My name is Shawn caron. I run a squid3 proxy server v 3.1.15. on
ubuntu 11.04. I am having some trouble getting it to run as i want it
to.
First question is, do you know what is the most secure scheme in squid
3. Currently running digest with user name and password.
Second question is. using
My name is shawn caron. I have a few questions.
1. What is the most secure auth sceme in squid3 currently using digest
and how to set up in squid3
2. Am still having trouble getting updates from the web from squid3
using aptitude and apt-get on linux systems.
If you need config files let me
Hello. I'm sorry, but my english is not good.
I'm triying to give http service to a computer wich is located outside
of my lan. This computer only has the port 443 opened.
In my router, any incoming tcp to the port 443 is "NATted" to my
computer ( 192.168.1.2 ) to the port 4128
Hello. I'm sorry, but my english is not good.
I'm triying to give http service to a computer wich is located outside
of my lan. This computer only has the port 443 opened.
In my router, any incoming tcp to the port 443 is "NATted" to my
computer ( 192.168.1.2 ) to the port 4128
Hello. I'm sorry, but my english is not good.
I'm triying to give http service to a computer wich is located outside
of my lan. This computer only has the port 443 opened.
In my router, any incoming tcp to the port 443 is "NATted" to my
computer ( 192.168.1.2 ) to the port 4128
2005/5/23, Matus UHLAR - fantomas <[EMAIL PROTECTED]>:
> On 22.05 12:35, Discussion Lists wrote:
> > I have some general questions about reverse-proxying SSL.
> >
> > 1. What is the best way to do it using Squid:
> > a. Do a straight redirect from port 4
e are no other rules.
>> I had deleted all.
>
> Please re-read what I said:
>
> Listing the rules with -nv options as well will show the additional fields
> and packet counters.
>
> There is no mention of additional rules needed.
> It is a very simple instruction of wha
e are no other rules.
>> I had deleted all.
>
> Please re-read what I said:
>
> Listing the rules with -nv options as well will show the additional fields
> and packet counters.
>
> There is no mention of additional rules needed.
> It is a very simple instruction of wha
Hi which I need is to be able form my proxy Squid and in turn Iptables in
order that it totally transparent for the users of my local net.
The local net enters the card of net eth0 and they go out for Internet
across the second card eth1.
I want to form IPTABLES in order that route all the requests
Thanks for your help, I will perform my iptables with that information, but
I have a second cuestion, must I set additional modules into the Kernel? Or
set something in /etc/sysctl.conf ? something like
net.ipv4.ip_forward=1..
Thanks
Damián.
-Mensaje original-
De: Ashish [mailto
--
From: Begoña F <[EMAIL PROTECTED]>
Date: 11-ago-2005 13:34
Subject: Problems with authentication
To: squid-users@squid-cache.org
Hello,
I sent this mail last month, but I couldn't see the list,
I repeat the problem, thanks a lot.
I have problems with the authentication. I'
Hi my name is Damian, I am from Argentina and I am a member of mailing list
of SQUID users.
I want that all the traffic of my local net goes across my SQUID proxy
server. I want to say that all the packages will be forwarded to the port
3128 of my Squid Server.
maybe you can help me.
Here it is
Hi,
On a squid on Redhat EL , syslog-ng is installed and while also squid
is logging on the local itself also its configured to send the logs
also to an other syslog-ng server. I dont know if it begin from the
begiing of this sys-logng and other configuration , it seems that now
also on the squid
I have a server-Debian Lenny as a router-firewall-webserver with Squid 2.7 and
Apache2. Asked is: how could I configure Squid as a transparent proxy (for the
internal network) and also as accelerator mode for the webserver???
And what would the iptables rules to output Internet (from internal
When a host has dynamic IP (and run Zoneedit script...) what I have to put in
the line of squid.conf (v 2.7) for reverse proxy???:
< http_port the.public.ip.address:80 accel defaultsite=your.main.website>
instead of "the.public.ip.address:80"?
Dear Chris and Henrik,
I'm sorry, but now cannot access webpages from outside...
Yes I can from LAN...
I repeat that is a debian Lenny webserver-fileserver-firewall (iptables-Squid
2.7-Samba 3-Apache 2, all in the same machine).
The setting:
Squid 2.7
http_port 192.168.000.1
Yes, you're right, you told me. But there is one detail that I did not comment
then, to not lengthen the thing (and because I figured it did not matter): the
public IP is dynamic and is routed using a script to ZoneEdit.
Then, because Amos told me to leave http_port 80 bind to all...
Somethign like this (you said at 2000)?:
http://www.squid-cache.org/mail-archive/squid-users/25/0709.html
I mean: NOT DOT at "domain" start: mydomain.com or www.mydomain.com
YES DOT at "host" start: .mydomain.com
It mean:
if I start the dstdomain with
Thanks very much Henrik...
Now everything is OK and running perfect.
Like you said at the old post wich I rescued from "googling", referring to
dstdomain... Today, as you say so now, it remains active.
That is, not EVERYTHING changes despite the time...
Also, I have made a
Hi,today i visited whatismy.com with a PC which is configured using a
squid proxy . On the site i saw that while giving my reel ip adress
also the web site gives me much more information hostname of my squid
proxy server, the proxy software and version which is squid x.y. So
what is giving so
Hi ,
For a squid proxy running behind a firewall (and has a QOS rule for
itself) how can i monitor/measure /tune the performance of it. People
are always ready to say that internet connection is slow (already
have a low bandwith) but i need to find out if there are really
bottlenecks
Hi,
i want to open an unusual port to a spesific destination ip for
internal users access
Can you provide me the configuration steps?
Regards
Hi,
For a linux which runs squid and will act as a proxy what are the
parameters youll recommend to change and why and how (on both linux
and squid)? (especially with TCP/IP stack, TIME_WAIT, maximum
connect.ion limits vs)
Regards
Hi,
I would like to block hotmail.com and some other web mail sites at
squid and im exactly blocking them using regex. But some sites wants
users email adress for login intothe site and uses this email address
at the returning URL an
and when a user uses his hotmail.com or other banned web
Hi,
On a proxy serving to many clients , how can we drop a clients
connection ? especially to an url ? Im not talking about generally
appliying an url filter, talking about a current -live connection.
Regards
Hi,
I have several squid boxes running. There is one which when i set it
on the proxy configuration on my client PCs browser then open
www.whatismyip.com , It not only bring its real NAT IP , but also
below information too. What makes the site gets these information and
how can prevent or change t
Hi,
Im trying to allow some client IPs to reach to facebook , and im
generally blocking the facebook successfully. I tried some entries
like below (which similar ones were working fine for other
exceptions) but this doesnt seem to work
acl john src 10.x.y.z
acl jane src 10.x.y.t
acl face
Hi,
Is it possible to give clients access to 1 or more udp ports from
squid? If so what is the configuration needed to be done ?
Regards
Hi,
I would like to enable proxy authention on squid and want only ntlmv2
authentication done. I guess i have to edit samba.conf file for
supporting (only) samba.conf, am i right? What entries must i put on
it? what i have to the with squid itself?
Regards
other proxies which working through the same firewall are
working , people easily blame the problem. after stopping the
firewall services
and starting and waiting a while the proxy starts pinging the net and
start serving again. I dont know if someone is playing with something
(on network, on proxy
Hi,
A client has reported that when he tries to connect to an https site
it gives the below error. I tried once to reach the site without
using proxy and i reached the site. So how can resolve the below
issue?
Regards
Connection timed outThe remote host or network may be down. Please try
also at the same enviroment through an other proxy i can access the same site
2011/12/7 a bv :
> Hi,
>
> A client has reported that when he tries to connect to an https site
> it gives the below error. I tried once to reach the site without
> using proxy and i reached the s
Hi,
If i would like to open access to a special port for all the clients
or only 1 or some clients what steps i have to take? What does it mean
if i only add the port to the Safeports definition? What else i should
do , if acls will be used how these acls should be?
Regards
Hi,
I want a user give access to a spesific port to a spesific destination
from squid. adding that port to the Safe_ports section and doing a
reconfigure , user still gets denied to that destination and port.
User has general http_access allow rule.
Regards
Hi,
There are 2 squids running behind 2 different firewalls and 2 diffrent
internet connections (same isp, different network ranges). Users
report that they get problems viewing the site.
When i look at that site through 2 proxies and with different browsers
i get different results (and its chang
Hi,
How can i give access to the some users to be able to use Microsoft
Lync through squid?
Regards
Hi
I am trying to set up squid as a transparent ssl mitm proxy. The
users behind the proxy understand they have no expectation of privacy.
Also each computer behind the proxy has trusted the organisation
certificate.
After several days of research, what I would like to know is:
1. http_port
when a client makes an HTTPS request to port 443 on squid, squid will
decrypt the request (due to ssl-bump). Squid then treats this request as a
normal HTTP request and forwards it to the real webserver on port 80. The
webserver responds with a redirect, asking to connect to 443. Is there a way to
Thanks Alex and Amos, I'll have a look at those points!
> Date: Fri, 22 Jun 2012 10:27:35 -0600
> From: rouss...@measurement-factory.com
> To: utopian...@hotmail.com
> CC: squid-users@squid-cache.org
> Subject: Re: [squid-users] Capa
Hi,
What does Impossible keep-alive header errors in cache log mean?
Regards
Hi ,
I tried to write a timebased acl for for testingat special time of
day but it didnt seem to work. I tried to block the access to CNN
using dstdomain .cnn.com.
My aim is to allow facebook at special times of the day at lunch time
for example.
Can someone provide me a working rule for
Hi,
I would like to write an acl on squid for the block the users access
to the internal domain and LAN from squid. for this i guess acl dst
will help me but i also like to have a custom error page for this acl
. How can i easily do that ?
Regards
Hi,
Through one of my squid proxies i open whatismyip.com with browser and
there are some extra information seen there (my proxy server host name
my client IP etc). How can i prevent this leakege? I found a tag
forwarded_for and made it off at squid.conf but after i squid -k
reconfigured and
Hi,
>From my squid (version below) a user visits microsofts site and
tries to reach its virtual lab . AND this site redirects to other
external sites. After a while the users screen starts to wait at
connecting. When i look at the proxy log for the user i see that
attemps are TCP_MISS and h
Hi,
There are multiple proxies(squid) in the enviroment and one is the
major used one. Some users which use the same proxies for internet
connections at different location reports access problem to a spesific
site. Mostly using the same proxies i can open the page mostly easily
but sometime s a
Is there any coment about the issue?
Regards
2012/10/15 a bv :
> Hi,
>
> There are multiple proxies(squid) in the enviroment and one is the
> major used one. Some users which use the same proxies for internet
> connections at different location reports access problem to a
and left fine /usr/sbin/squid -k reconfigure starts
given no error. This time i got the erros like below. How can i find
out the reason and fix it?
Regards
zzz.clickbank.net' is a subdomain of 'zzz.clickbank.net'
2012/11/05 10:44:39| WARNING: because of this 'zzz.clickban
Hello all,
it's my first post here - hope i do everything right.
my constellation:
Squid 2.7 Stable 8 and also tried with a 3 Version
OS Windows 2000/XP tried both
My Problem is version and OS independent
my problem:
Try to remove a existing http header from a response fom the Ebay
S
he cache ACLs.
Amos"
To my understanding then, all the function that rely on a reply-Header
didn't work at that moment - correct?
Is this only for the caching mechanism or also for the delivery to the
client?
Does any newer or older Version handle rep_header correctly?
is there any
Hi Amos,
thanks a lot for your explanation. My english is not so perfect - maybe
i understood something incorectly - sorry
you wrote:
Hopefully one day someone will get around to re-checking storeability
about 11/12 in the above sequence - when that happens reply headers will
be available
Hi,
I have to block game sites with squid and only have ACL filtering for
now. So how can all do this? I dont have an URL list for game sites
now
Regards
Hi,
As a common courtesy I did give my name at the end, with best regards "Adam"
if you really looked.
And when I created this account years ago, I named it Gmail because I have
many other accounts, it helps me filter through
my email boxes, second of all I am new to the mainling list
ing to get it to work, I mean as a reverse proxy, with no
luck, I removed it, tried the version 3.0 the one that was packaged with the
Os, I got as far as allowing clients on my network to have access to the
internet and most of other applications on windows XP couldn't connect.
anyway thi
Hi Amos,
Thanks again for your reply, I have tried these two links, I have used them
for one server at a time, or maybe the issue is that I was trying to access
the backend Server which is currently running in virtualhost mode and holds
the 3 websites.
As I said before I have completely
ver (Squid) can only
allow HTTP/HTTPS requests, correct?
If that's a yes, what are we going to do with all hundreds of requests then?
You know as well as I do, running servers and services, you don't just run
programmes and applications that are passed through http
So if the only access
Have you tried to ask the question on Ubuntu forums?
You're more likely to get an answer, I believe it will be version 3.0 Stable
25
I am only guessing
Regards
Adam
: 111.118.144.225
This is not a bug. see Squid.conf extension methods
ClientProcess Invalid Request.
And the proxy server is not yet connected to any client at this time, but I
get these invalid requets one after another, is there anyway from stopping
this?
It's almost like a flood, it is an ou
Well IRC can be accessed with IRC clients such as mIRC and so on
But they can also be accessed via the web with Java Applets using in fact a
web browser
That's why I am asking the question, if anyone has had this done.
As for Digichat, is a 100% Java written programme, and it also uses th
- Original Message -
From: "Amos Jeffries"
To:
Sent: Saturday, March 20, 2010 1:38 AM
Subject: Re: [squid-users] Squid3 issues
a...@gmail wrote:
Well IRC can be accessed with IRC clients such as mIRC and so on
But they can also be accessed via the web with Java Applet
Hi All,
I have a question I just want to make sure that I understand this
configuration.
Assuming I am configuring just one backend webservers and one website:
From this link:
http://wiki.squid-cache.org/ConfigExamples/Reverse/BasicAccelerator
Does this mean
http_port 80 accel defaultsite
Hi All,
Does anyone know if Mod_rewrite will intefer with redirection of http or
https requests,
If anyone knows whether Squid can handle Apaches with Mod_rewrite enabled
and websites with .htacces rewriteEngines On?
Any help would be appreciated
Regards
Adam
Hi There,
Thanks for confirming
I asked the question is because, I have one of my webservers are running a
website with mod_rewriteRules
Thanks again
Regards
Adam
- Original Message -
From: "Jeff Peng"
To: "a...@gmail"
Cc:
Sent: Saturday, March 20, 2010 2:26 PM
nt or something else?
And the http_port should match the http_port that the backend web-server is
listening on, correct?
As for the
cache_peer, does the cache peer also refers to the backend "web-server"?
If you don't mind being a little a bit more specific please.
Th
Thanks Amos
Ok I will try this and keep you all posted
I hope it'll work this time
Regards
Adam
- Original Message -
From: "Amos Jeffries"
To:
Sent: Saturday, March 20, 2010 11:39 PM
Subject: Re: [squid-users] Configuring a Basic Reverse Proxy (Website
Accelerator)
Hi,
I have a squid running and i would like to block/control the instant
messaging trafffic at squid (especially MSN/Windows Live Messenger) .
So how can i do this effectively?
Regards
Hi All,
I have tried everything so far I definitely have increased my file
descriptors on my Ubuntu OS
from 1024 to 46622
But when I start Squid 3.0 STABLE25 I doesn't seem to detect the real
descriptor's size
I have checked the sysctl.conf, and I have checked the system to make sure
that t
Hi, Al
Yes I did thanks for the suggestion
I am trying to figure out why is Squid refusing to aknowledge the available
size on the system
Unless of course it's a bug on either sides, I mean on Squid's side and
Ubuntu side,
But I have checked some Ubuntu forums and people used the same
display the maximum that you're system can currently handle
to increase that number
you need first to run this command
let's assume X is a number 46900
echo > proc/sys/fs/file-max (where the xx is the number you want to
add)
you then need to add this into the file
/etc/sysct
I have solved the problem, I managed to increase the filedescriptor
My system now reads 65535
But Squid still says only 1024 fileDescriptors available
What can I do to fix this please, I have rebooted the system and Squid
several times
I am running out of ideas
Any help would be appreciated
Re
buntu HardyI think this
tip is for the Squid that is packaged with Ubuntu and not the
compiledSquidThanks for your suggestion I appreciate itRegardsAdamFrom:
"Ivan ." To: "a...@gmail"
Cc:
Sent: Tuesday, March 23, 2010 1:50 AM
Subject: Re: [squid-users] FileDescriptor I
Sorry I haven't set it in the Start up script
But I will try it right away
Regards
Adam
- Original Message -
From: "Ivan ."
To: "a...@gmail"
Cc:
Sent: Tuesday, March 23, 2010 1:50 AM
Subject: Re: [squid-users] FileDescriptor Issues
Have you set the des
Thanks Amos for this tip I will try that and keep you posted
Regards
Adam
- Original Message -
From: "Amos Jeffries"
To:
Sent: Tuesday, March 23, 2010 2:54 AM
Subject: Re: [squid-users] FileDescriptor Issues
On Tue, 23 Mar 2010 02:19:40 -, "a...@gmail"
wro
Hi All
I have recompiled squid with 6400 FDS I tried with 65535 and I got a warning
that 65535 is not a multiple of 64 and it may cause some problems on some
systems.
so I changed it to 6400
I completed the installation started Squid now it's showing 6400 although
the system is set to 65
quot;
To: "a...@gmail"
Sent: Tuesday, March 23, 2010 2:02 PM
Subject: RE: [squid-users] FileDescriptor Issues
A problem I found is that you have to set ulimit BEFORE you compile it as
well.
I built everything from scratch and everytime I rebuild it I have to :
ulimit -HSn XX
=myAccelcache_peer
192.168.1.5 parent 81 0 no query originserver name=myAccel(myAccel I have
put a name)and then acl our_sites dstdomain my.website.org
http_access allow our_sites
cache_peer_access myAccel allow our_sites
cache_peer_access myAccel deny all Anybody with any suggestions please?Any
Hello there,
Thanks for the reply Ron and Amos
Maybe my original e-mail wasn't clear a bit confusing I am sorry if I
confused you
I have squid running on Machine A with let's say local ip 192.168.1.4
the backend server is running on machine B and ip address 192.168.1.3
Now,
cause now I am getting "Access
Denied" even from a local network:
Can you guys please take a look at it and see if you can spot what's causing
the access denied.
note I have tried to allow everything and removed all the "deny" directives
and yet it's still denies any ac
Hi Al,
thanks for your reply, I don't acutally have a problem with the apache
because the webserver is on another machine as the backend server
switching off the apache running on the proxy machine doesn't bother me
what I am having a problem with is that it doesn't pull the w
, meaning from
a totally different connection.
I get this
First I must apologise to everyone here, if my report is too long
please take a look at it and see what you can make out of it
Many thanks
Read bellow
#This configuration works as far as my network clients are concerned
http_port 80 accel
Hello again here few updates of my cache.log and access.log
Can anybody translat to me what does that mean, I have changed my real site
to "mysite"
Thank you all
I tried www.mysite.org from a local machine which is 192.168.1.1
remember the router is actually on 192.168.1.4 which i
Hello guys,
I don't know if any of you had a chance to take a look at my previous two
posts,
Now when I try to access my site I get the following
ERROR
The requested URL could not be retrieved
The following error was encountered while trying to retrieve the URL: /
Invalid URL
Some aspe
No one at all?
No suggestions, no ideas?
Regards
Adam
- Original Message -
From: "Ron Wheeler"
To: "a...@gmail"
Cc: "Amos Jeffries" ;
Sent: Thursday, March 25, 2010 1:58 AM
Subject: Re: [squid-users] Help with accelerated site
a...@gmail wrote:
Hel
Hello All.
I have to say since I started using Squid I get thrown from one problem to
another, followed every suggestion and every tutorial
and I could not get through to my my backend server
This is ridiculous now, I honestly start to believe that this whole project
is a joke or the software
Hi David,
I wasn't having a go at anyone in particular yes I am frustrated with "this"
software I didn't start yesterday in this business
I know there is always a certain level of frustration when dealing with
machines.
But this particular software has NO logic whatsoever,
to retrieve the URL: /
Invalid URL
Some aspect of the requested URL is incorrect.
Some possible problems are:
a.. Missing or incorrect access protocol (should be http:// or similar)
b.. Missing hostname
c.. Illegal double-escape in the URL-Path
d.. Illegal character in hostname
Hi All,
I get this in my cache log, does anyone know what it means please?
Unlinkd pipe opened on FD 13
Everytime I get this I know something is going pear shape again
Thank you all
Regards
Adam
- Original Message -
From: "Ron Wheeler"
To: "a...@gmail"
Sent: Satu
I believe I made is trying to open a Google website on
one of my internal clients
So what is the work around this please?
Regards
Adam
- Original Message -
From: "Amos Jeffries"
To:
Sent: Sunday, March 28, 2010 7:50 AM
Subject: Re: [squid-users] Help with accelerated s
e.org www.mysite.com
www.mysite.net
http_access allow our_sites
cache_peer_access main allow our_sites
cache_peer_access deny all
I can access my 3 websites from inside my network and from the "Internet" no
problems
apart for it being a little slower than before, but it's working
Hi Again,
Well my local network can't access the Internet since I had to put the vhost
option on the http_port 3128
They can access my sites internally not a problem, but the problem is they
can no longer access the internet
I have kept the original config
The only thing I have change
Hi Hassan,
Did you read the page:
http://www.squid-cache.org/Versions/v2/2.7/cfgman/http_port.html
Yes I did read it and I read a great deal more and I have been on many
forums, and I have been through the mailing list and and...
Yes it says it clearly but what it doesn't say clear
Hi Hassan,
If I had made a long email before is because somebody asked me to post some
of my log files
some of my config file, some of my iptables and explain what I was trying to
achieve so they can see.
There was one email where I tried to express my frustration it was not
directed to
Hi Ron thanks again for your reply
No I think you're a little confused here
I have one network at the moment and is the 192.168.1.0
My Router and proxy are both on the same machine which is 192.168.1.4
My backend server is on 192.168.1.3
Two different machines but on the same network
Howev
the following
added and http_port 8080
to the config and up my clients could access the internet and I can still
access my backend server from the internet
So normally everything is working fine
I am not sure it's being wise to make squid listen on more than one port,
I'll keep a clos
alnet 192.168.1.0/32
http_access allow manager localhost
http_access deny manager
http_access allow localnet
right?
Now for 100% sure I will give it as I said a day or two and see how it goes
for now everything seem to be working fine.
I will email you my website
I have done what you suggested n
Hi Hassan,
Thanks for your suggestion, I just did that about 10 times already lol
I started from scratch, the one I have right now is basically a default
config with few changes
I can easily remove them, but with the default config there was no way I
could access my sites
the only thing it did
Hi Amos,
Yes I didn't copy paste it I just typed it and I forgot to mention it
but it is in the actual config, because what I did basically I took a
default config
copy pasted everything that was uncommented to a file I then created another
config file
because to go through the amou
Hello Everybody!
I have a question if you don't mind or if anyone has a solution to this
I am trying to download some packages with apt-get on one of my Ubuntu
clients
All of the links fail, which means they are blocked by Squid, When I try the
same thing
on the Squid machine itself whi
Hi there,
Thanks for your reply, I was merely asking if anyone has or had the same
problem before, or anyone who might have a solution, of course
If I stop squid now and disable it reconfigure my system to what it was
before of course I will get the updates and the access to the internet
Hi Again,
I do appreciate that, but some people are very restricted time wise
The way it looks I could easily spend a whole year tweaking it before I
could get everything working or maybe more :-)
Anyway, Thank you all for your suggestions and help
Regards
Adam
- Original Message
ough squid
Also, you can educate your users so they know that your network has a
proxy and to setup the proxy on the apps is a necessary step to get to
work. Proxy is not a 'out-of-the-earth' thing now days and most of the
users (on a enterprise network, at least) will be able to u
1 - 100 of 565 matches
Mail list logo
