Re: [squid-users] TPROXY Squid Error.

2014-07-10 Thread Eliezer Croitoru
Well about the rules of mikrotik you already know that NAT is not the direction. In any case about the basic_data.sh script. I had a type but.. What terminal are you using?? In most color terminals you won't see the special markings. Thanks, Eliezer On 07/10/2014 03:28 AM, Info OoDoO wrote:

[squid-users] Re: squid rock caching memory RAM

2014-07-10 Thread israelsilva1
Hi, thanks for your clarification. On another note, do you have a guide to install squid 3.4 as you suggested? I guess there is no rpm and I'll have to compile? -- View this message in context:

Re: [squid-users] Re: squid rock caching memory RAM

2014-07-10 Thread Antony Stone
On Thursday 10 July 2014 at 08:47:37, israelsilva1 wrote: Hi, thanks for your clarification. On another note, do you have a guide to install squid 3.4 as you suggested? I guess there is no rpm and I'll have to compile? You could try http://wiki.squid-cache.org/SquidFaq/BinaryPackages

[squid-users] Re: squid rock caching memory RAM

2014-07-10 Thread israelsilva1
hmm, that's how I installed squid. weird: [root@dxb-squid34 ~]# yum install squid Loaded plugins: fastestmirror, security Loading mirror speeds from cached hostfile * base: centos.fastbull.org * epel: epel.mirror.srv.co.ge * extras: centos.fastbull.org * updates: centos.fastbull.org Setting

[squid-users] Blocking spesific url

2014-07-10 Thread Andreas Westvik
So this is driving me crazy. Some of my users are playing battlefield 4 and battlefield have this server browsing page that has webm background. Turns of this video downloads every few seconds and that adds up to about 8Gb every day. Here is the url:

Re: [squid-users] Re: Unable to get HULU ads to cache (not partial content)

2014-07-10 Thread Eliezer Croitoru
More relevant to us: http://bugs.squid-cache.org/show_bug.cgi?id=3830 I am not sure what the bug causes exactly, whether it will use a 4MB default maximum size on the cache_dir. Eliezer On 07/09/2014 11:16 PM, Antony Stone wrote: I see you have maximum_object_size in your quid.conf after

Re: [squid-users] Re: squid rock caching memory RAM

2014-07-10 Thread Eliezer Croitoru
You can try my repository at: http://www1.ngtech.co.il/rpm/centos/6/ There is also a head repository at: http://www1.ngtech.co.il/rpm/centos/6/x86_64/head/ I would still suggest the 3.4 branch. Eliezer On 07/10/2014 10:15 AM, israelsilva1 wrote: hmm, that's how I installed squid. weird:

Re: [squid-users] Blocking spesific url

2014-07-10 Thread Eliezer Croitoru
Why don't you cache it? Take a look at: https://redbot.org/?uri=http://eaassets-a.akamaihd.net/battlelog/background-videos/naval-mov.webm Eliezer On 07/10/2014 10:21 AM, Andreas Westvik wrote: So this is driving me crazy. Some of my users are playing battlefield 4 and battlefield have this

[squid-users] Re: squid rock caching memory RAM

2014-07-10 Thread israelsilva1
ok, but which version do I have in the end? 3.head 20140127 or 3.5.0? please see my post above -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-rock-caching-memory-RAM-tp476p4666795.html Sent from the Squid - Users mailing list archive at

Re: [squid-users] Re: squid rock caching memory RAM

2014-07-10 Thread Eliezer Croitoru
You have 3.HEAD but.. 3.5.00X is based on 3.HEAD of the dates between 3.4 and 3.5 stable. So you have squid-3.5.0.001 which is my first release of 3.HEAD after 3.4 got stable. Eliezer On 07/10/2014 10:42 AM, israelsilva1 wrote: ok, but which version do I have in the end? 3.head 20140127 or

[squid-users] Antwort: [squid-users] Create and download cache digest to create proxy siblings

2014-07-10 Thread Klaus Reithmaier
Now I'v read, that the right URL to the cache digest is   http://test.lut.ac.uk:3128/squid-internal-periodic/store_digest (See here #8: http://www.squid-cache.org/CacheDigest/cache-digest-v5.txt) But it seems, that my squid doesn't create this store_digest file, because wget says error 404.

[squid-users] Re: squid rock caching memory RAM

2014-07-10 Thread israelsilva1
ok, so should I uninstall squid and install using the latest 3.4 version from www1.ngtech.co.il/rpm/centos/6/x86_64? thanks -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-rock-caching-memory-RAM-tp476p4666799.html Sent from the Squid - Users

Re: [squid-users] Re: squid rock caching memory RAM

2014-07-10 Thread Eliezer Croitoru
Depends on how adventurous you are. The 3.4 is the official stable version and should work fine for most admins. If you want to try the latest code and leave yourself open (basically) for unknown bugs and unknown situations feel free. In anyway it mostly depends on your needs. I have used

Re: [squid-users] Antwort: [squid-users] Create and download cache digest to create proxy siblings

2014-07-10 Thread Eliezer Croitoru
What OS are you using? Is it a self compiled squid? if so, can you run the basic_data.sh script from here: http://www1.ngtech.co.il/squid/basic_data.sh It has too much data so feel free to filter most of it. In your case a basic squid -v should give the basic info. Eliezer On 07/10/2014 11:26

[squid-users] Passing Information up to the eCap adapter

2014-07-10 Thread Jatin Bhasin
Hello, As I understand currently squid can send client IP address up to the eCap adapter using squid configuration directive *adaptation_send_client_ip.* I needed more information in my eCap adapter so I changed the squid source code to be able to send *Client Port, Destination Address and

[squid-users] Re: squid rock caching memory RAM

2014-07-10 Thread israelsilva1
Thanks for the clarifications! Cheers Eliezer Croitoru-2 wrote Depends on how adventurous you are. The 3.4 is the official stable version and should work fine for most admins. If you want to try the latest code and leave yourself open (basically) for unknown bugs and unknown situations

Re: [squid-users] Passing Information up to the eCap adapter

2014-07-10 Thread Antony Stone
On Thursday 10 July 2014 at 12:34:37, Jatin Bhasin wrote: Hello, As I understand currently squid can send client IP address up to the eCap adapter using squid configuration directive *adaptation_send_client_ip.* I needed more information in my eCap adapter so I changed the squid source

Re: [squid-users] Antwort: [squid-users] Create and download cache digest to create proxy siblings

2014-07-10 Thread Klaus Reithmaier
Thanks for your help, but I just found the problem by myself. It was a layer 8 problem: I've copy pasted the configuration parameter from a wrong documentation. It was documented as --enable-cache-digest, but the right parameter is --enable-cache-digests Now it's working. Thanks anyway...

Re: [squid-users] Passing Information up to the eCap adapter

2014-07-10 Thread Jatin Bhasin
Hi Antony, Yes I need the source and destination MAC address of the packet which is received by squid (I am happy with that). Also I did think at first that squid would not have access to the source and destination MAC of the packet as you said that it would have been stripped off by the

Re: [squid-users] Blocking spesific url

2014-07-10 Thread Alexandre
I imagine it is not cached because you either don't have caching enabled or the size of the video is larger than the maximum object cache size. This is defined in maximum_object_size (default is 4MB). Increasing this for everything will obviously have some impact. I don't know if you can force

Re: [squid-users] Blocking spesific url

2014-07-10 Thread Leonardo Rodrigues
Em 10/07/14 09:04, Alexandre escreveu: Concerning blocking the specific URL. Someone correct me if I am wrong but I don't believe you can not do this with only squid. The squid ACL system can apparently block per domain: http://wiki.squid-cache.org/SquidFaq/SquidAcl Of course you can

[squid-users] Transparent proxying and forwarding loop detected

2014-07-10 Thread Peter Smith
Hi list, I'm running Squid 3.3 on Linux as part of a wireless hotspot solution. The box has two network interfaces: one to the outside world, the other a private LAN with IP 10.0.0.1. On the LAN I'm using CoovaChilli as an active portal. I'd like to transparently intercept and cache web traffic

[squid-users] Re: Transparent proxying and forwarding loop detected

2014-07-10 Thread babajaga
Having a very similar config like you, up and running(squid+chilli), you better ask in a chilli forum OR in the chilli group of linkedin. (I am there, too :-) Cause there are several issues to be considered with our setup: - Proper config of iptables, as chilli also modifies them. And for

Re: [squid-users] Blocking spesific url

2014-07-10 Thread Alexandre
My bad. I need to check squid ACL in more detail. I guess squidguard main advantage is speed when dealing with large list of URL then. Alexandre On 10/07/14 14:31, Leonardo Rodrigues wrote: Em 10/07/14 09:04, Alexandre escreveu: Concerning blocking the specific URL. Someone correct me if I am

Re: [squid-users] Squid v3.4.6 SMP errors

2014-07-10 Thread Alex Rousskov
On 07/09/2014 02:42 PM, Mike wrote: (squid-coord-8): Ipc::Mem::Segment::attach failed to mmap(/squid-squid-page-pool.shm): (22) Invalid argument If there are no other errors before that, try stracing Squid and its kids (one strace file per kid). The problem may be happening _before_ the mmap()

[squid-users] fallback to TLS1.0 if server closes TLS1.2?

2014-07-10 Thread Vadim Rogoziansky
Hello All. Do you have any ideas how we can resolve it? I have the same issue.

[squid-users] Re: Waiting for www...

2014-07-10 Thread m3tatr0n
Cool... thank you very much babajaga! -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Waiting-for-www-tp4666774p4666815.html Sent from the Squid - Users mailing list archive at Nabble.com.

[squid-users] access log request size x google drive

2014-07-10 Thread fernando
Hi there, I configured my squid.conf to generate a second access log but using the client request size (%st) in place of the response size (%st): logformat upload %ts.%03tu %6tr %a %Ss/%03Hs %st %rm %ru %[un %Sh/%a %mt access_log stdio:/var/log/squid/upload.log logformat=upload access_log

[squid-users] how to implement access control using connetcing hostname and port

2014-07-10 Thread freefall12
some http proxy service providers here just assigned an unique proxy address and port to a user, and the user just need to enter the necessary proxy address and port to get access.I think this method is superior to username and password authentication, and also,this makes it possible to proxy a

Re: [squid-users] squid: Memory utilization higher than expected since moving from 3.3 to 3.4 and Vary: working

2014-07-10 Thread Amos Jeffries
On 8/07/2014 10:20 p.m., Martin Sperl wrote: The problem is that it is a slow leak - it takes some time (month) to find it... Also it only happens on real live traffic with high volume plus high utilization of Vary: Moving our prod environment to head would be quite a political issue inside

[squid-users] sorry, i updated my email mode, and i have a question about wccp

2014-07-10 Thread johnzeng
Hello Dear Everyone: i config wccp mode recently , but i found http request don't succeed to be sent via gre tunnel at wccp mode . This is my config , if possible , give me some advisement , Thanks again. 19:36:58.728514 IP 192.168.5.66.37225 180.149.132.165.http: Flags [F.], seq 0, ack

Re: [squid-users] fallback to TLS1.0 if server closes TLS1.2?

2014-07-10 Thread Alex Rousskov
On 04/11/2014 11:01 PM, Amm wrote: I recently upgraded OpenSSL from 1.0.0 to 1.0.1 (which supports TLS1.2) Now there is this (BROKEN) bank site: https://www.mahaconnect.in This site closes connection if you try TLS1.2 or TLS1.1 When squid tries to connect, it says: Failed to

Re: [squid-users] how to implement access control using connetcing hostname and port

2014-07-10 Thread Amos Jeffries
On 11/07/2014 2:34 p.m., freefall12 wrote: some http proxy service providers here just assigned an unique proxy address and port to a user, and the user just need to enter the necessary proxy address and port to get access.I think this method is superior to username and password

Re: [squid-users] access log request size x google drive

2014-07-10 Thread Amos Jeffries
On 11/07/2014 7:18 a.m., fernando wrote: Hi there, I configured my squid.conf to generate a second access log but using the client request size (%st) in place of the response size (%st): logformat upload %ts.%03tu %6tr %a %Ss/%03Hs %st %rm %ru %[un %Sh/%a %mt access_log

Re: [squid-users] fallback to TLS1.0 if server closes TLS1.2?

2014-07-10 Thread Amm
On 07/11/2014 09:45 AM, Alex Rousskov wrote: On 04/11/2014 11:01 PM, Amm wrote: I recently upgraded OpenSSL from 1.0.0 to 1.0.1 (which supports TLS1.2) Now there is this (BROKEN) bank site: https://www.mahaconnect.in This site closes connection if you try TLS1.2 or TLS1.1 snip When