[squid-users] how big value should auth_param basic children be?

Hi, Just wondering how to define the optimum value for auth_param basic children. I have around 200+ users utilizing my proxy-ldap authentication. Currently i have set it to 20, i wonder if that is beyond redundant and what is actually the appropriate value to accommodate the users? thanks

[squid-users] Grouping the delay_pool access

Dear friends, I have a 512kb ADSL link. I tried to implement delay_pools on my users but apparently after i apply the configuration, even the general surfing seems to get significant slow down. I thought the delay_pools should only affect their downloading speed, but seems like general su

Re: [squid-users] delay_parameters: What is difference between aggregate, network and individual bucket?

thanks a lot Amos! Amos Jeffries wrote: Yong Bong Fong wrote: Dear friends, I am just confuse about the usage of aggregate, network and individual bucket. If not mistaken, aggregate bucket is just like a public bucket that all users get the privilege to access and individual bucket is one

[squid-users] delay_parameters: What is difference between aggregate, network and individual bucket?

Dear friends, I am just confuse about the usage of aggregate, network and individual bucket. If not mistaken, aggregate bucket is just like a public bucket that all users get the privilege to access and individual bucket is one specific for each user? Say if i set a delay_parameter as follo

[squid-users] sslReadServer: FD 95: read failure: (104) Connection reset by peer]

for firewall, i have switched it off also, the problem still persist, so i can narrow down it is something within squid. thanks Amos yong bong fong wrote: Dear friends, I have these error frequently in my squid log, that everytime i encounter this error my squid server starts to serve requests

[squid-users] sslReadServer: FD 95: read failure: (104) Connection reset by peer

Dear friends, I have these error frequently in my squid log, that everytime i encounter this error my squid server starts to serve requests super slow. On google search i can find advise that by changing http_port to http_port my_lan_ip:3128 that could solve the problem but i have tried it it

[squid-users] Download always get disconnected through proxy

taking time reading my mail... Regards Yong -- Yong Bong Fong System Engineer MIS (Made in Sarawak) Department Shin Yang Group of Companies Email: [EMAIL PROTECTED] Tel: (60)085-656699 Ext 376 "Bekerja rajin untuk kemajuan negara kita"

[squid-users] Can't do ftp://xxx.xx.com.my/xxxx

Dear friends, One of my users tried to do ftp by typing the ftp://xxx.xx.com.my/ in the browser, but after typing that it says: An FTP authentication failure occured while trying to retrieve the URL: ftp://xxx.xx.com.my/ Squid sent the following command: PASS and then received th

[squid-users] Possible to set password expiry for ldap authentication?

, Regards Y -- Yong Bong Fong System Engineer MIS Department Shin Yang Group of Companies Email: [EMAIL PROTECTED] Tel: (60)085-656699 Ext 376 "Bekerja rajin untuk kemajuan negara kita"

[squid-users] Possible that a specific ID is bound to a certain IP?

e, is that possible? please teach me how to do so, thanks a lot for your assistance! -- Yong Bong Fong (Ah Fong) System Engineer MIS Department Shin Yang Group of Companies Email: [EMAIL PROTECTED] or [EMAIL PROTECTED] Tel: (60)085-656699 Ext 375 "A proud local and loyal authentic Mirian"

[squid-users] Is it possible to redirect blocked urls to another url?

urls. Can I do it by squid itself? thanks for helping -- Yong Bong Fong (Ah Fong) Rookie System Engineer MIS Department Shin Yang Group of Companies Email: [EMAIL PROTECTED] or [EMAIL PROTECTED] Tel: (60)085-656699 Ext 375 "Bekerja Rajin Untuk Kemajuan Negara Kita"

Re: [squid-users] Restricting certain users to certain urls

so is it possible to redirect all the blocked sites to a certain url? Really thankful for helping, thanks a lot. Yong _ _ _ _ -Original Message----- From: Yong Bong Fong [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 13, 2005 5:02 PM To: squid-users@squid-cache.org Subje

Re: [squid-users] Restricting certain users to certain urls

Any idea what is wrong? seems like it is not checking the username thingi to do the acl. please help me to identify my problem..thanks a lot for taking time helping. thanks a lot... On Mon, Sep 12, 2005 at 09:53:45AM +0800, Yong Bong Fong wrote: How to restrict certain u

[squid-users] Restricting certain users to certain urls

.. thanks for taking time helping, -- Yong Bong Fong (Ah Fong) Rookie System Engineer MIS Department Shin Yang Group of Companies Email: [EMAIL PROTECTED] or [EMAIL PROTECTED] Tel: (60)085-656699 Ext 375 "Bekerja Rajin Untuk Kemajuan Negara Kita"

[squid-users] windows 2003 server active directory authentication

Dear friends, Is it possible to authenticate proxy users through windows server 2003 active directory? I read from the mailing list windows NT 2000 possible, what about 2003? To configure it, is it related to NTLM? thanks for taking time reading my mail! -- Yong Bong Fong (Ah Fong) Rookie

[squid-users] How to by pass proxy for intranet/local address?

Dear friends, Just wondering if it is possible to skip proxy for all intranet addresses? And only allow proxy if clients are accessing external addresses? Thanks for taking time reading my mail, -- Yong Bong Fong (Ah Fong) Rookie System Engineer MIS Department Shin Yang Group of Companies

[squid-users] WARNING: All redirector processes are busy.; WARNING: Reply from unknown nameserver

Dear all, I have a new squid box that is serving around 80+ users. the squid is 2.5 version. Inmy cache.log Ihave the following log messages: WARNING: All redirector processes are busy. 2005/03/26 10:39:22| WARNING: up to 10 pending requests queued 2005/03/26 10:39:48| WARNING: Reply from unkno

Re: [squid-users] Unable to increase file descriptor

quot;) Thanks for your advice anyway! 杨明 wrote: >Yong Bong Fong,您好！ > >　　the kernel of OS limite the max fd of application . > > 'ulimit' is update this argument . > > Perhaps you need rebuild squid if you want support more clie

[squid-users] Unable to increase file descriptor

Dear all, I have a squid that always start with 1024 file descriptors. But I intend to increase the value because my new proxy will serve around 70-80 users. My squid version is squid-2.5.STABLE5-2, kernel is 2.6.5-1.358. My squid comes with the distribution therefore I did not do any compili

[squid-users] browser access internet fail, but from terminal NSlookup ok

Dear all, I have a squid proxy that is supposed to server a few clients. It was without problem till yesterday when browsing seems to failed from the web browser. It showed the "Connection failed" error page. I can't find any error message in my log files, all the log files seem to show nothin

[squid-users] Squid ACL [url_regex] bypass vulnerability

Dear all, I read from http://esikker.dk/vul_14462.php says that A bug in Squid allows users to bypass certain access controls by passing a URL containing "%00" which exploits the Squid decoding function. This may insert a NUL character into decoded URLs, which may allow users to bypass url_regex

[squid-users] Configuration for abort redirection for dymanic urls

Dear all, I am trying to use viralator to scan download files but is facing problem with dynamic urls. Because viralator doesn't support dynamic urls. There fore I have obtained a configuration from someone else that will abort redirection if the symbols &, % etc is present in the url. However

[squid-users] How to configure squid to abort redirection for for URL that contain "&", "?" or "="

Dear all, I read from somewhere since I have added a abort redirection in squid conf file for URL that contain "&", "?" or "=", viralator seems to work much better. I wish to know how to configure squid conf file to abort redirection for URL that contain & ? or =. Please teach me how to do th

[squid-users] where can I find help for sarg?

Dear all, I am currently using sarg to check on usage. Wondering where can I find help for sarg specific configuration? I just need to configure the sarg report to provide monthly report for all user's usage details etc. Currently my report provides report in daily format, but my boss wants i

[squid-users] error: Ignoring squid.rpmsave, because of .rpmsave ending

Dear all, I tried to setup a logrotate in cron. Below is when I force a logrotate: # /usr/sbin/logrotate -f -s /var/lib/logrotate.status /etc/logrotate.conf error: Ignoring squid.rpmsave, because of .rpmsave ending The command does rotate the log files, however the above error message always come

[squid-users] service squid restart not good? must use service squid stop and start?

Dear all, I read from somewhere that says do not use "service squid restart", rather do the following: #service squid stop long wait 30s to 1 minute #service squid start Very long wait - half and hour or so if you have about a million urls in the squidguard block lists. It says the reason is "

[squid-users] Ask about what neccessary configuration needed to server 200++ clients

Dear all, I have got a squid working with LDAP authentication, squidguard + viralator. The box is complete and can run well. However so far Ihave only used it on my own machine, I have never test it out to serve huge number of clients. I wish to know what are the other configurations that I n

[squid-users] segmentation fault when I did ldapsearch for squid _ldap_group

Dear all, I tried to implement squid_ldap_group. Problem is when I tried ldapsearch such as this: /usr/lib/squid/squid_ldap_group -b "cn=apple,dc=orange,dc=com" -f "(&(member=%v)(uid=%a)(objectClass=qmailGroup))" -B "cn=apple,dc=orange,dc=com" -F "uid=%s" -D "cn=toby,ou=users,cn=apple,dc=orang

Re: [squid-users] deny access

Hi, without password request prompt? Just remove your authentication scheme in squid.conf Regards Yong lharissa wrote: Hi, Does anybody know how to deny access without password request prompt? Thank you Lharissa

[squid-users] squid_ldap_group: no login prompt but able to authenticate group from command line

Dear all, I am trying to setup squid_ldap_group. It successfully authenticated from the command line, but when I used browser there is no login prompt come out for the group authentication. belows is my configuration that worked from command line: * /usr/lib/squid/squid_ldap_group -b "ou=chick

[squid-users] ERR is all I got when I use squid_ldap_auth from command line and browser reprompt for login

ALL # # bfyong, qmail_users, root, shinyang, com, my dn: cn=bfyong,ou=qmail_users,cn=root,dc=shinyang,dc=com,dc=my objectClass: top objectClass: person objectClass: inetOrgPerson objectClass: qmailUser objectClass: shinyangUser mailHost: symail.shinyang.com.my mailQuotaCount: 0 accountStatus: active

[squid-users] my login kept replying with "ERR", is it something to do with squid_ldap_auth.c?

Hello, I am having trouble getting pass a login prompt. It just keep giving me ERR. Somewhere in the archive, i read that Henrik mentioned that we need to modifythe "squid_ldap_auth.c file. However I searched through the internet and read the instructions about setting up squid_ldap_auth hard

[squid-users] Is there a squid_ldap_auth FAQ or trouble shoot help?

Hi All, Anyone knows if there is a FAQ or troubleshoot site specially dedicated for the implementation of squid_ldap_auth? Something similar to the squid faq. I searched through the web but couldn't find much help for squid_ldap_auth. thanks all, Regards Yong

[squid-users] squid_ldap_auth from command line do nothing ...and display no further prompt from terminal

Hello All, When I typed my squid_ldap_auth command as shown below, it always do nothing. Other people seems to get a follow-up response of a prompt for username and password from the machine, and then further prompting an error or ok message back to user. But my command seems to just stuck the

[squid-users] ./squid_ldap_auth command says "bash: ./squid_ldap_auth: No such file or directory"

Dear all, I was trying to test my squid_ldap_auth from the terminal as shown below but the outcome was bad: *./squid_ldap_auth -P -R -b 'dc=shinyang,dc=com dc=my' -D 'cn=admin,dc=shinyang,dc=com dc=my' -w password -f 'cn=%s' -h 172.16.0.21 bash: ./squid_ldap_auth: No such file or directory *A

[squid-users] How does squid_ldap_auth knows which flag in the ldap server to be used to authenticate users?

Dear all, I read from the squid_ldap_auth(8) document that, if I have a single domain ,all I need to specify is usually the base DN under where your users are located and he server name: such as squid_ldap_auth -b ou=people,dc=your,dc=domain ldapserver but from the above command, how is it ab

[squid-users] basic program authentication setting for squid_ldap_auth, am I right in my configuration?

Dear all, I am confused about the configuration of squid_ldap_auth in squid.conf. Below is the format of the ldap built by my system administrator, he wants me to set up ldap authentication through squid. DN:cn=root, dc=shinyang, dc=com, dc=my | |DN:ou=qmail_users, cn=root, dc=shinyang

[squid-users] ClamAV information needed, any recommendation?

Dear all, I am trying to find a good step by step or How-to guide about installation and everything about ClamAV, does anyone know where can I get it? I found the official site of ClamAV but seems like the information in there is quite limited. Thanks all

[squid-users] How to test if my squidguard and LDAP authentication works from the command line

Dear all, I have configured squidguard and squid_ldap_auth on my squid. From the cache and webmin it there seems to have no error message. But I just want to find out if there is any way I can test the squidguard and squid_ldap_auth from the command line without connecting to internet. Or is i

[squid-users] cache.log says "2004/12/01 15:53:46| User-Agent logging is disabled.

2004/12/01 15:53:46| Referer logging is disabled." Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Dear all, I have the following output from my cache.log: 2004/12/01 15:53:45| Starting Squid Cache version 2.5.STABLE3 for i386-redhat-linux-gnu..

[squid-users] can't find the tag "authenticate_options" in squid.conf

Dear all, I tried to set up LDAP authentication for my squid, found a useful example from a site that stated: |*authenticate_program /usr/local/squid/bin/ldap_auth authenticate_options ldap.yourdomain.com 389 dc=yourdomain,dc=com uid authenticate_children 2 *I have found the tag authenticate_

[squid-users] Squidguard seems not start when squid started

Dear all, I am trying to figure out whether my squidguard starts when my squid starts. Someone told me once I attached squidguard as redirect_program in my squid.conf, then whenever squid starts it automatically start squidguard. However when restart my computer, and then check in the squidgu

[squid-users] log file "squid.out" not exist in my log folder

Dear all, I used the squid from distribution. For some reason, there is no "squid.out" in the log folder. I remembered the last time I installed squid in another distribution there are 4 logs files namely "cache.log", "access.log", "store.log" and "squid.out" , however I couldn't find the squi

[squid-users] I have a cache directory, I am not sure if that is squid's cache directory

Dear all, I am wondering if the cache directory I have belongs to squid. the reason is because that cache directory is at the path /var/spool/cache i.e not under the squid directory. I read from other people that most have a cache directory under the squid directory path such as /var/squid/ca

[squid-users] do we need to create the user "squid" by ourselves?

Dear all, Recently I ran into problem with permission on squid and squidguard. I am aware that squid change to user squid (or nobody in some case) as effective user when it runs, my question is do we need to create the user account "squid" manually or is it automatically created upon installa

[squid-users] FATAL: redirect_program /usr/bin/squidguard: (13) Permission denied

Hi all, I have a problem with squid that hasn't been able to get a solution in FAQ or other Linux forums. Hope you can help me with this. I am trying to use squidguard with squid. Everything seems to be fine so far till I realised that when I try to insert a redirect_program /usr/bin/squidguar