AW: [squid-users] redirection?

2004-07-16 Thread Werner . Rost
Please search the archives and the internet. AFAIK headsup was a solution I successfully tested a long time ago. Mit freundlichem Gruß/Yours sincerely Werner Rost GM-FIR - Netzwerk ZF Boge Elastmetall GmbH Friesdorfer Str. 175, 53175 Bonn, Deutschland/Germany Telefon/Phone +49 228 3825 - 420,

[squid-users] Transparent Proxy and exchange 2000

2004-07-16 Thread Milic Sascha
Hello, i know that this point was discussed many times. I tried out all suggestions. It works for Exchange 2003 but not for 2000. The situation is: squid 2.5 is on a public ip adress with httpd_accel params (see below), forwarding to CA eTrust SCM as parent cache (see below) and exchange 2000

Re: [squid-users] SQUID + LDAP HELP

2004-07-16 Thread Stephane DAVY
external_acl_type AD_Group %LOGIN /usr/lib/squid/squid_ldap_auth -b cn=users,dc=dom1,dc=info,dc=co -D cn=user1,cn=users,dc=dom1,dc=info,dc=co -h 10.10.1.25 -w pass1 -S -f ((cn=%u)(memberOf=cn=internet,cn=users,dc=dom1,dc=info,dc=co)) it seems that your external_acl definition is wrong,

[squid-users] web polygraph

2004-07-16 Thread Costas Zacharopoulos
Can I install web polygraph on a slackware machine?

[squid-users] squid have to redirect when domains appartain a list

2004-07-16 Thread Pierluigi
I don't know if I can do it with squid, here is the situation: I have a list of domains. When a client try to connetct to a domain of the list, squid doesn't have to connect directly to internet but it has to redirect to another squid (using username and password) How can I do this? Thanks in

RE: [squid-users] Client Configuration

2004-07-16 Thread Mark Tinka
I use Cisco's WCCP protocol to forward all HTTP requests to my Squid proxy. You will have to build squid with the --enable-linux-netfilter --enable-wccp option, install the wccp module and a few other steps. This will enable you to route all your traffic to squid without touching each

[squid-users] Squid ghost image

2004-07-16 Thread Chris Perreault
Not really a squid question persay... Any recommendations for ghosting a configured server? We are building 6 squid servers and it would be much simpler to ghost the first one and use that image for the rest. We use a ghost program for our windows servers but the last time I tried that on linux

RE: [squid-users] Client Configuration

2004-07-16 Thread Wayne . Fielder
I've been meaning to reply to this...I'm interested in how Scott did this but I don't *THINK* I can implement it for a couple reasons: 1) We are not a Cisco shop. 2) Even if we had Cisco routers, I don't control the routers(grumble grumble). I'm sorta wondering though...since there is an RFC for

RE: [squid-users] Client Configuration

2004-07-16 Thread Scott Phalen
I would be very interested in your setup, especially the following: o How you got the GRE tunnel going o How the firewall config was affected by the GRE setup o What errors, if any, you got from the kernel after compiling wccp into it

[squid-users] squid and viralator

2004-07-16 Thread jim
Has anyone played around with viralator? Jim

[squid-users] LDAP_AUTH HELP

2004-07-16 Thread Scott Phalen
I am trying to configure LDAP_AUTH for clients on a netware network. I can get the login prompt to come up but I get the below error when logging in: Am I missing something in this config? The following error was encountered: * Cache Access Denied. Sorry, you are not currently allowed to request:

[squid-users] dialer downloads bypassing squid acls

2004-07-16 Thread Luis Miguel
Hi all, I am using squid to secure access to the web, using ACLS' I stopped certain people from download dangerous files, the problem is that I cant block certain malicious downloads, this downloads never show the filename on a GET or POST command, the filename is send by the server on a MIME

RE: [squid-users] dialer downloads bypassing squid acls

2004-07-16 Thread Scott Phalen
We need a way to filter based on the whole MIME replied header or on select mime fields (filename) to cath this downloads. I created an ACL to block by keyword, e.g. dialerexe. This will block any URL that contains that word in the URL string. IF a user attempts to reach a legitimate site with

Re: [squid-users] dialer downloads bypassing squid acls

2004-07-16 Thread Luis Miguel
El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió: We need a way to filter based on the whole MIME replied header or on select mime fields (filename) to cath this downloads. I created an ACL to block by keyword, e.g. dialerexe. This will block any URL that contains that

Re: [squid-users] download.windowsupdate.com

2004-07-16 Thread Lizzy Dizzy
Really? Almost all the request for windowsupdate results in a TCP_MISS/206: TCP_MISS/206 2440 GET http://download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/WindowsXP-KB825119-x86-ENU_1b9f23b64b002d1e9d1eaba62f5f8fd.exe - DIRECT/211.39.137.158 application/x-msdownload Do'nt think

[squid-users] Can't find DC for domain domain

2004-07-16 Thread Octavio Alvarez Piza
Hi, my name is Octavio and this is my first post to this list. I'm having trouble setting Squid on an NT server. I'm using Guido Serassio's native port. Everything worked correctly on the test machine, but when moving to the real server (which is the PDC for the domain) I get the following error

[squid-users] Re: dialer downloads bypassing squid acls

2004-07-16 Thread Adam Aube
Luis Miguel wrote: El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió: We need a way to filter based on the whole MIME replied header or on select mime fields (filename) to cath this downloads. I created an ACL to block by keyword, e.g. dialerexe. This will block any URL

[squid-users] Re: squid have to redirect when domains appartain a list

2004-07-16 Thread Adam Aube
Pierluigi wrote: I have a list of domains. When a client try to connetct to a domain of the list, squid doesn't have to connect directly to internet but it has to redirect to another squid (using username and password) The never_direct acl might be of use here - more information can be found

Re: [squid-users] Can't find DC for domain domain

2004-07-16 Thread Serassio Guido
Hi, At 20.06 16/07/2004, Octavio Alvarez Piza wrote: Hi, my name is Octavio and this is my first post to this list. I'm having trouble setting Squid on an NT server. I'm using Guido Serassio's native port. Everything worked correctly on the test machine, but when moving to the real server (which

Re: [squid-users] Re: dialer downloads bypassing squid acls

2004-07-16 Thread Luis Miguel
El viernes, 16 julio del 2004 a las 02:34:28, Adam Aube escribió: Luis Miguel wrote: El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió: We need a way to filter based on the whole MIME replied header or on select mime fields (filename) to cath this downloads. I

RE: [squid-users] Re: dialer downloads bypassing squid acls

2004-07-16 Thread Scott Phalen
Something like dansguardian might do the trick. If you could do regex based on the MIME filename field or the whole mime replied header, then you can filter something like filename=.*\.exe stopping all .exe downloads, but you cant. You have the MIME type from the logs you showed us

Re: [squid-users] Re: dialer downloads bypassing squid acls

2004-07-16 Thread Luis Miguel R.
El viernes, 16 julio del 2004 a las 02:25:00, Scott Phalen escribió: Something like dansguardian might do the trick. This is a response from Henrik Nordstrom on a previous mail message: - Are there any way to pass this downloads to the redirector? It is already, but as you noticed there is

[squid-users] Re: Re: dialer downloads bypassing squid acls

2004-07-16 Thread Adam Aube
Luis Miguel wrote: El viernes, 16 julio del 2004 a las 02:34:28, Adam Aube escribió: Luis Miguel wrote: El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió: We need a way to filter based on the whole MIME replied header or on select mime fields (filename) to cath this

Re: [squid-users] download.windowsupdate.com

2004-07-16 Thread Brett Glass
Yes, this helps. As you can see, the Windows client attempts to fetch a subrange. This causes the Squid proxy to query its parent, which in turn does a TCP_REFRESH_HIT and downloads the ENTIRE FILE (which is often several megabytes) to the child cache. Massive network congestion results. --Brett

[squid-users] Problem with the access to ports above 1024

2004-07-16 Thread José Luis Castañeda
Hello to everybody. I have an application that accesses to ports above the 1024 and I have configured the following thing acl Safe_ports port 1025-65535 # unregistered ports http_access deny !Safe_ports http_access allow CONNECT Safe_ports In the file acces.log gives me the

[squid-users] Re: Re: dialer downloads bypassing squid acls

2004-07-16 Thread Luis Miguel R.
El viernes, 16 julio del 2004 a las 04:13:26, Adam Aube escribió: Luis Miguel wrote: El viernes, 16 julio del 2004 a las 02:34:28, Adam Aube escribió: Luis Miguel wrote: El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió: We need a way to filter based on the whole

[squid-users] File Compression in squid?

2004-07-16 Thread Bhat, Satish
Hi, Does squid support the file compression? If yes, is there configuration needed to do it? Cheers, Satish

Re: [squid-users] download.windowsupdate.com

2004-07-16 Thread Robert Collins
On Sat, 2004-07-17 at 06:34, Brett Glass wrote: Yes, this helps. As you can see, the Windows client attempts to fetch a subrange. This causes the Squid proxy to query its parent, which in turn does a TCP_REFRESH_HIT and downloads the ENTIRE FILE (which is often several megabytes) to the child

[squid-users] Re: File Compression in squid?

2004-07-16 Thread Adam Aube
Bhat, Satish wrote: Does squid support the file compression? If yes, is there configuration needed to do it? Not yet. See this thread from the recent archives for details: http://www.squid-cache.org/mail-archive/squid-users/200407/0131.html Adam

[squid-users] Re: Problem with the access to ports above 1024

2004-07-16 Thread Adam Aube
José Luis Castañeda wrote: I have an application that accesses to ports above the 1024 and I have configured the following thing acl Safe_ports port 1025-65535 # unregistered ports http_access deny !Safe_ports http_access allow CONNECT Safe_ports In the file acces.log gives me

Re: [squid-users] download.windowsupdate.com

2004-07-16 Thread Babar Kazmi
Dear Lizzy Could you please elaborate this problem ? I think using a sniffer could help us more to solve this as Brett says its a bug. I would also like to learn with you. Regards Babar Kazmi. From: Brett Glass [EMAIL PROTECTED] To: Lizzy Dizzy [EMAIL PROTECTED], [EMAIL PROTECTED] Subject:

RE: [squid-users] File Compression in squid?

2004-07-16 Thread Babar Kazmi
Dear Bhat Squid does not support file compression and I don't think so in near future we are expecting this to come up. Regards Babar Kazmi From: Bhat, Satish [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [squid-users] File Compression in squid? Date: Fri, 16 Jul 2004 16:14:19 -0700 Hi,