[squid-users] No proxy, with Captive portal and Reporting through Squid

2012-11-01 Thread Neil
sing Squid? I know it's possible to captive portal using RADIUS without squid, but then the reporting side is very limited. Thanks in advance. Regards. Neil Wilson.

[squid-users] Transparent SSL Interception

2012-04-24 Thread Neil
some kind of SSL error and doesn't allow you to get in. As you can see in my config, I've tried to force "absa.co.za" to work no matter what happens but the ACLs haven't made any difference. Please could anyone provide me with some guidance, I seem to be going round in circles here. Thank you. Regards. Neil Wilson.

[squid-users] Squid vs httpd mod_cache

2008-11-24 Thread Neil Gunton
if I do decide to use Squid, is the O'Reilly book from 2004 still relevant, or is it out of date now? I know there's a lot of stuff online, but I like to have a handy book reference, plus a well-written book often has a good intro to the tool. This book seems to get only 5-star reviews on Amazon. Is it still up to date? Thanks in advance, Neil

Re: [squid-users] headers say HIT, logs say MISS, payload is truncated...

2008-10-27 Thread Neil Harkins
On Mon, Oct 27, 2008 at 2:56 PM, Henrik Nordstrom <[EMAIL PROTECTED]> wrote: > On mån, 2008-10-27 at 12:23 -0700, Neil Harkins wrote: >> The timeout is because the Content-Length header is bigger than the >> payload it sent. >> Every http client/server will hang in

Re: [squid-users] headers say HIT, logs say MISS, payload is truncated...

2008-10-27 Thread Neil Harkins
On Sat, Oct 25, 2008 at 8:54 AM, Henrik Nordstrom <[EMAIL PROTECTED]> wrote: > On fre, 2008-10-24 at 15:44 -0700, Neil Harkins wrote: >> We are using collapsed_forwarding here. I haven't tried disabling it yet. >> >> Unfortunately, since the problem appears to be l

[squid-users] headers say HIT, logs say MISS, payload is truncated...

2008-10-24 Thread Neil Harkins
Hi. I'm seeing periodic odd behavior from one of our squid2.6 stable18 (and stable22) boxes during the peak hours when the squid is busiest, but not off-peak, and no other signs of a capacity limit except the occasional queue congestion warning. About 15% of the requests for one url we're externall

Re: [squid-users] Urgent Help Needed: Any suggestion on CPU utiliztion increased from 73% to 97.5 after cache_mem increased from 4 GB to 8 GB

2008-06-14 Thread Neil Harkins
poor at handling large > objects in memory, wasting exponential amount of CPU the larger the > object is.. This is fixed in Squid-3. Could you please provide a link to that bug? -neil

Re: [squid-users] RAID is good

2008-03-27 Thread Neil Harkins
mance from half your disks to RAID1. -neil On Wed, Mar 26, 2008 at 6:59 PM, Marcus Kool <[EMAIL PROTECTED]> wrote: > Richard, > > RAID0 is considered to have a worse performance than JBOD with 2 disks > with one cache directory per disk. Since you mentioned that you have >

Re: [squid-users] Re: Re: [squid-users] centralized storage for squid

2008-03-10 Thread Neil Harkins
for the nodes, but doesn't need to be recomputed when you add/remove a few, they just fit in between the others. i'll try to finish the writeup and submit it to devcentral soon. -neil 2008/3/10 Mark Nottingham <[EMAIL PROTECTED]>: > This is the problem that CARP and other

[squid-users] any thought to making collapsed_forwarding acl-based?

2008-02-22 Thread Neil Harkins
reasons why it would be a bad idea? another way to optimize it would be to restrict it to revalidations only, not misses. then it would only apply to what is known to have been cachable. -neil

Re: [squid-users] Fatal: Bungled squid.conf

2008-02-07 Thread Neil A. Hillard
sibly: cache_dir diskd /usr/local/squid/var/cache 100 16 256 HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] How to exclude ip addressses

2008-01-30 Thread Neil A. Hillard
do this browser-side, as Ang said in a proxy auto config script or just by adding them to the proxy exclusion list. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] aufs cache_dir growing beyond configured limits?

2007-12-20 Thread Neil Harkins
On 12/20/07, Adrian Chadd <[EMAIL PROTECTED]> wrote: > On Thu, Dec 20, 2007, Neil Harkins wrote: > > Aside from the fact that this one is an old version > > (below), it's a little distressing to see squid occasionally > > filling up a 1024M partition when config

[squid-users] aufs cache_dir growing beyond configured limits?

2007-12-20 Thread Neil Harkins
mnt/squid' size changed to 972800 KB What cases cause squid to resize an aufs store differently than it's configured value? -neil

Re: [squid-users] How to FORCE the login pop-up

2007-10-17 Thread Neil A. Hillard
Hi, Abd-Ur-Razzaq Al-Haddad wrote: > Hi all, > I've got squid setup using NTLM Authentication, > I want to force the login window to appear each time a user opens their > web browser. > How is this achieved? > thanks Use basic authentication. HTH,

Re: [squid-users] Filemanager

2007-10-16 Thread Neil A. Hillard
you want to change the permissions? Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

[squid-users] squid only caching for a few seconds... i.e. MISS/HIT/MISS/HIT

2007-09-19 Thread Neil Harkins
Hi. Our squid appears to be caching .css for only a few seconds, when I expect it should be caching it longer, and doing IMS requests. I've included log excerpts (MISS/HIT/MISS/HIT) and sniffer output below. I've tried both of the following refresh_patterns with no noticeable change: refresh_patte

Re: [squid-users] Bungled squid.conf due to cache_dir

2007-09-14 Thread Neil A. Hillard
in windows, but it might be possible in > your case to use the %...% win32 default path variables. It would be > easier to add code for those at certain places than change the parser to > cope with spaces. You should be able to use the DOS format name - d:\progra~1\... Never tried i

Re: [squid-users] Re: Akamai-like CDN using squid and a DNS trick

2007-09-05 Thread Neil Harkins
a way to force a purge/re-get instead of an IMS? i.e. It'd be nice if lm-factor > percent generated an IMS, but age >max resulted in a purge and re-GET... If not, perhaps I'll write a tool to tail the log for the hottest objects, look at the headers on disk, and issue PURGE requests. Yuck. -neil

Re: [squid-users] criticism against squid

2007-08-29 Thread Neil Harkins
tuned to resolve most of the issues the Varnish authors cite. As features are added to Varnish, that might change. We'll see. It's VCL language definately looks interesting. -neil On 8/29/07, john allspaw <[EMAIL PROTECTED]> wrote: > Varnish shows a lot of promise. I do bel

Re: [squid-users] username and password in TRANSPARENT mode

2007-08-10 Thread Neil A. Hillard
Hi, Adrian Chadd wrote: > On Fri, Aug 10, 2007, Neil A. Hillard wrote: >> Hi, >> >> Adrian Chadd wrote: >>> On Fri, Aug 10, 2007, Neil A. Hillard wrote: >>> >>>>> It doesn't work reliably? :) >>>> Doesn't it? You&#x

Re: [squid-users] username and password in TRANSPARENT mode

2007-08-10 Thread Neil A. Hillard
Hi, Adrian Chadd wrote: > On Fri, Aug 10, 2007, Neil A. Hillard wrote: > >>> It doesn't work reliably? :) >> Doesn't it? You'll have to cite specific examples. I can't think of >> one problem I've had that's related to basic aut

Re: [squid-users] username and password in TRANSPARENT mode

2007-08-10 Thread Neil A. Hillard
at a proxy ends up doing >>> with those. >> What about it? > > It doesn't work reliably? :) Doesn't it? You'll have to cite specific examples. I can't think of one problem I've had that's related to basic auth not working as it should (as lon

[squid-users] few questions around multiple cache_dirs

2007-08-10 Thread Neil Harkins
_mem limits? * although i admittedly can't reproduce now, i earlier saw object files in the aufs cache_dir occasionally getting renamed(rewritten?) in the same cache_dir, incrementing the filename by 1 on each of multiple successive identical requests (same client). any idea what could account for this behavior? thanks, -neil

[squid-users] few questions around multiple cache_dirs

2007-08-09 Thread Neil Harkins
_mem limits? * although i admittedly can't reproduce now, i earlier saw object files in the aufs cache_dir occasionally getting renamed(rewritten?) in the same cache_dir, incrementing the filename by 1 on each of multiple successive identical requests (same client). any idea what could account for this behavior? thanks, -neil

Re: [squid-users] username and password in TRANSPARENT mode

2007-08-06 Thread Neil A. Hillard
Adrian, Adrian Chadd wrote: > On Mon, Aug 06, 2007, Neil A. Hillard wrote: > >> I can't see how it's a shortcoming of the protocol. If the browser >> isn't aware that there is a proxy then why would it (why should it) try >> to authenticate to one? Te

Re: [squid-users] Fwd: username and password in TRANSPARENT mode

2007-08-06 Thread Neil A. Hillard
che.org/SquidFaq/InterceptionProxy#head-7cfff26a112769fccff8f4d507961cd27ebe5eac You may also care to search the archives as this question has been asked many times before. BTW, Henrik's name does not contain a 'd'! Neil. -- Neil Hillard

Re: [squid-users] username and password in TRANSPARENT mode

2007-08-06 Thread Neil A. Hillard
ce my previous reply)! I can't see how it's a shortcoming of the protocol. If the browser isn't aware that there is a proxy then why would it (why should it) try to authenticate to one? Tell it that a proxy exists and it's more than happy to authenticate. Intercept

Re: [squid-users] username and password in TRANSPARENT mode

2007-08-06 Thread Neil A. Hillard
ture. Is it NORMAL in TRANSPARENT mode? > > This happened in SQUID 2.5. Please see: http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#head-7cfff26a112769fccff8f4d507961cd27ebe5eac Neil. -- Neil Hillard[EMAIL P

Re: [squid-users] Proxy-Authenticate and WWW-Authenticate

2007-07-26 Thread Neil A. Hillard
roxy then they will happily authenticate to it (with Proxy-Authorization) and then authenticate to the target website (with Authorization). Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.whl.co.uk/

Re: [squid-users] Re: *** VIRUS *** [squid-users] Server Report

2007-07-05 Thread Neil A. Hillard
rus >> Worm.SCO.A-1. >> > > Please do something about it. found worm in a message... I seriously doubt Henrik sent out a worm and in any case, why are you reporting something that happened over 5 years ago? Neil. -- Neil Hillard

Re: [squid-users] Squid-2.5.STABLE6-3.4E.12 https Invalid URL problem

2007-06-19 Thread Neil A. Hillard
Microsoft and complain. Basically, IE when requested for proxy authentication for an https resource, duly prompts for authentication but then proceeds to downgrade the request to an http request for an origin server and not a proxy request as required. Try using a proper browser or raise a faul

Re: [squid-users] squid_radius_auth accepts any credentials!

2007-06-18 Thread Neil A. Hillard
Henrik, Henrik Nordstrom wrote: > tis 2007-06-05 klockan 08:53 +0100 skrev Neil A. Hillard: > >> I'll post here and let everyone know whether it's OK now. I'll compare >> the sources but can you summarise what needed resolving? > > It was a year ago so

Re: [squid-users] Port numbers

2007-06-11 Thread Neil A. Hillard
onnecting through port 8080 to access only one site? > > All users are in DHCP and there are no ip reservations. Yes - look at using the myport ACL. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.

Re: [squid-users] Wrong ports denied as SSL_ports

2007-06-11 Thread Neil A. Hillard
Jan, Jan Groenewald wrote: > Hi > > On Mon, Jun 11, 2007 at 01:15:02PM +0100, Neil A. Hillard wrote: >> Although you have 1024-6000 listed in safe_ports, that will only allow >> access for http. You are attempting to use https so you will also need >> to list it i

Re: [squid-users] Wrong ports denied as SSL_ports

2007-06-11 Thread Neil A. Hillard
isted in safe_ports, that will only allow access for http. You are attempting to use https so you will also need to list it in ssl_ports. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] squid_radius_auth accepts any credentials!

2007-06-05 Thread Neil A. Hillard
ll compare the sources but can you summarise what needed resolving? Many thanks, Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

[squid-users] squid_auth_ldap accepts any credentials!

2007-06-04 Thread Neil A. Hillard
arts the authenticators and the authentication works as expected and there are no warnings present. When the warnings start the authenticator starts accepting any credentials! Any advice would be appreciated. Regards, Neil. -- Neil Hillard

Re: [squid-users] Local domain

2007-05-08 Thread Neil A. Hillard
its the search that uses the domainname, but no luck. > For now i have put the servernames in the browsers exceptionlist but i > can't do this for all machines, and the users won't uses the FQDN in the > url bar. > > Is there a solution for me ? Yes. Use append_domain.

Re: [squid-users] Squid and Mirrored Router Ports

2007-04-17 Thread Neil A. Hillard
se WCCP if you have a WCCP capable router. 3. Use a mirrored port and software like packit. 4. Get the specialist in to prove you right. ATB, Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.whl

Re: [squid-users] Squid and Mirrored Router Ports

2007-04-17 Thread Neil A. Hillard
>> looking for.. > > We specifically need the Squid log format that's why we want to make this > work with squid. My boss doesn't want it any other way. :-( Why must he have Squid format logs? What's his business reason for having to have them in

Re: [squid-users] Squid and Mirrored Router Ports

2007-04-17 Thread Neil A. Hillard
y'd be confusing the hell out of the client! You need an application that will passively monitor the data and then log the contents. Squid isn't designed for that. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland

Re: [squid-users] Squid and Mirrored Router Ports

2007-04-17 Thread Neil A. Hillard
e wrong tool for the job. He wants to 'T' off the traffic from the switch and log all requests. Regards, Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] squid server crash

2007-02-23 Thread Neil A. Hillard
Hi, Emilio Casbas wrote: > Neil A. Hillard escribió: >> Hi, >> >> Slacker wrote: >>> Emilio Casbas, on 02/23/2007 03:11 PM [GMT+500], wrote : >>>> Hi >>>> >>>> We have two squid servers as reverse proxys in front of our web servers

Re: [squid-users] squid server crash

2007-02-23 Thread Neil A. Hillard
had kernel panics which tends to point the finger at the OS and not Squid. If squid can make the OS kernel panic then the OS needs fixing. >2Gb logs would cause squid to terminate but shouldn't cause a panic. Was there anything logged in syslog at the time of the panic?

Re: [squid-users] Size of access.log

2007-02-15 Thread Neil A. Hillard
d... Disable store.log unless you really need it! Most user don't. cache_store_log none HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.whl.co.uk/ Disclaimer: This message does not necessarily refl

[squid-users] Proxy configuration

2006-11-13 Thread Neil Jones
I configure it to proxy my browser's activity to do this? If so where do I start looking for information? TIA Neil Jones [EMAIL PROTECTED]

Re: [squid-users] Squid Transparent Proxy with Auth User

2006-07-13 Thread Neil A. Hillard
nProxy#head-e56904dd4dfe0e21e5c2903473c473d401533ac7 Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] the dreaded 'zero sized reply' on RHEL3

2006-06-22 Thread Neil A. Hillard
Unsubscribe: <mailto:[EMAIL PROTECTED]> List-Subscribe: <mailto:[EMAIL PROTECTED]> If you then can't unsubscribe explain exactly what you've tried and what message / error you receive. Otherwise you won't get assistance. Neil. Craig Home

Re: [squid-users] SYN flooding

2006-06-20 Thread Neil A. Hillard
Craig, Craig Home wrote: > Please help me unsubscribe from this list. I have tried asking for help > now 5 times. Read the SMTP headers. Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl

Re: [squid-users] Squid and RAID

2006-05-18 Thread Neil A. Hillard
Hi, Matus UHLAR - fantomas wrote: > On 16.05.06 12:24, Neil A. Hillard wrote: >> Paolo Biancolli wrote: >>> I presume the FAQ refers to the cache drives and not the OS drives >>> (assuming they are seprate drives)? >> Do you really want your OS on a stri

Re: [squid-users] Squid and RAID

2006-05-16 Thread Neil A. Hillard
ig for the OS and 3 as JBODs for the cache. If a cache disk dies then I remove the cache_dir entry for it until the disk is replaced and then reinstate it (after a squid -z). I'm not going to worry about the contents of those disks. HTH, Neil. > -Or

Re: [squid-users] Problems connecting to ports !80

2006-05-11 Thread Neil A. Hillard
like this: >> > > >> > > * >> > > May 11 10:39:22 pc36 kernel: audit( 1147336762.851:321): avc: denied >> > > { name_connect } for pid=10074 comm="squid" dest=2004 >> > > scontext=root:system_r:squid_t:s0 >> tcontext=sys

Re: [squid-users] Server platform

2006-05-10 Thread Neil A. Hillard
Hi, Christoph Haas wrote: > On Wed, May 10, 2006 at 04:03:29PM +0100, Neil A. Hillard wrote: >> Christoph Haas wrote: >>> On Wed, May 10, 2006 at 03:49:04PM +0200, Paolo Biancolli wrote: >>>> We currently run squid 2.5 stable 13 on redhat 9 (2.4.20-8smp) in o

Re: [squid-users] Server platform

2006-05-10 Thread Neil A. Hillard
at CentOS (essentially RHEL without support). RHEL / CentOS tend to move a little bit slower and Fedora is the testing ground for stuff that goes into them. The release schedule is roughly every 6 months so you can find that you should upgrade your OS more frequently than with RHE

Re: [squid-users] squid improper shutdown

2006-05-09 Thread Neil A. Hillard
id --help' to see all valid options and you'll notice that 'start' and 'stop' aren't there. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] Acceleratiion for a NTLM Auth Required Host

2006-05-08 Thread Neil A. Hillard
ache.org/Doc/FAQ/FAQ-11.html#ss11.14 Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] Squid crash root cause

2006-05-02 Thread Neil A. Hillard
nagement if you haven't already (if your server even has it). HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] Bad TCP Checksums/Slow HTTPS connections

2006-05-02 Thread Neil A. Hillard
subject to checksum offloading. In theory the packet should go to the NIC with a 0 checksum and the NIC should fill in the blanks. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not

Re: [squid-users] Howto Clear Cache Periodicaly

2006-04-11 Thread Neil A. Hillard
Guillaume Vachon wrote: On Tue, 2006-04-11 at 10:26 -0400, Guillaume Vachon wrote: On Tue, 2006-04-11 at 14:51 +0100, Neil A. Hillard wrote: Hi, mail reformatted to make sense (i.e. please don't top post!) I have a squid that has been caching for like 10 month. It now ha

Re: [squid-users] Howto Clear Cache Periodicaly

2006-04-11 Thread Neil A. Hillard
Guillaume Vachon wrote: On Tue, 2006-04-11 at 14:51 +0100, Neil A. Hillard wrote: Hi, mail reformatted to make sense (i.e. please don't top post!) I have a squid that has been caching for like 10 month. It now have an amazing size of 4.5 gig. What you have is determined b

Re: [squid-users] Howto Clear Cache Periodicaly

2006-04-11 Thread Neil A. Hillard
27;t really offer any advice. Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

[squid-users] Re: Clean cache

2006-04-11 Thread Neil A. Hillard
cessary until the it is below the maximum you specified. You need to find out why your server runs slowly when it has a large cache - is it memory bound, IO bound or what. Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicop

Re: [squid-users] Howto Clear Cache Periodicaly

2006-04-11 Thread Neil A. Hillard
priately! Maybe I've missed something but I really can't see the point in this. I currently have three 9Gb spindles running at 6.9Gb each and I'd hate to clear them! Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters

Re: [squid-users] Minor Errors In Squid.Conf (attached) That I Would Like Review

2006-04-04 Thread Neil A. Hillard
7;http_reply_access allow all' unless you want to block specific mime types or do something else fancy. Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessaril

Re: [squid-users] Minor Errors In Squid.Conf (attached) That I Would Like Reviewed

2006-04-04 Thread Neil A. Hillard
st once again. Do you really need those http_reply_access lines at all? HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] port 32819

2006-03-28 Thread Neil Mc Lysaght
Hi, The port allocation seems to be different for each individual squid installation, I had a look on another box and its using a 33256 port. Run lsof -i | grep squid and you will probably see an 'additional' port binding... Any ideas Neil On 28/03/06, Mark Elsen <[EMAIL PROT

[squid-users] port 32819

2006-03-28 Thread Neil Mc Lysaght
Hi All, Can anybody tell me why squid listens on port 32819 and will acept requests from any host. This port was traced using lsof and appears in adition to the standard ICP 3130 and 8080 (3128) ports. Thanks Neil Mc Lysaght

Re: [squid-users] Reverse Proxy - Comparisons

2006-03-27 Thread Neil A. Hillard
, HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] Squid - Http authentication prompts on websites

2006-03-22 Thread Neil A. Hillard
l then? See http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.14 NTLM is broken end of story and won't be supported in Squid. You should choose a _standard_ authentication protocol, not one M$ dreamt up (complete with bugs). Neil. -- Neil Hillard[EMAIL

Re: [squid-users] Squid - Http authentication prompts on websites

2006-03-22 Thread Neil A. Hillard
Squid does not). Switch it (or tell the admin to) basic or digest auth. If using basic auth you may want to use SSL so that the credentials aren't sent in the clear. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicop

Re: [squid-users] Is Squid Resilient?

2006-03-20 Thread Neil Mc Lysaght
ring gracefully handle the situation the web server host is down. i.e the web server is configured as the httpd_accel host thanks Neil On 20/03/06, Henrik Nordstrom <[EMAIL PROTECTED]> wrote: > mån 2006-03-20 klockan 16:30 + skrev Neil Mc Lysaght: > > Hi all, > > >

[squid-users] Is Squid Resilient?

2006-03-20 Thread Neil Mc Lysaght
Hi all, Slight Problem here.. I have installed and configured squid hoping that it would provide a level of resillience in the event a destination server 'goes down'. Currently I have 2 squid proxies running each configured to recognise the other as a peer sibling. Each of the quid proxies is co

Re: [squid-users] Memory Error when using large acl files

2006-03-01 Thread Neil A. Hillard
so I accept that there are no responses to this, though I would be grateful if I get a solution :-) How about: sed -e 's/^/./' < infile > outfile HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd.

Re: [squid-users] Squid crash

2006-02-28 Thread Neil A. Hillard
e to take a look and see what they've hacked? HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] Special error message possible?

2006-02-27 Thread Neil A. Hillard
ebserver.example.com/proxy/ lan_dst lan_dst.dst.acl contains: 172.16.0.0/16 172.18.0.0/16 etc. The page they get to see gives them step by step instructions on configuring their proxy correctly! HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] W

Re: [squid-users] Workaround with NTLM Website and NAT

2006-02-09 Thread Neil A. Hillard
have discovered. Even Microsoft admit that it should only be used on a corporate network (i.e. not the Internet)! You should suggest that they use basic auth over https or digest. Sorry this isn't more positive but feel free to complain to Microsoft! ATB,

Re: AW: [squid-users] Re: URL's that begins with a minus

2006-02-07 Thread Neil A. Hillard
there, it appears to resolve to 69.28.181.43 (I had to use a packet capture to get that as none of the DNS tools will play ball with it - quite rightly so). As I said before - tell the site owner to correct it, plain and simple it is wrong. HTH, Neil. -- Nei

Re: AW: [squid-users] Re: URL's that begins with a minus

2006-02-07 Thread Neil A. Hillard
rs. So you therefore _cannot_ start a host / domain name with a hyphen - inform the provider of this service that they need to adhere to the standards, after all that's what they're there for. HTH, Neil. -- Neil Hillard[EMAIL PROTECT

Re: [squid-users] Error acessing a page with Underscore( _ ) in the url

2006-01-25 Thread Neil A. Hillard
#ss11.8 You should advise the provider of this service to read the relevant RFCs and to correct their hostname to conform with the standard. Or take a look at FAQ 11.9 for a workaround. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland

Re: [squid-users] Problem with proxy autoconfiguration scripts in apache 2

2006-01-18 Thread Neil A. Hillard
he second field down. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.

Re: [squid-users] Squid Behaving funny...

2005-10-12 Thread Neil A. Hillard
ck syslog to see if there are any messages about duplicate addresses. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the

Re: [squid-users] HTTPD reverse proxy

2005-10-12 Thread Neil A. Hillard
servers into a single certificate and we use strong authentication so this ensures that the users only have to authenticate once. We still use squid as a forward proxy for at least 1500 users. HTH, Neil. -- Neil Hillard[EMAIL PROTECTE

Re: [squid-users] Problem with squid connecting to an FTP server

2005-10-11 Thread Neil A. Hillard
lying around that had Ethereal on it and the FTP server also gives out a 125 response for the NLST command. Many thanks in advance, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.co.uk/ Disclaimer: This

Re: [squid-users] Problem with squid connecting to an FTP server

2005-10-06 Thread Neil A. Hillard
Hi, Neil A. Hillard wrote: I've performed a packet capture and see the following events: o Squid connects, logs in and changes to the correct directory. o Squid issues a PORT command (Active FTP connection). o FTP server acknowledges with a 200. o Squid issues LIST command o FTP s

[squid-users] Problem with squid connecting to an FTP server

2005-10-06 Thread Neil A. Hillard
n successfully connect to the FTP server from the command line on the proxy. Any advice on this issue would be appreciated. Many thanks in advance, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicopters Ltd. http://www.whl.c

Re: [squid-users] How to log Client ip?

2005-10-04 Thread Neil A. Hillard
elation to your proxy? You don't happen to have: client_netmask 255.255.255.0 in your squid.conf? If so, read the description of the client_netmask directive and you'll know how to resolve the problem. HTH, Neil. -- Neil Hillard

Re: [squid-users] LDAP auhentication + transparent proxy

2005-09-27 Thread Neil A. Hillard
Ruud Baart wrote: > I've read somewhere in the archives that (LDAP) authentication won't work in combination with transparent proxy. I could not found the reason for this. Does someone know the reason? http://www.squid-cache.org/Doc/FAQ/FAQ-17.html#ss17.16 HTH,

Re: [squid-users] Squid proxying NTLM authentication servers

2005-09-27 Thread Neil A. Hillard
server. Therefore the check should be left in. If you are responsible for the service you should look at https + Basic Auth, otherwise you should convince the host of the site to do that. HTH, Neil. Vinod Patel wrote: > Hi, > I read the squid FAQ's and it says th

Re: AW: [squid-users] Runing 2 squids

2005-09-26 Thread Neil A. Hillard
ifferent configs but you must ensure that pid_filename is different for each instance and that they have different cache_dir settings. They _cannot_ share a cache_dir. HTH, Neil. -- Neil Hillard[EMAIL PROTECTED] Westland Helicop

Re: [squid-users] Winbind group membership authentication

2005-07-25 Thread Neil Gaskell
Neil Gaskell wrote: Hi, I'm new to the list so I hope I'm not asking one of those questions that gets asked ten times a week :) I'm running Squid 2.5 Stable with Samba 3.03 on Fedora core 2. I set it up by reading the NTLM/winbind sections in the FAQ, which also roughly c

[squid-users] Winbind group membership authentication

2005-07-25 Thread Neil Gaskell
oupmembers http_access deny all Cache.log debug output from wbinfo_group.pl: (ssl is the domain name, not the user name - hence the ERR) Got ssl ProxyAccess from squid User: -ssl- Group: -ProxyAccess- SID: -S-1-5-21-1343024091-2111687655-854245398-1124 Domain Group (2)- GID: -10002- Sending ERR to squid Thanks for reading, Neil

[squid-users] Dreaded NTLM problems !!!

2005-07-20 Thread Neil A. Hillard
uid.conf. I normally use Privoxy as a parent and to ensure it wasn't that causing the problems I removed it. I've observed this behaviour from cache.log after performing 'squid -k debug' and a packet capture off the network. Any advice would be gratefully appreciated.

Re: [squid-users] Squid authentication with radius server

2005-07-12 Thread Neil A. Hillard
t work properly with this module Check the log files, run a tcpdump or use ethereal - they should both tell you what traffic is being generated and you should see whether the request was successful or not. Neil. Regards Abbas Salehi - Original Message - Fr

Re: [squid-users] Squid authentication with radius server

2005-07-12 Thread Neil A. Hillard
edsecret With 1.06 I had to change a hardcoded path in conf.h - SQUID_RAD_CONF for the location of the configuration file - you may have to do this for 1.07, I'm not sure though. Combine the with the usual squid ACLs and you should be OK. HTH, Ne

Re: [squid-users] Squid Error Pages incomplete

2005-07-05 Thread Neil A. Hillard
s like > this (ok it's german but i think you will understand):It's an IE feature !!! Disable 'Friendly HTTP error messages' in IE and hopefully that'll fix it. Hell, disable it anyway it's absolutely pointless. HTH, Neil. --

RE: [squid-users] How tell who is browsing where?

2005-05-19 Thread Neil Loffhagen
aged by windows people and a gui would be helpful to them :) Thanks again and apologies for posting twice. From the first post I got a rely from [EMAIL PROTECTED] that gave me the impression it had been rejected? Neil. -Original Message- From: Stephen [mailto:[EMAIL PROTECTED] Sent: 19 Ma

[squid-users] How tell who is browsing where?

2005-05-19 Thread Neil Loffhagen
owsing. Thanks, Neil. http://www.bbc.co.uk/ This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system. Do not use, copy or disclose the inf

[squid-users] How to tell who is accessing which sites...

2005-05-19 Thread Neil Loffhagen
owsing. Thanks, Neil. http://www.bbc.co.uk/ This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system. Do not use, copy or disclose the inf

[squid-users] Cache Manager denied access

2005-05-18 Thread Neil Loffhagen
al or http_access lines? Any help much appreciated. Neil. acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl all src 0.0.0.0/0.0.0.0 acl cachemgr src 10.182.64.123/255.255.255.255 acl bbclocal 10.182.0.0/255.255.0.0 acl SSL_ports port 443 563 acl Safe_ports po

  1   2   >