Re: [squid-users] Forcing a local subnet to go direct?

2009-07-21 Thread Amos Jeffries
JOREar wrote: I'm rather new to Squid and have a configuration issue to force all requests to local subnets to go direct instead of redirecting through to a corporate proxy. Is it something that can be easily accomplished? Turn off whatever mechanism the local nets currently have that forces

Re: [squid-users] Cache-Control problems with Korean sites

2009-07-21 Thread Amos Jeffries
Mike Mitchell wrote: We're having problems accessing Korean Government sites like parcel.epost.go.kr and www.g2b.go.krhttp://www.g2b.go.kr from a squid cache that is physically in Seoul, Korea. I performed network captures and found that if the request included a 'Cache-Control' header the

Re: [squid-users] squid behind firewall with only port 8081 redirecting to squid

2009-07-21 Thread Amos Jeffries
frech wrote: Hi Amos, thanx again ;-) OK, just to make it really clear (sorry about my bad english!!!) i try to make a small illustration: workgroupconnected by workstation1) workstation2| |---network-HUB--eth1-{ Squid-Server

Re: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Amos Jeffries
Zeller, Jan wrote: Hi Amos, thank you very much for your patch ! Great ! Applied it like this : $ patch -p0 b9052.patch patching file src/client_side.cc Hunk #1 succeeded at (offset 81 lines). $ make make install - this time is successful but now I get : squid-3.1.0.11/sbin#

Re: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Silamael
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zeller, Jan wrote: Hi Amos, thank you very much for your patch ! Great ! Applied it like this : $ patch -p0 b9052.patch patching file src/client_side.cc Hunk #1 succeeded at (offset 81 lines). $ make make install - this time is

[squid-users] Changing HTTP BASIC 'Realm' to force user logout / reauthentication

2009-07-21 Thread David (Dave) Donnan
Hello squid users. Is anyone able to help me, please ? I mistakenly thought I was clever and could force users to logout of squid by changing the realm and immediately restarting the server. I even thought I could do this with a small cron job, say, 4 times a day. Background:

Re: [squid-users] squid behind firewall with only port 8081 redirecting to squid

2009-07-21 Thread frech
That's it - it works now. I think, I overdone it at the beginning ;-) Thank you again! Kai -- View this message in context: http://www.nabble.com/squid-behind-firewall-with-only-port-8081-redirecting-to-squid-tp24565455p24583947.html Sent from the Squid - Users mailing list archive at

AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Zeller, Jan
Hi Amos, I entered this : # gdb --args ./squid -NCXd9 and got this : GNU gdb 6.8-debian Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html This is free software: you are free to change and redistribute it. There is NO

Re: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Amos Jeffries
Zeller, Jan wrote: Hi Amos, I entered this : # gdb --args ./squid -NCXd9 and got this : GNU gdb 6.8-debian Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html This is free software: you are free to change and

AW: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Zeller, Jan
No problem Amos I consulted the man gdb ;) and I also tried run in the gdb console but there is still the No stack message ...? (gdb) run -NXCd9 . . . 2009/07/21 12:00:43.919| assertion failed: mem.cc:236: size == StrPoolsAttrs[i].obj_size Program exited with code 01. (gdb) bt No stack. (gdb)

Re: AW: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Amos Jeffries
Zeller, Jan wrote: No problem Amos I consulted the man gdb ;) and I also tried run in the gdb console but there is still the No stack message ...? (gdb) run -NXCd9 . . . 2009/07/21 12:00:43.919| assertion failed: mem.cc:236: size == StrPoolsAttrs[i].obj_size Program exited with code 01. (gdb)

Re: Fw: [squid-users] NTLM Auth and Java applets (Any update)

2009-07-21 Thread Gontzal
Hi Amos, I send the trace as requested, yesterday I just came back from holidays and I was out: CONNECT tp.seg-social.es:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729) Proxy-Connection: keep-alive Host:

[squid-users] howto block audio/video streaming

2009-07-21 Thread Muhammad Sharfuddin
Squid 2.7 STABLE 5 how can I block audio/video streaming via squid ? I have blocked a lot many streaming wesbites(like youtube) but I want to block all of them.. and I think the best method is to block all types of audio/video streaming rather then blocking websites(that are increasing

[squid-users] Ident and 3.1

2009-07-21 Thread twinturbo
SQ 3.1.0.7 We are running a new squid box to replace our 2.6 box. It all works fine except it does seem to be requesting IDENT, I have tried recompiling with enable-ident-lookups but this seems to have made no difference. I have tried acl_ident_aware_hosts src 10.106.88.0/21

Re: [squid-users] howto block audio/video streaming

2009-07-21 Thread Amos Jeffries
Muhammad Sharfuddin wrote: Squid 2.7 STABLE 5 how can I block audio/video streaming via squid ? I have blocked a lot many streaming wesbites(like youtube) but I want to block all of them.. and I think the best method is to block all types of audio/video streaming rather then blocking

Re: [squid-users] Changing HTTP BASIC 'Realm' to force user logout / reauthentication

2009-07-21 Thread Amos Jeffries
David (Dave) Donnan wrote: Hello squid users. Is anyone able to help me, please ? I mistakenly thought I was clever and could force users to logout of squid by changing the realm and immediately restarting the server. I even thought I could do this with a small cron job, say, 4 times a day.

Re: [squid-users] Ident and 3.1

2009-07-21 Thread Amos Jeffries
twintu...@f2s.com wrote: SQ 3.1.0.7 We are running a new squid box to replace our 2.6 box. It all works fine except it does seem to be requesting IDENT, I have tried recompiling with enable-ident-lookups but this seems to have made no difference. I have tried acl_ident_aware_hosts src

Re: [squid-users] howto block audio/video streaming

2009-07-21 Thread Muhammad Sharfuddin
On Tue, 2009-07-21 at 22:53 +1200, Amos Jeffries wrote: Muhammad Sharfuddin wrote: Squid 2.7 STABLE 5 how can I block audio/video streaming via squid ? I have blocked a lot many streaming wesbites(like youtube) but I want to block all of them.. and I think the best method is to

Re: [squid-users] howto block audio/video streaming

2009-07-21 Thread Amos Jeffries
Muhammad Sharfuddin wrote: On Tue, 2009-07-21 at 22:53 +1200, Amos Jeffries wrote: Muhammad Sharfuddin wrote: Squid 2.7 STABLE 5 how can I block audio/video streaming via squid ? I have blocked a lot many streaming wesbites(like youtube) but I want to block all of them.. and I think the best

[squid-users] Squid3 / NTLM / token id cache

2009-07-21 Thread Frederic THOMAS
Hello, I've installed 2 Squid 3.0.STABLE5 + samba-winbind on a mandriva 2008.1 with ntlm authentification . It works, clients are able to surf on the web using the Proxy and usernames are correctly logged. But we experienced some latency issues on websites. When i look into access.log file i

[squid-users] rep_mime_type is evaluated before content has been reached ?

2009-07-21 Thread Soporte Técnico @lemNet
rep_mime_type can´t be used for parent selection because this is evaluated before content has been reached ? This is true ? Jorge. - Original Message - From: Frederic THOMAS frederic.tho...@atosorigin.com To: squid-users@squid-cache.org Sent: Tuesday, July 21, 2009 9:18 AM Subject:

Re: [squid-users] howto block audio/video streaming

2009-07-21 Thread Erwann PENCREACH
Muhammad Sharfuddin a écrit : On Tue, 2009-07-21 at 22:53 +1200, Amos Jeffries wrote: Muhammad Sharfuddin wrote: Squid 2.7 STABLE 5 how can I block audio/video streaming via squid ? I have blocked a lot many streaming wesbites(like youtube) but I want to block all of them.. and I think the

Re: [squid-users] rep_mime_type is evaluated before content has been reached ?

2009-07-21 Thread Adrian Chadd
2009/7/21 Soporte Técnico @lemNet sopo...@nodoalem.com.ar: rep_mime_type can´t be used for parent selection because this is evaluated before content has been reached ? Correct. Adrian

Re: [squid-users] Forcing a local subnet to go direct?

2009-07-21 Thread JOREar
I was actually able to accomplish this much easier than I thought. I was just not getting the syntax correct. acl local-network dst 10.50.0.0/16, 10.45.0.0/16 always_direct allow local-network Thanks all for your help. -- View this message in context:

AW: AW: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Zeller, Jan
Hi Amos, I now explicitly enabled --enable-stacktraces Enable automatic call backtrace on fatal errors during the build and added CFLAGS=-g -ggdb in front of ./configure but the result seems to be the same... # ./squid -v Squid Cache: Version 3.1.0.11 configure options:

RE: [squid-users] Cache-Control problems with Korean sites

2009-07-21 Thread Mike Mitchell
I used telnet to connect to the problem web server and sent a minimal HTTP request. The web server returned a page, so I tried again adding a header from the trace one at a time until I did not get a response. I only tried one value of Cache-Control, max-age=0. I've tried accessing the

[squid-users] Are these acl / http_access correct ?

2009-07-21 Thread danifty
Hi all, I'm fairly new to squid, and i'm trying to configure it for filtering web access from multiple vlans, allowing such of them going to some destinations (and nowhere else), and others... going to others destinations, etc.. All other vlans are granted to go everywhere (I hope this is

Re: AW: AW: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Silamael
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zeller, Jan wrote: Hi Amos, I now explicitly enabled --enable-stacktraces Enable automatic call backtrace on fatal errors during the build and added CFLAGS=-g -ggdb in front of ./configure but the result seems to be the same... #

Re: AW: AW: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Marcus Kool
my 2 cents: someone needs to explain how to set a breakpoint because when the assertion fails, the program exits (see previous emails: Program exited with code 01) The question is where to set the breakpoint but probably Amos knows where to set it. Marcus Silamael wrote: -BEGIN PGP SIGNED

Re: AW: AW: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Kinkie
Er.. not really The failing line gets invoked very often, so setting a breakpoint there would be quite time-consuming. I really hope that there is some other way. (crossing fingers) Francesco On Tue, Jul 21, 2009 at 4:49 PM, Marcus Koolmarcus.k...@urlfilterdb.com wrote: my 2 cents: someone

[squid-users] RE: Squid on Windows, slow file transfers

2009-07-21 Thread Joseph Jamieson
I installed Squid 2.7.STABLE6 on a Linux virtual machine, which is running on the same physical machine that Squid on Windows is running. I copied the configuration file in, changed a couple paths to the Linux paths, and started up Squid. I then changed the NAT to the Virtual Machine, and

[squid-users] saved uid

2009-07-21 Thread Adrian Buciuman
I'm using squid 2.6 on Centos 5.3 I've seen that the squid process keeps a saved user id of root (real and effective uid are that of user squid). Is this normal? How can I change it, and make squid give up root privileges completely? Thanks, Adrian Buciuman

RE: [squid-users] next Squid 2.7 release?

2009-07-21 Thread Balaji Ganesan
Hi Amos and Guido, As per below email, 2.7 STABLE 7 was supposed to support Windows 7. Windows 7 is releasing on October 2009 and we would like to have our product support that as well. To do that, we need Squid to support Windows 7. Can you please tell me when Squid 2.7 STABLE 7 will be

[squid-users] Authentication with Squid 3.0 forwarding the authentication to external web content filter - Edirectory

2009-07-21 Thread Schuetz, Charles
We are currently using Squid 3.0 Stable 13. We are currently sending every= =3D one through the proxy/cache. We are implementing a user based web cont= ent =3D filtering solution (not a linux based solution) that authenticates = users ag=3D ainst edirectory. The current solution sends all

Re: [squid-users] Squid on Windows, slow file transfers

2009-07-21 Thread Serassio Guido
Hi, At 01.36 21/07/2009, Amos Jeffries wrote: However, file transfers through it are very slow. The connection is 20Mbit. When I go directly to the web file server via a direct NAT, I can download at full speed. 1.5MB/s is common from this method. However, when I go through the squid

Re: [squid-users] RE: Squid on Windows, slow file transfers

2009-07-21 Thread Serassio Guido
Hi, At 17.58 21/07/2009, Joseph Jamieson wrote: I installed Squid 2.7.STABLE6 on a Linux virtual machine, which is running on the same physical machine that Squid on Windows is running. I copied the configuration file in, changed a couple paths to the Linux paths, and started up Squid. I

Re: [squid-users] SQUID Home Proxy AD

2009-07-21 Thread Serassio Guido
Hi, At 15.38 20/07/2009, Jeremey Wise wrote: Current Setup: VMWare ESX hosting Windows 2003 Server setup_squid_2_5_stable_3_eng.exe installed and working. This is a very OLD, unsupported and unofficial build, please use the 2.7 STABLE6 official binaries. Regards Guido I have googled

RE: [squid-users] next Squid 2.7 release?

2009-07-21 Thread Serassio Guido
Hi, At 20.30 21/07/2009, Balaji Ganesan wrote: Hi Amos and Guido, As per below email, 2.7 STABLE 7 was supposed to support Windows 7. It WILL support Windows 7 and any other new Windows future versions. Windows 7 is releasing on October 2009 and we would like to have our product support

Re: [squid-users] The squid service on local computer started and then stopped on windows 2003

2009-07-21 Thread Serassio Guido
Hi, At 12.14 06/07/2009, giorgio.bo...@radicigroup.com wrote: Good morning to all I have to install Squid on windows 2003 R2 Sp2. When start the squid service fron control panel of windows receive this message : The Squid service on Local Computer Started and then stopped.Some service

Re: AW: AW: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Adrian Chadd
Just break on SIGABRT and SIGSEGV. The actual place in the code where things failed will be slightly further up the callstack than the break point but it -will- be triggered. Just remember to ignore SIGPIPE's or you'll have a strangely failing Squid. :) adrian 2009/7/21 Marcus Kool

Re: [squid-users] Authentication with Squid 3.0 forwarding the authentication to external web content filter - Edirectory

2009-07-21 Thread Amos Jeffries
On Tue, 21 Jul 2009 14:41:38 -0400, Schuetz, Charles cschu...@pltechs.com wrote: We are currently using Squid 3.0 Stable 13. We are currently sending every= =3D one through the proxy/cache. We are implementing a user based web cont= ent =3D filtering solution (not a linux based solution) that

Re: [squid-users] saved uid

2009-07-21 Thread Amos Jeffries
On Tue, 21 Jul 2009 20:06:48 +0300, Adrian Buciuman adibuciu...@gmail.com wrote: I'm using squid 2.6 on Centos 5.3 I've seen that the squid process keeps a saved user id of root (real and effective uid are that of user squid). Is this normal? How can I change it, and make squid give up root

Re: [squid-users] Squid3 / NTLM / token id cache

2009-07-21 Thread Amos Jeffries
On Tue, 21 Jul 2009 09:47:48 -0300, Soporte Técnico @lemNet sopo...@nodoalem.com.ar wrote: rep_mime_type can´t be used for parent selection because this is evaluated before content has been reached ? This is true ? No. It can't be evaluated because selecting a source is based on the

Re: [squid-users] Forcing a local subnet to go direct?

2009-07-21 Thread Amos Jeffries
On Tue, 21 Jul 2009 06:26:04 -0700 (PDT), JOREar jor...@msn.com wrote: I was actually able to accomplish this much easier than I thought. I was just not getting the syntax correct. acl local-network dst 10.50.0.0/16, 10.45.0.0/16 NP: no comma in the squid.conf syntax for dst.

RE: [squid-users] Cache-Control problems with Korean sites

2009-07-21 Thread Amos Jeffries
On Tue, 21 Jul 2009 10:09:32 -0400, Mike Mitchell mike.mitch...@sas.com wrote: I used telnet to connect to the problem web server and sent a minimal HTTP request. The web server returned a page, so I tried again adding a header from the trace one at a time until I did not get a response. I

Re: [squid-users] Forcing a local subnet to go direct?

2009-07-21 Thread JOREar
Amos Jeffries-2 wrote: On Tue, 21 Jul 2009 06:26:04 -0700 (PDT), JOREar jor...@msn.com wrote: I was actually able to accomplish this much easier than I thought. I was just not getting the syntax correct. acl local-network dst 10.50.0.0/16, 10.45.0.0/16 NP: no comma in the squid.conf

Re: [squid-users] Forcing a local subnet to go direct?

2009-07-21 Thread Amos Jeffries
On Tue, 21 Jul 2009 21:34:57 -0700 (PDT), JOREar jor...@msn.com wrote: Amos Jeffries-2 wrote: On Tue, 21 Jul 2009 06:26:04 -0700 (PDT), JOREar jor...@msn.com wrote: I was actually able to accomplish this much easier than I thought. I was just not getting the syntax correct. acl

Re: [squid-users] Are these acl / http_access correct ?

2009-07-21 Thread Amos Jeffries
On Tue, 21 Jul 2009 07:16:36 -0700 (PDT), danifty dani...@gmail.com wrote: Hi all, I'm fairly new to squid, and i'm trying to configure it for filtering web access from multiple vlans, allowing such of them going to some destinations (and nowhere else), and others... going to others