Re: [squid-users] can't explain 403 denied for authenticated

rmissions for whichever user logged in >http_access allow CustomAclDB The first call the the external_acl is to process unauthenticated requests. Is the suggestion to replace acl auth_users proxy_auth REQUIRED with http_access deny !auth_users before the second external_acl (for authen

Re: [squid-users] can't explain 403 denied for authenticated

7-da51-47db-8d52-d65239f27...@treenet.co.nz> >Content-Type: text/plain; charset=UTF-8; format=flowed > >On 25/05/24 07:28, Kevin wrote: >> Hi, >> >> We have 2 external ACLs that take a request's data (IP, authenticated >> username, URL, user-agent, etc) and uses

[squid-users] can't explain 403 denied for authenticated user

Hi, We have 2 external ACLs that take a request's data (IP, authenticated username, URL, user-agent, etc) and uses that information to determine whether a user or host should be permitted to access that URL. It almost always works well, but we have a recurring occasional issue that I can't fig

[squid-users] instances/queues when same script for multiple external_acl_type rules

script.py ... have a max of 10 instances for each acl_type? Or 10 instances total? thanks Kevin ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] squid http CONNECT

Hello squid users. I have configured squid's option SSL_ports to include smtps(465) imaps(993) pop3s(995) nntps(563) What requirements are needed for smtps imaps pop3s nntps client programs to tunnel thru squid proxy? -- kevin ___ squid-

[squid-users] external ACL based on requested port?

Hi, I'm using an external ACL script to allow/limit access based on some factors including (authenticated) username, client IP, the domain of the requested URL. I'd also like to base the access on the port of the destination. Most would just be 80 or 443, but I'd like to limit/allow access to

[squid-users] multiple requests from single URL on web page?

2.jpg ] "> When I access that page through squid, I see one image's URL once, with no referrer, and the other one two times - once with a referrer and once without: CustomAclDB - kevin 172.18.127.4 domain2.com [ http://(web/ | http://server_hosting_test_page ] /test/ Cust

[squid-users] Caching ChromeOS update files

ache. I created a refresh pattern to keep the update files cached for 7 days. The Chromebooks are using a PAC file which only sends dl.google.com traffic to squid, so squid is only dealing with dl.google.com traffic. I am using squid 3.5.27 on ubuntu 18.04 LTS server edition VM with 2 vCPUs a

Re: [squid-users] Squid Behavior to Ping Destination on Registered Ports

t; Content-Type: Text/Plain; charset="iso-8859-15" > > On Saturday 18 November 2017 at 21:21:38, Kevin Wong wrote: > > > My firewall (Juniper SRX) caught outbound ICMP flows using vulnerable > ports > > That makes no sense. ICMP doesn't use port numbers

[squid-users] Squid Behavior to Ping Destination on Registered Ports

My firewall (Juniper SRX) caught outbound ICMP flows using vulnerable ports before initiating outbound HTTP traffic. I am running an updated Squid Proxy on Ubuntu 16.04. Can anybody explain or confirm the Squid behavior? Oct 15 03:53:37 firewall RT_FLOW: RT_FLOW_SESSION_DENY: session denied 10.

[squid-users] Negotiate Kerberos Auth - BH Invalid request

Hello list, I asked about a problem with NTLM-Authentication before. (BH SPNEGO request invalid prefix; thats the error of the helper protocol "helper-protocol=squid-2.5-ntlmssp" I used with NTLM, while basic works fine) A user told me I should use negotiate_kerberos_auth instead of ntlm_auth.

[squid-users] Squid - using NTLM for SSO

-c /etc/squidguard/squidGuard.conf url_rewrite_children 5 Does anyone know further? Thanks in advance. - Kevin ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] proxy not staying logged in

I have users of my proxy when they add stuff to cart its ok but checkout won't work see the robert is his user name I can't figure out how to keep that logged in to not get denied errors. 1456556236.501336 52.25.202.130 TCP_MISS/200 7333 POST http://www.footlocker.com/catalog/miniAddToCart.c

Re: [squid-users] log source port from squid server?

- Original Message - From: "Antony Stone" To: squid-users@lists.squid-cache.org Sent: Friday, July 24, 2015 8:49:13 AM Subject: Re: [squid-users] log source port from squid server? > Does http://www.squid-cache.org/Doc/config/logformat/ help? I saw that page earlier but misunderstood

[squid-users] log source port from squid server?

destination server's listening port. From the documentation and reading back through this list's archive, I don't see a format code for squid server source port. Has there ever been interest in this? thanks Kevin ___ s