[squid-users] Fw: new message

2015-10-27 Thread Chris Robertson
Hey! New message, please read <http://americantrailermart.com/sea.php?uo> Chris Robertson ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] R: [squid-users] HTTP/1.0 417 Expectation failed

2010-02-19 Thread Chris Robertson
Riccardo Castellani wrote: I ask if Squid previous versions ignored Expect header forwarding request to server. But now why Squid code (2.7 version) detects this header and it handles it as error ? Why has this Squid behaviour been modified ? Given the following scenario... Some random

Re: [squid-users] One instance as both, proxy and reverse proxy

2010-02-19 Thread Chris Robertson
Bastian Spanneberg wrote: Hi all I'm trying to find out if the following scenario is possible with Squid: I want to run 1 instance of Squid, which acts as both, a proxy with proxy authentication and as a reverse proxy for different web/app servers in the back. Is there a way for squid to

Re: [squid-users] Active Directory based URL control

2010-02-19 Thread Chris Robertson
Fabio Almeida wrote: Hi all, Can I use Active Directory to store URLs, Words, etc with external_acl statement? As long as you can craft an external_acl script to query it, yes. I've sucessfully configured squid to authenticate users and groups against Active Directory. I'm wondering if I

Re: [squid-users] Cache manager analysis

2010-02-16 Thread Chris Robertson
J. Webster wrote: Ok - thanks. 2.HEAD - has this been included in the CentOS repository yet? It doesn't look to even be in the CentOSPlus repos. I believe CentOS only has 2.6 Using the packaged software is fine if you are willing to accept the compromises that have been made. RHEL 5

Re: [squid-users] Different port per ip

2010-02-16 Thread Chris Robertson
cio...@gmail.com wrote: Is it possible to restrict access to each ip but with a different port for each ip? for example: user1 has access to ip1 port 8000 user2 has access to ip2 port 8001 Given proper declaration of the acls user1, user2, ip1, ip2, port8000 and port8001... http_access

Re: [squid-users] Creating ip exception

2010-02-16 Thread Chris Robertson
Jose Ildefonso Camargo Tolosa wrote: On Mon, Feb 15, 2010 at 12:34 AM, Martin Connell mconn...@richmondfc.com.au wrote: Dear Squid, I am a new squid user, and I¹ve been relegated the task of creating a couple of exceptions based on IP address. So basically, we have our squid setup so

Re: [squid-users] url_rewrite_program question

2010-02-12 Thread Chris Robertson
Landy Landy wrote: Hello. I would like to test something I found on the internet: videocache and thundercache along with squid. Already videocache works great with squid but, thundercache uses the same directive so, I don't know how to use the two of these together. I tried:

Re: [squid-users] what happens whens quid cache gets full?

2010-02-12 Thread Chris Robertson
J. Webster wrote: I have my squid cache size set to 4 - is this in MB or kb? To quote http://www.squid-cache.org/Doc/config/cache_dir/: Usage: cache_dir Type Directory-Name Fs-specific-data [options] ... The ufs store type: ... cache_dir ufs Directory-Name

Re: [squid-users] cache manager access from web

2010-02-11 Thread Chris Robertson
J. Webster wrote: I have changed the config and can now login to the cache manager. This was in the conf already: http_access deny CONNECT !SSL_ports The placement of that line is important. Squid's access controls work on a first match basis. I strongly advise reading the FAQ section on

Re: [squid-users] need help.....

2010-02-11 Thread Chris Robertson
David C. Heitmann wrote: how can i block msn live messenger or icq 1) Craft an Acceptable Use Policy with the provision that Internet access requires your customers to refrain from using chat programs. Add an appropriate penalty (loss of internet access, posting of names to a hall of

Re: [squid-users] Issues with storeurl_rewrite

2010-02-11 Thread Chris Robertson
John Villa wrote: Hello, What I am trying to do is use storeurl_rewrite to rewrite some urls before storing some URLs in cache but I always get cache MISS for those URLs configured in acl storeurl_rewrite_list . Is there something I might be missing or perhaps I need to declare certain

Re: [squid-users] Diagnosing Objects That Are Not Cached (squid/3.0.STABLE8)

2010-02-11 Thread Chris Robertson
Norbert Hoeller wrote: Although my squid server is only supporting three users, I am pleasantly surprised at the percentage of traffic handled by the cache. However, I think I can do better. Scanning the logs, I noticed a number of cases where the same files were resulting in a TCP_MISS/200

Re: [squid-users] cache manager access from web

2010-02-10 Thread Chris Robertson
J. Webster wrote: Doesn't the fact that the manager needs a password in previous config lines mean that they can't access it? Fair enough, if you are content with that. the ncsa_users is only for http access? The cachemgr interface is accessed via HTTP. It uses a specific request

Re: [squid-users] cache manager access from web

2010-02-09 Thread Chris Robertson
Amos Jeffries wrote: J. Webster wrote: I have followed the tutorial here: http://wiki.squid-cache.org/SquidFaq/CacheManager and set up acls to access the cache manager cgi on my server. I have to access this externally for the moment as that is the only access to the server that I have (SSH

Re: [squid-users] Authentication Browser Dialog

2010-02-09 Thread Chris Robertson
Christian Weiligmann wrote: Am Dienstag, den 09.02.2010, 17:10 +1300 schrieb Amos Jeffries: Christian Weiligmann wrote: Hello, i use the squidproxy over 10 years, an i am very happy to have this programm for internet access, the user may look different about this. But, I have a

Re: [squid-users] using parent cache and parent dns

2010-02-09 Thread Chris Robertson
im notreal wrote: Basically here is my setup: I have a cache located on an oil rig down south and one in the home office. There is a dns in the home office that I don't have access to on the rig, and there is one on the rig. There are webservers in both locations (management and control

Re: [squid-users] Restrict access to proxies by IP

2010-02-04 Thread Chris Robertson
ad...@mynovanet.com wrote: Thanks Chris. I read the FAQ and saw how to limit URLs by IP but not how to authorize proxy access by ACL. Any further suggestions? cache_peer_access (http://www.squid-cache.org/Doc/config/cache_peer_access/) Chris

Re: [squid-users] Unsupported method

2010-02-04 Thread Chris Robertson
Landy Landy wrote: Hello. How can I avoid these lines: 2010/01/31 19:44:21| clientParseRequestMethod: Unsupported method attempted by 172.16.100.56: This is not a bug. see squid.conf extension_methods 2010/01/31 19:44:21| clientParseRequestMethod: Unsupported method in request

Re: [squid-users] Do not cache 302 !!

2010-01-28 Thread Chris Robertson
Amos Jeffries wrote: Youenn Boussard wrote: Hello the list, I put this directive in my squid.conf : acl redirect rep_header Location . no_cache deny redirect So I expect that all response with Location header will be not cache. Or when the first url is HTTP/1.1 302 Moved Temporarily Date:

Re: [squid-users] Restrict access to proxies by IP

2010-01-28 Thread Chris Robertson
ad...@mynovanet.com wrote: We have several clients using select proxies. Currently we authorize all users in Squid: acl localnet src 123.45.67.89 (user1) 123.45.67.90 (user2) 123.45.68.10 (user3) Then we give them each a list of proxies they may use. However, because all proxies are

Re: [squid-users] Re: squid crashing

2010-01-28 Thread Chris Robertson
tcygne wrote: Well it was easy to set up squid3. I got to get used to using squid3 as a command instead of squid. I copy and pasted my original squid.conf and it seems to be caching on the test box. I did get the following error when starting squid with this squid.conf

Re: [squid-users] Poor mans static CDN

2010-01-26 Thread Chris Robertson
beac...@tiscali.co.uk wrote: Original Message From: crobert...@gci.net Date: 26/01/2010 0:24 To: squid-users@squid-cache.org Subj: Re: [squid-users] Poor mans static CDN snip A simple redirect program that strips a leading cache. from the requested domain name will give you

Re: [squid-users] Squid performance issues

2010-01-26 Thread Chris Robertson
Felipe W Damasio wrote: Hi all, Sorry for the long email. I'm using squid on a 300Mbps ISP with about 10,000 users. I have an 8-core I7 Intel processor-machine, with 8GB of RAM and 500 of HD for the cache. (exclusive Sata HD with xfs). Using aufs as storeio. I'm caching mostly

Re: [squid-users] MSN rules

2010-01-26 Thread Chris Robertson
Roland Roland wrote: Hi all, i've followed an advice in this mailing list and set the following rule for MSN: acl msn urlpath_regex -i gateway.dll acl msnd dstdomain messenger.msn.com gateway.messenger.hotmail.com acl msn1 req_mime_type application/x-msn-messenger http_access allow msnd

Re: [squid-users] running out of filedescriptors

2010-01-26 Thread Chris Robertson
Landy Landy wrote: Won't do no good. Landy's Squid compile time option is 16384 max. So either she stumbled over a bug or the Squid is under a higher load with lots of connections. Landy, are you graphing Squids connections and traffic? Does Squid use up the file descriptors slowly over a

Re: [squid-users] Squid performance issues

2010-01-26 Thread Chris Robertson
Felipe W Damasio wrote: Hi Mr. Robertson, 2010/1/26 Chris Robertson crobert...@gci.net: Do you have any idea or any other data I can collect to try and track down this? Check your log rotation schedule. Is it possible that logs are being rotated at midnight? I think

Re: [squid-users] Squid performance issues

2010-01-26 Thread Chris Robertson
Felipe W Damasio wrote: Hi Mr. Robertson, 2010/1/26 Chris Robertson crobert...@gci.net: I don't use -k rotate. Err... Really? Last I heard, calling squid -k rotate (aside from the obvious logfile rotation) prunes the swap.state file. Not doing so would lead to your

Re: [squid-users] Re: bypassing upstream proxy

2010-01-26 Thread Chris Robertson
Danil Nafikov wrote: My squid proxy is configured to use upstream proxy. But one site should to be accessed to all users bypassing upstream proxy. (through my proxy, but bypassing upstream) How to do that? http://www.squid-cache.org/Doc/config/always_direct/ All users have static ip

Re: [squid-users] Bypass proxy for one user

2010-01-25 Thread Chris Robertson
Dayo Adewunmi wrote: Hi On our LAN, you can't access the internet without having the proxy settings in your browser. I've got one user coming in, who's laptop is locked-down, and unfortunately his browser's set to use no proxy. How do I configure squid to let him access the internet

Re: [squid-users] Requests Per Second

2010-01-25 Thread Chris Robertson
BarneyC wrote: The 800 RPS is on a 100Mb/s network? The 5000 RPS? That was my question. I'm not really concerned with what other people get on their systems, as every system will be different. I want to know how many RPS I can expect to encounter on a busy 100Mb/s residential network. I

Re: [squid-users] Poor mans static CDN

2010-01-25 Thread Chris Robertson
beac...@tiscali.co.uk wrote: Hi, Is there any way to configure the following scenario? I run a wordpress blog and wish to offload the static content to squid by re- writing the hostnames in the templates. We have plenty of bandwidth on tap but the apache resources on our VM appear to be

Re: [squid-users] Setting up Parent Proxy ?

2010-01-25 Thread Chris Robertson
Roland Roland wrote: Hi all, i have a cisco based tunnel set between my two branches i've setup another squid at the remote branch and im trying to use it as a parent proxy JUST for specific results. for example: going to 192.168.75.1/24 should go through the parent proxy.. and

Re: [squid-users] what do i need to get the job done, performance squid

2010-01-22 Thread Chris Robertson
william wrote: i would assigh 12GB memcache and four disks with diskd to each instance. Last I heard, diskd was not the recommended cache_dir algorithm under Linux. If you are looking for maximum performance, Squid 2.7 with a combination of COSS and aufs is the current route to take. On

Re: [squid-users] (0) Success but FATAL: failed to find or read error text file

2010-01-22 Thread Chris Robertson
Andre Iskandar wrote: Hallo, I compile squid 2.7 stable7 using this command: CHOST=i686-pc-linux-gnu CFLAGS=-O3 -pipe -fomit-frame-pointer -funroll-loops -ffast-math -fno-exceptions -fforce-addr -malign-double ./configure --enable-gnuregex --enable-async-io=60 --with-aufs-threads=60

Re: [squid-users] Re: CHALLENGE: LAN - TRANSPARENT PROXY - MULTIPLE VPNS. How to put it together?

2010-01-22 Thread Chris Robertson
Dimitri Syuoul wrote: I apologize for the repeated email... got sent before time. To finish on the example: LanUser1 makes an http request - The HTTP request is processed on a BOX that acts as a gateway -- That same box has squid installed and filters the http request (Normal ACLs) --

Re: [squid-users] OT N1

2010-01-22 Thread Chris Robertson
Glenn English wrote: I'm trying to force a host to go through a proxy without it wanting to. I'm one of the 3 or 4 people who bought a Google Nexus One on day 0. It's a reasonably delightful gadget, with one monster flaw: it isn't possible to set a web proxy (without significant warranty

Re: [squid-users] clearing cache

2010-01-21 Thread Chris Robertson
Jeronimo Garcia wrote: On Thu, Jan 21, 2010 at 2:13 PM, Matheus matthe...@gmail.com wrote: Hi guys, am really a learner amused by squid, please help me and show me how to clear the cache, my problem is that my HDD is running low as of now!! critical in a few days time. Please help. otherwise

Re: [squid-users] Fwd: how to use squid external_acl_type to enforce policy based authentication

2010-01-19 Thread Chris Robertson
kiran kumar wrote: Dear All, I'm trying to use external_acl_type with squid3-stable-19 to enforce user Authentication. I don't want to authenticate every request but have Squid talk to my policy framework before deciding either to authenticate or skip authentication for the request. The policy

Re: [squid-users] %U doesn't display full URL path

2010-01-19 Thread Chris Robertson
Mattps wrote: When using %U on a custome err_denied page the full URL path is not displayed. If the denied condition was trigged from a search engine link, e.g Google, %U gives : http://www.google.co.uk/url? In the access log this is a variable (%rp) that displays the full path. Is there an

Re: [squid-users] Problem using different ports

2010-01-14 Thread Chris Robertson
Andreas Müller wrote: Hello, I have a little problem using 2 ports for an accel. Port 80 should be send to cache peer on port 80 (originalserver) Port 8080 should be send to cache peer on port 8080 (originalserver) Here's the config I used:

Re: [squid-users] testing squid-3.1.0.15 - X-Forwarded-For problem

2010-01-12 Thread Chris Robertson
Eduardo Maia wrote: Hello, I'm testing squid-3.1.0.15 on a mandriva 2009 clone 64 bits. It seems the squid can not see the X-Forwarded-For header correctly. All logs have the correct IP (x-forwarded), but the function authenticateAuthUserAddIp doesn't see the forwarded IP:

Re: [squid-users] Apache 301 redirects working with squid

2010-01-12 Thread Chris Robertson
Drew Wrobel wrote: Date: Fri, 8 Jan 2010 12:23:11 -0900 From: crobert...@gci.net To: squid-users@squid-cache.org Subject: Re: [squid-users] Apache 301 redirects working with squid Drew Wrobel wrote: I have the redirects working with squid and apache. Of course now I have a new wrinkle.

Re: [squid-users] Apache 301 redirects working with squid

2010-01-08 Thread Chris Robertson
Drew Wrobel wrote: I have the redirects working with squid and apache. Of course now I have a new wrinkle. Here are the rules I currently have defined: http_port 80 accel vport cache_peer 172.21.174.78 parent 80 0 no-query originserver round-robin login=PASS acl mainSite dstdomain

Re: [squid-users] reverse proxy caching authenticated sites

2010-01-08 Thread Chris Robertson
Nikolaos Pavlidis wrote: Hello all, What I am trying to do is have two reverse proxies to share data and cache sites that need authentication as well. With your help previously I completed the first task so the two proxies now share caches and I can see the SIBLING_HITs on the logs (that make

Re: [squid-users] acl rep_header SomeRule X-HEADER-ADDED-BY-ICAP

2010-01-06 Thread Chris Robertson
Trever L. Adams wrote: On 01/-10/-28163 12:59 PM, Chris Robertson wrote: Considering the fact that icap_access relies on ACLs, my guess would be ICAP is adding the headers after the rep_header ACL is evaluated. Is this possible with ICAP + Squid, or is it a bug, or just not possible

Re: [squid-users] coss storage scheme.

2010-01-06 Thread Chris Robertson
Jeronimo Garcia wrote: Hi all. I've been looking at a bunch of benchmarks about storage schemes for squid and coss looks rather impressive , but , reading squid the definitive guide i got to know that the code might be a bit beta/unstable.

Re: [squid-users] show orgin client's IP address.

2010-01-05 Thread Chris Robertson
Calvin Park wrote: Hello Squid users~ My system configuration below. | Apache ( Origin ) |--- | Squid ( Transparent Proxy or Proxy ) | --- | Client | I want to see client's IP address at Apache side. I knew one solution using by SQUID : follow_x_forwarded_for follow_x_forwarded for

Re: [squid-users] acl rep_header SomeRule X-HEADER-ADDED-BY-ICAP

2010-01-05 Thread Chris Robertson
Trever L. Adams wrote: I seem to be having trouble with acl rep_header trying to match against an X-Header added by ICAP from the squid server in question. acl TextAdultContent rep_header X-TEXT-CATEGORYadult.* acl TextConfidenceSolid rep_header X-TEXT-CATEGORY-CONFIDENCE

Re: [squid-users] Time out problems in squid 3.0Stable 20

2010-01-05 Thread Chris Robertson
Asim Ahmed @ Folio3 wrote: Hi, I am running Squid Cache: Version 3.0.STABLE20 on Red Hat Enterprise Linux Server release 5.3 (Tikanga). A few users complain that some time requests to remote client servers that take around 15-20 minutes (legitimate and expected time) are timed out when going

Re: [squid-users] Squid Authentication Problem

2010-01-05 Thread Chris Robertson
michael_gra...@cadc.uscourts.gov wrote: I'm running Squid 3.0 Stable 21. I have two reverse proxy sites setup with LDAP authentication enabled. How is the authentication prompted for (is it using HTTP auth, or a form)? When I access either site, authentication works fine. My problem is when

Re: [squid-users] Multiple-Instance Questions

2010-01-05 Thread Chris Robertson
Jason Healy wrote: I've been inspired by the recent discussions to set up my own multiple-instanace Squid box. I've got it running with some real connections in a basic config, and I think I've got most of the general config issues worked out. I have questions about some of the advanced

Re: [squid-users] Apache 301 redirects working with squid

2010-01-05 Thread Chris Robertson
Drew Wrobel wrote: Amos, I'm sorry that I didn't report the version of Squid that I am running. Currently I am running 2.6 STABLE 22. I will be upgrading to the latest 2.7 or 3.0 in the near future. Here is what I have in my squid.conf with the changes that you suggested: acl all src

Re: [squid-users] Squid LDAP Auth and ACL Integration

2010-01-04 Thread Chris Robertson
ml ml wrote: Hi, thanks for the reply. However, i cant get the proof-of-concept working on the command line: echo mo | squid_ldap_group -b dc=my-domain,dc=com -f cn=mo -F cn=mo -h localhost -D cn=Manager,dc=my-domain,dc=com -w secret it always returns ERR. So, user with common name of

Re: [squid-users] Expires Header

2010-01-04 Thread Chris Robertson
Dusten Splan wrote: Thanks for the response Chris but I don't think that is was I'm looking for. What I would like to do is overwrite the expires header to something far in the future. I am also running squid 3.0. Thanks Dusten Ah. For 3.0 you will want to use reply_header_access

Re: [squid-users] Forward Cache not working

2010-01-04 Thread Chris Robertson
Mike Makowski wrote: Hello all, I'm new to squid. Currently have squid3 installed on a 64-bit ubuntu box. Fresh install with default YUM settings. I am trying to get the forward proxy cache to work for one very specific application that is running on multiple servers on my LAN. Instead of

Re: [squid-users] Forward Cache not working

2010-01-04 Thread Chris Robertson
Mike Makowski wrote: Here is my basic config. Using defaults for everything else. acl localnet src 172.16.0.0/12 http_access allow local_net maximum_object_size 25 MB Here is a log entry showing one connection from a LAN user through the proxy. I am guessing that the TCP_MISS is significant.

Re: [squid-users] Squid LDAP Auth and ACL Integration

2009-12-31 Thread Chris Robertson
ml ml wrote: Hello List, i read that its quite easy to get squid with ldap auth running. I would also like to manage Black/White URL-Lists in ldap. Can this be done via ldap, too? Yes, it can be done. It's roll-your-own, however...

Re: [squid-users] Expires Header

2009-12-31 Thread Chris Robertson
Dusten Splan wrote: Does anyone know how to change the expires header in the http response that squid sends. I have an object that has one in the past and when being forwarded to the CDN because it's in the past it's only keeping the content for 1 day. I would like to do this in squid and not

Re: [squid-users] Load balancing WITHOUT parents over multiple WAN connections

2009-12-30 Thread Chris Robertson
Jon DeLee wrote: *This message was scanned for all current viruses and is certified clean* Hi All, I'm using Squid 3.0. STABLE 8 as my main cache, and I have two other 2.7 caches set up, one on each WAN connection. The only reason we have multiple proxy servers is to load balance; in

Re: [squid-users] Re: How much disk space is reclaimed by the cache replacement algorithms?

2009-12-23 Thread Chris Robertson
RW wrote: On Wed, 23 Dec 2009 17:58:41 +0100 Matus UHLAR - fantomas uh...@fantomas.sk wrote: 1. How often is the replacement done? when the percentage of configured cache_dir size crosses the cache_swap_high value. I haven't looked at the code for a long-time and I only

Re: [squid-users] [ASK ] forwards and still carried src_address client??

2009-12-22 Thread Chris Robertson
jajaka hejo wrote: hi... can my squid forwards the packet from client and still carried src_address client to my router??? regard and sorry for my bad english :D http://wiki.squid-cache.org/Features/Tproxy4 Chris

Re: [squid-users] site blank

2009-12-22 Thread Chris Robertson
Jefferson Diego wrote: Em 20-12-2009 18:24, roberto palmarin escreveu: Dear all ,I got problem to access http://www.antefatto.it through proxy (site can be accessed without proxy). The Browser remain blank. the server is: CentOS release 5.4 (Final) the version of squid is

Re: [squid-users] Fording NTLM auth to Parent server

2009-12-22 Thread Chris Robertson
Momo wrote: Hi Folks, I was recently asked to put some transparent authentication on our corporate web access. As the server that does the authentication and access log job is off site, it has been decided to put a Squid proxy server beetween the clients this proxy to have some site local

Re: [squid-users] Best Configuration for sibling peer

2009-12-16 Thread Chris Robertson
Kris wrote: Dear All, i have 4 proxy server with about 1000 request per second average , i have extra free nic in every server and i connected that 4 proxy to 1 switch and give them 1 network ip. i set 4 proxy as SIBLING each other. after few days i got problem like. 1. weird error log

Re: [squid-users] Squid does not start/shutdown properly

2009-12-16 Thread Chris Robertson
david.kauffm...@it-partner.de wrote: I have two machines, both running squid3. One runs stable1 and the other stable19. The one running stable1 is on a virtual machine. When i execute /etc/init.d/squid3 on both machines, this is what i get on stable1: /etc/init.d/squid3 Usage:

Re: [squid-users] Reverce proxy setup with neighboor support

2009-12-16 Thread Chris Robertson
Nikolaos Pavlidis wrote: Hello all, I figured the easiest way to describe what I am trying to do is to... draw it. First of all pardon my ignorance since I am relatively new to squid. Any help will be much appreciated. The Problem: Dec 9 17:42:35 cache2 squid[27234]: WARNING: Forwarding

Re: [squid-users] Best Configuration for sibling peer

2009-12-16 Thread Chris Robertson
Kris wrote: Chris Robertson wrote: Kris wrote: Dear All, i have 4 proxy server with about 1000 request per second average , i have extra free nic in every server and i connected that 4 proxy to 1 switch and give them 1 network ip. i set 4 proxy as SIBLING each other. after few days i got

Re: [squid-users] (104) Connection reset by peer on http://www.unitedfamilyhospitals.com

2009-12-15 Thread Chris Robertson
Profeta, Dante wrote: Hi all, After a minute or two of stall while contacting http://www.unitedfamilyhospitals.com we are getting the following error: snip --- While trying to retrieve the URL: http://www.unitedfamilyhospitals.com/ The following error was encountered: * Read Error The

Re: [squid-users] https traffic squid

2009-12-15 Thread Chris Robertson
Asim Ahmed @ Folio3 wrote: Hi, I am using squid 3.0 STABLE20 on RHEL5 in conjunction with shorewall 4.4.4-1. I am using squid in non-transparent proxy mode. Currently I m working like this: Shorewall squid are installed on same box. Shorewall is listening on this box on local interface

Re: [squid-users] How to configure Parnet Proxy(cache-peer)

2009-12-15 Thread Chris Robertson
ASHOKKUMAR PURUSHOTHAMAN wrote: Hello All, Infrastructure : M/c OS : Win 2003 server Parent Proxy is : www-xxx.us.org.com:80 All my request should be gone through with this proxy. Can anyone tell me how to configure the same?

Re: [squid-users] How to force squid to cache files when using auth ?

2009-12-14 Thread Chris Robertson
Thomas Bergerot wrote: Hi again, I've used the following option : refresh_pattern /files/ 60 100% 70 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-private ignore-auth Since the requests i want to cache are : http://www.whatever.com/files/myfile

Re: [squid-users] non-transparent squid and port 8080 traffic

2009-12-14 Thread Chris Robertson
Asim Ahmed @ Folio3 wrote: Chris Robertson wrote: Asim Ahmed @ Folio3 wrote: hi all, I am using squid 3.0Stable20-1 along with Shorewall 4.4.4-1 on a RHEL5 box. I had a few problems running squid in transparent mode so now I am running it in non-transparent mode. Please use the term

Re: [squid-users] SquidGuard cgi problem

2009-12-14 Thread Chris Robertson
Arthur Dent wrote: On Thu, 2009-12-10 at 20:50 +, Arthur Dent wrote: Hello all, I have been using squid / squidGuard for so long now that I have completely forgotten how I set it up! Now, following a recent upgrade to SQUID 3.0.STABLE20 I find that the squidGuard redirect page fails

Re: [squid-users] Squid reverse proxy on DMZ

2009-12-10 Thread Chris Robertson
Cactus Co wrote: I have read in the wiki example of reverse proxy vhost and I have questions. Please, I am inexperienced in Squid and I'm trying to install it on my webserver in a DMZ running a reverse proxy, but does not work. In the outgoing Internet server and in DMZ webserver (apache2)

Re: [squid-users] How to force squid to cache files when using auth ?

2009-12-10 Thread Chris Robertson
Thomas Bergerot wrote: Hi everyone, I'm using squid to cache files inside our network. When the requests are not using authentication, the files are cached in the swap directories. I've got a software that uses basic authentication with the server to download files, and i noticed that Squid

Re: [squid-users] non-transparent squid and port 8080 traffic

2009-12-10 Thread Chris Robertson
Asim Ahmed @ Folio3 wrote: hi all, I am using squid 3.0Stable20-1 along with Shorewall 4.4.4-1 on a RHEL5 box. I had a few problems running squid in transparent mode so now I am running it in non-transparent mode. Please use the term interception instead of transparent. Every thing like

Re: [squid-users] Squish

2009-12-09 Thread Chris Robertson
hosseinyounesi wrote: Hi again, No one has answered me yet :( for squish, chekc http://www.ledge.co.za/software/squint/squish/ this out. As I said in previous question, I want to control A GROUP of USERS download size. Any way to do this with squid and it's addons? any other way/tool?

Re: [squid-users] Storing more squid config into LDAP

2009-12-09 Thread Chris Robertson
Felipe Augusto van de Wiel wrote: Hi, I'm already using LDAP authentication and the company I work for tries to put a lot of authentication and authorization (meta-)information inside LDAP. This week, we were wondering if it is possible to use LDAP as a backend for acl lists.

Re: [squid-users] Transparent Vs Non-transparent proxy

2009-12-09 Thread Chris Robertson
Asim Ahmed @ Folio3 wrote: Hi, I need an expert opinion on best suitable setup for my requirement. I am running shorewall 4.4 on RHEL 5 for NATTING/FIREWALLING. I've installed SQUID-3.0STABLE20-1 on that same machine as well. Shorewall is REDIREC-ing port 80 traffic to squid. Currently Squid

Re: Fwd: [squid-users] TCP_Denied for when requesting IP as URL over SSL using squid proxy server.

2009-12-08 Thread Chris Robertson
kevin band wrote: Hi Amos, Thanks for the reply, I'm happy to accept what you say, but is there anything specific that tells you that it's the remote web-server rather than the squid-proxy that's rejecting the connection? Regarding, dstdomain, yes I am familiar with that, but it doesn't meet

Re: [squid-users] Delay Pools advice?

2009-12-08 Thread Chris Robertson
Roland Roland wrote: Hello, i've set up squid about 2 month ago with poorly configured settings just to set things going ( i admit it wasnt the right thing to do thoguh time were of the essence ) at the moment i decided that it's about time to take a look at each rule i've made and fix it

Re: [squid-users] Don't use ICP at all, don't ask, don't request, do nothing with ICP?

2009-12-08 Thread Chris Robertson
Dale Mahalko wrote: Our organization uses a centralized ISP 8e6 R3000 proxy that provides us with CIPA compliance. Because I don't have access to the ISP's 8e6 log files for our site, I have been using squid 2.7 STABLE3 as a proxy log / cache for the 8e6 box. It appears that the latest

Re: [squid-users] squid ceasing to function when interface goes down

2009-12-07 Thread Chris Robertson
ty...@marieval.com wrote: Original Message Subject: Re: [squid-users] squid ceasing to function when interface goes down From: Jose Ildefonso Camargo Tolosa ildefonso.cama...@gmail.com Date: Sun, December 06, 2009 10:44 am To: ty...@marieval.com Cc: squid-users@squid-cache.org

Re: [squid-users] Squid does not work after origin's server DirectoryIndex change

2009-12-07 Thread Chris Robertson
Adam Squids wrote: I had index.html redirecting to http://www.domain.com/online/1.html in my origin server. Now I changed Apache configs and set DirectoryIndex to be /online/1.html. Did you PURGE http://www.domain.com/index.html;? Is it, perhaps, still cached in Squid, redirecting to

Re: [squid-users] Could this be a potential problem? Squid stops working and requires restart to work

2009-12-07 Thread Chris Robertson
Asim Ahmed @ Folio3 wrote: Hi, I found this in cache.log when i restarted squid after a halt! CPU Usage: 79.074 seconds = 48.851 user + 30.223 sys Maximum Resident Size: 0 KB Page faults with physical i/o: 0 Memory usage for squid via mallinfo(): total space in arena:7452 KB

Re: [squid-users] Squid delay pool question

2009-12-07 Thread Chris Robertson
mikewest09 wrote: Hi Amos, Thanks a lot for your detailed explanation, I believe that I had big misunderstanding of how Classes work. Having said that, I am not sure if class 4 will be the best one for me because of two important reasons: A. All of our users login with the 'same' exact login

Re: [squid-users] Squid delay pool question

2009-12-03 Thread Chris Robertson
mikewest09 wrote: Hi all, I've installed Squid 3 on our server (connected to a 100 Mbps connection) which contains our website and Squid. Now what I hope to do in order to avoid having the bandwidth sucked by one user, is that limit the bandwidth usage under Squid so that at any given time a

Re: [squid-users] Squid delay pool question

2009-12-03 Thread Chris Robertson
Firstly, JINX!!! Second... Amos Jeffries wrote: # network aggregate. unlimited. # individual IPs: # first 15MB unlimited := 15728640 bytes. # after which 10Mbps := 1310720 _bytes_ per second. # delay_parameters 1 -1/-1 15728640/1310720 Amos, either you got your delay parameters

Re: [squid-users] RE: Squid 3.0 as reverse proxy

2009-11-23 Thread Chris Robertson
Sébastien WENSKE wrote: Sorry I've make a mistake, the url to get the original picture is http://gallery.wenske.fr/wallpapers/holland_dream_2560x1600.jpg.html?zp=full-image This will force the download of the picture. Regards, Sebastien WENSKE Your gallery software is not

Re: [squid-users] Quick question about squid serving images

2009-11-19 Thread Chris Robertson
Angelo Höngens wrote: Run this on your squid machine (example, assuming your squid listens on port 80): squidclient -p 80 -h apacheserver http://domain/image.jpg | head -n 15 Increase or decrease the 'head -n X' value to show all the headers, but not to return the binary content. For future

Re: [squid-users] Using Squid in a WiFi hotspot environment

2009-11-19 Thread Chris Robertson
Kaya Saman wrote: Many thanks Fahd and Matthew! So I was correct initially by thinking that CoovaChilli ran on the Linksys WRT range of routers. This I guess is great for a pocket installation but not what I'm looking for hardware wise at least. I believe that the software is probably what

Re: [squid-users] acl auth time

2009-10-26 Thread Chris Robertson
Michael Gargiullo wrote: I have a small squid proxy setup and running with basic authentication. It works. However, What I'd ultimately like to have is for three users to be blocked from 6am until 5:30pm, while 2 users are not time restricted. It appears to work, however if one of the three

Re: [squid-users] Forcing source IP of an authenticated user's concurrent connections to be the same

2009-10-26 Thread Chris Robertson
Junho Ryu wrote: Hello, When an authenticated user has multiple connections at the same time, I need to make sure that concurrent connections are from the same IP. However, as long as source IP of concurrent connections are the same, I don't want to limit IP address from where connections

Re: [squid-users] Help customizing ACLs sites with destination ports

2009-10-26 Thread Chris Robertson
Matthew Young wrote: Hello, Iam trying to default deny ALL ports, and then allow access to two type of users. a:) Users that can connect anywhere to port 80 and 443. b.) Users that can connect only to an allowed lists and only to PORT 80 on that allowed list, and connect to port 443 for

Re: [squid-users] Squid Server With Multiple Outgoing IPs, each ip with separate login and password

2009-10-26 Thread Chris Robertson
Leonardo Rodrigues wrote: Франсуа Мартiнес escreveu: Hi! i am going to buy dedicated server and organize proxy server. server has 250 IPs. I want each outgoing ip address to have its own login and password. so i give client ip with login and password. so i want to bind each outgoing ip witt

Re: [squid-users] Forwarding Apache .htaccess authentication

2009-10-14 Thread Chris Robertson
Kaya Saman wrote: Hi, this is my first post although been running Squid for a little while am still very new to it as I'm just transitioning between being an ex-student to a junior professional with UNIX stuff :-) Basically here's the issue: I would like to access some services in my

Re: [squid-users] Forwarding Apache .htaccess authentication

2009-10-14 Thread Chris Robertson
Kaya Saman wrote: Many thanks for the response!! From http://www.squid-cache.org/Versions/v2/2.6/cfgman/cache_peer.html... use 'login=PASS' if users must authenticate against the upstream proxy or in the case of a reverse proxy configuration, the origin web server. This will pass the

Re: [squid-users] allow adverts for allowed sites

2009-10-07 Thread Chris Robertson
mickeyp wrote: Hi, i have successfully configured my squid server using ntlm auth. my question is would it be possible to allow all the adverts that appear on a website that a group has access to or to block the adverts and not ask for authentication. my problem is i can access the sites i

Re: [squid-users] Squid.conf Question Reverse Proxy

2009-10-07 Thread Chris Robertson
Jones, Keven wrote: This is my current squid.conf. Could someone tell me what I need to add in order to accomplish adding a 2nd url img02.cprpt.com which will in turn point to a 2nd web server(172.19.23.92) which has separate Content that the existing server(172.19.23.91). http_port 80

  1   2   3   4   5   6   7   8   9   10   >