Re: [squid-users] Squid+ADS - Multiple Group Based Authentication (ISA to SQUID Migration)

Any help is really appreciated!!! Try being case-sensitive in the group names. The ones you configured Squid with do not match the ones you detailed as example. Assuming both were correct they may be mis-matched because 'S' is not 's' etc. It was my mistake in the mail. all

[squid-users] delay_access line

Hi Is this a valid config line? delay_access 6 allow lan-students magic_words url_words Or do I need one for each acl? Best regards Dayo Adewunmi

Re: [squid-users] Squid+ADS - Multiple Group Based Authentication (ISA to SQUID Migration)

Truth Seeker wrote: Any help is really appreciated!!! Try being case-sensitive in the group names. The ones you configured Squid with do not match the ones you detailed as example. Assuming both were correct they may be mis-matched because 'S' is not 's' etc. It was my mistake in the

Re: [squid-users] delay_access line

Dayo Adewunmi wrote: Hi Is this a valid config line? delay_access 6 allow lan-students magic_words url_words Maybe. Are lan-students, magic_words and url_words the names of defined ACL? Or do I need one for each acl? You imply that they are, which makes the answer to the first question

[squid-users] download problem!

Hi, We installed squid in our gatway, anything is fine except that we have a problem with downloading. when we start a downlaod, something like below lines will appear in the browser! Downloaded 775131 bytes from 65950444 of data Downloaded 1450491 bytes from 65950444 of data Downloaded 2221991

Re: [squid-users] download problem!

hrhasani wrote: Hi, We installed squid in our gatway, anything is fine except that we have a problem with downloading. when we start a downlaod, something like below lines will appear in the browser! Downloaded 775131 bytes from 65950444 of data Downloaded 1450491 bytes from 65950444 of data

Re: [squid-users] Add a prefix/suffix if a domain is not resolved?

Hum, it seems there is a misunderstanding here. I do not want to always add www. in front of the domain name, I want it tried if it's not already there. Here is the scenario : I type in domain. This does not resolve to anything, so I want Squid to try with .com appended, that is try with

Re: [squid-users] Script Check

don't do that. As someone who did this 10+ years, I suggest you do this. * do some hackery to find out how your freeradius server stores the currently logged in users. It may be in a mysql database, it may be in a disk file, etc, etc * have your redirector query -that- directly, rather than

Re: [squid-users] ban brute force attacks in squid through ncsa

What is the best one to use? What runs the auth backend in squid in Linux? Would something like fail2ban work - I thought that only did SSH? What about mysql auth logging? -- From: Kinkie gkin...@gmail.com Sent: Saturday, August 08, 2009 2:56 PM

Re: [squid-users] Add a prefix/suffix if a domain is not resolved?

Olivier Sannier wrote: Hum, it seems there is a misunderstanding here. Yes. You seem to misunderstand how domain names work... I do not want to always add www. in front of the domain name, I want it tried if it's not already there. Here is the scenario : I type in domain. This does not

[squid-users] Howto run Internet Explorer without proxy setting in Internet Options

Hi, I setup Squid on my Ubuntu server and it does work fine from Internet Explorer on my Windows machine when I change my Internet Options to use the proxy server. But, I need it to be fully transparent. On Linux this can be done by forwarding traffic to the proxy with 'iptables', but how can I

Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

Andrej van der Zee wrote: Hi, I setup Squid on my Ubuntu server and it does work fine from Internet Explorer on my Windows machine when I change my Internet Options to use the proxy server. But, I need it to be fully transparent. On Linux this can be done by forwarding traffic to the proxy with

Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

Hi, Thanks for your email. http://wiki.squid-cache.org/SquidFaq/ConfiguringBrowsers Actually I was looking for a way NOT to configure my browser through a proxy, but somehow doing this on a lower level. The problem is that Internet Explorer sends an HTTP header Proxy-Connection: Keep Alive

Aw: Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

- Original Nachricht Von: Andrej van der Zee andrejvander...@gmail.com Actually I was looking for a way NOT to configure my browser through a proxy, You need a transparent proxy drived by iptables which most probably is available in your ubuntu. see:

Re: Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

Hi, Thanks for your email. You need a transparent proxy drived by iptables which most probably is available in your ubuntu. see: http://tldp.org/HOWTO/TransparentProxy.html The problem is that Squid is running on Ubuntu, but my browser must (unfortunately) be Internet Explorer on

Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

Andrej van der Zee wrote: Hi, Thanks for your email. http://wiki.squid-cache.org/SquidFaq/ConfiguringBrowsers Actually I was looking for a way NOT to configure my browser through a proxy, but somehow doing this on a lower level. The problem is that Internet Explorer sends an HTTP header

Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

Andrej van der Zee wrote: Hi, Thanks for your email. You need a transparent proxy drived by iptables which most probably is available in your ubuntu. see: http://tldp.org/HOWTO/TransparentProxy.html The problem is that Squid is running on Ubuntu, but my browser must (unfortunately) be

Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

Hi, Thanks for your email. So far in only two posts you have asked how to do three very different things. Maybe I should explain the problem I have then. I live in Japan but want to be able to see Dutch Football from the Internet. There is such a service but it only allows connections from

[squid-users] Problem with Squid + Tproxy and Rapdishare

hi, this is my first post here. I have a problem, but first I describe the scenario I have clients with public IP Mikrotik router redirecting traffic to SQUID Squid 3.1 with support for TPROXY Iptables 1.4.4 with support for TPROXY Debian Lenny / Kernel 2.6.28 with support for TPROXY well. The

Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

I mean, is there really nothing on Windows that you can instruct to forward all outgoing TCP/UDP traffic to port 80/443 to a port on a remote machine? I just need the remote proxy server to be accessed transparently, without using the browser setting. Is that really impossible on Windows? That is

Re: [squid-users] Script Check

Hello My server freeradius users currently stored in a file on disk, but it is best to do what I want, I can configure it to store it in mysql. What I need is help me, explain me, guide me how can I achieve my goal. Thanks Michel Adrian Chadd adr...@squid-cache.org ha escrito: don't

Re: [squid-users] External_acl_type and cache_peer

fre 2009-08-07 klockan 11:18 -0800 skrev Chris Robertson: ...which indicates to me that if the external_acl_type returns the keywords user and/or password, those will be substituted for the real credentials supplied by the client. I have to assume the original poster interpreted this

Re: [squid-users] Script Check

fre 2009-08-07 klockan 21:34 -0400 skrev mic...@casa.co.cu: Using squid 2.6 on my work, I have a group of users who connect by dial-up access to a NAS and a server freeradius to authenticate each time they log my users are assigned a dynamic IP address, making it impossible to create

Re: [squid-users] Add a prefix/suffix if a domain is not resolved?

lör 2009-08-08 klockan 15:54 +0200 skrev Kinkie: Many browsers already do this. With Squid you can use a redirector scriptan but you'll have to write your custom script, such a functionality is not bundled with squid. Indeed.. and didn't I write such a script some many years ago? Or was it

Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

Hi, On Sun, 09 Aug 2009, Andrej van der Zee wrote: I mean, is there really nothing on Windows that you can instruct to forward all outgoing TCP/UDP traffic to port 80/443 to a port on a remote machine? I just need the remote proxy server to be accessed transparently, without using the

Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

On Sun, 9 Aug 2009 22:26:27 +0900, Andrej van der Zee andrejvander...@gmail.com wrote: Hi, Thanks for your email. So far in only two posts you have asked how to do three very different things. Maybe I should explain the problem I have then. I live in Japan but want to be able to see

Re: [squid-users] Problem with Squid + Tproxy and Rapdishare

On Sun, 9 Aug 2009 10:58:23 -0300, Carlos Botejara cbotej...@gmail.com wrote: hi, this is my first post here. I have a problem, but first I describe the scenario I have clients with public IP Mikrotik router redirecting traffic to SQUID Squid 3.1 with support for TPROXY Iptables 1.4.4 with

Re: [squid-users] Howto run Internet Explorer without proxy setting in Internet Options

Hi, Thank you for your email. So far in only two posts you have asked how to do three very different things. Sorry, probably because of my misunderstanding of Squid proxy. Anyway, I configured squid-3.0.STABLE18 with ./configure --with-pthreads --enable-http-violations and added the

[squid-users] Blocking port 443 and let some secured site to be accessed (ie yahoo.com email)

Hi, Can anyone give me a hint as to block 443 and let some other secured site be excluded from the block? TIA __ Information from ESET NOD32 Antivirus, version of virus signature database 4295 (20090731) __ The message was checked by ESET NOD32 Antivirus.

Re: [squid-users] Blocking port 443 and let some secured site to be accessed (ie yahoo.com email)

On Mon, 10 Aug 2009 10:24:04 +0800, SSCR Internet Admin ad...@sscrmnl.edu.ph wrote: Hi, Can anyone give me a hint as to block 443 and let some other secured site be excluded from the block? Depends on what you want to block there... I assume that you actually mean you want to block HTTPS

RE: [squid-users] Blocking port 443 and let some secured site to be accessed (ie yahoo.com email)

Thanks Amos, hope this could partially stop ultrasurf... crossing fingers.. -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Monday, August 10, 2009 10:35 AM To: SSCR Internet Admin Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Blocking port 443

[squid-users] When will SSLBump be included on the production version?

Hello, I would like to ask as to when will SSLBump be included in the main stream of squid stable version? It seems that SSLBump can help use admin specially in schools where ultrasurf is used on some laboratories (on usb memory sticks) mostly on WiFi users. Regards __ Information

Re: [squid-users] refresh_pattern configuration

On Sun, 2009-08-09 at 14:19 +1200, Amos Jeffries wrote: Muhammad Sharfuddin wrote: Squid Cache: Version 2.5.STABLE12 and Squid Cache: Version 2.7.STABLE5 I am using following refresh_patterns and never encounter any problem. e.g once I visit a website, on next visit usually squid