[squid-users] windows server 2003

2003-07-18 Thread Mrvka Andreas
hi guys! is there a difference between the new windows server 2003 and win2k or winxp? i have a suse linux squid box with ntlm autentication method via ldap to our active directory primary domain controller. i recently installed on a machine windows server 2003, configured as usual the internet

Re: [squid-users] What if I have no permission to write into /usr/local?

2003-07-18 Thread Henrik Nordstrom
On Friday 18 July 2003 01.35, Adam wrote: I totally agree but some companies have been using the same port for many, many years (back in the Netscape Proxy days) and it is just fixed/hard-coded everywhere. Yes? So either NAT the port, or tell your OS to allow applications to bind to low

Re: [squid-users] What if I have no permission to write into /usr/local?

2003-07-18 Thread Henrik Nordstrom
On Friday 18 July 2003 02.25, Tan Jun Min wrote: you can do a port mapping using rinetd to redirect the request to different port. This will unfortunately loose the source IP address of the clients, but in principle correct. -- Donations welcome if you consider my Free Squid support helpful.

Re: [squid-users] reconfiguring delay pools enabled

2003-07-18 Thread Aqil
Sorry for bothering all of you again, but I think my problem is solved. There had to be 4 variables instead of three. I forgot that I've chosen class 3 :) But one more thing about delay pool... Imagine I have 500 users, but statistically there are only 100 users log in to squid at the same

Re: [squid-users] windows server 2003

2003-07-18 Thread Serassio Guido
Hi, At 10.01 18/07/2003, Mrvka Andreas wrote: hi guys! is there a difference between the new windows server 2003 and win2k or winxp? i have a suse linux squid box with ntlm autentication method via ldap to our active directory primary domain controller. i recently installed on a machine windows

Re: [squid-users] HTTP/1.0 403 Forbidden problem

2003-07-18 Thread Henrik Nordstrom
On Friday 18 July 2003 02.17, Yanyan Wang wrote: because the squid is installed on localhost, I specify the http port to 8080, and I have apache running at port 8000 on localhost too. But it always give me the error html file: HTTP/1.0 403 Forbidden See the attached QUICKSTART guide This

Re: [squid-users] AUFS failures on Solaris/Sparc? (Squid2.5.STABLE3)

2003-07-18 Thread Henrik Nordstrom
On Friday 18 July 2003 02.53, [EMAIL PROTECTED] wrote: After a reboot (emergency shutdown), I find that the squid process fails to restart successfully, and each time an attempt is made to restart the process dies here: assertion failed: store_rebuild.c:79: store_errors == 0

[squid-users] Squid Auth Sock

2003-07-18 Thread Arief Kurniawan
Done with Squid-SNMP-Calamaris installation. Now trying to get Squid work with NT domain group authentication. Some docs on the net confusing me said that it only works with some specific old version of squid. Any updated docs I can use to make it possible ?. Another thing that I can't find in

Re: [squid-users] External logging capability

2003-07-18 Thread Henrik Nordstrom
On Friday 18 July 2003 01.49, Tony Melia (DMS) wrote: Does anybody know the status of this development? According to http://devel.squid-cache.org/stale_projects.html#external_logger it is 'stale', does that mean it has been dropped? It means there is no developer working on the project and

Re: [squid-users] reconfiguring delay pools enabled

2003-07-18 Thread Henrik Nordstrom
On Friday 18 July 2003 06.38, Aqil wrote: I added some lines for the purpose of limiting user bandwidth usage, but I got this error below ... [EMAIL PROTECTED] aqil]# /usr/local/squid/sbin/squid -k reconfigure FATAL: Bungled squid.conf line 2886: delay_parameters 1 -1/-1 8000/8000 Have you

Re: [squid-users] windows server 2003

2003-07-18 Thread Henrik Nordstrom
On Friday 18 July 2003 10.01, Mrvka Andreas wrote: is there a difference between the new windows server 2003 and win2k or winxp? Yes. It is a new OS with new security settings. i have a suse linux squid box with ntlm autentication method via ldap to our active directory primary domain

Re: [squid-users] reconfiguring delay pools enabled

2003-07-18 Thread Henrik Nordstrom
On Friday 18 July 2003 10.18, Aqil wrote: Imagine I have 500 users, but statistically there are only 100 users log in to squid at the same time. And imagine I have bandwidth of 256kbps... How do you think the most efficient bandwidth limiting for my users ? Depends on your network layout.

AW: [squid-users] windows server 2003

2003-07-18 Thread Mrvka Andreas
-Ursprungliche Nachricht- Von: Serassio Guido [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 18. Juli 2003 10:25 i recently installed on a machine windows server 2003, configured as usual the internet explorer (6.0) but there i cannot browse through the internet. has anyone

AW: [squid-users] windows server 2003

2003-07-18 Thread Mrvka Andreas
-Ursprungliche Nachricht- Von: Serassio Guido [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 18. Juli 2003 10:25 i recently installed on a machine windows server 2003, configured as usual the internet explorer (6.0) but there i cannot browse through the internet. has anyone

Re: [squid-users] reconfiguring delay pools enabled

2003-07-18 Thread Aqil
--- Henrik Nordstrom [EMAIL PROTECTED] a écrit : If all users come from the same class-C network (/24) then use a single class 2 pool. If the users come from a wider network then use a single class 3 pool. In both specify only aggregate and per-user pool limits (i.e. use -1/-1 for

[squid-users] diskd error messages... :(

2003-07-18 Thread Tommy C Wiratama
dear all... why my diskd showed the error message like this : Jul 18 17:04:51 calculus squid[22823]: ctx: enter level 0: 'http://202.59.204.27/mrtg/202.59.204.27_21-day.png' Jul 18 17:04:51 calculus squid[22823]: storeDiskdSend: msgsnd: (35) Resource temporarily unavailable Jul 18 17:04:51

[squid-users] Delay pool error

2003-07-18 Thread anant shintre
I am giving command /usr/local/squid/sbin/squid -k parse which giving me following error. [EMAIL PROTECTED] root]# /usr/local/squid/sbin/squid -k parse 2003/07/18 15:47:42| aclParseIpData: WARNING: Netmask masks away part of the specified IP in '192.168.0.1/255.255.255.0' 2003/07/18 15:47:42|

Re: [squid-users] reconfiguring delay pools enabled

2003-07-18 Thread Henrik Nordstrom
fre 2003-07-18 klockan 11.23 skrev Aqil: How can I make two kind of delay pool size ? i.e. one for downloading and the one for browsing ? You don't. You make a single pool suitable for both. This is why there is two parameters (pool size and refill rate). Regards Henrik -- Donations

Re: [squid-users] DNS Local DNS Internet

2003-07-18 Thread Antony Stone
On Friday 18 July 2003 10:08 am, ROUTIER Gilles wrote: Hy, In our company, we have a local DNS and a DNS Internet. How to make so that squid carries out the requests on the internal DNS for the internal requests and DNS Internet for requests Internet. You're providing a squid server to be

Re: [squid-users] Delay pool error

2003-07-18 Thread Antony Stone
On Friday 18 July 2003 11:19 am, anant shintre wrote: I have changed only this line acl localnet src 192.168.1.0/255.255.255.0 from default 'squid.conf' to acl localnet src 192.168.0.1/255.255.255.0 Any idea about error. 192.168.0.1/255.255.255.0 makes no sense. If you want to match all

Re: [squid-users] DNS Local DNS Internet

2003-07-18 Thread Henrik Nordstrom
fre 2003-07-18 klockan 11.08 skrev ROUTIER Gilles: In our company, we have a local DNS and a DNS Internet. How to make so that squid carries out the requests on the internal DNS for the internal requests and DNS Internet for requests Internet. By setting up a DNS server knowing about both

Re: [squid-users] diskd error messages... :(

2003-07-18 Thread Henrik Nordstrom
fre 2003-07-18 klockan 11.59 skrev Tommy C Wiratama: dear all... why my diskd showed the error message like this : Jul 18 17:04:51 calculus squid[22823]: storeDiskdSend: msgsnd: (35) Resource temporarily unavailable Jul 18 17:04:51 calculus squid[22823]: storeDiskdSend OPEN: (35) Resource

Re: [squid-users] Delay pool error

2003-07-18 Thread Henrik Nordstrom
fre 2003-07-18 klockan 12.19 skrev anant shintre: 2003/07/18 15:47:42| aclParseIpData: WARNING: Netmask masks away part of the specified IP in '192.168.0.1/255.255.255.0' You probably do not want a netmaks there... netmasks is used for specifying whole networks, not individual IP addresses.

Re: [squid-users] Delay pool error

2003-07-18 Thread Antony Stone
On Friday 18 July 2003 11:58 am, anant shintre wrote: As suggested I have changed it to 192.168.0.0 and run following command. [EMAIL PROTECTED] root]# /usr/local/squid/sbin/squid -k parse which give following following error. I have configure squid with delay pool oprion by ./configure

[squid-users] Squid logs not rotating

2003-07-18 Thread daniel . jarboe
After adding cache_access_log /var/www/html/squid/daily/logs/access.log cache_log /var/www/html/squid/daily/logs/cache.log squid -k rotate no longer rotates the logs. Is there any reason why specifying non-default log locations would conflict with log rotation? My squid.conf is: http_port 80

RE: [squid-users] Squid Auth Sock

2003-07-18 Thread Adam Aube
Now trying to get Squid work with NT domain group authentication. Any updated docs I can use to make it possible ?. Search the archive for winbind_group and wb_group. Another thing that I can't find in Squids' Website is howto use squid as a sock server. I heard with some tricks it could

Re: [squid-users] Delay pool error

2003-07-18 Thread Chijioke Kalu
Then, you dont know what your missing or you got alot of bandwidth to BURN!!! Kalu I cannot answer about delay pools - I have never used them. Maybe someone else can comment. Antony. On Friday 18 July 2003 11:58 am, anant shintre wrote: As suggested I have changed it to 192.168.0.0 and

Re: [squid-users] Squid Auth Sock

2003-07-18 Thread Henrik Nordstrom
fre 2003-07-18 klockan 10.31 skrev Arief Kurniawan: Another thing that I can't find in Squids' Website is howto use squid as a sock server. I heard with some tricks it could be done. Squid is a HTTP proxy, not a SOCKS server. You can run both Squid and a SOCKS server on the same server if

Re: [squid-users] Squid logs not rotating

2003-07-18 Thread Henrik Nordstrom
fre 2003-07-18 klockan 13.49 skrev [EMAIL PROTECTED]: squid -k rotate no longer rotates the logs. Is there anything said in cache.log? Is there any reason why specifying non-default log locations would conflict with log rotation? None. If nothing is said in cache.log then most likely the

RE: [squid-users] Squid logs not rotating

2003-07-18 Thread daniel . jarboe
squid -k rotate no longer rotates the logs. Is there anything said in cache.log? Is there any reason why specifying non-default log locations would conflict with log rotation? None. If nothing is said in cache.log then most likely the pid file has been corrupted. I had

[squid-users] ftp sites do not open

2003-07-18 Thread babar haq
i am running transparent squid by intercepting port 80 if i try and download redhat cds from the ftp mirrors case 1 without giveing the proxy in the browser i get page not found error case 2 if i give the proxy in the browser i get winodws error saying Windows cannot access this folder. Make

[squid-users] Squid 'visible_hostname' error.

2003-07-18 Thread anant shintre
After recompiling error about delay_pool is resolved. When I give command /usr/local/squid/sbin/squid -k parse It gives me following erroe. FATAL: Could not determine fully qualified hostname. Please set 'visible_hostname' Squid Cache (Version 2.5.STABLE3): Terminated abnormally. CPU Usage:

Re: [squid-users] ftp sites do not open

2003-07-18 Thread Henrik Nordstrom
fre 2003-07-18 klockan 15.52 skrev babar haq: i am running transparent squid by intercepting port 80 if i try and download redhat cds from the ftp mirrors case 1 without giveing the proxy in the browser i get page not found error Squid is not involved on direct FTP access. Squid is a HTTP

Re: [squid-users] Squid 'visible_hostname' error.

2003-07-18 Thread Henrik Nordstrom
fre 2003-07-18 klockan 16.32 skrev anant shintre: I don't know where to set 'visible_hostname. See squid.conf. Regards Henrik -- Donations welcome if you consider my Free Squid support helpful. https://www.paypal.com/xclick/business=hno%40squid-cache.org Please consult the Squid FAQ and

[squid-users] FTP requests time out

2003-07-18 Thread David Brodbeck
I apologize if this is a FAQ, but I've done a Google search and looked at the Squid FAQ without finding the answer. FTP requests from web browsers time out. The squid cache is behind an OpenBSD firewall that's doing FTP proxying, but I know the firewall is not the issue because doing transfers

[squid-users] Problem Running Squid.

2003-07-18 Thread anant shintre
I think Squid is compiled, configured and installed properly. I am following Squid FAQ in which it says NOTE: If you run Squid as root then you may need to first create /usr/local/squid/var/logs and your cache_dir directories and assign ownership of these to the cache_effective_user configured in

RE: [squid-users] Problem Running Squid.

2003-07-18 Thread Adam Aube
Following lines are appearing in the file cache.log. 2003/07/18 20:32:30| Accepting HTTP connections at 0.0.0.0, port 8080, FD 10. 2003/07/18 20:32:30| Accepting ICP messages at 0.0.0.0, port 3130, FD 11. Does this mean that there is some error. No, this is normal. Also access.log

[squid-users] Squid but propably off topic?

2003-07-18 Thread Schelstraete Bart
Hello, I 'm facing a problem with my Squid proxy server, and I hope maybe of you can help me. (the problem is maybe not squid related) I installed Squid 2.5 on a Linux server which is currently live (RH 8.0). This machine is a 2 CPU machine, with 1 GIG RAM, 2 x 100 NIC. (in fact this are 1G

[squid-users] Transperent Proxy

2003-07-18 Thread anant shintre
Squid is running O.K. Presently I get access log only of those clients where I have changed proxy settings. It is not possible to go to all machines and change the same. I thing I can use transperent proxy for some. Squid FAQ does not give information about transperent proxy. Please suggest me

Re: [squid-users] Transperent Proxy

2003-07-18 Thread Chijioke Kalu
lo, if ur Squid port is 3128 then the correct iptable rule to redirect to squid is iptables -t nat -A PREROUTING -p TCP --dport 80 -j REDIRECT --to-port 3128 I am also assuming your doing NAT or are u talking about TPROXY? Regards, K Squid is running O.K. Presently I get access log only of

RE: [squid-users] Transperent Proxy

2003-07-18 Thread Adam Aube
Presently I get access log only of those clients where I have changed proxy settings. It is not possible to go to all machines and change the same. I thing I can use transperent proxy for some. Transparent proxying is a hack that breaks the HTTP spec and can cause all sorts of problems. You

[squid-users] Accessing external web server

2003-07-18 Thread Aidan Gregory
We have a very simple test setup: 1 box (Sun running Solaris 8) running Squid 1 box (Sun running Solaris 8) running DNS Inside the firewall the domain name is mydomain.com. Outside the firewall we also have a web server: www.mydomain.com . Users can browse the external web server from inside

Re: [squid-users] Accessing external web server

2003-07-18 Thread Antony Stone
On Friday 18 July 2003 6:38 pm, Aidan Gregory wrote: We have a very simple test setup: 1 box (Sun running Solaris 8) running Squid 1 box (Sun running Solaris 8) running DNS Inside the firewall the domain name is mydomain.com. Outside the firewall we also have a web server: www.mydomain.com

Re: [squid-users] Accessing external web server

2003-07-18 Thread Adam
Aidan wrote: 1 box (Sun running Solaris 8) running Squid 1 box (Sun running Solaris 8) running DNS Do the clients (users) use a different DNS server or the same Solaris 8 DNS server? What is the result of an nslookup www.mydomain.com when done on the Squid box and if it is wrong, is it also

[squid-users] restricting download of .exe files ....

2003-07-18 Thread Kenn Murrah
Greetings. How do I block the download of .exe files via the browser? I want to block .exe, zip, and other potentially executable files ... (I tried to find a way to do this with acl, but couldn't find anything that seemed to specifically apply to my problem). thanks in advance for the

RE: [squid-users] restricting download of .exe files ....

2003-07-18 Thread Adam Aube
How do I block the download of .exe files via the browser? I want to block .exe, zip, and other potentially executable files ... acl progs urlpath_regex -i \.exe$ http_access deny progs The -i makes the matching case insensitive, and the $ makes it match at the end of the line. This was

Re: [squid-users] Transperent Proxy

2003-07-18 Thread Henrik Nordstrom
On Friday 18 July 2003 18.51, anant shintre wrote: Squid is running O.K. Presently I get access log only of those clients where I have changed proxy settings. It is not possible to go to all machines and change the same. I thing I can use transperent proxy for some. Squid FAQ does not give

Re: [squid-users] Squid but propably off topic?

2003-07-18 Thread Schelstraete Bart
Henrik Nordstrom wrote: Doublecheck the network connectivity of the Linux box. Maybe there is a disagreement on half/full duplex etc? Henrik, That's always this first thing that I check, and those settings are correct. Bart

Re: [squid-users] restricting download of .exe files ....

2003-07-18 Thread Kenn Murrah
Adam Aube wrote: How do I block the download of .exe files via the browser? I want to block .exe, zip, and other potentially executable files ... acl progs urlpath_regex -i \.exe$ http_access deny progs The -i makes the matching case insensitive, and the $ makes it match at the end of the

Re: [squid-users] restricting download of .exe files ....

2003-07-18 Thread Schelstraete Bart
Thanks for the help (I actually did try to find this answer but couldn't ... and decided to ask the list for its help (thinking that was, in fact, the purpose of the list.)) Anyway, let me ask a followup question what if I want to disallow all .exe files EXCEPT those from microsoft.com?

RE: [squid-users] restricting download of .exe files ....

2003-07-18 Thread Mark A Lewis
This should be written up for the FAQ with a few examples. Has to be one of the most common questions that passes this list. -Original Message- From: Schelstraete Bart [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 4:16 PM To: Kenn Murrah Cc: 'squid' Subject: Re: [squid-users]

RE: [squid-users] restricting download of .exe files ....

2003-07-18 Thread Chijioke Kalu
Original Message Follows From: Adam Aube [EMAIL PROTECTED] To: 'squid' [EMAIL PROTECTED] Subject: RE: [squid-users] restricting download of .exe files Date: Fri, 18 Jul 2003 15:57:28 -0400 MIME-Version: 1.0 Received: from squid-cache.org ([206.168.0.9]) by mc10-f26.bay6.hotmail.com

[squid-users] Refresh Cache

2003-07-18 Thread Richard Sumilang
Is there a way to configure squid to empty it's cache every X amount of days?

Re: [squid-users] Refresh Cache

2003-07-18 Thread Schelstraete Bart
Richard Sumilang wrote: Is there a way to configure squid to empty it's cache every X amount of days? Hello Richard, I don't think you want to clear the complete squid cache after XX days, why should you do that? If you want to refresh pages after an amount of time, you can use the

Re: [squid-users] restricting download of .exe files ....

2003-07-18 Thread Schelstraete Bart
HEllo, An example: --- acl microsoft dstdomain .microsoft.com http_access allow microsoft acl progs urlpath_regex -i \.exe$ http_access deny progs ... http_access deny all --- In that order, every access to microsoft is allowed even .exe files are allowed. On all other site , exe files are

Re: [squid-users] Refresh Cache

2003-07-18 Thread Adam
Richard wrote: Is there a way to configure squid to empty it's cache every X amount of days? Kind of defeats the purpose. Why not just disable caching with the no_cache directive as explained in the FAQ: http://www.squid-cache.org/Doc/FAQ/FAQ-4.html#ss4.20 Otherwise, if you really wanted to

[squid-users] keep ip source address in logs

2003-07-18 Thread Ivan Rodriguez
Hello list i have a little problem i use squid version 2.5.STABLE1, all my users use the server proxy but i have the web page for my intranet so i use the file proxy.pac where we had configured the ip local address to be routed directly however not all users use proxy.pac and the apache logs

Re: [squid-users] restricting download of .exe files ....

2003-07-18 Thread Adam Aube
Thanks for the help You're quite welcome. (I actually did try to find this answer but couldn't and decided to ask the list for its help (thinking that was, in fact, the purpose of the list.)) Yes, that is the purpose of the list. However, you did not indicate in your question that you

RE: [squid-users] Transperent Proxy

2003-07-18 Thread Damian-Grint Philip
Anant, I've been using Squid/WCCP for transparently proxying about 800 PCs for a while now - you have to dig about for all the correct bits, but it's very slick when you finally get it right. My config is: - Redhat 7.2 with minimum packages - 2.4.18 kernel with v1.3 source for ip_wccp.c from:

Re: [squid-users] keep ip source address in logs

2003-07-18 Thread Adam Aube
all my users use the server proxy but i have the web page for my intranet so i use the file proxy.pac where we had configured the ip local address to be routed directly however not all users use proxy.pac and the apache logs for my web page intranet.domain appear with the ip address of the

[squid-users] TCP_MISS/000

2003-07-18 Thread Wei Keong
Hi, Could someone help to explain what is TCP_MISS/000 and what could have causes it? Is there any difference between the two? TCP_MISS/000 0 GET http://www.abc.com - NONE/- - TCP_MISS/000 0 GET http://www.abc.com - DIRECT/x.x.x.x - Thank you. Rgds, Wei Keong

Re: [squid-users] TCP_MISS/000

2003-07-18 Thread Robert Collins
On Sat, 2003-07-19 at 13:22, Wei Keong wrote: Hi, Could someone help to explain what is TCP_MISS/000 and what could have causes it? Is there any difference between the two? What does squid --version show? Rob -- GPG key available at: http://members.aardvark.net.au/lifeless/keys.txt.

[squid-users] Running squid -k reconfigure frequently

2003-07-18 Thread Steve Cody
Hello all, I would like to know if there is a negative impact on a system, or on Squid, if the squid -k reconfigure command is ran at a frequent interval. For example, I would like to run it about every 2 minutes to make user changes take effect rapidly. Is that going to be a problem? If

Re: [squid-users] Running squid -k reconfigure frequently

2003-07-18 Thread Robert Collins
On Sat, 2003-07-19 at 14:31, Steve Cody wrote: Hello all, I would like to know if there is a negative impact on a system, or on Squid, if the squid -k reconfigure command is ran at a frequent interval. For example, I would like to run it about every 2 minutes to make user changes take