RES: [squid-users] Windows update hangs

From: Renato Policani <RenatoPolicani@dont-contact.us>
Date: Tue, 16 Aug 2005 10:45:58 -0300

Hi,

I think what you want is:

acl mynet src 192.168.100.0/24

acl win1 dstdomain http://*.update.microsoft.com
or
acl win1 dst 207.46.144.0/255.255.255.0

http_access allow mynet win1

I hope that help you.

Regards,
Renato.
-----Mensagem original-----
De: Lasse Mørk [mailto:debian@cyrix.dk]
Enviada em: terça-feira, 16 de agosto de 2005 10:31
Para: sanguis@xs4all.nl
Cc: squid-users@squid-cache.org
Assunto: Re: [squid-users] Windows update hangs

ok. I've putted at the end of squid.conf :(
Then tried to move it up a little.

Now i looks like this:
--snip--

acl WIN1 dstdomain http://*.update.microsoft.com
acl WIN2 dstdomain http://*.windowsupdate.microsoft.com
acl WIN3 dstdomain http://download.windowsupdate.com
acl WIN4 dstdomain https://*.windowsupdate.microsoft.com

http_access allow WIN1
http_access allow WIN2
http_access allow WIN3
http_access allow WIN4

http_access allow ncsa_users

--/snip--

Stille the same :(

>
>>> That's the wrong options if you are doing the authentication locally.
>>> always_direct is for bypassing parent proxies.
>>> I think what you want to do is to use "http_access allow WIN1" (and so
>>> on) as seperate ACLs to your main one that allows your clients to
>>> access. Of course, as always, I could be way off.
>
>> That did'n work. It still prompts for user and password :(
>
> The order of http_access rules is important. If you have your
> authentication http_access rule before the 'allow WIN1', the
> authentication popup will show.
>
> Joost
>
>

Atenção: Esta mensagem foi enviada para uso exclusivo do(s) destinatários(s) acima
identificado(s), podendo conter informações e/ou documentos
confidencias/privilegiados e seu sigilo é protegido por lei.
Caso você tenha recebido por engano, por favor, informe o remetente e apague-a de
seu sistema.
Notificamos que é proibido por lei a sua retenção, disseminação, distribuição, cópia ou
uso sem expressa autorização do remetente.
Opiniões pessoais do remetente não refletem, necessariamente, o ponto de vista da
CETIP, o qual é divulgado somente por pessoas autorizadas.

Attention: This message was sent for exclusive use of the addressees above
identified, being able to contain information and or privileged/confidential documents
and law protects its secrecies.
In case that you it has received for deceit, please, it informs the shipper and erases it
of your system.
We notify that law forbids its retention, dissemination, distribution, copy or use without
express authorization.
Personal opinions of the shipper do not reflect, necessarily, the point of view of the
CETIP, which is only divulged by authorized people.
Received on Tue Aug 16 2005 - 07:46:06 MDT

This archive was generated by hypermail pre-2.1.9 : Thu Sep 01 2005 - 12:00:02 MDT