Re: Authentication to access Proxy

, they can have access to the cache. This is in the FAQ. See http://squid.nlanr.net/Squid/FAQ/FAQ-19.html#ss19.6 with some minor obvious changes... (compare with comments in squid.conf). --- Henrik Nordstrom Spare time Squid hacker

Re: Only fetch sibling hits

miss_access allowed it you'd like to fetch stuff from siblings.. --- Henrik Nordstrom Spare time Squid hacker

Re: Denying URLs

the last (second) one. Squid does not understand this syntax. --- Henrik Nordstrom Spare time Squid hacker

Re: Newbie: Access Control

_domains dstdomain example.com example.net ... http_access allow limited_access_domains limited_access_users acl limited_access_servers dst server1.example.org server2.example.org http_access allow limited_access_servers limited_access_users # Deny all else. acl all src 0.0.0.0/0 http_access deny a

Re: squid and different parents for different procotols?

-parent allow ftp? It should work if your goal is: * send http traffic to junkbuster * send ftp traffic to ftp-parent * use neither of them for other protocols --- Henrik Nordstrom Spare time Squid hacker

Re: The Squid Cache died.

... That is an "limitation" of the OS used, and not Squid. Some OS:es refuses to dump core on daemon processes that have changed user id (started as root, then switched to another user id). Some strict ones even refuses to dump core if there is no associated terminal. --- Henrik Nordstrom Spare time Squid hacker

Re: Sun and Squid Cache

paramenters when filesystems are build on early patchlevels of 2.6). --- Henrik Nordstrom Spare time Squid hacker Rob Merkwitza wrote: I am hoping somebody can help me. I am running Sun 2.6 with Squid 2.1 RELEASE. It has been running fine for 2 months but now it tells me that my cache is full

Re: ENC: Performance

e swithces are embedded in configure. Run configure --help to get a list of all switches and their descriptions. --- Henrik Nordstrom Spare time Squid hacker

Re: Changing the error screens from Squid

is available in the RedHat contrib area I think, but it is very easy to rebuild Squid from source as well). Error templates by default in install-dir/etc/errors (usually /usr/local/squid/etc/errors) --- Henrik Nordstrom Spare time Squid hacker

Re: cache_peer_domain examples

cache1_domain --- Henrik Nordstrom Spare time Squid hacker

Re: Netscape stays blocked

with the HTTP specifications for proxies. --- Henrik Nordstrom Spare time Squid hacker

Re: Can't start squid, help needed

Can you run dnsserver manually? Can the user you have configured Squid to run as run dnsserver manually? To test dnsserver manually, start it without arguments and then type a host name. You should receive back a record with the IP information for that host. --- Henrik Nordstrom Spare time

Re: Few quick questions

this. This will be especially true if using Squid 2.2 since false hits are now supposedly handled properly. The sucking parent can now be denied miss_access on all peers to avoid risking wasting any external bandwidth on this procedure, and some simple never_direct rules stops the parent from going direct. --- Henrik

Re: Can't start squid, help needed

starting squid, when I run squid -k check I still get the error message "no ruuning copy". Then it is probably not running. See squid/logs/cache.log (or ps listing) --- Henrik Nordstrom Spare time Squid hacker

Re: squid cache

mailinglist. -- Henrik Nordstrom Spare time Squid hacker

Re: Interacting with SQUID thru a script

. The client program distributed with Squid can be used to send these requests. --- Henrik Nordstrom Spare time Squid hacker

Re: ENC: Performance

, and to ask on squid-users if unsure. Most things not enabled by default are either experimental, under development or point features not interesting for common setups. Others are for enabling it to build on platforms not yet supported (this is especially --enable/disable-poll). -- Henrik

Re: Sun and Squid Cache

is a sign of improvement from Sun rather than something to blaim on someone, as it now is supposed to handle fragmented filesystems better without the need of manual tuning to space optimization. -- Henrik Nordstrom Spare time Squid hacker

Re: number of Cache Directories

on the least filled 3/4 disks (those marked as selected in cachemgr). --- Henrik Nordstrom Spare time Squid hacker

Re: Transparent Proxy

redirect traffic destinated for us ipfwadm -I -a accept -D this.server.name accept # Redirect port 80 to Squid on all other interfaces ipfwadm -I -a accept -P tcp -D 0.0.0.0/0 80 -r 9688 --- Henrik Nordstrom Spare time Squid hacker

Re: Client IP obtainable when using squid

# this: # # X-Forwarded-For: 192.1.2.3 # # If you disable this, it will appear as # # X-Forwarded-For: unknown # #forwarded_for on --- Henrik Nordstrom Spare time Squid hacker

Re: Squid Memory Usage

as more requests are processed. --- Henrik Nordstrom Spare time Squid hacker

Re: Accel Mode - Alternate Hosts and Peering

ling from being sent to a sibling. These loops are quite harmless but clutters up the log files and may cause a tiny performance degration. --- Henrik Nordstrom Spare time Squid hacker

Re: 'log

Fre de Vries wrote: Is there a way to log all client ip's and destination url's that are actually blocked when someone try's to access one of the blocked url's It is in you access log. HTTP code TCP_DENIED/403 --- Henrik Nordstrom Spare time Squid Hacker

Re: TCP_MISS

/squid.nlanr.net - Note that the HTTP code above is 304 ("Not modified"). What you are seeing above is a downstream cache (child proxy or browser cache) has the object cached and validates it's cache. Squid can't currently cache these replies unless it already has the full object in cache.

Re: [squid-users] Re: Squid Memory Usage

he network. All hits which hasn't recently (cache_mem LRU) been fetched from the network is always sent from disk. --- Henrik Nordstrom Spare time Squid hacker

Re: Use SQUID just as a redirector

S Ramakrishnan wrote: Are there other lightweight protocol redirectors available that I may use for HTTP? If your goal is to relay HTTP requests to another proxy then even a simple TCP plug daemon will do the task fine as long as the proxy is up and running.. --- Henrik Nordstrom Spare time

Re: SQUID and y2k

Socrates Tatunay wrote: Hi again! how about Y2k compliance...who's the governing body for the y2k compliance of SQUID...specifically SQUIDv1.1.21? Tnx! 1.1.21 has some known minor Y2K issues. Please consider upgrading to a supported release. --- Henrik Nordstrom Spare time Squid hacker

Re: Squid Memory Usage

Jens-S. Voeckler wrote: Hmm, I didn't see any difference for MISSes when I activated the Solaris "forcedirectio" mount option (since 2.6) which is said to transfer from user memory to io without a kernel copy. But then, (a) it was a lab environment and (b) I didn't look at the effects on

Re: bandwidth limit

somewhere, but you are most likely better off upgrading to Squid 2 (even if you don't use delay pools) unless you have very specific reasons to why you should use Squid 1.X. --- Henrik Nordstrom Spare time Squid hacker

Re: ACLs - a seriously weird thing

. --- Henrik Nordstrom Spare time Squid hacker

Re: Actual value IP address?

. --- Henrik Nordstrom Spare time Squid hacker

Re: Actual value IP address?

like most URL related issues this can be solved by using a redirector or a PAC script. No need to add special cases to Squid for handling a non-standard URL format rarely used for any legal / relevant information. --- Henrik Nordstrom Spare time Squid hacker

Re: custom squid

in client_side.c, but there are a lot of complications when altering the object data.. --- Henrik Nordstrom Spare time Squid hacker

Re: access control via external program?

allow acl1 acl2 acl3 http_access deny acl4 acl5 http_access allow acl6 acl7 is allow if acl1 AND acl2 AND acl3 OR deny if acl4 AND acl5 OR allow if acl6 AND acl7 OR deny --- Henrik Nordstrom Spare time Squid hacker

Re: cache.log

Irfan Akber wrote: I have the following entry in cache.log 1998/12/08 21:15:21| pumpRestart: NO: mem-inmem_lo == 1387 What does it mean. I am using squid2.0.PATCH2 That a POST/PUT request failed and Squid could not retry the request since it had already processed some of it. --- Henrik

Re: not cached local

Chris Joyce wrote: both as parents and this works , but I'd like to cache local , can I do this ? It does this by default unless you tell it not to (by using the no_cache or proxy-only directives). --- Henrik Nordstrom Spare time Squid hacker

Re: not cached local

Chris Joyce wrote: It does this by default unless you tell it not to (by using the no_cache or proxy-only directives). Other parameters affecting caching is cache_mem, and of course the size of your cache_dir.. --- Henrik Nordstrom Spare time Squid hacker

Re: Squid 2.0.PATCH2

transparent proxy setup. It should not redirect requests sent by Squid back to Squid. --- Henrik Nordstrom Spare time Squid hacker

Re: cache_effective_user

Fre de Vries wrote: I install squid-2.1-2.i386.rpm on RedHat5.2 with rpm -i as usual. Perhaps the old setresuid buisness with RedHat is back.. try env ac_cv_func_setresuid=no ./configure --prefix=... make clean make install --- Henrik Nordstrom Spare time Squid hacker

Re: Proxying PHP Pages

explicit expiration times as much as possible. --- Henrik Nordstrom Spare time Squid hacker

Re: TCP_SWAPFAIL_MISS

have a message in your systems messages or syslog file, or on the console. If the error is caused by (2) then Squid needs to be debugged but I have not yet heard any other people reporting this with 2.1.PATCH1. --- Henrik Nordstrom Spare time Squid hacker

Re: Squid 2.0.PATCH2

with Squid 2. See my Squid page for a alternative approach http://hem.passagen.se/hno/squid/ --- Henrik Nordstrom Spare time Squid hacker

Re: Any way to mention another proxy to fetch data

Waseem Ashraf wrote: Is there any way to specify another proxy address in squid, so that our squid proxy can fetch data through an upstream proxy. see cache_peer in squid.conf. (RTFM) --- Henrik Nordstrom Spare time Squid hacker

Re: Proxying PHP Pages

shness lifetime using a heuristic. If the value is greater than 24 hours, the cache must ... --- Henrik Nordstrom Spare time Squid hacker

Re: FORWARDING ERROR

. Basically you need to have miss_access on any siblings to never get this message. Hopefully this gets resolved any time now. --- Henrik Nordstrom Spare time Squid hacker

Re: Problem with FTP in 2.1P1 *AND* P2

is between ftpStart and ftpDataTransferDone or ftpFail. --- Henrik Nordstrom Spare time Squid hacker

Re: Proxying PHP Pages

transparent proxying may seem to work for some it has some major drawbacks, the primary one being that it makes a big mess of TCP/IP, the secondary one is that end users are not aware that there is a proxy in between them and the origin site. --- Henrik Nordstrom Spare time Squid hacker

Re: Unidentified subject!

polite thing to do, and even worse if you'd like to hide it from your clients. You can customise the error messages to look any way you like. See squid/etc/errors/ --- Henrik Nordstrom Spare time Squid hacker

Re: Squid takes so much bandwidth ?

what taking my bandwidth ? Add the following to your squid.conf: quick_abort_min 0 half_closed_clients off In my opinion at least the first one should be the default setting, but currently it isn't. Please ask again if this does not help. --- Henrik Nordstrom Spare time Squid hacker

Re: Proxying PHP Pages

(and preferably instructions on how to do so) then you do not need to bother with any of these TCP/IP problems, and you would probably get about the same amount of support calls if the page is designed properly. --- Henrik Nordstrom Spare time Squid hacker

Re: SSL to virtual host

to the origin site (or parent proxy if not allowed to go direct). CONNECT is a method browsers uses to open fully transparent tunnels to origin servers for protocols not supported by the proxy (mainly SSL which can't be proxied like HTTP). --- Henrik Nordstrom Spare time Squid hacker

Re: parent proxy is not used

.PATCH2) to get this working smoothly as the old Squid 1.X is a bit limited here (mostly all or nothing firewalled).. --- Henrik Nordstrom Spare time Squid hacker

Re: Raid0 vs Linear vs Multiple Cache Dirs

distribution to one of the disks at a time. --- Henrik Nordstrom Spare time Squid hacker Stephen Anderson wrote: Simple question, hard answer: 1 System. 128 MB RAM 3 x 1 Gig Drives (independant controllers) Which is best for performance? SW-Raid0, SW-Linear, or simply 3 cache-dirs? Thanks

Re: Nasty Squid crash under linux

normal. --- Henrik Nordstrom Spare time Squid hacker

Re: what is ipcacheChangeKey

. --- Henrik Nordstrom Spare time Squid hacker

Re: store.log oddity [patch]

(int) reply-expires, - strBuf(reply-content_type) ? strBuf(reply-content_type) : "unknown", + strLen(reply-content_type) ? strBuf(reply-content_type) : "unknown", reply-content_length, (int) (mem-inmem_hi - mem-reply-hdr_sz), RequestMethodStr[mem-m

Re: deny_info diretive

Ethy H Brito wrote: I can't get deny_info working as expected. http_deny sex all deny_info uses the last acl matched. In this case that is "all". You probably want http_access deny all sex or simplified to http_access deny sex (having all in an access line is redundant..)

Re: Solution: Ftp icons

functioning. --- Henrik Nordstrom Spare time Squid hacker

Re: TCP_MISS

. --- Henrik Nordstrom Spare time Squid hacker Andres Konow wrote: HTTP/1.0 200 OK Date: Thu, 25 Feb 1999 05:25:45 GMT Server: Apache/1.3.3 (Unix) mod_oas/4.61 Content-Type: text/html Age: 0 X-Cache: MISS from myproxy.com Proxy-Connection: close ... And the log files show the TCP/200

Re: Squid School

but with different ports. A peer is identified by its hostname and http port. --- Henrik Nordstrom

Re: FTP ASCII/BINARY problem

on the right of the directory listing. The default mime.conf provides a binary download icon (;type=i) for all types which uses ASCII transfer mode. --- Henrik Nordstrom Spare time Squid hacker

Re: Logging and knowing which section created a log level entry

easy to know which log section to reduce. To do that you have to change the code / debug macros used. --- Henrik Nordstrom Spare time Squid hacker

Re: need help analyzing logs

is selected, but the reply is from www-cache. The second request (ftp) first selects www-cache, then selects junkbuster.. --- Henrik Nordstrom Spare time Squid hacker

Re: Authentication questions problems

login. What you can do, and what you proposed your self, is to make an authenticator which remembers that the login has been used, and denies access. This requires some small modifications to ncsa_auth, and a appropriate tuning of authenticate_ttl. --- Henrik Nordstrom Spare time Squid hacker

Re: Changing the IP of a web site while Squid is running !

squid to refresh or to reload one or more URLs immediately in order to update the new IP of a web site ? Do a forced reload of a object on the site (pragma: no-cache, -r option to the Squid client program) --- Henrik Nordstrom Spare time Squid hacker

Re: I/O error when make swap directory

the wron error code when Squid is not allowed to create the directories. 3. A squid bug? --- Henrik Nordstrom Spare time Squid hacker

Re: FTP Problem with one particular site

s of Squid correctly sends the FTP servers error message when FTP server refuses connections. --- Henrik Nordstrom Spare time Squid hacker

Re: Connection Reset By Peer Errors

to the ethernet addresses to determine by which path the packet arrived. --- Henrik Nordstrom Spare time Squid hacker Ben Kohn wrote: Ok, after doing some tcpdump, it looks like when the connection reset by peer error occurs during transparent proxying the packets are moving, but they aren't moving

Re: FTP PUT Problem

d such request from Netscape, result is depending of file size. Yes, that is what I would expect. Many browsers only present error messages it is successfully could sent the complete request to the network. --- Henrik Nordstrom Spare time Squid hacker

Re: 2.1-PATCH2: strange swap directories usage

objects) sent throught your Squid before the next top level directory is used. --- Henrik Nordstrom Spare time Squid hacker

Re: Required machine spec. for 20 clients?

. --- Henrik Nordstrom Spare time Squid hacker

Re: transparent proxy on Slackware

ransparent proxying on Linux or any other OS where getsockname() returns the real destination IP address in a transparent proxy setup. --- Henrik Nordstrom Spare time Squid hacker

Re: FTP ASCII/BINARY problem

mimetype to application/binary 3. or use the download icon for downloading the file if the browser insist on CR/LF translation. --- Henrik Nordstrom Spare time Squid hacker

Re: client -P and PUT method

equest. -m is for selecting which method the client command uses. There are a number of other methods where a request body is needed (POST is a obvious example). --- Henrik Nordstrom Spare time Squid hacker

Re: privileged port denies access to ftp icons

I have some more ideas on this issue. You may have ACL lines which prevents the client from fetching the icons. One likely case is that you have enabled the Safe_ports ACL in the example squid.conf. --- Henrik Nordstrom Spare time Squid hacker Juergen Obermann wrote: Juergen Obermann wrote

Re: How to get things implemented in Squid

(with the possible exception of when a user needs something and makes sure it is done by paying someone to do it). --- Henrik Nordstrom Spare time Squid hacker

Re: acl w/ hashed database?

. Redirectors can be used for global access control. --- Henrik Nordstrom Spare time Squid hacker

Re: Squid bug - Or machine problem?

increases slightly as more and more objects get stored to disk. This may be the reason why things looked good to begin with, and now crashes. See also the Squid FAQ for information on memory tuning, both Squid tuning and operating system tuning. --- Henrik Nordstrom Spare time Squid hacker

Re: ftp not passive retrieval by squid

the firewall instead. --- Henrik Nordstrom Spare time Squid hacker

Re: acl w/ hashed database?

l dst_word1_blocked dstdomain "/usr/local/squid/etc/word1.domains" http_access deny dst_word1 dst_word1_blocked Also make sure your domain list is NOT sorted on reverse domain name as that would yield the worst splay tree. Have the domain list in dictionary sorted order or random order. --- Henrik Nordstrom Spare time Squid hacker

Re: acl on reply codes?

IBLE_CGI_ERRORS reply_code 505 no_cache INVISIBLE_CGI_ERRORS Errors are negatively cached. Set negative cache timeout to 0 and errors will not be cached. --- Henrik Nordstrom Spare time Squid hacker

Re: Multiple hosts in 'acl dst' directive

Serguei V. Melekhov wrote: acl sex dst www.penthouse.com penthouse.com www.playboy.com playboy.com acl sex1 gives only two hosts but denies 4 hosts? Am I doing something wrong? If I am not mistaken the above is 2 hosts with 4 domain names (one name and one alias for each host). --- Henrik

Re: Netscape and explore ask's for password for both ftp and http

proxy settings closely. Browsers considers two proxies with different case (or different amount of local domain) as to different proxies and asks for a new password. --- Henrik Nordstrom Spare time Squid hacker

Re: Doing Transparent proxying and get this error

See the Squid FAQ on transparent proxying. In short: httpd_accel_host virtual httpd_accel_uses_host_header on --- Henrik Nordstrom Spare time Squid hacker Mahmood Haq wrote: While trying to retrieve the URL: /cgi-bin/cachemgr.cgi The following error was encountered: Invalid URL

Re: (another?) Not currently OK to rewrite swap log

would recommend doing frequently if you have a large cache. --- Henrik Nordstrom Spare time Squid hacker

Re: Making FTP Uploads through Squid

"Upload file" from the Netscape File menu to send a file to the FTP server throught the proxy. The file appeared as expected in the current directory on the FTP server. --- Henrik Nordstrom Spare time Squid hacker

Re: HELP: Squid2.1P2, acls, auth...

Unfortunately proxy_auth is "broken" in Squid 2.1, and always accepts all users with a valid password. Patch available from http://hem.passagen.se/hno/squid/ or wait for Squid 2.2 to be released. --- Henrik Nordstrom Spare time Squid hacker Ingo Neis wrote: acl internet-users

Re: SPA software problem...

[EMAIL PROTECTED] wrote: gcc: installation problem, cannot exec `cc1plus': No such file or directory make: *** [cache.o] Error 1 Looks like you haven't installed the C++ part(s) of your gcc compiler. --- Henrik Nordstrom Spare time Squid hacker

Re: High number of context switches.

operations to threads, requiring about 2 context switches per I/O operation). --- Henrik Nordstrom Spare time Squid hacker

Re: Configure error messages?

selecting different authentication failure pages only works in Squid 2.2 (when released). Earlier Squid versions used a hard coded error page name for authentication. --- Henrik Nordstrom Spare time Squid hacker

Re: FTP Query

ly contact the inner proxy for requests to DMZ servers. 2c) Allow clients to fetch icons directly from the DMZ proxy. --- Henrik Nordstrom Spare time Squid hacker

Re: Forceing a Subnet to one Webpage

this error message when a user tries to access the proxy from the old dialin ports. acl old_dial_in_port src 1.2.3.4/24 http_access deny old_dial_in_port deny_info ERR_OLD_DIALIN_PORT old_dial_in_port --- Henrik Nordstrom Spare time Squid hacker

Re: proxy_auth again... :-(

or invalid password in a proxy_auth ACL processing as "not enought information to evaluate", and requests the user to (re)authenticate themselves. No further ACL processing is done. --- Henrik Nordstrom Spare time Squid hacker

Re: errorTryLoadText (permissions)

ion on any of the directories above the files. cd /usr/local/src/www/squid/etc/errors/ chmod a+rx . cd .. chmod a+rx . ... (repeated 5 times) --- Henrik Nordstrom Spare time Squid hacker

Re: proxy_auth again... :-(

ncsa_auth with a "standard" crypt() function, or change htpasswd to use the same method as your system. --- Henrik Nordstrom Spare time Squid hacker

Re: proxy_auth

exits the browser. It is however theoretically possible to implement a system with time-limits, by implementing the limit in the proxy_auth authentication program (and use a "short" authentication TTL in squid.conf). --- Henrik Nordstrom Spare time Squid hacker

Re: Limit on logline size

on vsnprintf()? It that is the case, try using the (v)snprintf function delivered with the Squid sources. (env ac_cv_func_vsnprintf=no ./configure ... ;make clean ; make install) --- Henrik Nordstrom Spare time Squid hacker

Re: Squid DNS Problem

be worthwile to upgrade to latest Linux 2.2 + latest ac patch if requiring a lot of filedescriptors. --- Henrik Nordstrom Spare time Squid hacker

Re: cache-digest against failover

alive again. This probe starts 30 seconds after the first failing request and is repeated every 60 seconds until the peer answers. When this probe succeds in establishing a TCP connection to the peer the HTTP failure counter mentioned above is reset. --- Henrik Nordstrom Spare time Squid hacker

  1   2   3   4   >