[squid-users] Squid for windows authentication against Active Directory

2011-05-25 Thread Julian Zoellner
hello all, in the last days i tried to setup the Squid for windows 2.7.STABLE7 with authentication against a Active Directory Group Internet. For this is used the folloing HowTo: http://www.papercut.com/kb/Main/InstallingAndConfiguringSquidNTProxy So my squid.conf looks like this: http_port

[squid-users] Risposta: Re: [squid-users] Squid 3.1.12 slow on a site... sorry

2011-05-25 Thread Roberto Galluzzi
I tried using a public ip address from a Windows machine (without proxy) and the site haven't problem. Instead when I surf from a Linux machine (SLES 11 SP 1) always without proxy the site is very slow. I also tried with SLES 10 and there isn't problem. Very strange! Eliezer Croitoru

Re: [squid-users] Re: Sudden error (1067) when starting squid service W2K3

2011-05-25 Thread Amos Jeffries
On 25/05/11 14:10, Rhys Evans wrote: Seeing as I don't have any neighbour caches, I set htcp_port 0 and things seem to be OK. It still seems odd that this issue came up, I'm wondering if maybe some Windows update altered some behaviour in regard to allowing the binding required? Looks similar

Re: [squid-users] Squid for windows authentication against Active Directory

2011-05-25 Thread Amos Jeffries
On 25/05/11 18:39, Julian Zoellner wrote: hello all, in the last days i tried to setup the Squid for windows 2.7.STABLE7 with authentication against a Active Directory Group Internet. For this is used the folloing HowTo: http://www.papercut.com/kb/Main/InstallingAndConfiguringSquidNTProxy

Re: [squid-users] Risposta: Re: [squid-users] Squid 3.1.12 slow on a site... sorry

2011-05-25 Thread Amos Jeffries
On 25/05/11 18:50, Roberto Galluzzi wrote: I tried using a public ip address from a Windows machine (without proxy) and the site haven't problem. Instead when I surf from a Linux machine (SLES 11 SP 1) always without proxy the site is very slow. I also tried with SLES 10 and there isn't

Re: [squid-users] How to clear all the cached files under a folder

2011-05-25 Thread Amos Jeffries
On 25/05/11 13:26, Wang Shiqiang wrote: -邮件原件- 发件人: Amos Jeffries On 24/05/11 22:31, Wang Shiqiang wrote: Hi All: I use squidclient to clear single file cache. Does anyone know how to clear all the cached files under one folder? Defined folder please. URL path

Re: [squid-users] SslBump and bad cert

2011-05-25 Thread Amos Jeffries
On 25/05/11 05:45, Ming Fu wrote: Hi Alex, One question about sslbump implementation, was the client side cert exchange done before squid start the ssl to the server? If so, it might be too late when squid learns that the server cert is not good. The client side cert was already sent out.

Re: [squid-users] squid configuration information

2011-05-25 Thread Amos Jeffries
On 24/05/11 20:12, francescobocca...@dont-contact.us wrote: Hi to all, i'm of the squid world. I have some question for you. I explain my problem. I have an application, intalled in one server A, that use openlayer library for load data tiles from a second server B.The second one server have 3

Re: [squid-users] Cache_peer configuration

2011-05-25 Thread Amos Jeffries
On 20/05/11 00:27, senthil kumar wrote: Hello All, We have 5 squid servers and each squid server is configured to send requests from certain clients to cache_peer( cache_peer is a filter) and rest of the request passes as direct requests. We have disk caching at all servers and need to share

Re: [squid-users] Squid3 and Exchange 2003 Web Access

2011-05-25 Thread Amos Jeffries
On 19/05/11 11:14, Eliezer Croitoru wrote: On 18/05/2011 20:24, Stefanos Vizikidis wrote: I am running version 3.1.11. well if you have a squid proxy that is not using any auth methods but only basic ACLS and specific domain\ip no caching options.. it should be weird. on what port and what

Re: [squid-users] Transparent caching proxy, ASA-Squid3

2011-05-25 Thread Amos Jeffries
On 18/05/11 01:50, bmm-mailinglist wrote: A little kick here if you don't mind, as there were no more replies so far. I have unfortunately not been abe to get my setup to work. Any suggestions, as before, are welcome. Regards, Bart bmm-mailinglist 26-4-2011 9:31 I'm sorry for the delay; I

Re: [squid-users] Cache peer does not work

2011-05-25 Thread Amos Jeffries
On 16/05/11 18:35, Dr. Muhammad Masroor Ali wrote: It was not working when I used cache_peer 172.16.101.3 parent 3128 3130 default Using 0 place of 3130 solved the problem. So, ICP port was not working. However, could somebody please explain this. It does not work when the line is,

[squid-users] external_acl_type helper and it's cache

2011-05-25 Thread Rafal Zawierta
Hello, Could anybody explain me how does work caching in external helper mechanism? I use suiqd3 (3.1.6) on debian. I've wrote simple helper - it make sql query to sqlide db - something like that: helper.sh: #!/bin/sh while read a; do x=`sqlite /etc/squid3/db.sql select * from user where

Re: [squid-users] external_acl_type helper and it's cache

2011-05-25 Thread Amos Jeffries
On 25/05/11 22:32, Rafal Zawierta wrote: Hello, Could anybody explain me how does work caching in external helper mechanism? I use suiqd3 (3.1.6) on debian. I've wrote simple helper - it make sql query to sqlide db - something like that: helper.sh: #!/bin/sh while read a; do x=`sqlite

Re: [squid-users] Squid for windows authentication against Active Directory

2011-05-25 Thread Amos Jeffries
On 25/05/11 20:42, Julian Zoellner wrote: hello Amos, Please use 2.7.STABLE9 at the very least. 2.7 as a whole is aging and deprecated, we support 2.7.STABLE9 only until all its useful features are ported to 3.x series. we already use 2.7.STABLE8 and i can't find a STABLE9 download for

Re: [squid-users] CLOSE_WAIT connections with ICAP

2011-05-25 Thread Amos Jeffries
On 16/05/11 20:10, Daniel Beschorner wrote: We use Squid 3.1.12 with TrendMicro IWSVA as ICAP server and early responses enabled. I see a lot of ICAP connections hanging in FIN_WAIT1 state (with large Send-Q) on IWSVA and CLOSE_WAIT state on squid box (with large Recv-Q). Cache manager shows

RE: [squid-users] SslBump and bad cert

2011-05-25 Thread Ming Fu
It is too late to alter the client certificate. By the time a server connection is opened Squid may have already served replies out of cache to the client. I am a bit surprised. Can sslbump make some https content cacheable? Meanwhile it is worth investigate why you are getting so many

[squid-users] squid + digest ldap + password

2011-05-25 Thread Maximiliano de Mattos
Hi...  :) I use squid v2.7 with ldap_auth autentication storing password as ssha hash. Now, i want to have digest ldap autentication, so i recompile squid and configure auth_param to use this helper and configure them. So, testing digest_ldap_auth, all are ok (or i think) :) # echo

[squid-users] squid and wccp2

2011-05-25 Thread Daniel Anliker
hi, we have a problem with squid 3.1.6 (debian 6.0.1) and wccp2. the normal http traffic works like it should with: wccp2_router 192.168.200.1 wccp2_forwarding_method gre wccp2_return_method gre wccp2_service standard 0 but we also like to have some other ports on the squid. i tried with:

Re: [squid-users] SslBump and bad cert

2011-05-25 Thread Amos Jeffries
On 26/05/11 01:01, Ming Fu wrote: It is too late to alter the client certificate. By the time a server connection is opened Squid may have already served replies out of cache to the client. I am a bit surprised. Can sslbump make some https content cacheable? Why surprised? ssl-bumps'

RE: [squid-users] SslBump and bad cert

2011-05-25 Thread Ming Fu
It is too late to alter the client certificate. By the time a server connection is opened Squid may have already served replies out of cache to the client. I am a bit surprised. Can sslbump make some https content cacheable? Why surprised? ssl-bumps' purpose is to remove the SSL

[squid-users] How Squid behaves if we turn off Apache‏

2011-05-25 Thread melissa schellenberg
We're performing an upgrade on the CMS that is sitting behind Squid, and we want Squid to serve up ALL pages from its cache during the hour or two of the upgrade, so that no requests are made to the CMS during that time.  Is there a hero mode setting that we can toggle in Squid?  Or should we

[squid-users] adding an error-based class/id to the body of error pages

2011-05-25 Thread E.S. Rosenberg
Hi all, I was wondering if in the the official version of squid 3.1 it would be possible to change body to body id=%c in the errorpages. Of course on a technical level it is possible and I have already implemented this locally by us, so what is my reasoning? Very simple, in our organization we

[squid-users] Anyway to tell if squid is actively using unlinkd?

2011-05-25 Thread Tory M Blue
I've got weird load behavior that crops up and this box is only running squid. I am close to what I set my cache_dirs to in terms of size, so wondering if that's it. Just trying to figure out why my server will run at a load of 1 -1.5 and next thing it's up to 5-6, no real increase in traffic.

RE: [squid-users] SslBump and bad cert

2011-05-25 Thread Amos Jeffries
On Wed, 25 May 2011 16:16:54 +, Ming Fu wrote: It is too late to alter the client certificate. By the time a server connection is opened Squid may have already served replies out of cache to the client. I am a bit surprised. Can sslbump make some https content cacheable? Why

Re: [squid-users] Anyway to tell if squid is actively using unlinkd?

2011-05-25 Thread Amos Jeffries
On Wed, 25 May 2011 18:29:55 -0700, Tory M Blue wrote: I've got weird load behavior that crops up and this box is only running squid. I am close to what I set my cache_dirs to in terms of size, so wondering if that's it. Just trying to figure out why my server will run at a load of 1 -1.5 and

Re: [squid-users] Anyway to tell if squid is actively using unlinkd?

2011-05-25 Thread Tory M Blue
On Wed, May 25, 2011 at 8:01 PM, Amos Jeffries squ...@treenet.co.nz wrote: high and low water for the disk were at 85 and 95%, bumped it just to The watermark difference and total size determine how much disk gets erased when it overflows. Could be lots or not much. Very likely this is it.

Re: [squid-users] adding an error-based class/id to the body of error pages

2011-05-25 Thread Amos Jeffries
On Thu, 26 May 2011 00:27:16 +0300, E.S. Rosenberg wrote: Hi all, I was wondering if in the the official version of squid 3.1 it would be possible to change body to body id=%c in the errorpages. Of course on a technical level it is possible and I have already implemented this locally by us, so

Re: [squid-users] Anyway to tell if squid is actively using unlinkd?

2011-05-25 Thread Amos Jeffries
On Wed, 25 May 2011 20:27:05 -0700, Tory M Blue wrote: On Wed, May 25, 2011 at 8:01 PM, Amos Jeffries squ...@treenet.co.nz wrote: high and low water for the disk were at 85 and 95%, bumped it just to The watermark difference and total size determine how much disk gets erased when it

Re: [squid-users] Anyway to tell if squid is actively using unlinkd?

2011-05-25 Thread Tory M Blue
On Wed, May 25, 2011 at 9:03 PM, Amos Jeffries squ...@treenet.co.nz wrote: On Wed, 25 May 2011 20:27:05 -0700, Tory M Blue wrote: On Wed, May 25, 2011 at 8:01 PM, Amos Jeffries squ...@treenet.co.nz wrote: backup, so I was leary. CPU cycles sure, but the squid process shows: PID USER      PR

Re: [squid-users] Anyway to tell if squid is actively using unlinkd?

2011-05-25 Thread Amos Jeffries
On Wed, 25 May 2011 21:11:45 -0700, Tory M Blue wrote: On Wed, May 25, 2011 at 9:03 PM, Amos Jeffries squ...@treenet.co.nz wrote: On Wed, 25 May 2011 20:27:05 -0700, Tory M Blue wrote: On Wed, May 25, 2011 at 8:01 PM, Amos Jeffries squ...@treenet.co.nz wrote: backup, so I was leary. CPU

Re: [squid-users] How Squid behaves if we turn off Apache‏

2011-05-25 Thread Amos Jeffries
On Wed, 25 May 2011 10:16:46 -0700, melissa schellenberg wrote: We're performing an upgrade on the CMS that is sitting behind Squid, and we want Squid to serve up ALL pages from its cache during the hour or two of the upgrade, so that no requests are made to the CMS during that time.  Is there

[squid-users] Traffic Monitoring

2011-05-25 Thread Malvin Rito
Hi List, I'm currently using Squid as Transparent Proxy, I did able to view or monitor HTTP traffic not all like HTTPS, FTP. Can anyone assist me on how I can monitor all the traffic that comes out of my network? Regards, Malvin