Re: [squid-users] Port Problem with squid

2008-06-02 Thread Indunil Jayasooriya
On Mon, Jun 2, 2008 at 11:18 AM, Edward Dam [EMAIL PROTECTED] wrote: I've cleared the rules, and then applied your recommended iptables command. Unfortunately, it puts me right back to where I started. When the www.example.com redirects to http://www2.example.com:8098/login.aspx, it never

Re: [squid-users] Port Problem with squid

2008-06-02 Thread Edward Dam
Hello, thank you again for the reply. When I take off transparent mode, the result is the same, it does not access (time out) There seems to be some confusion on what I am trying to do. I am NOT trying to redirect www.example.com to www2.example.com:8098/login.aspx via my proxy server. The

Re: [squid-users] Port Problem with squid

2008-06-02 Thread Indunil Jayasooriya
When I take off transparent mode, the result is the same, it does not access (time out) without squid, When you access www.example.com, does it redirect to www2.example.com:8098/login.aspx ? If yes, Webserver www.example.com is OK. Hope to hear from you. Thank you Indunil Jayasooriya

Re: [squid-users] Port Problem with squid

2008-06-02 Thread Indunil Jayasooriya
Yes, that is correct. If I bypass squid and go to www.example.com, it automatically redirects to www2.example.com:8098/login.aspx OK, SOUNDS GOOD. i.e nothing wrong with webserver www.example.com www2.example.com is running on port 8098. Can you change it to port 80 ? Then, Pls browse

Re: [squid-users] Port Problem with squid

2008-06-02 Thread Indunil Jayasooriya
www2.example.com server is not my within my company. I cannot change the port on it Again, pls disable both transparent intercept mode and dansguardian in squid. Then, browse www.example.com via squid. Pls give me the output of below command tail -f /var/log/squid/acccess.log and, also I

Re: [squid-users] Port Problem with squid

2008-06-02 Thread Henrik Nordstrom
On mån, 2008-06-02 at 10:06 +0800, Edward Dam wrote: When a user points to www.example.com, that webpage/server redirects them to http://www2.example.com:8098/login.aspx The redirection is timing out. I've put port 8098 as one of the Safe_ports in squid.conf, and allowed both example.com and

Re: [squid-users] Port Problem with squid

2008-06-02 Thread Indunil Jayasooriya
No other logging for it. Thanks for your logs. I think that 10.43.8.20 is the server where www2.example.com. So far, We checked in two ways. One way is without squid (Direct connection)Then, It worked. What is this path, Is it via a firewall? Pls write down that PATH. The , other PATH is

Re: [squid-users] Port Problem with squid

2008-06-02 Thread Indunil Jayasooriya
10.1.15.245 is the squid server. It resides on the LAN. 10.1.15.240 is the LAN interface 10.1.15.241 is connected to INTRANET What is you laptop ip? We know you (i.e your laptop) can access www2.example.com without squid. Can you tracert to www2.example.com (NOT throuogh squid) I think

Re: [squid-users] Is it possible to have squid as do Proxy and OWA/RPCoHTTPS accelerator?

2008-06-02 Thread Odhiambo Washington
On Mon, Jun 2, 2008 at 2:37 AM, Amos Jeffries [EMAIL PROTECTED] wrote: Odhiambo Washington wrote: On Sun, Jun 1, 2008 at 1:38 PM, Amos Jeffries [EMAIL PROTECTED] wrote: Odhiambo Washington wrote: Hello gurus, I have been trying the whole day to get Squid to work as a reverse

Re: [squid-users] Port Problem with squid

2008-06-02 Thread Indunil Jayasooriya
my laptop IP is 10.1.15.57. 10.1.15.240 is the LAN interface of the router. It is normally the gateway - however when I am using squid (transparent) the squid server becomes my gateway. Yeah, Interesting. Then, this is your network setup if you bypass squid , your laptop - Firewall -

Re: [squid-users] Port Problem with squid

2008-06-02 Thread Indunil Jayasooriya
I am GLAD to hear am very happy about your effort in solving this ISSUE. HAPPY squiding. On Mon, Jun 2, 2008 at 1:57 PM, Edward Dam [EMAIL PROTECTED] wrote: Hello Thank you for all your help. I have figured out that it is actually related to DNS. When I put the intranet DNS server (from

Re: [squid-users] Access-list domain and user

2008-06-02 Thread Keke Man
Thanks a lot, it's work :)

Re: [squid-users] Access-list domain and user

2008-06-02 Thread Henrik Nordstrom
On mån, 2008-06-02 at 10:52 +0200, Keke Man wrote: Hi, I want to know if it's possible to have an ACL to grant a user to access a domain. Sure. Just combine the two acls on the same http_access line..

[squid-users] Access-list domain and user

2008-06-02 Thread Keke Man
Hi, I want to know if it's possible to have an ACL to grant a user to access a domain. My users are authenticated with LDAP. To grant access a user : acl prj1 proxy_auth toto http_access allow prj1 http_reply_access allow prj1 To grant access for a domain : acl prj2 dstdom_regex youtube

Re: [squid-users] Is it possible to have squid as do Proxy and OWA/RPCoHTTPS accelerator?

2008-06-02 Thread Henrik Nordstrom
On mån, 2008-06-02 at 11:09 +0300, Odhiambo Washington wrote: it, especially because Outlook needs the https:// URI. However, as we are going to do the SSL offloading on the accelerator, I believe http:// would suffice. It will, but you need to configure Squid cache_peer with the

Re: [squid-users] Is it possible to have squid as do Proxy and OWA/RPCoHTTPS accelerator?

2008-06-02 Thread Odhiambo Washington
On Mon, Jun 2, 2008 at 12:39 PM, Henrik Nordstrom [EMAIL PROTECTED] wrote: On mån, 2008-06-02 at 11:09 +0300, Odhiambo Washington wrote: it, especially because Outlook needs the https:// URI. However, as we are going to do the SSL offloading on the accelerator, I believe http:// would suffice.

Re: [squid-users] 2.7 dns res problem (probably bug)

2008-06-02 Thread Michel (M)
Henrik Nordstrom disse na ultima mensagem: On sön, 2008-06-01 at 09:45 -0300, Michel (M) wrote: yes I understand the msgs but it is not the case, I run the exact same config on the exact same machine (only by stopping 2.7 and starting 2.6 with the exact same configs) and 2.6 works but 2.7

[squid-users] Blocking Shoutcast Streaming

2008-06-02 Thread Nadeem Semaan
Hello, I am trying to block shoutcast streaming, but all i can find on the net is blocking the media players, which is something that I can not do since it is needed at times.  As well, the non standard ports are needed to access other sites.  Can anyone help please?

Re: [squid-users] ldap_auth

2008-06-02 Thread Chris Riggins
I found that the method below did not work, actually. I still have not figured out just how Apache's htdigest is joining the several inputs to create the md5 hash, but it isn't user:realm:password | md5sum. I finally got digest auth to work by doing the following (the -c creates the

[squid-users] 2.7 ready for production

2008-06-02 Thread Juan C. Crespo R.
Hi Dears We use wccpv2, delay_pools and reply and request headers set to 128K, Does the 2.7 Version supports it? Thanks :)

Re: [squid-users] Is it possible to have squid as do Proxy and OWA/RPCoHTTPS accelerator?

2008-06-02 Thread Henrik Nordstrom
On mån, 2008-06-02 at 13:41 +0300, Odhiambo Washington wrote: (actually, this is supposed to be the only entry for cache_peer I am goingto have?) If you only have one server, and that server is only talking http then yes there is only a single cache_peer.. That has worked. It also requied a

[squid-users] Re: allow group 1 to access few sites and group 2 to access another group of sites

2008-06-02 Thread alexus
anyone? On Sat, May 31, 2008 at 7:55 PM, alexus [EMAIL PROTECTED] wrote: is there a way using squid proxy to somehow allow certaint people to access some websites and another group of people access another group of websites? maybe some sort of authentication of some sort? --

Re: [squid-users] Is it possible to have squid as do Proxy and OWA/RPCoHTTPS accelerator?

2008-06-02 Thread Odhiambo Washington
On Mon, Jun 2, 2008 at 7:27 PM, Henrik Nordstrom [EMAIL PROTECTED] wrote: On mån, 2008-06-02 at 13:41 +0300, Odhiambo Washington wrote: (actually, this is supposed to be the only entry for cache_peer I am goingto have?) If you only have one server, and that server is only talking http then

Re: [squid-users] 2.7 ready for production

2008-06-02 Thread Henrik Nordstrom
On mån, 2008-06-02 at 12:03 -0430, Juan C. Crespo R. wrote: We use wccpv2, delay_pools and reply and request headers set to 128K, Does the 2.7 Version supports it? Yes. Regards Henrik signature.asc Description: This is a digitally signed message part

Re: [squid-users] ldap_auth

2008-06-02 Thread Henrik Nordstrom
On mån, 2008-06-02 at 10:10 -0400, Chris Riggins wrote: I found that the method below did not work, actually. I still have not figured out just how Apache's htdigest is joining the several inputs to create the md5 hash, but it isn't user:realm:password | md5sum. It is the same. Try again..

Re: [squid-users] Re: allow group 1 to access few sites and group 2 to access another group of sites

2008-06-02 Thread Henrik Nordstrom
http://wiki.squid-cache.org/SquidFaq/SquidAcl http://wiki.squid-cache.org/SquidFaq/ProxyAuthentication On mån, 2008-06-02 at 12:15 -0400, alexus wrote: anyone? On Sat, May 31, 2008 at 7:55 PM, alexus [EMAIL PROTECTED] wrote: is there a way using squid proxy to somehow allow certaint people

Re: [squid-users] ldap_auth

2008-06-02 Thread Chris Riggins
Sorry, it never matches when I do it. eg. (0)[slash]/opt/home/p36wk $ echo -n p36wk:Realm:passw0rd | md5sum 3acaf7548c911426be232de30c802233 - $ /opt/apache/bin/htdigest -c passwd.htdigest p36wk Realm Adding password for Realm in realm p36wk. New password: [passw0rd] Re-type new password:

[squid-users] SQUID filtering with WIndows

2008-06-02 Thread Curt Coleman
I am preparing to use SQUID for web-filtering at a public library to replace CyberSitter. I have it running on a test machine locally and am using some temp homemade blacklists. Is there an easy way to make Dans Guardian run on a Windows machine? IF not, is there an alternative to Dans Guardian

Re: [squid-users] ldap_auth

2008-06-02 Thread Henrik Nordstrom
On mån, 2008-06-02 at 15:19 -0400, Chris Riggins wrote: Sorry, it never matches when I do it. eg. (0)[slash]/opt/home/p36wk $ echo -n p36wk:Realm:passw0rd | md5sum 3acaf7548c911426be232de30c802233 - $ echo -n p36wk:Realm:passw0rd | md5sum 336326719e5c087aa1016fe5a3c871d4 - $

Re: [squid-users] SQUID filtering with WIndows

2008-06-02 Thread Henrik Nordstrom
On mån, 2008-06-02 at 15:52 -0400, Curt Coleman wrote: I am preparing to use SQUID for web-filtering at a public library to replace CyberSitter. I have it running on a test machine locally and am using some temp homemade blacklists. Is there an easy way to make Dans Guardian run on a Windows

[squid-users] ignoring a no_cache directive

2008-06-02 Thread Ritter, Nicholas
Is there a way to tell squid 2.6 (selective to URL or not) to ignore the Cache-Control: no-cache directive? Nick

[squid-users] Youtube and other streaming media (caching)

2008-06-02 Thread Rodrigo de Oliveira Gomes
Hello Guys! Please, is the information about the message (http://www.squid-cache.org/mail-archive/squid-users/200804/0420.html#replies) work in squid version 3.0 stable 5? thanks

Re: [squid-users] ignoring a no_cache directive

2008-06-02 Thread Henrik Nordstrom
On mån, 2008-06-02 at 15:47 -0500, Ritter, Nicholas wrote: Is there a way to tell squid 2.6 (selective to URL or not) to ignore the Cache-Control: no-cache directive? refresh_pattern ignore-reload option. Regards Henrik signature.asc Description: This is a digitally signed message part

Re: [squid-users] Youtube and other streaming media (caching)

2008-06-02 Thread Henrik Nordstrom
On mån, 2008-06-02 at 18:27 -0300, Rodrigo de Oliveira Gomes wrote: Hello Guys! Please, is the information about the message (http://www.squid-cache.org/mail-archive/squid-users/200804/0420.html#replies) work in squid version 3.0 stable 5? No, only 2.7 so far. But is likely to be seen

Re: [squid-users] allow group 1 to access few sites and group 2 to access another group of sites

2008-06-02 Thread Indunil Jayasooriya
is there a way using squid proxy to somehow allow certaint people to access some websites and another group of people access another group of websites? maybe some sort of authentication of some sort? yes. I am running with nsca_auth pls add below lines to squid.conf file auth_param