RE: [squid-users] strong authentication method

2005-06-17 Thread Emilio Salgari

I put this lines in my squid.conf (I have squid 2.5 STABLE 8):

auth_param basic program /usr/local/squid/libexec/ncsa_auth 
/usr/local/squid/etc/passwd


acl foo proxy_auth name_of_user
acl all src 0/0
http_access allow foo
http_access deny all

And I also restriced web sites that name_of_user can visit (I omitted it in 
the example above).


I have created /usr/local/squid/etc/passwd file using htpasswd from Apache 
(password in ecrypted).


Is this secure?
What kind of problems may I have?


From: Emilio Salgari [EMAIL PROTECTED]
To: squid-users@squid-cache.org
Subject: [squid-users] strong authentication method
Date: Thu, 16 Jun 2005 16:33:34 +

Hi guys!
I have squid perfectly running on a linux server.
Till now, since this server has only a private IP address I have put no 
authentication for my clients (inside lan) using squid.
In the next days I will give a public static IP address to this machine but 
I want that only MY clients can access my proxy (my clients will have 
public dinamic IP addresses, since they will connect from outside lan).

My clients are on a win2000 or winxp box.

What kind of strong authentication method should I use?
Is there something stronger than simple username-password?

Anyway, what modifications should I make to my squid.conf?

Thanks in advance for any advice!







[squid-users] strong authentication method

2005-06-16 Thread Emilio Salgari

Hi guys!
I have squid perfectly running on a linux server.
Till now, since this server has only a private IP address I have put no 
authentication for my clients (inside lan) using squid.
In the next days I will give a public static IP address to this machine but 
I want that only MY clients can access my proxy (my clients will have public 
dinamic IP addresses, since they will connect from outside lan).

My clients are on a win2000 or winxp box.

What kind of strong authentication method should I use?
Is there something stronger than simple username-password?

Anyway, what modifications should I make to my squid.conf?

Thanks in advance for any advice!




[squid-users] windows update problems

2004-02-12 Thread Emilio Salgari
Hi!
In my squid.conf I have set
acl windowsupdate dstdomain .windowsupdate.microsoft.com
http_access allow our_network1 windowsupdate
http_access allow our_network2 windowsupdate
no_cache deny windowsupdate
In this way all users from our_network1 and our_network2 can access windows 
update, but when it tries to look for new updates it ends up says that there 
has been an error.

Does anyone of you update his win machine regularly through squid?

Any hint?

Thanks in advance!

_
Nuovo MSN Messenger con sfondi e giochi! http://messenger.msn.it/ Provalo 
subito!



[squid-users] Squid for Windows?

2003-12-18 Thread Emilio Salgari
Is there something similar to Squid, but running on Windows?

I'm looking for an open source (or freeware) and highly reliable proxy 
server that can run on my windows 2000 machine.

Any ideas?

Thanks!

_
MSN Extra Storage: piena libertà di esprimersi e comunicare  
http://www.msn.it/msnservizi/es/?xAPID=534DI=1044SU=http://hotmail.it/HL=HMTAGTX_MSN_Extra_Storage



[squid-users] FTP from browser (Internet Explorer 6) with read-write-modify permission

2003-11-24 Thread Emilio Salgari
Hi guys!

I have a problem with Squid 2.5 stable3.
I configured successfully almost everything in squid.conf, but there is 
still one thing that doesn't work fine.

My users can access ftp servers using their browser (Internet Explorer) but 
they can ONLY see directories, and see and download files.

When they access ftp servers (through squid), Internet Explorer tells them 
that proxy server lets them ONLY read and download (no modification, no 
writing and no upload).

In facts, without proxy, users can (with same Internet Explorer) download, 
upload, rename, create, delete and modify files and directories without any 
problem.

What tags should I change in squid.conf to obtain these things?
Or is it a problem with browsers options?
I want no limitation for my users when they access any ftp server.
Squid gurus, please help me!

I don't want to install an ftp proxy...

Thanks anyway.

_
Filtri antispamming e antivirus per la tua casella di posta 
http://www.msn.it/msn/hotmail