On 3/8/2011 6:10 PM, bwright wrote:
It does do true content filtering... I was going to start looking into the
details (like if it can get users/groups from A.D. or squid)
but then I noticed it cost $$$ (and I would prefer avoid spending $$$ on the
project).
--
View this message in context:
It does do true content filtering... I was going to start looking into the
details (like if it can get users/groups from A.D. or squid)
but then I noticed it cost $$$ (and I would prefer avoid spending $$$ on the
project).
--
View this message in context:
http://squid-web-proxy-cache.1019090
I'll check it out... at first glance not sure if it does everything I want...
be able to tie in with Active Directory (users/groups) and do better than
url filtering (DG uses PICS categories and is a content filter not just
url)... but I'll look at it more.
--
View this message in context:
h
Thats a good idea... I can try that... I got a project thrown my way so not
sure I'll have time this week, but this week or next I will try it out and
see what I get.
--
View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-DG-Sandwich-Squid3-auth-DansGuardian-Squ
I heard that development of Dansguardian stopped, so I suggest to investigate
other solutions. You could reduce squid+DG+Squid to Squid+ufdbGuard.
ufdbGuard is a free URL filter and works with various URL database providers.
Marcus
bwright wrote:
Any other ideas?
I know there have to be
Is it possible for you to setup a dummy box for ONLY the Squid Auth, and
the other two services on a separate box, to see if there is any
performance gains? Chances are, it's the Kerb-Auth in general that is
tying things up -> DG, so try and eliminate system performance with all
3 running as being
Any other ideas?
I know there have to be a good amount of people running the sandwich
setup...
Pretty Please
--
View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-DG-Sandwich-Squid3-auth-DansGuardian-Squid3-proxy-tp3311884p3339327.html
Sent from the Squid
Basically DansGuardian needs a web proxy behind it to work. So some people
have used tiny proxy etc. But for larger environments it seems like squid
is normally used. Also I can't just combine them either b/c dansguardian
needs to know the username (so I can have different policies based on use
Then, perhaps you can try running the combined Squid (auth/cache) -> DG
-> (Internet), would that work?
>>> bwright 2/24/2011 1:42 PM >>>
When I combine the 2 config files and only have 1 instance of squid
running
it is almost instantaneous. I also tried just switching/swapping my
squid.conf fo
When I combine the 2 config files and only have 1 instance of squid running
it is almost instantaneous. I also tried just switching/swapping my
squid.conf for squid-auth.conf (to test just the auth part) and it is
almost instantaneous too.
DansGuardian is very extensive web filter: It can f
How long does the negotiate auth take to identify a user, even if run by
itself?
Also, what is the logic behind running three types of proxies on the
same hardware, where one instance of Squid can technically do all of the
above?
Perhaps I just don't know what Dansguardian does versus Squid's
cap
Alright so I made the adjustments now my squid-auth.conf looks like:
auth_param negotiate program /usr/lib/squid3/squid_kerb_auth -d
auth_param negotiate children 10
auth_param negotiate keep_alive on
cache_peer 127.0.0.1 parent 8080 0 no-query login=*:nopassword
acl AUTHENTICATED proxy_aut
I would like to recommend a few changes to the config of the (auth/no
cache) squid in the link below:
- http_access rules
http_access allow AUTHENTICATED
http_access deny all
- also
cache_log /dev/null
cache_store_log none
- for cache_dir, the default is "none", so just comment it out, and no
Anyone have any other ideas?!?!? Or something to try (to be able to find the
problem)
I am willing to try stuff, just need some direction.
--
View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-DG-Sandwich-Squid3-auth-DansGuardian-Squid3-proxy-tp3311884p33227
So I did a little testing... and may have jumped the gun last night thinking
it was related to swap I had access to some stats but not to test
I tested this morning with only me on just trying to do a google search for
"hello world" took over 2 mins nothing else was open internet wis
I think your onto something with the swap!!!
Its a citrix vm and I took a look at the performance graph and the both
partitions were spiking (only 1 primary, 2nd is swap).
Me and 1 other IT guy were the only 2 connected so not much activity was
going on. I used the ubuntu default install fo
16 matches
Mail list logo
