[squid-users] Active/Passive FTP connections

2007-11-13 Thread Rahul Tidke
Hello Guys, I need the parameter to allow all active and passive ftp connections to pass through the proxy server (SQUID 2.6 stable); which parameter needs to be set in squid configuration? I get following message in windows explorer when I try to ftp behind proxy: The folder ftp: //ftpserver

Re: [squid-users] Squid dialog NTLM

2007-11-13 Thread Angel Mieres
El mar, 13-11-2007 a las 02:19 +0100, Henrik Nordstrom escribió: On tor, 2007-11-08 at 17:34 +0100, Angel Mieres wrote: This allow me to authenticate transparently throught the proxy but if an user want to surf and it's not registered on Active Directory, the proxy ask him for an user and

Re: [squid-users] Transparent squid ignores client-side /etc/hosts

2007-11-13 Thread Adrian Chadd
On Tue, Nov 13, 2007, Alex Vorona wrote: Another path would be to add another http_port flag making intercepted requests on that http_port always use the original destination IP and include that in the cache key. This smells more secure, but will not be very good for the cache.. Why not

Re: [squid-users] how to pass all internet traffic through squid

2007-11-13 Thread Tarak Ranjan
Marcello Romani wrote: Tarak Ranjan ha scritto: Hi List, i have one squid 2.6 proxy server. current situation is as per browser settings for proxy... Direct Connection: users are directly connecting to internet, no logs are coming in access.log. not a single ACL is hitting for

Re: [squid-users] how to redirect https 80 requests to a cache listening to https on port 8080

2007-11-13 Thread nick humphrey
i added: http_port 80 defaultsite=mycompany.no-ip.info:80 but i still get no reply, but the 8080 on https works fine. i checked to see if anything else is running on 80 on the squid machine and nothing is. but after uploading my new squid.conf and running reconfigure i would expect to see squid

[squid-users] Squid and WCCP (ASA)

2007-11-13 Thread Jason Gauthier
All, I asked some generic questions earlier in the week and got some great documentation. This has led me to a working WCCP/Squid implementation. I thank you. However, I still have problems. Firstly, please understand that I am using WCCP on a Cisco ASA. (Firewall, not the same IOS as a

Re: [squid-users] how to pass all internet traffic through squid

2007-11-13 Thread Tek Bahadur Limbu
Hi Ranjan, Tarak Ranjan wrote: Marcello Romani wrote: Tarak Ranjan ha scritto: Hi List, i have one squid 2.6 proxy server. current situation is as per browser settings for proxy... Direct Connection: users are directly connecting to internet, no logs are coming in access.log.

Re: [squid-users] Transparent squid ignores client-side /etc/hosts

2007-11-13 Thread Henrik Nordstrom
On tis, 2007-11-13 at 20:09 +0900, Adrian Chadd wrote: I thought about that - do the DNS lookup, see if the IP the client is connecting to is in the returned DNS set Squid would try to connect to, and cache the content if it is. It only works if the site returns multiple A records for

Re: [squid-users] how to redirect https 80 requests to a cache listening to https on port 8080

2007-11-13 Thread Henrik Nordstrom
On tis, 2007-11-13 at 14:14 +0100, nick humphrey wrote: but after uploading my new squid.conf and running reconfigure i would expect to see squid listening on port 80, but it isn't: Did you upload the squid.conf to the correct place? i checked my squid logs and couldn't see any requests on

Re: [squid-users] Active/Passive FTP connections

2007-11-13 Thread Henrik Nordstrom
On tis, 2007-11-13 at 14:58 +0530, Rahul Tidke wrote: Hello Guys, I need the parameter to allow all active and passive ftp connections to pass through the proxy server (SQUID 2.6 stable); which parameter needs to be set in squid configuration? I get following message in windows explorer

Re: [squid-users] Squid dialog NTLM

2007-11-13 Thread Henrik Nordstrom
On tis, 2007-11-13 at 10:31 +0100, Angel Mieres wrote: Ok. Is there anyway to solve this?, I remove proxy_auth directive and Im trying to solve this with: ... external_acl_type ldap_group ttl=0 children=5 % LOGIN /usr/local/squid/lib/wbinfo_group.pl ... The %LOGIN there is more or less

Re: [squid-users] Squid and WCCP (ASA)

2007-11-13 Thread Henrik Nordstrom
On tis, 2007-11-13 at 09:34 -0500, Jason Gauthier wrote: I have multiple interfaces on this ASA that I want to make work. (4, to be exact). I've set squid to register with WCCP on the inside interface. Once I redirect traffic from the inside, it works. I have a wireless interface, where my

Re: [squid-users] my squid used by someone's proxy server.

2007-11-13 Thread Henrik Nordstrom
On tor, 2007-11-08 at 16:16 +0900, Seonkyu Park wrote: Hello Squid users. I am using squid for server accelerator. Squid version? Are you using any always_direct rule? I found that my squid server (server accelerator) used by someone's proxy server. (219.136.189.213 - -

Re: [squid-users] secure authentication between browser and squid redux

2007-11-13 Thread Henrik Nordstrom
No, the situation is still the same with support for encrypted proxy connections missing from all browsers. There is no general frameworks for out-of-band authentiation for Squid published, but it's not very hard. Plugs in to Squid via the external acl mechanism feeding Squid with the current

Re: [squid-users] carp doc bug : parse_peer: token='carp-load-factor=0.5' SQUID2.6

2007-11-13 Thread Henrik Nordstrom
On ons, 2007-11-07 at 12:59 +1300, Amos Jeffries wrote: well, if we are going to be that pedantic. :) It was introduced in 2.6-14 or earlier, and left undocumented (bug 2052). During regular squid.conf cleanups of 2.6s15, the 3.0 format using weight= was documented in 2.6s14-20070821.

Re: [squid-users] Differentiating http and ssl requests.

2007-11-13 Thread Henrik Nordstrom
On tis, 2007-11-06 at 10:28 -0800, Srinivas B wrote: Hi All, I am using Squid 2.6 Stable 12. I have my configuration like below. http_port 8080 accel defaultsite=myhttpsite.net https_port 8081 accel defaultsite=myhttpsite.net cert=path_to_cert key=path_to_key protocol=http why

Re: [squid-users] Problem while using reply_body_max_size

2007-11-13 Thread Henrik Nordstrom
On tis, 2007-11-06 at 17:35 +0530, sridhar panaman wrote: Hi, I am trying to configure my squid to block users from downloading anything less than 3MB. But when I give reply_body_max_size 3000 I am unable to view certain website like www.microsoft.com. Is there something else that I should

Re: [squid-users] Basic Pam authentification problem with on mandrake 9.0

2007-11-13 Thread Henrik Nordstrom
On mån, 2007-11-05 at 09:52 +, Edjé wrote: But some unix accounts authentication succeeded while others failed. More if i do the test on the server with /usr/lib/squid/pam_auth the problem is the same. This version(squid-2.4.STABLE7-2mdk) does it have a problem with Mandrake 9.0? What

Re: [squid-users] squid proccess freeze

2007-11-13 Thread Henrik Nordstrom
On tor, 2007-11-01 at 17:03 -0300, Alexandre Correa wrote: Hello !! I testing squid on freebsd 6.2 amd64+SMP, server is 2 procs dual-core opteron 4gb ram ... after some time running .. squid proccess refusing connections, if i try to kill them, proccess don=B4t stop.. no errors is show..

Re: [squid-users] squid setuid-binary ncsa_auth and pam_auth

2007-11-13 Thread Henrik Nordstrom
On tor, 2007-11-01 at 14:09 -0500, Cryer,Phil wrote: During a review on squid, we found the following setuid-binary set to run as root E: squid setuid-binary /usr/lib64/squid/ncsa_auth root 04750 E: squid setuid-binary /usr/lib64/squid/pam_auth root 04750 No idea why ncsa_auth is installed

[squid-users] read_ahead_gap

2007-11-13 Thread Mark Nottingham
I'd like to double-check the semantics of read_ahead_gap. AIUI, Squid will buffer up to that much data on both requests and responses, in addition to the TCP send and receive buffers. So, if I have (for the sake of argument) 16K TCP read buffers, 24K TCP write buffers, and 32K

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-13 Thread Dave Raven
Hi Adrian and all, Sorry it's taken me so long to get back but I wanted to be sure I had all my ducks in a row. I couldn't find a program to graph what we needed, so I wrote a small script to log results - I've now done multiple tests, with multiple disk types etc and settled on using diskd as it

[squid-users] How can I do this??

2007-11-13 Thread murrah boswell
Hello, I have asked this recently, but have still not figured it out, so please excuse me for asking it again. I am trying to setup Squid to only allow one user through to the Web and configure it so all other users only have access to information stored in the cache. I am using

Re: [squid-users] How can I do this??

2007-11-13 Thread Robert Collins
On Tue, 2007-11-13 at 18:28 -0700, murrah boswell wrote: Hello, I have asked this recently, but have still not figured it out, so please excuse me for asking it again. I am trying to setup Squid to only allow one user through to the Web and configure it so all other users only have

Re: [squid-users] How can I do this??

2007-11-13 Thread Amos Jeffries
Hello, I have asked this recently, but have still not figured it out, so please excuse me for asking it again. I am trying to setup Squid to only allow one user through to the Web and configure it so all other users only have access to information stored in the cache. I am using

Re: [squid-users] How can I do this??

2007-11-13 Thread murrah boswell
Hello, To some degree. miss_access can be used to stop other users accessing data; however you may find uncachable data will make the users see many errors. (things like web dots tend to be uncachable). I know that miss_access must be part of the puzzle to allow my priviledged user to go

RE: [squid-users] How can I do this??

2007-11-13 Thread Dave Raven
You could use refresh_pattern to force everything to be cached... -Original Message- From: Robert Collins [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 14, 2007 3:37 AM To: murrah boswell Cc: squid-users Subject: Re: [squid-users] How can I do this?? On Tue, 2007-11-13 at 18:28

RE: [squid-users] How can I do this??

2007-11-13 Thread Robert Collins
On Wed, 2007-11-14 at 04:03 +0200, Dave Raven wrote: You could use refresh_pattern to force everything to be cached... refresh_pattern changes how long things are valid for, not whether they can be cached. Consider authenticated content, dynamic content (e.g. a javascript on a page that

RE: [squid-users] How can I do this??

2007-11-13 Thread Dave Raven
What about using offline mode - if its educational I assume you could probably just download after hours ? Turn it off when you download with wget, and put it back on afterwards? -Original Message- From: murrah boswell [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 14, 2007 4:04 AM

Re: [squid-users] How can I do this??

2007-11-13 Thread murrah boswell
Amos Jeffries wrote: I have been reading your posts and wondering myself why its not working. I just recalled someone earlier who was havign trouble that turned out to be caused by the headers wget sends by default preventing cache doing certain things. Maybe you have hit this also. I have

Re: [squid-users] How can I do this??

2007-11-13 Thread murrah boswell
Dave Raven wrote: What about using offline mode - if its educational I assume you could probably just download after hours ? Turn it off when you download with wget, and put it back on afterwards? I have tried 'offline_mode on', but that did not help; I still get Relaying Denied errors for

Re: [squid-users] Transparent squid ignores client-side /etc/hosts

2007-11-13 Thread Alex Vorona
Henrik Nordstrom wrote: On tis, 2007-11-13 at 20:09 +0900, Adrian Chadd wrote: I thought about that - do the DNS lookup, see if the IP the client is connecting to is in the returned DNS set Squid would try to connect to, and cache the content if it is. It only works if the site returns

[squid-users] Setting up ACL for Squid as a Web Accelerator

2007-11-13 Thread Ed Singleton
I'm trying to set up squid as a web accelerator behind apache for a couple of slow dynamic sites I have. I have lots of virtual hosts in Apache and I want to be able to proxy a couple of them through squid. In Apache I have this for one of my virtual hosts: RewriteRule ^/(.*)$