Re: [squid-users] NAT on suse linux 10.0

2006-01-25 Thread amit ash
Hi, I made a new script file in "/etc/init.d" by the filename rc.ipmasq with the following script in it - #!/bin/sh IPTABLES=/sbin/iptables $IPTABLES -F -t nat $IPTABLES -A POSTROUTING -t nat -o eth0 -j MASQUERADE echo 1 > /proc/sys/net/ipv4/ip_forward - After this i ran the "insserv rc.i

Re: [squid-users] squid.conf not blocking sites....

2006-01-25 Thread Christoph Haas
On Wednesday 25 January 2006 22:34, Mark Elsen wrote: > > Don't you rather want to use "dst" instead of "dstdomain"? > > From the FAQ on Access Controls : > > # dst: destination (server) IP addresses > > # myip: the local IP address of a cl

RE: [squid-users] squid.conf not blocking sites....

2006-01-25 Thread Schaefer, Charles
I needed to restrict the user to the domain as they may cross servers while browsing the site. Thanks for your help! -Original Message- From: Christoph Haas [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 25, 2006 4:26 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] squi

RE: [squid-users] squid.conf not blocking sites....

2006-01-25 Thread Schaefer, Charles
Actually, I ended up doing this with one exception. I found in a FAQ that since 2.3 you have to put in a leading dot for this to work now. -Original Message- From: Mark Elsen [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 25, 2006 4:23 PM To: Schaefer, Charles Cc: squid-users@squid-ca

Re: [squid-users] squid.conf not blocking sites....

2006-01-25 Thread Mark Elsen
> > Don't you rather want to use "dst" instead of "dstdomain"? > From the FAQ on Access Controls : # dst: destination (server) IP addresses # myip: the local IP address of a client's connection # srcdomain: source (client) domain name #

Re: [squid-users] squid.conf not blocking sites....

2006-01-25 Thread Christoph Haas
On Wednesday 25 January 2006 19:59, Schaefer, Charles wrote: > I'm having an issue with a squid.conf file running on 2.5 in which the > sites listed in the conf file as > > acl bad_site dstdomain www.badsite.com > http_access deny bad_site Don't you rather want to use "dst" instead of "dstdomain"?

Re: [squid-users] squid.conf not blocking sites....

2006-01-25 Thread Mark Elsen
> I'm having an issue with a squid.conf file running on 2.5 in which the sites > listed in the conf file as > > acl bad_site dstdomain www.badsite.com > http_access deny bad_site > > does not work. > > www.badsite.com is a host , not a domain , try acl bad_site dstdomai

Re: [squid-users] Squid 2.5 S12 + LDAP

2006-01-25 Thread Guido Serassio
Hi, At 14.56 25/01/2006, [EMAIL PROTECTED] wrote: There are problems configuring LDAP and Squid 2.5 Stable 12. Environment: Hardware: COMPAQ Professional Workstation XP1000 OS:Tru64 V5.1A (OSF1 GOAW25 V5.1 1885 alpha) configure step runs without any problems: ./config

[squid-users] squid.conf not blocking sites....

2006-01-25 Thread Schaefer, Charles
I'm having an issue with a squid.conf file running on 2.5 in which the sites listed in the conf file as acl bad_site dstdomain www.badsite.com http_access deny bad_site does not work. I have other acl's above this to allow traffic, to specific "allowed" sites that do work such as: acl goo

Re: [squid-users] Squid with SquidGuard

2006-01-25 Thread Mark Elsen
> Well you did ask... Apologies to list for long post but please find below a > full (Level 9, ALL) log for a rebbot with the "/usr/sbin/squid" line in > /etc/rc.d/rc.local. > > > I would like to have the cache.log list with the default debug options set, when SQUID is started from rc.local

RE: [squid-users] Can this be done ?

2006-01-25 Thread William Summers
This is as much a social engineering question as a technological one. Are your users apt to violate an acceptable use policy? What are the consequences if they do? In other words, how big does the big brother need to be. Think also about how much time you want to invest in this, and the animosity

Re: [squid-users] Squid 2.5 S12 + LDAP

2006-01-25 Thread Ghislain Garcon
Hello, ldap library' headers are missing, install them and try again. Regards. Ghislain. [EMAIL PROTECTED] a écrit : >There are problems configuring LDAP and Squid 2.5 Stable 12. > >Environment: > >Hardware: COMPAQ Professional Workstation XP1000 >OS:Tru64 V5.1A (OSF1 GOAW

Re: [squid-users] Error acessing a page with Underscore( _ ) in the url

2006-01-25 Thread Philipp Nyffenegger
Check the squid FAQ's. Everything is explained in detail there : http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.8 and http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.9 Cheers, Philipp On 1/25/06, Jacob, Stanley (GE Consumer Finance, consultant) <[EMAIL PROTECTED]> wrote: > Hi All, > > I

[squid-users] [Announce] Squeezer 0.5 released with new features

2006-01-25 Thread Maciej Koziński
Hello! I'm proud to anounce that the 0.5 version of Squid performance optimizer Squeezer has been released. There are few, but useful changes: - updated statistics logic, - added local Squid's memory and disk performance, - added performance gain measures. Performance gain tell you how much fa

RE: [squid-users] Error accessing a page with Underscore( _ ) in the url

2006-01-25 Thread Jacob, Stanley \(GE Consumer Finance, consultant\)
Hi all, I think i have got the solution for the problem http://www.linuxsecurity.com/resource_files/server_security/squid/FAQ/FAQ-11.html check out the point 11.9 But would like to know is there a better way i,e without recompiling and making changes only in squid.conf Regards Stanley -O

Re: [squid-users] Error acessing a page with Underscore( _ ) in the url

2006-01-25 Thread Neil A. Hillard
Hi, Jacob, Stanley (GE Consumer Finance, consultant) wrote: when i try to access a website(Internal) with _ (underscore) in the URL it gives me the following error. While trying to retrieve the URL: http://s2k_bck01cfge.pt.money.com see http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.8

Re: [squid-users] Error acessing a page with Underscore( _ ) in the url

2006-01-25 Thread Kashif Ali Bukhari
in this regard you have to recompie squdi with --enable-underscores On 1/25/06, Geoffroy ARNOUD <[EMAIL PROTECTED]> wrote: > > That's because '_' is not an allowed character in an URL > > -Message d'origine- > De : Jacob, Stanley (GE Consumer Finance, consultant) > [mailto:[EMAIL PROTECTE

Re: [squid-users] Error acessing a page with Underscore( _ ) in the url

2006-01-25 Thread Matus UHLAR - fantomas
On 25.01 19:24, Jacob, Stanley (GE Consumer Finance, consultant) wrote: > I am having a strange problem when runnning squid2.5 stable 9 > > when i try to access a website(Internal) with _ (underscore) in the URL it > gives me the following error. in the URL or in the hostname? the underscore in h

RE: [squid-users] Error acessing a page with Underscore( _ ) in the url

2006-01-25 Thread Geoffroy ARNOUD
That's because '_' is not an allowed character in an URL -Message d'origine- De : Jacob, Stanley (GE Consumer Finance, consultant) [mailto:[EMAIL PROTECTED] Envoyé : mercredi 25 janvier 2006 14:54 À : squid-users@squid-cache.org Objet : [squid-users] Error acessing a page with Underscore(

[squid-users] Error acessing a page with Underscore( _ ) in the url

2006-01-25 Thread Jacob, Stanley \(GE Consumer Finance, consultant\)
Hi All, I am having a strange problem when runnning squid2.5 stable 9 when i try to access a website(Internal) with _ (underscore) in the URL it gives me the following error. But when i try with a non-squid proxy i am bale to access the page. Is there way where i can allow this charcter in the

[squid-users] Squid 2.5 S12 + LDAP

2006-01-25 Thread Werner.Rost
There are problems configuring LDAP and Squid 2.5 Stable 12. Environment: Hardware: COMPAQ Professional Workstation XP1000 OS:Tru64 V5.1A (OSF1 GOAW25 V5.1 1885 alpha) configure step runs without any problems: ./configure --enable-auth="ntlm,basic" \ --enable-

Re: [squid-users] Facing problems with NTLM authentication

2006-01-25 Thread Luis Fernando C. Talora
Try this: auth_param ntlm program /usr/local/libexec/squid/ntlm_auth DOMAIN\dcserver where "DOMAIN" is your NT/AD domain name and "dcserver" is the name of you Domain Controller that runs as PDC. Note that your Linux box that runs Squid *must* be able to resolve the PDC address. To ensure tha

Re: [squid-users] Facing problems with NTLM authentication

2006-01-25 Thread Mark Elsen
Hi, > > I am trying to configure Squid to use NTLM authentication on FreeBSD 6.0. This > is what I put into my squid.conf : > > auth_param ntlm program /usr/local/libexec/squid/ntlm_auth > auth_param ntlm children 5 > auth_param ntlm max_challenge_reuses 0 > auth_param ntlm max_challenge_lifetime

Re: [squid-users] error using bootstrap.sh after follow_xff patch

2006-01-25 Thread Mark Elsen
> at my debian machine i cant find any automake1.5 (only 1.4,1.6,1.7) with > apt-cache search. > so i cant patch the source package with the patch from > http://devel.squid-cache.org/amake/ > > i took automake 1.5 from: > > http://ftp.gnu.org/gnu/automake/automake-1.5.tar.gz > > do i still have to

Re: [squid-users] NAT on suse linux 10.0

2006-01-25 Thread Peter Albrecht
Hi Amit, > I have just installed and configured Squid proxy service on Suse > Linux 10.0. It is working fine but I also need to configure NAT > so > that my users can download their emails in Outlook. To achieve > that I have added these lines in the "/etc/sysctl.conf" > > net.ipv4.ip_forward=1

Re: [squid-users] error using bootstrap.sh after follow_xff patch

2006-01-25 Thread Axel Böhme
at my debian machine i cant find any automake1.5 (only 1.4,1.6,1.7) with apt-cache search. so i cant patch the source package with the patch from http://devel.squid-cache.org/amake/ i took automake 1.5 from: http://ftp.gnu.org/gnu/automake/automake-1.5.tar.gz do i still have to patch this vers