[squid-users] Blocking game sites with squid

2010-01-29 Thread a bv
Hi, I have to block game sites with squid and only have ACL filtering for now. So how can all do this? I dont have an URL list for game sites now Regards

[squid-users] sslBump Certificate Error

2010-01-29 Thread anand phulwani
Dear List, 1) cd /home/user/Desktop 2) /usr/lib/ssl/misc/CA.pl -newca 3) openssl req -new -nodes -x509 -keyout ca.key -out ca.crt -days 3650 4) openssl req -new -nodes -keyout key.key -out key.req 5) openssl ca -policy policy_anything -days 3650 -out key.crt -infiles key.req I created

[squid-users] Tproxy vs Squid Transparent For Gtalk

2010-01-29 Thread anand phulwani
Dear List, I dont know what is the status of the gtalk binary problem but as i last read for the post from Amos i think the problem is not yet solved, Amos if you have read this, requesting you to comment on the present status, i was using squid3.1 for sslBump and was wondering that if Tproxy

Re: [squid-users] stats per cache_peer

2010-01-29 Thread Amos Jeffries
Chris Robertson wrote: Struzik Wojciech wrote: Is it possible to get any kind of statistic per cache_peer (squid 2.7 stable7) for example: bandwidth usage, transfered data ??? Thanks in advance for any help :) The log analyzer scalar.awk provides statistics on hierarchy requests and

Re: [squid-users] Tproxy vs Squid Transparent For Gtalk

2010-01-29 Thread Amos Jeffries
anand phulwani wrote: Dear List, I dont know what is the status of the gtalk binary problem but as i last read for the post from Amos i think the problem is not yet solved, Amos if you have read this, requesting you to comment on the present status, i was using squid3.1 for sslBump and was

Re: [squid-users] Blocking game sites with squid

2010-01-29 Thread Amos Jeffries
a bv wrote: Hi, I have to block game sites with squid and only have ACL filtering for now. So how can all do this? I dont have an URL list for game sites now You will need one to begin. Step one is entering the list of sites or IPs into an ACL. Amos -- Please be using Current Stable

Re: [squid-users] Do not cache 302 !!

2010-01-29 Thread Amos Jeffries
Chris Robertson wrote: Amos Jeffries wrote: Youenn Boussard wrote: Hello the list, I put this directive in my squid.conf : acl redirect rep_header Location . no_cache deny redirect So I expect that all response with Location header will be not cache. Or when the first url is HTTP/1.1 302

Re: [squid-users] config of squid to use external proxy

2010-01-29 Thread Amos Jeffries
Clemente Aguiar wrote: - Mensagem Original- De: Clemente Aguiar clemente.agu...@madeiratecnopolo.pt Para: Amos Jeffries squ...@treenet.co.nz Cc: squid-users@squid-cache.org Assunto: Re: [squid-users] config of squid to use external proxy Data: Thu, 28 Jan 2010 15:15:43 + Sex,

Re: [squid-users] Squid, Exchange 2007 RPC, certificates and the rabbit hole

2010-01-29 Thread Amos Jeffries
Brett Lymn wrote: On Fri, Jan 29, 2010 at 03:21:04AM +1300, Amos Jeffries wrote: NOTE: The Squid wiki was written for Exchange 2003. I _know_ things have changed somewhat for Exchange 2007. If there is anyone out there who got this working or wants to try, _please_ let us know what to

Re: [squid-users] cache_peer selection

2010-01-29 Thread Amos Jeffries
Dieter Bloms wrote: Hi, On Wed, Jan 27, Soporte Técnico AlemNet wrote: How can i make cache_peer selection for blocks of ip of my network ? Example. 192.168.0.xxx i want to use cache_peer 172.16.1.1 192.168.1.xxx i want to use cache_peer 172.16.1.2 192.168.1.xxx i want to use DIRECT this

[squid-users] Squid + ldap_auth + transparent

2010-01-29 Thread Ricardo Souza
Hi, i configured a squid to auth at my Active directory. I was working fine when i set proxy manually. When i try to make it in production i got only TCP_DENIED. How can i configure it on transparent mode + ldap_auth This is my squid.conf: http://187.8.216.250/squid.conf thanks

RE: [squid-users] Squid 3.0 stable20 crash

2010-01-29 Thread Kingsley Foreman
Coredump with debugging, more to come warning: Can not parse XML syscalls information; XML support was disabled at compile time. GNU gdb (Gentoo 7.0 p2) 7.0 Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html This is free

Re: [squid-users] Tproxy vs Squid Transparent For Gtalk

2010-01-29 Thread anand phulwani
Dear List, So Does That Mean Transparent Squid And Gtalk Is Not Possible As Of Now? Thanks, Anand The INTERNET now has a personality. YOURS! See your Yahoo! Homepage. http://in.yahoo.com/

[squid-users] squid-3.1.0.15 and WCCPv1

2010-01-29 Thread Graham Keeling
Hello, I am trying to upgrade my squid from 2.5 to 3.1. I have got all my old configuration working on 3.1, except... I am coming across a problem with WCCPv1. 172.16.13.56 is the address of the squid box. 172.16.13.2 is the address of the cisco router. I have wccp_router=172.16.13.2 in my

[squid-users] Configuring Squid on a MAC

2010-01-29 Thread akosh.kobash
I have installed squid 3.0 on a MAC mini running Leopard 10.5.8. I would like to configure squid to act 1. as a proxy 2. as a web cache How do I go about this Am using webmin as a GUI tool for configuring squid. -- View this message in context:

[squid-users] Re: squid_ldap_auth with two or more domain-controllers?

2010-01-29 Thread Tom Tux
Hi all, Any hints about this question? 2010/1/11 Tom Tux tomtu...@gmail.com: I configured our squid to authenticate with squid_ldap_auth squid_ldap_group against an active-directory. With the parameter -h [ip-address of domain-controller], I'm able to define one ore more of our ldapservers

[squid-users] Fwd: squid_ldap_auth with two or more domain-controllers?

2010-01-29 Thread Tom Tux
Hi all, Any hints about this question? Thanks a lot. -- Forwarded message -- From: Tom Tux tomtu...@gmail.com Date: 2010/1/11 Subject: squid_ldap_auth with two or more domain-controllers? To: squid-users squid-users@squid-cache.org I configured our squid to authenticate with

Re: [squid-users] squid-3.1.0.15 and WCCPv1

2010-01-29 Thread Graham Keeling
On Fri, Jan 29, 2010 at 11:35:00AM +, Graham Keeling wrote: Hello, I am trying to upgrade my squid from 2.5 to 3.1. I have got all my old configuration working on 3.1, except... I am coming across a problem with WCCPv1. 172.16.13.56 is the address of the squid box. 172.16.13.2 is

Re: [squid-users] squid-3.1.0.15 and WCCPv1

2010-01-29 Thread Graham Keeling
On Fri, Jan 29, 2010 at 03:59:29PM +, Graham Keeling wrote: On Fri, Jan 29, 2010 at 11:35:00AM +, Graham Keeling wrote: Hello, I am trying to upgrade my squid from 2.5 to 3.1. I have got all my old configuration working on 3.1, except... I am coming across a problem with

Re: [squid-users] Restrict access to proxies by IP

2010-01-29 Thread ad...@mynovanet.com
Thanks Chris. I read the FAQ and saw how to limit URLs by IP but not how to authorize proxy access by ACL. Any further suggestions? On Thu, Jan 28, 2010 at 2:06 PM, Chris Robertson crobert...@gci.net wrote: ad...@mynovanet.com wrote: We have several clients using select proxies. Currently we

[squid-users] squid help: https, ftp problem

2010-01-29 Thread David C. Heitmann
good evening squid support team, i have problems with connection to https and ftp sites with squid :( my squid.conf file is in attachement. thanks to regard david c. heitmann #Netzwerkverbindungen http_port 192.168.10.10:8080 http_port 192.168.10.10:3128 #ICP Protokoll icp_port 0

[squid-users] ICAP and ISTag header

2010-01-29 Thread Ming Fu
I am wondering how the ISTag header is used by the squid 3. Will the change of the ISTag cause all cache to be invalid or just the cache of the requested url become invalid? In the code, it seems the IStag is only parsed on Options. Thanks Ming -- Ming Fu | Senior Developer WatchGuard

[squid-users] Check bandwidth

2010-01-29 Thread J. Webster
Is there anyway to monitor the current bandwidth in use by a user (NCSA auth) on squid? Occasionally we get a user downloading too many videos at once, which blocks bandwidth to other users on the network. As I have no idea which user it is until the end of the day (SARG reports), we just

[squid-users] monitor bandwidth

2010-01-29 Thread J. Webster
Is there anyway to monitor the current bandwidth in use by a user (NCSA auth) on squid? Occasionally we get a user downloading too many videos at once, which blocks bandwidth to other users on the network. As I have no idea which user it is until the end of the day (SARG reports), we just

[squid-users] Transparent SSL proxy w/ client-side certificates

2010-01-29 Thread Damon Miller
Hello all. I have a question regarding the use of client-side certificates through a transparent SSL proxy (Squid or otherwise). Is this possible? I've configured Squid 3.1.0.15 as a transparent SSL proxy and that works. Browsers complain about name mismatches but that's expected without dynamic

[squid-users] Squid complaining of not able to find libssl.so.

2010-01-29 Thread Rajesh Nair
Hi Forum, I am facing this wierd in starting squid I have the squid compiled with ssl enabled $ ./configure --enable-ssl --with-openssl=/usr/local/ssl $ make $ make install The compilation all works fine but when I execute the squid it complains of not able to find the libssl.so.0.9.8.