Re: [squid-users] SQUID 3.1 + sslBump https interception and decryption

2010-04-22 Thread Franz Angeli
From: Franz Angeli [mailto:franz.ang...@gmail.com] I configured one debian box with squid 3.1 (compiling it with ssl support) enabling sslBump feature with a self signed certificate, obviously browser and applications warn about the certificate but all seems to work. Is there a way to use

Re: [squid-users] Help about iptable squid

2010-04-22 Thread kavin
Dear All: iptables squid -v Squid Cache: Version 3.1.1 configure options: '--prefix=/var/squid' '--sysconfdir=/etc' '--enable-arp-acl' '--enable-linux-netfilter' '--enable-pthreads' '--enable-err-language=Simplify_Chinese' '--enable-storeio=ufs'

Re: [squid-users] SQUID3: Access denied connecting to one site

2010-04-22 Thread Alexandr Dmitriev
So, any chance to bypass it? 22.04.2010 8:29, Amos Jeffries пишет: Alexandr Dmitriev wrote: Ok, the headers are broken, but there is a way to make squid ignore them? About ssl - they also have another domain www.airbaltic.com which is not accessible either. Part of the point was that they

Re: [squid-users] Help about iptable squid

2010-04-22 Thread Amos Jeffries
kavin wrote: Dear All: iptables squid -v Squid Cache: Version 3.1.1 configure options: snip '--enable-err-language=Simplify_Chinese' configure option --enable-err-language no longer exists. '--enable-default-err-language=Simplify_Chinese' Language name Simplify_Chinese no longer

Re: [squid-users] how to set up expires header in squid?

2010-04-22 Thread 老邪
hi, all that problem is resolved. it's due to there was a setting for header_access , that discard the expires header. thanks! On Thu, Apr 22, 2010 at 12:55 PM, 老邪 swansu...@gmail.com wrote: will try, thank you!!! will update here On Thu, Apr 22, 2010 at 12:36 PM, Jeff Pang

Re: [squid-users] Problems setting up Kerberos authentication

2010-04-22 Thread Fabian Hugelshofer
Hi all, Fabian Hugelshofer wrote: Markus Moeller wrote: Continuation needed means that the GSSAPI exchange has not finished and the server needs more data from the client. Can you see in wireshark if the token length is the one squid_kerb_auth says it is squid_kerb_auth: Got 'YRYI...' from

[squid-users] proxy autoconfiguration

2010-04-22 Thread Andrea Gallazzi
Hello all, my scenario: The proxy address was setted by group policy. Windows 2003 , Windows 2008 r2 , Windows 7 , Windows XP Problem: Some notebooks should be able to surfing internet from out of office but the client that was setted with proxy address then the user can not access Question:

[squid-users] Getting Source-IP

2010-04-22 Thread Andreas Müller
Hello, I'm using squid as accel proxy. Is there a posibility to inject the source IP into the http header send to webserver? I know that there is HTTP_X_FORWARDED_FOR but it seems that the content of this parameter is not clear if this parameter is already in the request header (e.g. the request

Re: [squid-users] proxy autoconfiguration

2010-04-22 Thread Jeff Pang
On Thu, Apr 22, 2010 at 7:55 PM, Andrea Gallazzi andrea.galla...@live.com wrote: Question: Can I configure proxy address by DHCP, automatically? Is there some other method? What you wanted is transparnet proxy, try find the config samples on: http://wiki.squid-cache.org/ConfigExamples --

Re: [squid-users] Getting Source-IP

2010-04-22 Thread Jeff Pang
On Thu, Apr 22, 2010 at 8:19 PM, Andreas Müller amuel...@gmx.de wrote: Hello, I'm using squid as accel proxy. Is there a posibility to inject the source IP into the http header send to webserver? I know that there is HTTP_X_FORWARDED_FOR but it seems that the content of this parameter is

[squid-users] Pam_auth = Form based login how to .

2010-04-22 Thread Chetan Muneshwar - BetterLabs
Hello , Is it possible pam_auth form based login ? any option for it within squid extension like external_acls type ? -- ChetanM

[squid-users] Is there a way to get transparent proxy to work with Squid 2.7 stable 8 on Windows 2003 Server?

2010-04-22 Thread Milan
We have a squid 2.7 stable 8 running on Windows 2003 server on a VM. Is it possible to get transparent proxy working on this version or is still impossible for windows?

Re: [squid-users] proxy autoconfiguration

2010-04-22 Thread Andrea Gallazzi
The users must be authenticated. :( -- From: Jeff Pang pa...@arcor.de Sent: Thursday, April 22, 2010 2:26 PM To: Squid Users squid-users@squid-cache.org Subject: Re: [squid-users] proxy autoconfiguration On Thu, Apr 22, 2010 at 7:55 PM, Andrea

Re: [squid-users] proxy autoconfiguration

2010-04-22 Thread Luis Daniel Lucio Quiroz
Le jeudi 22 avril 2010 08:06:53, Andrea Gallazzi a écrit : The users must be authenticated. :( -- From: Jeff Pang pa...@arcor.de Sent: Thursday, April 22, 2010 2:26 PM To: Squid Users squid-users@squid-cache.org Subject: Re: [squid-users]

Re: [squid-users] Getting Source-IP

2010-04-22 Thread Jeff Pang
On Thu, Apr 22, 2010 at 8:57 PM, Andreas Müller amuel...@gmx.de wrote: So I thought that the is an option to inject custom headers into the request. But if this is not possible than I have to do the best out of X_FORWARDED_FOR. From my experience, never much believe X_FORWARDED_FOR. --

[squid-users] wedged (newbie question)

2010-04-22 Thread Glenn English
Squid started taking a very long time to supply web pages. Switching Firefox to 'no proxy' worked, so I restarted squid. All better now (proxy back on). Do I need to set up a cron job to restart squid every few weeks? -- Glenn English g...@slsware.com

Re: [squid-users] wedged (newbie question)

2010-04-22 Thread Jeff Pang
On Thu, Apr 22, 2010 at 10:55 PM, Glenn English g...@slsware.com wrote: Squid started taking a very long time to supply web pages. Switching Firefox to 'no proxy' worked, so I restarted squid. All better now (proxy back on). Do I need to set up a cron job to restart squid every few weeks? I

[squid-users] Squid Quicktime RTPS 401 unauthorized error

2010-04-22 Thread Johnson, S
When I try to access a quicktime video through my squid proxy I get the 401 unauthorized error. In my searches I see that 4 years ago people were referencing that 2.5 didn't support RTSP. Now that we're up to 3.x, is RTSP supported? If not, is there a work around to play these videos? Thanks

Re: [squid-users] Squid Quicktime RTPS 401 unauthorized error

2010-04-22 Thread Nick Cairncross
In times gone buy I created an acl for the quicktime browser and disabled authentication for the quicktime user-agent as it would completely break on my macs. N On 22/04/2010 16:02, Johnson, S sjohn...@edina.k12.mn.us wrote: When I try to access a quicktime video through my squid proxy I

RE: [squid-users] Squid Quicktime RTPS 401 unauthorized error

2010-04-22 Thread Johnson, S
I didn't know I could create an ACL for a browser service. Do you by chance have an example I could reference? (sorry about the dup message; forgot to hit reply all...) -Original Message- From: Nick Cairncross [mailto:nick.cairncr...@condenast.co.uk] Sent: Thursday, April 22, 2010

Re: [squid-users] Squid 3.1.0.14 uses considerably more memory than 2.7.x or 3.0

2010-04-22 Thread Ralf Hildebrandt
* Amos Jeffries squ...@treenet.co.nz: Wow. I think you have hit some big memory problem then. I do see a lot of wasted memory usage, but still only a few dozen MB. If you are able to help us track this down it would be a great help. For starters there is the cachemgr memory report of

Re: [squid-users] Squid Quicktime RTPS 401 unauthorized error

2010-04-22 Thread Nick Cairncross
Turn on user-agent logging on squid: useragent_log /pathtoyoursquidlogs/useragent.log squid Tail -f /pathtoyoursquidlogs/useragent.log This will show you your user-agents hitting squid in realtime Acl to create (I had a file I put user-agents for Apple in) - you can use whichever method you

Re: [squid-users] squid mysql authentication

2010-04-22 Thread Luis Daniel Lucio Quiroz
Le mardi 2 mars 2010 11:13:27, Henrik Nordstrom a écrit : tis 2010-03-02 klockan 16:36 +0100 skrev Taco Walstra: auth_param basic program /usr/sbin/squid_db_auth --user bla --password bla --plaintext --persist with additional lines as described on the website, but I only get access denied

Re: [squid-users] Can't get my Squid proxy to use my c:\windows\system32\drivers\etc\hosts file.

2010-04-22 Thread Henrik Nordström
lör 2010-04-10 klockan 15:22 -0700 skrev Phillip Pi: However, I still could not get it to work in my activated 64-bit W7 HP's IE8 client PC. I even tried public internet Web sites like: 157.166.255.19 msnbc.com So client's IE8 should take me to CNN's Web site instead of www.msnbc.com,

[squid-users] Single Forest Multiple Domains kebreos setup (squid_kerb_ldap)

2010-04-22 Thread GIGO .
Dear Markus/All, Please guide me on the matter discussed below: Single Forest Multiple Domain setup A / \ / \ BC Problem: Single FOrest Multiple domains where as Root A is empty

[squid-users] Joomla DB authentication support hits Squid! :)

2010-04-22 Thread Luis Daniel Lucio Quiroz
HI all As a requirement of one client, he wants to use joomla user database to let squid authenticate. I did patch squid_db_auth that Henrik has written in order to support joomla hash conditions. I did add one usefull option to script --joomla in order to activate joomla hashing. Other

[squid-users] Re: Joomla DB authentication support hits Squid! :)

2010-04-22 Thread Luis Daniel Lucio Quiroz
Le jeudi 22 avril 2010 15:49:55, Luis Daniel Lucio Quiroz a écrit : HI all As a requirement of one client, he wants to use joomla user database to let squid authenticate. I did patch squid_db_auth that Henrik has written in order to support joomla hash conditions. I did add one usefull

Re: [squid-users] Getting Source-IP

2010-04-22 Thread Amos Jeffries
Jeff Pang wrote: On Thu, Apr 22, 2010 at 8:19 PM, Andreas Müller amuel...@gmx.de wrote: Hello, I'm using squid as accel proxy. Is there a posibility to inject the source IP into the http header send to webserver? I know that there is HTTP_X_FORWARDED_FOR but it seems that the content of this

Re: [squid-users] Is there a way to get transparent proxy to work with Squid 2.7 stable 8 on Windows 2003 Server?

2010-04-22 Thread Amos Jeffries
Milan wrote: We have a squid 2.7 stable 8 running on Windows 2003 server on a VM. Is it possible to get transparent proxy working on this version or is still impossible for windows? Not easy for Windows. I read something about a proprietary NAT library or something being available at great

Re: [squid-users] Pam_auth = Form based login how to .

2010-04-22 Thread Amos Jeffries
Chetan Muneshwar - BetterLabs wrote: Hello , Is it possible pam_auth form based login ? any option for it within squid extension like external_acls type ? Possible yes. You will have to code it though. Carefully decide which of the HTTP header and connection details you trust enough to

Re: [squid-users] squid mysql authentication

2010-04-22 Thread Amos Jeffries
Luis Daniel Lucio Quiroz wrote: Le mardi 2 mars 2010 11:13:27, Henrik Nordstrom a écrit : tis 2010-03-02 klockan 16:36 +0100 skrev Taco Walstra: auth_param basic program /usr/sbin/squid_db_auth --user bla --password bla --plaintext --persist with additional lines as described on the website,

Re: [squid-users] Re: Joomla DB authentication support hits Squid! :)

2010-04-22 Thread Amos Jeffries
Luis Daniel Lucio Quiroz wrote: Le jeudi 22 avril 2010 15:49:55, Luis Daniel Lucio Quiroz a écrit : HI all As a requirement of one client, he wants to use joomla user database to let squid authenticate. I did patch squid_db_auth that Henrik has written in order to support joomla hash

RE: [squid-users] Slow tranfert speed over ADSL internet connection

2010-04-22 Thread Alex Braunegg
For your Cisco 837 DSL config, try some of the following: interface Dialer0 ip mtu 1492 If you are using a bridging interface for the 4 ports on the back into a VLAN, also try the following interface BVI1 ip tcp adjust-mss 1452 Whilst I have ADSL2+ here, I get nowhere near 2+ speeds thanks

Re: [squid-users] Re: Joomla DB authentication support hits Squid! :)

2010-04-22 Thread Luis Daniel Lucio Quiroz
Le jeudi 22 avril 2010 20:09:57, Amos Jeffries a écrit : Luis Daniel Lucio Quiroz wrote: Le jeudi 22 avril 2010 15:49:55, Luis Daniel Lucio Quiroz a écrit : HI all As a requirement of one client, he wants to use joomla user database to let squid authenticate. I did patch

Re: [squid-users] Re: Joomla DB authentication support hits Squid! :)

2010-04-22 Thread Luis Daniel Lucio Quiroz
Le jeudi 22 avril 2010 20:09:57, Amos Jeffries a écrit : Luis Daniel Lucio Quiroz wrote: Le jeudi 22 avril 2010 15:49:55, Luis Daniel Lucio Quiroz a écrit : HI all As a requirement of one client, he wants to use joomla user database to let squid authenticate. I did patch

Re: [squid-users] Re: Joomla DB authentication support hits Squid! :)

2010-04-22 Thread Amos Jeffries
Luis Daniel Lucio Quiroz wrote: Le jeudi 22 avril 2010 20:09:57, Amos Jeffries a écrit : Luis Daniel Lucio Quiroz wrote: Le jeudi 22 avril 2010 15:49:55, Luis Daniel Lucio Quiroz a écrit : HI all As a requirement of one client, he wants to use joomla user database to let squid authenticate.