Re: [squid-users] Windows update hangs

2005-08-15 Thread Lasse Mørk
Might be an option... How do I do that? I have tried acl WIN1 dstdomain update.microsoft.com acl WIN2 dstdomain windowsupdate.microsoft.com acl WIN3 dstdomain download.microsoft.com always_direct allow WIN1 always_direct allow WIN2 always_direct allow WIN3 But it still prompts for auth. Are

[squid-users] SQUID_LDAP_AUTH and Active Directory---Strange Effect

2005-08-15 Thread Stefan . Vogel
Hello, I have a Squid 2.5stable10 running with LDAP_Auth and ldap Group authentication, running against one of our Domain Controllers Everything is fine so far, and (allmost) everyone can surf the internet. BUT: A few users get an ERR success Message when executing the squid_ldap_auth script

Re: [squid-users] Windows update hangs

2005-08-15 Thread Tim Bates
That's the wrong options if you are doing the authentication locally. always_direct is for bypassing parent proxies. I think what you want to do is to use http_access allow WIN1 (and so on) as seperate ACLs to your main one that allows your clients to access. Of course, as always, I could be

Re: [squid-users] How make the Squid as transparent proxy on x86 Solaris 10?

2005-08-15 Thread Serassio Guido
Hi Victor, Il 08.38 15/08/2005 Victor Belous ha scritto: Thanks, Serassio. Probably, will soon released next version/revision Squid with fixed bug. And I try use current patch now. Victor Belous. I'm working on the problem, take a look on both bug #199 and #1374. Regards Guido -

Re: [squid-users] Windows update hangs

2005-08-15 Thread Lasse Mørk
That did'n work. It still prompts for user and password :( That's the wrong options if you are doing the authentication locally. always_direct is for bypassing parent proxies. I think what you want to do is to use http_access allow WIN1 (and so on) as seperate ACLs to your main one that

[squid-users] tcp_outgoing_address and external ACL not reliable

2005-08-15 Thread m . stiefenhofer
Hi, we're using Squid with NTLM authentication and an external ACL (wb_group) for windows group based authorization - which was working fine for years. Now we've got an upstream proxy as content filter. The aim is to submit windows group information to the upstream content filter for using

[squid-users] ssl proxy

2005-08-15 Thread Jeff Pan
HI,all: Because some of our servers need to connect to internet via SSL,so I want to config a squid proxy for SSL. But I have no ideas about this case,do u everyone give some advices to me? tks more. -- Jeff Pan [EMAIL PROTECTED] -- http://www.fastmail.fm - Accessible with your email

[squid-users] squid dies

2005-08-15 Thread lokesh.khanna
HI I am running squid in transparent mode on red hat 9 box. I am using squid 2.5 stable 10. I noticed during heavy load my squid stop responding. I can see squid daemon is running. I don't see any error on cache.log file. All messages I get is of windows update. Is it window update which is

Re: [squid-users] Blocking Web bugs?

2005-08-15 Thread Carlos Zottmann
Hi Kevin !! Thanks for the answer I was afraid of something like that, but it is good to know it anyway ... Regards, Carlos. 2005/8/13, Kevin [EMAIL PROTECTED]: On 8/12/05, Carlos Zottmann [EMAIL PROTECTED] wrote: Does anyone know a way to block web bugs (0x0 gifs) with squid?

Re: [squid-users] max connections

2005-08-15 Thread Kashif Ali Bukhari
On 8/13/05, [EMAIL PROTECTED] squid server and other users were not able to browse for some time. Will it be useful here? of course yes -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Saturday, August 13, 2005 10:04 AM To: Lokesh Khanna Cc:

Re: [squid-users] squid dies

2005-08-15 Thread Kashif Ali Bukhari
On 8/15/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I don't see any error on cache.log file. All messages I get is of windows update. Is it window update which is making squid to go down? No check your sys usage and tcp connections with tcpdump i face this problem due to virus on client

Re: [squid-users] Windows update hangs

2005-08-15 Thread Aaron McDonnell
Try adding download.windowsupdate.com. If you do a TCPDUMP you'll see it accesses that one as well. Aaron Lasse Mørk wrote: Might be an option... How do I do that? I have tried acl WIN1 dstdomain update.microsoft.com acl WIN2 dstdomain windowsupdate.microsoft.com acl WIN3 dstdomain

RE: [squid-users] Windows update hangs

2005-08-15 Thread Graeme Bisset
Here's an article on Microsoft's site... http://support.microsoft.com/default.aspx?scid=kb;en-us;885819 It suggests bypassing auth for these domains... http://download.windowsupdate.com https://*.windowsupdate.microsoft.com http://*.windowsupdate.microsoft.com http://*.update.microsoft.com

[squid-users] FW: ***Go4BSPAM Scanner*** failure notice

2005-08-15 Thread Danish Khan
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, August 15, 2005 1:59 PM To: [EMAIL PROTECTED] Subject: ***Go4BSPAM Scanner*** failure notice Hi. This is the qmail-send program at squid-cache.org. I'm afraid I wasn't able to deliver your message to the

[squid-users] Re: should squid crash when ulimit reached?

2005-08-15 Thread Henrik Nordstrom
On Fri, 12 Aug 2005, joaoBR wrote: anyway the squid restart under this circunstancies depending on cache size is what is the handicap. what then is very strange for my understandings that when the OS hardcoded limit is not altered then squid crashs soon it reach the limit but when I set it

Re: [squid-users] any updates/info on using spread with squid for logging ?

2005-08-15 Thread Henrik Nordstrom
On Fri, 12 Aug 2005, john allspaw wrote: this is all true, but am I wrong in thinking that logging to disk incurs yet more disk I/O, and for both refers *and* access, then that's 2 disk writes per object request ? Unlike syslog the logs are not flushed immediately to disk, instead your OS

Re: [squid-users] Effect of 1xx series responses on proxies for subscription protocol

2005-08-15 Thread Henrik Nordstrom
On Sat, 13 Aug 2005, Benjamin Carlyle wrote: I've done a small write-up of my current thinking at http://members.optusnet.com.au/benjamincarlyle/benjamin/blog/2005/08/07#internetSubscription I think it's clear that even my updated model is flawed. Trying to hold off waiting for a change before

RE: [squid-users] problem accessing a certain website using 2.5.STABLEx

2005-08-15 Thread Henrik Nordstrom
On Fri, 12 Aug 2005, Tay Teck Wee wrote: 1) But it would be most strange that squid on version 2.4 could serve up the pop-up auth box while version 2.5 cannot. Not at all. 2.4 does not know about the HTTP breakage introduced by Microsoft in their NTLM Negotiate authentication schemes, and

[squid-users] timeout?

2005-08-15 Thread Corey Tyndall
Is there anyway to disconnect clients from the proxy server after a period of no activity? Our problem is that if a user logs into the internet via the proxy and then walks away without shutting down the browser other users can walk up and start browsing without being asked to log in because

[squid-users] zero size error

2005-08-15 Thread Corey Tyndall
Just started testing of squid and one of my users reported getting a # Zero Sized Reply error when browsing. I saw some references to cookies and such but I wanted to see if anyone recently has had this and what the fix is. We are running squid-2.5.STABLE3-3.3E and Red Hat Enterprise Linux

[squid-users] blank user

2005-08-15 Thread Márcio Henrique Ferreira
Hi, I have a squid proxy with authentication and some windows 2000 on my lan. I try to execute windows update but it fails because it tries to log with a blank user and squid do not permit it. There is a way to permit blank users to determinated sites?? Thank you Márcio Henrique

[squid-users] FreeBSD 5.4 + Squid 2.5-STABLE10 + wccp

2005-08-15 Thread Eugene Chaikin
Hello. It not work... :( When I try use Oops (http://oops-cache.org) + WCCPv2 - it works... On Cisco I see it: WCCP-EVNT: Here_I_Am packet from proxy_ip w/bad rcvd_id #tcpdump proto gre When I did it on FreeBSD - nothings happen. I use GENERIC FreeBSD kernel with this strings added:

[squid-users] reverse proxy

2005-08-15 Thread John Rooney
Hi all, Apologies for this, if it's a common question. I *have* looked in the FAQ but haven't managed to resolve my problem. I'm looking to reverse host a number of sites on different servers through a singe exposed IP address. I've populated the local hosts file (Squid 2.5 for NT) And Squid

Re: [squid-users] timeout?

2005-08-15 Thread Kashif Ali Bukhari
use clinet life time On 8/16/05, Corey Tyndall [EMAIL PROTECTED] wrote: Is there anyway to disconnect clients from the proxy server after a period of no activity? Our problem is that if a user logs into the internet via the proxy and then walks away without shutting down the browser other