[squid-users] Re: File download blocking

Hi !! I think it is better to use a "rep_mime_tipe" acl, because this way you have better control over what is being downloaded then using file extensions. Regards, Carlos. --- Hello, You're all probably tired of this subject but I'm having a problem with the following

[squid-users] Authentication Window popping up randomly

Hi! We are facing an weird problem here with ntlm authentication. After we upgraded our Linux boxes to Fedora Core 3, sometimes the user is prompted with the authentication window from squid. Looking at the winbindd.log I have found the following error message: [2005/02/21 12:20:44, 0] rpc_

[squid-users] assertion failed: HttpHeader.c:664: "strBuf(s)"

Hi! We are running Squid Version 2.5.STABLE7-20050124, and we begun experiencing squid crashes, apparently due to the following error, found in cache.log: 2005/03/16 08:36:44| WARNING: found whitespace in HTTP header name {Cache Control: no-cache} 2005/03/16 08:36:44| ctx: exit level 0 200

Re: [squid-users] trying to block exe files ...

Hi !! We are doing it here combining the ".exe" extension with the following rep-mime-types: ^application/octet-stream$ ^application/exe$ ^application/x-exe$ ^application/dos-exe$ ^vms/exe$ ^application/x-winexe$ ^application/msdos-windows$ ^application/x-msdos-program$ Regards, Carlos.

[squid-users] Re: SquidGuard vs. Dansguardian

Hi! We are using squid with ntlm authentication, wich then forwards the user name do DansGuardian, and it is working very well, with no problems at all ... Regards, Carlos. -- Dansguardian is very stable but can slow down network traffic depending on the size of yo

[squid-users] Re: SquidGuard vs. Dansguardian

Hi Gary !! I have a how-to documented in portuguese Would you be able to read it? Regards, Carlos.

[squid-users] Re: Content Filtering Solutions

Hi !! These kind of filtering can be done with squid itself, with its built-in acls. You can combine it with traditional content-filtering solutions, like Dansguardian, that was pointed by someone at this list ... Regards, Carlos. -- Sorry for breaking into the thread, but I

[squid-users] Behaviour change in ntlm authentication - please help

Hi !! We are facing a strange behaviour change in ntlm authentication, that is causing Squid to slow down on peak hours. Previously, the browsers would try to get a web page through squid, and they received one 407 error, sent an authentication package that successfully authenticated the cli

[squid-users] never_direct not working !!

Hi! I am not managing how to direct some users to access external sites directly from de squid box, and others to go through another antivirus/proxy that we have here. If I use only "never_direct allow all", everyone goes through the antivirus/proxy, but if I use the configuration below, eve

[squid-users] never_direct not working !!

Hi! I am not managing how to direct some users to access external sites directly from de squid box, and others to go through another antivirus/proxy that we have here. If I use only "never_direct allow all", everyone goes through the antivirus/proxy, but if I use the configuration below, eve

Re: [squid-users] never_direct not working !!

, suddenly, the start browsing DIRECT !!! What may be going wrong? TIA, Carlos Zottmann. On Mon, Oct 06, 2003 at 11:55:22AM -0300, [EMAIL PROTECTED] wrote: > I am not managing how to direct some users to access external sites directly > from de squid box, and others to go through a

Re: [squid-users] never_direct not working !!

, suddenly, the start browsing DIRECT !!! What may be going wrong? TIA, Carlos Zottmann. On Mon, Oct 06, 2003 at 11:55:22AM -0300, [EMAIL PROTECTED] wrote: > I am not managing how to direct some users to access external sites directly > from de squid box, and others to go through a

Re: [squid-users] Proxy Authentication and Java Applets

Hi !! You should do the following: acl java_jvm browser Java then, before your http_access for the authenticated users, use: http_access allow java_jvm Regards, Carlos Hi, I'm currently using SQUID 2.5 STABLE3 offering the NTLM and the basic authentications sch

Re: [squid-users] Proxy Authentication and Java Applets

Hi !! You should do the following: acl java_jvm browser Java then, before your http_access for the authenticated users, use: http_access allow java_jvm Regards, Carlos Hi, I'm currently using SQUID 2.5 STABLE3 offering the NTLM and the basic authentications sch

[squid-users] Allow_direct and Never_direct

Hi! I have sent a similar question before, but did not manage to solve the problem. I need to allow certain users of a Windows group to always bypass our cache_peer and the other ones to never bypass it. I am using the following configuration: always_direct allow windows_group always_dir

[squid-users] Allow_direct and Never_direct

Hi! I have sent a similar question before, but did not manage to solve the problem. I need to allow certain users of a Windows group to always bypass our cache_peer and the other ones to never bypass it. I am using the following configuration: always_direct allow windows_group always_dir

Re: [squid-users] Allow_direct and Never_direct

Thanks Duane !! It worked perfectly Regards, Carlos. On Wed, 22 Oct 2003 [EMAIL PROTECTED] wrote: > Hi! > > I have sent a similar question before, but did not manage to solve the > problem. > > I need to allow certain users of a Windows group to always bypass our > cache_peer a

Re: [squid-users] Allow_direct and Never_direct

Thanks Duane !! It worked perfectly Regards, Carlos. On Wed, 22 Oct 2003 [EMAIL PROTECTED] wrote: > Hi! > > I have sent a similar question before, but did not manage to solve the > problem. > > I need to allow certain users of a Windows group to always bypass our > cache_peer a

[squid-users] ICAP plans for SQUID?

Hi !! I have been reading about ICAP and Squid, but was not able to find anything about its actual implementation, not even in the Squid 3.0 pages ... Is there any plans about developing ICAP functionality within SQUID? Regards, Carlos Zottmann

[squid-users] ICAP plans for SQUID?

Hi !! I have been reading about ICAP and Squid, but was not able to find anything about its actual implementation, not even in the Squid 3.0 pages ... Is there any plans about developing ICAP functionality within SQUID? Regards, Carlos Zottmann

Re: [squid-users] ICAP plans for SQUID?

Fine !!! Can either project be used in a production environment, to integrate a antivirus solution to Squid (Symantec´s Scan Engine for Linux)? Regards, Carlos. On Tue, 28 Oct 2003 [EMAIL PROTECTED] wrote: > I have been reading about ICAP and Squid, but was not able to find anything > a

Re: [squid-users] ICAP plans for SQUID?

Fine !!! Can either project be used in a production environment, to integrate a antivirus solution to Squid (Symantec´s Scan Engine for Linux)? Regards, Carlos. On Tue, 28 Oct 2003 [EMAIL PROTECTED] wrote: > I have been reading about ICAP and Squid, but was not able to find anything > a

[squid-users] Re: [ICAP-Discussions] [Fwd: [squid-users] ICAP plans for SQUID?]

How can we manage to compile squid with icap and all of the squid stuff? Regards, Carlos Zottmann. _ Voce quer um iGMail protegido contra vírus e spams? Clique aqui: http://www.igmailseguro.ig.com.br Ofertas imperdíveis! Link: http://www.americanas.com.br/ig/

[squid-users] Re: [ICAP-Discussions] [Fwd: [squid-users] ICAP plans for SQUID?]

How can we manage to compile squid with icap and all of the squid stuff? Regards, Carlos Zottmann. _ Voce quer um iGMail protegido contra vírus e spams? Clique aqui: http://www.igmailseguro.ig.com.br Ofertas imperdíveis! Link: http://www.americanas.com.br/ig/

[squid-users] Squid 2.6 and NTLM Authentication

Hi !! I noticed that Squid 2.6 (development) doesn´t come with the wb_ntlmauth helper What is the best way to do ntlm authentication in Squid 2.6? Thanks in Advance, Carlos. _ Voce quer um iGMail protegido contra vírus e spams?

[squid-users] Squid 2.6 and NTLM Authentication

Hi !! I noticed that Squid 2.6 (development) doesn´t come with the wb_ntlmauth helper What is the best way to do ntlm authentication in Squid 2.6? Thanks in Advance, Carlos. _ Voce quer um iGMail protegido contra vírus e spams?

[squid-users] Squid 2.6 and NTLM authentication

Hi! I am trying the 2.6 ICAP enbled version of Squid, and I noticed that it doesn´t come with the wb_ntlmauth helper with it Which is the best way to do ntlm authentication with Squid 2.6? thanks in advance, Carlos. _ Voce quer u

[squid-users] Squid 2.6 and NTLM authentication

Hi! I am trying the 2.6 ICAP enbled version of Squid, and I noticed that it doesn´t come with the wb_ntlmauth helper with it Which is the best way to do ntlm authentication with Squid 2.6? thanks in advance, Carlos. _ Voce quer u

Re: [squid-users] Squid 2.6 and NTLM authentication

Hi Henrik!!! If we download the squid-icap-client following the directions in http://icap-server.sourceforge.net/squid.html, either through standard download or through cvs, it creates a directory named squid-2.6-DEVEL-20020324. That´s why I though I was dealing with 2.6 version of Squid ...

Re: [squid-users] Squid 2.6 and NTLM authentication

Hi Henrik!!! If we download the squid-icap-client following the directions in http://icap-server.sourceforge.net/squid.html, either through standard download or through cvs, it creates a directory named squid-2.6-DEVEL-20020324. That´s why I though I was dealing with 2.6 version of Squid ...

Re: [squid-users] Squid 2.6 and NTLM authentication

OK !!! I am using squid2.5-stable4 in my production environment.. Can I use this patch against this version? Would it work if I place the patch in the same directory as the Squid source and run a patch -p1 ? Regards, Carlos. Em 6 Nov 2003, Henrik Nordstrom escreveu: >On Thu, 6 Nov 200

Re: [squid-users] Squid 2.6 and NTLM authentication

OK !!! I am using squid2.5-stable4 in my production environment.. Can I use this patch against this version? Would it work if I place the patch in the same directory as the Squid source and run a patch -p1 ? Regards, Carlos. Em 6 Nov 2003, Henrik Nordstrom escreveu: >On Thu, 6 Nov 200

[squid-users] Traffic Accounting per user

Hi! I think that they are not exactly what you want, but you may take a look at squid2mysql and squid´s delaypools. Squid2mysql (http://evc.fromru.com/squid2mysql/features.html) allows you to define download limits per user based on a period (daily, monthly, etc...) DelayPools is a Squid na

[squid-users] Traffic Accounting per user

Hi! I think that they are not exactly what you want, but you may take a look at squid2mysql and squid´s delaypools. Squid2mysql (http://evc.fromru.com/squid2mysql/features.html) allows you to define download limits per user based on a period (daily, monthly, etc...) DelayPools is a Squid na

[squid-users] Using ICAP patches (was: Squid 2.6 and NTLM authentication)

Advance, Carlos Zottmann. _ Voce quer um iGMail protegido contra vírus e spams? Clique aqui: http://www.igmailseguro.ig.com.br Ofertas imperdíveis! Link: http://www.americanas.com.br/ig/

[squid-users] Using ICAP patches (was: Squid 2.6 and NTLM authentication)

Advance, Carlos Zottmann. _ Voce quer um iGMail protegido contra vírus e spams? Clique aqui: http://www.igmailseguro.ig.com.br Ofertas imperdíveis! Link: http://www.americanas.com.br/ig/

[squid-users] Re: Using ICAP patches

Hi again!! I tried to use two icap_service configurations to integrate Squid and Symantec´s Scan Engine, and received different error in both cases, as follows: icap_service service_2 respmod_precache bypass trailers preview=4096 icap://shamash:1344/respmod error received: icapRespmodPreCa

[squid-users] Re: Using ICAP patches

Hi again!! I tried to use two icap_service configurations to integrate Squid and Symantec´s Scan Engine, and received different error in both cases, as follows: icap_service service_2 respmod_precache bypass trailers preview=4096 icap://shamash:1344/respmod error received: icapRespmodPreCa

Re: [squid-users] Re: Using ICAP patches

e you from Brazil ... Your name suggests it Thanks in Advance, Carlos Zottmann. --- Hi Carlos, I've been using the following configuration with success with all squid icap versions: #sta

Re: [squid-users] Re: Using ICAP patches

e you from Brazil ... Your name suggests it Thanks in Advance, Carlos Zottmann. --- Hi Carlos, I've been using the following configuration with success with all squid icap versions: #sta

Re: [squid-users] Re: Using ICAP patches

Hi Rui!!! Just tried squid compilation with ./configure --enable-icap-suppport only... It worked for a while, and then aborted with a better message then before: assertion failed: icap_respmod.c:912: "icapHttpReplyHdrState(icap) == 0" Aborted Have anybody ever run into this problem? Rega

Re: [squid-users] Re: Using ICAP patches

Hi Rui!!! Just tried squid compilation with ./configure --enable-icap-suppport only... It worked for a while, and then aborted with a better message then before: assertion failed: icap_respmod.c:912: "icapHttpReplyHdrState(icap) == 0" Aborted Have anybody ever run into this problem? Rega

Re: [squid-users] Re: Using ICAP patches

Hi Rui !! I had this error with some URLs . The last one was this: http://esportes.terra.com.br/tenis/ Thanks again, Carlos ... --- Hi Carlos, Can you please send me the URL of the file that's causing this error? So I can have look at it and see if it's an issue wi

Re: [squid-users] Re: Using ICAP patches

Hi Rui !! I had this error with some URLs . The last one was this: http://esportes.terra.com.br/tenis/ Thanks again, Carlos ... --- Hi Carlos, Can you please send me the URL of the file that's causing this error? So I can have look at it and see if it's an issue wi

Re: [squid-users] calculating how much bandwidth is saved?

Hi!! There is a tool called "squeezer" that generates lots of squid statistics, including the amount of bandwith saved. You can find lots of squid related tools (including squeezer) in http://www.squid-cache.org/Scripts/ Regards, Carlos. Em 18 Nov 2003, Antony Stone escreveu: >On Tuesd

Re: [squid-users] calculating how much bandwidth is saved?

Hi!! There is a tool called "squeezer" that generates lots of squid statistics, including the amount of bandwith saved. You can find lots of squid related tools (including squeezer) in http://www.squid-cache.org/Scripts/ Regards, Carlos. Em 18 Nov 2003, Antony Stone escreveu: >On Tuesd

Re: [squid-users] Re: Hardware filewall + squid: blocking kazaa/kazaa lite

Hi! I sent a message that I think didn´t get to the list, regarding this issue .. You can block Kazaa using string-match blocking, through a device capable of doing so (cisco router, linux iptables firewall, etc...) If you block string that Kazaa uses ("X-Kazaa-Client", or "get ./hash", for

Re: [squid-users] Re: Hardware filewall + squid: blocking kazaa/kazaa lite

Hi! I sent a message that I think didn´t get to the list, regarding this issue .. You can block Kazaa using string-match blocking, through a device capable of doing so (cisco router, linux iptables firewall, etc...) If you block string that Kazaa uses ("X-Kazaa-Client", or "get ./hash", for

RE: [squid-users] Squid versus Microsoft ISA

Hi !!! About your statement ... > Except that with ISA you can use a SMP box. The 2 products have vastly > different hardware requirements, if you buy/build a box for squid it > will be a 1 CPU box, which would not be a good choice for ISA. We are using Squid over Red Hat Linux here in a SM

RE: [squid-users] Squid versus Microsoft ISA

Hi !!! About your statement ... > Except that with ISA you can use a SMP box. The 2 products have vastly > different hardware requirements, if you buy/build a box for squid it > will be a 1 CPU box, which would not be a good choice for ISA. We are using Squid over Red Hat Linux here in a SM

Re: [squid-users] Squid versus Microsoft ISA

Ralph, As Henrik stated, Squid uses just one processor, but we are also using DansGuardian, samba, etc..., and they benefit from the other processors Regards, Carlos. Em 5 Dec 2003, Raphael Maseko escreveu: >Hi Carols, >Have you been able to determine that Squid is actually making u

Re: [squid-users] Squid versus Microsoft ISA

Ralph, As Henrik stated, Squid uses just one processor, but we are also using DansGuardian, samba, etc..., and they benefit from the other processors Regards, Carlos. Em 5 Dec 2003, Raphael Maseko escreveu: >Hi Carols, >Have you been able to determine that Squid is actually making u

[squid-users] Squid & ntlm & Samba 3

Hi !! We have a Fedora Core box with Samba 3.0 installed, with everything running ok (wbinfo -t, wbinfo -u, wbinfo -g, wbinfo -a user%password all return success, /usr/bin/ntlm_auth --username=user also returns success). We have compiled Squid with the following options: /configure --enable

[squid-users] Squid & ntlm & Samba 3

Hi !! We have a Fedora Core box with Samba 3.0 installed, with everything running ok (wbinfo -t, wbinfo -u, wbinfo -g, wbinfo -a user%password all return success, /usr/bin/ntlm_auth --username=user also returns success). We have compiled Squid with the following options: /configure --enable

Re: [squid-users] Squid & ntlm & Samba 3

>And have you given Squid access to the privileged winbind >pipe? I think I have ... Squid runs under the "nobody" user, wich is a member of the "nobody" group, right? We have changed the access rights to this: drwxr-x---2 root nobody 4096 Dec 17 12:01 winbindd_privileged I

Re: [squid-users] Squid & ntlm & Samba 3

>And have you given Squid access to the privileged winbind >pipe? I think I have ... Squid runs under the "nobody" user, wich is a member of the "nobody" group, right? We have changed the access rights to this: drwxr-x---2 root nobody 4096 Dec 17 12:01 winbindd_privileged I

Re: RE: [squid-users] Squid & ntlm & Samba 3

Hi !! Our cache.log has the following entries: 2003/12/17 16:29:51| helperStatefulOpenServers: Starting 5 'ntlm_auth' processes 2003/12/17 16:29:52| helperOpenServers: Starting 5 'ntlm_auth' processes username must be specified! Usage: [OPTION...] --helper-protocol=helper protocol to us

Re: RE: [squid-users] Squid & ntlm & Samba 3

Hi !! Our cache.log has the following entries: 2003/12/17 16:29:51| helperStatefulOpenServers: Starting 5 'ntlm_auth' processes 2003/12/17 16:29:52| helperOpenServers: Starting 5 'ntlm_auth' processes username must be specified! Usage: [OPTION...] --helper-protocol=helper protocol to us

Re: RE: RE: [squid-users] Squid & ntlm & Samba 3

Jim, Thank you very much !!! This was the problem, indeed !!! Sorry everyone for bugging you with such a simple mystake !!! Regards, Carlos. Em 17 Dec 2003, Jim Crippen escreveu: >I think I found your problem. In the squid.conf file try this: > >auth_param ntlm program /usr/bin/ntlm_

Re: RE: RE: [squid-users] Squid & ntlm & Samba 3

Jim, Thank you very much !!! This was the problem, indeed !!! Sorry everyone for bugging you with such a simple mystake !!! Regards, Carlos. Em 17 Dec 2003, Jim Crippen escreveu: >I think I found your problem. In the squid.conf file try this: > >auth_param ntlm program /usr/bin/ntlm_

[squid-users] Problem with wbinfo_group.pl

Hi!! We are using wbinfo_group.pl in order to build acls based on Windows groups, but we are facing the following problem: We have built a test acl, with a USER that we know that belongs to a specific Group. Wbinfo_group.pl is called by Squid, with the correct parameters, but it returns "E

[squid-users] Problem with wbinfo_group.pl

Hi!! We are using wbinfo_group.pl in order to build acls based on Windows groups, but we are facing the following problem: We have built a test acl, with a USER that we know that belongs to a specific Group. Wbinfo_group.pl is called by Squid, with the correct parameters, but it returns "E

Re: [squid-users] Problem with wbinfo_group.pl

Hi Again !! I was checking wbinfo, and found out the the Group that I have chosen to test can´t be looked up by wbinfo, although it exists in MSAD. This problem occurs with some other Groups in MSAD, but, for the majority of the Groups, the lookup runs ok !!! Have anyone run into this probl

Re: [squid-users] Problem with wbinfo_group.pl

Hi Again !! I was checking wbinfo, and found out the the Group that I have chosen to test can´t be looked up by wbinfo, although it exists in MSAD. This problem occurs with some other Groups in MSAD, but, for the majority of the Groups, the lookup runs ok !!! Have anyone run into this probl

[squid-users] Re: Problems with wbinfo_group.pl (Partially solved !!)

Hi !! The problem I was facing with wbinfo_group.pl was due to the fact that the default behaviour of wbinfo from Samba 3 is to perform group lookups only with the group name all in uppercase ... I don´t know how to configure Samba 3 to act like Samba 2, but, if you build your Squid acl with

[squid-users] Re: Problems with wbinfo_group.pl (Partially solved !!)

Hi !! The problem I was facing with wbinfo_group.pl was due to the fact that the default behaviour of wbinfo from Samba 3 is to perform group lookups only with the group name all in uppercase ... I don´t know how to configure Samba 3 to act like Samba 2, but, if you build your Squid acl with

[squid-users] External_acl_type

Hi !! Is there a way to choose wich requestes are going through a external_acl_type? For example, can I configure all requests coming from localhost to not go through a external_acl_type that verifies the Windows group that the user belongs to? Thanks in Advance, Carlos. ___

[squid-users] External_acl_type

Hi !! Is there a way to choose wich requestes are going through a external_acl_type? For example, can I configure all requests coming from localhost to not go through a external_acl_type that verifies the Windows group that the user belongs to? Thanks in Advance, Carlos. ___

Re: [squid-users] External_acl_type

Henrik, We are using here Squid and DansGuardian, with the following configuration: Squid -> DansGuardian > Squid (same instance as the first one) All works fine, if we don´t use external_acl_type to determine who is going through DansGuardian, and who is not. When we use it, our cache.log

Re: [squid-users] External_acl_type

Henrik, We are using here Squid and DansGuardian, with the following configuration: Squid -> DansGuardian > Squid (same instance as the first one) All works fine, if we don´t use external_acl_type to determine who is going through DansGuardian, and who is not. When we use it, our cache.log

[squid-users] Behaviour change in ntlm authentication - please help again !!

Hi !! I have posted this message yesterday, but, as I received no answer, I am trying again. As the problem is really bad here, I would kindly ask the list members to tell me any experiences regarding this issue, like ways to set up squid (or samba) to use ntlm v1 or ntlm v2. Thanks again, Car

Re: [squid-users] dansguardian, page cannot be displayed, access denied

nima sadeghian wrote: Dear Carlos on Squid: http_port 3328 is this OK? but dansguardian shoots replys to squid and squid replys the page cannot be displaed ACCESS DENIED thnx again nima On 6/16/05, Carlos Zottmann <[EMAIL PROTECTED]> wrote: nima sadeghian wrote: hi all; I co

Re: [squid-users] ntlm_auth for windows clients that arent part of the default domain

Henrik Nordstrom wrote: On Thu, 16 Jun 2005, Festivus wrote: Ive got ntlm_auth working without any problems at my site for PCs that are a part of the same domain. Obviously PCs that arent part of the domain prompt the user for their username, password and domain. (This is actually the majori

Re: [squid-users] ntlm_auth for windows clients that arent part of the default domain

Henrik Nordstrom wrote: On Mon, 27 Jun 2005, Carlos Zottmann wrote: smb.conf has a parameter that might help you ... You should set "use default domain = yes" Does this really make any difference for NTLM authentication? It should make a huge difference for Basic authenticati

Re: [squid-users] ntlm_auth for windows clients that arent part of the default domain

Henrik Nordstrom wrote: On Mon, 27 Jun 2005, Carlos Zottmann wrote: I think that it makes difference for NTLM as we use DansGuardian as an upstream proxy, and we forward the client´s username. It is being sent to DansGuardian without the domain portion. Unfortunately I am not sure if this

Re: Enc: [Fwd: Re: [squid-users] Behaviour change in ntlm authentication - please help]

Henrik Nordstrom wrote: On Tue, 28 Jun 2005 [EMAIL PROTECTED] wrote: It is reserved for a long time (NTLM Authenticator output shows 86914.103 seconds), and it will never leave this state. Any ideas why the timeout is not working? Do you have ntlm challenge reuse enabled? If so try disabl

[squid-users] On-line monitoring of sites being accessed through squid

Hi !! Is there any on-line monitoring tool that is able to report the sites that are being acessed through squid, giving just a list of the sites that are being accessed, maybe with a counter of clients accessing it, and a sum of bytes transferred, or hits? Regards, Carlos.

[squid-users] Problem regardin denying access through squid

Hi !! We are facing a problem regarding denying access through squid. We use ntlm authentication, as well as basic authentication. We have set some http_access rules that denies access to some web sites, based on the external acl helper related to Microsoft AD Groups. These rules works fine, den

[squid-users] Http_access deny and fallback from ntlm to basic

Hi !! We are using ntlm authentication here, and some http_access rules denying access to some sites. The problem we are facing is that when a user hits a rule that denies access, squid falls back to basic authentication and prompts the user for a new username and password. How can we configure

[squid-users] Max Challgenge Reuse

Hi !! We are having some problems with our domain controllers that is slowing down squid during peak ours, due to ntlm authentication. We considered changing the value of Max_Challeng_Reuse from 0 to some higher value, in order to decrease the load on the domain controllers coming from squid, but

Re: [squid-users] Max Challgenge Reuse

2005/8/5, Henrik Nordstrom <[EMAIL PROTECTED]>: > On Wed, 3 Aug 2005, Kinkie wrote: > > > With max_challenge_reuse set to anything but 0, squid will perform a > > replay attack on the NTLM authentication to increase authentication > > performance. > > > > Everything should work more or less fine (

Re: [squid-users] Http_access deny and fallback from ntlm to basic

the installation of the security rollup, turned to work again ... Regards, Carlos. 2005/8/5, Henrik Nordstrom <[EMAIL PROTECTED]>: > On Tue, 2 Aug 2005, Carlos Zottmann wrote: > > > The problem we are facing is that when a user hits a rule that denies > > access, s

Re: AW: [squid-users] Windows update hangs

Hi everybody !! Don´t know a solution can be found here, but the following link show an article describing "How the windows update client determines wich proxy server to use ..." http://support.microsoft.com/?kbid=900935 Regards, Carlos. 2005/8/12, Lasse Mørk <[EMAIL PROTECTED]>: > Still runs t

[squid-users] Blocking Web bugs?

Hi !! Does anyone know a way to block web bugs (0x0 gifs) with squid? Thanks in advance, Carlos.

Re: [squid-users] Blocking Web bugs?

Hi Kevin !! Thanks for the answer I was afraid of something like that, but it is good to know it anyway ... Regards, Carlos. 2005/8/13, Kevin <[EMAIL PROTECTED]>: > On 8/12/05, Carlos Zottmann <[EMAIL PROTECTED]> wrote: > > Does anyone know a way to block web bugs

Re: [squid-users] Windows update hangs

Hi, I am facing the following problem with Windows Update ... It works nice with squid until it has to download any file ... At this point the windows update client sends a "HEAD" method to the site, and it gets Denied by squid ... I have already declared an acl for the HEAD method and allowed th

Re: [squid-users] Max Challgenge Reuse

Hi Henrik, We are preparing to test the Max Challenge Reuse parameter, but we were wondering if there is any reasonable value that we should start with ... Can you help me on this? Thanks in advance, Carlos. 2005/8/9, Henrik Nordstrom <[EMAIL PROTECTED]>: > On Fri, 5 Aug 2005, Carlos

Re: [squid-users] block a specific file

Hi !! You can use url_regex for that. I guess you can get instructions on how to use it on the squid faq or on the squid.conf contents. Regards, Carlos. 2005/8/22, John Halfpenny <[EMAIL PROTECTED]>: > > hi. > > > > does anyone know if squid can be configured to block a specific filename as

Re: [squid-users] Re: configuring Squid to authenticate AND to log users' access to forbidden sites.

Hi !! > > 1) My Squid.conf relevant lines below: > > > > [...] > > acl autenticados proxy_auth REQUIRED > > [...] > > acl liberado dstdom_regex "/etc/squid/liberado.txt" > > acl semacesso dstdom_regex "/etc/squid/semacesso.txt" > > [...] > > http_access allow autenticados > > > > http_access allo

Re: [squid-users] squid firwall rules for windowsupdate validation?

Hi!! Windows Update really has problems authenticating to squid, so you need to use some rules in order to get it working. The rules that we are using are the following: acl WindowsUpdateSites dstdomain .windowsupdate.com .windowsupdate.microsoft.com .update.microsoft.com Then, before the

Re: [squid-users] realplayer and squid

Hi !! By the time we configured Real Player access through squid, it wasn´t capable of authenticating. To solve this, we´ve created the following acl and access rules: acl RealPlayer browser R1 http_access allow RealPlayer Note that the http_access line must be placed before the line where you

Re: [squid-users] HOPSTER

Hi !! Hopster tunnels a lot of services through http ... We are blocking it by blocking the access to hopster servers at the firewall: the ip addresses are 62.116.83.62 and 62.116.21.242. Regards, Carlos. 2005/11/21, Rodrigo Benzaquen <[EMAIL PROTECTED]>: > Hi Guys, I have IM, MSN and Yahoo mess