[squid-users] how big value should auth_param basic children be?

Hi, Just wondering how to define the optimum value for auth_param basic children. I have around 200+ users utilizing my proxy-ldap authentication. Currently i have set it to 20, i wonder if that is beyond redundant and what is actually the appropriate value to accommodate the users? thanks

[squid-users] Grouping the delay_pool access

Dear friends, I have a 512kb ADSL link. I tried to implement delay_pools on my users but apparently after i apply the configuration, even the general surfing seems to get significant slow down. I thought the delay_pools should only affect their downloading speed, but seems like general

Re: [squid-users] delay_parameters: What is difference between aggregate, network and individual bucket?

thanks a lot Amos! Amos Jeffries wrote: Yong Bong Fong wrote: Dear friends, I am just confuse about the usage of aggregate, network and individual bucket. If not mistaken, aggregate bucket is just like a public bucket that all users get the privilege to access and individual bucket is one

[squid-users] delay_parameters: What is difference between aggregate, network and individual bucket?

Dear friends, I am just confuse about the usage of aggregate, network and individual bucket. If not mistaken, aggregate bucket is just like a public bucket that all users get the privilege to access and individual bucket is one specific for each user? Say if i set a delay_parameter as

[squid-users] sslReadServer: FD 95: read failure: (104) Connection reset by peer

Dear friends, I have these error frequently in my squid log, that everytime i encounter this error my squid server starts to serve requests super slow. On google search i can find advise that by changing http_port to http_port my_lan_ip:3128 that could solve the problem but i have tried it it

[squid-users] sslReadServer: FD 95: read failure: (104) Connection reset by peer]

have switched it off also, the problem still persist, so i can narrow down it is something within squid. thanks Amos yong bong fong wrote: Dear friends, I have these error frequently in my squid log, that everytime i encounter this error my squid server starts to serve requests super slow

[squid-users] Download always get disconnected through proxy

for taking time reading my mail... Regards Yong -- Yong Bong Fong System Engineer MIS (Made in Sarawak) Department Shin Yang Group of Companies Email: [EMAIL PROTECTED] Tel: (60)085-656699 Ext 376 Bekerja rajin untuk kemajuan negara kita

[squid-users] Can't do ftp://xxx.xx.com.my/xxxx

Dear friends, One of my users tried to do ftp by typing the ftp://xxx.xx.com.my/ in the browser, but after typing that it says: An FTP authentication failure occured while trying to retrieve the URL: ftp://xxx.xx.com.my/ Squid sent the following command: PASS yourpassword and

[squid-users] Possible to set password expiry for ldap authentication?

, Regards Y -- Yong Bong Fong System Engineer MIS Department Shin Yang Group of Companies Email: [EMAIL PROTECTED] Tel: (60)085-656699 Ext 376 Bekerja rajin untuk kemajuan negara kita

[squid-users] Is it possible to redirect blocked urls to another url?

urls. Can I do it by squid itself? thanks for helping -- Yong Bong Fong (Ah Fong) Rookie System Engineer MIS Department Shin Yang Group of Companies Email: [EMAIL PROTECTED] or [EMAIL PROTECTED] Tel: (60)085-656699 Ext 375 Bekerja Rajin Untuk Kemajuan Negara Kita

Re: [squid-users] Restricting certain users to certain urls

to redirect all the blocked sites to a certain url? Really thankful for helping, thanks a lot. Yong _ _ _ _ -Original Message- From: Yong Bong Fong [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 13, 2005 5:02 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Restricting

Re: [squid-users] Restricting certain users to certain urls

it is not checking the username thingi to do the acl. please help me to identify my problem..thanks a lot for taking time helping. thanks a lot... On Mon, Sep 12, 2005 at 09:53:45AM +0800, Yong Bong Fong wrote: How to restrict certain users to certain urls only based

[squid-users] Restricting certain users to certain urls

for taking time helping, -- Yong Bong Fong (Ah Fong) Rookie System Engineer MIS Department Shin Yang Group of Companies Email: [EMAIL PROTECTED] or [EMAIL PROTECTED] Tel: (60)085-656699 Ext 375 Bekerja Rajin Untuk Kemajuan Negara Kita

[squid-users] How to by pass proxy for intranet/local address?

Dear friends, Just wondering if it is possible to skip proxy for all intranet addresses? And only allow proxy if clients are accessing external addresses? Thanks for taking time reading my mail, -- Yong Bong Fong (Ah Fong) Rookie System Engineer MIS Department Shin Yang Group of Companies

[squid-users] WARNING: All redirector processes are busy.; WARNING: Reply from unknown nameserver

Dear all, I have a new squid box that is serving around 80+ users. the squid is 2.5 version. Inmy cache.log Ihave the following log messages: WARNING: All redirector processes are busy. 2005/03/26 10:39:22| WARNING: up to 10 pending requests queued 2005/03/26 10:39:48| WARNING: Reply from

[squid-users] Unable to increase file descriptor

Dear all, I have a squid that always start with 1024 file descriptors. But I intend to increase the value because my new proxy will serve around 70-80 users. My squid version is squid-2.5.STABLE5-2, kernel is 2.6.5-1.358. My squid comes with the distribution therefore I did not do any

Re: [squid-users] Unable to increase file descriptor

: Yong Bong Fong, the kernel of OS limite the max fd of application . 'ulimit' is update this argument . Perhaps you need rebuild squid if you want support more client (more 1000 client ) . you need not update 'max_open_disk_fds' . more detail : http

[squid-users] Squid ACL [url_regex] bypass vulnerability

Dear all, I read from http://esikker.dk/vul_14462.php says that A bug in Squid allows users to bypass certain access controls by passing a URL containing %00 which exploits the Squid decoding function. This may insert a NUL character into decoded URLs, which may allow users to bypass url_regex

[squid-users] How to configure squid to abort redirection for for URL that contain , ? or =

Dear all, I read from somewhere since I have added a abort redirection in squid conf file for URL that contain , ? or =, viralator seems to work much better. I wish to know how to configure squid conf file to abort redirection for URL that contain ? or =. Please teach me how to do that,

[squid-users] where can I find help for sarg?

Dear all, I am currently using sarg to check on usage. Wondering where can I find help for sarg specific configuration? I just need to configure the sarg report to provide monthly report for all user's usage details etc. Currently my report provides report in daily format, but my boss wants

[squid-users] error: Ignoring squid.rpmsave, because of .rpmsave ending

Dear all, I tried to setup a logrotate in cron. Below is when I force a logrotate: # /usr/sbin/logrotate -f -s /var/lib/logrotate.status /etc/logrotate.conf error: Ignoring squid.rpmsave, because of .rpmsave ending The command does rotate the log files, however the above error message always

[squid-users] service squid restart not good? must use service squid stop and start?

Dear all, I read from somewhere that says do not use service squid restart, rather do the following: #service squid stop long wait 30s to 1 minute #service squid start Very long wait - half and hour or so if you have about a million urls in the squidguard block lists. It says the reason is

[squid-users] Ask about what neccessary configuration needed to server 200++ clients

Dear all, I have got a squid working with LDAP authentication, squidguard + viralator. The box is complete and can run well. However so far Ihave only used it on my own machine, I have never test it out to serve huge number of clients. I wish to know what are the other configurations that I

[squid-users] segmentation fault when I did ldapsearch for squid _ldap_group

Dear all, I tried to implement squid_ldap_group. Problem is when I tried ldapsearch such as this: /usr/lib/squid/squid_ldap_group -b cn=apple,dc=orange,dc=com -f ((member=%v)(uid=%a)(objectClass=qmailGroup)) -B cn=apple,dc=orange,dc=com -F uid=%s -D cn=toby,ou=users,cn=apple,dc=orange,dc=com

Re: [squid-users] deny access

Hi, without password request prompt? Just remove your authentication scheme in squid.conf Regards Yong lharissa wrote: Hi, Does anybody know how to deny access without password request prompt? Thank you Lharissa

[squid-users] squid_ldap_group: no login prompt but able to authenticate group from command line

Dear all, I am trying to setup squid_ldap_group. It successfully authenticated from the command line, but when I used browser there is no login prompt come out for the group authentication. belows is my configuration that worked from command line: * /usr/lib/squid/squid_ldap_group -b

[squid-users] Is there a squid_ldap_auth FAQ or trouble shoot help?

Hi All, Anyone knows if there is a FAQ or troubleshoot site specially dedicated for the implementation of squid_ldap_auth? Something similar to the squid faq. I searched through the web but couldn't find much help for squid_ldap_auth. thanks all, Regards Yong

[squid-users] my login kept replying with ERR, is it something to do with squid_ldap_auth.c?

Hello, I am having trouble getting pass a login prompt. It just keep giving me ERR. Somewhere in the archive, i read that Henrik mentioned that we need to modifythe squid_ldap_auth.c file. However I searched through the internet and read the instructions about setting up squid_ldap_auth

[squid-users] ERR is all I got when I use squid_ldap_auth from command line and browser reprompt for login

objectClass: top objectClass: person objectClass: inetOrgPerson objectClass: qmailUser objectClass: shinyangUser mailHost: symail.shinyang.com.my mailQuotaCount: 0 accountStatus: active mail: [EMAIL PROTECTED] sn: Yong Bong Fong uid: bfyong mailMessageStore: bfyong deliveryMode: normal cn: Yong Bong

[squid-users] ./squid_ldap_auth command says bash: ./squid_ldap_auth: No such file or directory

Dear all, I was trying to test my squid_ldap_auth from the terminal as shown below but the outcome was bad: *./squid_ldap_auth -P -R -b 'dc=shinyang,dc=com dc=my' -D 'cn=admin,dc=shinyang,dc=com dc=my' -w password -f 'cn=%s' -h 172.16.0.21 bash: ./squid_ldap_auth: No such file or directory

[squid-users] squid_ldap_auth from command line do nothing ...and display no further prompt from terminal

Hello All, When I typed my squid_ldap_auth command as shown below, it always do nothing. Other people seems to get a follow-up response of a prompt for username and password from the machine, and then further prompting an error or ok message back to user. But my command seems to just stuck

[squid-users] How does squid_ldap_auth knows which flag in the ldap server to be used to authenticate users?

Dear all, I read from the squid_ldap_auth(8) document that, if I have a single domain ,all I need to specify is usually the base DN under where your users are located and he server name: such as squid_ldap_auth -b ou=people,dc=your,dc=domain ldapserver but from the above command, how is it

[squid-users] basic program authentication setting for squid_ldap_auth, am I right in my configuration?

Dear all, I am confused about the configuration of squid_ldap_auth in squid.conf. Below is the format of the ldap built by my system administrator, he wants me to set up ldap authentication through squid. DN:cn=root, dc=shinyang, dc=com, dc=my | |DN:ou=qmail_users, cn=root,

[squid-users] cache.log says 2004/12/01 15:53:46| User-Agent logging is disabled.

2004/12/01 15:53:46| Referer logging is disabled. Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Dear all, I have the following output from my cache.log: 2004/12/01 15:53:45| Starting Squid Cache version 2.5.STABLE3 for

[squid-users] How to test if my squidguard and LDAP authentication works from the command line

Dear all, I have configured squidguard and squid_ldap_auth on my squid. From the cache and webmin it there seems to have no error message. But I just want to find out if there is any way I can test the squidguard and squid_ldap_auth from the command line without connecting to internet. Or is

[squid-users] ClamAV information needed, any recommendation?

Dear all, I am trying to find a good step by step or How-to guide about installation and everything about ClamAV, does anyone know where can I get it? I found the official site of ClamAV but seems like the information in there is quite limited. Thanks all

[squid-users] Squidguard seems not start when squid started

Dear all, I am trying to figure out whether my squidguard starts when my squid starts. Someone told me once I attached squidguard as redirect_program in my squid.conf, then whenever squid starts it automatically start squidguard. However when restart my computer, and then check in the

[squid-users] can't find the tag authenticate_options in squid.conf

Dear all, I tried to set up LDAP authentication for my squid, found a useful example from a site that stated: |*authenticate_program /usr/local/squid/bin/ldap_auth authenticate_options ldap.yourdomain.com 389 dc=yourdomain,dc=com uid authenticate_children 2 *I have found the tag

[squid-users] log file squid.out not exist in my log folder

Dear all, I used the squid from distribution. For some reason, there is no squid.out in the log folder. I remembered the last time I installed squid in another distribution there are 4 logs files namely cache.log, access.log, store.log and squid.out , however I couldn't find the squid.out

[squid-users] do we need to create the user squid by ourselves?

Dear all, Recently I ran into problem with permission on squid and squidguard. I am aware that squid change to user squid (or nobody in some case) as effective user when it runs, my question is do we need to create the user account squid manually or is it automatically created upon

[squid-users] I have a cache directory, I am not sure if that is squid's cache directory

Dear all, I am wondering if the cache directory I have belongs to squid. the reason is because that cache directory is at the path /var/spool/cache i.e not under the squid directory. I read from other people that most have a cache directory under the squid directory path such as

[squid-users] FATAL: redirect_program /usr/bin/squidguard: (13) Permission denied

Hi all, I have a problem with squid that hasn't been able to get a solution in FAQ or other Linux forums. Hope you can help me with this. I am trying to use squidguard with squid. Everything seems to be fine so far till I realised that when I try to insert a redirect_program