How do i exclude some URL from the proxy caching at squid.conf as i dont wont to cache ....., mediacafe etc, I know i can block site by create a file like bad-sites.acl, then adding it to squid.conf but that blocks it.
View 2 RepliesI have Squid Version 3.0 PRE5 installed on debian etch.Howto exclude some URL from the proxy caching at squid.conf ?
View 5 Replies View RelatedI want to compile a Source to RPM with no Cache option. I have tried it with enable-storeio=null option in squid.spec file. After installing the compiled RPM, seen that it is making squid spooling directories and caching the objects, working fine.
View 3 Replies View RelatedI'm experimenting with Squid [ job task =( ] Now Squid is configured to cache deb, zip, tbz2, gz, flv, etc. but I dont know how skip caching xml and other file types.
View 2 Replies View Relatedwhat i need, I got two servers for about 4000 users and 300 servers and well the guy never setup dns caching right, so im redoing it. Now my goals
1) DNS cache
2) Transparent Squid Cache only
3) Load Balance - at switchlevel
Upgraded Hardrives to SSD 2x32gb each server 4gb of ram 2x Dell poweredge 850's - p4 2.8 (single cores) So any advise , pointers , expeirnces and best ways to do this being both server will do both dns caching and squid! Also is bind9 the best for this?? i seen stuff about DNSmasq what performs better( i dont need DHCP)
Howto exclude IP address from caching in /etc/squid/squid.conf of squid 2?
For a domain, I can use:
Code:
acl excl dstdomain domain.net
always_direct allow excl
no_cache deny excl
but howto exclude IP addresses instaed of domain names?
I am looking into creating a web caching server for myself using fedora 10. I believe I need to use squid for this but it seems to have a lot of features. Basically, all I want for now is to be able to cache web pages that I and my network users use the most, increasing access time and lowering the load on my internet connection. Can squid do this and can someone point in the right direction on an article on how to configure such a thing?
View 5 Replies View Relatedi have created on folder in my server to upload some regular states. I want that user can modify or upload already stored files. but, should not upload any unwanted files orfolders.for that i want to use "rm" command as auto scheduler (putting this in cron tab.so that all files will be removed except some required files / folders for which this upload facility is activated. users are using secure-shell for uploading data.
View 1 Replies View RelatedI have tried many times for squid proxy cache server on10.10.But invain.
View 3 Replies View RelatedI am an avid ubuntu desktop user, however I started working at a company that runs their firewall, mail and proxy server on centos 5.2, all was working well so never needed to tamper with it, however we (myself and the administrator) randomly decided to install squid3 for its features, the install went well, however squid3 didnt run as we wanted it to, after looking into it reading some material on the net, we realised how stupid we were to not to test it -sigh- so weve purged and removed it and reverted back to 2.6, now however we even have issues with that too, we install squid 2.6 and start the service and we get errors that stop, and starting fail, however the status of squid shows its running. How to get it back to working order?
View 3 Replies View RelatedI have installed ubuntu in my system .Squid is by default in it. I want to compile delay_pools feature in squid.Normally we download source code file in tar.gz format ,uncompressed itand then install it. If we want to compile any thing we can also do it.Here in my case there is already squid installed during installation process.
View 1 Replies View RelatedI'm migrating an old squid installation that use "httpd_accel_host" directive to archive the acceleration configuration. What I have is lot internals web servers published through an squid to the rest of the world, some of then http and others https. I try using https_port but when restart squid I get the following message: parseConfigFile: squid.conf:1202 unrecognized: 'https_port'
[Code]....
I've been having a hard time googling and trying to get ALL network connection to be redirected to squid proxy. I couldn't find a proper configuration for ufw or iptables. The ideas are:
1. redirection rule should NOT depend on a specific network inteface, but should work with any connection type, ex.: ppp0 or eth0... 2. firewall rules can be for firehol, iptables, or ufw (the same as iptables, just tell me where to place them). Preferably ufw or gufw. 3. should not interfere on cups web interface and lighttpd server.
BTW: it's not a ubuntu server install
I am trying to set up a SQUID server on my Red Hat Linux 7.3. to act as a cache server.
The machine has 2 network interface:
eth0 172.30.254.4/23
eth1 172.3.254.65/23
Default gateway is 172.30.254.19/23
The hostname is "amelie".
[Code].....
I've been all around the net and can't find a "simple" answer how to block our LAN users from downloading torrents. Is it really that difficult?
Here's our setup:
1. The Server's Configs:
2. sudo gedit /etc/squid/squid.conf
3. sudo gedit /etc/rc.local (to start Firewall rules on bootup)
4. Server NOT a DHCP Server
5. No other iptables rules are configured, just the above ones.
Before in a 1 NIC setup, I blocked Workstations MAC addresses in the Router + Squid Proxy Server (Not Transparent), it worked, but some Online Java Apps didn't work and users can't send/receive email so I abandoned the method.
Now, I installed transparent Squid Proxy with 2 NIC cards, it works, but workstations can still download torrents! I know Squid doesn't block ports, right? So the answer must lie in Iptables Firewall? I basically use Squid just to deny access to Facebook, Friendster, or other "unproductive sites".
Quote:
How to block torrent downloading by using a Firewall? Or is there another "simple" way?
I've heard that it's better just to allow regular ports (80, 22, 465, etc...) then block all the rest, this way, you can prevent unnecessary ports.
I'm not an Iptables/Firewall expert so can you pls. explain it a bit more detailed if that's the case.
I'm also aware of just telling our users NOT to download torrents, but I just want to prohibit it entirely.
I know I will be the most "uncool" employee in our office.
I would like to configure Squid and DansGuardian that way, that it's a Proxy with Authentication via Website. That means: A new Notebook gets about DHCP the Network-Information like IP-Adress etc.. When he now tries to open a Internet connection it should check if he's authenticated and if not he should get (if this try is from a browser) a login screen in http. It should also not be possible to have internetconnection without being logged in. The clients are Windoze, Mac and Linux. My question now. What programms/deamons are there for doing this authentication. Would you decide for another Programm instead of Squid?
View 2 Replies View RelatedI am using Squid Proxy Server alongwith Dansguardian, dhcp3 and ClamAV on my local network. Everything is working fine except for .flv files like [URL]. The problem is that Squid wants to download the whole .flv file first to its cache and then serve it to the client.
It has an advantage that the whole video loads at once on the client's browser but that is not what our users want.
What they want is that these files load on the fly as they do on a normal internet connection. How do I configure squid to serve .flv files on the fly to the client PCs?
Ubuntu Server 8.04. I have 2 servers in the same rack, on the same subnet, using the same DNS servers and build with the same media. On one of them the following command fails
Code:
apt-get install squid
On the other on the package was installed with out any problems. I have checked the /etc/apt/sources.list files and they are identical. Actually, it could not find mutt either.
I want that squid error pages have the company logo. I edited the page called ERR_ACCESS_DENIED but the image doesn't show (image its in the same directory as ERR_ACCESS_DENIED).
I tried png and gif formats to no avail.
Also I found this but I don't get what the writer is saying so I cant do it.
http://www.creative.net.au/evil/squi...ge_pages.shtml
I try for new LTS 10.4 32 bit at home..i install it with squid 2.7stable8 on it..after few hours my squid are freeze...so i have to reboot again and again..it never happen before with hardy. when i look on squid log...i cant find something wrong..but when i check wheter squid running or not.. squid wont auto running on start up..
View 2 Replies View RelatedI am trying to get apt-get to work on a server thats behind a squid proxy server.I have added exections in squid.conf to allow all on [URL]..apt-get can find updates but when it try's to download/install I get
Code:
Failed to fetch http://gb.archive.ubuntu.com/ubuntu/pool/main/g/gdebi/gdebi_0.6.0ubuntu2_all.deb Size mismatch
if I
Code:
wget http://gb.archive.ubuntu.com/ubuntu/pool/main/g/gdebi/gdebi_0.6.0ubuntu2_all.deb
it works..
Find error:
E: Unable to locate package squid
I am on Ubuntu 10.04, running Squid 2.7.STABLE7 Squid refuses to start on my machine unless I give it the -D argument (disable initial DNS tests). I think this is because my machine is offline while I'm testing it, so no DNS server. how to set Upstart to start Squid with the -D argument?
View 2 Replies View RelatedI have a proxy server (squid-3) that I would like to setup Dansguardian to do additional web filtering.
The system:
Ubuntu 10.10 - all updates as of today
Dansguardian - 2.10.1.1-2ubuntu0.1 (latest update)
Squid3 - latest update (not squid 2.7)
Webmin - 1.530 (all updates)
Webmin dansguardian module - 0.7.1
Ok - I have all of the above installed. When I go to the DG module page in Webmin, I get the following:
Warning - the version of DansGuardian you have is not supported by this Webmin module version
Webmin Module Version 0.7.1 supports DG version 2.10 (& 2.9)
Currently installed DG version
This obviously makes no sense, since I am running DG version 2.10.1...
PS. I have squid installed, but not configured (still tinkering) - could this be the problem? That squid needs to be running for DG to work?
I would like to use my Ubuntu server machine as a proxy so I can browse a little more securely/privately while I am traveling. I connect to a lot of open Wi-FI networks.I have Squid setup on an old laptop running Ubuntu Server 10.10 at home, and the main machine I will be using to connect to the proxy is a computer running Windows Vista.I am able to connect and use the Ubuntu Server machine as a proxy while traveling with the squid config file modified with http access set to 'allow all'.
Obviously this isn't the ideal setting.After lots of reading and Googling I can't figure out how to allow only my Vista laptop to use the proxy.I'm a little lost with the ACL settings required.
We have implemented a Ubuntu with Squid (2.7) & Dansguardian, Webmin and the webmin modules for these services. Server was running fine for about 6 months then suddenly there are hundreds of TIME_WAIT's when using:
Code:
netstat -antup
This causes the clients to get this error on their browser:
Code:
commBind: Cannot bind socket FD 10 to *:0 (98) Address already in use
Even 1 single client working will fill 3 pages of TIME_WAIT
Clients are Mac's bound to OD & AD (magic triangle). We reverted the vm image to a snapshot back when was working fine but problem remains. We created a server from scratch and same issue. We use ldap_auth to the active directory for authentication:
Server is 2008 R2
I just set up squid for the first time. I have zero experience with proxy servers. I used this guide:[URL](I also looked at a few other guides such as this one:ttp://ubuntuforums.org/showthread.php?t=320733. However, I wanted to most barebones config to start with and the link I used was the simplest.)So now that I have it set up, I'm testing it with FoxyProxy. It is not working well. I went to speedtest.net. The download and ping tests were just as fast as without the proxy, but the upload test fails completely.Furthermore, many web pages load very slowly or not at all. So performance is very mixed, but mostly poor.
View 8 Replies View RelatedI blocked facebook and ..... but if any one change the http with https its open with him how can i mange https like http.
View 9 Replies View RelatedMy Squid is working. But I do not know how to unblock a proxy for two users on my network. My configuration
Code:
acl work src 192.168.16.0/24
acl sites dstdomain "/etc/squid/sites.acl"
acl files urlpath_regex "/etc/squid/files.acl"
acl boss src 192.168.16.12
[Code]....
How to enable blocked sites and files for boss and it_user?
i just wanted to check if its something silly ive overseen and if anyone else is having this problem...im running Ubuntu 10.04.2 LTS with latest version of squid 2.7.STABLE7-1ubuntu12.2. now when i shutdown or reboot the system, it says something along this lines of umount: /var is busy (check using lsof...). this is followed by text in red: [fail].when the system starts up again, i can see /var journal is recovering, so the /var partition was not cleanly unmounted during shutdown. obviously, there is a risk of filesystem corruption here. FYI, i have /var and other important mountpoints as separate partitions (LVM; ext4).
to confirm my suspicions of squid still running during shutdown, i checked /var/log/squid/cache.log and there is no indication that it received the signal to terminate. if i manually run "stop squid", then cache.log would show that squid has stopped successfully (or words to that effect).to confirm that /var is locked by squid during shutdown, ive added a script to run "lsof | grep var" before filesystems are unmounted. and voila! it indicates that various files used by squid in /var such as swap.state are still open. hence, the next system startup would result in /var recovering journal again.finally, i tried running "stop squid" before issuing the shutdown command and it successfully unmounts /var and i do not get /var recovering journal on the next system startup.