Re: [squid-users] Name of the patch to fix broken MS-IE auth

On Fri, 2003-01-24 at 22:33, Henrik Nordstrom wrote: > As far as I know the patch is not yet been published in MSDN. You may > need to contact MS Support to find where to get the patch. It's *only* available via MS Support at this point. I expect it will arrive in MSDN when it's downloadable. > I

RE: [squid-users] Squid V2.5 and RedHat

On Sat, 2003-01-25 at 09:48, Schelstraete Bart wrote: > Quoting Robert Adkins <[EMAIL PROTECTED]>: > > > If the client is using IE 6.x and this occurs only after the initial > > authentication then don't worry about it. That is a known IE bug. > > Microsoft will say that it's a new featur

RE: [squid-users] Squid V2.5 and RedHat

On Sat, 2003-01-25 at 10:13, Robert Adkins wrote: > Actually > > They would claim this as a "Feature" as it does speed up the initial > connection to Microsoft Internet Information Servers. They use some kind > of non-standard (Really? MS being "non-standard" Who would have thought

Re: [squid-users] CVS or Tarballs after squid-3.0-DEVEL-20030118Won't Compile

On Sun, 2003-01-26 at 04:35, Tesla 13 wrote: > Hello Folks, > > I am having difficulty compiling anything after > squid-3.0-DEVEL-20030118.tgz. CVS builds are unsuccessful as well. This has been fixed - the next tarball will have it in it. > stmem.h is not in the tarball and I could not come ac

Re: [squid-users] just finished setting up squid 2.4 STABLE7 +Redhat 8 (kernel 2.4) and + IPTABLES v1.2.6a

On Sun, 2003-01-26 at 06:49, [EMAIL PROTECTED] wrote: > Hello everybody, > > i've just finished installing squid on my linux box, and it seems to work > for caching HTTP request for my betea tester clients. > Right now my next target it to cache the FTP request too, > because most of my clients us

Re: [squid-users] Files appearing on user's desktop?

On Tue, 2003-01-28 at 02:18, Alex Short wrote: > One of my users complained that these two files magically appeared on > their desktop one day. They use a squid proxy using an automagic proxy > url, http://domain/proxy.pac > > Just wondering if people have had these where suddenly new files app

Re: [squid-users] squid with multiple NICS

On Tue, 2003-01-28 at 00:22, Edward D. Millington wrote: > Minimun config as possible. > > Here is my squid.conf > > cache_mem 32 MB > memory_pools off memory pools are good. Any reason for disabling them? Also, if you have 2X9 Gb disks, you should not have 10 cache_dir lines. You should use on

Re: [squid-users] msie ntlm auth -- client not in same domain

On Tue, 2003-01-28 at 07:29, Geoff Nordli wrote: > I have the NTLM auth setup and working for clients that are located in > the same domain. > > I am using domain authentication, samba 2.2.7, and squid 2.5.STABLE1. > > The problem that I have is a client will fail to authenticate if it > isn't in

RE: [squid-users] msie ntlm auth -- client not in same domain

On Tue, 2003-01-28 at 07:44, Geoff Nordli wrote: > I am thinking of a stand-alone machine which doesn't belong to any > domain. It won't work today: The response packet sent by the client to squid is handed off to a domain controller for authentication. Therefore the DC must be able to authenticat

Re: [squid-users] Problems with NTLM_Auth and Microsoft AutoUpdate

On Tue, 2003-01-28 at 21:07, [EMAIL PROTECTED] wrote: > Hi all, > > I'm having some problems with Squid Version > 2.6-DEVEL-20030109. Please use 2.5 Stable 1 with patches, or 3.0DEVEL-CVS / 3.0-DEVEL-20030128 or better. 2.6 is somewhat unstable and not in the main line of development today. Ch

Re: [squid-users] RE: Squid V2.5 and disk config

On Fri, 2003-01-31 at 04:19, Cavanagh, Kevin B wrote: > Hi there, > > We are just about to begin installing Squid V2.5 on six (6) Proliant DL380 > servers running Redhat Linux V8.0 with 6 x 18.2GB disks. > > I was going to configure RAID 0+1 for the system disk and the remaining 4 > disks in a

Re: [squid-users] major squid problems

On Fri, 2003-01-31 at 04:35, Marc Elsen wrote: > ty kirk wrote: > > > > We are using an external(managed by ISP) dns server. DNS functionality > > always appears to be ok. Where can I check my dns traffic? I guess I'm not > > aware of where this is stored. > > I've searched for cachemgr and can

Re: [squid-users] NTLM, Win2k, IE config

On Fri, 2003-01-31 at 08:16, [EMAIL PROTECTED] wrote: > >There is BIG differences when it comes to how browsers deal > >with NTLM authentication and its by design incompability with > >HTTP proxies.. (if browser is configured to use a proxy it won't > >use NTLM, as it knows it won't work). > >R

Re: [squid-users] Authentication Configuration Problems

On Sat, 2003-02-01 at 06:26, Jason M. Kusar wrote: > I've searched the FAQ's and archives and haven't found a problem similar to > mine. It's in the release notes for squid 2.5 Cheers, Rob -- GPG key available at: . signature.asc Description: This

Re: [squid-users] Problem while opening some (part) of sites

On Fri, 2003-01-31 at 00:22, Henrik Nordstrom wrote: > Can't make such changes in 2.5.STABLE, as it would break valid > 2.5.STABLE1 configurations. What we can do is to document the fact. > > We probably should try to add a size specifier in Squid-3, like in most > other directives relating to siz

Re: [squid-users] Can't download file

On Sat, 2003-02-01 at 19:55, FRANCO Battista (Baky) wrote: > Example when i try to download squid configuration guide (Pdf or html) i receive the >following error: > > ERROR > The requested URL could not be retrieved > > While trying to retrieve the URL: http://squid.visolve.com/squid24s1/squid2

Re: [squid-users] Squid 2.5S1 dying unexpectedly

On Mon, 2003-02-03 at 15:31, Lightfoot.Michael wrote: > Several times in the last 8 days our main proxy has died 3 times with > the following logged in cache.log: > > FATAL: Received Segment Violation...dying. You should apply the errata for 2.5S1 from the squid-cache.org website. Then try creati

Re: [squid-users] RE: SQUID V2.5 and cache disk configs

On Wed, 2003-02-05 at 07:34, Cavanagh, Kevin B wrote: > Hi there, > > We have six (6) Proliant DL380 G3 servers running RedHat Linux V8.0 with > 2.5GB of RAM and 6 x 18.2GB disks (configured as JBODs). We've installed > Squid V2.5 and are now wondering about how best to configure our disks. >

Re: [squid-users] Logging Problem

On Wed, 2003-02-05 at 10:03, leon wrote: > Hi to all > > I want to know if is it possible, to exclude some ip address from logging , > cause i'm using squid also as icq-proxy > and i don't want to log all this type of connection . > > Is possible ? Not today :p. There is a custom logging projec

RE: [squid-users] Squid2.4 & /etc/hosts

On Wed, 2003-02-05 at 12:02, Jay Turner wrote: > But it is maintained by Red Hat who backport any security patches to the 2.4 > version they ship with 7.3. > > If you could please re-read my post you will note that I have recompiled > with --disable-internal-dns and it successfully references /etc

[squid-users] Re: Record all traffic option?

On Wed, 2003-02-05 at 10:41, la. w wrote: > Last time I asked about this I got the impression that I was 'on my > own' and this functionality wasn't included in a standard squid > distribution: Definately not. > Feel free to shred the design ideas with alternates -- I can either > justify,

Re: [squid-users] cache takes long before it updates a site!

On Wed, 2003-02-05 at 15:38, louie miranda wrote: > hello im having problems on my squid server, here's the scenario. > I have a website outside of my ip/block i update it once' a while > like every minute. Now when i try to reload the page that i have > update squid does not update it i mean it st

Re: [squid-users] X-Forwarded Help

On Thu, 2003-02-06 at 00:24, Jason M. Kusar wrote: > This looks like what I'm looking for but it's for Squid3. Has anyone here > done any serious testing with squid 3? How well does it work right now? Is > it stable? Memory leaks? etc? Are there any major changes that I would need > to be aware

Re: [squid-users] Problems with file descriptors

On Thu, 2003-02-06 at 02:58, Billy Huddleston wrote: > I keep getting this error message.. > > Feb 5 11:04:10 cache squid[826]: WARNING! Your cache is running out of > filedescriptors > > I'm running RH 7.0 with Kernel version 2.4.9.. Someone tell me how the heck > to fix this... > Please DON'T

Re: [squid-users] Proxy authentication - PXY1

On Thu, 2003-02-06 at 09:41, Henrik Nordstrom wrote: > David O'Sullivan wrote: > > > > The problem is that what I would like is for users to be initially presented > > with a disclaimer form which they must accept before the proxy > > authentication is offered. If they don't accept they are not a

Re: [squid-users] Host Acceleration.

On Thu, 2003-02-06 at 22:05, Neil Marjoram wrote: > I am hoping someone can help me with 3 problems I am having deploying > Squid. > > I have a very restricive brief from management about how this should > work, and a large quote from some company to make it work - which we can > not afford as a c

Re: [squid-users] Latency

On Sun, 2003-02-09 at 03:22, SSCR Internet Admin wrote: > I just wanted to know if having a big list banned site on = > "/etc/squid/banned_site" will actually contribute to internet sluggish = > or network latency. I have a top result with > > PID USER PRI NI SIZE RSS SHARE STAT %CPU %ME

RE: [squid-users] Latency

On Sun, 2003-02-09 at 04:44, SSCR Internet Admin wrote: > My squid.conf has > > cache_dir ufs /var/spool/squid 3000 7 256 Part of your problem will be this. You should change to diskd or aufs for the cache dir type. Also you should use dstdomain, not dstdomain_regex if possible. Cheers, Rob --

Re: [squid-users] Open Files Increasing on Reconfigure

On Sat, 2003-02-08 at 13:11, Tesla 13 wrote: > Hello, > > Issuing squid -k reconfigure or sending HUP signal to squid increases number > of open files. It looks like a new /etc/hosts is being opened each time > SIGHUP is sent without releasing the old one. 2.5-STABLE on a Redhat 8.0 > > Any ide

Re: [squid-users] Open Files Increasing on Reconfigure

On Sat, 2003-02-08 at 13:37, Tesla 13 wrote: > Didn't know I was fishing! > > Thanks, this fixes it. > > I also want to mention that your patch for making proxy_auth work with > tcp_outgoing is fine till now (don't remember bug number). Thats great news - thanks. Rob -- GPG key available at:

Re: [squid-users] proxi_hierarchies

On Fri, 2003-02-07 at 22:23, Emilio Casbas wrote: > Hi all. > > I get the "Access Denied" message from server, the configuration is: > > [users] --> [proxy squid] --> [filter squid] --> [cache squid] > ---> inet (server with trouble) >

Re: [squid-users] squid proxy for W2K active directoty users

On Fri, 2003-02-07 at 19:52, Henrik Nordstrom wrote: > According to people who knows these things a lot better than me (I have > only seen W2K AD for about 5 minutes.. never installed it) the NTLM > support is separate from mixed/native mode, and you select if the AD > domain is to support NTLM whe

Re: [squid-users] Limiting Download

On Wed, 2003-02-05 at 21:53, Anderson Pettirossi Xavier wrote: > Helo all, > > Someone know how can i restrict the download per user, like 20Mb per user > per day Today, in squid, you cannot. But: You can do realtime processing of access.log to determine how much traffic a user has sent, and

Re: [squid-users] Limiting Download

On Sun, 2003-02-09 at 11:46, Mark Pleasance wrote: > Anderson, > > See http://www.themammoth.com > > Will do download quotas over a week or month and more but not free. > > Mark It's a courtesy to disclose your own interest when referring to other products on a product specific list: http://www

Re: [squid-users] Prevent downloading of special types of files

On Mon, 2003-02-10 at 23:12, [EMAIL PROTECTED] wrote: > Hi all, > > I am using Squid2.5 stable1 and I want to prevent the downloading of some types > of applications such as activeX (oleobject is the MIME type of an activeX > object). > > Here is the configuration I used: > > *

Re: [squid-users] Prevent downloading of special types ofapplications

On Tue, 2003-02-11 at 03:36, [EMAIL PROTECTED] wrote: > Thanks a lot for your answer Robert. I now manage to apply filtering based on > the MIME type. > > However, since all embedded scripts do not have the MIME type application/x - > oleobject (which is the MIME type they should have), I do not

Re: [squid-users] squid and quota check

... > Any comments are appreciated A couple: 1) extend the in-squid user cache rather than creating a new one. See authenticate.cc. 2) extend external acls to have a %QUOTAUSED% parameter, then you can have a helper that accepts: %LOGIN% %QUOTAUSED% and returns OK or ERR as in allow or fail. Th

Re: [squid-users] Access restrictions for accelerator mode / hostsline?

On Tue, 2003-02-11 at 20:57, Karl Pielorz wrote: > Hi All, > > If there is the above, is there even more optimistically a "Oh, and by the > way - make sure the request your processing only has the following hosts in > the Host: line?" - or would that have to be handled purely by the > redirec

Re: [squid-users] assertion failed?

On Tue, 2003-02-11 at 23:50, [EMAIL PROTECTED] wrote: > I've got one squid 2.4.STABLE1 server which keeps falling over with > the following error: > > 2003/02/10 16:43:50| ctx: enter level 0: 'http://www.dhl.com/popup.html' > 2003/02/10 16:43:50| assertion failed: refresh.c:163: "age >= 0" > > I

Re: [squid-users] combined log patch for squid in accel-mode

On Wed, 2003-02-12 at 09:04, Justin Albstmeijer wrote: > http://www.squid-cache.org/mail-archive/squid-users/200010/0233.html > > Has the patch mentioned in this message ever made in to a patch for > 2.5-STABLE1? > > I see no other way to combine access(httpd style)+referer+user_agent in to > a l

Re: [squid-users] Squid stops answering requests..

On Thu, 2003-02-13 at 01:07, Tesla 13 wrote: > Username authentication decreases squid performance great deal in our > environment when a lot of simultaneous requests are initiated (number of > authenticator processes does not matter). You might want to test without > authentication (if you are

Re: [squid-users] Squid stops answering requests..

On Thu, 2003-02-13 at 01:53, Marc Schmidt wrote: > hihi :-), > > sorry, it's probably my fault. > > again: > all i need are some good - already tested - values for a bunch of > configuration parameters of the > squid.conf, so that squid will not stop working when i run 20 > simultanous clients

Re: [squid-users] If-Modified-Since - Mozilla/Galeon/etc...

On Thu, 2003-02-13 at 22:02, Alberto Mesas Navarro wrote: > So, there's no way to get those pages cached? The Surrogate Control header in the squid ESI branch allows overriding of the client requests, when running as an accelerator. That will hopefully go into squid-3.0. You could back=port it to

Re: [squid-users] Delay pools and time

On Sun, 2003-02-16 at 19:43, Paras pradhan wrote: > hi all > > is it possible to trun off delay pool at certain time. let's say: > i want my users donwload at the full avalibale speed at non peak hours > like 1 AM to 8 AM . how can i do that autmaticalyy without restarting my > squid. Use time a

Re: [squid-users] Not using parent proxy

On Mon, 2003-02-17 at 10:25, Mark A Lewis wrote: > > Any ideas or other information that would help? Read the FAQ under "running squid behind a firewall". Rob -- GPG key available at: . signature.asc Description: This is a digitally signed mes

Re: [squid-users] Uninstall Squid

On Mon, 2003-02-17 at 19:04, Rocky wrote: > Hi, > > Is there a way to uninstall Squid without formatting > my Unix machine ? Depends on how you installed it. If you built from source: make uninstall will remove the squid files, and then you need to manually remove the cache dirs. Rob -- GPG ke

Re: [squid-users] OpenBSD pf and Squid running on Linux.

On Mon, 2003-02-17 at 13:46, Steve Keate wrote: > rdr proto tcp from ! 192.168.250.198 to any port 80 -> 192.168.250.198 > port 8080 This rule rewrites the TCP header as well as forwarding it to the squid box. This means squid can't tell that it was a intercepted request. I don't know if there

Re: [squid-users] a problem with access denied

On Tue, 2003-02-18 at 05:03, Andreas Meyer wrote: > Hello! > But now the problem. As soon as I configure the proxy in the Netscape > cache-settings I get an Access denied. You need to enable acceleration *and* proxying if you want this. see httpd_accel_with_proxy. Generally though, I would sugg

Re: [squid-users] About peer digest

On Tue, 2003-02-18 at 15:16, Louis Lau wrote: > Does peer digest exchange cache internally or only on demand by user > request? automatically. Rob -- GPG key available at: . signature.asc Description: This is a digitally signed message part

Re: [squid-users] transparent proxy on SSL - 443

On Tue, 2003-02-18 at 16:03, Siew Wing Loon wrote: > I have this in my squid.conf configuration files :- > Will this work? No. Encrypted traffic can't be intercepted (duh - not much point encrypting if it could be!) Rob -- GPG key available at: .

Re: [squid-users] Content analysis

On Tue, 2003-02-18 at 11:00, Chris Monson wrote: > Is there an easy way to configure squid to filter reply content through > an external program? I'm interested in doing analysis on the content > that squid returns to the client. > > I have been poking around a lot in the source and it does not

Re: [squid-users] SAFE WAY TO DELETE CACHE

On Tue, 2003-02-18 at 19:04, Mr. Singh wrote: > Dear/users > > What is the safest way to clear cache ? Why? There is no need to manually delete the cache - squid will do that for you. Rob -- GPG key available at: . signature.asc Description: Th

Re: [squid-users] Content analysis

On Tue, 2003-02-18 at 19:31, Henrik Nordstrom wrote: > On Tuesday 18 February 2003 08.46, Robert Collins wrote: > > On Tue, 2003-02-18 at 11:00, Chris Monson wrote: > > > > I'd suggest you work with squid-3, it's got an interface for > > hooking into the clie

Re: [squid-users] *****SPAM***** Compile with SSL Fails

On Wed, 2003-02-19 at 07:31, John Peak wrote: > - I have OpenSSL 0.9.6 installed and the header files are definately in > /usr/local/include. I have checked and rechecked this numerous times. > - Specifying the "--with-openssl" does not seem to help. I have tried the > following configurations

Re: [squid-users] MAC bacsed ACL

On Wed, 2003-02-19 at 20:02, hare ram wrote: > Hi > i dont think they can chage the MAC address They can. Rob -- GPG key available at: . signature.asc Description: This is a digitally signed message part

Re: [squid-users] How often is my cache cleared ?

On Wed, 2003-02-19 at 20:02, [EMAIL PROTECTED] wrote: > Hi all, > > I have been struggling for days now to find out the meaning and default of the > following tag in squid2.5 : > > authenticate_cache_garbage_intervall It determines how often the user cache inside squid is garbage collected. Th

Re: [squid-users] Verify "enable" options

On Thu, 2003-02-20 at 17:03, Ben White wrote: > Hi, > > Is there anyway we can verify what are the "enable" > options that we have done in squid ? in squid 2.5 and above, squid -v will show you. Rob -- GPG key available at: . signature.asc Descri

Re: [squid-users] Re: How to build with static linking?

On Wed, 2003-02-26 at 13:29, Steve Snyder wrote: > I take it then that there is no config option or similar for building > Squid statically? Not as part of the main squid distribution, and I'm not aware of similar efforts elsewhere. The normal way to do what you need is to cross-compile to the t

Re: [squid-users] "--enable-ssl" config needed if not doingauthentication?

On Wed, 2003-02-26 at 13:58, Steve Snyder wrote: > When building Squid v2.5S1 (+ all patches) do I need to use the > "--enable-ssl" configuration option if I am not doing authentication of > clients? > > If so, what feature(s) of Squid require the SSL services? SSL acceleration and https URL su

Re: [squid-users] winbind still!

On Thu, 2003-02-27 at 12:39, Simon Bryan wrote: > I have been busy testing and crashing my Squid setup (wish I had a test > box!) > > I think one of the issues has been in smb.conf "use default domain" it was > set to "yes", now that it is set to "no" when i do a wbinfo -u I get > domain\username

Re: [squid-users] newbie needs help with downloads bypassing proxy

On Fri, 2003-02-28 at 06:41, Schmidt, Matthew wrote: > I'm new to squid and new to Linux. > Running RH-8.0 with squid-2.5.STABLE1. > > I want to know if it's possible to have certain file types bypass the > proxy when downloaded? > I've set the proxy to not cache them > > acl QUERY urlpath_regex

Re: [squid-users] NT multi domain authentication

On Fri, 2003-02-28 at 22:55, [EMAIL PROTECTED] wrote: > Now the problem: > During one of the first steps of NTLM authentication squid send a "YR" code > to the helper without adding any further data retrieved from the > "Proxy-Authorization" field sent by the client. > This field contains data su

Re: [squid-users] Re: winbind support for messanger

On Fri, 2003-02-28 at 22:55, Henrik Nordstrom wrote: > I think the question is more if messenger supports the use of HTTP > proxies requiring authentication. Probably not. > > Squid-users: Anyone having experience of this? "Options->Advanced->Use Proxy->Http Proxy, fill out the fields" Rob -- G

Re: [squid-users] can squid perform authentication withoutprompting users for usernames and passwds ?

On Mon, 2003-03-10 at 20:58, [EMAIL PROTECTED] wrote: > Hello all, > > I used to have a Border Manager proxy that could perform authentication without > explicitly asking the users to enter username and password. > > Is there any way of having this kind of authentication with the squid proxy. Is

Re: [squid-users] can squid perform authentication withoutprompting users for usernames and passwds ?

On Mon, 2003-03-10 at 21:48, [EMAIL PROTECTED] wrote: > Thanks a lot for the answer...here come two additionnal questions and one > explanation. > > but what do you mean by "having a domain" ? Microsoft organises users by 'Domains'. Each Domain has a set of Domain Controllers. Domain Controllers

RE: [squid-users] Changing cache location

On Tue, 2003-03-11 at 14:21, Lightfoot.Michael wrote: > > -Original Message- > > From: Gary Hostetler [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, 11 March 2003 11:21 AM > > To: [EMAIL PROTECTED] > > Subject: [squid-users] Changing cache location > > > > > > I want to change my cache fro

Re: [squid-users] Squid 2.5 and SmartFilter causing frequentcrashes

On Wed, 2003-03-19 at 11:45, Lightfoot.Michael wrote: > Quite a while ago (over a month) I reported a problem to this list with > squid 2.5STABLE1 and Secure Computing's SmartFilter software. > SmartFilter integrates with squid by patching several source files to > redirect the URL to itself (rathe

RE: [squid-users] Squid 2.5 and SmartFilter causing frequentcrashes

On Wed, 2003-03-19 at 14:22, Lightfoot.Michael wrote: Your email is ( I think ) taken as intended > > > Does the above mean anything to anybody? How can I get a better > > > indication of where the segment violation is occurring? > > > > No segment violation is occuring. A logic violation

RE: [squid-users] Squid 2.5 and SmartFilter causing frequentcrashes

On Thu, 2003-03-20 at 10:03, Lightfoot.Michael wrote: > As I stated (not very clearly) I have had no success in getting a core > dump from squid 2.5. I have (before Robert's suggestion and since to > make sure I hadn't missed anything) read the FAQ section on core dumps > and debugging. I am co

Re: [squid-users] simple question re: reply body max size

On Sat, 2003-03-22 at 09:15, Henrik Nordstrom wrote: > Seperately, unless you make larger ACLs.. > > the acls listen on each line is ANDed together, and the first allow line > where all listed acls are true tells the size.. (what deny lines are > meant to be used for I do not know) From *memory

Re: [squid-users] Squid-2.5.STABLE2 compile

On Tue, 2003-03-25 at 07:11, Peter Smith wrote: > Yes, this is most likely the case. Thanks for the tip! I am working on > making the CFLAGS more transparent.. Yeah. Just an additional data point: I don't precisely recall when we added that #error to the aufs code, but I think it was after 2.5S

Re: [squid-users] Transparent proxying + LDAP authentication

On Wed, 2003-03-26 at 23:00, Kristian Du wrote: > Hi Everyone, > > I have looked through the FAQs but could not find an answer to my > doubts. Under transparent proxying: Does it work with authentication? No. Rob -- GPG key available at: . signat

Re: [squid-users] system performance and memory question

On Thu, 2003-03-27 at 06:57, Pat Lendon wrote: > cache_dir ufs /d1/squid_cache 2048 16 256 > ... > Furthermore - I'm also seeing slight delays on system (system is > momentarily slow). System has two AMD Athlon(TM) MP 1800+ processors > cpu MHz 1533.431. When system seems delayed we run t

Re: [squid-users] max_user_ip doesn't work properly

On Thu, 2003-03-27 at 00:09, Alexander Kiselev wrote: > Hi all. > > on Squid2.5.STABLE2 i found that there is a problem with "acl max_user_ip". ... > > How to limit the users with "acl max_user_ip" feature not depending on > browser they use? The problem is that NTLM users appear like 'DOMAIN\US

Re: [squid-users] Authentication not working exactly as desired

On Thu, 2003-03-27 at 03:07, Claudio Alonso wrote: > Hi, > We are testing a squid 2.5 STABLE1 Upgrade to 2.5 stable 2 as the first and most probable thing. Rob -- GPG key available at: . signature.asc Description: This is a digitally signed mess

Re: [squid-users] NTLM questions (sorry)

On Sat, 2003-03-29 at 00:16, Gavin Hamill wrote: > > FATAL: authenticateNTLMHandleReply: called with no result string This is due to a broken response from a helper - it's a *loud* warning :}. > Does > ntlm_auth broadcast on the local network to find a domain controller? No. Try ./ntlm_auth -

Re: [squid-users] Source IP Address

On Sat, 2003-03-29 at 00:19, Alexander Harrington wrote: > Hi there > > This isn't the first time I've configured Squid, but this is the first > time I've configured 2.5-STABLE2. > > Squid works well but in the access.log file, I'm only getting the IP > address of the network, not the IP of the c

RE: [squid-users] Can't download settings from proxy? Notnecessarily a Squid issue, but maybe someone can help.

On Sat, 2003-03-29 at 05:04, Scott Wrosch wrote: > Hi Group, > > Well, I believe I have discovered the issue. Leave it to Microsoft to > screw things up. (I love how they specifically noted Squid in the KB > article I will link to below.) > > Apparently they got this great idea (and it actually

RE: [squid-users] NTLM questions (sorry)

On Sat, 2003-03-29 at 07:51, [EMAIL PROTECTED] wrote: > http://www.squid-cache.org/Doc/FAQ/FAQ-23.html will prove very helpful. > You need samba --with-winbind and --with-winbind-auth-challenge, and > join the domain for squid's ntlm authentication to work. The winbind > and windows domain server

RE: [squid-users] Can't download settings from proxy? Notnecessarily a Squid issue, but maybe someone can help.

On Sat, 2003-03-29 at 08:24, Scott Wrosch wrote: > Hi Rob, > > That's the strange thing though. It does seem to work. You can't click > it on and off in the same instance. You have to click it off, click ok, > close the browser down, then re-open it and do the same thing all over > again. I've

Re: [squid-users] pix wccp with squid

On Sun, 2003-03-30 at 04:18, STAN BUSKUS wrote: > All, > Is there a way to configure pix wccp to squid? Not as far as I know. > It looks > like the pix > will only accept webcents and n2h2 as vendors. Which begs > the questions > why have a protocol that is vendor specific? At any rate, > I

Re: [squid-users] browser caught in a loop while redirecting

On Fri, 2003-04-04 at 07:29, Mack wrote: > Hi! > > This has probably come up before on the list, but couldn't find anything. I have > the > following code as a redirection perl script: > > #!/usr/bin/perl > $|=1; > > while (<>) > { > $url = "http://www.somesite.com\n";; >

Re: [squid-users] Squid hangs for 9 seconds before serving a page

On Sun, 2003-04-06 at 18:46, Mauro wrote: > Can explain me how to proceed to install a dns cache? > Which software? > I use squid2.4 stable 6 in a linux debian woody box. > Thank you. For squid, you dont' need to. Squid has a dns cache built into it (for it's use alone). Rob -- GPG key available

Re: [squid-users] Squid hangs for 9 seconds before serving a page

On Sun, 2003-04-06 at 19:43, Mauro wrote: > I use a proxy server to connect about 600 client (the requests are about 300 a > minute) of a lan to internet. > So there's no need for a dns cache? > Thank you That's right, squid's internal cache will handle this. You can check on it with cache manage

Re: [squid-users] Squid hangs for 9 seconds before serving a page

On Sun, 2003-04-06 at 21:05, Awie wrote: > Mauro, > > For me, 600 clients is quite busy (if it is concurrent). > > But Robert made me a bit confuse that Squid has it's own DNS Cache. > Doesn't > Squid use the parameter "nameserver" in the file resolv.com?. If no, > will > Squid able to act as DNS

Re: [squid-users] Squid hangs for 9 seconds before serving a page

On Sun, 2003-04-06 at 21:16, Awie wrote: > Robert, > > So it still need an "external" DNS Cache Server, doesn't it? If yes, we > should have (own) the such server as Squid cannot act as DNS Cache. No. Squid needs an external nameserver, it does not need an external cache. Rob -- GPG key availa

Re: [squid-users] Squid hangs for 9 seconds before serving a page

On Sun, 2003-04-06 at 21:26, Awie wrote: > OK. I am understand now. I think the confuse is "DNS Cache" as a brand > and/or service > > Squid needs a "server" (i.e. DJB DNS Cache) to resolve the name and keep the > data into its "memory". Hope I am right. To resolve the name - yes. To keep the dat

Re: [squid-users] Ncsa Authentication

On Mon, 2003-03-31 at 22:23, Dvd wrote: > Hi i use Ncsa Authentication. The problem is that when i close and after > i open my browser, squid ask me again to authenticate although i was > just authenticated...any suggest? Don't close the browser:]. Rob -- GPG key available at:

Re: [squid-users] http headers modified by squid?

On Mon, 2003-04-07 at 11:11, [EMAIL PROTECTED] wrote: > This email is to be read subject to the disclaimer below. > > Hi, > > Running Squid 2.4 STABLE7 on solaris 8 and have been having problems with > a specific site. > > The developers of this site have responded and said that squid is not >

Re: [squid-users] SPAM/VIRUS sent to squid-users? (RE: Database atInfinex)

la. w wrote: Is there a reason for attaching what appears to be an empty file named PNI.sln.exe and why is it was sent to "Squid-users" via email harvesting off of the squid users list using "Bcc" to individual users? Is "[EMAIL PROTECTED]" even a real user on squid-users? Did anyone else get a me

Re: [squid-users] HTTP 401.3 - Access denied

[EMAIL PROTECTED] wrote: Hi, There is some URL when I try to access through squid i get "HTTP 401.3 - Access denied ..." when I actually shout be prompted to log on with my username & password, any idea ?? Some URLs: http://www.cgm.se/ppt/op-bord.htm http://www.coneagle.com/public They are using M

Re: [squid-users] Segment Violation

Daniellek wrote: But there's no core file... Is it possible that squid: 1. Didn't create core? Yep. There is a FAQ entry on getting cores :"}. I suggest you read that.. so you can be ready if this problem reoccurs. Cheers, Rob

Re: [squid-users] My ignorance or Squid lack this?

On Wed, 2003-06-25 at 22:42, Henrik Nordstrom wrote: > Adding a function natively to Squid to selectively terminate sessions is > possible, but requires a bit of coding as it is not a function which > exists today. There was a post on slashdot recently about a tool to run on a unix router to act

Re: [squid-users] max_user_ip

On Fri, 2003-07-04 at 03:11, Alejandro Javier Pomeraniec wrote: > Hi ! > > Is it possible to use max_user_ip with differents values depending on the user that > logs into the system? yes something like acl 10 max_user_ip 10 acl 20 max_user_ip 20 acl authed proxy_auth REQUIRED http_access deny a

Re: [squid-users] [wishlist] removal policy should also moveobjects to sibling caches

On Fri, 2003-07-04 at 06:25, Bob Arctor wrote: > it would be great if squids could move data to sibling caches having enough > free space available instead of merely deleting them. > this can be done by introducing special icp_balance query . ICP is one approach. Another would be to provide a ge

RE: [squid-users] ACL Regex Browser - for Adobe Web capture?

On Fri, 2003-07-11 at 11:27, [EMAIL PROTECTED] wrote: > err. adobe PDF web capture you basically start adobe and say capture a web > page and paste in a url and say grab. it's very very good at making A4 pdfs > out of fairly bad web pages. it doesn't go to 'capture servers' as > such. i ma

[squid-users] Re: Norton AntiVirus detected and quarantined a virus in a messageyo u sent.

On Fri, 2003-07-11 at 11:45, SEMELE NAV for Microsoft Exchange wrote: > Recipient of the infected attachment: Eider Silva de Oliveira\Inbox > Subject of the message: RE: [squid-users] ACL Regex Browser - for Adobe Web > capture? > One or more attachments were quarantined. > Attachment was Quar

RE: [squid-users] ACL Regex Browser - for Adobe Web capture?

On Fri, 2003-07-11 at 12:03, [EMAIL PROTECTED] wrote: > Hi Robert, > > >you can simply allow adobe based on a browser regex before your auth > >triggering http_access lines. > > that's what i'm hoping to do to get around this problem. have you managed > to do this? i've not experimented yet as

RE: [squid-users] Re: ntlm won't prompt

On Fri, 2003-07-11 at 12:49, Adam Aube wrote: > A good compromise would be for Mozilla to prompt for username, password, > and domain, then use that info to do NTLM. Wouldn't have all the > benefits of Windows NTLM, but would be more secure than basic and > wouldn't require cleartext password st

RE: [squid-users] Re: ntlm won't prompt

On Fri, 2003-07-11 at 13:18, Adam Aube wrote: > >Digest, per se, doesn't require clear text password storage. > >Squids supplied helper uses cleartext, but that is simply -a- > >implementation. Squid itself never needs the cleartext password. > > Technically, yes - digest auth does not require the

  1   2   3   4   5   >