[squid-users] Squid Auth question for machines not belonging to a AD domain

2009-11-02 Thread Markus Moeller
Does anybody know how a Windows client determines the right authentication mechanism ? I have a case where most clients are on a Windows domain and squid_kerb_auth works fine. Now I have clients from visitors which have never been on the domain. Can I send to these clients a list of

[squid-users] Squid 3.1 + mrtg

2009-11-02 Thread Babu Chaliyath
Hi List, Struggling to get mrtg working with squid. No values shown in the mrtg graph. My System as follows OS Freebsd 7.2 Squid 3.1.0.14 Snmpwalk 5.4.2.1 mrtg 2.16.2 Squid snmp acls are working fine as I am getting results with following command #snmpwalk -m /usr/local/etc/squid/mib.txt -v2c

Re: [squid-users] Squid Auth question for machines not belonging to a AD domain

2009-11-02 Thread Amos Jeffries
Markus Moeller wrote: Does anybody know how a Windows client determines the right authentication mechanism ? I have a case where most clients are on a Windows domain and squid_kerb_auth works fine. Now I have clients from visitors which have never been on the domain. Can I send to these

Re: [squid-users] Squid 3.1 + mrtg

2009-11-02 Thread Amos Jeffries
Babu Chaliyath wrote: Hi List, Struggling to get mrtg working with squid. No values shown in the mrtg graph. My System as follows OS Freebsd 7.2 Squid 3.1.0.14 Snmpwalk 5.4.2.1 mrtg 2.16.2 Squid snmp acls are working fine as I am getting results with following command #snmpwalk -m

[squid-users] jesred: regex

2009-11-02 Thread Riccardo Castellani
In Debian Lenny I installed Jesred 1.2pl1.16 package and I can see regex RE [RURL [ACCEL]] doesn't accept ACCEL parameter; I think my package (installed via aptitude) is just pre-compiled without switch -DUSE_ACCEL. File is /etc/jesred.rules and the unaccepted statements are contained in this

RE: [squid-users] Squid + WCCP + TProxy

2009-11-02 Thread Roth, Joe
I compiled 3.1.0.14 with the --enable-linux-netfilter option and installed. Everything starts and it is listening on 3129, however still nothing arrives. Is there any way for me to check that squid is properly enabling the kernel option? Thanks, --Joe -Original Message- From: Amos

[squid-users] Squid squid_session

2009-11-02 Thread Adam Binks
Hi All, Hopefully someone can help ! I am using squid Version 3.0.STABLE20 with squid_session. Squid_session config in squid.conf is as follows: external_acl_type session ttl=300 negative_ttl=0 children=1 concurrency=200 %SRC /usr/local/squid/libexec/squid_session -t 360 acl session external

[squid-users] Strange site access problem

2009-11-02 Thread Meyerovich Aleksandr EH_NY
Hi, As I'm trying access a site though Squid 2.6 STABLE 17 and after long loading I get this: input type=hidden name=__VIEWSTATE id=__VIEWSTATE value=/wEPDwULLTIwMDM0Nzk3NTEPZBYCZg9kFgICBA9kFgICAQ9kFgICBQ8QDxYGHg1EY XRhVGV4dEZpZWxkBQROYW1lHg5EYXRhVmFsdWVGaWVsZAUCSWQeC18hRGF0YUJvdW5kZ2QQF

[squid-users] Strange site access problem

2009-11-02 Thread Meyerovich Aleksandr EH_NY
-Original Message- From: Meyerovich Aleksandr EH_NY Sent: Monday, November 02, 2009 1:22 PM To: 'squid-users@squid-cache.org' Subject: Strange site access problem Hi, As I'm trying access a site though Squid 2.6 STABLE 17 and after long loading I get this: input type=hidden

[squid-users] Accelerator mode, select peer form request destination ip (feature request?)

2009-11-02 Thread Justo Alonso
Hi !     I'm trying to setup an apache squid in accelerator mode configuration.    I have the apache in Listen *:80 .. with many virtualhosts and many namevirtualhosts (namevirtualhost *:80 too). I have the squid at http_port 8080.    And now I want squid to make the request to the apache to

[squid-users] FW: Strange site access problem

2009-11-02 Thread Meyerovich Aleksandr EH_NY
P.S. To be more precise it's http://customers.reuters.com/home/default.aspx. There's nothing in cache.log or access.log indicative of the problem. The page just never finishes loading. I tried excluding aspx from being cached, but it did not help. Anybody can help with this? Thanks, Alex

Re: [squid-users] Accelerator mode, select peer form request destination ip (feature request?)

2009-11-02 Thread Amos Jeffries
You seem to have mixed up your view of the information passed versus the actions taken and what virtual hosting actually does. On Mon, 2 Nov 2009 21:22:33 +0100, Justo Alonso justo.alo...@gmail.com wrote: Hi ! I'm trying to setup an apache squid in accelerator mode configuration. You

Re: [squid-users] FW: Strange site access problem

2009-11-02 Thread Amos Jeffries
On Mon, 2 Nov 2009 17:04:25 -0500, Meyerovich Aleksandr EH_NY aleksandr.meyerov...@erstegroup.com wrote: P.S. To be more precise it's http://customers.reuters.com/home/default.aspx. There's nothing in cache.log or access.log indicative of the problem. The page just never finishes loading.

Re: [squid-users] jesred: regex

2009-11-02 Thread Amos Jeffries
On Mon, 2 Nov 2009 15:19:42 +0100, Riccardo Castellani r.castell...@usl6.toscana.it wrote: In Debian Lenny I installed Jesred 1.2pl1.16 package and I can see regex RE [RURL [ACCEL]] doesn't accept ACCEL parameter; I think my package (installed via aptitude) is just pre-compiled without switch

Re: [squid-users] Squid Auth question for machines not belonging to a AD domain

2009-11-02 Thread Henrik Nordstrom
mån 2009-11-02 klockan 23:42 +1300 skrev Amos Jeffries: IME, I think sending the correct realm or domain in the NTLM or Negotiate auth headers may prevent clients attempting auth with a known mechanism if they are not part of the domain. If Microsoft had thought about using the required

Re: [squid-users] Squid 3.1 + mrtg

2009-11-02 Thread Henrik Nordstrom
mån 2009-11-02 klockan 23:47 +1300 skrev Amos Jeffries: Make sure that the mib.txt you/mrtg are using came from the 3.1 source code. There have been major changes to the MIB numbering in 3.1. Hmm.. what kind of changes? MIB numbering should never change. Old numbers may cease to exists when

RE: [squid-users] Squid + WCCP + TProxy

2009-11-02 Thread Henrik Nordstrom
mån 2009-11-02 klockan 09:23 -0500 skrev Roth, Joe: I compiled 3.1.0.14 with the --enable-linux-netfilter option and installed. Is there any way for me to check that squid is properly enabling the kernel option? The needed kernel option is enabled by iptables, not Squid. The compile +

Re: [squid-users] Squid squid_session

2009-11-02 Thread Henrik Nordstrom
mån 2009-11-02 klockan 16:07 + skrev Adam Binks: My question is, without using routed static IP's at each site, is it possible to have squid detect the different end users at each site ? Only if you figure out some other means of differentiating the users at the TCP/IP level. I don't.

Re: [squid-users] Accelerator mode, select peer form request destination ip (feature request?)

2009-11-02 Thread Henrik Nordstrom
tis 2009-11-03 klockan 11:26 +1300 skrev Amos Jeffries: This requirement is met by adding a cache_peer directive for each back-end Apache server. Then using cache_peer_access and ACL of the myip type limiting the requests passed to each peer to be those received on the matching input IP. But

Re: [squid-users] Squid 3.1 + mrtg

2009-11-02 Thread Babu Chaliyath
Make sure that the mib.txt you/mrtg are using came from the 3.1 source code. There have been major changes to the MIB numbering in 3.1. Amos -- Please be using  Current Stable Squid 2.7.STABLE7 or 3.0.STABLE20  Current Beta Squid 3.1.0.14 Hi, thanx for the reply Yes I am using the

Re: [squid-users] Squid 3.1 + mrtg

2009-11-02 Thread Amos Jeffries
Henrik Nordstrom wrote: mån 2009-11-02 klockan 23:47 +1300 skrev Amos Jeffries: Make sure that the mib.txt you/mrtg are using came from the 3.1 source code. There have been major changes to the MIB numbering in 3.1. Hmm.. what kind of changes? MIB numbering should never change. Old numbers

Re: [squid-users] Squid squid_session

2009-11-02 Thread Amos Jeffries
Henrik Nordstrom wrote: mån 2009-11-02 klockan 16:07 + skrev Adam Binks: My question is, without using routed static IP's at each site, is it possible to have squid detect the different end users at each site ? Only if you figure out some other means of differentiating the users at the

Re: [squid-users] Pb with Microsoft Integrated Login and Squid 3.1

2009-11-02 Thread Amos Jeffries
NOGUES Jean-Marc (EURIWARE) wrote: Hi, I have upgraded our squid from 2.5 stable6 to 3.1.0.14 . This because many remote web servers want Microsoft connection oriented authentication and I 'have seen that squid 2.5 doesn't forward that kind of authentication. . Now using squid 3.1, my

Re: [squid-users] WCCP

2009-11-02 Thread Amos Jeffries
Ross Kovelman wrote: From: Amos Jeffries squ...@treenet.co.nz Date: Fri, 30 Oct 2009 14:08:23 +1300 Cc: squid-users@squid-cache.org squid-users@squid-cache.org Subject: Re: [squid-users] WCCP Ross Kovelman wrote: From: Amos Jeffries squ...@treenet.co.nz Date: Tue, 27 Oct 2009 12:17:12 +1300

[squid-users] msn messenger login issue

2009-11-02 Thread serfer
I have configured squid-2.6 and Dansguardian 2.10.0.3 on RHEL5 for caching and web filtering for my office internet users. i m facing problems in loging into msn messenger, i have put acls in squid and msn ips in dansguardian exceptionsite list but still not getting msn messenger login, my squid

[squid-users] Re: acl aclname myip

2009-11-02 Thread Mikio Kishi
Hi, Amos squid-3.0.STABLE18 is OK. but squid-3.1.0.14 ... Could you fix that ? Sincerely, -- Mikio Kishi On Sun, Oct 18, 2009 at 3:52 AM, Mikio Kishi mki...@104.net wrote: Hi, all I'd like to use acl aclname myip on squid-3.1.0.14 like the following.  acl testmyip myip 1.1.1.1/32 But,

AW: [squid-users] Problem with IPv6 config when destination is dual-stacked (but everything works when destination is IPv4 or IPv6 only)

2009-11-02 Thread Moser, Stefan (SIDB)
Amos, Henrik, http_access allow to_ipv6 !to_ipv6 did work, squid now seems to work as required and can access both single (IPv4 or IPv6) and dual-stack (IPv4 and IPv6) destinations. I´m going to play with the configuration within the next days and post a summary of my findings, this may be