[squid-users] How does an external helper works ?

2004-01-23 Thread Riccardo Fontana
I'm trying to write a simple external helper that suite my needs. Is it enough to write an endless loop in perl script that read data from stdin (username) and return OK or ERR checking soma basic functions ? I've tried it but it doesn't get the username variable from the auth_helper I'm using

RE: [squid-users] squid can ' t load acl's

2004-01-23 Thread Elsen Marc
I trying to use squid w/ a huge list ( more tham 200.000 sites) and when I start squid , after +_1 min I receive a message saying that it could not start. Starting proxy server: 2004/01/22 18:01:45 /etc/init.d/squid: line 133: 9223 Terminated start-stop-daemon --quiet

Re: [squid-users] does squid work with content filter tools?

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Mrvka Andreas wrote: does squid work with content filter tools to keep surfing safe? Depends on the content filter tool. Many have some form of integration for Squid to various degrees. Be warned that some require proprietary patches which can not be supported by the

[squid-users] Resolving local addresses

2004-01-23 Thread Koppen, Peter van
I've only recently become a member of [squid-users] so bare with me. We are using an old version of Squid, version 2.2 on SuSe 7.1 We are working on an upgrade to Suse 8.2 with Squid 2.5 stable1. On our old squid if we browse to a local server with the short name (intranet) the proxy would

[squid-users] Access Control configuration prevents your request

2004-01-23 Thread michel lodap
Hi All, In the ACL section of my squid.conf file I have port 7101 allowed, but when I try to connect to a remote site siteapp.ancheimservices.ie:7101 I am getting a access denied. Access Control configuration prevents your request. It's working fine when I bypass the proxy. Am I missing

[squid-users] connection time

2004-01-23 Thread Leo
Hi, can somebody explain to me, how sarg calculates the connection time to a site. This to understand the total connection time to a specific site during a day or a week. thanks in advance X-LINK TELECOM LTDA Leo van Bussel Departamento Técnico de T.I. End : R: Camoes ,1684 Curitiba - Parana

Re: [squid-users] Block port to users

2004-01-23 Thread michel lodap
Hi Christoph, Thanks for the ACL but how can I block the ports to a specific range of ip addresses?Michel _ Trouvez l'âme soeur sur MSN Rencontres ! http://g.msn.fr/FR1000/9551

RE: [squid-users] Access Control configuration prevents your request

2004-01-23 Thread Elsen Marc
Hi All, In the ACL section of my squid.conf file I have port 7101 allowed, but when I try to connect to a remote site siteapp.ancheimservices.ie:7101 I am getting a access denied. Access Control configuration prevents your request. It's working fine when I bypass the proxy. Am I

Re: [squid-users] Cache_dir not found

2004-01-23 Thread Serassio Guido
Hi, At 04.05 23/01/2004, damk wrote: SquidNT by default use c:/ as root directory. You can play around a bit with regedit, find Registry stored HKLM\SOFTWARE\GNU\SquidNT\2.5\squid\ConfigFile value c:/squid/etc/squid.conf this line appear when you do squid -i -n squidservice Just change c:/

Re: [squid-users] Cache_dir not found

2004-01-23 Thread Serassio Guido
Hi, Il 01.49 23/01/2004 David Kirk ha scritto: Hey, I have installed Squid-2.5.STABLE4-NT on a Windows 2000 Professional PC in our DMZ. It seems to be proxying all right, but it is not caching anything. I had a look at the cache.log and found the following error: chdir: c:/squid/var/cache:

RE: [squid-users] squid can ' t load acl's

2004-01-23 Thread Paulo Ricardo
Em Sex, 2004-01-23 s 06:30, Elsen Marc escreveu: I trying to use squid w/ a huge list ( more tham 200.000 sites) and when I start squid , after +_1 min I receive a message saying that it could not start. Starting proxy server: 2004/01/22 18:01:45 /etc/init.d/squid: line 133:

RE: [squid-users] squid can ' t load acl's

2004-01-23 Thread Elsen Marc
Em Sex, 2004-01-23 s 06:30, Elsen Marc escreveu: I trying to use squid w/ a huge list ( more tham 200.000 sites) and when I start squid , after +_1 min I receive a message saying that it could not start. Starting proxy server: 2004/01/22 18:01:45

Re: [squid-users] MySql Authorization

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Riccardo Fontana wrote: I'm already using Netbios authentication but instead of the group helper i would prefer to create an ACL based on a mysql table. Then you need to create a small helper to query your mysql table. See the external_acl_type directive. Regards Henrik

Re: [squid-users] squid-3 and epoll

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, unixware wrote: FATAL: comm_select_init: epoll_create(): (38) Function not implemented Looks like your kernel does not have epoll support compiled. Regards Henrik

Re: [squid-users] Reverse proxy for ssl site

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Steve Hodges wrote: I know that what I am describing so far is just a reverse proxy. But -- in the case of the https server, I need SSL negotiation to happen between the client and the *target* server, not between the client and the squid In such case you need a TCP plug

Re: [squid-users] fqdncache

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004 [EMAIL PROTECTED] wrote: The default fqdncache is 1024. Is this low? Depends. How many clients do you have? And are you really using the fqdncache? (only used if you use srcdomain acls or have log_fqdn enabled) Maybe your question is actually about ipcache? In such case,

Re: [squid-users] MySql Authorization

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Riccardo Fontana wrote: Tha problem is that I don't know how to make squid pass username checked with wb_auth to this helper. As you do when you are not using this helper. The two are independent. I've tried the following configuration but it doesn't work. Probably I

Re: [squid-users] ntlm_auth utils not working as non-root user

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Stephen W. Corey - 5535 wrote: I restarted the smb service yesterday (I haven't restarted it in a long time) and now the ntlm_auth command doesn't work as a non-root user. I discovered this when Squid started prompting everyone for login info, and it never accepts the

Re: [squid-users] cache digest based sibling selection

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Stuart Smith wrote: Can someone please explain to me the mechanism squid uses to select a sibling to fulfil a request if more than one sibling has the object, and I am using cache digests ? In case of ICP the first one that answers. The faq says that it will use NetDB

Re: [squid-users] Squid Java Applet Authentication Request

2004-01-23 Thread Henrik Nordstrom
On Thu, 22 Jan 2004, Burnes, James wrote: Perhaps I just didn't see this feature in the Squid docs, but does Squid by default try to launch an authentication dialog when it see's Java applet content in the stream? No. But if your proxy requires authentication then Squid insist on login

Re: [squid-users] Cache_dir not found

2004-01-23 Thread Henrik Nordstrom
yOn Fri, 23 Jan 2004, David Kirk wrote: When I ran squid -z to create the cache, it must have read that line in the squid.conf because it created all the cache subdirectories on the D drive, so I can't figure out why it won't work when I start up squid? Did you remember to specify the correct

Re: [squid-users] Iptables rules for squid

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, Mathew Thomas wrote: transparent caching. I would like to know how should I set the Ip tables rules, like which port should be opened for LAN and which port should be opened for internet, etc. The LAN needs to be able to access the proxy port (http_port). In addition

Re: [squid-users] How does an external helper works ?

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, Riccardo Fontana wrote: Is it enough to write an endless loop in perl script that read data from stdin (username) and return OK or ERR checking soma basic functions ? Yes, until there is no input. You need to remember to make stdout unbuffered thou. Where can I found a

Re: [squid-users] Access Control configuration prevents your request

2004-01-23 Thread Henrik Nordstrom
What does access.log say? On Fri, 23 Jan 2004, michel lodap wrote: Hi All, In the ACL section of my squid.conf file I have port 7101 allowed, but when I try to connect to a remote site siteapp.ancheimservices.ie:7101 I am getting a access denied. Access Control configuration prevents your

Re: [squid-users] Transparent User ACL under Windows Terminal Server

2004-01-23 Thread Jaime Nebrera Herrera
Hi Henrik, Ajah, yes that might be a choice, but some of the systems dont depend on us (preciselly the AD server :) but is a good choice For both access methods to AD (Winbind or LDAP) you need some cooperation from the directory managers. Yes, indeed. We are working with the company

Re: [squid-users] How do you exclude a specific URL from being logged to access.log.

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, Brendan Kelliher wrote: My squid access.log fills up with connections to the site www.viewbonds.com. I want to exclude this one site from showing up in the access.log file without denying it to users. See the customlog patch or Squid-3.0 when it gets released. Regards

[squid-users] How to compile ldap_group

2004-01-23 Thread Listas SouthNet
Hi, I have a Squid2.5 stable 3 running on a RH8 box. I want add the ldap group helper, so, I have downloaded squid 2.5 stable4. I known that i need compile the helper and then compile the squid it self with the option to use that helper. but I don't know how to compile the ldap group, there is

Re: [squid-users] eSafe Gateway as parent proxy

2004-01-23 Thread Stephen J. McCracken
On Thu, 2004-01-22 at 15:24, Stephen J. McCracken wrote: Is the following correct? Should I blame esafe and go after the problem there? Just to wrap up the thread, yes, the problem was with the eSafe Gateway. It requires a proxy between it and the Internet. We installed a small squid between

RE: [squid-users] Impossible keep-alive header

2004-01-23 Thread M J
I had the same problem using the following snapshot squid-2.5.STABLE4-20040123.tar.bz2. Henrik wasn´t the keep-alive.patch incorporeted in to the daily snapshot ? Many thanks in advance, Leon. From: Henrik Nordstrom [EMAIL PROTECTED] To: Mike Mitchell [EMAIL PROTECTED] CC: [EMAIL PROTECTED

[squid-users] please help - looping 301/302 redirect in an ssl reverse proxy

2004-01-23 Thread Mike_Ring
Hello everyone, I'm new to squid and I've been pulling out hairs on this problem all morning. Perhaps someone on the list has some advice. Here's the situation: I need to setup an SSL reverse proxy that will handle https traffic on port 443 from client (IE6) to proxy, and http traffic on port

Re: [squid-users] How do you exclude a specific URL from being logged to access.log.

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, Brendan Kelliher wrote: I've been looking at your site: devel.squid-cache.org/customlog/ I can see how it allows configuring everything in access.log, but I'm missing how one might exclude a specific URL with it. To exclude viewbonds.com, would it be something in

RE: [squid-users] Impossible keep-alive header

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004, M J wrote: I had the same problem using the following snapshot squid-2.5.STABLE4-20040123.tar.bz2. Henrik wasn4t the keep-alive.patch incorporeted in to the daily snapshot ? Many thanks in advance, Leon. All the changes discussed are in the current snapshot. Please

Re: [squid-users] please help - looping 301/302 redirect in an ssl reverse proxy

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004 [EMAIL PROTECTED] wrote: The login page to the backend server got proxyed correctly, but after logon the return traffic to the client contained frames with links to 'http://backend.foo.com:8015'. Then you need to fix your application to use relative links. Absolue paths

Re: [squid-users] please help - looping 301/302 redirect in an ssl reverse proxy

2004-01-23 Thread Mike_Ring
Henrik, Thank you for the reply, but I'm afraid I don't quite understand your answer. I thought that configuring external DNS to point 'backend.foo.com'at the squid box would be sufficient to deal with the link problem. In fact, when I make squid listen to http on 8015, it handles the links

RE: [squid-users] Impossible keep-alive header

2004-01-23 Thread M J
-alive.patch ) and the warning decreased from 1 warning per 10 seconds to 1 warning per 4 or 5 hours (acceptble). Today I have compiled squid-2.5.STABLE4-20040123.tar.bz2 to know if the problem was solved but the cache.log file starts to increase those warnings. My topology: I have two proxies

Re: [squid-users] please help - looping 301/302 redirect in an ssl reverse proxy

2004-01-23 Thread Henrik Nordstrom
On Fri, 23 Jan 2004 [EMAIL PROTECTED] wrote: Thank you for the reply, but I'm afraid I don't quite understand your answer. I thought that configuring external DNS to point 'backend.foo.com'at the squid box would be sufficient to deal with the link problem. In fact, when I make squid listen to

Re: [squid-users] please help - looping 301/302 redirect in an ssl reverse proxy

2004-01-23 Thread Mike_Ring
Cool, it's good to know that squid is capable of doing what I needed it to. I must be doing something wrong with the redirector scripts. I'll dive back into it in the morning. I'll also consider the security implications of ending the ssl endpoint elsewhere than the application server. There

[squid-users] subscription

2004-01-23 Thread Rajnish Kr. Gangwar
With Regards Rajnish Kr. Gangwar