Comments on: Installing and Configuring SquidNT 2.7 on a Windows Domain

By: Toron

Toron — Fri, 09 Apr 2010 08:25:46 +0000

Hi, how do i configure squidnt for me to be able run online applications, like online game patches. cause ever since squid was installed i cant connect my game clients. im only browser connected. hope you could help me configure it.

By: fortruth

fortruth — Tue, 23 Mar 2010 08:33:16 +0000

hi, dear author.

I have error problem with following full config(also squid 2.7 on xp):

auth_param ntlm program c:/squid/libexec/mswin_ntlm_auth.exe
auth_param ntlm children 5
auth_param ntlm keep_alive on
acl all src all
acl CONNECT method CONNECT
acl auth_user proxy_auth REQUIRED src 192.168.126.1/255
http_access allow auth_user
http_access deny all
icp_access allow auth_user
icp_access deny all
http_port 3128
cache_dir ufs c:/squid/var/cache 100 16 256
access_log c:/squid/var/logs/access.log squid
logfile_daemon c:/squid/libexec/logfile-daemon.exe
cache_log c:/squid/var/logs/cache.log
cache_store_log c:/squid/var/logs/store.log
mime_table c:/squid/etc/mime.conf
pid_filename c:/squid/var/logs/squid.pid
unlinkd_program c:/squid/libexec/unlinkd.exe
icon_directory c:/squid/share/icons
error_directory c:/squid/share/errors/English
coredump_dir c:/squid/var/cache

I using firefox proxy setting to test.

this config just can access my local http server without showing promote to input username and password.

but when I want to access other servers like google, It will popup a promote dialog to let me input username and password. after I input then there no something happen. and the access.log’s message is like this

1269332522.185 0 127.0.0.1 TCP_DENIED/407 1819 GET http://www.google.cn/webhp? – NONE/- text/html

so what problem could be!?

By: MyName

MyName — Wed, 17 Mar 2010 15:06:24 +0000

Hi, could someone post how to configure SquidNT to pop the authentication below allowing access to Internet. Also to be able to have 3 different groups 1. Unlimted access 2. No Access 3. Restricted access (ability to block sites using a text file). Looking forward to hear from you…

By: admin

admin — Fri, 13 Nov 2009 17:34:05 +0000

duc try:

Solution:

This is a common issue on Windows Vista. Due to UAC (User Access Control) feature in Windows Vista, even if you are logged in as an administrator by default you do not have administrative privileges when an application is run in a normal mode (by clicking). To run an application in an administrative mode, you will have to right click on the application icon and select “Run as an administrator”.

To workaround the issue, please open the DOS prompt in an administrative mode (by right clicking) and execute the command.

By: duc

duc — Sat, 07 Nov 2009 09:13:35 +0000

hello. I am getting an error message whenever i try to run squid in cmd. after entering ‘c:\squid\sbin\squid.exe -i’ I get a openscmanger failed

Running vista32 OS.

By: admin

admin — Tue, 08 Sep 2009 13:14:30 +0000

donald,

Try…

acl localnet proxy_auth REQUIRED src 192.168.2.1/255

By: donald

donald — Sun, 30 Aug 2009 19:25:06 +0000

when you talk about
acl localnet proxy_auth REQUIRED src 10.0.0.1/255

what would i change this too?
my gateway is 192.168.2.1
subnet of 255.255.255.0
my server is 192.168.2.100

By: George

George — Fri, 28 Aug 2009 16:05:39 +0000

Following your write up to the finest detail, I go to test the authentication and the service will not start. “The Squid service on Local Computer started then stopped. Some services stop automatically if they have no work to do, for example, the Performance Logs and Alerts service. My first install of squid, where to go from here?

By: Andy Cook

Andy Cook — Thu, 04 Jun 2009 10:59:50 +0000

as an option for reviewing the squid logs, have a look at sarg (Squid Analysis Report Generator) at http://sarg.sourceforge.net/

By: Michael Ellerbeck

Michael Ellerbeck — Mon, 16 Mar 2009 20:17:34 +0000

Thanks for a great write up! I only got held up at one point. In the section ‘User Authentication on a Windows domain’ I followed the instructions to add

acl localnet proxy_auth REQUIRED src 10.0.0.1/255

The only problem was localnet was already defined by this block

acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network

At the very end you mention to comment it out, but I got stuck because I tested the Authenticated mode like you recommended.

I did learn that squid.exe puts out a log in c:\squid\sbin\squid.exe.log

Which was how I found the error
2009/03/16 13:14:48| aclParseAclLine: ACL ‘localnet’ already exists with different type.
FATAL: Bungled squid.conf line 630: acl localnet proxy_auth REQUIRED src 10.1.0.0/16
Squid Cache (Version 2.7.STABLE6): Terminated abnormally.

We I commented that block out everything works great!

Thanks again! You wouldn’t happen to want to do a write up on delay pools now would you!