RE: [squid-users] Special needs for redirector

2006-12-07 Thread Emil Ungurean
Henrik, For simplicity and testing I switched the redirector to a simpler program, just for testing, the code is as fallows: #!/usr/bin/perl $|=1; while () { print 301:https://ssl-id1.de/elektrokontakt-floss.de/ssl/pm/index.php\n;; } The browser, well it shows nothing just an error. Here's

Re: [squid-users] WCCP on Squid 2.6 (URGENT)

2006-12-07 Thread Dumpolid Exeplish
After spending almost two weeks in testing different squid WCCP configurations. i am able to post some results. First of all i would like to discuss my setup. We have a clientel bas of about 1000 users simutaneously logged it. We assigned public ip addresses to each of these customers. Network

[squid-users] Rép : [Bulk] Re: [squid-users] Squid as interce ption proxy with pf

2006-12-07 Thread Ghislain Garçon
I check the port in squid.conf and in my pf.conf. I have the following line in my squid.conf : http_port 3128 transparent Is there a specific configuration for FreeBSD in order to set squid as an interception proxy? Thanks. Regards, Ghislain Le 6 déc. 06 à 22:54, Henrik Nordstrom a écrit

Re: [squid-users] R�p : [Bulk] Re: [squid-users] Squid as interception proxy with pf

2006-12-07 Thread Agung T. Apriyanto
--- Ghislain Garçon [EMAIL PROTECTED] wrote: I check the port in squid.conf and in my pf.conf. I have the following line in my squid.conf : http_port 3128 transparent Is there a specific configuration for FreeBSD in order to set squid as an interception proxy? Thanks. Regards,

Re: [squid-users] WCCP on Squid 2.6 (URGENT)

2006-12-07 Thread Adrian Chadd
On Thu, Dec 07, 2006, Dumpolid Exeplish wrote: clients = 6509 (catalyst) = NetEnforcer = 3550 (Switch) = Internet || DMZ Looks right. The netenforcer is going to

Re: [squid-users] wbinfo not found in cache.log [SOLVED]

2006-12-07 Thread John Halfpenny
Hi Henrik. You're right. However, the wbinfo_group.pl helper worked perfectly well, blocking members of groups i specify. Turning on the debug options on the perl script gave this output in the cache.log file: Got john.halfpenny staff from squid wbinfo: not found wbinfo: not found

[squid-users] Strange chars

2006-12-07 Thread Edinilson J. Santos
We have a terminal opened to show cache.log (with tail -f cache.log) But, for some reason, after some time, all screen appears distorced, with control chars and is impossible to read anything. Even clear or logout can restore normal chars. Any tip ? Regards Edinilson

Re: [squid-users] Squid cannot start because it can't open 'on' for writing...

2006-12-07 Thread dhottinger
Quoting Marcello Romani [EMAIL PROTECTED]: Hi, I'm having a strange problem with squid. When I stop and restart the program, it fails to start; cache.log says it can't open on for writing, and suggests to check that the parent directory be writable by the user squid. I don't think this is

Re: [squid-users] LDAP authentication?

2006-12-07 Thread Jaime
On Dec 4, 2006, at 9:04 PM, Henrik Nordstrom wrote: There is a man page for squid_ldap_auth trying to explain most uses.. man -M /usr/local/squid/man squid_ldap_auth Thanks. I'll re-install during some network down time and make sure that this stuff is installed this time. Apparently, I

[squid-users] Squid - cache_peer configuration for satellite downlink (only) access

2006-12-07 Thread Nataniel Klug
Hello, I have a linux box that is running squid very well but now I have to make this cache works with another cache in a configuration as cache_peer. The problem is that the other cache is a satellite connection that only accepts download. All my upload is going through a full telecom

Re: [squid-users] Squid - cache_peer configuration for satellite downlink (only) access

2006-12-07 Thread pujo mulyono
it was not squid issue, but routing issue. you must using ip dvb while requesting to those cache_peer, every traffic out with ip dvb will return from sattelite, otherwise it wont works at all. --- Nataniel Klug [EMAIL PROTECTED] wrote: Hello, I have a linux box that is running squid very

Re: [squid-users] WCCP on Squid 2.6 (URGENT)

2006-12-07 Thread Dumpolid Exeplish
So your confusion isn't that its working, but Netenforcer isn't reporting any traffic savings? Precisely, NetEnforcer is not giving a physical (or logical) report on badndidw usage reduction i got these values from the Cache Manager CGI sample_start_time = 1165496653.636038 (Thu, 07 Dec 2006

Re: [squid-users] R�p : [Bulk] Re: [squid-users] Squid as interception proxy with pf

2006-12-07 Thread pujo mulyono
in pf.conf you must set redirection rules : redirect on eth_port protocol_type from user_ip_address to any port 80 - proxy_ip_address port for example : redirect on rl0 proto tcp from 192.168.1.0/24 to any port 80 - 127.0.0.1 3128 see pf.conf manual to make sure your configuration ---

[squid-users] Squid freebsd error signal 4

2006-12-07 Thread Erick Dantas Rotole
I have 2 squids working together using freebsd carp an round Robin to balance the load. When server 1 gets all the load i have no proplem, but when server 2 gets all the load squit stops with signal 4. Server 1 has 2 processor and server 2 has 1 processor. Can this error be caused due to high

Re: [squid-users] WCCP on Squid 2.6 (URGENT)

2006-12-07 Thread Adrian Chadd
On Thu, Dec 07, 2006, Dumpolid Exeplish wrote: So your confusion isn't that its working, but Netenforcer isn't reporting any traffic savings? Precisely, NetEnforcer is not giving a physical (or logical) report on badndidw usage reduction I still don't get this. Can you be more specific

RE: [squid-users] WCCP on Squid 2.6 (URGENT)

2006-12-07 Thread Alejandro Decchi
Hello my friends. Someone known a free software to scan all traffic smtp and pop3 before to be send to the outlook express. Because I have an ISP that give me mail services but he has a lot spam and I would like to have a program to scan for example something like this: ISP Mail Service

Re: [squid-users] squid not caching anything to disk

2006-12-07 Thread pujo mulyono
see this line in your squid.conf : cache_peer 203.12.22.34 parent 8080 0 proxy-only no-query default means all object get from parent proxy would not saved to local disk. in other side, your squid standart configuration will bypass parent for all non cached object, so there is no cached file on

Re: [squid-users] WCCP on Squid 2.6 (URGENT)

2006-12-07 Thread Jakob Curdes
Alejandro Decchi schrieb: Hello my friends. Someone known a free software to scan all traffic smtp and pop3 before to be send to the outlook express. Because I have an ISP that give me mail services but he has a lot spam and I would like to have a program to scan for example something like

Re: [squid-users] Squid freebsd error signal 4

2006-12-07 Thread Mark Elsen
On 12/7/06, Erick Dantas Rotole [EMAIL PROTECTED] wrote: I have 2 squids working together using freebsd carp an round Robin to balance the load. When server 1 gets all the load i have no proplem, but when server 2 gets all the load squit stops with signal 4. Server 1 has 2 processor and server 2

[squid-users] Secure communication between browser and squid (but no plaintext)

2006-12-07 Thread kemiche . carceller
Hello, I'm trying to set up a squid proxy with a secure LDAP authentication (secure communication between browser (firefox) and squid also). My LDAP server stores passwords in MD5 scheme for the moment, an will store passwords in sha1 scheme in a few weeks. I'm using squid 2.6 STABLE 5-1 and

Re: [squid-users] R�p : [Bulk] Re: [squid-users] Squid as interception proxy with pf

2006-12-07 Thread Agung T. Apriyanto
--- Ghislain Garçon [EMAIL PROTECTED] wrote: Thanks, i've already read this article but as you said, port tree install squid-2.5. I'd like to test 2.6 and 3.0 and it's look like with 2.6 and 3.0 there is a problem... or FreeBSD needs non documented tips, I don't known.

[squid-users] load balance originservers

2006-12-07 Thread Btobew
hi all, I am using squid 2.6 in accel mode and I want to load balance some requests to diferent originservers like: users (example.com) --- apache --- squid --- 150.1.2.3.4|150.1.2.3.5|150.1.2.3.6 in my config I am using: cache_peer 150.1.2.3.4parent 80 0 no-query

Re: [squid-users] squid not caching anything to disk (or memory either) (still)

2006-12-07 Thread Jason Maher
Hello all, Thanks for your response Pujo, Unfortunately, though your suggestion makes perfect sense, it has not fixed the problem! I removed 'proxy-only' from the cache_peer line and squid is still doing no caching at all. In addition, and since my first post, I have tried some other things

RE: [squid-users] Special needs for redirector

2006-12-07 Thread Henrik Nordstrom
tor 2006-12-07 klockan 09:23 +0200 skrev Emil Ungurean: That's exactly what I did, and it doesn't work, Squid version is 2.6.STABLE4. Works for me.. Try client_persistent_connections off. Some browser versions is a bit buggy and can not handle rapid transitions from http to https on the same

Re: [squid-users] Squid as interception proxy with pf

2006-12-07 Thread Henrik Nordstrom
tor 2006-12-07 klockan 09:43 +0100 skrev Ghislain Garçon: I check the port in squid.conf and in my pf.conf. I have the following line in my squid.conf : http_port 3128 transparent Ok. Is there a specific configuration for FreeBSD in order to set squid as an interception proxy? If I am

Re: [squid-users] LDAP authentication?

2006-12-07 Thread Henrik Nordstrom
tor 2006-12-07 klockan 07:18 -0500 skrev Jaime: Yes. I already set up SquirrelMail's address book to search the directory and this did not require any username/password pair. Then apply the same knowledge to ldapsearch to explore the structure of your LDAP directory.. Configuring

Re: [squid-users] squid not caching anything to disk (or memory either) (still)

2006-12-07 Thread Henrik Nordstrom
fre 2006-12-08 klockan 09:07 +1100 skrev Jason Maher: acl QUERY urlpath_regex cgi-bin /? That matches everything (any string maybe containing a /) you should use \ above, making the regex match a literal ? Regards Henrik signature.asc Description: Detta är en digitalt signerad

Re: [squid-users] Weird Counter behavior

2006-12-07 Thread Henrik Nordstrom
ons 2006-12-06 klockan 19:49 -0300 skrev Pablo García: Hi, I have a Load balancer distributing request across servers, the statistics of the LB shows that my squid server is serving ~400 req/s, an mrtg polling snmp info against the squid is showing ~30 req/s and the squidclient mgr:5min

RE: [squid-users] Special needs for redirector

2006-12-07 Thread Henrik Nordstrom
tor 2006-12-07 klockan 10:22 +0200 skrev Emil Ungurean: Henrik, For simplicity and testing I switched the redirector to a simpler program, just for testing, the code is as fallows: 1165479605.632 0 192.168.1.13 TCP_MISS/301 188 CONNECT ssl-id1.de:443 - NONE/- - Well.. you should not

Re: [squid-users] Squid cannot start because it can't open 'on' for writing...

2006-12-07 Thread Henrik Nordstrom
tor 2006-12-07 klockan 08:37 +0100 skrev Marcello Romani: When I stop and restart the program, it fails to start; cache.log says it can't open on for writing, and suggests to check that the parent directory be writable by the user squid. Check your squid.conf. QUite likely you have set some

Re: [squid-users] Strange chars

2006-12-07 Thread Alexandre Correa
cache.log dump all data, some apps like emule, shareaza use a random ports or custom ports, when apps use port 80, redirect to squid and squid is only http proxy... and squid dumps the header of request on cache.log don´t worry !!! -- Sds. Alexandre J. Correa Onda Internet / OPinguim.net

Re: [squid-users] tproxy performance overhead ?

2006-12-07 Thread Adrian Chadd
On Wed, Dec 06, 2006, Pranav Desai wrote: Hello All, Does anyone have any numbers on how much overhead tproxy will add ? Basically, how much drop in performance would we see if tproxy is enabled. I imagine that tproxy will have to do some lookup and hence should incur some overhead. I

Re: [squid-users] Secure communication between browser and squid (but no plaintext)

2006-12-07 Thread Henrik Nordstrom
tor 2006-12-07 klockan 17:10 +0100 skrev [EMAIL PROTECTED]: I'm trying to set up a squid proxy with a secure LDAP authentication (secure communication between browser (firefox) and squid also). Difficult, as neither MSIE or Firefox supports SSL encrypted proxy connections.. My LDAP server

Re: [squid-users] load balance originservers

2006-12-07 Thread Henrik Nordstrom
tor 2006-12-07 klockan 15:04 -0200 skrev Btobew: in my config I am using: cache_peer 150.1.2.3.4parent 80 0 no-query originserver no-digest name=org1 no-netdb-exchange cache_peer 150.1.2.3.5parent 80 0 no-query originserver no-digest name=org2

Re: [squid-users] ~5% of cache hits very slow

2006-12-07 Thread Henrik Nordstrom
tis 2006-12-05 klockan 15:30 -0800 skrev Ben Drees: test server. There is no fancy authorization happening. Are there any well known configuration issues that could be causing this? Even if the hits are on disk rather than in memory, the TCP_IMS_HIT case should only need to consult an

Re: [squid-users] LDAP authentication?

2006-12-07 Thread Jaime
On Dec 7, 2006, at 5:27 PM, Henrik Nordstrom wrote: Then apply the same knowledge to ldapsearch to explore the structure of your LDAP directory.. Will do. Thanks for the pointer. Jaime

Re: [squid-users] tproxy performance overhead ?

2006-12-07 Thread Alexandre Correa
tproxy not work for me my four proxies servers using kernel compiled with tproxy, 64 bits for EMT64 ... server crash after 3 hours +- kernel 2.6.18.5 On 12/7/06, Adrian Chadd [EMAIL PROTECTED] wrote: On Wed, Dec 06, 2006, Pranav Desai wrote: Hello All, Does anyone have any numbers on

Re: [squid-users] tproxy performance overhead ?

2006-12-07 Thread Adrian Chadd
On Thu, Dec 07, 2006, Alexandre Correa wrote: tproxy not work for me my four proxies servers using kernel compiled with tproxy, 64 bits for EMT64 ... server crash after 3 hours +- kernel 2.6.18.5 You're going to have to be a little more specific with server crash. Does anyone have

Re: [squid-users] tproxy performance overhead ?

2006-12-07 Thread Adrian Chadd
On Fri, Dec 08, 2006, Alexandre Correa wrote: server freeze... after some hours running... print a lot of error on screen and freeze... Can you extract some of these errors from logs (if possible) and post them here? Adrian -- - Xenion - http://www.xenion.com.au/ - VPS Hosting -