[squid-users] MS ISA firewall Client substitute.

2013-03-05 Thread Muhammad Yousuf Khan
actually i am running squid in proxy mode and i want a client software for XP or win7 users, like provided in MS ISA which tunnel all the traffic from client computer to proxy so that i do not have to define proxy in every software. i know there is a option in all the browser auto detect proxy

Re: [squid-users] upload data report

2012-12-17 Thread Muhammad Yousuf Khan
[cut] probably? probably, because i am not confident enough with my understanding with the output. [cut] The '' means data sent to client. The '' means data received from client. The format omitting these characters is the total sum of both. the confusion part is the actual value that

Re: [squid-users] upload data report

2012-12-15 Thread Muhammad Yousuf Khan
[cut] Yes. This is because every transaction in HTTP has data flowing in both directions. %st logs the size of transaction for request. now i am confused. as per squid document http://www.squid-cache.org/Versions/v2/2.7/cfgman/logformat.html default log formate of squid log is logformat

[squid-users] upload data report

2012-12-14 Thread Muhammad Yousuf Khan
i want to check how much data has been uploaded by users like we have the ability to see download reports via Sarg reporting tool. i know we can not decrypt HTTPS traffic, i dont even want to see the file names and size. but we want to see how much data has been uploaded by who and where with only

Re: [squid-users] upload data report

2012-12-14 Thread Muhammad Yousuf Khan
On Fri, Dec 14, 2012 at 2:22 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 14/12/2012 9:21 p.m., Muhammad Yousuf Khan wrote: i want to check how much data has been uploaded by users like we have the ability to see download reports via Sarg reporting tool. i know we can not decrypt HTTPS

Re: [squid-users] Squid Proxy in VMware

2012-08-30 Thread Muhammad Yousuf Khan
PortFW is not needed when you using bridge network. first Ping and verify the connectivity b/w your squid VM and users. and if it works then change the proxy setting in browser and check if your squid is responding because , squid explicitly denies everything so if your squid is working then it

Re: [squid-users] Re: squid with pdns, bandwidth control issue

2012-07-03 Thread Muhammad Yousuf Khan
On Mon, Jul 2, 2012 at 6:43 PM, Ed W li...@wildgooses.com wrote: On 02/07/2012 14:12, Muhammad Yousuf Khan wrote: after limiting my bandwidth using delaypool, things seems OK. BTW i thought that Squid would be doing it automatically. All the research on TCP up until very recently has been

Re: [squid-users] Re: squid with pdns, bandwidth control issue

2012-07-02 Thread Muhammad Yousuf Khan
On Fri, Jun 29, 2012 at 9:41 PM, Ed W li...@wildgooses.com wrote: On 29/06/2012 14:12, Muhammad Yousuf Khan wrote: i have made some test and here is some detail and results ok i am using two machine 1, Gateway IPcop (linux) 2. Debian lenny (squid) i am using download manager to download

Re: [squid-users] Re: squid with pdns, bandwidth control issue

2012-07-02 Thread Muhammad Yousuf Khan
after limiting my bandwidth using delaypool, things seems OK. BTW i thought that Squid would be doing it automatically.

[squid-users] squid with pdns, bandwidth control issue

2012-06-29 Thread Muhammad Yousuf Khan
i am using squid 2.7 stable 9 with pdns as Caching DNS. i have 4 Mbps internet link. when ever any client start download any big file my squid gives the full threshold to the downloading session and on other computers people see The following error was encountered while trying to retrieve the

[squid-users] Re: squid with pdns, bandwidth control issue

2012-06-29 Thread Muhammad Yousuf Khan
): icmp_req=7390 ttl=54 time=71.2 ms 64 bytes from del01s05-in-f7.1e100.net (74.125.236.7): icmp_req=7391 ttl=54 time=69.2 ms 64 bytes from del01s05-in-f7.1e100.net (74.125.236.7): icmp_req=7392 ttl=54 time=69.3 ms On Fri, Jun 29, 2012 at 3:05 PM, Muhammad Yousuf Khan sir...@gmail.com wrote: i am using

Re: [squid-users] Re: squid with pdns, bandwidth control issue

2012-06-29 Thread Muhammad Yousuf Khan
On Fri, Jun 29, 2012 at 3:34 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 29/06/2012 10:09 p.m., Muhammad Yousuf Khan wrote: see the ping delay of my proxy server. see first few lines which is before download when i start download a huge file it when to 3000 which is too much

Re: [squid-users] Re: squid with pdns, bandwidth control issue

2012-06-29 Thread Muhammad Yousuf Khan
On Fri, Jun 29, 2012 at 4:54 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 29/06/2012 11:02 p.m., Muhammad Yousuf Khan wrote: On Fri, Jun 29, 2012 at 3:34 PM, Amos Jeffries wrote: On 29/06/2012 10:09 p.m., Muhammad Yousuf Khan wrote: see the ping delay of my proxy server. see first few

Re: [squid-users] Re: squid with pdns, bandwidth control issue

2012-06-29 Thread Muhammad Yousuf Khan
On Fri, Jun 29, 2012 at 4:54 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 29/06/2012 11:02 p.m., Muhammad Yousuf Khan wrote: On Fri, Jun 29, 2012 at 3:34 PM, Amos Jeffries wrote: On 29/06/2012 10:09 p.m., Muhammad Yousuf Khan wrote: see the ping delay of my proxy server. see first few

Re: [squid-users] Re: squid with pdns, bandwidth control issue

2012-06-29 Thread Muhammad Yousuf Khan
think this shows that issue is with squid box and i don't know weather i have to tweak the squid or TCP buffer or anything i am lost please help. Thanks, On Fri, Jun 29, 2012 at 5:19 PM, Muhammad Yousuf Khan sir...@gmail.com wrote: On Fri, Jun 29, 2012 at 4:54 PM, Amos Jeffries squ

[squid-users] cache windows update

2012-06-20 Thread Muhammad Yousuf Khan
i would like to cache all windows update data i am not using WU server i just want to cache every update downloaded by windows 7 or XP and should be cached on my specified location and next time query for the same should be fulfilled with the existing cached file rather then downloading things

Re: [squid-users] cache windows update

2012-06-20 Thread Muhammad Yousuf Khan
-cache.org/squidfaq/windowsUpdate So far its been working great and also solved the problem with proxy auth. --Original Message-- From: Muhammad Yousuf Khan To: squid-users Subject: [squid-users] cache windows update Sent: Jun 20, 2012 12:04 i would like to cache all windows update

Re: [squid-users] cache windows update

2012-06-20 Thread Muhammad Yousuf Khan
To: squid-users@squid-cache.org Subject: Re: [squid-users] cache windows update Sent: Jun 20, 2012 12:57  here you go.  http://wiki.squid-cache.org/SquidFaq/WindowsUpdate ct, On 6/20/2012 1:53 PM, Muhammad Yousuf Khan wrote: when i click on the mentioned like it give me this This page

Re: [squid-users] error in opening google.com in firefox

2012-06-11 Thread Muhammad Yousuf Khan
any iptables rules for squid to work? yes i am using linux. do you mean that i should redirect 3128 traffice to port 80 via iptables and squid will be listening on port 80. is this what you mean? Thanks Eliezer On 10/06/2012 16:52, Muhammad Yousuf Khan wrote: sorry i know very basic squid

Re: [squid-users] error in opening google.com in firefox

2012-06-11 Thread Muhammad Yousuf Khan
On Mon, Jun 11, 2012 at 11:32 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 11/06/2012 6:11 p.m., Muhammad Yousuf Khan wrote: On Sun, Jun 10, 2012 at 10:54 PM, Eliezer Croitoruelie...@ngtech.co.il  wrote: proxy is uses as a server to client that is aware of it. this is what called

Re: [squid-users] error in opening google.com in firefox

2012-06-10 Thread Muhammad Yousuf Khan
other clients its working fine. furthermore Squid was working fine since 6 months this error has occurs very recently. On Sat, Jun 9, 2012 at 10:42 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 8/06/2012 3:32 a.m., Muhammad Yousuf Khan wrote: i am receiving this error via firfox but working

[squid-users] error in opening google.com in firefox

2012-06-07 Thread Muhammad Yousuf Khan
i am receiving this error via firfox but working good in explorer. this is what i am getting in access.log. TCP_DENIED/400 2022 GET NONE:// - NONE/- text/html and this is the exact error that i am getting on firefox. ERROR The requested URL could not be retrieved Invalid Request error was

Re: [squid-users] how to check squid slowness?

2012-05-25 Thread Muhammad Yousuf Khan
i am not very senior in linux but recently i deployed squid and replace the ISA Server 2006. i was facing the same thing which kinda resolve the issue for me for now is. 1, DNS caching (powerdns) 2, reduce destination block list. previously i was usting 2 MB On Fri, May 25, 2012 at 9:03 AM,

Re: [squid-users] how to check squid slowness?

2012-05-25 Thread Muhammad Yousuf Khan
at 2:58 PM, Muhammad Yousuf Khan sir...@gmail.com wrote: i am not very senior in linux but recently i deployed squid and replace the ISA Server 2006. i was facing the same thing which kinda resolve the issue for me for now is. 1, DNS caching (powerdns) 2, reduce destination block list

Re: [squid-users] need suggestion for bulk users

2012-05-07 Thread Muhammad Yousuf Khan
On Sun, May 6, 2012 at 3:59 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 6/05/2012 9:24 a.m., Muhammad Yousuf Khan wrote: thanks for sharing your experience but what about ISPs who are handling thousands of queries . aren't they using squid? AFAIK my ISP is usring squid and its a biggest

[squid-users] need suggestion for bulk users

2012-05-05 Thread Muhammad Yousuf Khan
right now i am handling 35 users with a squid having 512 MB ram and it is on virtual server KVM linux, things are working fine. but for my career growth i am looking for a good path to continue with squid. like for example if i move to another org. and they have like around 300 or 500 users . how

Re: [squid-users] need suggestion for bulk users

2012-05-05 Thread Muhammad Yousuf Khan
at 1:33 AM, E.S. Rosenberg esr+sq...@g.jct.ac.il wrote: 2012/5/5 Muhammad Yousuf Khan sir...@gmail.com: right now i am handling 35 users with a squid having 512 MB ram and it is on virtual server KVM linux, things are working fine. but for my career growth i am looking for a good path

Re: [squid-users] slow internet browsing.

2012-04-30 Thread Muhammad Yousuf Khan
Thanks Eliezer Croitoru this has been a helpful stuff . ill let you know if found any difficulty in deplying procedure. Thanks On Mon, Apr 30, 2012 at 3:27 AM, Eliezer Croitoru elie...@ngtech.co.il wrote: On 29/04/2012 08:49, Muhammad Yousuf Khan wrote: IT seems that things are doing good

Re: [squid-users] slow internet browsing.

2012-04-28 Thread Muhammad Yousuf Khan
the status. Thanks you all for your kind help. Thanks On Fri, Apr 27, 2012 at 1:09 PM, Muhammad Yousuf Khan sir...@gmail.com wrote: i think the delay was due to the 10mb of domain list. it seems that things are back to track now. however for further restriction ill look into other solutions

Re: [squid-users] slow internet browsing.

2012-04-27 Thread Muhammad Yousuf Khan
i think the delay was due to the 10mb of domain list. it seems that things are back to track now. however for further restriction ill look into other solutions as suggested in this thread. Thanks alot On Wed, Apr 25, 2012 at 9:13 PM, Muhammad Yousuf Khan sir...@gmail.com wrote: Thanks , i learn

Re: [squid-users] slow internet browsing.

2012-04-25 Thread Muhammad Yousuf Khan
:14, Muhammad Yousuf Khan wrote: ok i trim down config file  to this as you suggested of blocking whitelist to local net.. let see how things work tommorw. ill update. but block list is like 10MB big do you think it could be the problem.as every query has to be matched with 10 MB database

Re: [squid-users] slow internet browsing.

2012-04-24 Thread Muhammad Yousuf Khan
ok i just disabled all the rules and it works for me now ill test which rule is making a problem and let you know also. Thanks On Mon, Apr 23, 2012 at 11:20 PM, Muhammad Yousuf Khan sir...@gmail.com wrote: here is the log for bbc.co.uk . first and last msg of log so you can see the time delay

Re: [squid-users] slow internet browsing.

2012-04-24 Thread Muhammad Yousuf Khan
to only lan. your http_access rules are allowing anyone to use the proxy for the whitelist. Regards, Eliezer On 24/04/2012 09:06, Muhammad Yousuf Khan wrote: ok i just disabled all the rules and it works for me now ill test which rule is making a problem and let you know also. Thanks

Re: [squid-users] slow internet browsing.

2012-04-24 Thread Muhammad Yousuf Khan
be implemented using ufdbGuard, a free URL rewriter for Squid. ufdbGuard is better maintained than squidGuard and has more features. Marcus On 04/24/2012 12:34 PM, Eliezer Croitoru wrote: On 24/04/2012 18:14, Muhammad Yousuf Khan wrote: ok i trim down config file to this as you suggested

[squid-users] slow internet browsing.

2012-04-23 Thread Muhammad Yousuf Khan
well i have been experiencing slow Internet browsing. not very slow but comparatively slower then IPCOP firewall. i can not understand how come i diagnose the issue. i mean. i increase the RAM , i checked the DNS every thing is fine but my browser stuck at connecting ones it start download it do

Re: [squid-users] slow internet browsing.

2012-04-23 Thread Muhammad Yousuf Khan
/squidGuard #url_rewrite_children 5 On Mon, Apr 23, 2012 at 8:42 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: On 23/04/2012 18:38, Muhammad Yousuf Khan wrote: well i have been experiencing slow Internet browsing. not very slow but comparatively slower then IPCOP firewall. i can

Re: [squid-users] slow internet browsing.

2012-04-23 Thread Muhammad Yousuf Khan
/wwhomepage-3.5/1.0.41/img/broadcast-sprite.png - DIRECT/80.239.148.70 image/png On Mon, Apr 23, 2012 at 11:12 PM, Muhammad Yousuf Khan sir...@gmail.com wrote: Here you go with my squid.conf acl all src all acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst

Re: [squid-users] Re: Need some help about delay_parameters directive

2012-03-24 Thread Muhammad Yousuf Khan
i am using squid 2.7 stable On Fri, Mar 23, 2012 at 6:35 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 23/03/2012 9:41 a.m., Muhammad Yousuf Khan wrote: ok i did every thing byes bits i achieve the gole but value as per my calculation is wrong. can you please tell me which value do you

Re: [squid-users] Re: Need some help about delay_parameters directive

2012-03-22 Thread Muhammad Yousuf Khan
work well but still logic is not clear in my mind Thanks. On Thu, Mar 22, 2012 at 8:24 PM, Carlos Manuel Trepeu Pupo charlie@gmail.com wrote: The delay_parameter it's in bytes not bits. Try and tell if work !! On Wed, Mar 21, 2012 at 2:11 AM, Muhammad Yousuf Khan sir...@gmail.com wrote

[squid-users] Re: Need some help about delay_parameters directive

2012-03-21 Thread Muhammad Yousuf Khan
squid website it is clearly stating that delay parameters accepts bytes as a value. please help Thanks. On Tue, Mar 20, 2012 at 6:58 PM, Muhammad Yousuf Khan sir...@gmail.com wrote: here is my acl and i want to limit download after every 10 MB of download. now i am a bit confuse now. why

[squid-users] Need some help about delay_parameters directive

2012-03-20 Thread Muhammad Yousuf Khan
here is my acl and i want to limit download after every 10 MB of download. now i am a bit confuse now. why this value giving me expected result. my_ip src 10.51.100.240 delay_pools 1 delay_class 1 1 delay_parameters 1 1/2000 delay_access 1 allow my_ip according to my learning and

Re: [squid-users] browser restriction and skype

2012-03-16 Thread Muhammad Yousuf Khan
WOW Skype Gone. that is what i was looking for THANKS a million On Thu, Mar 15, 2012 at 6:10 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 16/03/2012 1:18 a.m., Muhammad Yousuf Khan wrote: 1, i want my users, only to use explorer, firefox and safari except that all user agents

[squid-users] Squid box with NAT for ping command

2012-03-16 Thread Muhammad Yousuf Khan
XP clientinside eth0squid---eth1(outside)---internet above is my network flow. i successfully deployed a basic squid with few rules in proxy mode only (no transparent at all) but now for troubleshooting purposes i would be needing to ping my ISP gateway from my

[squid-users] browser restriction and skype

2012-03-15 Thread Muhammad Yousuf Khan
1, i want my users, only to use explorer, firefox and safari except that all user agents will be blocked. 2, 2nd problem is i can not restrict skype. listed ACL is what i saw on internet while i was trying to find a solution for stopping the skype-access but it didn't work in my case i can still

Re: [squid-users] Re: squid with squidguard issue

2012-03-06 Thread Muhammad Yousuf Khan
Thanks all, i tried them both solution that you guys have suggested and i found the blocklist file name suggestion more easier then squidguard i am still unable to configure squidguard. :( by the way i already got the basic understanding about squid and i was already thinking of the same

[squid-users] Which squid rule blocking the traffic

2012-03-06 Thread Muhammad Yousuf Khan
i made few rules in my squid file and i want to check which rule is currently blocking the traffic. like ISA server has the monitoring option, in which if packet denies then ISA shows which rule is denying the traffic and same in allow condition. Thanks,

[squid-users] squid with squidguard issue

2012-03-05 Thread Muhammad Yousuf Khan
can some one plz help. i followed http://wiki.debian.org/DebianEdu/HowTo/SquidGuard and using lenny squid 2.7 and squidguard 1.2.0 i write the below line at the end of squid.conf redirect_program /usr/bin/squidGuard i denied ads in squidGuard.conf and addme.com is a domain which i am sure is in

[squid-users] Re: squid with squidguard issue

2012-03-05 Thread Muhammad Yousuf Khan
url_rewrite_program /usr/sbin/squidGuard url_rewrite_children 5 this also doesn't work On Mon, Mar 5, 2012 at 6:40 PM, Muhammad Yousuf Khan sir...@gmail.com wrote: can some one plz help. i followed http://wiki.debian.org/DebianEdu/HowTo/SquidGuard and using lenny squid 2.7 and squidguard

Re: [squid-users] https facebook dstdomain acl doesn't work

2012-02-29 Thread Muhammad Yousuf Khan
Thanks, it means i have to shift it back to proxy mode. since i am still using it on testing environment it wouldn't be an hurdle for me. On Wed, Feb 29, 2012 at 9:26 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 29/02/2012 9:27 a.m., Muhammad Yousuf Khan wrote: Thanks, if i use squid

Re: [squid-users] https facebook dstdomain acl doesn't work

2012-02-29 Thread Muhammad Yousuf Khan
Thanks. that will help. On Wed, Feb 29, 2012 at 5:47 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 1/03/2012 12:42 a.m., Muhammad Yousuf Khan wrote: Thanks, it means i have to shift it back to proxy mode. since i am still using it on testing environment it wouldn't be an hurdle for me

Re: [squid-users] https facebook dstdomain acl doesn't work

2012-02-28 Thread Muhammad Yousuf Khan
Thanks, if i use squid as non transparent proxy would it work for HTTPS for just blocking a domain. Thanks. On Tue, Feb 28, 2012 at 3:13 PM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 28.02.12 01:24, Muhammad Yousuf Khan wrote: Thank you very much for you help i also thought

[squid-users] https facebook dstdomain acl doesn't work

2012-02-27 Thread Muhammad Yousuf Khan
acl testdomain dstdomain .facebook.com http_access deny testdomain above is my acl how ever http works fine it blocked now when i go to https facebook it just allow it. how can i stop this. kindly help Thank you. MYK

Re: [squid-users] https facebook dstdomain acl doesn't work

2012-02-27 Thread Muhammad Yousuf Khan
for the defined networks. Squid does not filter https traffic directly like the http. I think that you are using transparent proxy in your LAN. Naira Kaieski Linux Professional Institute - LPI 101 Em 27/2/2012 12:28, Muhammad Yousuf Khan escreveu: acl testdomain dstdomain  .facebook.com

[squid-users] please help with port 110 and 25 on squid box

2012-02-21 Thread Muhammad Yousuf Khan
i am using debian lenny with squid ver 2.7.stable3 i have a squid box and also want to allow NAT port 25 and 110  for email send receive , along with the squid service. Please help me. Thanks

Re: [squid-users] Email , VOIP , RDP with SQUID

2012-02-17 Thread Muhammad Yousuf Khan
experience people if they can help me. Thanks On Fri, Feb 17, 2012 at 3:00 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 17/02/2012 12:45 a.m., Muhammad Yousuf Khan wrote: hello all, I need to enable Email  , Voice over ip , Microsof Remote Desktop and other software to communicate

Re: [squid-users] Email , VOIP , RDP with SQUID

2012-02-17 Thread Muhammad Yousuf Khan
, Feb 17, 2012 at 2:39 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 17/02/2012 9:32 p.m., Muhammad Yousuf Khan wrote: By consolidated squid firewalls did you mean security systems which include both firewall software and Squid as sub-sections of the overall system? yes exactly this is what

Re: [squid-users] Squid block list

2012-02-16 Thread Muhammad Yousuf Khan
front end for it too (squidguard manager) or a webmin module but I've never used them in anger. Jim On 15 February 2012 13:51, Muhammad Yousuf Khan sir...@gmail.com wrote: Hello All, I need a suggestion as i am new to squid-world and i don't wanna waist my time on RD rather for the perfect

[squid-users] Email , VOIP , RDP with SQUID

2012-02-16 Thread Muhammad Yousuf Khan
hello all, I need to enable Email , Voice over ip , Microsof Remote Desktop and other software to communicate with target machine. i know squid can not do that. but we can achieve that via iptables. i have found few solutions on internet but didn't cope up with our need. just want to share my

[squid-users] Squid block list

2012-02-15 Thread Muhammad Yousuf Khan
Hello All, I need a suggestion as i am new to squid-world and i don't wanna waist my time on RD rather for the perfect solution which is scalable and reliable. so as every Squid administrator want to restrict the unwanted website access during working hours so i am here to ask the same thing

[squid-users] Squid Report

2012-02-07 Thread Muhammad Yousuf Khan
Hello everyone, i am very new to Squid world.our company has finally decided to move from ISA to more stable proxy and OS , like squid and Linux.finally i manage to build up a basic squid and start to create report via Webalizer script. however i can create reports and can have very brief and

Re: [squid-users] Squid Report

2012-02-07 Thread Muhammad Yousuf Khan
/ regards On 07.02.2012 16:45, Muhammad Yousuf Khan wrote: Hello everyone, i am very new to Squid world.our company has finally decided to move from ISA to more stable proxy and OS , like squid and Linux.finally i manage to build up a basic squid and start to create report via Webalizer script