Re: [squid-users] squid authentication problem

2004-07-02 Thread Stephen J. McCracken
On Fri, 2004-07-02 at 08:54, Payal Rathod wrote: > So I am trying squid to authenticate with simple ncsa_auth against a > htaccess file. But here I have a problem that whenever a user opens > another window of IE she has to give password and username. Even if she > saves it she has to press ENTER.

[squid-users] DNS Problems

2004-02-13 Thread Stephen J. McCracken
Squid Cache: Version 2.5.STABLE4-20040211 Could someone please give me a pointer for the following DNS problems? On startup cache.log reports: 2004/02/13 16:20:27| Starting Squid Cache version 2.5.STABLE4-20040211 for i686-pc-linux-gnu... 2004/02/13 16:20:27| Process ID 25708 2004/02/13 16:20:27

Re: [squid-users] Blocking external access only

2004-02-06 Thread Stephen J. McCracken
I have a set of rules in Squid that will allow no one to access the outside world but i still need users to access the local http deamon (webserver) does anyone know what rules i need to put to allow this. Why use squid at all if you're not giving anyone access the outside? Wouldn't firewall rul

Re: [squid-users] multiple redirector applications

2004-01-30 Thread Stephen J. McCracken
Darren Spruell wrote: Is it possible to use more than one redirector program at a time with squid? We would like to use squidGuard for access control and also use another redirector for antivirus scanning. If not, what is a good setup to accomplish this? Look at the redirector AdZapper. It co

Re: [squid-users] Setting up req_mime_type ACLs

2004-01-27 Thread Stephen J. McCracken
David Landgren wrote: What with the recent spate of virus attacks, I figured it was time to investigate blocking web downloads of dangerous MIME types. [snip] acl mime_banned req_mime_type /application\.x-director/ according to squid.conf.default: # acl aclname req_mime_type mime-type1 ...

Re: [squid-users] eSafe Gateway as parent proxy

2004-01-23 Thread Stephen J. McCracken
On Thu, 2004-01-22 at 15:24, Stephen J. McCracken wrote: > Is the following correct? Should I blame esafe and go after the problem > there? Just to wrap up the thread, yes, the problem was with the eSafe Gateway. It requires a proxy between it and the Internet. We installed a small

[squid-users] eSafe Gateway as parent proxy

2004-01-22 Thread Stephen J. McCracken
Hi, all, To start: Squid Cache: Version 2.5.STABLE2 configure options: --enable-async-io --enable-removal-policies=heap,lru --enable-snmp (Yes, we're not "current", but we need to get this working to replace our current web filter before we work on upgrading and adding authentication.) RedHat

Re: [squid-users] My.yahoo.com

2003-12-15 Thread Stephen J. McCracken
Matt wrote: I am using Squid 2.5STABLE4 on Redhat linux as a transparent proxy. Its actually a Mikrotik.com box that bundles Linux and all this together. Anyway, I have users complaining about not all of there My.yahoo.com start page coming up and other times it gives an error of: "Zero Size Reply

Re: [squid-users] forwarded_for

2003-12-12 Thread Stephen J. McCracken
On Fri, 2003-12-12 at 12:47, Emilio Casbas wrote: > Duane Wessels wrote: > >On Fri, 12 Dec 2003, Emilio Casbas wrote: > >>Duane Wessels wrote: > >>>Here is how X-Forwarded-For works: > >>> > >>>Each proxy in the hierarchy is going to append something to the > >>>X-Forwarded-For header. If 'forwa

[squid-users] authentication with multiple proxies

2003-08-15 Thread Stephen J. McCracken
We have a couple of servers set up (RedHat 7.3, Squid2.5STABLE2) as siblings with each having the other as fallback. This is setup through an automatic proxy script (proxy.pac). We are interested in putting in authentication (LDAP). Is there any way to have a user login to just one server and ha

Re: [squid-users] Determining total time spent at a particular website and total amount of hits

2003-08-14 Thread Stephen J. McCracken
On Mon, 2003-08-04 at 17:30, Jim_Brouse/[EMAIL PROTECTED] wrote: > How can I determine for a particular day sites visited for a particular IP > in the order visited and time spent on each? > > Jim > On Monday 04 August 2003 10:06 pm, Jim_Brouse/[EMAIL PROTECTED] > wrote: > > > How can I determi

[squid-users] cache.log

2003-07-11 Thread Stephen J. McCracken
I'm getting some of these errors and see these in the archives: -- > storeAufsOpenDone: (2) No such file or directory A few of these is no reason to worry, and Squid should recover automatically by forgetting it had the object cached, and process the request as a cache

[Re: [squid-users] Trouble connecting to site]

2003-07-10 Thread Stephen J. McCracken
On Wed, 2003-07-09 at 18:07, Adam wrote: > Stephen wrote: > > We can't seem to get Squid to connect to > > > > http://wxd.slu.edu:8900/SCRIPT/NR_N50020/scripts/serve_home > Found it. It wasn't the acls or the organizational firewall, but the iptables firewall on the proxy box. Thanks for the hin

[squid-users] Trouble connecting to site

2003-07-09 Thread Stephen J. McCracken
We can't seem to get Squid to connect to http://wxd.slu.edu:8900/SCRIPT/NR_N50020/scripts/serve_home Bypassing squid there is no problem. We have basically a default install (not many modifications to squid.conf) Relevant lines follow: acl localhost src 127.0.0.1/255.255.255.255 acl smccracke

RE: [squid-users] deny downloads fr webmails

2003-06-30 Thread Stephen J. McCracken
On Sun, 2003-06-29 at 22:11, "Peña, Botp" wrote: > Adam Aube [mailto:[EMAIL PROTECTED] wrote: > > > >I'd like to deny downloading of files fr common webmails like [snip] > but this in itself is not enough. I would not let them download executable > files only. Surely, I would allow them to downl

Re: Res: RE: [squid-users] problem with BIG passwords

2003-06-24 Thread Stephen J. McCracken
On Tue, 2003-06-24 at 07:30, Lieven Marchand wrote: > "Alex Carlos Braga Ant?o" <[EMAIL PROTECTED]> writes: > > > Any news about that problem with passwords above 15 caracteres that > > squid cannot authenticate ??? > > ncsa authentication ignores everything after the first 8 characters, > ju

Re: [squid-users] dansguardian or squidguard ?

2003-06-20 Thread Stephen J. McCracken
On Fri, 2003-06-20 at 02:56, Raja R wrote: > Can anyone tell me which is the better one out of dansguardian and > squidguard for content filtering ? Only you can decide which is better. From what I understand, Squidguard is recommended if you want to only rely on URL lists. Dansguardian has the

Re: [squid-users] Windows XP inconsistent on proxy use?

2003-06-13 Thread Stephen J. McCracken
Are you sure that it's IE 6 trying port 80 or might it be some other little program on the machine that ignores proxy settings? (e.g. spyware program/windows update/messenger/etc) On Fri, 2003-06-13 at 12:21, Rick Matthews wrote: > I have a Windows XP box running IE 6.0.2800 and it is configured t

Re: [squid-users] Squid & PolyMix4

2003-06-09 Thread Stephen J. McCracken
A big red-faced update to finish this thread for the archives: > > One additional question: since the PolyMix has top level domains > > .tst, would that be causing the problem? Is there some checking in > > Squid as to whether a top level domain is valid and that is causing > > the problem? The

Re: [squid-users] squid and XFS?

2003-06-04 Thread Stephen J. McCracken
> It is faster than XFS. Due to bad experiences with ReiserFS in the > past, we never use it. Could you elaborate on the "bad experiences"? We are rolling out squid & reiserfs 3.6 since support is included in RH7.3 and xfs is not. But if there are other issues, we might rethink that issue.

Re: [squid-users] squid and XFS?

2003-06-03 Thread Stephen J. McCracken
Does anyone have experience on the performance between ReiserFS and XFS? On the web I've encountered a few benchmarks and some seem to say XFS is faster and others ReiserFS. Some personal experience would be nice to know about. On Tue, 2003-06-03 at 07:01, Ralf Hildebrandt wrote: > * Mauro <[EMA

Re: [squid-users] Squid & PolyMix4

2003-05-27 Thread Stephen J. McCracken
> the HOW-TO from the measurement factory. I am using polygraph 2.7.6 on > Red Hat 7.3. My proxy has squid 2.5STABLE2 and DansGuardian 2.4.6-8 > (webfilter). > > I can run the test without a proxy. > I can run the test pointing the clients at DansGuardian (webfilter). > > When I try to bypass D