Re: [squid-users] HTTPS & transparent proxy

2006-03-10 Thread James Gray
On Friday 10 March 2006 07:03, LinuXKiD wrote: > There is a way to process HTTPS request > with IPTABLES as transparent proxy ? No - attempting to do so breaks the HTTPS standard. Technically, what you're proposing is commonly referred to as a "man in the middle" attack. -- James pgp90IslEZgX

Re: [squid-users] loadbalancing

2006-01-23 Thread James Gray
On Tuesday 24 January 2006 13:56, Remy Almeida wrote: > Hi All > > > Can i configure loadbalancing in squid, Not with Java Script. is there > any other way? DNS round robin, clustered boxes, buy a load balancing switch (Foundry et al)how much money can you spend? -- James

Re: [squid-users] Prefetching in Squid

2005-11-30 Thread James Gray
On Thursday 01 December 2005 15:06, mohinder garg wrote: > Hi, > > Can anybody tell me, does squid provides prefetching of objects? > if yes, how? Not natively, but you could use "wget". From the wget man page: --delete-after This option tells Wget to delete every single file it downloads,

Re: [squid-users] citrix users behind squid

2005-09-15 Thread James Gray
On Friday 16 September 2005 06:32, nairb rotsak wrote: ** SNIPPED ** > But I think I read that Squid will use the > authentication from the browser's header, and not from > who is authenticated to the box or ip. > > Anybody got any good examples of using Squid to > authenticate to AD (Samba has to

Re: [squid-users] WARNING: Disk space over limit:

2005-07-07 Thread James Gray
On Fri, 8 Jul 2005 12:41 am, Fabio Gomes Baptista wrote: > Hi, > > I have a squid 2.5/STABLE 9 installed and I am getting the following > messages in the cache.log: > > WARNING: Disk space over limit: 1536004 KB > 1536000 KB > > The cache_dir in squid.conf is configured like the line below: > > cac

Re: [squid-users] Simple question out from SQUID topic

2005-07-04 Thread James Gray
On Tue, 5 Jul 2005 11:45 am, Christian Souw wrote: > Hi guys, sorry. This question is not about SQUID. > > I want to run SARG - Squid monitoring tools to run automatically in FEDORA > CORE 3. > > Anybody can help me how to make SARG run automatically every hour ? any > tools in FEDORA CORE 3 can ma

Re: [squid-users] Simple question out from SQUID topic

2005-07-04 Thread James Gray
On Tue, 5 Jul 2005 11:45 am, Christian Souw wrote: > Hi guys, sorry. This question is not about SQUID. > > I want to run SARG - Squid monitoring tools to run automatically in FEDORA > CORE 3. > > Anybody can help me how to make SARG run automatically every hour ? any > tools in FEDORA CORE 3 can ma

Re: [squid-users] proxy auth timeout config

2005-05-30 Thread James Gray
On Mon, 30 May 2005 11:55 pm, Rolf wrote: > hello > > Can someone clarify for me the squid config directives that control how > long proxy auth credentials are kept for? > > I have basic auth working fine here and I think I set it up for re-auth > every hour. But I have been noticing that sometimes

Re: [squid-users] Microsoft Updates

2005-05-26 Thread James Gray
On Fri, 27 May 2005 04:38 am, David Curtis wrote: > We are having problems running windows updates through our squid server. > If we bypass squid we have not problems. Any idea where the problem > might be. We are running Squid Cache: Version 2.5.STABLE1 on RH9. I see > nothing in the access log th

Re: [squid-users] NTLM

2005-05-24 Thread James Gray
On Wed, 25 May 2005 04:10 am, marcantonio wrote: > Hi, > > How can I troubleshoot Squid with ntlm_auth? > > I have been checking everything; the pipe is ok. The program ntlm_auth > works when launched manually; all samba utilities and kerberos utilities > return success. But Squid rejects users. >

Re: [squid-users] squid no ntlm_auth for certain IPs

2005-05-23 Thread James Gray
On Mon, 23 May 2005 10:14 pm, Daniel wrote: > Hello Squid Users, > > I've set up squid using samba and ntlm_auth for user authentication. And > everything works fine. Users with a valid Active Directory > authentication can surf the web. Users without such authentication > can't. just like i intend

Re: [squid-users] Multiple authentication schemes

2005-03-14 Thread James Gray
On Tue, 15 Mar 2005 05:14 am, Graeme Bisset wrote: > Hi, > > I was wondering if it was possible to have multiple proxy_auth acls at > once? i.e. Can I use the NTLM authentication auth helper for one subnet > and use another type of helper (not NTLM) for another subnet? > > Thanks, > > Graeme We ru

Re: [squid-users] Access to external hosted URL

2005-03-02 Thread James Gray
On Wed, 2 Mar 2005 06:50 pm, Ling Ling Chan wrote: > Hi, > > We are running SQUID (as forward proxy)and we had configured to resolve our > domain (.mycompany.com) internally. However, We have some URLs that are > configured using our DNS, and those website are hosted by 3rd party web > hosting comp

Re: [squid-users] squid in schoool

2005-02-24 Thread James Gray
On Fri, 25 Feb 2005 09:19 am, Carles gine wrote: > Hello every one. > > I need to put squid in a local shool and i need to filter de content of > the web traffic. > > Can some one recomended any soft ? > > thanks Dans Guardian or Squid Guard Google is your friend. Cheers, James

Re: [squid-users] squid + gmail ???

2005-02-22 Thread James Gray
On Wed, 23 Feb 2005 08:55 am, UnIData wrote: > I configured squid and all ok, but can't access to gmail.com and > google.com from clients, what is the problem and the solution please Is there a reason you posted this question 3 times in 5 minutes? What error (exaclty)? Is it being generated by

[squid-users] Re: SquidNT - basic auth?

2005-02-22 Thread James Gray
On Wed, 23 Feb 2005 09:20 am, James Gray wrote: > However, I can't seem to get basic authentication to work. We need basic > auth for some legacy apps and other stuff (like Java) which don't support > NTLM auth. Sorry to waste people's time: http://www1.fr.squid-cach

[squid-users] SquidNT - basic auth?

2005-02-22 Thread James Gray
Gah - one of our support people in $REMOTE_OFFICE has decided to lead a little rebellion and installed squid on a Win2k Server box (the standard here is to run Squid on RHEL). After a little massaging I've managed to fix most of the differences between squid.conf on Linux and SquidNT - seeing a

Re: [squid-users] Problem with unparseable HTTP header field

2005-02-21 Thread James Gray
On Sat, 19 Feb 2005 12:45 am, Ralf Hildebrandt wrote: > When I surf to http://www.abstractserver.de/da2005/avi/e/Abs_revi.htm > and enter any number/character and click "Submit my query", I get an > error page ("Invalid Response" The HTTP Response message received from > the contacted server could

Re: [squid-users] ACLs in a text file

2005-02-21 Thread James Gray
On Sun, 20 Feb 2005 07:18 am, [EMAIL PROTECTED] wrote: > If I place my ACL definitions in a text file, and add URLs to the file > during working hours, is it sufficient to just save the file for the new > URLs to be allowed, or is it necessary to do something like rotating logs > or restarting Squi

Re: [squid-users] fedora, squid, cisco, transparent proxy and https/ssl

2005-01-19 Thread James Gray
On Thu, 20 Jan 2005 09:47 am, Flip Johnson wrote: > Hi Everyone, > > We have squid 2.5 setup and working beautifully as a transparent proxy. Our > cisco firewall/router redirects the traffic outbound on port 80 to the > squid box and it in turn is filtered and sent on it's merry way. > > Our proble

Re: [squid-users] WindowsUpdate Problems.

2005-01-18 Thread James Gray
On Mon, 17 Jan 2005 11:18 pm, Palmer J.D.F. wrote: > Hello, > > I have just been made aware that some machines are not Windows updating on > our campus network, I've done a fair bit of investigation and I 'think' I > know what the problem is and just wondered if anyone else had seen this, > and if

Re: [squid-users] FATAL: redirect_program /usr/bin/squidguard: (13) Permission denied

2004-11-23 Thread James Gray
On Wed, 24 Nov 2004 01:26 pm, Yong Bong Fong wrote: > Thanks James, > > Sorry I am a newbie in squid. I am not even sure under what user my > squid is running on. I did not configure the cache _effective_user and > cache_effective_group section in squid.conf. Is that the section that > defines

Re: [squid-users] FATAL: redirect_program /usr/bin/squidguard: (13) Permission denied

2004-11-23 Thread James Gray
On Wed, 24 Nov 2004 12:45 pm, Yong Bong Fong wrote: > and inside the log file squid.out in /var/log/squid the following output > came out: > FATAL: redirect_program /usr/bin/squidguard: (13) Permission denied > Squid Cache (Version 2.5.STABLE6): Terminated abnormally. > CPU Usage: 0.015 seconds = 0

Re: [squid-users] transparent proxy and NCSA auth

2004-11-08 Thread James Gray
On Tue, 9 Nov 2004 02:11 pm, zen wrote: > Hello squid-users, > > does transparent proxy could work together with NCSA auth?? > > TIA Read the archives, this has been answered at least 20 times in the last 3 months. But once more: You can NOT use ANY authentication with a transparent proxy.

Re: [squid-users] Ad-zapping redirector causes IE to think it never completes loading a page

2004-10-26 Thread James Gray
On Tue, 26 Oct 2004 09:32 pm, Angela Williams wrote: > On Tuesday 26 October 2004 08:10, [EMAIL PROTECTED] wrote: > > Hi everyone, > > > > I am running Squid 2.5STABLE5 and trying to block a few of the more > > prominent web advertisements that chew bandwidth. > > Andy Lyttle's bannerfilter take ou

Re: [squid-users] Ad-zapping redirector causes IE to think it never completes loading a page

2004-10-26 Thread James Gray
On Tue, 26 Oct 2004 11:39 pm, Herman wrote: > James Gray wrote: > > On Tue, 26 Oct 2004 04:10 pm, [EMAIL PROTECTED] wrote: > >>I am running Squid 2.5STABLE5 and trying to block a few of the more > >>prominent web advertisements that chew bandwidth. > > > > S

Re: [squid-users] Ad-zapping redirector causes IE to think it never completes loading a page

2004-10-26 Thread James Gray
On Tue, 26 Oct 2004 04:10 pm, [EMAIL PROTECTED] wrote: > Hi everyone, > > I am running Squid 2.5STABLE5 and trying to block a few of the more > prominent web advertisements that chew bandwidth. The way I have tried > to set this up is with i) two acls to match advert objects - one a > dstdomain an

Re: [squid-users] Options Requests

2004-10-11 Thread James Gray
On Tue, 12 Oct 2004 02:18 pm, Christian Ricardo dos Santos wrote: > Hello, > > I want to know why, almost all windows XP/2K from our network, send > multiple requests to the proxy server trying to access some network shares > or even to resolve names. > > How can I avoid it ? > > Here are some exam

Re: [squid-users] Secondary proxy w/ntlm-auth

2004-09-10 Thread James Gray
On Fri, 10 Sep 2004 10:45 pm, Jeff Heckart wrote: > Hello, > > I am currently using squid as a proxy, and am authenticating against my > domain controller using ntlm-auth. Here is how squid was compiled: > Squid Cache: Version 2.5.STABLE4 > configure options: --enable-icmp --enable-delay-pools >

Re: AW: [squid-users] Recompile Squid : Procedure needed

2004-09-06 Thread James Gray
On Mon, 6 Sep 2004 06:09 pm, [EMAIL PROTECTED] wrote: > Can you give me more info paramter to change to allow more file descriptor? > On all FAQ I saw, it seems that I have to recompil it. > > -Ursprüngliche Nachricht- > Von: Ralf Hildebrandt > Gesendet: Donnerstag, 2. September 2004 15:40

Re: [squid-users] Hard Drive Latency

2004-08-29 Thread James Gray
Henrik Nordstrom wrote: On Fri, 27 Aug 2004, Matt wrote: The "aufs" cache_dir type automatically tries to do this when the harddrive I/O load is too high. Is "aufs" type less stable then "ufs"? Not that I know of. Regards Henrik Is there anything to be gained by switching to AUFS in a SCSI RAID

Re: [squid-users] Might be useful to someone - realtime log view

2004-08-25 Thread James Gray
ype) | || | V VV V 8.23 Kb bimal http://www.siliconvalleyccie.com/linux-adv/squid.htm text/html - Hmmm - no cache status (MISS/HIT etc). See above. certainly a good script to check the things ONLINE!! I thought so too - glad you think so too. James Gray __ I.T. Manager - Asia Region Open Channel Solutions Sydney NSW 2000, Australia

[squid-users] Might be useful to someone - realtime log view

2004-08-24 Thread James Gray
ul for me to keep a passing eye on what's going on, but would scroll way too fast on really busy squid servers. YMMV. Cheers, James Gray __ I.T. Manager - Asia Region Open Channel Solutions Sydney NSW 2000, Australia