Redirect it (like you would porn or such) to a page saying it is blocked
to insure that computers remain compliant yadda, yadda. Give a link to
the SUS server for them to use.
-Original Message-
From: Serassio Guido [mailto:[EMAIL PROTECTED]
Sent: Saturday, February 21, 2004 12:02 PM
You are both right.
Yes, if you attempt to impersonate the Windows update site it will not
work.
Yes, you can redirect a request for windowsupdate.microsoft.com to
sus.mydomain.com and let them use that for updates, so long as you don't
try to impersonate the Windows Update site.
My suggestion
Then just use wget to make a local mirror Why bother with squid?
-Original Message-
From: OTR Comm [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 17, 2004 8:53 PM
To: squid
Subject: Re: [squid-users] Re: Don't Know Topic For This Question
Wwwoffle should be useful for this job.
Google:
http://www.google.com/search?hl=enie=UTF-8oe=UTF-8q=Squid+and+ClamAV
2nd link down...
-Original Message-
From: Gareth [mailto:[EMAIL PROTECTED]
Sent: Sunday, February 08, 2004 11:18 AM
To: [EMAIL PROTECTED]
Subject: [squid-users] Squid and ClamAV
Hi Guys
Has anyone managed to
Perhaps you should look at the ACL section of your squid.conf. It has
all the details on allowing/disallowing ports and methods such as
CONNECT.
-Original Message-
From: Simon Walters [mailto:[EMAIL PROTECTED]
Sent: Sunday, February 01, 2004 10:23 PM
To: [EMAIL PROTECTED]
Subject: Re:
Google
http://www.google.com/search?hl=enie=UTF-8oe=UTF-8edition=usq=block+
exe+squid
-Original Message-
From: Liew Toh Seng [mailto:[EMAIL PROTECTED]
Sent: Monday, January 26, 2004 8:00 PM
To: [EMAIL PROTECTED]
Cc: Squid Users
Subject: [squid-users] Block
Hi,
how i'm going to block
I have a problem with one site in particular ( www.xtremepccentral.com )
that wont display via Squid 2.5 Stable3 or 3.0 PRE3 on both Linux and
FreeBSD. Whenever a user reqests it, they are prompted to download a
file. Direct request works fine, but something goes wrong via squid.
When I look at it
Found a work around/fix after your post.
Check the box in IE advanced options to use HTTP 1.1 through proxy,
works properly now.
-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: Sunday, January 25, 2004 4:21 AM
To: Mark A. Lewis
Cc: [EMAIL PROTECTED]
Subject
His solution will work. It combines the maxconn and your local net to
limit the grand total. Or use the any source with maxconn like he
describes if you are using it as a accelerator.
-Original Message-
From: Paul [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 13, 2004 6:04 PM
To:
# TAG: access_log
# These files log client request activities. Has a line every HTTP
or
# ICP request. The format is:
# access_log filepath [logformat name [acl acl ...]]
# access_log none [acl acl ...]]
#
# Will log to the specified file using the specified format
Because Squid is open source while ISA is not?
Certainly an advantage if you have the resources to do something with
that source or someone has already done it.
Because Squid does not make you further dependent on Microsoft than
you already are?
Eh, I don't know that this is a real
The FAQ knows all...
http://www.squid-cache.org/Doc/FAQ/FAQ-6.html
-Original Message-
From: Fadjar Tandabawana [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 30, 2003 6:31 AM
To: [EMAIL PROTECTED]
Subject: [squid-users] Squid log format
Dear Gurus,
Is there anyone know the squid
Unless you are using the proxy for counterstrike (which I doub't) squid
will have no ability to control this. Socks MAY be able to do it, if you
use a socks client on each PC. Traffic shaping is more what you are
looking for.
-Original Message-
From: Aristarchus [mailto:[EMAIL PROTECTED]
I have noticed that quite a few of the people posting here request read
receipts. I for one feel that this is basically foolish and should be
stopped. It is not only a pain for all the subscribers, but produces a
ton of COMPLETELY unneeded mail from both ends.
This is a known bug/feature in IE 6. I have some MS info on it
somewhere.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 07, 2003 2:16 PM
To: [EMAIL PROTECTED]
Subject: Re: [squid-users] ie6 ftp ignoring proxy?
Try disabling the option in
Or move the config where it is expecting to see it.
-Original Message-
From: Adam Aube [mailto:[EMAIL PROTECTED]
Sent: Saturday, September 20, 2003 8:33 PM
To: [EMAIL PROTECTED]
Subject: Re: [squid-users] help: Squid.conf
With no -f option, squid reads an old configuration of
This probably isnt a good idea, since www is technically a host name.
Not all sites have http://domain.com and http://www.domain.com pointing
to the same place. And if you always put www if not present you will
break sites that don't use it such as http://support.domain.com
-Original
If it is a W2K enviroment with a 2k DNS and DHCP you can do this, but
only if your DNS updates with your DHCP. You will get something like
client.yourdomain.tld
Or if its NT you can have WINS update DNS.
There is an option in squid.conf to resolve client names.
-Original Message-
From:
Guess I need to get my squid box out of the driveway and take away the
sponge then
-Original Message-
From: Joel Jaeggli [mailto:[EMAIL PROTECTED]
Sent: Monday, July 28, 2003 11:44 AM
To: rick bohaty
Cc: [EMAIL PROTECTED]
Subject: Re: [squid-users] Bypass squid
you don't... in linux
This should be written up for the FAQ with a few examples. Has to be one of
the most common questions that passes this list.
-Original Message-
From: Schelstraete Bart [mailto:[EMAIL PROTECTED]
Sent: Friday, July 18, 2003 4:16 PM
To: Kenn Murrah
Cc: 'squid'
Subject: Re: [squid-users]
Squidalyser sounds like what you are looking for. Also look at
http://www.squid-cache.org/Scripts/ for more.
http://ababa.org/
Squidalyser is a squid traffic analyser, designed to allow per-user scrutiny
and analysis of squid logfiles. The program allows a non-technical user to
extract
FATAL: Could not determine fully qualified hostname. Please set
'visible_hostname'
Did you set visible_hostname in your squid.conf ?
-Original Message-
From: Vishal For You [mailto:[EMAIL PROTECTED]
Sent: Monday, June 30, 2003 2:31 AM
To: [EMAIL PROTECTED]
Subject: [squid-users] Need
You could try an ACL using regex on the URL looking for mail and exe or
something similar.
-Original Message-
From: Peña, Botp [mailto:[EMAIL PROTECTED]
Sent: Sunday, June 29, 2003 10:12 PM
To: [EMAIL PROTECTED]
Subject: RE: [squid-users] deny downloads fr webmails
Adam Aube
User agent would be a good start I would guess. Look at your access.log
and see what the requests have in common. You may have to enable user
agent logging.
-Original Message-
From: wesley deypalan [mailto:[EMAIL PROTECTED]
Sent: Monday, March 24, 2003 11:05 PM
To: [EMAIL PROTECTED]
Um, that's kinda the whole idea of a proxy, that it makes the request
for the client. You could use forwarded for if the server at the other
end logs it.
-Original Message-
From: TMurugavelu [mailto:[EMAIL PROTECTED]
Sent: Monday, March 17, 2003 4:44 AM
To: [EMAIL PROTECTED]; [EMAIL
I may be off here, but here is what I see.
It looks like it is using CONNECT via 443 and since there are no further
requests it doesn't drop the exsisting connection. Perhaps if you deny
CONNECT to the AIM/Yahoo dstdomain group and force it to use GETs
instead.
Unfortunately I don't know enough
As long as you only allow connect to 443 you should be ok.
Sounds like you can see who it is. Give them their own acl and cut them
off all together.
-Original Message-
From: William Lyman [mailto:[EMAIL PROTECTED]
Sent: Sunday, March 16, 2003 11:23 PM
To: [EMAIL PROTECTED]
Subject:
I have seen this before and it seems to be a function of the application
not knowing how to authenticate with the proxy. AIM and MSN use NSCA
auth. I don't know a workaround for it.
-Original Message-
From: Dhaval Chokshi [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 11, 2003 12:50 AM
Can the host OS resolve the name via nslookup or dig? Do you have
anything in the dns_namservers in your squid.conf? Can it resolve the
names of you parent proxies? What does the log say?
Obviously this is a name resolution problem, since it is telling you
that it cannont locate a dns record.
Here is what my ident ACL looks like at home and it logs usernames
acl users ident mark amanda administrator root
http_access allow users
http_access deny !users
-Original Message-
From: Chris Hobbs [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 27, 2003 11:51 AM
To: [EMAIL
Did you also include http_access allow/deny for those acls?
-Original Message-
From: Wayne Kerr [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 26, 2003 11:08 PM
To: [EMAIL PROTECTED]
Subject: [squid-users] Squid for NT - Site Blocking
Hi
I've just moved my squid proxy server
Just read the comments in squid.conf regarding acls
Acl proxies src ip.of.other.proxy
http_access allow proxies
http_access deny !proxies
-Original Message-
From: Amit Singh [mailto:[EMAIL PROTECTED]
Sent: Saturday, February 22, 2003 2:27 PM
To: [EMAIL PROTECTED]
Subject: [squid-users]
I will be setting up a squidnt machine with 2 interfaces. Each with its
own gateway on its respective network and the bottom having the
lower/preferred metric. I would like to use tcp_outgoing_address to send
squid traffic out the top gateway but have all other traffic continue
to use the bottom
This is normally a function that is done by 2k DNS (assuming 2000/XP
clients). If you can have Samba emulate a WINS server and have it query
it and create DC records in there it may accomplish this. Possibly as a
secondary WINS to a native 2k WINS instead of manual updates.
I would think that
There was an e-mail going around this week that installs some kind of
Spyware via a site. I don't recall any details but we ended up blocking
the site and the subj line. I will look into it and send you details if
I find them.
-Original Message-
From: Alex Sharaz [mailto:[EMAIL
I am having some real problems with a squid box not using its parent
proxies.
Here is what I have setup proxy.foo.com configured with 2 parent proxies
(parent1.foo.com and parent2.foo.com) with round-robin no-query
proxy-only options.
There are no parents/siblings setup on parent1 or parent2,
, February 16, 2003 5:44 PM
To: Mark A Lewis
Cc: [EMAIL PROTECTED]
Subject: Re: [squid-users] Not using parent proxy
Parents are by default only used if Squid sees any use of using the
parents.. For situations where you are behind a firewall and MUST use
the parents see Squid FAQ 4.8 How do I
It would seem that option A would be the best one. Just set the parent
proxy to only accept requests from the child proxies. This would also
spread the load a bit as well. If logging is an issue NFS is a possible
solution.
I am not very familiar with NFS, but is it possible for multiple proxies
An rfc is a Request For Comments basically a standard. 931 pertains to
an authentication server
http://www.ietf.org/rfc/rfc931.txt
http://www.faqs.org/rfcs/rfc931.html
http://www.google.com/search?hl=enie=UTF-8oe=UTF-8q=rfc931
-Original Message-
From: Ilya [mailto:[EMAIL PROTECTED]]
What if you swap the order? Have the client goto WEBSweeper and have it
goto Squid.
-Original Message-
From: Simon Magee [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 11, 2003 11:01 AM
To: [EMAIL PROTECTED]
Subject: [squid-users] WEBSweeper and Squid
Hi,
I have an issue using
40 matches
Mail list logo
