Re: [squid-users] looking for testers: google maps/earth/youtube caching

2007-11-29 Thread Tek Bahadur Limbu
Hi Adrian, Adrian Chadd wrote: On Mon, Nov 26, 2007, Tek Bahadur Limbu wrote: I'm saying right now that I'm willing to spend the time and effort to work with people for free to get this stuff tested and debugged. It doesn't benefit me - I'm not getting paid -at all- to do this. I am

Re: [squid-users] How to make squid IM/IRC friendly?

2007-11-29 Thread Amos Jeffries
Joel Bryan Juliano wrote: I use GNOME and when I configure my desktop to use a squid proxy address in Network Proxy, Pidgin automatically use GNOME Proxy Settings, and could not connect. Funky. I have no problem with that config. Check your proxy settings are correct echo $http_proxy

Re: [squid-users] Problem with squid_session helper

2007-11-29 Thread Henrik Nordstrom
On sön, 2007-11-25 at 20:13 -0800, Reid wrote: I'm having trouble with the squid_session helper I have the following line: deny_info http://www.SomeSiteURLHere.com/redir.php?url=%s session The php page does a print $url for the href link However, squid forwards the user to this url:

Re: [squid-users] Authentication on Active Directory

2007-11-29 Thread Henrik Nordstrom
On tis, 2007-11-27 at 12:05 +0100, [EMAIL PROTECTED] wrote: Hi All, is it possible to authenticate a squid (squid-2.6.STABLE6-4.el5) against Active Directory without using Kerberos ? You can use LDAP. Regards Henrik signature.asc Description: This is a digitally signed message part

Re: AW: [squid-users] Authentication on Active Directory

2007-11-29 Thread Henrik Nordstrom
On tis, 2007-11-27 at 12:31 +0100, [EMAIL PROTECTED] wrote: @Adrian: Thank you for youre fast answer. Maybe you can help me a bit with the configuration with Kerberos ? Most steps are working on my system: - I have a Kerberos ticket - wbinfo -g shows the groups in the AD - getent -g

Re: [squid-users] Incoming plain connection, outgoing ssl connection

2007-11-29 Thread Henrik Nordstrom
On tis, 2007-11-27 at 15:01 +0100, Davide Vernizzi wrote: Hi, can I have an incoming connection on the port 80 and forward it to the destination on another port within a ssl connection? Yes. See cache_peer. Regards Henrik signature.asc Description: This is a digitally signed message part

Re: [squid-users] looking for testers: google maps/earth/youtube caching

2007-11-29 Thread Adrian Chadd
On Thu, Nov 29, 2007, Tek Bahadur Limbu wrote: 2007/11/29 15:58:43| WARNING: store_rewriter #5 (FD 11) exited 2007/11/29 15:58:43| WARNING: store_rewriter #4 (FD 10) exited 2007/11/29 15:58:43| WARNING: store_rewriter #3 (FD 9) exited 2007/11/29 15:58:43| Too few store_rewriter processes are

Re: [squid-users] looking for testers: google maps/earth/youtubecaching

2007-11-29 Thread Adrian Chadd
I've just committed some changes to Squid-2.HEAD which should fix this crash and also the URL mismatch errors in cache.log that Dave was seeing. It'll show up in tomorrow's Squid-2.HEAD snapshot (ie, 20071130.) Please give it a whirl and let me know how it goes. Adrian On Wed, Nov 28, 2007,

Re: [squid-users] looking for testers: google maps/earth/youtubecaching

2007-11-29 Thread Gleidson Antonio Henriques
Ok ! Problem went away... If you are interested, i have one problem here, sometimes squid cached the video and served it from cache. But in some cases like this. I watch the video but squid doesn´t have luck with save it on hard disk. I tried to watch the video again but it didn´t served it

[squid-users] Reverse proxy does not keep persistent connections

2007-11-29 Thread Gleb Paharenko
Dear List. I'm using squid 2.6 in reverse proxy mode. However I've found that it does not keep persistent connection with web servers (fresh Apache 2.). Is it desired behavior? Client uses HTTP 1.1 and sends multiple requests, however for each new request squid initiates a new connection to

[squid-users] Squid Proxy Vulnerability.

2007-11-29 Thread Josh Fritts
Hello, We got a notification from our ISP that our squid server was being used to relay emails. We checked the logs and found 2.5 Million hits just like this snippit: 1196170398.384837 64.237.46.55 TCP_MISS/200

Re: [squid-users] Squid Proxy Vulnerability.

2007-11-29 Thread Alexandre Correa
check your config (http_access allow all) ... change it to http_access deny all On Nov 29, 2007 4:21 PM, Josh Fritts [EMAIL PROTECTED] wrote: Hello, We got a notification from our ISP that our squid server was being used to relay emails. We checked the logs and found 2.5 Million hits

Re: [squid-users] Squid Proxy Vulnerability.

2007-11-29 Thread Josh Fritts
Shouldn't this line override that? http_access deny !Safe_ports http_access deny CONNECT !SSL_ports On Nov 29, 2007 3:18 PM, Alexandre Correa [EMAIL PROTECTED] wrote: check your config (http_access allow all) ... change it to http_access deny all On Nov 29, 2007 4:21 PM, Josh Fritts

[squid-users] Squid - Domino LDAP Auth (and a little Websphere SSO)

2007-11-29 Thread Chris Mitchell
Greetings, Have a bit of a problem trying to get Squid authentication working against a Lotus Domino LDAP directory. The actual authentication part is OK, if I want everyone in my Domino directory to have access through Squid it is not a problem, the real issue arises when I try to filter it

Re: [squid-users] Squid Proxy Vulnerability.

2007-11-29 Thread Amos Jeffries
Shouldn't this line override that? http_access deny !Safe_ports http_access deny CONNECT !SSL_ports It should be yes. But as your log provides it somehow is not. If you want to see exactly how it is done, try a wireshark/tcpdump trace on teh incoming traffic. You should check that the

Re: [squid-users] Squid - Domino LDAP Auth (and a little Websphere SSO)

2007-11-29 Thread Amos Jeffries
Greetings, Have a bit of a problem trying to get Squid authentication working against a Lotus Domino LDAP directory. The actual authentication part is OK, if I want everyone in my Domino directory to have access through Squid it is not a problem, the real issue arises when I try to filter

Re: [squid-users] Squid Proxy Vulnerability.

2007-11-29 Thread Josh Fritts
On Nov 29, 2007 4:36 PM, Amos Jeffries [EMAIL PROTECTED] wrote: Shouldn't this line override that? http_access deny !Safe_ports http_access deny CONNECT !SSL_ports It should be yes. But as your log provides it somehow is not. If you want to see exactly how it is done, try a

Re: [squid-users] looking for testers: google maps/earth/youtubecaching

2007-11-29 Thread Adrian Chadd
On Thu, Nov 29, 2007, Gleidson Antonio Henriques wrote: Ok ! Problem went away... If you are interested, i have one problem here, sometimes squid cached the video and served it from cache. But in some cases like this. I watch the video but squid doesn?t have luck with save it on hard disk.

Re: [squid-users] Squid - Domino LDAP Auth (and a little Websphere SSO)

2007-11-29 Thread Chris Mitchell
Happy to do it if it'll make this exercise easier, any particular reason why ? Regards, Chris Mitchell On Fri, 30 Nov 2007, Amos Jeffries wrote: Greetings, Have a bit of a problem trying to get Squid authentication working against a Lotus Domino LDAP directory. The actual authentication

Re: [squid-users] Squid - Domino LDAP Auth (and a little Websphere SSO)

2007-11-29 Thread Amos Jeffries
Happy to do it if it'll make this exercise easier, any particular reason why ? I already mentioned 2.5 being obsolete. Support, Security, Speed, Stability, Simplicity for a few more. - Most of the people you will find providing support do so for 2.6/3.0 now. - There are large known

Re: [squid-users] looking for testers: google maps/earth/youtubecaching

2007-11-29 Thread Dave
Looks good now Adrian Chadd wrote: I've just committed some changes to Squid-2.HEAD which should fix this crash and also the URL mismatch errors in cache.log that Dave was seeing. It'll show up in tomorrow's Squid-2.HEAD snapshot (ie, 20071130.) Please give it a whirl and let me know how it

[squid-users] How can I configure squid to cache content based on file extension

2007-11-29 Thread ying lcs
Hi, Is it possible to configure squid to cache content based on file extension? And everything else is just passed thru? Thank you.

Re: [squid-users] How can I configure squid to cache content based on file extension

2007-11-29 Thread Adrian Chadd
On Thu, Nov 29, 2007, ying lcs wrote: Hi, Is it possible to configure squid to cache content based on file extension? And everything else is just passed thru? refresh_patterns can do it based on the URL. is that good enough for now? adrian -- - Xenion - http://www.xenion.com.au/ - VPS

[squid-users] My Times (was Re: [squid-users] looking for testers: google maps/earth/youtubecaching)

2007-11-29 Thread Adrian Chadd
I've had a couple of people poke me on IRC about this but as its ~3 or 4am for me I'm fast asleep and they're not about when I wake up. I'm in Western Australia, so I'm working GMT+9 hours from about 9am to midnight. If you're going to try and grab me on IRC to talk about Squid stuff then please

[squid-users] how to access username in an url_rewrite_program

2007-11-29 Thread robert rottermann
Hi there, we are running an application server behind squid (zope/plone). Squid calls an url_rewrite_program written in python to call that server. I would like to send the name of the authenticated user to the application server. Now my question: How can I do that? For me the best thing would