RE: [squid-users] Flooding squid

2006-04-10 Thread Nolan Rumble
I have some trouble with new kind of flood targeted at proxy server. One hosts creates thousands of new connections. Is there a way to protect against that at squid level? I would like to avoid doing it with netfilter, because it is hard to guess acceptable limit of connections (browsers tend to

[squid-users] Mirror sites

2006-02-21 Thread Nolan Rumble
Hi, I would just like to know. When downloading a file from a site say for example a link like so: http://host1.example.com/test.zip and the file has a size say 300kb (and timestamp 2006/01/01 ?) and then downloading the same file from another (mirror) site say http://host2.example.com/test.zip w

RE: [squid-users] access control issues

2006-01-08 Thread Nolan Rumble
Something to perhaps consider: http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.8 Not sure if it will help though... NOlan -Original Message- From: Dustin [mailto:[EMAIL PROTECTED] Sent: 08 January 2006 20:43 To: asim hafeez Cc: squid-users@squid-cache.org Subject: Re: [squid-user

[squid-users] Squid and sarg

2006-01-06 Thread Nolan Rumble
Hi, At the moment I'm generating log files from my squid server using sarg on a daily basis which gives me a run down of what each user is using. Is there a way to get sarg to do some sort of separation of time for the different tarrif structures? ie. sarg must show the bandwidth usage for the 08:

[squid-users] Squid and LDAP authentication

2006-01-04 Thread Nolan Rumble
Hi, I'm trying to get LDAP authentication working on my squid proxy. Now ideally I would like to only allow users in a certain group (namely, cn=squid,ou=Group,dc=ph,dc=sun,dc=ac,dc=za which is a groupOfUniqueNames (does this work or must I use an objectClass=posixGroup?) to authenticate and use

RE: [squid-users] FW: IE not using the proxy

2005-12-29 Thread Nolan Rumble
When debugging a Bittorrent problem, I have happened to notice that the XP box is sending port 80 traffic directly to the firewall, where it is being dropped (as it should). This only seems to happen with Bittorrent, as the rest of the time web browsing from the XP box seems to correctly use the

RE: [squid-users] Squid on the blink. Working and then not...

2005-12-28 Thread Nolan Rumble
I should have mentioned this, sorry. Users see a "Page could not be displayed error 401" Or in other words an "401 Unauthorized". It doesn't make any sense to me. The rules don't point to that and access.log shows nothing for that hit. That to me suggests that there is a problem with your a

RE: [squid-users] Squid on the blink. Working and then not...

2005-12-28 Thread Nolan Rumble
acl all src 0.0.0.0/0.0.0.0 deny_info CUSTOM_ALL all # LOTS OF ACL NOT BEING USED HAVE BEEN CUT... acl local-net src 10.0.0.0/255.255.0.0 deny_info CUSTOM_LOCAL_NET local-net http_access allow local-net Have you tried just testing the acl src by just having httpd_access allow src to see wha

[squid-users] getting squid to choose between 2 proxy servers

2005-11-18 Thread Nolan Rumble
Hi, We have 2 proxy servers in our network. One for free-websites and one for the non-free websites. We have a javascript file (proxy.pac) which allows the application using the file to decide which proxy server to connect to. The problem is that when you want to download a file (for example