[squid-users] How to Block SpyWare?

2004-08-25 Thread Flavio Borup
I have ways to Block SpyWare?
There is a blacklist?


Here some examples of Spywares detected today on my machine:

==
Ad-aware 6 Scanning Result, 25-8-2004 15:51:20
180SolutionsProcessData Minerc:\temp\msbb.exe
OtherProcessData Minerc:\program files\bullseye network\bin\bargains.exe
MinerHKEY_LOCAL_MACHINE:Software\Microsoft\Windows\CurrentVersion\Uninstall\
msbb\
BargainBuddyRegKeyData MinerHKEY_CLASSES_ROOT:apuc.urlcatcher\
MinerHKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\B
rowser Helper VX2RegKeyData
MinerHKEY_CLASSES_ROOT:CLSID\{607d-d204-42c7-8e46-216055bf9918}\
Tracking CookieFileData Minerc:\documents and
[EMAIL PROTECTED]
==




[squid-users] How can i tell, if Squid is compiled with NTLM support?

2004-08-20 Thread Flavio Borup

command ldd /usr/sbin/squid can help?
command strings /usr/sbin/squid can help?

(--enable-auth=ntlm,basic)



[squid-users] Customizing ERR_ACCESS_DENIED

2004-05-25 Thread Flavio Borup
I modified the ERR_ACCESS_DENIED file with a onel-line HTML, using a
http refresh method
I would like to redirect very fast, so i use a time of zero, but even
in that way, appears on the botton, a squid customized message showing
the version of the squid and other infos

What can i do to not show any squid HTML, doing only a fast redirect
to another URL?




Re: [squid-users] hardware requirements

2004-05-25 Thread Flavio Borup
I have a .TXT file with aprox =~ 1.7 MB of denied URLs
The denied URLs .TXT were imported from MS ISA Server Web-Cache-Firewall solution
The .TXT have one URL per line, sometimes in the format: domain.tld, but sometimes in 
the format *.domain.tld

Question 1) Can i use the .TXT as BlackList in Squid ?

Question 2) A huge file like that can impose severe restrictions in performance?
(Pentium III, 128 RAM, IDE 5.200 RPM disk)


[squid-users] There is a size limit in the access.log?

2004-05-07 Thread Flavio Borup
Really, the system is a Stable1, but i would like to know if there is
a limitation in the size of the access.log

- Original Message - 
  First thing to do : you are running 2.5.STABLE1 which contains 100's
  of bugs so to speak.




[squid-users] Squid stops with a 131 MB access.log

2004-05-06 Thread Flavio Borup
Conectiva Linux 8 Kernel 2.4.18  (Conectiva is a Brazilian distribution based on Red 
Hat)

For the second time in less than one month, my Squid stops when the access.log reaches 
131 MB
There is some limitation in log file sizes? (Pentium III-500, 128 RAM, /var with 3.6 
GB free)

My logrotate does not work (when i use logrotate with debug, state that 
logrotate.status could not be fond, but the file was there, with chmod 777)

I do a squid -k rotate and the logs were roatetd correctly

Someone can send me a sample of a logrotate.conf/logrotate.d/squid files?




Re: [squid-users] command for authentification Basic

2004-05-05 Thread Flavio Borup
How can i authenticate to my regular /etc/passwd - /etc/shadow?
I'd prefer to use my regular user accounst crated in my passwd/shadow
files instead another file to manage

- Original Message - 
htpasswd -cb /your/password/file username password
htpasswd -b /your/password/file username password




Re: [squid-users] Authentication to Active Directory

2004-05-03 Thread Flavio Borup
In my opinion I don't need the NTLM stuff when I use the AD system
Is this correct ?

No. When a client does not recognize Kerberos (Win 9X, NT) it falls
back to NTLM
(My area of knowledge is MS,  not Linux)
I think Squid will act like a MS client that dos not support Kerberos




[squid-users] NTLM Auth without SAMBA

2004-04-27 Thread Flavio Borup
I'm really confused, please help me.

I want to make Squid 2.5 (most of the time on RH9) to verifiy if the
user was authenticated in a MS Domain
I have a customer with this feature, using fakeauth. In the Logs, the
names of the users are not important, the important, is: The user must
be an authenticated user. The Browser, also, must be configured to be
Proxy Client.

How can i compile Squid to support NTLM authentication?

Some oppinios are very differente and use differente ./configure
parameters, as we can see here:
Some use NTLMSSP, some uses fakeuauth, som uses both...

1st guy:
 I use:  '--enable-ntlm-auth-helpers=NTLMSSP fakeauth no_check'

2nd guy
Here is my squid compile parameters:
--enable-ntlm-auth-helpers=fakeauth,no_check,SMB,winbind \

3rd guy:
2. howto get NTLM authentication working
- download the source
- configure with (at a minimum) --enable-ntlm-authentication and
--enable-ntlm-auth-modules=NTLMSSP



Here the squid.conf of a custome wich succesfully authenticate user
before grant internet access

=== Sample ===
auth_param ntlm program /usr/local/squid/libexec/fakeauth_auth
DOMAIN/SERVERNAME
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
acl DOM proxy_auth_regex -i DOMAIN\\
http_access allow DOM
http_access deny all
=== Sample ===