[squid-users] Re: Browser sessions per IP

2005-07-06 Thread Kinkie
On Tue, 2005-07-05 at 18:09 -0500, Eduardo Bejar wrote: Kinkie, Thank you for your answer. I´m sorry, I´m still a bit confused. Can you give me an example of what do simultaneous TCP connections mean? I´ve been testing this and I still can´t find out when this command triggers. HTTP is

[squid-users] Problem on Authentication !??!

2005-07-06 Thread Arno . STREULI
Hello, My squid 2.5S9 is working fin, whel almost, once in a while it ask me fot my username/password via a prompt !? and I can't trace why is that ? anyone have anyidea how/where I can track trace that problem ? thanks for your help Arno Streuli PS: it's running on Solaris 8 and samba 3.0.14a

Re: [squid-users] Problem on Authentication !??!

2005-07-06 Thread Odhiambo Washington
* [EMAIL PROTECTED] [EMAIL PROTECTED] [20050706 11:57]: wrote: Hello, My squid 2.5S9 is working fin, whel almost, once in a while it ask me fot my username/password via a prompt !? and I can't trace why is that ? anyone have anyidea how/where I can track trace that problem ? Somewhere

Re: [squid-users] Problem on Authentication !??!

2005-07-06 Thread Arno . STREULI
PROTECTED] [EMAIL PROTECTED] [20050706 11:57]: wrote: Hello, My squid 2.5S9 is working fin, whel almost, once in a while it ask me fot my username/password via a prompt !? and I can't trace why is that ? anyone have anyidea how/where I can track trace

Re: [squid-users] Problem on Authentication !??!

2005-07-06 Thread Odhiambo Washington
* [EMAIL PROTECTED] [EMAIL PROTECTED] [20050706 12:09]: wrote: Hmm funny !! The answer whas very easy to give, but I was asking for something more valuable, helpfull! I was thinking about something like credentialsttl being in your file. If that is not the case, then I am sorry. Are you sure

Re: [squid-users] Problem on Authentication !??!

2005-07-06 Thread Roman Rathler
PROTECTED]cc: m Subject: Re: [squid-users] Problem on Authentication !??! 06.07.2005 11:02 * [EMAIL PROTECTED] [EMAIL PROTECTED] [20050706 11:57]: wrote: Hello, My squid 2.5S9 is working fin, whel almost, once

Re: [squid-users] Problem on Authentication !??!

2005-07-06 Thread Odhiambo Washington
* [EMAIL PROTECTED] [EMAIL PROTECTED] [20050706 12:42]: wrote: some more: ## NTLM auth auth_param ntlm program /opt/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 64 auth_param ntlm max_challenge_lifetime 30 minutes auth_param ntlm max_challenge_reuses 0

[squid-users] How to setup squid NTLM authentication in a AD based network ?

2005-07-06 Thread Jakob Curdes
Hi, I have a customer who wants to get rid of NTLM autorisation for security reasons. Up to now, we use it for squid seamless autorisation. I understand that squid can do basic auth against an AD controller via winbind; but is this also possible for NTLM auth, i.e. seamless autorisation via

Re: [squid-users] How to setup squid NTLM authentication in a AD based network ?

2005-07-06 Thread Kinkie
On Wed, 2005-07-06 at 12:35 +0200, Jakob Curdes wrote: I could not find ths scenario in docs or mailing list. I would be glad for a hint to a working setup. Not yet. Work is in progress to support NEGOTIATE (aka Kerberos, MS-style) support for squid-3. Until it's ready the only chance to have

[squid-users] Snmp - real number of cache clients?

2005-07-06 Thread John Horne
Hello, I am trying to set up MRTG to graph the actual number of current clients accessing a web cache. I can see from the cachemgr and the SNMP MIB, that the SNMP entry 'cacheClients' exists and has the comment of 'Number of clients accessing cache'. However, my understanding is that this is the

[squid-users] MRTG/snmp - system name?

2005-07-06 Thread John Horne
Hello, Running squid 2.5.STABLE9 and MRTG 2.10.15, I see at the top of our graphs the lines: The statistics were last updated Wednesday, 6 July 2005 at 12:20, at which time 'squid 2.5.STABLE9' had been up for 1 day, 12:19:39. I assume the 'squid 2.5.STABLE9' bit are the snmp entries

Re: [squid-users] Problem on Authentication !??!

2005-07-06 Thread Arno . STREULI
* [EMAIL PROTECTED] [EMAIL PROTECTED] [20050706 12:42]: wrote: some more: ## NTLM auth auth_param ntlm program /opt/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 64

Re: [squid-users] MRTG/snmp - system name?

2005-07-06 Thread John Horne
On Wed, 2005-07-06 at 12:31 +0100, John Horne wrote: My question is, could the squid.conf 'visible_hostname' be made available to SNMP, probably through a new entry in the squid MIB? This would then provide the 'system name' as configured by the sysadmin for squid. Secondly, of course, how

[squid-users] NTLM authentication hangs some IE browsers

2005-07-06 Thread Kenneth van Grinsven
Hi, I encounter the following strange problem with NTLM authentication. We have a squid proxy, a windows 2003 domain controller, and 200 windows XP professional workstations. 95% of the people here have no problems with surfing the internet while NTLM auth is on. The other 5% though have alot

[squid-users] Now squid crash du to a Resource temporarily unavailable !?!?

2005-07-06 Thread Arno . STREULI
Well stil some trouble with my squid 2.5S9 on solaris 8: in a single user test config I got this kind of error: 2005/07/06 14:09:25| storeDiskdSend: msgsnd: (11) Resource temporarily unavailable 2005/07/06 14:09:25| storeDiskdSend OPEN: (11) Resource temporarily unavailable 2005/07/06 14:09:25|

[squid-users] Squid reports

2005-07-06 Thread aragorn111
Hello, we have a squid proxy running. Now we want to see how long a user is connected to the internet. We have tested several tools from the squid-cache.org website. Our problem is that I can`t see a real value showing the real online time of a user...I don`t know if it is a general problem of

[squid-users] 9001 port

2005-07-06 Thread Marcello Farias
Mail IMPASAHi there Excuse my english, I need help with my squid.conf configuration I´m using squid Version 2.4.STABLE6 I want to know how to allow users to use 9001 port . Everything is fine all is working with proxy_auth authenticating to an active directory domain, except trought 9001 Can

[squid-users] Squid with Active Directory

2005-07-06 Thread Abbas Salehi
Dear Squid Users, Does squid work with Microsoft Active directory, If anybody knows about this would you please help me ASAP, Regards Abbas Salehi ISiran Company

Re: [squid-users] What is decent/good squid performance and architecture

2005-07-06 Thread Robert Borkowski
Chris Robertson wrote: -Original Message- From: jos houtman [mailto:[EMAIL PROTECTED] Sent: Saturday, July 02, 2005 3:08 PM To: squid-users@squid-cache.org Subject: [squid-users] What is decent/good squid performance and architecture hello list, Iam running a website and have setup 3

Re: [squid-users] Squid with Active Directory]

2005-07-06 Thread Jamie Heckford
Abbas Salehi wrote: Dear Squid Users, Does squid work with Microsoft Active directory, If anybody knows about this would you please help me ASAP, Depends what you mean by 'work' ;) We have it running very well here with our users IE sessions automagically authing against AD for squid

Re: [squid-users] 9001 port

2005-07-06 Thread Marcello Farias
Thanks for your answer Abbas, but I'm not using IPTABLE and I'm not planning to change the kernel by now. I´m doing the same thing with IPCHAIN I´m looking for another way to do this using just squid This is what I have now: NUEVEMIL=ip/prefix for ips in ${NUEVEMIL}; do ipchains -A input

Enc: [squid-users] Problem on Authentication !??!

2005-07-06 Thread Rafael . Almeida
This once in a while is during peak hours? We have this problem here too, mostly with apache authenticating with NTLM. What I saw is that it is caused by an error in the connection with the Domain Controller. I made a packet analysis and discovered that the Netbios connetion opened by apache to

[squid-users] My squid does not cache anything

2005-07-06 Thread Matteo Villari
I'm running squid 2.5.STABLE5-CVS with push patch in accelerating mode but, even without using push, it doesn't cache anything. I can display all accelerated pages but in may cache.log file i have only RELEASE -1 and in cache.log a lot of aclCheckFast: no matches, returning: 1. The

Re: [squid-users] What is decent/good squid performance and architecture

2005-07-06 Thread Jos Houtman
Robert Borkowski wrote: Chris Robertson wrote: -Original Message- From: jos houtman [mailto:[EMAIL PROTECTED] Sent: Saturday, July 02, 2005 3:08 PM To: squid-users@squid-cache.org Subject: [squid-users] What is decent/good squid performance and architecture hello list, Iam running

Re: [squid-users] 9001 port

2005-07-06 Thread Marcello Farias
This is the error message when i comment the line acl CONNECT method CONNECT (squid.conf line 1467: http_access deny CONNECT !SSL_ports 2005/07/06 12:04:53| aclParseAccessLine: ACL name 'CONNECT' not found) Thanks again for your help Marcello. Dear marcello Test your squid with

Re: [squid-users] What is decent/good squid performance and architecture

2005-07-06 Thread Robert Borkowski
currently we are doing about 15Mb/s upstream on a 100Mb line. Upgrading this to 1Gbit if we need it won't be problem. there are 2 reasons that i want to have each squid server perform optimal: - failover, i want to be able to run on 1/2 squidservers - the growthfactor is large (member number

[squid-users] Re: Hide squid cache server IP

2005-07-06 Thread Joost de Heer
I just wondering if it is possible to hide ip address from my squid box to destination server. Because I see that some sites are limiting their traffic for certain ip address. How do you expect the destination server to send back TCP packages if you hide the IP address? Joost

[squid-users] Re: Peer Caches between Squid 2.5.STABLE9 and 2.4STABLE7 giving trouble

2005-07-06 Thread Joost de Heer
Btw when I configured the new FC4 box with the cache_peer 172.16.5.2 parent 3128 0 no_query default statement this gave me error and squid refused to start until I removed the no_query statement out of it. Because it's no-query (dash, not underscore) Joost

[squid-users] Re: Squid reports

2005-07-06 Thread Joost de Heer
we have a squid proxy running. Now we want to see how long a user is connected to the internet. As HTTP is stateless, you can't deduce online time from a HTTP proxy. Joost

Re: [squid-users] What is decent/good squid performance and architecture

2005-07-06 Thread Jos Houtman
That's better, though with such a large growth rate you will need to anticipate network bottlenecks far ahead, and be ready to switch to gigabit on the squids or grow the number of squids, whichever one is cheaper. Set up MRTG or something equivalent to keep an eye on this. Squid has a built

[squid-users] multiple link for squid

2005-07-06 Thread Wennie V. Lagmay
presently my connection is like this: 192.168.0.x/24--192.168.0.1/24|||proxyserver||212.xxx.xx x.2/30- 212.xxx.xxx.1/30 On the above config proxy server has 2 NIC card(192.168.0.1/24 for internal and 212.xxx.xxx.2/30 for internet) its working fine. Now I'm going to

[squid-users] wccpv2.patch fails on squid-2.5.STABLE10

2005-07-06 Thread George Chelidze
Hello, I am trying to install squid-2.5.STABLE10 with wccpv2 support. I use STABLE9 with wccpv2 and I decided to upgrade to STABLE10. I used wccpv2.patch (don't remember where I got it, as it was a long time ago) with STABLE9 and it worked just fine. The same patch failed with STABLE10 (see

[squid-users] wccpv2.patch fails on squid-2.5.STABLE10

2005-07-06 Thread George Chelidze
Hello, I am trying to install squid-2.5.STABLE10 with wccpv2 support. I use STABLE9 with wccpv2 and I decided to upgrade to STABLE10. I used wccpv2.patch (don't remember where I got it, as it was a long time ago) with STABLE9 and it worked just fine. The same patch failed with STABLE10 (see

Re: [squid-users] Squid crashed today

2005-07-06 Thread Ralf Hildebrandt
* Ralf Hildebrandt [EMAIL PROTECTED]: We're letting squid run under runit and today squid was being restarted automatically; the last log lines before the crash endet witth normal status messages, followed by: 2005/07/04 14:37:47| assertion failed: diskd/store_io_diskd.c:369:

[squid-users] I am a newbie squid'er

2005-07-06 Thread Kumara Jayaweera
Greetings ! Hi all, I have a very little experience with Linux, but, in the past three years I install and run FC1, FC3, today, I downloaded and made cd's for FC4 also. with a lot of readings and the help of the Asterisk mailing list I setup a asterisk server and it is running with a TDM card +

[squid-users] Yahoo messenger not working thru squid

2005-07-06 Thread [EMAIL PROTECTED]
While at work, I want to use squid as a proxy for my instant messages, for legitamate privacy reasons (nosey network admins). I got Aol instant messenger working as described below, but Yahoo does not work following the same procedure. To get AOL instant messenger (AIM) working, I added 5190

Re: [squid-users] Squid with Active Directory

2005-07-06 Thread D E Radel
The easiest way to set up authentication with AD is: http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory That webserver was down though earlier today. d.radel. - Original Message - From: Abbas Salehi [EMAIL PROTECTED] To:

Re: [squid-users] Regarding Squid+Ldap

2005-07-06 Thread D E Radel
The easiest way to solve is to run the squid_ldap_auth program from commandline and see the results. Various things can cause it to fail, such as passwords with an ! in it, etc. D.Radel. - Original Message - From: selvam [EMAIL PROTECTED] To: squid-users@squid-cache.org Cc: [EMAIL

[squid-users] access list

2005-07-06 Thread Eganya Alfredo
Hello, it´s my first post :D i´m trying to allow access from a machine to a specific destination, without block all another trafic, here is my configuration # == #CONFIGURACION DE ACCESO RESTRINGIDO #

[squid-users] On-line monitoring of sites being accessed through squid

2005-07-06 Thread Carlos Zottmann
Hi !! Is there any on-line monitoring tool that is able to report the sites that are being acessed through squid, giving just a list of the sites that are being accessed, maybe with a counter of clients accessing it, and a sum of bytes transferred, or hits? Regards, Carlos.

Re: [squid-users] Re: Hide squid cache server IP

2005-07-06 Thread Abu Khaled
On 7/6/05, Joost de Heer [EMAIL PROTECTED] wrote: I just wondering if it is possible to hide ip address from my squid box to destination server. Because I see that some sites are limiting their traffic for certain ip address. How do you expect the destination server to send back TCP

[squid-users] proxy_auth authentication exemption problem

2005-07-06 Thread Kenneth Oncinian
Hi list, I have a simple user based authentication using ncsa_auth, and the same time excluding authentication for some users using src IP address. This works fine. until i have a requirement which needs to ban some websites but not from some authenticated users. so my previous squid.conf is

[squid-users] How ti confirm if cache_peering is working between siblings?

2005-07-06 Thread Zia-ul-Hassan Zia
Hi Guys, How can I test if cache peering is working between three sdquid proxies.The configuration for peering on three sibling squid proxies is as follows on sproxy1 - cache_peer sproxy2.example.com sibling 8080 3130 proxy-only cache_peer sproxy3.example.com sibling 8080

[squid-users] TCP/MISS

2005-07-06 Thread kashif Mazhar
Hello, I am using two SquidProxies , one is on solaris and other is on Linux, from last few days i am geeting a very strange problem be noted both mechine are on the in-side of the PIX. Few days before internet connectivity of pak goes down due to some back bone problem. From that time v r using

[squid-users] Error accessing some of the pages

2005-07-06 Thread squid squid
Hi, my users access some of the modules of on an Intranet application and got the following error on their screen Due to the presence of characters known to be used in cross site scripting attacks, access is forbidden. This web site does not allow Urls which might include embedded HTML tags.