OpenForum RSS: squid - TCP/407

squid - TCP/407 (Andrey Mitrofanov)

Tue, 22 Jul 2014 15:48:07 GMT

> ��, ��

zless /usr/share/doc/squid3-common/squid.conf.documented.gz
/ "file" ENTER

google:(("�� ip" �� squid site:opennet.ru/openforum/))

squid - TCP/407 (Ninjatrasher)

Tue, 22 Jul 2014 10:24:23 GMT

>> �� , � �� 22.07.14 ip ��
> �� -�� ? ��, ��.
>> ########Access List for Office365######
>> acl office2013 dstdomain .mscend.net
>> acl office2013 dstdomain .microsoft.com
>> acl office365 dst 65.54.54.128/25
>> acl offcie365 dst 134.170.0.0/16
>> acl lync2013 dstdomain .ru.yusen-logistics.com
>> acl lync2013 dstdomain .microsoftonline.com

��, ��

squid - TCP/407 (Andrey Mitrofanov)

Tue, 22 Jul 2014 10:00:01 GMT

> �� , � �� 22.07.14 ip ��

�� -�� ? ��, ��.

> ########Access List for Office365######
> acl office2013 dstdomain .mscend.net
> acl office2013 dstdomain .microsoft.com
> acl office365 dst 65.54.54.128/25
> acl offcie365 dst 134.170.0.0/16
> acl lync2013 dstdomain .ru.yusen-logistics.com
> acl lync2013 dstdomain .microsoftonline.com

squid - TCP/407 (Ninjatrasher)

Tue, 22 Jul 2014 08:33:00 GMT

>[�� ]
> got NTLMSSP command 3, expected 1
> got NTLMSSP command 3, expected 1
> got NTLMSSP command 3, expected 1
> got NTLMSSP command 3, expected 1
> [/code]
> � �� , �� ntlmssp. ��
> �� ? � ��
> �� ip �� , � ��
> �� , � �� domains � urls ��
> ��, �� . ��

�� .

� ��, �� Lync2013, OneDrive, Office 365 �� .

�� , � �� 22.07.14 ip �� . �� , �� .
[code]
########Access List for Office365######
acl office2013 dstdomain .mscend.net
acl office2013

squid - TCP/407 (Ninjatrasher)

Tue, 22 Jul 2014 05:04:49 GMT

>[�� ]
> �� :
> 1) OS
> 2) ��
> 3) ��
> �� , ��
> �� .
> �� .
> � �� , �� -
> �� ,
> � �� -��.

1. Debian 7.5
2. Squid Cache: Version 3.1.20
3. �� squid
[code]
dns_v4_first on
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 300
auth_param ntlm use_ntlm_negotiate on
auth_param ntlm keep_alive off
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl intranet dst 172.18.1.0/24
acl intranet dst 172.18.2.0/24
cl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port

squid - TCP/407 (pavlinux)

Mon, 21 Jul 2014 23:36:52 GMT

> TCP_DENIED microsoft.com

�� , � �� Squid!

squid - TCP/407 (Ninjatrasher)

Mon, 21 Jul 2014 13:49:22 GMT

>[�� ]
> some
> compatibility settings in windows, specially windows vista and 7 are
> configure by default to only use NTLMv2 honoring kerberos, you need to
> edit windows registry and change/create
> *HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\LmCompatibilityLevel*
> *DWORD value 1
> You can automate this with a logon script o with a group
> policy
> Security:LAN Manager Authentication Level
> Anyway, I think is time to migrate to kerb_auth.

�� , �� , � �� )
�� , �� , ��

squid - TCP/407 (��)

Mon, 21 Jul 2014 13:23:43 GMT

407 means "send me your login or go away".
�� .

>� �� , �� ntlmssp

...
�� ...

If you want to use ntlm_auth ( NTLMv1?) you need to change some
compatibility settings in windows, specially windows vista and 7 are
configure by default to only use NTLMv2 honoring kerberos, you need to
edit windows registry and change/create

*HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\LmCompatibilityLevel*

*DWORD value 1

You can automate this with a logon script o with a group policy
Security:LAN Manager Authentication Level

Anyway, I think is time to migrate to kerb_auth.

OpenForum RSS: squid - TCP/407

squid - TCP/407 (Andrey Mitrofanov)

squid - TCP/407 (Ninjatrasher)

squid - TCP/407 (Andrey Mitrofanov)

squid - TCP/407 (Ninjatrasher)

squid - TCP/407 (Ninjatrasher)

squid - TCP/407 (pavlinux)

squid - TCP/407 (Ninjatrasher)

squid - TCP/407 (��������)

squid - TCP/407 (��)