[squid-users] Negotiate/NTLM Authentication a safer option then Negotiate/Kerberos??

2010-04-06 Thread GIGO .
Hi All, In our environment currently we are using ISA server with userbased authentication. we are using windows 2003 Active Directory and almost all of the users are using Windows based OS. We want to seemlessly migrate our users to Squid. I have not yet reached to any conlusion despite lot

RE: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-06 Thread GIGO .
Dear Markus, That cleared/explained a lot to me and given me direction for developing a better understanding of the whole concept. Thanks a lot. regards, Bilal > To: squid-users@squid-cache.org > From: hua...@moeller.plus.com > Date: Tue

Re: [squid-users] Authentication helpers not shut down

2010-04-06 Thread Henrik Nordström
tis 2010-04-06 klockan 13:49 -0700 skrev David Parks: > I noticed that running "squid -k reconfigure" starts a new authentication > helper, but does not shut down the old one. It does. > Is this normal behavior? Do I just need to monitor for the closing of the > input stream and shut down on th

Re: [squid-users] redirect not working

2010-04-06 Thread Henrik Nordström
tor 2010-03-18 klockan 12:28 +0530 skrev jayesh chavan: > Apache is uses as webserver and squid as normal proxy.Squid uses > parent proxy 192.168.7.253:3128 and my squid address is > 192.168.7.236:8080 I would guess you need acl to_localhost dst 127.0.0.1 always_direct allow to_localhost tellin

Re: [squid-users] page stalling w/ squid

2010-04-06 Thread leongmzlist
Probably this a bug w/ Virtualbox's NAT setup. The stalling was only happening to sites on the same subnet as the browser. mike On 4/6/2010 1:49 AM, Amos Jeffries wrote: Mike Leong wrote: I have this weird problem where if I go though squid, a page would stall until it hits the read timeout

Re: [squid-users] Yet another IMAP support request

2010-04-06 Thread Henrik Nordström
tis 2010-04-06 klockan 14:38 +0530 skrev Sabyasachi Ruj: > Because of the same reason why FileZilla, Skype, or many such software > need it. We are writing a software which connects to mailbox using > IMAP. And many users have reported that they can connect to Internet > only using a proxy. Most of

Re: [squid-users] Squid pops up password dialog when remote site is not reachable

2010-04-06 Thread Henrik Nordström
mån 2010-04-05 klockan 23:28 -0700 skrev Ayhan Molla: > Hi, > I only modified the helper line as follows: > auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp > > and added the following two statements, the rest of the file is unchanged. > > # INSERT YOUR OWN RULE(S) H

Re: [squid-users] tproxy+squid 2.7stable9 + bridge

2010-04-06 Thread Amos Jeffries
sameer khan wrote: hey people; i am trying to build squid-2.7stable9 tproxy with a bridge setup. The kernel i m using is 2.6.30.10 custom compile with tproxy support ( not patch as i am guessing the tproxy support is there ). squid 2.7stable9 keeps giving me error: WARNING: Cannot find TP

Re: [squid-users] squid performance - requests per second

2010-04-06 Thread Amos Jeffries
饶琛琳 wrote: I have seem the page(http://wiki.squid-cache.org/KnowledgeBase/Benchmarks), and want to ask a question about the RPS. My LVS tell me that the ActiveConn number of one squid is more than 200,000;the netstat command tell me the established connection number is 6;but the RPS from s

[squid-users] Testing squid performance

2010-04-06 Thread b1
Hello alltogether Squid seems to be running smoothly at our school now. We have also made the necassary adjustments to our Aktive Directory, so that every user will use the proxy. SSO is also working. At the moment there are holidays and the request rate is therefore very slim. Next week holdidays

[squid-users] Authentication helpers not shut down

2010-04-06 Thread David Parks
I noticed that running "squid -k reconfigure" starts a new authentication helper, but does not shut down the old one. Is this normal behavior? Do I just need to monitor for the closing of the input stream and shut down on that cue? Just wanna make sure I'm on track. Dave p.s. if there are any

Re: [squid-users] E-mails through Squid3.0 problems

2010-04-06 Thread Jakob Curdes
SMAIL-GMAIL schrieb: Hi there, Thanks for your reply I don't know how much you read of my post but maybe I need to explain a little bit more Yes, I did read this post. The problem is that squid is simply incapable of doing what you are telling us - unless you configure it badly in a lot of w

Re: [squid-users] E-mails through Squid3.0 problems

2010-04-06 Thread SMAIL-GMAIL
Hi there, Thanks for your reply I don't know how much you read of my post but maybe I need to explain a little bit more Picture this right? My websites were working, and I mean everything was working and that includes e-mails Because I used to send e-mail almost everyday, I don't have to manua

[squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-06 Thread Markus Moeller
Hi Bilal, It is a bit more complicated. it is not a pure Kerberos authentication but a Negotiate/Kerberos authentication. If you have a Windows client and the proxy send WWW-Proxy-Authorize: Negotiate the Windows client will try first to get a Kerberos ticket and if that succeeds sends a Ne

Re: [squid-users] E-mails through Squid3.0 problems

2010-04-06 Thread Jakob Curdes
a...@gmail schrieb: Hello All, I am having a serious problem with my E-mail programmes, none of my e-mails are going out If I send e-mail from my website, they are not delivered as they used to Confirmation, Subscription emails etc.. are not delivered Is there anything that needs doing in ord

Re: [squid-users] E-mails through Squid3.0 problems

2010-04-06 Thread a...@gmail
Hi Jorge, I am not actually using a proxy for smtp, but my websites do send emails on a regular basis on a subscriptions, email confirmation and so on Now if for example a user registers he won't get an email to allow him/her to activate his/her account I have not set a proxy server for a m

[squid-users] reffresh_pattern

2010-04-06 Thread Ariel
Hola .lista alguien sabe donde puedo bajar o conseguir alguna lista de refresh_... ya definida para agregar a mi squid ?

Re: [squid-users] E-mails through Squid3.0 problems

2010-04-06 Thread Jorge Armando Medina
a...@gmail wrote: > Hello All, > > I am having a serious problem with my E-mail programmes, none of my > e-mails are going out > If I send e-mail from my website, they are not delivered as they used to > Confirmation, Subscription emails etc.. are not delivered > Why use a HTTP proxy for SMTP?, why

[squid-users] tproxy+squid 2.7stable9 + bridge

2010-04-06 Thread sameer khan
hey people; i am trying to build squid-2.7stable9 tproxy with a bridge setup. The kernel i m using is 2.6.30.10 custom compile with tproxy support ( not patch as i am guessing the tproxy support is there ). squid 2.7stable9 keeps giving me error: WARNING: Cannot find TPROXY headers, you nee

[squid-users] E-mails through Squid3.0 problems

2010-04-06 Thread a...@gmail
Hello All, I am having a serious problem with my E-mail programmes, none of my e-mails are going out If I send e-mail from my website, they are not delivered as they used to Confirmation, Subscription emails etc.. are not delivered Is there anything that needs doing in order to allow those ema

Re: [squid-users] Including LAN IP in email header

2010-04-06 Thread Matus UHLAR - fantomas
On 25.03.10 09:05, Dayo Adewunmi wrote: > How do I set squid to always allow the user's LAN IP to be included > in outgoing email headers? Sometimes the LAN IP is there, sometimes it > isn't. what e-mail headers? Squid is a HTTP proxy and does not know anything about e-mail. > And when it isn't

Re: [squid-users] Yet another IMAP support request

2010-04-06 Thread Sabyasachi Ruj
Because of the same reason why FileZilla, Skype, or many such software need it. We are writing a software which connects to mailbox using IMAP. And many users have reported that they can connect to Internet only using a proxy. Most of them are using "squid". I wanted to connect to a IMAP server us

Re: [squid-users] squid 2.7 against 3.1.1

2010-04-06 Thread Amos Jeffries
Henrik Nordstrom wrote: tis 2010-03-30 klockan 09:07 -0300 skrev Leonardo Carneiro - Veltrac: I keep hearding that squid 3.0 is no speed demon, but the new squid 3.1.1 is said to be much faster. Have anyone benchmarked the 3.1.1 against the 2.7? Not sure there has been any recent benchmarks,

Re: [squid-users] page stalling w/ squid

2010-04-06 Thread Amos Jeffries
Mike Leong wrote: I have this weird problem where if I go though squid, a page would stall until it hits the read timeout limit. This only happens on certain webservers. eg: read_timeout set to 120 seconds. 1. request page on browser 2. page load stalls 3. after 120 seconds, squid sends a fin,

Re: [squid-users] Yet another IMAP support request

2010-04-06 Thread Matus UHLAR - fantomas
On 05.04.10 10:03, Sabyasachi Ruj wrote: > Well, I have implemented the client which can connect to IMAP via > squid. You just need to use "CONNECT" method of HTTP protocol. > If you see FileZilla, it can also connect to SFTP via squid. can you at least answer my question, why do you "need" it? do

Re: [squid-users] Fwd: Squid 2.7 with NTLM auth

2010-04-06 Thread Amos Jeffries
Milan wrote: We are Squid ported for windows and are experiencing issue with one particular service. GotoMeeting, GotoAssist, GotoWebinar(Citrix) We are unable to get users connected unless we add the individual IP Address of the servers individually: 216.115.208.0 / 20 216.219.112.0 / 20 66.151

[squid-users] Creating a kerberos Service Principal.

2010-04-06 Thread GIGO .
Dear All, Please guide me in regard to SSO setup with Active Directory(No winbind/Samba). I have the following questions in this regard. 1. Creating a Kerberos service principal and keytab file that is used by the Squid what is the effective method? Difference between using Ktpass vs Ms

Re: [squid-users] UDP errors after upgrade to 3.1.1

2010-04-06 Thread Amos Jeffries
donovan jeffrey j wrote: Greetings compiled 3.1.1 on 2 OSX machines, both running 10.5.8 one is transparent the and the other is straight up. build went fine. no errors. fired up squid ( squid -d1x ) clients connected but as soon as a request for a site came through I got a ton of these on b