I'm migrating an old squid installation that use "httpd_accel_host" directive to archive the acceleration configuration. What I have is lot internals web servers published through an squid to the rest of the world, some of then http and others https. I try using https_port but when restart squid I get the following message: parseConfigFile: squid.conf:1202 unrecognized: 'https_port'
[Code]....
I have tried many times for squid proxy cache server on10.10.But invain.
View 3 Replies View RelatedI am an avid ubuntu desktop user, however I started working at a company that runs their firewall, mail and proxy server on centos 5.2, all was working well so never needed to tamper with it, however we (myself and the administrator) randomly decided to install squid3 for its features, the install went well, however squid3 didnt run as we wanted it to, after looking into it reading some material on the net, we realised how stupid we were to not to test it -sigh- so weve purged and removed it and reverted back to 2.6, now however we even have issues with that too, we install squid 2.6 and start the service and we get errors that stop, and starting fail, however the status of squid shows its running. How to get it back to working order?
View 3 Replies View RelatedI have installed ubuntu in my system .Squid is by default in it. I want to compile delay_pools feature in squid.Normally we download source code file in tar.gz format ,uncompressed itand then install it. If we want to compile any thing we can also do it.Here in my case there is already squid installed during installation process.
View 1 Replies View RelatedHow do i exclude some URL from the proxy caching at squid.conf as i dont wont to cache ....., mediacafe etc, I know i can block site by create a file like bad-sites.acl, then adding it to squid.conf but that blocks it.
View 2 Replies View RelatedI've been having a hard time googling and trying to get ALL network connection to be redirected to squid proxy. I couldn't find a proper configuration for ufw or iptables. The ideas are:
1. redirection rule should NOT depend on a specific network inteface, but should work with any connection type, ex.: ppp0 or eth0... 2. firewall rules can be for firehol, iptables, or ufw (the same as iptables, just tell me where to place them). Preferably ufw or gufw. 3. should not interfere on cups web interface and lighttpd server.
BTW: it's not a ubuntu server install
I am trying to set up a SQUID server on my Red Hat Linux 7.3. to act as a cache server.
The machine has 2 network interface:
eth0 172.30.254.4/23
eth1 172.3.254.65/23
Default gateway is 172.30.254.19/23
The hostname is "amelie".
[Code].....
I've been all around the net and can't find a "simple" answer how to block our LAN users from downloading torrents. Is it really that difficult?
Here's our setup:
1. The Server's Configs:
2. sudo gedit /etc/squid/squid.conf
3. sudo gedit /etc/rc.local (to start Firewall rules on bootup)
4. Server NOT a DHCP Server
5. No other iptables rules are configured, just the above ones.
Before in a 1 NIC setup, I blocked Workstations MAC addresses in the Router + Squid Proxy Server (Not Transparent), it worked, but some Online Java Apps didn't work and users can't send/receive email so I abandoned the method.
Now, I installed transparent Squid Proxy with 2 NIC cards, it works, but workstations can still download torrents! I know Squid doesn't block ports, right? So the answer must lie in Iptables Firewall? I basically use Squid just to deny access to Facebook, Friendster, or other "unproductive sites".
Quote:
How to block torrent downloading by using a Firewall? Or is there another "simple" way?
I've heard that it's better just to allow regular ports (80, 22, 465, etc...) then block all the rest, this way, you can prevent unnecessary ports.
I'm not an Iptables/Firewall expert so can you pls. explain it a bit more detailed if that's the case.
I'm also aware of just telling our users NOT to download torrents, but I just want to prohibit it entirely.
I know I will be the most "uncool" employee in our office.
I would like to configure Squid and DansGuardian that way, that it's a Proxy with Authentication via Website. That means: A new Notebook gets about DHCP the Network-Information like IP-Adress etc.. When he now tries to open a Internet connection it should check if he's authenticated and if not he should get (if this try is from a browser) a login screen in http. It should also not be possible to have internetconnection without being logged in. The clients are Windoze, Mac and Linux. My question now. What programms/deamons are there for doing this authentication. Would you decide for another Programm instead of Squid?
View 2 Replies View RelatedI am using Squid Proxy Server alongwith Dansguardian, dhcp3 and ClamAV on my local network. Everything is working fine except for .flv files like [URL]. The problem is that Squid wants to download the whole .flv file first to its cache and then serve it to the client.
It has an advantage that the whole video loads at once on the client's browser but that is not what our users want.
What they want is that these files load on the fly as they do on a normal internet connection. How do I configure squid to serve .flv files on the fly to the client PCs?
Ubuntu Server 8.04. I have 2 servers in the same rack, on the same subnet, using the same DNS servers and build with the same media. On one of them the following command fails
Code:
apt-get install squid
On the other on the package was installed with out any problems. I have checked the /etc/apt/sources.list files and they are identical. Actually, it could not find mutt either.
I want that squid error pages have the company logo. I edited the page called ERR_ACCESS_DENIED but the image doesn't show (image its in the same directory as ERR_ACCESS_DENIED).
I tried png and gif formats to no avail.
Also I found this but I don't get what the writer is saying so I cant do it.
http://www.creative.net.au/evil/squi...ge_pages.shtml
I try for new LTS 10.4 32 bit at home..i install it with squid 2.7stable8 on it..after few hours my squid are freeze...so i have to reboot again and again..it never happen before with hardy. when i look on squid log...i cant find something wrong..but when i check wheter squid running or not.. squid wont auto running on start up..
View 2 Replies View RelatedI am trying to get apt-get to work on a server thats behind a squid proxy server.I have added exections in squid.conf to allow all on [URL]..apt-get can find updates but when it try's to download/install I get
Code:
Failed to fetch http://gb.archive.ubuntu.com/ubuntu/pool/main/g/gdebi/gdebi_0.6.0ubuntu2_all.deb Size mismatch
if I
Code:
wget http://gb.archive.ubuntu.com/ubuntu/pool/main/g/gdebi/gdebi_0.6.0ubuntu2_all.deb
it works..
Find error:
E: Unable to locate package squid
I am on Ubuntu 10.04, running Squid 2.7.STABLE7 Squid refuses to start on my machine unless I give it the -D argument (disable initial DNS tests). I think this is because my machine is offline while I'm testing it, so no DNS server. how to set Upstart to start Squid with the -D argument?
View 2 Replies View RelatedI have a proxy server (squid-3) that I would like to setup Dansguardian to do additional web filtering.
The system:
Ubuntu 10.10 - all updates as of today
Dansguardian - 2.10.1.1-2ubuntu0.1 (latest update)
Squid3 - latest update (not squid 2.7)
Webmin - 1.530 (all updates)
Webmin dansguardian module - 0.7.1
Ok - I have all of the above installed. When I go to the DG module page in Webmin, I get the following:
Warning - the version of DansGuardian you have is not supported by this Webmin module version
Webmin Module Version 0.7.1 supports DG version 2.10 (& 2.9)
Currently installed DG version
This obviously makes no sense, since I am running DG version 2.10.1...
PS. I have squid installed, but not configured (still tinkering) - could this be the problem? That squid needs to be running for DG to work?
I would like to use my Ubuntu server machine as a proxy so I can browse a little more securely/privately while I am traveling. I connect to a lot of open Wi-FI networks.I have Squid setup on an old laptop running Ubuntu Server 10.10 at home, and the main machine I will be using to connect to the proxy is a computer running Windows Vista.I am able to connect and use the Ubuntu Server machine as a proxy while traveling with the squid config file modified with http access set to 'allow all'.
Obviously this isn't the ideal setting.After lots of reading and Googling I can't figure out how to allow only my Vista laptop to use the proxy.I'm a little lost with the ACL settings required.
We have implemented a Ubuntu with Squid (2.7) & Dansguardian, Webmin and the webmin modules for these services. Server was running fine for about 6 months then suddenly there are hundreds of TIME_WAIT's when using:
Code:
netstat -antup
This causes the clients to get this error on their browser:
Code:
commBind: Cannot bind socket FD 10 to *:0 (98) Address already in use
Even 1 single client working will fill 3 pages of TIME_WAIT
Clients are Mac's bound to OD & AD (magic triangle). We reverted the vm image to a snapshot back when was working fine but problem remains. We created a server from scratch and same issue. We use ldap_auth to the active directory for authentication:
Server is 2008 R2
I just set up squid for the first time. I have zero experience with proxy servers. I used this guide:[URL](I also looked at a few other guides such as this one:ttp://ubuntuforums.org/showthread.php?t=320733. However, I wanted to most barebones config to start with and the link I used was the simplest.)So now that I have it set up, I'm testing it with FoxyProxy. It is not working well. I went to speedtest.net. The download and ping tests were just as fast as without the proxy, but the upload test fails completely.Furthermore, many web pages load very slowly or not at all. So performance is very mixed, but mostly poor.
View 8 Replies View RelatedI blocked facebook and ..... but if any one change the http with https its open with him how can i mange https like http.
View 9 Replies View RelatedMy Squid is working. But I do not know how to unblock a proxy for two users on my network. My configuration
Code:
acl work src 192.168.16.0/24
acl sites dstdomain "/etc/squid/sites.acl"
acl files urlpath_regex "/etc/squid/files.acl"
acl boss src 192.168.16.12
[Code]....
How to enable blocked sites and files for boss and it_user?
i just wanted to check if its something silly ive overseen and if anyone else is having this problem...im running Ubuntu 10.04.2 LTS with latest version of squid 2.7.STABLE7-1ubuntu12.2. now when i shutdown or reboot the system, it says something along this lines of umount: /var is busy (check using lsof...). this is followed by text in red: [fail].when the system starts up again, i can see /var journal is recovering, so the /var partition was not cleanly unmounted during shutdown. obviously, there is a risk of filesystem corruption here. FYI, i have /var and other important mountpoints as separate partitions (LVM; ext4).
to confirm my suspicions of squid still running during shutdown, i checked /var/log/squid/cache.log and there is no indication that it received the signal to terminate. if i manually run "stop squid", then cache.log would show that squid has stopped successfully (or words to that effect).to confirm that /var is locked by squid during shutdown, ive added a script to run "lsof | grep var" before filesystems are unmounted. and voila! it indicates that various files used by squid in /var such as swap.state are still open. hence, the next system startup would result in /var recovering journal again.finally, i tried running "stop squid" before issuing the shutdown command and it successfully unmounts /var and i do not get /var recovering journal on the next system startup.
I'm a newbie on Ubuntu, I have a problem with squid proxy. I'd like to configure a system, include:
- a server is named ProxyServer that is installed Squid proxy.
- three servers, are named FTPServer01, FTPServer02, FTPServer03. each server is installed vsftpd.
- Clients are installed Filezilla to up/download resource.
All servers are managed by IP address. When a client request a resource, client connect to ProxyServer, this ProxyServer will switch to one of Ftp servers. I do not know how to configure the squid's config file to setup them.
I am running fedora 10 and webmin squid proxy server, after power failure the squid fails to start. i have tried to start it from command line but failed
[root@ ~]# /etc/init.d/squid start
Starting squid: .................... [FAILED]
[root@ ~]# /etc/init.d/squid reload
[code]....
I have squid running on F12 fully updated. Pretty much stock config except bigger cache size.
Over time it seems to start lagging and occupying more memory. Currently using ~400Mb after a couple of months. I'm sure its causing some lag / refreshes because if I turn if off and go direct to internet the same site I had to hit refresh on, loads instantly.
Going through the logs in /var/log/squid I don't see anything suspicious with the untrained eye, whats a better way of debugging it to see where/why the delays are happening? Its a single user setup (for fun really lol) so theres a lot of misses in access.log. cache.log just has a handful of bad img headers which does not line up with lagging websites.code...
I have 4 servers running squid/3.1.1 proxy server. Since the latest version I can no longer FTP. I have posted this problem in multiple places but have received almost no response. I've found several other post to this problem throughout the Internet which have also gone unanswered. So, once again, I thought I'd give it a try. As I said "I have 4 servers running the newest version of Squid". When I try to access an ftp, any ftp, I receive an error (check attached image). This was never a problem until just recently. Squid should work perfectly find with ftp, it is not a strictly http proxy.
I turned my firewall off just to make sure, still had the same issue. If I jump directly on the server itself with no proxy settings set in the browser it will work fine. As soon as I set the browser setting to access the Squid software I get the same error. I've included my squid config (which is unchanged from the default settings), maybe somebody better versed than myself can point out an obvious flaw. Everything else seem to work just fine, it's only FTP that's a problem.
I have a reverse proxy set up with squid. I'm going to try and explain what it's doing and I apologize for it being confusing, I'll do the best I can to describe my problem. First, it's for our phone system. We run a ShoreTel Voip system. The owner has decided he wants me to setup MCM (Mobile Call Manager), which from what I can see is an under developed, and almost impossible to get help with Shoretel software. But he's convinced he needs it for his Iphone. It's supposed to, in a nutshell, turn his Iphone into his work phone with all the advantages and doodads that come with it. Apparently, "they have an app for that". On the server side, I need to setup a reverse proxy back into the network on our phone server. Simple enough, I did this with squid. I used the following lines:
Code:
http_port 80 accel defaultsite=172.17.137.7
cache_peer http://172.17.137.7 parent 80 0 no-query originserver name=myAccel
acl our_sites dstdomain http://172.17.137.7
[code]....
Code:
always_direct allow all It most definitely is allowing traffic back to the phone server, the problem is, it hands out my internal server address to the outside client. So for instance, if I connect to the outside routable address with my phone, it will immediately change the url to http://172.17.137.7 which is the inside nat address of my phone server. Which of course doesn't work, since I couldn't browse to that address from the outside. It does however work from the inside of the network, obviously because 172.17.137.7 is accessible from the inside.
I want to configure squid server with SSL so that users send clear text username/password and also data in encrypted mode. i googled but all of the configuration is for reverse proxy not requests from users to proxy server in LAN for example.
View 5 Replies View RelatedI need the complete reference guide to set up my own SQUID transparent proxy Server with Gateway support. I am using Fedora 14. Please help me with LINKS/REFERENCE. I am a learner in Squid.
View 1 Replies View Related