Please search the archives and the internet. AFAIK headsup was a solution
I successfully tested a long time ago.
Mit freundlichem Gruß/Yours sincerely
Werner Rost
GM-FIR - Netzwerk
ZF Boge Elastmetall GmbH
Friesdorfer Str. 175, 53175 Bonn, Deutschland/Germany
Telefon/Phone +49 228 3825 - 420,
Hello,
i know that this point was discussed many times. I tried out all suggestions. It works
for Exchange 2003 but not for 2000. The situation is: squid 2.5 is on a public ip
adress with httpd_accel params (see below), forwarding to CA eTrust SCM as parent
cache (see below) and exchange 2000
external_acl_type AD_Group %LOGIN
/usr/lib/squid/squid_ldap_auth -b
cn=users,dc=dom1,dc=info,dc=co -D
cn=user1,cn=users,dc=dom1,dc=info,dc=co
-h 10.10.1.25 -w pass1 -S -f
((cn=%u)(memberOf=cn=internet,cn=users,dc=dom1,dc=info,dc=co))
it seems that your external_acl definition is wrong,
Can I install web polygraph on a slackware machine?
I don't know if I can do it with squid, here is the situation:
I have a list of domains.
When a client try to connetct to a domain of the list, squid doesn't
have to connect directly to internet but it has to redirect to another
squid (using username and password)
How can I do this?
Thanks in
I use Cisco's WCCP protocol to forward all HTTP
requests to my Squid proxy.
You will have to build squid with the
--enable-linux-netfilter --enable-wccp
option, install the wccp module and a few other
steps. This will enable you
to route all your traffic to squid without touching
each
Not really a squid question persay...
Any recommendations for ghosting a configured server? We are building 6
squid servers and it would be much simpler to ghost the first one and use
that image for the rest. We use a ghost program for our windows servers but
the last time I tried that on linux
I've been meaning to reply to this...I'm interested in how Scott did this
but I don't *THINK* I can implement it for a couple reasons:
1) We are not a Cisco shop.
2) Even if we had Cisco routers, I don't control the routers(grumble
grumble).
I'm sorta wondering though...since there is an RFC for
I would be very interested in your setup, especially
the following:
o How you got the GRE tunnel going
o How the firewall config was affected by the GRE
setup
o What errors, if any, you got from the kernel after
compiling wccp into it
Has anyone played around with viralator?
Jim
I am trying to configure LDAP_AUTH for clients on a netware network. I can
get the login prompt to come up but I get the below error when logging in:
Am I missing something in this config?
The following error was encountered:
* Cache Access Denied.
Sorry, you are not currently allowed to request:
Hi all, I am using squid to secure access to the web, using ACLS' I stopped certain
people from download dangerous files, the problem is that I cant block certain
malicious downloads, this downloads never show the filename on a GET or POST command,
the filename is send by the server on a MIME
We need a way to filter based on the whole MIME replied header or on select
mime fields (filename) to cath this downloads.
I created an ACL to block by keyword, e.g. dialerexe. This will block any
URL that contains that word in the URL string. IF a user attempts to reach
a legitimate site with
El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió:
We need a way to filter based on the whole MIME replied header or on select
mime fields (filename) to cath this downloads.
I created an ACL to block by keyword, e.g. dialerexe. This will block any
URL that contains that
Really? Almost all the request for windowsupdate results in a TCP_MISS/206:
TCP_MISS/206 2440 GET
http://download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/WindowsXP-KB825119-x86-ENU_1b9f23b64b002d1e9d1eaba62f5f8fd.exe
- DIRECT/211.39.137.158 application/x-msdownload
Do'nt think
Hi, my name is Octavio and this is my first post to this list.
I'm having trouble setting Squid on an NT server. I'm using Guido
Serassio's native port. Everything worked correctly on the test machine,
but when moving to the real server (which is the PDC for the domain) I get
the following error
Luis Miguel wrote:
El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió:
We need a way to filter based on the whole MIME replied header or on
select mime fields (filename) to cath this downloads.
I created an ACL to block by keyword, e.g. dialerexe. This will block
any URL
Pierluigi wrote:
I have a list of domains.
When a client try to connetct to a domain of the list, squid doesn't
have to connect directly to internet but it has to redirect to another
squid (using username and password)
The never_direct acl might be of use here - more information can be found
Hi,
At 20.06 16/07/2004, Octavio Alvarez Piza wrote:
Hi, my name is Octavio and this is my first post to this list.
I'm having trouble setting Squid on an NT server. I'm using Guido
Serassio's native port. Everything worked correctly on the test machine,
but when moving to the real server (which
El viernes, 16 julio del 2004 a las 02:34:28, Adam Aube escribió:
Luis Miguel wrote:
El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió:
We need a way to filter based on the whole MIME replied header or on
select mime fields (filename) to cath this downloads.
I
Something like dansguardian might do the trick.
If you could do regex based on the MIME filename field or the whole mime
replied header, then you can filter something like filename=.*\.exe
stopping all .exe downloads, but you cant.
You have the MIME type from the logs you showed us
El viernes, 16 julio del 2004 a las 02:25:00, Scott Phalen escribió:
Something like dansguardian might do the trick.
This is a response from Henrik Nordstrom on a previous mail message:
-
Are there any way to pass this downloads to the redirector?
It is already, but as you noticed there is
Luis Miguel wrote:
El viernes, 16 julio del 2004 a las 02:34:28, Adam Aube escribió:
Luis Miguel wrote:
El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió:
We need a way to filter based on the whole MIME replied header or on
select mime fields (filename) to cath this
Yes, this helps. As you can see, the Windows client attempts to
fetch a subrange. This causes the Squid proxy to query its parent,
which in turn does a TCP_REFRESH_HIT and downloads the ENTIRE FILE
(which is often several megabytes) to the child cache. Massive
network congestion results.
--Brett
Hello to everybody.
I have an application that accesses to ports above the 1024 and I have
configured the following thing
acl Safe_ports port 1025-65535 # unregistered ports
http_access deny !Safe_ports
http_access allow CONNECT Safe_ports
In the file acces.log gives me the
El viernes, 16 julio del 2004 a las 04:13:26, Adam Aube escribió:
Luis Miguel wrote:
El viernes, 16 julio del 2004 a las 02:34:28, Adam Aube escribió:
Luis Miguel wrote:
El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió:
We need a way to filter based on the whole
Hi,
Does squid support the file compression?
If yes, is there configuration needed to do it?
Cheers,
Satish
On Sat, 2004-07-17 at 06:34, Brett Glass wrote:
Yes, this helps. As you can see, the Windows client attempts to
fetch a subrange. This causes the Squid proxy to query its parent,
which in turn does a TCP_REFRESH_HIT and downloads the ENTIRE FILE
(which is often several megabytes) to the child
Bhat, Satish wrote:
Does squid support the file compression?
If yes, is there configuration needed to do it?
Not yet. See this thread from the recent archives for details:
http://www.squid-cache.org/mail-archive/squid-users/200407/0131.html
Adam
José Luis Castañeda wrote:
I have an application that accesses to ports above the 1024 and I have
configured the following thing
acl Safe_ports port 1025-65535 # unregistered ports
http_access deny !Safe_ports
http_access allow CONNECT Safe_ports
In the file acces.log gives me
Dear Lizzy
Could you please elaborate this problem ? I think using a sniffer could help
us more to solve this as Brett says its a bug.
I would also like to learn with you.
Regards
Babar Kazmi.
From: Brett Glass [EMAIL PROTECTED]
To: Lizzy Dizzy [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject:
Dear Bhat
Squid does not support file compression and I don't think so in near future
we are expecting this to come up.
Regards
Babar Kazmi
From: Bhat, Satish [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [squid-users] File Compression in squid?
Date: Fri, 16 Jul 2004 16:14:19 -0700
Hi,
32 matches
Mail list logo