[squid-users] ACLs Implementation help

2010-11-11 Thread Edmonds Namasenda
Much appreciated for the previous help. Some more clarification on the in-line requests below. On Wed, Nov 10, 2010 at 2:38 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 09/11/10 20:25, Edmonds Namasenda wrote: Dear all. Using openSuse 11.2 and Squid 3.0 Stable 18 Besides commenting out

Re: [squid-users] ACLs Implementation help

2010-11-11 Thread Edmonds Namasenda
Yeah, I guess I am getting there. Please look in-line... How do I enforce password authentication ONLY ONCE for users to What do you mean by ONLY ONCE? A user can be authenticated or not, there is no multiple about it. No continuous authentication required with every URL accessed or

Re: [squid-users] ACLs Implementation help

2010-11-11 Thread Edmonds Namasenda
Thank you all. On Thu, Nov 11, 2010 at 4:19 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 12/11/10 01:22, Edmonds Namasenda wrote: No continuous authentication required with every URL accessed or re-directions once the first log-in is accepted. Understood. That is not possible. HTTP

Re: [squid-users] ACLs Implementation help

2010-11-11 Thread Edmonds Namasenda
Amos, thank you for the responses always. On Thu, Nov 11, 2010 at 6:56 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 12/11/10 04:08, Edmonds Namasenda wrote: I believe I am a better squid administrator than when I joined. Throw me a bone! Switch users with browsers and you have

[squid-users] Default Home Page

2010-12-01 Thread Edmonds Namasenda
Hello Members. Can squid in transparent mode force all local (proxy LAN) http requests to a certain default page? Possibly a locally made web application or any other page! How can this be done? -- Thank you and kind regards, I.P.N Edmonds ICT Practitioner Consultant Cel:    +256 70 227 3374  

[squid-users] Dedicate Bandwidth to IP Address

2011-02-22 Thread Edmonds Namasenda
Dear all. I would like to have a video conference call on my LAN using a particular I.P Address. This is going to be for a limited time and I want a clear connection. We are already running Squid in transparent proxy mode with some ACLs limiting HTTP access, downloads, streaming to a particular

Re: [squid-users] Dedicate Bandwidth to IP Address

2011-02-23 Thread Edmonds Namasenda
, Edmonds Namasenda wrote: Dear all. I would like to have a video conference call on my LAN using a particular I.P Address. This is going to be for a limited time and I want a clear connection. We are already running Squid in transparent proxy mode with some ACLs limiting HTTP access, downloads

[squid-users] Explicit Allow / Deny

2011-04-26 Thread Edmonds Namasenda
Hello there. Is there a possibility in Squid 3.0 on openSuSe to explicitly allow or deny ACLs? ### Example acl admins src 10.0.0.245-10.0.0.255 acl updates dstdomain -i /path/to_file_with/updates_domain/urls http_access allow admins http_access allow updates reply_body_max_size 10 MB !admins

Re: [squid-users] Need advise about Squid statistics.

2011-10-31 Thread Edmonds Namasenda
Siur, Look for Squid Analyzer on freshmeat.net Easy to install and customize. It will do the magic for you. # Edmonds Namasenda. On Sun, Oct 30, 2011 at 2:56 AM, siur siur@gmail.com wrote: Hello! I've got 500 archived squid log files. Now I need to analyze all of them and make

[squid-users] Squid URL / Network Free Access

2011-11-24 Thread Edmonds Namasenda
Dear Friends, I am using Squid 3.1 in transparent mode. How can I stop Squid from scanning and logging traffic to particular URLs or networks? Something like users can connect to the URLs or networks freely without Squid's interception. There is an official video access portal which seems to be

Re: [squid-users] Make Squid in interception mode completely

2011-12-05 Thread Edmonds Namasenda
Hai, Seems your network set-up is what might be ruining your connection expectations or the default gateway needs a rule (possibly using a firewall) to direct all HTTP traffic to the squid box rather than to the internet. Otherwise, think of the set-up below (with the Squid box the same as the

Re: [squid-users] Make Squid in interception mode completely

2011-12-06 Thread Edmonds Namasenda
LAN to check out by curl -I http://something.com/ it's returned the header fields that has Via: 1.1 (squid 3.2). I have no idea why. At this moment, I still don't find more documentation from IPfilter for deeper discovery. ~ Neddie On Tue, Dec 6, 2011 at 12:03 PM, Edmonds Namasenda namase

[squid-users] Connectivity Choke With Squid 3.1

2012-02-09 Thread Edmonds Namasenda
Hello Group, I am using Squid 3.1 in transparent mode with basic settings enforced by a redirect rule in Shoreline Firewall. I have two LANs; 172.x.x.x for LAN servers not controlled by the proxy, and 10.x.x.x for LAN users. The squid server has 2 NICs to create the users LAN routing. My main

Re: [squid-users] whitelisted IP problem

2012-03-19 Thread Edmonds Namasenda
Vijay, Just a quick look has shown me you did not specify your network and there are a few typo errors. Re-adjust, test, and fill us in some more. I.P.N Edmonds Systems | Networks | ICTs UgM: +256 71 227 3374 | TzM: +255 68 422 1561 # 22249, Kampala Uganda. -Original Message- From:

Re: [squid-users] whitelisted IP problem

2012-03-19 Thread Edmonds Namasenda
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0 refresh_pattern .               0       20%     4320 visible_hostname reactmedia.com debug_options ALL,1 33,2 28,9 tcp_outgoing_address 122.166.1.184 Thanks Regards Vijay -Original Message- From: Edmonds Namasenda [mailto:namase

Re: [squid-users] Allowing downloads from certain sites

2012-06-29 Thread Edmonds Namasenda
Shastri, try the below Assume... 1. Preventing Downloads File (nodowns.txt) has the following \.msi$ \.exe$ \.zip$ \.etc$ 2. Trusted Sites File (goodsites.txt) has the following *.*microsoft*.com* *.*windows*.com* *.*etc*.com*.com* 3. Accompanying ACLs for files above acl nodowns urlpath_regex

Re: [squid-users] Allowing downloads from certain sites

2012-06-29 Thread Edmonds Namasenda
Shastri, try the below Assume... 1. Preventing Downloads File (nodowns.txt) has the following \.msi$ \.exe$ \.zip$ \.etc$ The above is regex 2. Trusted Sites File (goodsites.txt) has the following *.*microsoft*.com* *.*windows*.com* *.*etc*.com*.com* WTF? Does regex even accept

Re: [squid-users] Allowing downloads from certain sites

2012-06-29 Thread Edmonds Namasenda
domains. Any ideas? Thanks. On Fri, Jun 29, 2012 at 5:32 PM, Edmonds Namasenda namase...@gmail.com wrote: Shastri, try the below Assume... 1. Preventing Downloads File (nodowns.txt) has the following \.msi$ \.exe$ \.zip$ \.etc$ The above is regex 2. Trusted Sites File (goodsites.txt

[squid-users] DSTDOMAIN Wildcards and Multiple http_port

2012-07-04 Thread Edmonds Namasenda
Hello Team, Please bare with me if this was resolved before, but I am asking out of curiosity and need to test it soon What is the difference and implications of the following as dstdomain entries? # Assuming namasenda.com is a registered domain, and the outcome is controlling any domain with

Re: [squid-users] DSTDOMAIN Wildcards and Multiple http_port

2012-07-04 Thread Edmonds Namasenda
# Assuming namasenda.com is a registered domain, and the outcome is controlling any domain with the word namasenda like hatenamasenda.com or .net a) .\namasenda\. b) .namasenda. c) .namasenda.com d) .\namasenda\.com Is a) b) correct, anyway? No they are not. Neither is (d). (c) is

Re: [squid-users] Time based access

2012-07-20 Thread Edmonds Namasenda
Try the below, acl urlsFB dstdomain -r .facebook.com .fbcdn.net # Sample Facebook domains acl timedFB time SMTWHFA 12:30-13:29 # Accessible time for Facebook # Place the below above all access rules http_access deny urlsFB !timedFB # Rule to deny

Re: [squid-users] Deny URLs with Transparent proxy

2012-08-31 Thread Edmonds Namasenda
acl sites_bloqueados url_regex -i /etc/squid/acls/sites_bloqueados.txt acl sites_bloqueados dstdomain -i /etc/squid/acls/sites_bloqueados.txt http_access deny sites_bloqueados http_access allow lan in the sites sites_bloqueados.txt there is the url

Re: [squid-users] Time spent on website?

2013-05-09 Thread Edmonds Namasenda
Matt, Take time and install / used Darold's Squid Analyzer. It might give you close or more than you are looking for. So far, I am not complaining and he is often available for assistance. On Mon, May 6, 2013 at 5:55 PM, matthew vassallo mat...@hotmail.com wrote: Hi, I am currently using

Re: [squid-users] Squid monitering Tool

2013-07-30 Thread Edmonds Namasenda
Squid Analyzer on http://squidanalyzer.darold.net did me good thanks to Darold. On Tue, Jul 30, 2013 at 2:24 PM, javed_samtiah javed.iq...@northbaysolutions.net wrote: Hi, Is there any squid monitering tool. *1. I want to monitor Web trafic that which Ip or PC is accessing to which Website.

[squid-users] Squidblacklists Now Commercial ONLY?!

2013-08-01 Thread Edmonds Namasenda
Hello Nichols (Squid Blacklists Team) Fellow Squid Users, Please enlighten me as I seem to be confused. A couple of weeks back I realized accumulative 401.shtml files in my Squid Blacklists update script folder only to check the website and I must subscribe (and pay). When did this take effect

Re: [squid-users] Re: squidblacklist.org

2013-09-02 Thread Edmonds Namasenda
Ricardo, Did you ask a question and answered it yourself?! Anyway, the ideas of the SquidBlacklists are good I used it initially. Quite good and developing. Yes some URLs had issues as well as contradictions when reloading squid reading the related ACLs. However, I stopped testing them when

[squid-users] Access Groups Problem

2013-10-16 Thread Edmonds Namasenda
Hello All, We use one openSuSe 11.4 server to manage access of five networks four of which are connected through VPN. Initial configuration used in-built Squid (3.0 Stable 18) in transparent mode. We recently ran an upgrade and got Squid 3.2 on the same oS 11.4 We realized some admin IP

[squid-users] Access Groups Problem

2013-10-16 Thread Edmonds Namasenda
Hello All, We use one openSuSe 11.4 server to manage access of five networks four of which are connected through VPN. Initial configuration used in-built Squid (3.0 Stable 18) in transparent mode. We recently ran an upgrade and got Squid 3.1.23 on the same oS 11.4 We realized some admin IP

[squid-users] Config Analysis for VPN Access

2013-10-17 Thread Edmonds Namasenda
Hi Squid Users / Admins, Below is my squid.conf of 3.1.23 running on openSuSe 11.4 32-bit using transparent mode and Shoreline Firewall. The server controls five networks, four of them through VPNs. Problems... - Failure to access Internet on VPNs unless proxy settings are added - Failure to

Re: [squid-users] You don't have permission to access /squidreport/ on this server.

2013-12-03 Thread Edmonds Namasenda
Check the ownership and or mode of the squidreport directory / folder. Else, you are missing some entries for that directory in your httpd.conf # Edmonds

Re: Re: [squid-users] Issues with Opensuse12.3 with squid

2014-03-26 Thread Edmonds Namasenda
to find the latest version available Good luck. # Edmonds On Wed, Mar 26, 2014 at 2:43 PM, Edmonds Namasenda namase...@gmail.com wrote: Back up your squid config file or any other associated files with custom info before stopping and uninstalling the old squid. Someone suggested copying

[squid-users] Duration Access Limits

2014-04-03 Thread Edmonds Namasenda
Hello All, Is there a possibility for Squid to drop connections of particular IP Addresses after a specific period of time, and only enable those addresses after a specified period of time? NO authentication required. Just DHCP Squid For example ..a device connects for 30 minutes then that IP

Re: [squid-users] Duration Access Limits

2014-04-03 Thread Edmonds Namasenda
http_access allow workdays who_access -Original Message- From: Edmonds Namasenda [mailto:namase...@gmail.com] Sent: Thursday, April 03, 2014 9:08 AM To: squid-users Subject: [squid-users] Duration Access Limits Hello All, Is there a possibility for Squid to drop connections

Re: [squid-users] Re: Duration Access Limits

2014-04-04 Thread Edmonds Namasenda
Okay! Unless I am getting it wrong ...are you telling me to find (or propose) a solution to my problem? Else, what is required of me for the helper? Must it be external? Such tend to be slow. I want to offer free WiFi internet to people at an eatery but it should disable their connection after

Re: [squid-users] Re: Duration Access Limits

2014-04-05 Thread Edmonds Namasenda
Thanks Meyer. While I always want to get my hands dirty, I have not yet written any squid helpers. Point me somewhere for starters. And please note that because the WiFi will be a free service, I do not want to incur more costs on equipment (Mikrotik) unless it is the only alternative. Any

[squid-users] Time-Based Download Restrictions

2015-11-30 Thread Edmonds Namasenda
Greetings. I want to deny access to certain downloads (in str-med.txt) during "WorkHrs" This is failing miserably as this is not achieved. Please look through my files (squid.conf and str-med.txt) below for pointers to rectify this. Thanks in advance ### Start squid.conf ### acl office-net src