this? I'd prefer not to
block Skype traffic altogether but v2 Mac and Linux Skype clients
do not have the option to turn off the supernode feature as the v3
Win32 clients.
-Gary
We have two virtual interfaces on our squid server:
acl authproxy myip 1.1.1.100
acl ipproxy myip 1.1.1.101
We would like to make all users coming in via the authproxy network connection
authenticate via our LDAP. We would like all users coming in via ipproxy to
have no auth, but be restricted
Thanks for the reference, Amos. However, how do you set specific ACLs for each
interface? That is, don't see a method for saying that we want 1.1.1.100 to be
LDAP auth, but not 1.1.1.101. Thanks, again.
>>> Amos Jeffries 11/24/2009 5:42 PM >>>
On Tue, 24 Nov 200
I have a client that runs a handful of vhosts on a single server,
frontended by Squid 3 (debian)
What would be the simplest solution to doing a redirect in squid when
the user-agent is an iphone for example, but only for a specific domain
(leaving the other vhosts unredirected)
Thanks
-Danie
if its over HTTP, squid will touch it and log it, though it might not
cache it if you tell it not to, but it will still log it
otherwise, look into iptables
or some sort of sed based cronjob to prune lines from the logs that you
don't want
On 2/8/2011 5:49 PM, Jobst Schmalenbach wrote:
Hi
e the http request and bypass the https (ssl) request for a domain
if some of the page is ssl page. That means http page cache and https
page bypass (not cache) for one domain. Can anyone help?
Regards,
Gary K
Hi Amos,
Thank you for your reply!
Any method when received http go to squid cache, when received https
redirect to web server directly?
Regards,
Gary
在 2011年5月1日星期日，Amos Jeffries 写道：
> On 01/05/11 05:38, Support Squid wrote:
>
> Dear all,
>
> I'm using accel (reverse
Hi Amos,
You mean if I add the following acl:
acl HTTPS proto HTTPS
acl example dstdomain .example.com
cache deny HTTPS example
Squid can handle the https request and redirect the https request to
the original web server?
Regards,
Gary
在 2011年5月1日星期日，Amos Jeffries 写道：
> On 01/05/11 12
https sites. (no solution now).
Hope you can help.
Regards,
Gary
2011/5/1 Amos Jeffries :
> On 01/05/11 15:41, Gary K wrote:
>>
>> Hi Amos,
>>
>> Thank you for your reply!
>> Any method when received http go to squid cache, when received https
>> redirect
Hi all,
Is squid support .pfs cert or only pem cert?
Regards,
Gary
Hi all,
Can anyone know how to setup tailormade logformat that will show in
squid access.log file?
Regards,
Kei
Hi all,
May I know the max storage of the squid setting and the content or image stored
in the cache.
Regards,
Kei
Hi all,
Can anyone know how to check which file is get from squid and which file is get
from original web server when I load a page?
Regards,
Kei
Hey All,
Ok, so I have a quandary, I have a client who has multiple domains, some
of which are just subdomains to the same vhost, running the same code,
but from what I understand if I went to bob.test.dom and steve.test.dom,
even if they return the exact same content they would get cached
se
Yeah, didn't think so
Thanks Amos
On 9/15/2011 4:41 AM, Amos Jeffries wrote:
On 15/09/11 07:59, Daniel Gary wrote:
Hey All,
Ok, so I have a quandary, I have a client who has multiple domains, some
of which are just subdomains to the same vhost, running the same code,
but from w
I need to setup a reverse proxy on the same Windows server that allows
only certain defined URLs (www.somedomain.com/Test/this_url_only.asp).
Squid-Listen-On:8880 -> send to localhost: (IIS)
I've got the reverse proxy working using the following in my squid.conf file:
http_port 192.168.
This is set up internally for proof of concept currently, so it
doesn't have public access.
On Thu, Feb 28, 2008 at 9:04 AM, Amos Jeffries <[EMAIL PROTECTED]> wrote:
> Gary Tai wrote:
> > I need to setup a reverse proxy on the same Windows server that allows
> >
page
exists. If I explicitly put in the port
<http://somedomain:8880/some_newURL>, the reverse proxy returns the
correct page.
This used to work but stopped at some time.
Any help appreciated.
Thanks,
Gary
0/0.0.0.0
acl valid_dst dstdomain wiki1
http_access allow external_networks valid_dst
#http_access deny valid_dst
http_access deny all
icp_access allow all
-- end squid.conf
On Wed, Apr 9, 2008 at 6:55 PM, Chris Robertson <[EMAIL PROTECTED]
The web application works correctly without Squid. It returns the
correct page with the port number. It's only when Squid is used to
intercept that the port is dropped.
On Thu, Apr 10, 2008 at 4:32 PM, Chris Robertson <[EMAIL PROTECTED]> wrote:
> Gary Tai wrote:
>
> >
http_port wiki1:8880 accel defaultsite=wiki1
On Fri, Apr 11, 2008 at 9:26 PM, Henrik Nordstrom
<[EMAIL PROTECTED]> wrote:
> fre 2008-04-11 klockan 15:35 -0400 skrev Gary Tai:
>
> > The web application works correctly without Squid. It returns the
> > correct page wi
Regards
> Henrik
>
> fre 2008-04-11 klockan 22:25 -0400 skrev Gary Tai:
>
>
> > http_port wiki1:8880 accel defaultsite=wiki1
> >
> >
> >
> > On Fri, Apr 11, 2008 at 9:26 PM, Henrik Nordstrom
> > <[EMAIL PROTECTED]> wrote:
> > > f
One of our applications is failing to pass encrypted username and
password to Squid.
>From the application documentation:
Web services requires a client to provide credentials as BASIC HTTP
user authentication. BASIC authentication encrypts the user ID and
password with Base64 encoding and passes
> On ons, 2008-06-18 at 17:08 -0400, Gary Tai wrote:
>
>> >From the application documentation:
>> Web services requires a client to provide credentials as BASIC HTTP
>> user authentication. BASIC authentication encrypts the user ID and
>> password with Base64 en
Jun 18, 2008 at 8:20 PM, Gary Tai <[EMAIL PROTECTED]> wrote:
> Yes, sorry I didn't state, but it is a Reverse Proxy.
>
> So, the "login=PASS" parameter will forward the encoded username and
> password to the backend application?
>
> I'll give it a try
Henrik,
Thank you for providing the information for the Squid config file. The
web services connection was successfull after the change.
Gary
On Thu, Jun 19, 2008 at 4:35 AM, Henrik Nordstrom
<[EMAIL PROTECTED]> wrote:
>
> ons 2008-06-18 klockan 20:44 -0400 skrev Gary Tai:
>&g
Is there any requirement to configure Squid to forward SSL requests
apart from configuring the appropriate port (typically 443)?
Thanks.
.
Thanks
Gary
Squid works fine on the first page. On the redirect such as using a Google search the
2nd page times out. The same thing happens with AOL mail etc. My config file
http_port 8080
cache_peer wwwproxy.k12.de.us parent 8080 3130 no-query
thanks
Gary
could figure it out. I figured that if the 3Com
webcaches could figure it out Squid should also.
Many, mnay thanks
Gary
-- Original Message --
From: Henrik Nordstrom <[EMAIL PROTECTED]>
Date: Sun, 9 Mar 2003 20:13:59 +0100
>I think this answers
h was 25 gigs. I want to reduce to 21 gigs as
recommended by some people (70% of partition) and set it to /home/cache/. Did I need
to delete the default cache directory and how will that affect the swap file there.
Thanks
Gary
partiton and it grew in space taken up
so I knew I was successful.
6. I didn't try ./squid -z while it was actually running.
7. It is caching just fine.
Gary
-- Original Message --
From: "Lightfoot.Michael" <[EMAIL PROTECTED]>
Da
es as well as a W2k network.
Thanks in advance.
Gary
put a list of domains to deny can that list be 100 names long or do I need
to break it up. We have about 100 sites that we block on our 3Coms and I would like to
cut and paste that list into squid.conf after I put the names one after another with a
space in between.
thanks
Gary
just did this as we have 2 routers and
I pipe one proxy server to one router and the overpriced 3Com webcache server to the
other. The speed increase was incredible on the client's end.
Gary
-- Original Message --
From: Henrik Nordstrom <[EMAIL P
I found my answer. TCP_MISS/403 means that it was denied so I am blocking gator. I
finally found the page that deciphers all the codes in access.log
thanks
Gary
-- Original Message --
From: Henrik Nordstrom <[EMAIL PROTECTED]>
Date: Wed, 12 Mar 2
I found that our parent cache blocks gator.
thanks
Gary
-- Original Message --
From: Henrik Nordstrom <[EMAIL PROTECTED]>
Date: Fri, 14 Mar 2003 08:23:46 +0100
>Gary Hostetler wrote:
>>
>> I found my answer. TCP_MISS/403 means th
NSIDE
never_direct allow all
acl gator dstdomain www.gator.com gatorcme.gator.com
http_access deny gator
Thanks
Gary
I moved it before everything else. It works.
Thanks
Gary
On 3/17/03 11:23 AM, "Henrik Nordstrom" <[EMAIL PROTECTED]> wrote:
> The order of your http_access lines is important. You cannot later deny
> what has already been allowed.
>
> Regards
> Henrik
>
>
he size is set at 25 gigs but in 3 days they have only consumed about a gig. I
plan on adding more users.
Finally, my hit rate is about 35%. Is that about normal?
thanks
Gary
Thanks,
I think 1 gig of ram will probably suffice. My hit ratio is document hit rate. I was
not sure where to find the byte rate in cache manager.
Gary
-- Original Message --
From: Henrik Nordstrom <[EMAIL PROTECTED]>
Date: Mon, 17 Mar 2003 23
ng it on
my local squid keeps its requests from running down my overcrowded T1 line.
My parent is on the other end of a T1 line not locally.
gary
On 3/19/03 8:18 AM, "Henrik Nordstrom" <[EMAIL PROTECTED]> wrote:
> ons 2003-03-19 klockan 13.51 skrev Boniforti Flavio:
>
>
d to be one line per
entry but I thought it would just skip the blank lines.
Thanks
Gary
I have has squid up for about a week and it is great.
>> list into squid.conf after I put the names one after another with a
>> space in between.
>
> Better to put them in a separate file
I have the firewall which can help to forward the web traffic to the web proxy
server. I used Squid as the proxy server and all traffic can pass to firewall
then to Squid. However, when I used Websense with Squid, I got the following
symptom:
1. In transparent proxy, that is no setting in cli
I have been working all week to try and get ntlm with squid to work. I have
recompiled squid, samba, and kerberos with the appropriate flags but to no
avail. Does anyone have a How-to that actually works as the ones that I have
been using obviously don¹t.
Thanks
Gary
On 5/27/05 8:53 AM
s are crashing
too rapidly.
Thanks
Gary
Anyone know what this error message means when I try to squid -NCd1?
Thanks
gary
I have a single squid box running FreeBSD that is behaving very strangely.
With certain types of media files, most notably mp3, ra and wmv files, squid
lists them as mime type text/html. Another oddity is that when requesting
these types of files, the IP of the squid box shows up as the source of
ng to
help me chase down this issue, I'd appreciate it.
-Gary
-Original Message-
From: Mark Elsen [mailto:[EMAIL PROTECTED]
Sent: Friday, November 11, 2005 11:46 AM
To: Gary Buckmaster
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] Squid mishandling certain kinds of media
t
Yep, sure enough. An unfortunate entry in a squidguard expressions file was
rendering all media elements URLS as block items. Thanks very much for that
pointer.
-Gary
-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: Monday, November 14, 2005 8:10 AM
To: Gary
.STABLE13-20060520 and squid-2.5.STABLE13, but I get the
same make errors. Any help would be greatly appreciated as I cannot
go live with squid until I can get access_log stats that awstats can
read.
Thanks for any help you can offer,
Gary
gcc -DHAVE_CONFIG_H -DDEFAULT_CONFIG_FILE=\"
Works like a charm! Thanks for taking care of this so quickly.
All hail Squid! All hail Squid!
On May 21, 2006, at 7:56 PM, Henrik Nordstrom wrote:
lör 2006-05-20 klockan 22:32 -0400 skrev Gary Kahn:
Hello Everybody,
I am getting make errors after applying the customlog-2_5.patch
break;
then u can log, in your custom format with %>p
Regards
Gary Lau (Admire123)
"heap,lru" \
--enable-storeio="aufs,coss,diskd,ufs" \
--enable-delay-pools --enable-linux-netfilter \
--with-pthreads \
--enable-auth-modules="LDAP,NCSA,PAM,SMB,MSNT" # --enable-icmp
but still no joy, the page just keeps loading with
I'm getting ready to install linux on a new sun vx60 and want to know if sqiuid Would
be better with raid 1, 0, or just keep the 2 40 gig scsi drives seperate. We are
required to keep 60 days of logs so I'm thinking use one drive for the system and logs
and the other for the cache.
T
I'm getting the "could not determine fully qualified hostname" error on
squid. This is a brand new box that I built and for the life of me I cannot
remember where to set this at. Is it in /etc/hosts?
Thanks
Gary
squid box. I suppose there is a setting in squid.conf but I could not
find it.
thanks
Gary
e
how-tos in order to make this happen? I tried squid -v and it didn't say
anything about windbind. In fact it didn't say anything.
thanks
gary
You're a genius, that worked, can't thank you enough.
Gary
-Original Message-
From: Elsen Marc [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 17, 2004 1:29 AM
To: Gary Hostetler; [EMAIL PROTECTED]
Subject: RE: [squid-users] I need longer lines in access.log
>
>
a post to IPFilter by Darren Reed.
Is anyone using a 64-bit bit build of squid on Solaris 8 or later?
Are instructions on compiling squid in 64-bits available?
Has anyone developed a way to get the required information from IPFilter,
for example using interprocess communication?
Thanks
Gary Price
I
OST
header (IPF_TRANSPARENT) worked.
Is anyone else running 64-bit squid on Solaris?
Thanks
Gary Price
ICT
Would the icon option work for the Access Denied error page? I had assumed
it was not possible to put custom images on that error page.
Gary Price
Intelligent Compression Technologies
- Original Message -
From: "Henrik Nordstrom" <[EMAIL PROTECTED]>
To: "Stella Koraka
ng tags in squid.conf. That made it easier
to make the changes.
I guess it would be possible not to apply the access controls to the images
used for the error pages.
Gary Price
ICT
- Original Message -
From: "Henrik Nordstrom" <[EMAIL PROTECTED]>
To: "Gary Price (ICT)&qu
ethod
requires end-to-end HTTP state, and this change is not sufficient to guarantee that.
Perhaps others could try this and report on
what they find. Contact me directly for the source code I used.
Gary Price
Intelligent Compression Technologies
anything similar? For example, is there a known error in IE
that could cause this? We are not using proxy
authentication.
Thanks
Gary Price
Intelligent Compression Technologies
Gary Price wrote:
>> Hi
>> some of my colleagues are reporting that, if they have a HTTP
>> proxy set in their browser (IE6), they cannot access secure
>> sites (HTTPS).
Michael Lightfoot wrote
>Have they set the "secure" option to the name and listening port
- Original Message -
From: "Amy Anderson" <[EMAIL PROTECTED]>
To: "Gary Price (ICT)" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 1:57 PM
Subject: Re: [squid-users] SSL and directed HTTP proxy
Also, if you are running a FW
platforms?
Thanks
Gary Price
ICT
e I need to go to a CVS repository and issue a
diff command in some way. I would appreciate
someone telling me how to do this.
thanks for your time
Gary Price
Intelligent Compression Technologies
orked well. Excellent job Guido!
Thanks
Gary Price
Not ALL the files had UNIX line ends. I checked a bunch of dsp and .h files,
and quite a respectable proportion had DOS line ends. So be careful converting.
Gary Price
ICT.
- Original Message -
From: "Guido Serassio" <[EMAIL PROTECTED]>
To: "Gary Price (ICT)&qu
Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
is the same as
acl Safe_Ports 80 21 443 563 70 210 1025-65535 280 488 591 777
Is this so? If so, is this a property of any other acl types?
Thanks
Gary
you can provide would be much appreciated.
Thanks
Gary Price
ICT
I am wondering why the default value of incoming_http_average in squid.conf is smaller
than the default value of min_http_poll_cnt.
It looks from the code like the min poll cnt is used as a lower limit on the
incoming_http_interval, so it will never get to its
target value.
Gary Price
ICT
Hi
I notice that enter_suid is used when doing IPF_TRANSPARENT proxying. Does this mean
that squid must be started as root when doing
transparent proxying?
Thanks
Gary Price
ICT
arent proxy setting from iptables and go
direct it works. If later I re-enable the setting it will continue to
work for a little while (not sure how long, haven't timed it) but then
it will eventually fail with the same TCP_MISS entries in the log file.
Any ideas?
Gary Smith
Any ideas on this. I have looked through some of the FAQ's and haven't
found what I am looking for. If it's covered somewhere in the doc's/faq
can someone point me to it?
Thanks,
Gary Wayne Smith
> -Original Message-
> From: Gary W. Smith [mailto:[EMAIL P
Henrik,
Thanks for the info. There is a case under there that describes my
problem (ECN flag). I'm running 2.6 so it makes sense on why it will
break on me and not others. I have disabled ECN to see if that will
resolve my problem. It appears to be working now.
Gary Wayne
squid files are more continuous.
But if this is a dedicated server only housing squid then you would
probably see an improvement as there are no other apps really fighting
for disk time.
Just my $0.02
Gary Wayne Smith
> -Original Message-
> From: Matt [mailto:[EMAIL PROTECTED]
Here is what I have in mine:
Stock config file with the following changes:
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
acl PURGE method PURGE
acl localhost src 127.0.0.1
http_access allow PURGE localhost
http_access deny PURGE
acl
We have ours behind so the squid server gets the protection of the
firewall. We then use the firewall for transparent proxing of requests.
That is, we don't let anything go out port 80 unless the request is from
squid server. All traffic destined for port 80 is then redirected to
the squid server
bad_time blocked_machines
Is that a bad way to do it? If it is, how to do it better?
Gary Martin
82 matches
Mail list logo
