Page

2010-12-01 Thread Edmonds Namasenda
Hello Members. Can squid in transparent mode force all local (proxy LAN) http requests to a certain default page? Possibly a locally made web application or any other page! How can this be done? -- Thank you and kind regards, I.P.N Edmonds ICT Practitioner & Consultant Cel:    +256 70 227 3374

Re: [squid-users] ACLs Implementation help

2010-11-11 Thread Edmonds Namasenda
Amos, thank you for the responses always. On Thu, Nov 11, 2010 at 6:56 PM, Amos Jeffries wrote: > > On 12/11/10 04:08, Edmonds Namasenda wrote: >> I believe I am a better squid administrator than when I joined. Throw me a >> bone! >> > > Switch "users&quo

Re: [squid-users] ACLs Implementation help

2010-11-11 Thread Edmonds Namasenda
Thank you all. On Thu, Nov 11, 2010 at 4:19 PM, Amos Jeffries wrote: > On 12/11/10 01:22, Edmonds Namasenda wrote: >> >> No continuous authentication required with every URL accessed or >> re-directions once the first log-in is accepted. > > Understood. That is n

Re: [squid-users] ACLs Implementation help

2010-11-11 Thread Edmonds Namasenda
Yeah, I guess I am getting there. Please look in-line... >> >> How do I enforce password authentication ONLY ONCE for users to > > What do you mean by "ONLY ONCE"? A user can be authenticated or not, there is > no multiple about it. No continuous authentication required with every URL accessed or

[squid-users] ACLs Implementation help

2010-11-11 Thread Edmonds Namasenda
Much appreciated for the previous help. Some more clarification on the in-line requests below. On Wed, Nov 10, 2010 at 2:38 PM, Amos Jeffries wrote: > > On 09/11/10 20:25, Edmonds Namasenda wrote: >> >> Dear all. >> Using openSuse 11.2 and Squid 3.0 Stable 18 >> >