RE: [squid-users] Out of sequence packets?

2013-12-16 Thread Martin Sperl
I believe it may be related to squid getting rescheduled to a different CPU and the new cpu/core might have an empty network queue (linux starts to have a separate network queue per CPU/core for newer network cards to avoid locking, which may introduce this reordering), where once core is faster

[squid-users] Squid 3.3.8 in intercept mode

2013-12-16 Thread 0bj3ct
Hi. I was using Squid in normal mode and it worked perfect. I configured to show my own html page in squid.conf with command: deny_info some-ip all squid shows my page instead of ACCESS DENIED page and I can get clients ip from request header. But I have a new task, that's why I must switch

[squid-users] Re: Squid 3.3.8 in intercept mode

2013-12-16 Thread 0bj3ct
btw my squid.conf file: cache_peer proxy.bankofbaku.com parent 8080 0 default no-query login=usr:pswd acl allow_mac arp /home/user/Desktop/allow_mac.txt acl spring_url dst 10.xx.xx.xx never_direct deny spring_url never_direct allow all acl SSL_ports port 443 acl Safe_ports port 80 #

Re: [squid-users] Squid 3.3.8 in intercept mode

2013-12-16 Thread Amos Jeffries
On 16/12/2013 11:28 p.m., 0bj3ct wrote: Hi. I was using Squid in normal mode and it worked perfect. I configured to show my own html page in squid.conf with command: deny_info some-ip all squid shows my page instead of ACCESS DENIED page and I can get clients ip from request header.

[squid-users] Re: Squid 3.3.8 in intercept mode

2013-12-16 Thread 0bj3ct
btw my squid.conf file: cache_peer main-proxy parent 8080 0 default no-query login=usr:pswd acl allow_mac arp /home/user/Desktop/allow_mac.txt acl spring_url dst 10.xx.xx.xx never_direct deny spring_url never_direct allow all acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports

[squid-users] Re: Squid 3.3.8 in intercept mode

2013-12-16 Thread 0bj3ct
.. It seems something wrong with proxy-forwarding. My cache.log content: 2013/12/11 02:28:50 kid1| ERROR: No forward-proxy ports configured. 2013/12/11 02:28:50 kid1| ERROR: No forward-proxy ports configured. 2013/12/11 02:28:50 kid1| ERROR: No forward-proxy ports configured. 2013/12/11 02:28:50

Re: [squid-users] Re: Squid 3.3.8 in intercept mode

2013-12-16 Thread Amos Jeffries
On 16/12/2013 11:46 p.m., 0bj3ct wrote: btw my squid.conf file: cache_peer proxy.bankofbaku.com parent 8080 0 default no-query login=usr:pswd acl allow_mac arp /home/user/Desktop/allow_mac.txt acl spring_url dst 10.xx.xx.xx never_direct deny spring_url never_direct allow all acl

Re: [squid-users] Re: Squid 3.3.8 in intercept mode

2013-12-16 Thread Amos Jeffries
On 17/12/2013 12:01 a.m., 0bj3ct wrote: .. It seems something wrong with proxy-forwarding. My cache.log content: 2013/12/11 02:28:50 kid1| ERROR: No forward-proxy ports configured. The forward-proxy port is 3128. You should have a second port with intercept on it. This should not be related

[squid-users] Re: Squid 3.3.8 in intercept mode

2013-12-16 Thread 0bj3ct
Yes, you are right, client cannot connect to 10.* host when squid is in intercept mode. Can you help me to solve it? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-3-3-8-in-intercept-mode-tp4663869p4663877.html Sent from the Squid - Users mailing

[squid-users] after long time squid hang , no logs , kill the internet , and i must restart it !!!!!

2013-12-16 Thread Dr.x
hi all , i want to mention a strange problem in squid . im using smp with squid 3.3.9 this problem is as follow : squid start fine , after about 7-10 days , log files stop , squid hanged , but wccp still active with cisco router , and as a result the users complain from NO Iinternet access

Re: [squid-users] Re: Squid 3.3.8 in intercept mode

2013-12-16 Thread Amos Jeffries
On 17/12/2013 12:26 a.m., 0bj3ct wrote: Yes, you are right, client cannot connect to 10.* host when squid is in intercept mode. Can you help me to solve it? I go along the lines of making it a domain name instead of raw-IP in the rediretc URL. Making sure that it resolves properly for any

RE: [squid-users] Need help on squid configuration with remote icap server

2013-12-16 Thread Rafael Akchurin
We use this python code to test the remotely working qlproxy. It may be of help to you too. Substitute the 127.0.0.1 with the IP of your choice. # # options_good.py # import os, socket # configuration server = 127.0.0.1 port = 1344 request = OPTIONS icap://icap.server.net/sample-service

[squid-users] Re: relocation R_X86_64_32 against `.rodata' can not be used when making a shared object; recompile with -fPIC

2013-12-16 Thread Brian J. Murrell
On Mon, 2013-12-16 at 15:08 +1300, Amos Jeffries wrote: It is not quite complete yet, you also need to use --disable-eui. Oh, that's a pity. Using MAC addresses is the only sane way to handle IPv6 devices on your LAN given that they want to use randomized source addresses which change after a

[squid-users] Re: Squid 3.3.8 in intercept mode

2013-12-16 Thread 0bj3ct
Amos, how can I configure squid? I have 1 proxy A with cache_peer parent proxy P. And I want to use A as intercept proxy in local network. proxy A will read mac adresses from .txt file and allow them to use web. Bu if the client's mac address is not in .txt file proxy A must redirect him to my

[squid-users] Re: relocation R_X86_64_32 against `.rodata' can not be used when making a shared object; recompile with -fPIC

2013-12-16 Thread Brian J. Murrell
On Mon, 2013-12-16 at 15:08 +1300, Amos Jeffries wrote: I have a patch that fixes some of these at http://master.squid-cache.org/~amosjeffries/patches/squid-3_relocation_PIC_PIE_error.patch It is not quite complete yet, you also need to use --disable-eui. I'm sure you know this but

Re: [squid-users] squid 3.4.1 UPGRADE WARNING: URL rewriter reponded with garbage '

2013-12-16 Thread jeffrey j donovan
On Dec 15, 2013, at 10:43 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: Please refer to: http://bugs.squid-cache.org/show_bug.cgi?id=3978 Which is a *bug* in squidguard due to change\upgrade of squid helpers interface. Eliezer thanks for the update. I backed down to a previous

[squid-users] ufdbGuard 1.31-9 is released to support Squid 3.4.1

2013-12-16 Thread Marcus Kool
ufdbGuard, the URL redirector for Squid, has a new patch release to support the new URL rewriter protocol of Squid 3.4.1. This patch release introduces the keyword squid-version to support all versions of Squid. ufdbGuard 1.31-9 can be downloaded from http://sourceforge.net and

[squid-users] Squid and allow multiple hosts

2013-12-16 Thread Gianluigi Ruggeri
Hi all, I configurated my Squid as tranasparent cache on a visible_host myhost.com Now I need to make a test: - I modified my hosts file to redirect browser request myHost2.com to the same machine (squid + apache) But when I try I see this message error: The requested URL could not be

[squid-users] Squid 3.x and wccp2_router crash

2013-12-16 Thread Don Brearley
Hello squid-users, I am trying to get wccp2 with squid 3.4 working on Debian Jessie (amd64). Squid itself works fine, until I add wccp2_router into the mix, where then squid crashes. When I define: wccp2_router 1.2.3.4 I get a Unable to convert non-IPv4 to IPv4 from [::] errors in

Re: [squid-users] Re: in-transit objects and more new requests for them

2013-12-16 Thread Alex Rousskov
On 12/14/2013 08:00 AM, mohamad pen wrote: I did some experiments on on both squid 2.7 and squid HEAD.bazaar (from launch pad) I assume that you mean the unofficial collapsed-fwd branch from launchpad (the HEAD.bazaar label is confusing because the official trunk code is using the same one --

Re: [squid-users] Squid 3.x and wccp2_router crash

2013-12-16 Thread Guy Helmer
On Dec 16, 2013, at 11:02 AM, Don Brearley donbrear...@hibbing.edu wrote: Hello squid-users, I am trying to get wccp2 with squid 3.4 working on Debian Jessie (amd64). Squid itself works fine, until I add wccp2_router into the mix, where then squid crashes. When I define:

[squid-users] Re: Google nosslsearch

2013-12-16 Thread babajaga
Just to let you know: Rewriting the URL google.com - nosslsearch.google.com (using url_rewrite_program) AND url_rewrite_host_header off works with my (beloved) squid27. Thanx to your good idea ! More convenient compared to the DNS-hack. -- View this message in context:

Re: [squid-users] Squid 3.x and wccp2_router crash

2013-12-16 Thread Don Brearley
Guy Helmer 12/16/13 2:53 PM On Dec 16, 2013, at 11:02 AM, Don Brearley wrote: Hello squid-users, I am trying to get wccp2 with squid 3.4 working on Debian Jessie (amd64). Squid itself works fine, until I add wccp2_router into the mix, where then squid crashes.. When I

Re: [squid-users] Squid 3.3 is very aggressive with memory

2013-12-16 Thread Nathan Hoad
Okay, to follow up. I still cannot reproduce this in a lab environment, but I have implemented a way of doing what Alex described on the production machine. I run two instances of Squid with the same config and switch the transparent proxy out by changing the redirect rules in iptables. The second

Re: [squid-users] Need help on squid configuration with remote icap server

2013-12-16 Thread Anil Kapu
Hi Eliezer, Thanks for a detailed troubleshooting steps. I nailed down on the issue by using telnet. I had initially setup squid and c-icap on same machine and had put iptable rules to divert all the http traffic to pass squid's default port. Doing so I might have messed up the rules which was

Re: [squid-users] Need help on squid configuration with remote icap server

2013-12-16 Thread Anil Kapu
Hi Eliezer, Thanks for a detailed troubleshooting steps. I nailed down on the issue by using telnet. I had initially setup squid and c-icap on same machine and had put iptable rules to divert all the http traffic to pass squid's default port. Doing so I might have messed up the rules which was

Re: [squid-users] Need help on squid configuration with remote icap server

2013-12-16 Thread Anil Kapu
Hi Rafael, That would definitely be handy to test my environment setup in future. Thanks for sharing it Best -Anil On Mon, Dec 16, 2013 at 5:35 PM, Rafael Akchurin rafael.akchu...@diladele.com wrote: We use this python code to test the remotely working qlproxy. It may be of help to you too.