[squid-users] squid running out of filedescriptors

2013-02-20 Thread Sandrini Christian (xsnd)
Hi Today squid was suddenly running at 100% CPU and a lot of running out of filedescriptors messages in the cache.log. But if I look with squidclient it only had 989 of 65k filedescriptors open. Is there something else I need to look at? I am using squid-3.2.6 on Centos 6.3 11.Command: top

Re: [squid-users] squid running out of filedescriptors

2013-02-20 Thread Amm
- Original Message - From: Sandrini Christian (xsnd) x...@zhaw.ch To: squid-users@squid-cache.org squid-users@squid-cache.org Cc: Sent: Wednesday, 20 February 2013 3:29 PM Subject: [squid-users] squid running out of filedescriptors Hi Today squid was suddenly running at

[squid-users] different user name with Kerberos and NTLM/basic

2013-02-20 Thread Esteban Torres Rodríguez
I have configured my squid with autentication based on kerberos/ntlm/basic. The configuration no have problem, but yes I have a problem with the name user included in acls. Kerberos call to user as u...@domain.com, but ntlm and basic call to user as user. This means that in my file acls users have

[squid-users] Squid 3.3.1 Compiler Error

2013-02-20 Thread Adam W. Dace
OS: Mac OS X v10.7.5 Xcode: Xcode v4.6 GCC: GCC v4.2.1 Configure Command: ./configure I've tried a few things and squid just won't compile for me. Here's the relevant make output: Making all in acl /bin/sh ../../libtool --tag=CXX --mode=compile g++ -DHAVE_CONFIG_H -I../.. -I../../include

[squid-users] Transparent Proxy and Authentication

2013-02-20 Thread Roman Gelfand
I guess the 2 don't mix as per NOTICE: Authentication not applicable on intercepted requests. message. Would it follow user access control via transparent proxy? or is there a way around the above limitation? Thanks in advance

RE: [squid-users] Redirect Youtube out second ISP

2013-02-20 Thread Stinn, Ryan
I am doing it this way currently on my router however knowing all of youtube's IP addresses is annoying. Do you know if your list is conclusive? Ryan Stinn Holy Trinity Catholic School Division -Original Message- From: Ricardo Rios [mailto:shorew...@malargue.gov.ar] Sent: Monday,

RE: [squid-users] Redirect Youtube out second ISP

2013-02-20 Thread Ricardo Rios
No is not, is just what i see doing some sniffing on my mikrotik box, where my costumers connect, i am sure i still missing few IPs. Regards I am doing it this way currently on my router however knowing all of youtube's IP addresses is annoying. Do you know if your list is conclusive? Ryan

Re: [squid-users] Redirect Youtube out second ISP

2013-02-20 Thread Pieter De Wit
Hi, I would just run 2 squids on the same box, iptables mark the second one's traffic for the second uplink (using multiple routing tables etc). The first squid then simply forwards all youtube traffic by URL - no IP issues etc. Cheers, Pieter On 21/02/2013 05:33, Ricardo Rios wrote: No

[squid-users] SQUID3 and https: Error negotiating SSL connection

2013-02-20 Thread skylab
Hi, I'm new in Squid configuration and I have problems with HTTPS sites. I searched a lot but I didn't find a solution. I can't open any https site and I have different error messages in different browsers: - in firefox www.gmail.com returns ssl_error_bad_cert_domain - in chrome

Re: [squid-users] SQUID3 and https: Error negotiating SSL connection

2013-02-20 Thread Guy Helmer
On Feb 20, 2013, at 11:30 AM, skylab skyla...@gmail.com wrote: Hi, I'm new in Squid configuration and I have problems with HTTPS sites. I searched a lot but I didn't find a solution. I can't open any https site and I have different error messages in different browsers: - in firefox

[squid-users] Re: different user name with Kerberos and NTLM/basic

2013-02-20 Thread Markus Moeller
Have you tried the -r flag ? ./squid_kerb_auth -h Usage: squid_kerb_auth [-d] [-i] [-r] [-s SPN] [-h] -d full debug -i informational messages -r remove realm from username -s service principal name -h help The SPN can be set to GSS_C_NO_NAME to allow any entry from keytab default SPN is

Re: [squid-users] Microsoft.com issue

2013-02-20 Thread Amos Jeffries
On 20/02/2013 8:19 p.m., Sokvantha YOUK wrote: Dear All, My squid server version 3.3.1-20130219-r12498 runs on Centos 6.3 x64 bits. The server runs with SMP enabled with 3 workers. Most of the time when I type microsoft.com in Chrome, Firefox browser, I got following error message: Your

Re: [squid-users] Transparent Proxy and Authentication

2013-02-20 Thread Amos Jeffries
On 21/02/2013 4:42 a.m., Roman Gelfand wrote: I guess the 2 don't mix as per NOTICE: Authentication not applicable on intercepted requests. message. Would it follow user access control via transparent proxy? or is there a way around the above limitation? Please read the Interception Proxy

Re: [squid-users] SQUID3 and https: Error negotiating SSL connection

2013-02-20 Thread Amos Jeffries
On 21/02/2013 11:11 a.m., Guy Helmer wrote: On Feb 20, 2013, at 11:30 AM, skylab skyla...@gmail.com wrote: Hi, I'm new in Squid configuration and I have problems with HTTPS sites. I searched a lot but I didn't find a solution. I can't open any https site and I have different error messages in

[squid-users] squid kerberos authenticators spamming AD and locking out users

2013-02-20 Thread Brett Lymn
Folks, I am running 4 proxy servers with squid 3.1.19 (yes, I know it is old, will update soon) with kerberos authentication behind a F5 load balancer for a user community of about 2000 people using Windows/I.E.. Normally, this all works fine, people can surf the web and authentication happens

Re: [squid-users] Re: different user name with Kerberos and NTLM/basic

2013-02-20 Thread Esteban Torres Rodríguez
2013/2/21 Markus Moeller hua...@moeller.plus.com: Have you tried the -r flag ? ./squid_kerb_auth -h Usage: squid_kerb_auth [-d] [-i] [-r] [-s SPN] [-h] -d full debug -i informational messages -r remove realm from username -s service principal name -h help The SPN can be set to