acl lookup_client_domain src_domain .nowhere
http_access deny lookup_client_domain
Now I rewritten squid.conf to use domain names and it still writes ips
to log
---
# grep -v ^# /etc/squid/squid.conf | grep -v ^$
http_port 213.24.8.66:3128
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY
On Fri, 17 Oct 2003, Christian Purnomo wrote:
BUT...Otherhost.mydomain.com contains static pages, with a few images.
I am seeing in the squid access log file that those images do not get
cached, I'm getting all TCP_MISS/304...
Clear your browser cache and things will look much better.
This
On Fri, 17 Oct 2003, Vladimir Dyakov wrote:
I've got dhcp server with dynamic zone which registers clients in
domain, so /etc/hosts is inappropriate
Then use DNS.
Regards
Henrik
Then use DNS.
So I do. But the problem is that I receive ips in log sometimes instead
of hostnames. Maybe it's a squid's bug - just tell and I will not bother
you any longer but will try to build the way around it.
--
Vladimir Dyakov
JSC INTERSYST
+7 (3422) 909116
[EMAIL PROTECTED]
# grep 192.168.128.55 /var/log/squid/access.log
1066363709.463 341036 192.168.128.55 TCP_MISS/206 8464871 GET
http://ftp.mozilla.org/pub/mozilla.org/mozilla/releases/mozilla1.5/src/mozilla-source-1.5.tar.bz2
- DIRECT/130.207.108.134 application/x-bzip2
By the way, it is not a problem of too
Okay, I have the following two systems:
Server:
Ultra 5, Solaris 8, gcc 2.95.2
Ultra 2, Solaris 9, gcc 2.95.3
Client:
WinXP, IE6SP1
Both are trying to compile and run Squid 2.5STABLE4 (20031016).
Both are running Samba 2.2.8a, and have successfully joined the
appropriate domains.
On the
On Fri, 17 Oct 2003, Vladimir Dyakov wrote:
By the way, it is not a problem of too slow work of gethostbyaddr()
requests. File matched above is 8Mb weight and was being downloaded for
about 10 minutes.
What TTL does your DNS records have?
Regards
Henrik
By the way, it is not a problem of too slow work of gethostbyaddr()
requests. File matched above is 8Mb weight and was being downloaded for
about 10 minutes.
What TTL does your DNS records have?
It varies between 1 hour and 12 hours.
--
Vladimir Dyakov
JSC INTERSYST
+7 (3422) 909116
Hi all,
I have squid with ldap auth activated, the authentication is
made through active directory (By user) and I have acl's only permitting
users that belong to one specified group to be able to browse.
What I wanted to know is if there is any kind of tool to monitor
the proxy
Hello all.
I would like to know _how_ do I have to configure squid to tell it that
accessing a defined site (mysite.org) doesn't have to be handled by
squid (that is, the server on mysite.org should see the client's IP
address and not squid's one).
Thank you!
Boniforti Flavio wrote:
Hello all.
I would like to know _how_ do I have to configure squid to tell it that
accessing a defined site (mysite.org) doesn't have to be handled by
squid (that is, the server on mysite.org should see the client's IP
address and not squid's one).
Your
If you want to see which users are using how much bandwidth in realtime then
u can use iptraf.
Or if u want them in log format then u can use sarg.
joel
- Original Message -
From: Nuno Ferreira [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, October 17, 2003 1:45 PM
Subject:
Henrik Nordstrom wrote:
Have you tried downloading the same files directly from the parent proxy?
Yes I did. And the facts don't change!
On Friday 17 October 2003 10:05 am, Boniforti Flavio wrote:
Henrik Nordstrom wrote:
Have you tried downloading the same files directly from the parent proxy?
Yes I did. And the facts don't change!
What is the nature of the corruption? Are the files correct up to a certain
point, and then
- Original Message -
From: Boniforti Flavio [EMAIL PROTECTED]
I cant understand the questionplz describe again.
If i have understood then this is the solution
This for the transparent proxy
If u want mysite.org not to server by squid but to be served directly.
iptables -t nat -A
Hi,
I'm trying to create an ACL to block some program that create an HTTP
Tunnel from my network.
Actually I'm trying to block HTTPort:
http://www.htthost.com/
It work quite well with all my proxy settings and it can authenticate
without problem with NTLM scheme.
I can try to find out wich
Hi
I,m using squid + windows 2000 + smb_auth for authenticating Windows domain
users. Now only user authentication is happening .Can I do both user as
well as IP
address authentication.
Scenario: User A having the IP address 10.10.10.1 can access proxy only
from his system and he cannot another
Antony Stone wrote:
What is the nature of the corruption? Are the files correct up to a certain
point, and then simply end, suggesting that the data stream got cut off, or
are there missing bytes within the file (so the resultant length is
shortened), or are some bytes changed (so the final
Joel wrote:
iptables -t nat -A PREROUTING -i $yourethernetcard -p tcp --dport 80 -j
REDIRECT --to-port 3128 -d ! mysite.org or give the ip address of the site.
This sounds to me like transparent proxying, ain't it?
On Fri, 17 Oct 2003, Boniforti Flavio wrote:
I would like to know _how_ do I have to configure squid to tell it that
accessing a defined site (mysite.org) doesn't have to be handled by
squid (that is, the server on mysite.org should see the client's IP
address and not squid's one).
This
On Fri, 17 Oct 2003 [EMAIL PROTECTED] wrote:
I,m using squid + windows 2000 + smb_auth for authenticating Windows
domain users. Now only user authentication is happening .Can I do both
user as well as IP address authentication.
Yes.
If you only have a few users then this can be done in
Henrik wrote:
This you have to tell to your browser. Once the request reaches Squid it
is too late to tell that it should not be sent to Squid..
This has always worked for me:
==snip==
//file proxy.pac
//Put this file on an internal webserver somewhere and set the URL
//as the location of your
On Fri, 17 Oct 2003, Boniforti Flavio wrote:
How is the username treated in it's whole process (from the input window
on the client's side to squid itself)? I mean, is it stored somewhere?
In a variable? Is this variable accessible in some way?
As I said the client software (i.e. browser)
On Friday 17 October 2003 10:32 am, Boniforti Flavio wrote:
Antony Stone wrote:
What is the nature of the corruption? Are the files correct up to a
certain point, and then simply end, suggesting that the data stream got
cut off, or are there missing bytes within the file (so the
Sounds good!
I tried the FAq and the documentation, but where can I find the details on
this?
(Sorry)
- Original Message -
From: Eduardo Elgueta [EMAIL PROTECTED]
To: Henk-Jan (squid) [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, October 17, 2003 12:27 AM
Subject: Re:
When using Samba-3 Squid should not be configured to
compile any winbind helpers (and thus does not need
to be told where the Samba sources is either). The
needed winbind helper is already installed as part of
Samba-3.
But Squid will still require --enable-auth=ntlm when you run
./configure
Configuring squid-2.5.STABLE4 till the today generatred source eith these
options:
[EMAIL PROTECTED] squid-2.5.STABLE4]#
./configure --prefix=/usr/squid --with-samba-sources=/root/samba-3.0.0/ --w
ith-pthreads
--enable-storeio=ufs,
diskd --enable-icmp --enable-delay-pools --enable-snmp
When is set icq to work via my squid proxy , sometimes it doesn't work and
sometimes it's intermitant..
Anyone got any ideas ?
Many Thanks
Gregory Machin
Hi again!
It's seems that noone on this list have a clue about this. But does
anyone know where you can turn to get some answers? Are there other
resources? Are there consultants that are experts in Squid? Yes we can
pay for some support. I guess this is the downside of Open Source...
Getting
Configuring squid-2.5.STABLE4 till the today generatred
source eith these
options:
[EMAIL PROTECTED] squid-2.5.STABLE4]#
./configure --prefix=/usr/squid
--with-samba-sources=/root/samba-3.0.0/ --w
ith-pthreads
--enable-storeio=ufs,
diskd --enable-icmp --enable-delay-pools --enable-snmp
MM wrote:
Hi again!
It's seems that noone on this list have a clue about this. But does
anyone know where you can turn to get some answers? Are there other
resources? Are there consultants that are experts in Squid? Yes we can
pay for some support. I guess this is the downside of Open
When you run the configure script, what numbers are reported to you for
the lines below:
checking Default FD_SETSIZE value... 1024
checking Maximum number of filedescriptors we can open... 1024
If the bottom one is 32768, then squid was compiled in with support for
up to that many open files.
when I run ./RunCache at my Slackware Kernel 2.4.22-grsec, squid returns me
the following error:
/var/squid/bin# /var/squid/bin/RunCache: line 35: 27206 file size limit
exceededsquid -NsY $conf $logdir/squid.out 2 1
Please, anybody can help me...
Marcos.
Hello! Allow me to get right to the point. I have 15 computers connected in an 100
Mbps Lan and a 512 Kbps DSL connection to the internet. The DSL modem also functions
as a router. The question is how can I Limit the bandwith to every computer so that
the connection from one computer does not
Hi there,
Is there way to use squid to intercept all http traffic on port 80, but
to route through to different back-end servers depending on the host
header.
i.e.
host1.domain.co.uk - web server 1
host2.domain.co.uk - web server 2
Reuben
Aristarchus wrote:
Hello! Allow me to get right to the point. I have 15 computers connected in an 100 Mbps Lan and a 512 Kbps DSL connection to the internet. The DSL modem also functions as a router. The question is how can I Limit the bandwith to every computer so that the connection from one
On Fri, 17 Oct 2003, MM wrote:
Hi again!
It's seems that noone on this list have a clue about this. But does
anyone know where you can turn to get some answers? Are there other
resources? Are there consultants that are experts in Squid? Yes we can
pay for some support. I guess this is
Any input on this is appreciated. I use elvtune to get read/write
latency.
What attribute do you folks define on fstab file for cache directories.
The default value for ext3 is defaults.
Do you think I improve I/O performance by using noatime attribute?
Thanks,
Nooshin
-Original
Hello group.
Does any one know the file extension of the file that downloads when a
user goes to the win update website?
I am referring to the file needed by Microsoft to scan the computer for
patches. This and other downloads seem to get through the squid server.
The one I hate the most is the
I'm using Linux Conectiva 8 with Squid on it, when the access.log hits 1,5
GB, Squid just stop with non reson, somebody knows with exist a patch for
that !
Thank u, Fred.
Frederico Guilherme Capute de Oliveira - DATAPREVDF wrote:
I'm using Linux Conectiva 8 with Squid on it, when the access.log hits 1,5
GB, Squid just stop with non reson, somebody knows with exist a patch for
that !
Thank u, Fred.
Hello,
Why do you want to use a access.log file which is
Henrik Nordstrom wrote:
On Thu, 16 Oct 2003, Christopher Arnold wrote:
and likewise if a request comes in to Accelerator-B, contact
Accelerator-A in the same fashion. I thought that a dual-sibling
relationship would accomplish this but from what I am observing there is
no ICP
On Friday 17 October 2003 6:40 pm, Alvaro Gordon-Escobar wrote:
Hello group.
Does any one know the file extension of the file that downloads when a
user goes to the win update website?
I am referring to the file needed by Microsoft to scan the computer for
patches. This and other
Hi ...
We are using Squid 2.5, and on peak times we have 100 users connected
Browsing ... And all goes Well , but a friend of mine in other
more big campus of my university, try squid but there are 700 users
connected on peak times, browsing ...
And after a while squid becomes very slow, and
On Fri, 17 Oct 2003, Lombardo Federico wrote:
Configuring squid-2.5.STABLE4 till the today generatred source eith these
options:
[EMAIL PROTECTED] squid-2.5.STABLE4]#
./configure --prefix=/usr/squid --with-samba-sources=/root/samba-3.0.0/ --w
ith-pthreads
Samba-3 includes it's own
A MacOS X developer support forum is probably appropriate place for this
kind of questions.
For Squid to use large amounts of filedescriptos it need to be able to
redefine FD_SETSIZE at compile time.
Regards
Henrik
On Fri, 17 Oct 2003, MM wrote:
Hi again!
It's seems that noone on this
On Fri, 17 Oct 2003, Marcos Andre wrote:
when I run ./RunCache at my Slackware Kernel 2.4.22-grsec, squid returns me
the following error:
/var/squid/bin# /var/squid/bin/RunCache: line 35: 27206 file size limit
exceededsquid -NsY $conf $logdir/squid.out 2 1
Your squid.out log file is
On Fri, 17 Oct 2003, Aristarchus wrote:
Hello! Allow me to get right to the point. I have 15 computers connected
in an 100 Mbps Lan and a 512 Kbps DSL connection to the internet. The
DSL modem also functions as a router. The question is how can I Limit
the bandwith to every computer so that
On Fri, 17 Oct 2003, Reuben Pearse wrote:
Hi there,
Is there way to use squid to intercept all http traffic on port 80, but
to route through to different back-end servers depending on the host
header.
Yes.
With Squid-2.5 the easiest method is to add the accelerated domains to
/etc/hosts
On Fri, 17 Oct 2003, Zand, Nooshin wrote:
Do you think I improve I/O performance by using noatime attribute?
Yes, a little bit.
noatime is useless on cache directories, and most other directories as
well for that matter. The use of the atime stamp is nearly non-existing
and not very reliable
On Fri, 17 Oct 2003, Alvaro Gordon-Escobar wrote:
Does any one know the file extension of the file that downloads when a
user goes to the win update website?
See access.log.
I am referring to the file needed by Microsoft to scan the computer for
patches. This and other downloads seem to
On Fri, 17 Oct 2003, Schelstraete Bart wrote:
Why do you want to use a access.log file which is bigger then 1,5Gb??
This is NOT good for the perfomance.
Squid performance does not really care, but on most systems there is a
magical limit at 2GB imposing a upper limit on how large files may
Hello folks...
How are you all.. Hope this is possible. If I run squid in as a normal proxy
people
who haven't set up proxy in their browsers/softwares cant access the net.
Also
those softwares where you cannot specify any proxy settings. So I decided to
use
transparent proxy. Now people who have
If u have setup transparent squid proxy then it doest matter.
People who have set there browsers to squid proxy server can surf the net.
plz check what they have inserted in there browsers setting.it should be
correct... .
which port is the squid listening the default 3128 ? or something
54 matches
Mail list logo
