[squid-users] Squid + https : Connection failed

2005-04-07 Thread Shafeek Sumser
Hi, I am having a problem since i have install squid after my adsl connection. Here goes the problem: The proxy function pretty well accept that i am having problem to access https pages. When i disable proxy on my Mozilla Browser, it just works fine without any problem to access my

Re: [squid-users] Squid + https : Connection failed

2005-04-07 Thread Shafeek Sumser
Here is the access.log 1112855949.835 60538 192.168.1.150 TCP_MISS/503 0 CONNECT www.google.com:443 test DIRECT/216.239.59.99 Which gives error 503 service unavailable --- Shafeek Sumser [EMAIL PROTECTED] wrote: Hi, I am having a problem since i have install squid after my adsl

RE: [squid-users] Squid + https : Connection failed

2005-04-07 Thread Elsen Marc
Hi, I am having a problem since i have install squid after my adsl connection. Here goes the problem: The proxy function pretty well accept that i am having problem to access https pages. When i disable proxy on my Mozilla Browser, it just works fine without any problem to

RE: [squid-users] Squid + https : Connection failed

2005-04-07 Thread Shafeek Sumser
Here is the access.log 1112855949.835 60538 192.168.1.150 TCP_MISS/503 0 CONNECT www.google.com:443 test DIRECT/216.239.59.99 Which gives error 503 service unavailable --- Elsen Marc [EMAIL PROTECTED] wrote: Hi, I am having a problem since i have install squid after my adsl

RE: [squid-users] Squid + https : Connection failed

2005-04-07 Thread Shafeek Sumser
--- Elsen Marc [EMAIL PROTECTED] wrote: Hi, I am having a problem since i have install squid after my adsl connection. Here goes the problem: The proxy function pretty well accept that i am having problem to access https pages. When i disable proxy on my Mozilla

Re: [squid-users] Strange squid crashes

2005-04-07 Thread Matus UHLAR - fantomas
On 05.04 17:49, Joost de Heer wrote: Problem was indeed (as Marc Elsen pointed out) a filesystem problem with Solaris. I've solved it by running newfs (byebye cache...) and after that tunefs. I should've checked the FAQ better it just was in a place where I didn't look

Re: [squid-users] Strange squid crashes

2005-04-07 Thread Matus UHLAR - fantomas
On 06.04 15:56, Kevin wrote: On a related note, how horrible is it to do the following to a Solaris-based cache server (aside from the obvious impact from wiping out the cache) ? su - squid -c 'squid -k shutdown'; sleep 31 you probably can do this as root without su-ing to squid user.

Re: [squid-users] ACL-System:

2005-04-07 Thread Iqbal
Thank you very much for the reply. As you advised below please tell me more. Option-1: (ACL): You can make ACL setup to allow only user with their corresponding IP-Address with http_access rule. It will take two acl + 1 http_access per user. Can you please tell me how to define

RE: [squid-users] Squid + https : Connection failed

2005-04-07 Thread Elsen Marc
... ... tail -f /var/log/squid/access.log 1112857550.905 61288 192.168.1.150 TCP_MISS/503 0 CONNECT www.google.com:443 test DIRECT/216.239.59.99 - It says 503: Service unavailable - Is there any addiditional info in cache.log ? - Does DNS (lookup) work on the squidbox (try

RE: [squid-users] Squid + https : Connection failed

2005-04-07 Thread Shafeek Sumser
--- Elsen Marc [EMAIL PROTECTED] wrote: ... ... tail -f /var/log/squid/access.log 1112857550.905 61288 192.168.1.150 TCP_MISS/503 0 CONNECT www.google.com:443 test DIRECT/216.239.59.99 - It says 503: Service unavailable - Is there any addiditional info in

Re: [squid-users] ACL-System:

2005-04-07 Thread squidrunner team
Option-1: (ACL): You can make ACL setup to allow only user with their corresponding IP-Address with http_access rule. It will take two acl + 1 http_access per user. Can you please tell me how to define above type of ACL user+ip and Http_Access permission for the

Re: [squid-users] Help with Squid 2.5 on FreeBSD 5.3 and WCCP

2005-04-07 Thread Bin Liu
It seems that you have not create GRE tunnel successfully. You can try this: # ifconfig gre0 create # ifconfig gre0 link0 tunnel squid_host_IP router_IP up where: router_IP is IP address of routers physical interface (not loopback interface) Besides, I noticed that with IOS 12.x, if you

[squid-users] Error returned 'BH NT_STATUS_ACCESS_DENIED'

2005-04-07 Thread fatima riadi
Hi everybody, I setup squid-2.5.STABLE9 with samba-3.0.13 to use winbind authentication over a Windows 2003 Active Directory. Web users' authentication from my proxy server box succeede. But when a remote user try to authenticate himself, authentication failes and Squid return the following:

RE: [squid-users] Error returned 'BH NT_STATUS_ACCESS_DENIED'

2005-04-07 Thread Elsen Marc
Hi everybody, I setup squid-2.5.STABLE9 with samba-3.0.13 to use winbind authentication over a Windows 2003 Active Directory. Web users' authentication from my proxy server box succeede. But when a remote user try to authenticate himself, authentication failes and Squid return the

Re: [squid-users] Help with Squid 2.5 on FreeBSD 5.3 and WCCP

2005-04-07 Thread lakmal silva
Hi Bin Thanks a lot It worked :-). All I had to do was no ip route-cache cef in the cisco router interface. Regards, Lakmal --- Bin Liu [EMAIL PROTECTED] wrote: It seems that you have not create GRE tunnel successfully. You can try this: # ifconfig gre0 create #

RE: [squid-users] Help on delay pools

2005-04-07 Thread Elsen Marc
Hi all... I am having two ACLs as: acl mysrc src 192.168.2.62 and acl mydst dst 202.63.25.15 If I want ANDING of these two ACLs then I have to do like this ... http_access allow mysrc mydst This will allow or deny(if required) the required browsing from the source to

Re: [squid-users] Strange squid crashes

2005-04-07 Thread Joost de Heer
For now it's OK. But note that it could also be caused by running out of inodes - if you did not check for this, you really don't know if it was actually this problem. The FAQ entry explicitly says it happens if you are NOT out of inodes. Inodes was about 60% free, so that wasn't the problem.

[squid-users] Re: Squid + https : Connection failed

2005-04-07 Thread Joost de Heer
Shafeek Sumser said: Hi, I am having a problem since i have install squid after my adsl connection. Here goes the problem: The proxy function pretty well accept that i am having problem to access https pages. Do you have CONNECT allowed to port 443? Can you use a sniffer (e.g. ethereal)

RE: [squid-users] Error returned 'BH NT_STATUS_ACCESS_DENIED'

2005-04-07 Thread Elsen Marc
Hi everybody, I setup squid-2.5.STABLE9 with samba-3.0.13 to use winbind authentication over a Windows 2003 Active Directory. Web users' authentication from my proxy server box succeede. But when a remote user try to authenticate himself, authentication failes and Squid return the

RE: [squid-users] Squid + https : Connection failed

2005-04-07 Thread Shafeek Sumser
A gret Thanks to you all. I have been able to solve the problem. In fact, it is not in squid. The problem is in iptables. I just forgot to add https in the OUTPUT part. The problem has been solved. Thanks A+ Shafeek Sumser --- Elsen Marc [EMAIL PROTECTED] wrote: - Is

RE: [squid-users] Error returned 'BH NT_STATUS_ACCESS_DENIED'

2005-04-07 Thread fatima riadi
Thank you very much for your reply. I had to change permissions to the winbindd_privileged file. The problem is that I had to set 777 (chmod 777) as permissions to that file. Which is not a good thing! --- Elsen Marc [EMAIL PROTECTED] wrote: Hi everybody, I setup

[squid-users] http accelerator mode help

2005-04-07 Thread Christian Hedegaard
Hey all, I'm trying to setup squid as an intermediate relay, or in the documentation I think what I want is an http accelerator basically, here's the deal. we have a move this weekend and we will not have notified all of our web customers that their domain name IP's need to be changed. so the

RE: [squid-users] Which method for sibling peers?

2005-04-07 Thread Pawlowski Julian
Askar wrote: cache_peer some_cache_net sibling 3128 3130 proxy-only Thanks, I already use this kind of config :-)

[squid-users] Segmentation violations in 2.5.STABLE9-20050404

2005-04-07 Thread Mike Mitchell
I've installed 2.5.STABLE9-20050404 on over 30 servers, each running RedHat Linux 2.1 AS on Intel Xenon CPUs. They've been running since Monday morning at 12:30 AM EST. Since then I've gotten 6 mail messages from the squid process saying I've encountered a fatal error. The cache.log file says

Re: [squid-users] Internal DNS

2005-04-07 Thread sasa
Hi, also I have the same problem, if in sqid.conf use: dns_nameservers external_ip_dns ... all it's ok, if instead use the internal DNS server (that's present in resolv.conf) then I have problems, also I use fc1 and the version of squid is: Squid 2.5 stable3 ..for this reason had opened the

Re: [squid-users] ACL-System:

2005-04-07 Thread mlist
Thanks! I found the answer to my question without even asking. This list has proven to be very helpfull. Regards, Jason Option-1: (ACL): You can make ACL setup to allow only user with their corresponding IP-Address with http_access rule. It will take two acl + 1

[squid-users] Feeding a file to squid's storage without intruping the squid

2005-04-07 Thread Ali Nikneshan
Hi, Is there any way to feed a file to squid over the network? any suggestion? I think one way is modifying squid source, may be http.c for redirecting squid to a specific location instead of the Main server in the URL? -- Best Regards, Ali Nikneshan

Re: [squid-users] squid needs restarting after internet connect

2005-04-07 Thread Henrik Nordstrom
On Thu, 7 Apr 2005, Nik wrote: That was one of my initial thoughts. I can't remember anymore if NAMED responds dynamically to changes in resolve.conf. Regardless, I wanted to find out if this could be fixed by adjusting squid, before bringing another process into the mix. named doesn't read

[squid-users] Re: Simple Squid and Server 2003 authentication?

2005-04-07 Thread Henrik Nordstrom
On Thu, 7 Apr 2005 [EMAIL PROTECTED] wrote: Can you please point me to a HOWTO for setting up Squid to authenticate against a Windows 2003 Server, please? The Squid FAQ section on using wibind covers the Squid parts. The Samba team also have a very good document on how to configure the Samba side

Re: [squid-users] Segmentation violations in 2.5.STABLE9-20050404

2005-04-07 Thread Henrik Nordstrom
On Thu, 7 Apr 2005, Mike Mitchell wrote: I've installed 2.5.STABLE9-20050404 on over 30 servers, each running RedHat Linux 2.1 AS on Intel Xenon CPUs. They've been running since Monday morning at 12:30 AM EST. Since then I've gotten 6 mail messages from the squid process saying I've encountered a

Re: [squid-users] How to catch a problem

2005-04-07 Thread Henrik Nordstrom
On Wed, 6 Apr 2005, Yuriy Kuznetsov wrote: comm_accept: FD 24: (53) Software caused connection abort 2005/04/06 15:21:48| httpAccept: FD 24: accept failure: (53) Software caused connection abort This is seen if the client aborts the connection early, while it is not yet accepted by Squid.

[squid-users] Squid Authing

2005-04-07 Thread Mark McCorkle
I see a lot of emails in this list that hit around what I'm trying to do -- so I think I just need some education -- but I've been trying to get a good answer from Squid: The Definative Guide and from the FAQ for the last few hours, and I'm coming up dry. I have a custom built ACL helper

Re: [squid-users] Sirius Radio not working with squid-2.5.STABLE9

2005-04-07 Thread Henrik Nordstrom
On Wed, 6 Apr 2005, Lucia Di Occhi wrote: squid-2.5.STABLE9 seems to have a problem with the new Sirius Radio Web Authentication. Starting last monday nobody behind squid seems to be able to listen to Sirius Radio. Anything in cache.log? (with relaxed_header_parser set to warn) Regards Henrik

Re: [squid-users] httpReadReply: Excess data

2005-04-07 Thread Henrik Nordstrom
On Wed, 6 Apr 2005, Baskoro Dwi Cahyono wrote: Dear Squid Users, I wonder what this mean from my cache.log? 2005/04/04 22:22:09| httpReadReply: Excess data from GET http://forum.kafegaul.com/forum/; This indicates the server responded with a larger response than itself indicated. This is a

Re: [squid-users] Help going to hostname sans domain

2005-04-07 Thread Henrik Nordstrom
On Wed, 6 Apr 2005, Patrick Campbell wrote: I'm trying to go a hostname without a domain through my Squid proxy. i.e. http://test instead of http://test.mydomain.com In my Windows, I have mydomain.com as a the search domain, although using my Squid proxy this shouldn't affect anything: See

Re: [squid-users] Feeding a file to squid's storage without intruping the squid

2005-04-07 Thread Henrik Nordstrom
On Fri, 8 Apr 2005, Ali Nikneshan wrote: Is there any way to feed a file to squid over the network? any suggestion? I think one way is modifying squid source, may be http.c for redirecting squid to a specific location instead of the Main server in the URL? cache_peer + cache_peer_access can do

Re: [squid-users] Restricting listening UDP DNS client port to an interface/IP?

2005-04-07 Thread Henrik Nordstrom
On Wed, 6 Apr 2005, Martin Koniczek wrote: but if i'd use ICP/HTCP as well, on other addresses/interfaces, i'd run into trouble? Only if this Squid needs to send ICP queries to other caches and using the same address as used when making DNS queries is not acceptable. looks as if by default it's

Re: [squid-users] Squid Authing

2005-04-07 Thread Henrik Nordstrom
On Thu, 7 Apr 2005, Mark McCorkle wrote: to a new url after their first request, but never after). The problem that I'm having is that I can't figure out how to tell the difference between the true first hit against squid_acl.pl (when the user's session is brand new) and when successive

[squid-users] RE: Squid V2.5 supported on RedHat Enterprise V4???

2005-04-07 Thread Cavanagh, Kevin B
Just curious to know if Squid V2.5-Stable9 is supported on RedHat Enterprise V4??? TIA. KCavanagh

Re: [squid-users] RE: Squid V2.5 supported on RedHat Enterprise V4???

2005-04-07 Thread Joel Jaeggli
On Thu, 7 Apr 2005, Cavanagh, Kevin B wrote: Just curious to know if Squid V2.5-Stable9 is supported on RedHat Enterprise V4??? works fine of fedora core 3 it should work fine on rhel-4 joelja TIA. KCavanagh -- -- Joel

RE: [squid-users] Help with proxy.kfti.knc.ru

2005-04-07 Thread Elsen Marc
Hi All, I see in netstat my squid always connecting to proxy.kfti.knc.ru:http -- -- --- tcp78463 0 proxy.ctu.edu.vn:40389 proxy.kfti.knc.ru:http ESTABLISHED 8409/(squid) tcp