[squid-users] Date time format in access.log

2010-02-01 Thread Dayo Adewunmi
Hi all In /var/log/squid/access.log on Ubuntu 8.04, squid 2.6.18-1ubuntu3 the log lines get written to file with the epoch time, instead of the human-readable time. How can I get squid to write to access.log with human-readable time? Thanks Best regards Dayo

Re: [squid-users] Squid, Exchange 2007 RPC, certificates and the rabbit hole

2010-02-01 Thread Amos Jeffries
Brett Lymn wrote: On Fri, Jan 29, 2010 at 11:52:03PM +1300, Amos Jeffries wrote: Was this with HTTPS-front-end or with full pass-thru? I think with a HTTPS front end - how could I tell for sure? I know that sounds dumb but I set the old one up a while ago, I cannot recall what I did. When

Re: [squid-users] squid_ldap_group trouble

2010-02-01 Thread Amos Jeffries
Joseph L. Casale wrote: I am trying to supplement squid_kerb_auth with squid_ldap_group, from the cli, my external_acl_type string works fine, username and group pairs return expected results. Disregarding the ldap group check, the following authenticates correctly: acl auth proxy_auth

[squid-users] spuid https and ftp sites help

2010-02-01 Thread David C. Heitmann
good evening squid support team, i have problems with connection to https and ftp sites with squid :( my squid.conf file is in attachement. thanks to regard david c. heitmann #Netzwerkverbindungen http_port

Re: [squid-users] Date time format in access.log

2010-02-01 Thread Amos Jeffries
Dayo Adewunmi wrote: Hi all In /var/log/squid/access.log on Ubuntu 8.04, squid 2.6.18-1ubuntu3 the log lines get written to file with the epoch time, instead of the human-readable time. How can I get squid to write to access.log with human-readable time? You need a custom log format. copy

[squid-users] Advisory SQUID-2010:1 - Denial of Service issue in DNS handling

2010-02-01 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2010:1 __ Advisory ID:SQUID-2010:1 Date: January 28, 2010 Summary:

[squid-users] Squid 3.1.0.16 beta is available

2010-02-01 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.1.0.16 beta release! This release is a major milestone and covers several feature regressions and security issues. * Advisory SQUID-2010:1 Denial of Service issue in DNS handling is resolved by this

Re: [squid-users] spuid https and ftp sites help

2010-02-01 Thread Amos Jeffries
David C. Heitmann wrote: good evening squid support team, i have problems with connection to https and ftp sites with squid :( Please describe problems. Including your Squid version number. my squid.conf file is in attachement. thanks to regard david c. heitmann

[squid-users] POST request to Akamai IP space?

2010-02-01 Thread Ralf Hildebrandt
I'm seeing a continuous stream of POST requests to Akamai IP space: 10.47.88.65 266040 POST http://87.248.217.42/idle/OhTmbD8nS1BmeTWY/13 10.47.88.65 267796 POST http://87.248.217.43/idle/atumbD8nb1JG2eub/14 10.47.88.65 128319 POST http://87.248.217.42/idle/OhTmbD8nS1BmeTWY/14 10.47.88.65 256728

[squid-users] Squid 3.0.STABLE22 is available

2010-02-01 Thread Amos Jeffries
The Squid HTTP Proxy team is pleased to announce the availability of the Squid-3.0.STABLE22 release! A few large and notable changes: * Advisory SQUID-2010:1 Denial of Service issue in DNS handling is resolved by this release. * A minor regression has been resolved in configuration file

Re: [squid-users] POST request to Akamai IP space?

2010-02-01 Thread Ralf Hildebrandt
* Ralf Hildebrandt ralf.hildebra...@charite.de: I'm seeing a continuous stream of POST requests to Akamai IP space: 10.47.88.65 266040 POST http://87.248.217.42/idle/OhTmbD8nS1BmeTWY/13 10.47.88.65 267796 POST http://87.248.217.43/idle/atumbD8nb1JG2eub/14 10.47.88.65 128319 POST

[squid-users] problems

2010-02-01 Thread David C. Heitmann
good evening squid support team, my squidversion is 2.7 stable3 i have problems with connection to https and ftp sites with squid :( my squid.conf file is in attachement. thanks to regard david c. heitmann

Re: [squid-users] POST request to Akamai IP space?

2010-02-01 Thread Amos Jeffries
Ralf Hildebrandt wrote: * Ralf Hildebrandt ralf.hildebra...@charite.de: I'm seeing a continuous stream of POST requests to Akamai IP space: 10.47.88.65 266040 POST http://87.248.217.42/idle/OhTmbD8nS1BmeTWY/13 10.47.88.65 267796 POST http://87.248.217.43/idle/atumbD8nb1JG2eub/14 10.47.88.65

RE: [squid-users] why does squid have extension_methods to be configurable?

2010-02-01 Thread Saurabh Agarwal
Hi All Can someone tell if the extension_methods default blocked behavior been fixed in 3.1 release? Also is it fixed in 2.7 release? Please let me know if someone has tested it successfully. Regards, Saurabh -Original Message- From: Saurabh Agarwal Sent: Friday, July 18, 2008 11:34

[squid-users] upgrade help

2010-02-01 Thread David C. Heitmann
what have i to do, to upgrade squid version 2.7 stable 3 to the new release? thanks forward greetz david

RE: [squid-users] squid_ldap_group trouble

2010-02-01 Thread Joseph L. Casale
Perhapse the fact that Kerberos works with anonymous binary blobs? no username in sight. You have to pardon me, I am not familiar enough with the inner workings of Kerberos to understand what a binary blob is wrt to Kerberos:) Or if not that, something in the elided section I omitted it

RE: [squid-users] Squid, Exchange 2007 RPC, certificates and the rabbit hole

2010-02-01 Thread Arch Willingham
Is there anyway I could get a copy of your squid.conf (you can whack out the personal IP/domain stuff)? Also, did you see my questions about certificates? Thanks! Arch

[squid-users] [SOLVED] Re: [squid-users] Date time format in access.log

2010-02-01 Thread Dayo Adewunmi
Amos Jeffries wrote: Dayo Adewunmi wrote: Hi all In /var/log/squid/access.log on Ubuntu 8.04, squid 2.6.18-1ubuntu3 the log lines get written to file with the epoch time, instead of the human-readable time. How can I get squid to write to access.log with human-readable time? You need a

[squid-users] dns?

2010-02-01 Thread David C. Heitmann
when i ping with connected to squid proxy cacheversion 2.7 stable5.to www.google.de then i get cant find hostname why? have i to configure a dns service on my squid server? or have i to route something? surfing over proxy works ;) thanks for regards greetz dave --

[squid-users] dns problem

2010-02-01 Thread David C. Heitmann
when i ping with connected to squid proxy cacheversion 2.7 stable5.to www.google.de then i get cant find hostname why? have i to configure a dns service on my squid server? or have i to route something? surfing over proxy works ;) thanks for regards greetz dave

[squid-users] update problem

2010-02-01 Thread David C. Heitmann
what have i to do, to upgrade squid version 2.7 stable 3 to the new release? debian5 have i thanks forward greetz david

[squid-users] config problem

2010-02-01 Thread David C. Heitmann
good evening squid support team, my squidversion is 2.7 stable3 i have problems with connection to https and ftp sites with squid :( my squid.conf file is in attachement. thanks to regard david c. heitmann

[squid-users] Transparent SSL proxy w/ client-side certificates (rephrased)

2010-02-01 Thread Damon Miller
Hello again. I apologize for the duplicate topic but I've hit a dead end. I'm hoping that a simpler question will be easier to answer so here goes: Is it possible to transparently proxy TLS traffic through Squid when the target server requires a client-side certificate for authentication? This

[squid-users] problem msn 2009

2010-02-01 Thread David C. Heitmann
hello, need help to login in windows live messenger 2009 over squid i have wrote in my config # MSN Messenger acl msn urlpath_regex -i gateway.dll acl msnd dstdomain messenger.msn.com gateway.messenger.hotmail.com acl msn1 req_mime_type application/x-msn-messenger http_access deny msnd

[squid-users] Unable to get Firefox to authenticate via Kerberos

2010-02-01 Thread Mike Bordignon (GMI)
Hello, I've recently managed to setup squid3.0 (STABLE8, on Debian Lenny) to authenticate requests via a Win2003 machine over Kerberos. It's working well with IE7 (on XP), but neither IE8 nor FF3.0 (both on Windows 7) will authenticate successfully. When I configure a squid_ldap_auth backup it

Re: [squid-users] Unable to get Firefox to authenticate via Kerberos

2010-02-01 Thread Mike Bordignon (GMI)
No matter - this was the problem http://www.mcplusa.com/blog/2009/10/authentication-with-kerberos-on-windows-7-and-the-google-search-appliance/ Original Message Subject: [squid-users] Unable to get Firefox to authenticate via Kerberos From: Mike Bordignon (GMI) m...@gmi.co.nz

Re: [squid-users] Squid 3.1.0.16 beta is available

2010-02-01 Thread Brett Lymn
On Mon, Feb 01, 2010 at 11:10:36PM +1300, Amos Jeffries wrote: * Several issues with connection pinning and NTLM/Negotiate/Kerberos authentication pass-thru have been found and resolved. These problems could result in NTLM connections being re-authenticated periodically or outright

Re: [squid-users] Squid, Exchange 2007 RPC, certificates and the rabbit hole

2010-02-01 Thread Brett Lymn
On Mon, Feb 01, 2010 at 10:26:05PM +1300, Amos Jeffries wrote: The cache_peer will have https-front-end option and Exchange will be configured for using basic authentication. In that case it is full pass through. -- Brett Lymn Warning: The information contained in this email and any

Re: [squid-users] Squid 3.1.0.16 beta is available

2010-02-01 Thread Amos Jeffries
On Tue, 2 Feb 2010 10:33:23 +1030, Brett Lymn bl...@baesystems.com.au wrote: On Mon, Feb 01, 2010 at 11:10:36PM +1300, Amos Jeffries wrote: * Several issues with connection pinning and NTLM/Negotiate/Kerberos authentication pass-thru have been found and resolved. These problems could

Re: [squid-users] problem msn 2009

2010-02-01 Thread Amos Jeffries
On Mon, 01 Feb 2010 15:27:20 +0100, David C. Heitmann da...@lafourmi.de wrote: hello, need help to login in windows live messenger 2009 over squid i have wrote in my config # MSN Messenger acl msn urlpath_regex -i gateway.dll acl msnd dstdomain messenger.msn.com

RE: [squid-users] why does squid have extension_methods to be configurable?

2010-02-01 Thread Amos Jeffries
On Mon, 1 Feb 2010 17:10:47 +0530, Saurabh Agarwal saurabh.agar...@citrix.com wrote: Hi All Can someone tell if the extension_methods default blocked behavior been fixed in 3.1 release? Also is it fixed in 2.7 release? As per the email you quoted: We have corrected this design flaw in 3.1.

Re: [squid-users] dns problem

2010-02-01 Thread Jeff Peng
在 2010-02-01一的 14:47 +0100,David C. Heitmann写道: when i ping with connected to squid proxy cacheversion 2.7 stable5.to www.google.de then i get cant find hostname why? Squid can be used only as http/https proxy, not ICMP or other protocal's proxies. -- Jeff Peng Email:

Re: [squid-users] update problem

2010-02-01 Thread Jeff Peng
在 2010-02-01一的 14:48 +0100,David C. Heitmann写道: what have i to do, to upgrade squid version 2.7 stable 3 to the new release? Just get the latest release source from squid-cache.org, then compile and install it from the source. In the source dir there is an INSTALL file you could reference to.

Re: [squid-users] problem msn 2009

2010-02-01 Thread Jeff Peng
在 2010-02-01一的 15:27 +0100,David C. Heitmann写道: hello, need help to login in windows live messenger 2009 over squid i have wrote in my config # MSN Messenger acl msn urlpath_regex -i gateway.dll acl msnd dstdomain messenger.msn.com gateway.messenger.hotmail.com acl msn1

[squid-users] How does squid work between a firewall and a web server in the transparent proxy mode

2010-02-01 Thread yjyj
Hi, I want to use the squid as a transparent bridge proxy, which is put behind a firewall and in front of a web server. The web server works in a local net with a different port from that clients visits, so the firewall need to do nat and port mapping. The environment looks like below:

Re: [squid-users] How does squid work between a firewall and a web server in the transparent proxy mode

2010-02-01 Thread Amos Jeffries
On Tue, 2 Feb 2010 11:25:21 +0800, yjyj yangjing001...@gmail.com wrote: Hi, I want to use the squid as a transparent bridge proxy, which is put behind a firewall and in front of a web server. The web server works in a local net with a different port from that clients visits, so the

RE: [squid-users] squid_ldap_group trouble

2010-02-01 Thread Amos Jeffries
On Mon, 1 Feb 2010 12:53:16 +, Joseph L. Casale jcas...@activenetwerx.com wrote: Perhapse the fact that Kerberos works with anonymous binary blobs? no username in sight. You have to pardon me, I am not familiar enough with the inner workings of Kerberos to understand what a binary blob is

Re: [squid-users] How does squid work between a firewall and a web server in the transparent proxy mode

2010-02-01 Thread yjyj
Yes, I know that the reserver proxy mode can solve the problem. Howerver, if that, I need to change DNS. And the more impormant is that if there is any problem with the squid server, clients cann't viisit the website. With the transparent mode, I don't need to change anything. 2010/2/2 Amos

RE: [squid-users] squid_ldap_group trouble

2010-02-01 Thread Joseph L. Casale
Is there a way to show what the helper is doing in the log file? http://www.squid-cache.org/Versions/v3/3.1/manuals/squid_ldap_group Looks like the -d debug option. Amos, Can't believe I missed that, it needed the '-K'. Where you get the patience to deal with such careless malarkey escapes me,

Re: [squid-users] Squid, Exchange 2007 RPC, certificates and the rabbit hole

2010-02-01 Thread Brett Lymn
On Sat, Jan 30, 2010 at 08:40:09AM -0500, Arch Willingham wrote: 1. The certificate question. I saw your answer but at http://wiki.squid-cache.org/ConfigExamples/Reverse/ExchangeRpc there are two lines that mention a certificate. One being SSL Certificate to present to Exchange Server

[squid-users] Re: Unable to get Firefox to authenticate via Kerberos

2010-02-01 Thread Markus Moeller
BTW You shouldn't use anymore DES encryption as it is too weak and will be disabled in future Kerberos libraries (as you have noticed in windows 7). Use RC4 or AES. Markus Mike Bordignon (GMI) m...@gmi.co.nz wrote in message news:4b676552.20...@gmi.co.nz... No matter - this was the problem

Re: [squid-users] Squid 3.1.0.16 beta is available

2010-02-01 Thread Silamael
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/02/2010 02:33 AM, The Doctor wrote: Squid 3.1.16 is not working on my FreeBSD 7.2 Box. not working is a quite helpfull problem description... - -- Matthias -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG