Re: [squid-users] Authentication Hack

2008-03-04 Thread Dave Coventry
On Mon, Mar 3, 2008 at 7:24 PM, Michael Graham wrote: I think I missed a line out, try: external_acl_type ipauth %SRC /usr/local/squid/libexec/checkip acl ipauthACL external ipauth # -- This creates the ACL http_access allow ipauthACL Hi Michael, Thank you for your patience. Of

Re: RS: [squid-users] winbindd: Exceeding 200 client connections, no idle connection found

2008-03-04 Thread Francisco Martinez Espadas
Hi Elvar, i tried your suggestion (thanks, by the way) but it didn't work. I have (at last!) succeeded unistalling ubuntu and replacing it with centOS 5.1 wich has Samba Version 3.0.25b-1.el5_1.4 and Squid 2.6stable18. thanks. El ds 23 de 02 del 2008 a les 05:51 -0600, en/na Elvar va

[squid-users] internet access groups in Active Directory

2008-03-04 Thread Francisco Martinez Espadas
Hi people, i have a problem when I try to pass an user Active Directory group from Squid to Dansguardian. This is my scenario: 1. User clients are using dansguardan as proxy, with NTLM auth. 2. Squid is installed on the same server, with NTLM auth also. 3. In my Active Directory there are 3

[squid-users] Partially forwarding request to my parent

2008-03-04 Thread Luca Gervasi
Hello, I have a parent proxy which I use only for certain dstdomains, leaving all the remaining domains handled by my own local proxy. #Here i define my parent which i would forward the request for acls unipa and ieee cache_peer myparentproxy parent 3128 0 no-query proxy-only #Here are the

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-04 Thread Adrian Chadd
Hi everyone, I'm quite disappointed in the lack of feedback from the community over this. Its hard to figure out what people want if noone speaks up, so this is your time to speak up. Adrian On Wed, Feb 27, 2008, Mark Nottingham wrote: Hello Squid folk, I maintain Yahoo!'s internal

Re: [squid-users] Youtube video cache

2008-03-04 Thread Adrian Chadd
On Mon, Mar 03, 2008, Cassiano Martin wrote: Hi all! Did someone had success caching youtube videos? I tried it but it didnt worked for me. I followed all Adrian's steps, but no success at all. The trouble is that its a moving target and I'm having to try and keep things updated. I'm

Re: [squid-users] Youtube video cache

2008-03-04 Thread Cassiano Martin
Adrian Chadd escreveu: On Mon, Mar 03, 2008, Cassiano Martin wrote: Hi all! Did someone had success caching youtube videos? I tried it but it didnt worked for me. I followed all Adrian's steps, but no success at all. The trouble is that its a moving target and I'm having to try and

Re: [squid-users] Authentication Hack

2008-03-04 Thread Dave Coventry
My Bad. I had used $_ instead of STDIN in my Perl program. It still doesn't work, though: I get a blank page instead of my logon page. The Apache access.log and errors.log don't appear to have any entries. I'll investigate further...

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-04 Thread Marcus Kool
Well, I am interested in speed, features and ICAP. So I like -2 and -3 to merge. It seems to me that for the sake of being polite with each other we do not want to call the -2 / -3 issue a fork, but effectively it really is a fork. So here is my question back to the main maintainers: do you

Re: RS: [squid-users] winbindd: Exceeding 200 client connections, no idle connection found

2008-03-04 Thread Elvar
Francisco, Are you still exceeding max allowed connections based on what you put in local.h? Also, for you samba masters out there, is there a way to view the current number of winbind connections in use? I would be very interested in monitoring that and having myself paged once it hit a

[squid-users] Auth through HTTPS reverse proxy

2008-03-04 Thread Ben Hollingsworth
I've setup Squid 2.6.STABLE6 as a reverse proxy. It terminates SSL connections using a wildcard cert and then passes the connections to back-end servers using either HTTP or HTTPS. All works well for servers that don't require any authentication (or which let the web application handle its

Re: [squid-users] Auth through HTTPS reverse proxy

2008-03-04 Thread Ben Hollingsworth
Ben Hollingsworth wrote: I've setup Squid 2.6.STABLE6 as a reverse proxy. It terminates SSL connections using a wildcard cert and then passes the connections to back-end servers using either HTTP or HTTPS. All works well for servers that don't require any authentication (or which let the web

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-04 Thread Steve Snyder
On Tuesday 04 March 2008 7:36:50 am Adrian Chadd wrote: Hi everyone, I'm quite disappointed in the lack of feedback from the community over this. Its hard to figure out what people want if noone speaks up, so this is your time to speak up. I see nothing attractive in Squid v3.0. I don't

[squid-users] RELEASE/304 messages in store.log

2008-03-04 Thread Chris Woodfield
Hi, We recently added the reload-into-ims directive to our squid config after noticing that a large number of queries were coming in with No- Cache set, killing our cache efficiency. We have a relatively short max-age set, working on the assumption that the If-Modified-Since will keep the

[squid-users] Serve JSON object on access denial?

2008-03-04 Thread Dimitry Golubovsky
Hi, Is there any way to make Squid serve a JSON object when access to some proxied resource is denied? I use Squid as a reverse proxy to control access to CouchDB database (which by itself does not have any access control yet). In the case of error, CouchDB serves a specifically-formatted JSON

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-04 Thread François Cami
Hi, We've been testing Squid 3. 2.X is out of the question since we need ICAP. Our 3.0STABLE1 build with backported icap-related patches from 3.0-current is stable enough for us (no crashes, no weird behaviour). What I would personally like to see is full HTTP 1.1 compliance and a more complete

RE: [squid-users] Multi ISP Load Balancing Problem

2008-03-04 Thread Lazuardi Nasution
Hi, I'm using Windows 2000 with Service Pack 4. If you think that it is a file descriptor problem, why this problem apear when I install 3 Squid Services but not happen on previous configuration which install one Squid Service only ? I don't understand about select(). The Loop related error has

Re: [squid-users] Part of Page Loading Slowly

2008-03-04 Thread Cody Jarrett
TCP window scaling was the issue. I believe the real issue is caused by the company that hosts the site I'm trying to access and I performed a workaround. I'd like to let them know what was causing the issue. Started working immediately after: echo 0 /proc/sys/net/ipv4/tcp_window_scaling

Re: [squid-users] Part of Page Loading Slowly

2008-03-04 Thread Cody Jarrett
TCP window scaling was the issue. I believe the real issue is caused by the company that hosts the site I'm trying to access and I performed a workaround. I'd like to let them know what was causing the issue. Started working immediately after: echo 0 /proc/sys/net/ipv4/tcp_window_scaling

Re: [squid-users] Auth through HTTPS reverse proxy

2008-03-04 Thread Ben Hollingsworth
Ben Hollingsworth wrote: I've setup Squid 2.6.STABLE6 as a reverse proxy. It terminates SSL connections using a wildcard cert and then passes the connections to back-end servers using either HTTP or HTTPS. All works well for servers that don't require any authentication (or which let the web

Re: [squid-users] Question about Bug 1681

2008-03-04 Thread Brian Kirk
Ok so do I only need to apply it to squid, or will I have to also go into samba and apply it there as well? And does this need to be applied to all versions of squid 2.6 stable releases? Or is it part of a certain stable release? On 3/3/08, Guido Serassio [EMAIL PROTECTED] wrote: Hi, At

Re: [squid-users] Question about Bug 1681

2008-03-04 Thread Guido Serassio
Hi, At 21:19 04/03/2008, Brian Kirk wrote: Ok so do I only need to apply it to squid, or will I have to also go into samba and apply it there as well? And does this need to be applied to all versions of squid 2.6 stable releases? Or is it part of a certain stable release? It's included in

[squid-users] Configuring reverse proxy for both 80/443

2008-03-04 Thread Nick Duda
I seem to be stumped. I need to reverse proxy for one internal server that listens on both 80 and 443. How can I configure squid to proxy for the same cache-peer on both 80 and 443? As far as I can see you can only specify one protocol per cache-peer line. I think I am missing something. - Nick

[squid-users] Squid Reverse Proxy - Apache - Trailing Slash

2008-03-04 Thread Christopher Bianchi
Hi, folks. I'm new to the list and pretty new to Squid as well. I'm running into a specific problem right now and need some guidance. As you know, trailing slashes are required for directories and when it is omitted from a request, Apache performs a redirect to include the trailing slash. This

Re: [squid-users] Redirector problems with squid 2.6

2008-03-04 Thread Alex Rousskov
On Tue, 2008-03-04 at 09:45 +1000, Jonne Hannon wrote: I'm using squid 2.6STABLE18 as squid 3 is not yet compatibile with Smartfilter. In what way are the two incompatible? Is there a bug report for this problem? Thank you, Alex.

Re: [squid-users] Configuring reverse proxy for both 80/443

2008-03-04 Thread Chris Woodfield
I haven't tried this myself, but can't you just have two cache-peer lines with the same host but different port numbers? -C On Mar 4, 2008, at 5:11 PM, Nick Duda wrote: I seem to be stumped. I need to reverse proxy for one internal server that listens on both 80 and 443. How can I configure

RE: [squid-users] Configuring reverse proxy for both 80/443

2008-03-04 Thread Nick Duda
Nope, it throws an error, I tried that. -Original Message- From: Chris Woodfield [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 04, 2008 8:02 PM To: Nick Duda Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Configuring reverse proxy for both 80/443 I haven't tried this

Re: [squid-users] Configuring reverse proxy for both 80/443

2008-03-04 Thread Ric
I haven't tried myself but I'm pretty sure that you can have as many duplicate cache_peers as you want as long you give each of them a different name Ric On Mar 4, 2008, at 5:01 PM, Chris Woodfield wrote: I haven't tried this myself, but can't you just have two cache-peer lines with

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-04 Thread Amos Jeffries
Well, I am interested in speed, features and ICAP. So I like -2 and -3 to merge. It seems to me that for the sake of being polite with each other we do not want to call the -2 / -3 issue a fork, but effectively it really is a fork. So here is my question back to the main maintainers: do

Re: [squid-users] Redirector problems with squid 2.6

2008-03-04 Thread Jonne Hannon
Hi Henrik, To work with squid 2.6, I had to add a newline to the string being written back to stdout. This was not required with squid 2.5. Thanks for your help. Jonne. iDivision Security Team Brisbane City Council Ph: 07 3403 6918 Email: [EMAIL PROTECTED] Visit

Re: [squid-users] RELEASE/304 messages in store.log

2008-03-04 Thread Adrian Chadd
Check to see if the object is actually in cache. I bet that the RELEASE line you're seeing is the temporary store entry that was created purely to return the 304 message. Adrian On Tue, Mar 04, 2008, Chris Woodfield wrote: Hi, We recently added the reload-into-ims directive to our squid

[squid-users] Squid on FreeBSD poor performance

2008-03-04 Thread joejoe
Hi! Today i'm running squid 2.6 stable18 on FreeBSD 6.3 in a Acer R710 Server. Client have 3000 users But performance is poor. Consults has the method to be allowed to improve? My hardware is: CPU: Intel(R) Xeon(TM) CPU 3.20GHz *2 RAM: 4G HD: SEAGATE ST373207LC * 4 (320M/s 1 RPM) #uname

Re: [squid-users] Squid on FreeBSD poor performance

2008-03-04 Thread Adrian Chadd
Firstly, drop cache_mem way way down to something like 128 or 256meg. It doesn't need to be that big and that can't allocate! is FreeBSD saying no! to memory allocations after your process grows past a certain size. 200 req/sec shouldn't be making it cry, 800 req/sec should be. I do think you've

Re: [squid-users] Authentication Hack

2008-03-04 Thread Dave Coventry
I believe that this is the thing that is defeating me at the moment. I cannot get my Error page Form to call my CGI script: http://www.mail-archive.com/squid-users@squid-cache.org/msg53327.html

[squid-users] bypass parent proxy for some urls - dstdomains

2008-03-04 Thread Paul Anderson
Hello, I appologize if this has been answered before, but I have been unable to find anything. I am trying to set up the following: Lan - Squid - Parent Proxy (ISP) I have basically added the following lines to squid.conf file cache_peer parentcache.foo.com parent 3128 0 no-query default

[squid-users] Need help

2008-03-04 Thread piyush joshi
Dear All, Can anyone suggest me any free software to monitor squid which will show all information like CPU usage, Memory Usage, No of hite, IP address where from request is coming top users, Top sites, Top Bandwith . Please reply to me i will be grateful to you .. -- Regards

[squid-users] Problem with SSL/Http and Squid in Reverse Proxy

2008-03-04 Thread Kaddu, Patrick
I have set up Squid3 with SSL as a Reverse Proxy, SSL work as expected, but when a backendserver have hardcoded links inside a webapplikation like http://bla.bla.bla , the url change when the user click on this link and you have no more ssl, only http! Can you force to use only ssl, even if