[squid-users] Cache LAN and VLAN webservers

2005-10-24 Thread Anwar Ahmad
Hi All, I was wondering whether it is possible to cache local LAN DMZ servers... and have them accessible to VLAN computers. Basically I my LAN is 192.168.12.0 and the squidbox has an IP from this subnet. Basically I want to cache our webserver thats on the LAN (same subnet) and DMZ

[squid-users] NLST, use PORT or PASV first

2005-10-24 Thread Philippe Carbonnier
Hi all, this is the second time I post this request, can anybody give me a way ? Thanks squid/2.5.STABLE11 on fedora core 4 (with selinux enabled) When I try ftp://ftp.redhat.com in url's browser I get : An FTP protocol error occurred while trying to retrieve the URL: ftp://ftp.redhat.com/

Re: [squid-users] Cache LAN and VLAN webservers

2005-10-24 Thread Anwar Ahmad
I've tried doing a host command namely host intranet and I get a correct response. I even tried installing lynx on it and broswing my intranet server and it works. However squid it self cannot seem to cache these servers. I read that squid has some sort of dns client of some sort; is there

Re: [squid-users] squid_ldap_auth from shell [SOLVED]

2005-10-24 Thread John Halfpenny
Brilliant, works like a charm. Thanks Henrik! John --- On Sat 10/22, Henrik Nordstrom [EMAIL PROTECTED] wrote: From: Henrik Nordstrom [mailto: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: squid-users@squid-cache.org Date: Sat, 22 Oct 2005 10:15:53 +0200 (CEST) Subject: Re:

Re: [squid-users] Cache LAN and VLAN webservers

2005-10-24 Thread Anwar Ahmad
Yeap I can ping the intranet server. I can also use lynx on the squid box to view the intranet. It seems it can access the local webserver content. Just people using the squid as proxy can't. Well basically I got a firewall/gateway 192.168.12.0. A watchguard firebox. It does the NAT. The

[squid-users] NTLM Auth without Winbind?

2005-10-24 Thread John Halfpenny
Hi. In the lab I have a PDC killer. :) Which authenticates Linux, Macs and Windows clients. Thanks to Henrik, Squid successfully authenticates against LDAP for all of these. Squid is installed onto the Samba PDC. Is it possible to automatically authenticate Windows IE users without using

[squid-users] Problem with https-sites

2005-10-24 Thread Stefan Vogel
Hello, we have the following error since several squid versions. Is there a soloution for this? We are using LDAP-Authentication. The error only appears if the first site you access through the proxy in a new browser window is a HTTPS-site. Users enter their username/password and get the error.

Re: [squid-users] NTLM Auth without Winbind?

2005-10-24 Thread Serassio Guido
Hi, At 11.52 24/10/2005, John Halfpenny wrote: Hi. In the lab I have a PDC killer. :) Which authenticates Linux, Macs and Windows clients. Thanks to Henrik, Squid successfully authenticates against LDAP for all of these. Squid is installed onto the Samba PDC. Is it possible to

Re: [squid-users] Problem with https-sites

2005-10-24 Thread Christoph Haas
On Monday 24 October 2005 11:52, Stefan Vogel wrote: we have the following error since several squid versions. Is there a soloution for this? We are using LDAP-Authentication. The error only appears if the first site you access through the proxy in a new browser window is a HTTPS-site.

Re: [squid-users] NTLM Auth without Winbind?

2005-10-24 Thread John Halfpenny
Hi, thanks for replying. May I just ask- does the SMB helper support checking of group membership, or is it just for password authentication? John --- On Mon 10/24, Serassio Guido [EMAIL PROTECTED] wrote: From: Serassio Guido [mailto: [EMAIL PROTECTED] To: [EMAIL PROTECTED],

Re: [squid-users] NTLM Auth without Winbind?

2005-10-24 Thread Serassio Guido
Hi, At 15.08 24/10/2005, John Halfpenny wrote: Hi, thanks for replying. May I just ask- does the SMB helper support checking of group membership, or is it just for password authentication? John Sorry, only password authentication. For group membership information you need to use Samba.

Re: [squid-users] NTLM Auth without Winbind?

2005-10-24 Thread John Halfpenny
Gah! I thought so! ;-) Thanks for that, I may as well put Squid onto its own box and join the domain in the usual way then. :-) John --- On Mon 10/24, Serassio Guido [EMAIL PROTECTED] wrote: From: Serassio Guido [mailto: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc:

Re: [squid-users] acl and never_direct

2005-10-24 Thread Merton Campbell Crockett
On Sun, 23 Oct 2005, Henrik Nordstrom wrote: On Sat, 22 Oct 2005, Merton Campbell Crockett wrote: The problem that I am having is that HTTP requests that use an IP address are being forwarded to the parent cache. Can you not combine dstdomain and dst in the same acl? You can use

[squid-users] any new documentation about squid?in PDF?

2005-10-24 Thread Kumara Jayaweera
Greetings to the List! is there any new documentation about squid?in PDF? Thanks kumara

[squid-users] OWA contents frame displays Loading

2005-10-24 Thread Castañeda Jairo
Hello to all, First the setup of my Internet connection: Internet ←→ SEF Firewall ←→ Proxy (RH 7.2 Squid 2.4STABLE7) ←→ Clients Now the problem: When users try to connect with an external OWA server, they get a Web page appearing with all the information except the actual emails. Instead, it

Re: [squid-users] NTLM Auth without Winbind?

2005-10-24 Thread Serassio Guido
Hi, At 15.27 24/10/2005, John Halfpenny wrote: Gah! I thought so! ;-) Thanks for that, I may as well put Squid onto its own box and join the domain in the usual way then. :-) John But you can try with squid_ldap_group external ACL helper, using the -S option. Regards Guido -

[squid-users] Systems Requirements

2005-10-24 Thread Ben
Hi everbody What is the Hardware Systems Requirements the squid for 10,000 clients? thanks Regards Ben

Re: [squid-users] any new documentation about squid?in PDF?

2005-10-24 Thread Ben
hi Kumara check it http://squid.visolve.com/squid/configuration_manual_24.htm Regards Ben - Original Message - From: Kumara Jayaweera [EMAIL PROTECTED] To: squid-users@squid-cache.org Cc: squid-users@squid-cache.org Sent: Monday, October 24, 2005 11:13 AM Subject: [squid-users]

RE: [squid-users] OWA contents frame displays Loading

2005-10-24 Thread Chris Robertson
Two things... Hello to all, First the setup of my Internet connection: Internet ←→ SEF Firewall ←→ Proxy (RH 7.2 Squid 2.4STABLE7) ←→ Clients This is a very old version of Squid (and RedHat). You might find that a newer version works better. Now the problem: When users try to

RE: [squid-users] Systems Requirements

2005-10-24 Thread Chris Robertson
-Original Message- From: Ben [mailto:[EMAIL PROTECTED] Sent: Monday, October 24, 2005 10:30 AM To: squid-users@squid-cache.org Subject: [squid-users] Systems Requirements Hi everbody What is the Hardware Systems Requirements the squid for 10,000 clients? thanks Regards

RE: [squid-users] OWA contents frame displays Loading

2005-10-24 Thread Castañeda Jairo
Hi Chris, You're right, it's a very old version of Squid but upgrading is not option yet... However you were spot on with your suggestion. I just added the line: extension_methods SEARCH (after searching the firewall's log for the unsupported method) To the configuration file and it

Re: [squid-users] Systems Requirements

2005-10-24 Thread Kinkie
On Mon, 2005-10-24 at 13:29 -0500, Ben wrote: Hi everbody What is the Hardware Systems Requirements the squid for 10,000 clients? Do you have any information about their expected usage patterns? Are they business workers? Is that an ISP? 1000 pro-surfer clients can put much more stress on

Re: [squid-users] OWA contents frame displays Loading

2005-10-24 Thread Jakob Curdes
You should upgrade squid to a current version and add : acl WEBDAV method PROPFIND TRACE PURGE PROPPATCH MKCOL COPY MOVE LOCK UNLOCK DELETE PUT GET HEAD (Maybe you want to limit the available command set) With this acl you can then construct a http_access line that allows access to WebDAV

Re: [squid-users] Systems Requirements

2005-10-24 Thread Kevin
On 10/24/05, Chris Robertson [EMAIL PROTECTED] wrote: Ben [mailto:[EMAIL PROTECTED] wrote What is the Hardware Systems Requirements the squid for 10,000 clients? Number of clients is a fairly useless metric. Requests per second certainly more helpful, or expected bandwidth utilization,

FW: [squid-users] Problem with https-sites

2005-10-24 Thread Ric Lonsdale
we have the following error since several squid versions. Is there a soloution for this? We are using LDAP-Authentication. The error only appears if the first site you access through the proxy in a new browser window is a HTTPS-site. Users enter their username/password and get the error.

[squid-users] NTLM Auth/LVS-DR/Squid

2005-10-24 Thread Timothy Bushart
Looking to run two loadbalanced LVS-DR servers forwarding port 3128 requests to two squid real servers: Path of internet browsing: Client browser proxy settings = [Virtual IP address of LVS load balancers/Port 3128] 2 LVS-DR clustered servers load balance and forward 31282 Squid

[squid-users] transparent proxy with authentication

2005-10-24 Thread Chin Kah Yi
Dearest squid expert out there, I have had squid boxes running on wccp with cisco router for my customer. There are 2 new requirements lately: (1) authentication with wccp There comes a new requirement from my customer that every user should be authenticated before being allowed to browse the

[squid-users] Can squid redirect URL in reverse proxy?

2005-10-24 Thread Bernard Barton
I have Squid configured as a reverse proxy, which in part looks something like this: httpd_accel_host www.somedomain.com httpd_accel_port 80 httpd_accel_host www.someotherdomain.com httpd_accel_port 80 In my /etc/hosts file I have the Squid proxy server's IP address listed like: 192.168.1.2

Re: [squid-users] transparent proxy with authentication

2005-10-24 Thread Chin Kah Yi
Thanks Merton for explaning. What if the design is changed from wccp to a redirection level7 switch such as foundry serveriron? L7 switch redirect http traffic to squids. Will this be able to design provide authentication from squid? If transparent squid cant provide authentication due to

Re: [squid-users] transparent proxy with authentication

2005-10-24 Thread Merton Campbell Crockett
On Monday 24 October 2005 20:44, Chin Kah Yi wrote: Thanks Merton for explaning. What if the design is changed from wccp to a redirection level7 switch such as foundry serveriron? L7 switch redirect http traffic to squids. Will this be able to design provide authentication from squid? If