Re: [squid-users] cache manager access from web

2010-02-17 Thread Matus UHLAR - fantomas
> > On 16.02.10 13:59, Amos Jeffries wrote: > >> You may (or may not) hit a problem after trying that because the cache > >> mgr access uses its own protocol cache_object:// not htps://. An SSL > >> tunnel with mgr access going through it should not have that problem > >> but one never knows. > O

Re: [squid-users] cache manager access from web

2010-02-16 Thread Amos Jeffries
On Tue, 16 Feb 2010 14:20:15 +0100, Matus UHLAR - fantomas wrote: >> > On 14.02.10 01:32, J. Webster wrote: >> >> Would that work with: >> >> http_access deny manager CONNECT !SSL_ports > >> On Mon, 15 Feb 2010 15:32:30 +0100, Matus UHLAR - fantomas >> wrote: >> > no, the manager is not fetched

Re: [squid-users] cache manager access from web

2010-02-16 Thread Matus UHLAR - fantomas
> > On 14.02.10 01:32, J. Webster wrote: > >> Would that work with: > >> http_access deny manager CONNECT !SSL_ports > On Mon, 15 Feb 2010 15:32:30 +0100, Matus UHLAR - fantomas > wrote: > > no, the manager is not fetched by CONNECT request (unless something is > > broken). > > > > you need http

Re: [squid-users] cache manager access from web

2010-02-15 Thread Amos Jeffries
J. Webster wrote: Would that work with: http_access deny manager CONNECT !SSL_ports No. (The other replies explain why). To encrypt the requests you need to setup an https_port to receive encrypted traffic, and then some form of SSL tunnel to do the encryption (the tools bundled with Squid

Re: [squid-users] cache manager access from web

2010-02-15 Thread Amos Jeffries
k >> > To: squid-users@squid-cache.org >> > Subject: Re: [squid-users] cache manager access from web >> > >> > On 11.02.10 10:46, J. Webster wrote: >> >> I have changed the config and can now login to the cache manager. >> >> This was in the

Re: [squid-users] cache manager access from web

2010-02-15 Thread Matus UHLAR - fantomas
https port. that should work. note that you should access manager directly not using the proxy. > > > Date: Sat, 13 Feb 2010 20:58:11 +0100 > > From: uh...@fantomas.sk > > To: squid-users@squid-cache.org > > Subject: Re: [squid-user

RE: [squid-users] cache manager access from web

2010-02-13 Thread J. Webster
Would that work with: http_access deny manager CONNECT !SSL_ports > Date: Sat, 13 Feb 2010 20:58:11 +0100 > From: uh...@fantomas.sk > To: squid-users@squid-cache.org > Subject: Re: [squid-users] cache manager access from web > > On

Re: [squid-users] cache manager access from web

2010-02-13 Thread Matus UHLAR - fantomas
On 11.02.10 10:46, J. Webster wrote: > I have changed the config and can now login to the cache manager. > This was in the conf already: > http_access deny CONNECT !SSL_ports > > So, the issue remains whether allowing password access to the cache manager > is enough. > How else can this be made m

Re: [squid-users] cache manager access from web

2010-02-11 Thread Chris Robertson
J. Webster wrote: I have changed the config and can now login to the cache manager. This was in the conf already: http_access deny CONNECT !SSL_ports The placement of that line is important. Squid's access controls work on a "first match" basis. I strongly advise reading the FAQ section o

RE: [squid-users] cache manager access from web

2010-02-11 Thread J. Webster
access it is through a public IP address. > Date: Wed, 10 Feb 2010 12:49:36 -0900 > From: crobert...@gci.net > To: squid-users@squid-cache.org > Subject: Re: [squid-users] cache manager access from web > > J. Webster wrote: >> D

Re: [squid-users] cache manager access from web

2010-02-10 Thread Chris Robertson
J. Webster wrote: Doesn't the fact that the manager needs a password in previous config lines mean that they can't access it? Fair enough, if you are content with that. the ncsa_users is only for http access? The cachemgr interface is accessed via HTTP. It uses a specific request m

RE: [squid-users] cache manager access from web

2010-02-10 Thread J. Webster
ncsa_users is only for http access? > Date: Tue, 9 Feb 2010 16:14:31 -0900 > From: crobert...@gci.net > To: squid-users@squid-cache.org > Subject: Re: [squid-users] cache manager access from web > > Amos Jeffries wrote: >> J. Webster wrote: &g

Re: [squid-users] cache manager access from web

2010-02-09 Thread Chris Robertson
Amos Jeffries wrote: J. Webster wrote: I have followed the tutorial here: http://wiki.squid-cache.org/SquidFaq/CacheManager and set up acls to access the cache manager cgi on my server. I have to access this externally for the moment as that is the only access to the server that I have (SSH or

Re: [squid-users] cache manager access from web

2010-02-08 Thread Amos Jeffries
J. Webster wrote: I have followed the tutorial here: http://wiki.squid-cache.org/SquidFaq/CacheManager and set up acls to access the cache manager cgi on my server. I have to access this externally for the moment as that is the only access to the server that I have (SSH or web). The cache manag

[squid-users] cache manager access from web

2010-02-08 Thread J. Webster
I have followed the tutorial here: http://wiki.squid-cache.org/SquidFaq/CacheManager and set up acls to access the cache manager cgi on my server. I have to access this externally for the moment as that is the only access to the server that I have (SSH or web). The cache manager login appears

[squid-users] cache manager access from web

2010-02-07 Thread J. Webster
I have followed the tutorial here: http://wiki.squid-cache.org/SquidFaq/CacheManager and set up acls to access the cache manager cgi on my server. I have to access this externally for the moment as that is the only access to the server that I have (SSH or web). The cache manager login appears w