similar to: Winbind Trust -- grr

Hai   After my squid group adventure, i have a remaining question here.   The problem was as followed. ( and this probely dont applie to squid kerberos helpers only. )   samba-tool setup for squid i used, was as followed.   samba-tool user create squid1-service --description="Unprivileged user for SQUID1-Proxy Services" --random-password samba-tool user setexpiry

Hello Everyone! I am using shorewall-3.0.5 on suse linux. Recently we have implemented dansguardian running on 8080 and squid on port 3128. Previously (before dans guardian) masquerading was working fine but after the implementation of dansguardian masquerading is not working. My rules file has entry Previous entry was ACCEPT loc:192.192.192.3 net REDIRECT loc 8080 tcp

I have purchased a used Compaq DL360 which I was going to use as a proxy server. Presently, we are using a cheap box with ipcop which is working fine but it didn't have much RAM (64MB), etc. This new box we will want to run squid and perhaps dansguardian for filtering (this is a non-profit company) and I'm wondering if I should just put ipcop on it or would it be smarter/better to install

Hi all, I'm new to rsync and have a problem I cannot resolve even after plowing through the lists. I have an rsync server setup with an rsync client. I am trying to backup a directory structure that is over four levels deep. Rsync does great until it hits that fourth level. Then it errors out for each file in that fourth level similar to this: rsync: recv_generator: mkdir

ive got a config thats client -> server ->Dansguardian->Squid -> onward adn I want to transparently redirect web traffic to DG/Squid Not sure where the problem lies - hoping you guys can help me and at least tell me that its NOT my shorewall config heres the configs When I point a browser straight at 3128 or 3129 I get web pages back and the appropriate stuff in the logs . I get a

I use Winbind auth for squid-dansguardian ntlm authentication purpose. I need matching users/group for filtering in squid/dansguardian. getent group is used for finding users for groups except for group Domain Users. getent passwd is used for finding all users and specifically users for group Domain Users (over group ID). This requires enumeration option(winbind enum users, winbind enum groups)

Hi, Just a question. I have a samba PDC with LDAP backend. I want squid / dansguardian use the user auth from samba NTLM bases. i need user and group filtering and i want it transparent. 2 steps, auth, first the NTLM auth on port 80 to be transparent. second, the dansgadian filter filtering groups. this looks bit like it, but this authenicates against ADS.

Hi Louis, 2016-08-29 16:18 GMT+02:00 L.P.H. van Belle via samba <samba at lists.samba.org >: > Hai > > > > After my squid group adventure, i have a remaining question here. > > > > The problem was as followed. ( and this probely dont applie to squid > kerberos helpers only. ) > > > > samba-tool setup for squid i used, was as followed. > >

And reading last mails comforts me in believing the filter used by client side to retrieve user is not correct, that filter should use SPN then you won't need to set up SPN into UPN field. 2016-08-30 15:55 GMT+02:00 mathias dufresne <infractory at gmail.com>: > Hi Louis, > > > 2016-08-29 16:18 GMT+02:00 L.P.H. van Belle via samba < > samba at lists.samba.org>: >

Hi all, I''ve just built Mandrake 10.1 on a Compaq Deskpro that I''ve built as a router/firewall and am redirecting port 80 outbound to force users through the Content Filter. I''ve run this setup on Mandrake 9.0 and 10.0 without any problems but this time the following happens. Squid is accessed through port 3128 and Dansguardian via 8080. If I set my browser on a

I am trying to help a school run dansguardian transparent. I added the following to shorewalls rules, and from a tail of messages it seemed to be working, but he called saying no one had Internet. What should the rule be if this does not redirect port 80 to 8080? REDIRECT loc 8080 tcp www - !10.192.0.2 (web on dmz) ACCEPT fw net tcp www

Hi, Im compiling dansguardian with the clamav patch, but it needs libesmtp.h and i can't seem to find the rpm for centos or rh4 comments? -- ------------------------------------------- Erick Perez Linux User 376588 http://counter.li.org/ (Get counted!!!) Panama, Republic of Panama

Hi, I will probably have to migrate a few servers running Red Hat 9 to CentOS and I'd like to have opinions. One server to migrate is running Fedora core 4. Reason for migrating to CentOS: no more security updates available, hardware change planned anyway. Here are the services to be migrated: sendmail pop (not sure which daemon, I think it is running the default daemon in RH9) DNS

Hi List, My Mail/Proxy server has from time to time refuse to accept accept network connection. If I restart the network service, the service will again start to accept connection but after some time will again refuse connection. I use CentOS 4.5 with Squid, DansGuardian, Postfix. Please can someone point me what are the possible cause of this. Thank you. junji aisalen.wordpress.com Linux

Hi, I had installed squid with ntlm authentication and content filtering from this tutorial: http://www.howtoforge.com/dansguardian-with-multi-group-filtering-and-squid-with-ntlm-auth-on-debian-etch. Next to last point is firewall configuration by ipmasq but I have installed shorewall. This is content of I89tproxy.rul file: #!/bin/sh # # redirect http requests to non-local hosts to the

I've given up on getting the other machine to work so I'm looking at building a new one. The machine will be a firewall/gateway running NAT, Web Proxy with Dansguardian, DHCP, DNS, NTP and VPN (~6 clients). I read so much about VPN encryption and the processor needs, now I am unsure if this will work. I can get this for AMD FX-8120 Zambezi 3.1GHz Socket AM3+ 125W Eight-Core Desktop

Hi Tom,  I´m very glad using Shorewall I proud to say that use it in my whole network (215 Real IP´s over ProxyArp) I can filter everyone have mac-control of then etc etc. Well I´m like a child playing with it :) But now, have a question there is any way to filter or use an Anti-virus in this network ? To drop packets with virus ?? To scan HTTP request ?? Or maybe use Dansguardian ? Did you

Hello, I''m running a home-made Debian 2.4.18 kernel with iproute2-ss010824. I have 2 cable-modems to 2 different providers. One with a transparant proxy and one with a regular. I would like to load-balance all traffic over the 2 modems and to do this with http traffic I have to run 2 squid processes: squid1 to act as a proxy for the provider with the transparant proxy and squid2 that

Hmm... i think it's time to go home now... forgot attachment. //T-? >Hi all. > >I am submitting a patch that adds DCE authentication and credential > >attaching. Fully legit, no ugly hacks ;) > >I looked (some) at Paul Henson's <henson at acm.org> patch for ssh-1.2.20 >while coding. > >The patch [attached] is against pre14, but DCE and AIX patches

I have a housing complex with Internet access, and I need to assign certain hosts to a certain zone. I don''t necessarily want to use IP addresses in the HOSTS file because they are all DHCP. Is it possible to assign a host via MAC Address in the /etc/shorewall/hosts file? Ex: virus eth1:~00-00-00-00-00-00 instead of virus eth1:192.168.1.56 I need to temporarily block computers that I