[squid-users] ACL by destination IP using regex problem

2005-11-01 Thread Carlos Kramer
I've searched high and low, read FAQs, added debugging but can't work this out, sorry if its obvious or been asked before... I have a hierachy of squid caches using v2.4 STABLE 1. One cache needs to determine if sites are on a local net by both destination IP and hostname but it can't do DNS look

[squid-users] Re: Squid on Linux authenticating to two different Windows Active Directory groups

2005-11-01 Thread Adam Aube
Roy Verrips wrote: > I've got Squid on a Linux (Debian 3.1) box running beautifully and > authenticating users to a Windows Active Directory. > Problem I have is how to setup the acl to get the different ADgroups? Do > I need two auth_params? Is that possible and what would the syntax be? Look

[squid-users] Turning of forward loop warnings

2005-11-01 Thread Adam Clark
Hi, I use some virur protection on our squid box which for each query Get shot off to the virus software on localhost, then the virus Software uses the same instance of squid for the final request. Critical config statements I use to perform this: cache_peer localhost parent 3128 7 no-query def

Re: [squid-users] ntlm_auth sending ERR to squid when it shouldn't

2005-11-01 Thread Henrik Nordstrom
On Tue, 1 Nov 2005, Gabriel Gunderson wrote: ntlm_auth seems to be sending ERR to squid when it shouldn't. Your problem is with wbinfo_group, not ntlm_auth. He is also in that group so this should have worked also. Right? Right. Regards Henrik

[squid-users] Unable to start service under Windows XP

2005-11-01 Thread Stefano Del Furia
Hi all, i apologize for the disturb, and probably i'm asking a very FAQ, but i cannot reach to start the squid service under Windows XP. I'm using 2.5 stable 12 version Probably i make some mistake on the squid.conf file so could someone send me a valid conf files ?? Thanks in advance Stefan

Re: [squid-users] transparent proxy error

2005-11-01 Thread CsY
do you think this? # Generated by iptables-save v1.3.1 on Fri Oct 21 15:21:54 2005 *mangle :PREROUTING ACCEPT [2497:834932] :INPUT ACCEPT [2477:831704] :FORWARD ACCEPT [19:3172] :OUTPUT ACCEPT [2598:846827] :POSTROUTING ACCEPT [2617:84] COMMIT # Completed on Fri Oct 21 15:21:54 2005 # Generate

Re: [squid-users] re transparent proxy error

2005-11-01 Thread Henrik Nordstrom
On Tue, 1 Nov 2005, CsY wrote: the problem is simple :) the transparent proxy not working transparently. I think, the iptables dont route the packets from 80 to the port 8081, but this iptables script was work. Not much which can go wrong there.. What does iptables-save say about your iptabl

[squid-users] Re: email

2005-11-01 Thread Adam Aube
azeem ahmad wrote: > i want to block my users from any kind of email. is it possible. bcuz if i > block smtp/pop3 then there are so many web based mail servers like > msn/yahoo. and if i block http then it means i have blocked everything on > my network. i like to block every kind of email plz tel

Re: [squid-users] mem use and cache settings seems to be broke on 12

2005-11-01 Thread Henrik Nordstrom
On Tue, 1 Nov 2005, H wrote: I know but this is regarding objects which would be served by the cache_peer but not for ALL request, right? By default nearly all cacheable requests gets sent via a parent if one is defined, answering on ICP and not forbidden by always_direct.. May be I am wro

[squid-users] ntlm_auth sending ERR to squid when it shouldn't

2005-11-01 Thread Gabriel Gunderson
ntlm_auth seems to be sending ERR to squid when it shouldn't. I have two users below that should both work but one doesn't. Any help understanding where I've gone wrong is appreciated. Let's look at this... THIS WORKED: ### Got SMBIZ+worki

Re: [squid-users] email

2005-11-01 Thread trainier
How ironic that you sent that message from an MSN account. :-) Basically, good luck. I would block the standard mail ports, then use a content filter to block the html-based email sites. But you'd have to do them manually for each and every site. It's not practical and it's a lot of work. An

Re: [squid-users] transparent proxy with authentication

2005-11-01 Thread Henrik Nordstrom
On Tue, 1 Nov 2005, Senthil Murugan wrote: the original website that he/she was trying to access. But this time the browser will not send the cookie credentials bcos, the is a different domain. You explained as, "since the proxy has the full control of the traffic passing thru it, it can play

Re: [squid-users] transparent proxy with authentication

2005-11-01 Thread Senthil Murugan
Hello Henrik, I understood your explanation like this. client <-> proxy <> Internet The Scenario is Transparent proxy Authentication using Cookies, and all the traffics are passed through the proxy. When the user access a web page for the first time, he is redirected to a login page s

[squid-users] email

2005-11-01 Thread azeem ahmad
hi list i want to block my users from any kind of email. is it possible. bcuz if i block smtp/pop3 then there are so many web based mail servers like msn/yahoo. and if i block http then it means i have blocked everything on my network. i like to block every kind of email plz tell me how can i d

Re: [squid-users] squidnt2.5 stable 10 ntlm authentication

2005-11-01 Thread Serassio Guido
Hi, At 12.45 01/11/2005, tan hs wrote: Anyway, the reason for me to put -P was first I tried without it goes to BDC server for authetication and it failed. Then I tried to be very specific with -D and -P and it works beautifully. Hence, not to mess up the thing when I am trying to debug, I a

Re: [squid-users] mem use and cache settings seems to be broke on 12

2005-11-01 Thread H
On Tuesday 01 November 2005 08:40, Henrik Nordstrom wrote: > > The proxy-only explains why there is no caching... (proxy-only simply says > "Do not cache objects fetched from this peer") > I know but this is regarding objects which would be served by the cache_peer but not for ALL request, right?

Re: [squid-users] re transparent proxy error

2005-11-01 Thread CsY
the problem is simple :) the transparent proxy not working transparently. I think, the iptables dont route the packets from 80 to the port 8081, but this iptables script was work. Henrik Nordstrom írta: On Tue, 1 Nov 2005, CsY wrote: Ok, i understand it, but not working. Anybody need the conf

Re: [squid-users] re transparent proxy error

2005-11-01 Thread Henrik Nordstrom
On Tue, 1 Nov 2005, CsY wrote: Ok, i understand it, but not working. Anybody need the config or others? Please help me to resolve a problem. What was the problem again? Regards Henrik

Re: [squid-users] mem use and cache settings seems to be broke on 12

2005-11-01 Thread Henrik Nordstrom
On Tue, 1 Nov 2005, H wrote: On Monday 31 October 2005 21:46, Henrik Nordstrom wrote: On Mon, 31 Oct 2005, H wrote: then squid seems to send all request to the cache_peer and DO NOT cache anymore and DO NOT hold any objects in memory What does your cache_peer line say? cache_peer 200.152.

RE: [squid-users] Problem With NTLM

2005-11-01 Thread Henrik Nordstrom
On Tue, 1 Nov 2005, Ian Barnes wrote: Thanks for the reply. The reason I don't think it's a permissions problem is the fact that this works perfectly in our lab and at every other place where we use ntlmv2 to do authentication, and only at one of our clients does it give this error. The winbin

[squid-users] Squid on Linux authenticating to two different Windows Active Directory groups

2005-11-01 Thread Roy Verrips
Hi I've got Squid on a Linux (Debian 3.1) box running beautifully and authenticating users to a Windows Active Directory. The bits from squid.conf that I think matter for this discussion looked like this ... ||auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp ||auth_p

Re: [squid-users] squidnt2.5 stable 10 ntlm authentication

2005-11-01 Thread Serassio Guido
Hi, At 08.54 01/11/2005, tan hs wrote: Hi, Attached herewith the -d output. Everything looks okay but it just won't work. :( Tq. Tan Looking into your log file: The helper is working fine, but: /win32_check_group.exe[456]: Windows group: gproxy, Squid group: "gproxy" What do you wrote i

Re: [squid-users] re transparent proxy error

2005-11-01 Thread CsY
Ok, i understand it, but not working. Anybody need the config or others? Please help me to resolve a problem. Thank you.