Re: [squid-users] Problem writing squid PID file when tproxy is enabled.

2007-02-05 Thread Logu
The only related effect that tproxy has on this is that it gives the process some additional rights it normally doesn't have. But I don't see how this can cause it to not have permissions to open the pid file.. Is there perhaps a squid.pid file with bad permissions in the directory? Or missing ex

[squid-users] End of my contribution

2007-02-05 Thread Alvarez, Wilfried
Dear all That was a pleasure to share all this time and information with you, but I have to leave. So please remove me from the mailing list. Regards,

[squid-users] Squid + WCCPv2 + Tproxy

2007-02-05 Thread Sekar
Hello all, We have Installed squid-2.6STABLE9 and configured the WCCPv2. The configuration works with just WCCPv2, but when TPROXY is configured it doesn't work. We just followed the contents in http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#head-5887c3744368f290e63fda47fd1e4715c9bdbc

Re: [squid-users] Problem writing squid PID file when tproxy is enabled.

2007-02-05 Thread Agung T. Apriyanto
> I dont get what you are saying. The squid goes to > privileged mode while > writing the pid file and why does it require more > than 755 to > /usr/local/squid26s9TP/var/logs/ directory (this is > ownened by nobody:nobody > which is the squid user and group). > > -logu > i don't know the

Re: [squid-users] Squid 2.6.STABLE9 and caching of 302 redirects

2007-02-05 Thread Mark Nottingham
Hi John, Just curious -- have you tried using workarounds like Cache-Control: max-age=0 or Cache-Control: no-cache to see how they behave? Cheers, On 2007/02/06, at 12:00 PM, John Line wrote: I recently built Squid 2.6.STABLE9 as a potential replacement for 2.5.STABLE10, but encountered

[squid-users] Squid 2.6.STABLE9 and caching of 302 redirects

2007-02-05 Thread John Line
I recently built Squid 2.6.STABLE9 as a potential replacement for 2.5.STABLE10, but encountered a problem with our local web authentication system (which worked just fine with the older Squid version). Investigation showed that the problem was that the new Squid version was caching the tempora

[squid-users] Parent Cache

2007-02-05 Thread Adam Parsons
Hi, I dont fully understand this, but here goes i need to send all .com.au traffic through the parent cache link I have 2 network connections, 1 is an ADSL connection the other a frame relay (the frame relay is for all internal sites (which there is a lot in this big organisation), while the ad

RE: [squid-users] Outbound http -> https gateway

2007-02-05 Thread Henrik Nordstrom
mån 2007-02-05 klockan 19:09 -0500 skrev Steve Kapp: > I am interested in b), having squid setup/teardown SSL connections to the > appropriate server so that the LAN traffic remains unencrypted. In the case > of b), will squid simply encapsulate the data and ignore the contents after > the SSL conn

RE: [squid-users] Outbound http -> https gateway

2007-02-05 Thread Steve Kapp
I am interested in b), having squid setup/teardown SSL connections to the appropriate server so that the LAN traffic remains unencrypted. In the case of b), will squid simply encapsulate the data and ignore the contents after the SSL connection to the server has been established, or does it rely up

Re: [squid-users] bungled reverse proxy config: open proxy [SOLVED]

2007-02-05 Thread Craig Skinner
On Mon, Feb 05, 2007 at 11:52:50PM +0100, Henrik Nordstrom wrote: > > Upgrade to 2.6 and there is considerably less risk of doing so.. Ta, I'm using the OS's pre-built binary package at the moment. > > > http_access allow all > > Your problem is here... you should only allow access to your sit

Re: [squid-users] bungled reverse proxy config: open proxy

2007-02-05 Thread Chris Robertson
Craig Skinner wrote: Hi there, Being the Squid reverse newbie that I am, I have configured an open reverse proxy :-( From an offsite shell account: $ telnet my-server Trying 8 Connected to . Escape character is '^]'. GET http://www.squid-cache.org HTTP/1.0 HTTP/1.0 200 OK and i

Re: [squid-users] Problem writing squid PID file when tproxy is enabled.

2007-02-05 Thread Henrik Nordstrom
mån 2007-02-05 klockan 11:41 +0530 skrev Logu: > 2007/02/03 16:07:22| /usr/local/squid26s9TP/var/logs/squid.pid: (1) > Operation not permitted > 2007/02/03 16:07:22| WARNING: Could not write pid file. > > But without "tproxy" option it works without any issues. Is it a known > issue?

Re: [squid-users] bungled reverse proxy config: open proxy

2007-02-05 Thread Henrik Nordstrom
mån 2007-02-05 klockan 22:37 + skrev Craig Skinner: > Hi there, > > Being the Squid reverse newbie that I am, I have configured an open > reverse proxy :-( Upgrade to 2.6 and there is considerably less risk of doing so.. > http_access allow all Your problem is here... you should only allow

Re: [squid-users] Outbound http -> https gateway

2007-02-05 Thread Henrik Nordstrom
mån 2007-02-05 klockan 16:47 -0500 skrev Steve Kapp: > We need an HTTP->HTTPS translator so that internal network traffic may stay > unencrypted, a requirement from some of our customers. I have seen this > question asked previously about squid in the archives, and the answer seems > to be 2.5+ssl

Re: [squid-users] US Daylight Savings Change 2007

2007-02-05 Thread Henrik Nordstrom
mån 2007-02-05 klockan 16:02 -0500 skrev Francis Fauteux: > Is there anything else I should be updating ? Squid does not care about daylight savings for it's normal operations. As long as your system reports GMT/UTC properly it will run fine. Regards Henrik signature.asc Description: Detta är

[squid-users] bungled reverse proxy config: open proxy

2007-02-05 Thread Craig Skinner
Hi there, Being the Squid reverse newbie that I am, I have configured an open reverse proxy :-( >From an offsite shell account: $ telnet my-server Trying 8 Connected to . Escape character is '^]'. GET http://www.squid-cache.org HTTP/1.0 HTTP/1.0 200 OK and in access.log: 117071

[squid-users] Outbound http -> https gateway

2007-02-05 Thread Steve Kapp
We need an HTTP->HTTPS translator so that internal network traffic may stay unencrypted, a requirement from some of our customers. I have seen this question asked previously about squid in the archives, and the answer seems to be 2.5+ssl patch offers this feature, as does 3.0. Does 2.6 also suppo

[squid-users] US Daylight Savings Change 2007

2007-02-05 Thread Francis Fauteux
Good day, We are using - SquidNT 2.6-stable 6 on Windows 2003 server. - Squid 2.5-stable 14 on Red Hat 8 Linux. We need to upgrade our system in preparation of the US daylight savings update of 2007 (http://en.wikipedia.org/wiki/Energy_Policy_Act_of_2005#Change_to_daylig ht_saving_time). For Wind

Re: [squid-users] Best Practice for remote Active Directory Authentication?

2007-02-05 Thread Henrik Nordstrom
mån 2007-02-05 klockan 09:58 -0500 skrev Timothy Bushart: > For remote websites that require AD Authentication, what is the > recommended configuration? We just exclude the domain in internet > explorer proxy exclusion section. Is there a global way to detect this > and exclude from going to throug

Re: [squid-users] Problem with NTLM authenticated virtual host via Squid reverse proxy

2007-02-05 Thread Henrik Nordstrom
mån 2007-02-05 klockan 11:28 +0100 skrev Nordberg, Joakim: > Weblogic has several webservers running on different ports. 10 systems > with 8 weblogics each which gives 80 instances. Some of them are > authenticated with NTLM. Each has it own FQDN Proxying of NTLM is a bit troublesome since it doe

Re: [squid-users] Problem writing squid PID file when tproxy is enabled.

2007-02-05 Thread Logu
I am using squid-2.6.STABLE9 on linux-2.6.19.1 When I enable "tproxy" option in squid, the squid is not able to write the PID file and I get the following error message in squid. 2007/02/03 16:07:22| /usr/local/squid26s9TP/var/logs/squid.pid: (1) Operation not permitted 2007/02/03 16:07

[squid-users] Best Practice for remote Active Directory Authentication?

2007-02-05 Thread Timothy Bushart
For remote websites that require AD Authentication, what is the recommended configuration? We just exclude the domain in internet explorer proxy exclusion section. Is there a global way to detect this and exclude from going to through squid if a remote website requires a MS Login? Thanks ---

Re: [squid-users] Problem writing squid PID file when tproxy is enabled.

2007-02-05 Thread Agung T. Apriyanto
--- Logu <[EMAIL PROTECTED]> wrote: > Hi, > > I am using squid-2.6.STABLE9 on linux-2.6.19.1 When > I enable "tproxy" option > in squid, the squid is not able to write the PID > file and I get the > following error message in squid. > > 2007/02/03 16:07:22| > /usr/local/squid26s9TP/var/lo

Re: [squid-users] Multipule Logs

2007-02-05 Thread Henrik Nordstrom
mån 2007-02-05 klockan 03:25 + skrev Editor FoodSQM.com: > Does squid have a way to logging per domain? I can't find it if there is. Yes, See the access_log directive (2.6 or later). Regards Henrik signature.asc Description: Detta är en digitalt signerad meddelandedel

Re: [squid-users] Problem accessing proton.com

2007-02-05 Thread Henrik Nordstrom
mån 2007-02-05 klockan 17:55 +0545 skrev Tek Bahadur Limbu: > I telnet from the Squid server itself. Odd.. > Is there anything that we can do from our side to resolve this problem? Start staring at tcpdump -s 1600 -X or ethereal captures to figure out what the difference between your telnet and

Re: [squid-users] Problem accessing proton.com

2007-02-05 Thread Tek Bahadur Limbu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 05 Feb 2007 11:47:58 +0100 Henrik Nordstrom <[EMAIL PROTECTED]> wrote: > mån 2007-02-05 klockan 12:08 +0545 skrev Tek Bahadur Limbu: > > Do you telnet from the Squid server, or some other computer? I telnet from the Squid server itself. -

Re: [squid-users] Problem accessing proton.com

2007-02-05 Thread Emilio Casbas
Henrik Nordstrom escribió: mån 2007-02-05 klockan 12:08 +0545 skrev Tek Bahadur Limbu: Dear Hendrik, Thanks for your reply. However, I can always get connected to this site using telnet. It's just that site gives the following error when I try to access it using a web browser. Do

Re: [squid-users] Multipule Logs

2007-02-05 Thread Emilio Casbas
Yes, see for the logformat directive, for a quick example you want to achieve; logformat firstdomain %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %"%{Referer}>h" "%{User-Agent}>h %{Cookie}>h" %Ss:%Sh acl logunav dstdomain firstdomain logformat seconddomain %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs

Re: [squid-users] Problem accessing proton.com

2007-02-05 Thread Henrik Nordstrom
mån 2007-02-05 klockan 12:08 +0545 skrev Tek Bahadur Limbu: > Dear Hendrik, > > Thanks for your reply. > > However, I can always get connected to this site using telnet. It's just > that site gives the following error when I try to access it using a web > browser. Do you telnet from the Squid s

[squid-users] Problem with NTLM authenticated virtual host via Squid reverse proxy

2007-02-05 Thread Nordberg, Joakim
Hi ppl, I seek for help with this problem. I think I hav read all cookbooks, mails and so on. And though I can't solve this, maybe I'm stupid;-) System: Red Hat Enterprise Linux 4.4 squid-2.5.STABLE6-3.4E.12 (can use httpd-2.0.52-25.ent instead if necessary) Weblogic 9.2 Environment: Weblogic h