[squid-users] Squid v3.0Stable16 memory leak

2010-03-30 Thread Ivan .
Hi Had this running on a RedHat EL5 64bit OS running Squid v3.0.STABLE16 for about 3 days, with 8GB of memory. Slowly but surely top shows the availble memory dropping down to 500MB, which concerned me a great deal. I am not caching, using the cache_dir null directive, so not sure what is going

Re: [squid-users] Squid v3.0Stable16 memory leak

2010-03-30 Thread Amos Jeffries
Ivan . wrote: Hi Had this running on a RedHat EL5 64bit OS running Squid v3.0.STABLE16 for about 3 days, with 8GB of memory. Slowly but surely top shows the availble memory dropping down to 500MB, which concerned me a great deal. I am not caching, using the cache_dir null directive, so not

[squid-users] AUP using squid_session + username

2010-03-30 Thread John Kenyon
Hi All, I've been looking into setting up an Acceptable Use Policy (AUP) page with Squid 3.0 using squid_session. As I understand only the %s variable (requested url) can be used with deny_info, however if I specify an error page I have access to other variables, i.e. %a which contains

Re: [squid-users] AUP using squid_session + username

2010-03-30 Thread Amos Jeffries
John Kenyon wrote: Hi All, I've been looking into setting up an Acceptable Use Policy (AUP) page with Squid 3.0 using squid_session. As I understand only the %s variable (requested url) can be used with deny_info, however if I specify an error page I have access to other variables, i.e. %a

Re: [squid-users] Squid v3.0Stable16 memory leak

2010-03-30 Thread Ivan .
hmm i'll check tomorrow, but I am fairly certain that I am on the latest kernel via the RHN support site for RH EL5 I was on Squid v2.6stablexx, which is the latest rpm available by RedHat and didn't have any issues. I upgraded hoping solve my persistant tcp_miss for a couple of sites cheers

Re: [squid-users] Re: Sending on Group names after Kerb LDAP look-up

2010-03-30 Thread Nick Cairncross
Markus, Adding -r to the helper: auth_param negotiate program /usr/lib/squid/squid_kerb_auth -r auth_param negotiate children 10 auth_param negotiate keep_alive on ..results in: 2010/03/30 09:57:51| helperOpenServers: Starting 10/10 'squid_kerb_auth' processes (squid_kerb_auth): invalid

Re: [squid-users] Re: Negotiate/NTLM authentication caching

2010-03-30 Thread Khaled Blah
Markus and Amos, thx for your replies! But are you sure there is no caching for auth_param helpers? Because I could swear that the H(A1) at the digest hashing is only computed once. At least I think I remember it this way. Hmm, I guess I have to look at that again more closely. Regards, Khaled

[squid-users] squid 2.7 against 3.1.1

2010-03-30 Thread Leonardo Carneiro - Veltrac
I keep hearding that squid 3.0 is no speed demon, but the new squid 3.1.1 is said to be much faster. Have anyone benchmarked the 3.1.1 against the 2.7? -- Leonardo Carneiro

RE: [squid-users] Compile on HP-UX 11.23 IA64

2010-03-30 Thread Morales, Bernardo
Hi, I have the same problem with the regex library with the version 3.1.1: g++ -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -D_REENTRANT -g -O2 .libs/squidS.o -g -o squid AclRegs.o AuthReg.o access_log.o AsyncEngine.o cache_cf.o ProtoPort.o CacheDigest.o cache_manager.o carp.o

[squid-users] dns problem squid

2010-03-30 Thread da...@lafourmi.de
hello squidders :), i have some problems with my log in squid... i use squid 3.1.0.16 and my log says: 2010/03/30 16:55:07| comm_udp_sendto: FD 5, (family=10) 192.168.10.4:53: (1) Operation not permitted 2010/03/30 16:55:07| idnsSendQuery: FD 5: sendto: (1) Operation not permitted what

[squid-users] Wrong domain in some NTLM authentication requests

2010-03-30 Thread Diego Lima
Hi All, I'm currently running some squid proxies that serve a lot (3k+) of users. Until recently they were using the NTLM authenticator that is shipped with squid (/usr/lib64/squid/ntlm_auth), but due to countless problems recently I've finally set them to use the helper provided by Samba

Re: [squid-users] dns problem squid

2010-03-30 Thread Jakob Curdes
da...@lafourmi.de schrieb: hello squidders :), i have some problems with my log in squid... i use squid 3.1.0.16 and my log says: 2010/03/30 16:55:07| comm_udp_sendto: FD 5, (family=10) 192.168.10.4:53: (1) Operation not permitted 2010/03/30 16:55:07| idnsSendQuery: FD 5: sendto: (1)

[squid-users] External ACL Queue Overload

2010-03-30 Thread Diego Lima
Hello, I'm seeing a lot of these messages in one of my proxies: aclMatchExternal: 'nt_group' queue overload. Using stale result. What does that mean? Previously I had problems with queue overloads but it used to deny access. Also this particular proxy seem to be a lot slower than the other ones

[squid-users] Re: Re: Sending on Group names after Kerb LDAP look-up

2010-03-30 Thread Markus Moeller
Sorry it is in the 3-HEAD, but for testing you might use the version from http://squidkerbauth.cvs.sourceforge.net/viewvc/*checkout*/squidkerbauth/squid_kerb_auth/squid_kerb_auth.c?revision=1.43 which is my independent test source. Markus Nick Cairncross nick.cairncr...@condenast.co.uk wrote

[squid-users] compiling with enable-ssl

2010-03-30 Thread Andrea Gallazzi
Hi, I have many problems to compiling squid 3.1.1 with --enable-ssl switch. OpenSSL is installed already on Ubuntu Server, but ./configure returns many errors and make not works What is the best linux distribution or OS for squid?? tnx -- Andrea Gallazzi http://andreagx.blogspot.com

Re: [squid-users] compiling with enable-ssl

2010-03-30 Thread Diego Woitasen
What errrors? Do you have -dev packages installed? Try with apt-get buiild-dep squid3 and apt-get install ilbssl-dev. There is no good answer to your last question. :) Regards, Diego 2010/3/30 Andrea Gallazzi andrea.galla...@live.com: Hi, I have many problems to compiling squid 3.1.1 with

[squid-users] squid not using squidguard acl

2010-03-30 Thread Muhammad Sharfuddin
squid 2.7STABLE5 squidguard 1.4 db berkeley 2.7 all urls/domains I am trying to block via squidguard are accessible, it seems that squid is not using squidguard .. please help from squid.conf url_rewrite_program /usr/local/bin/squidGuard -c /usr/local/squidGuard/squidGuard.conf acl myipes src

RE: [squid-users] squid not using squidguard acl

2010-03-30 Thread Muhammad Sharfuddin
On Tue, 2010-03-30 at 15:26 -0500, Johnson, S wrote: ok, I guess I just needed to talk spell it out... I figured it out and in the name of documentation here's how: in the dansguardian.conf change the line on forwardonfor to forwardedfor = on I am facing problem with squidGuard.. I am not

[squid-users] AUP page squid_session and banner page

2010-03-30 Thread Johnson, S
Squid 3.1.0.17 Ok, I'm able to get some of this working right... Although it's not quite what I expected for results. My config is below... First, I think since I have myserver in the acl then the AUP page doesn't display if the user has their home page set to http://www.myserver.com;.

Re: [squid-users] squid not using squidguard acl

2010-03-30 Thread b1
The dry run of squidGuard says that your url and domainlists are empty. Can you check whether your .db files really contain data? It seems to me that this no problem with squid using the redirector, but with the redirector not having urls to block. I would check the permissions of

Re: [squid-users] Wrong domain in some NTLM authentication requests

2010-03-30 Thread Amos Jeffries
On Tue, 30 Mar 2010 14:16:54 -0300, Diego Lima li...@diegolima.org wrote: Hi All, I'm currently running some squid proxies that serve a lot (3k+) of users. Until recently they were using the NTLM authenticator that is shipped with squid (/usr/lib64/squid/ntlm_auth), but due to countless

Re: [squid-users] dns problem squid

2010-03-30 Thread Amos Jeffries
On Tue, 30 Mar 2010 21:04:38 +0200, Jakob Curdes j...@info-systems.de wrote: da...@lafourmi.de schrieb: hello squidders :), i have some problems with my log in squid... i use squid 3.1.0.16 Please upgrade to 3.1.1. Amos

Re: [squid-users] AUP page squid_session and banner pag e

2010-03-30 Thread Amos Jeffries
On Tue, 30 Mar 2010 15:08:13 -0500, Johnson, S sjohn...@edina.k12.mn.us wrote: Squid 3.1.0.17 3.1.1 is production released now :) 3.1.0.17 has some major IP-related issues which are now fixed. Ok, I'm able to get some of this working right... Although it's not quite what I expected for

Re: [squid-users] External ACL Queue Overload

2010-03-30 Thread Amos Jeffries
On Tue, 30 Mar 2010 17:00:03 -0300, Diego Woitasen dieg...@xtech.com.ar wrote: Use squid_ldap_group to check group membership. wbinfo_group.pl is or should be deprecated. Can you give any supporting rational for that statement? One thing, use concurrency=1 except you know that the helper

Re: [squid-users] Wrong domain in some NTLM authentication requests

2010-03-30 Thread Diego Lima
With the browser software. Your initial statements clearly indicate that the problem is what the browser is sending. The browser software is Microsoft Internet Explorer 7 and 8, however I've not been able to track down what causes that since only a few users are having problems. Is there any

[squid-users] Squid-3.1.1 for Fedora 12

2010-03-30 Thread Henrik Nordström
Squid-3.1.1 has been packaged for Fedora 12. Those of you who use Fedora please help testing the update and give feedback. Testing of updates is an important aspect of Fedora updates and also Squid development. Fedora uses a community review model where you users are an intimate part of the loop.