RE: [squid-users] compilation issue squid-2.7.STABLE4 on Solaris 8.

2008-10-13 Thread Henrik Nordstrom
On mån, 2008-10-13 at 00:01 +0200, [EMAIL PROTECTED] wrote: Probably the culpit is --with-large-files (and --with-large-cache-files). These should only be used on 32-bit platforms, not platforms where I/O is natively 64-bits.. you get it, this seems the problem but I am not really sure to

Re: [squid-users] CARP setup

2008-10-13 Thread Paras Fadte
Hi Henrik, I am getting access control list error when squid makes requests to a parent cache. cache_peer parent1.com parent 11000 0no-query carp weight=2 cache_peer parent2.com parent 12000 0no-query carp weight=1 cache_peer origin.com parent

[squid-users] LDAP/idiot problem!

2008-10-13 Thread Ian . Large
Hi everyone I'm looking for some inspiration because I am drawing a complete blank! A few years ago I set up my company's squid boxes - a pair of servers both identically configured and using LDAP authentication against an Active Directory domain. It took quite some time to get it all working

Re: [squid-users] Controlling all HTTP traffic

2008-10-13 Thread Matus UHLAR - fantomas
What is the best way to have full control over HTTP traffic that goes through a Squid-enabled firewall? Don't allow outside connections from clients, don't use transparent. Force users to configure proxy in browser. On 13.10.08 01:40, Ali Hardogan wrote: I cannot use non-transparent

Re: [squid-users] CARP setup

2008-10-13 Thread Henrik Nordstrom
Most likely your proxy is not allowed to access the parent. On mån, 2008-10-13 at 17:42 +0530, Paras Fadte wrote: Hi Henrik, I am getting access control list error when squid makes requests to a parent cache. cache_peer parent1.com parent 11000 0no-query carp weight=2

Re: [squid-users] Problems with ntlm authentification ? what change from 2.6 to 3.0 ?

2008-10-13 Thread Amos Jeffries
Phibee Network Operation Center wrote: Hi i use Squid with NTLM authentification on 2.6 version ... I have a new server and want run on Squid 3.0 but when i start the process, he shutdown and put into cache.log: 2008/10/13 06:39:33| Starting Squid Cache version 3.0.STABLE2 for

[squid-users] Block skype

2008-10-13 Thread Marcos Dutra
Hi guys, Is it possible block skype using acl header in squid? I don't like put in my squid.conf the configuration bellow because will block some sites with IP configuration. acl numeric_IPs urlpath_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ acl connect method CONNECT http_access deny connect

[squid-users] Squid 3 HTTP accelerator not caching content

2008-10-13 Thread Tom Williams
So, I setup my first Squid 3.0STABLE9 proxy in HTTP accelerator mode over the weekend. Squid 3 is running on the same machine as the web server and here are my HTTP acceleration related config options: http_port 80 accel vhost cache_peer 192.168.1.19 parent 8085 0 no-query originserver

[squid-users] FW: Transparent proxy (WCCP) and LDAP authentication

2008-10-13 Thread Johnson, S
I've been digging around while working on this and found a reference from someone 4 years ago that said that transparent proxy does not work with authentication.  Is this true?  I need to perform the following tasks: 1) Authenticate users against a windows AD 2) Transparent proxy (without the

Re: [squid-users] FW: Transparent proxy (WCCP) and LDAP authentication

2008-10-13 Thread Nick Duda
Yes you can. I do this perfectly, but requires using SmartFilter (which I find offers the better content filtering than the competition). I have a full step by step doc if you want it. Sent from Blackberry - Original Message - From: Johnson, S [EMAIL PROTECTED] To:

Re: [squid-users] FW: Transparent proxy (WCCP) and LDAP authentication

2008-10-13 Thread Amos Jeffries
Correction. There are a few confusing terms here. 'transparent' means different things when used to describe HTTP proxy actions and Active Directory authentication. *transparent interception* (the proxy term) and the way HTTP works prevents regular HTTP authentication methods being done. That

Re: [squid-users] Squid 3 HTTP accelerator not caching content

2008-10-13 Thread Amos Jeffries
So, I setup my first Squid 3.0STABLE9 proxy in HTTP accelerator mode over the weekend. Squid 3 is running on the same machine as the web server and here are my HTTP acceleration related config options: http_port 80 accel vhost cache_peer 192.168.1.19 parent 8085 0 no-query originserver

Re: [squid-users] Block skype

2008-10-13 Thread Amos Jeffries
Hi guys, Is it possible block skype using acl header in squid? I don't like put in my squid.conf the configuration bellow because will block some sites with IP configuration. acl numeric_IPs urlpath_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ PATH portion regex will never match the HOST part.

Re: [squid-users] Block skype

2008-10-13 Thread Marcus Kool
ufdbGuard can block Skype. ufdbGuard is a free URL redirector which works with Squid. Blocking Skype is based on SSL connection verification and since Skype using port 443 but has no SSL handshake, the connection is blocked when the option enforce-https-official-certificate is set ON. Note that

Re: [squid-users] Problems with ntlm authentification ? what change from 2.6 to 3.0 ?

2008-10-13 Thread Phibee Network Operation Center
Amos Jeffries a écrit : Phibee Network Operation Center wrote: Hi i use Squid with NTLM authentification on 2.6 version ... I have a new server and want run on Squid 3.0 but when i start the process, he shutdown and put into cache.log: 2008/10/13 06:39:33| Starting Squid Cache version

Re: [squid-users] Problems with ntlm authentification ? what change from 2.6 to 3.0 ?

2008-10-13 Thread Amos Jeffries
Amos Jeffries a écrit : Phibee Network Operation Center wrote: Hi i use Squid with NTLM authentification on 2.6 version ... I have a new server and want run on Squid 3.0 but when i start the process, he shutdown and put into cache.log: 2008/10/13 06:39:33| Starting Squid Cache version

Re: [squid-users] Can someone help me block samba users at a particular time.

2008-10-13 Thread Avinash Rao
Amos, I was not there when squid was compiled on the server, I am not able to find the configure file for squid. So, will removing squid and reinstalling work? Regards, Avinash On Fri, Oct 10, 2008 at 2:35 PM, Amos Jeffries [EMAIL PROTECTED] wrote: Avinash Rao wrote: Yes, I built squid

Re: [squid-users] Can someone help me block samba users at a particular time.

2008-10-13 Thread Amos Jeffries
Amos, I was not there when squid was compiled on the server, I am not able to find the configure file for squid. squid -v will list the configure options squid was built with. So, will removing squid and reinstalling work? It will. Though the removal should not be necessary. Simply

Re: [squid-users] SQUID configure with NTLM prompts users password window

2008-10-13 Thread Tanveer Chowdhury
Sorry to say It didn't work. I tried your 2nd step in Security tab Custom level and set it to 3rd option that is use the login time credentials for everything. Then I also changed my settings as described in the squid website. But no luck. Should I set it to default settings in IE as a last