Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

If that is the edge server then it will be the audio/video Sent from my iPhone > On 6/12/2016, at 12:35, Amos Jeffries wrote: > >> On 6/12/2016 11:46 a.m., Sameh Onaissi wrote: >> >> I have a Ubuntu 16.04 server with Squid 3.5.22 installed. It acts as a >> gateway in a

[squid-users] Testing - please ignore

___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Cache Chrome updates

On 14/04/2014 19:32, Jasper Van Der Westhuizen wrote: Hi all I'm trying to cache chrome updates, but I see it always fetches over and over again. I have the following refresh pattern in my config. refresh_pattern -i pack.google.com/.*\.(exe|crx) 10080 80% 43200 override-expire

Re: [squid-users] Blank page on first load

My setup is 3 servers running squid 3-3.1.12-8.12.1 behind an F5 load balancer. From there I send all traffic to a ZScaler cache peer. In my testing I have bypassed the cache peer but without any success. Has anyone come across this problem before? Hi Jasper, Have you tried bypassing the

Re: [squid-users] what is best method to connect two squid servers on the same router?

Let's try this again While you are busy with the deb packages, how about not putting in a squid.conf and rather calling it squid.conf.default, or do include configs like Apache ? Pretty please ? :) I'm not sure I understand the first suggestion there about squid.cofn and

Re: [squid-users] what is best method to connect two squid servers on the same router?

On 13/05/2013 11:34, Amos Jeffries wrote: On 13/05/2013 2:26 a.m., Fix Nichols wrote: Heh if you are running Debian and lazy, you could 'apt-get install squid -y ; apt-get install squid3 -y' Youd have squid 2.7 and squid3 both installed. And wont work for much longer. We are in the process of

Re: [squid-users] Redirect Youtube out second ISP

Hi, I would just run 2 squids on the same box, iptables mark the second one's traffic for the second uplink (using multiple routing tables etc). The first squid then simply forwards all youtube traffic by URL - no IP issues etc. Cheers, Pieter On 21/02/2013 05:33, Ricardo Rios wrote: No

Re: [squid-users] Redirect Youtube out second ISP

On 16/02/2013 11:43, Stinn, Ryan wrote: I'm wondering if it's possible to use squid to redirect youtube out a second ISP line. We have two connections and I'd like to push all youtube out the second connection. I was thinking I could put a second squid proxy on that line and then redirect all

Re: [squid-users] better configuration for this server

On 7/05/2012 23:38, Mário Sérgio Candian wrote: Hi guys. I have a server with this configuration: Intel xeon E5-2670 with 8 cores, 2.60GHz (3.30 GHz with Turbo Boost), 20MB of cache, QPI Link 8GT/s; Hyper-threading, 1600MHz TDP of 115 Watts; 32GB ( 4 x 8GB ) RAM DDR3-1333MHz, Dual rank x4;

Re: RES: [squid-users] better configuration for this server

On 8/05/2012 00:56, Mário Sérgio Candian wrote: Hi Peter. Thanks for the answer. I'd like to run FreeBSD in this server. I don't tried any config. I'll buy this server but I need to know if this server supports the amount of users that I have. Yes, this will be a cache for my ISP. The server

[squid-users] Adding of cache_dir to running squid

Hi All, How do I get squid to init and use a new cache_dir without restarting ? We have run out of caching space and I would like to use some newly allocated space :) squid -z -- Says it's already running squid -k reconfigure -- Adds squid.swap file, no directories etc # /usr/sbin/squid -v

[squid-users] Weird bytes size for CONNECT

Hi All, I am currently using Squid to proxy a web based training product and have noticed that the content length seems to be 0 (Yes, the example shows bytes, but it way more than that) 1332822131.951 311020 127.0.0.1 TCP_MISS/200 8470 CONNECT 216.115.208.199:443 - DIRECT/216.115.208.199 -

Re: [squid-users] please help with port 110 and 25 on squid box

On 22/02/2012 03:21, Muhammad Yousuf Khan wrote: i am using debian lenny with squid ver 2.7.stable3 i have a squid box and also want to allow NAT port 25 and 110 for email send receive , along with the squid service. Please help me. Thanks Hi Muhammad, This is beyond the scope of the

Re: [squid-users] Caching in Afghanistan

On 18/02/2012 23:56, jbrodi...@gci.net wrote: Hello there everyone, I'm currently deployed to Afghanistan and have recently set up a VSAT connection with approximately 18 users at peak. Not a large number of users however in our remote location a simple opening of a page with full user

Re: [squid-users] Download cap using squid in linux.

On 9/02/2012 23:48, Vivek Sharma wrote: Is there a way we can do following things using squid. 1. Put an upper cap on total Download size in a month per user (users are configured on LDAP). 2. Put an upper cap on the no of hours of usage per month per user. I shall be obliged if someone can

Re: [squid-users] Question about Parent Cache

On 8/02/2012 20:13, someone wrote: Ok im running squid 3.16 on debian, and I have my proxy configured for a parent cache thats upstream, well, What I have discovered is that my local squid NEVER serves cache when its configured for parent cache, only advantage im getting is from the upstream

Re: [squid-users] forward loop

Hi, Do you have a proxy set in the client to 192.168.40.2 port 3128 ? If so, that is your problem. Also, check if the re-direction rule (on your firewall) is excluding the outbound connection made by squid. You could be ending up with the squid server's port 80 connection getting looped

Re: [squid-users] forward loop

Hi Mustafa, Can you please post your squid.conf ? (Remove all comments and passwords etc) Cheers, Pieter On 2/02/2012 23:04, Mustafa Raji wrote: hi please i have a forward loop warning in my cache.log what is the cause of it i check the internet and find the cause is using peer squid

Re: [squid-users] UNSUBSCRIBE!!!!

Control-U (Thunderbird) shows: List-Unsubscribe: mailto:squid-users-unsubscr...@squid-cache.org Hope that helps ! On 25/01/2012 05:47, Oliver Marshall wrote: Same issue here. I'm just marking it as spam as there's no clear unsubscribe link anywhere. -Original Message- From: Alona

Re: [squid-users] HELP: UPDATE

On 31/12/2011 21:32, someone wrote: Ok, I rm -rf`d all directories named squid from my box thinking that attempting to do a fresh install after would fix everything NOPE, and wtf, apparently the install binary wont recreate the directories now, yay! wtf symlink madness any suggestions how to

Re: [squid-users] Reverse Proxy Configuration

Hi Roman, What version of Squid are you using ? Cheers, Pieter On Wed, 28 Dec 2011, Roman Gelfand wrote: Consider the following configuration lines https_port 443 cert=/etc/apache2/certs/server.pem key=/etc/apache2/certs/server.key vhost vport cache_peer 127.0.0.1 parent 8443 0 ssl

Re: [squid-users] MAC addresses as the only ACL restriction

Hi, MAC address filtering will only work on the same LAN segment. The mac address for your IP will be the gateway of the squid server if you are connecting remotely. Cheers, Pieter On Thu, 8 Dec 2011, Inter Node wrote: Hello everyone, I have a question (and it may be a stupid one), but

Re: [squid-users] Non-transparent port works, transparent doesn't

Hi, Maybe I am missing it, but where is the rule to REDIRECT port 80 to 13128 in iptables ? Cheers, Pieter On Tue, 18 Oct 2011, zozo zozo wrote: I'm trying to make squid work as transparent proxy on CentOS, squid ver is 3.2.0.12, with ecap enabled. The problem is that squid doesn't work

Re: [squid-users] RAID0, LVM or JBOD for best performance squid proxy server?

Hi Roberto, Each of the systems you mention will only add an extra layer to the storage solution. Squid (not sure from which version but I am very sure it's main stream on all distros) already has support for multiple cache directories so my suggestion (if you don't need LVM to extend or move

Re: [squid-users] RAID0, LVM or JBOD for best performance squid proxy server?

On 6/08/2011 10:34, rpere...@lavabit.com wrote: Hi Roberto, Each of the systems you mention will only add an extra layer to the storage solution. Squid (not sure from which version but I am very sure it's main stream on all distros) already has support for multiple cache directories so my

Re: [squid-users] Squid Bandwidth

On 4/08/2011 05:23, viswanathan sekar wrote: Hello Squid_Team, is squid can handle multiples of Gbps traffic ? Is there any patch for squid to handle multiples for Gbps traffic ? Thanks -Viswa Hi Viswa, Stock standard source will do the trick. It depends more on hardware than the

[squid-users] Caching of Big objects (bigger than memory limit)

Hi List, From my understanding, Squid will add an object into memory, then page it out to disk, as the memory limit get's full. (Barring another 1000 checks that I didn't mention :) ) My question is, what will happen with an object that is bigger than maximum_object_size_in_memory ? Here

Re: [squid-users] Caching of Big objects (bigger than memory limit)

Thanks Amos, Yeah - forgot to mention that I am on 3.1.6, latest Deb 6 version. Cheers, Pieter On Thu, 12 May 2011, Amos Jeffries wrote: On 12/05/11 13:32, Pieter De Wit wrote: Hi List, From my understanding, Squid will add an object into memory, then page it out to disk, as the memory

Re: [squid-users] Squid v/s Apache's reverse proxy

Hi John, I have seen it doing 1500 +-/sec (Peaks into the 2000) without the CPU breaking into a sweat (as in less than 10%even 5). This is 3.1 thou (Which I thought was slower than 2.7 ?) Surely if it was crappy code (which it's not) the CPU would be the bottleneck to crack 2000/sec

Re: [squid-users] Squid - Dual WAN Links

Hi John, I have done this before with 3 DSL links. I personally would leave squid out of the picture and configure the OS to do this. Once that is working, there are a few tricks to get Squid to load balance the traffic. It's not really the scope of this list to cover it. Amos - I am

Re: [squid-users] Blocking traffic from on spesific source only.

Hi Thomas, With router - do you mean that is the IP the clients will hit the squid with ? If so, there are two ways to do this. Since you are running a transparent proxy, you will have some firewall rules port forwarding, you could block them there. The other way is to make an ACL with src

Re: [squid-users] Squid slows under load

Hi Julian, The one stat that I can't see here is disk access. I know you said that you have SSD's, but what is the disk stats for your logging volume and the squid volume ? If you totally bypass the proxy, does it improve ? (could be that the squid server is getting shaped ?) Cheers,

Re: [squid-users] Disk space for two node squid

On 25/02/2011 06:04, N3O wrote: Hi I want to create a 2-node squid reverse caching layer for an apache server that has these features: - 2 Xeon@ 2GHz - 2 GB RAM - 72GB HD RAID1 - RHEL with Kernel 2.6.9 - 1 EXT3 filesystem Traffic is a million visits/month My question is, how

[squid-users] X-Forwarded-For + Squid Version 3.0.STABLE8

Hi Guys, I run a reverse proxy for a client. They are using XFF for restricting certain content to IP. We have noted that the following doesn't appear to work as it should: header_replace X-Forwarded-For allow all My understanding is that this will cause squid to replace the XFF header

Re: [squid-users] X-Forwarded-For + Squid Version 3.0.STABLE8

Hi Amos, Thanks for the reply - I remember seeing the doc bug :) I am building the Deb6 boxes as we speak (ext4+squid 3.1 is sounding very nice) Cheers, Pieter On Mon, 21 Feb 2011, Amos Jeffries wrote: On Mon, 21 Feb 2011 12:16:46 +1300 (NZDT), Pieter De Wit wrote: Hi Guys, I run

Re: [squid-users] X-Forwarded-For + Squid Version 3.0.STABLE8

Hi Amos, just had a go at this: request_header_access X-Forwarded-For deny header_replace X-Forwarded-For and it's still passing XFF from another source thru - Nothing to urgent since the Deb6 boxes are getting built :) But if you spot something ? Cheers, Pieter

Re: [squid-users] X-Forwarded-For + Squid Version 3.0.STABLE8

On 21/02/2011 18:16, Amos Jeffries wrote: On 21/02/11 16:33, Pieter De Wit wrote: Hi Amos, just had a go at this: request_header_access X-Forwarded-For deny header_replace X-Forwarded-For and it's still passing XFF from another source thru - Nothing to urgent since the Deb6 boxes are getting

Re: [squid-users] Question on transparent proxy with web server behind proxy.

Hi Ben, There sure is :) Change the IP Tables rule at the bottom to something like this: /sbin/iptables -t nat -A PREROUTING -i br0 -p tcp -s 192.168.0.0/24 --dport 80 -j REDIRECT --to-port 3128 Replace the 192.168 with your network. Keep in mind that you can have multiples of these :)

Re: [squid-users] Question on transparent proxy with web server behind proxy.

Hi Ben, On 26/01/2011 06:55, Ben Greear wrote: On 01/25/2011 09:48 AM, Pieter De Wit wrote: Hi Ben, There sure is :) Change the IP Tables rule at the bottom to something like this: /sbin/iptables -t nat -A PREROUTING -i br0 -p tcp -s 192.168.0.0/24 --dport 80 -j REDIRECT --to-port 3128

Re: [squid-users] Question on transparent proxy with web server behind proxy.

Hi Ben, I suspect that will do the trick :) Let us know Cheers, Pieter On Tue, 25 Jan 2011, Ben Greear wrote: On 01/25/2011 10:36 AM, Ben Greear wrote: On 01/25/2011 10:06 AM, Pieter De Wit wrote: Hi Ben, On 26/01/2011 06:55, Ben Greear wrote: On 01/25/2011 09:48 AM, Pieter De Wit

Re: [squid-users] forwarding hostname to 2nd lan interface.

Hi Moris, A quick look over this and the problem is that you have two default gateways. I run a setup close to this (we have 3 default gateways) and without routing it using rt_tables and the likes you won't have any luck. Do a tcpdump of the interfaces while requesting traffic and you will

Re: [squid-users] Change tcp_outgoing_address every hour, best way to do this?

Hi Andres, I am assuming you want to do this for a Load Balance setup. I also doubt that you have 12 (or even 24) upstream connections. I would simply suggest that you run one main squid, assign some ACLs to it based on time and 2 or more parent proxies. Those parent proxies can run on the

Re: [squid-users] Change tcp_outgoing_address every hour, best way to do this?

appreciated. Andres On Tue, Oct 13, 2009 at 11:26 AM, Pieter De Wit pie...@insync.za.net wrote: Hi Andres, I am assuming you want to do this for a Load Balance setup. I also doubt that you have 12 (or even 24) upstream connections. I would simply suggest that you run one main squid, assign some ACLs

Re: [squid-users] Change tcp_outgoing_address every hour, best way to do this?

Ah - this is what I was looking formakes me wonder...i might change my setup :) So tcp_outgoing_address supports ACL's tagged to it, so you could have something like acl morning time 06:00-11:59 acl afternoon time 12:00-18:00 acl night time 18:00-06:00 tcp_outgoing_address 1.2.3.4

[squid-users] squid -k cmd with multiple copies running

Hi Guys, I have google'ing it for a bit now and I can't seem to find an answer. I have 4 copies of squid running on my box (6gig RAM/160gig disk space - 1gig ram per squid, 16gig disk space) I am busy adjusting the startup scripts (gentoo) to cope with this. Currently I am starting them in

[squid-users] delay_pools on aborted objects

Hey Guys, What does squid do when a request is aborted and it's meant to carry on downloading the object (via quick_abort) and the client was part of a delay_pool. e.g. Client - delay_pool - Squid # Downloads at dp speed Client --x-- delay_pool - Squid # Now what

Re: [squid-users] squid - loading, checking and purging

Hi :) 1 - I *think* webmin has this feature - not sure how to do it directly with squid. 2 - As above 3 - export HTTP_PROXY=squid:port wget all the urls 3a - It wont be 100% sure if the object will be stored as squid will work it out (using policies etc) Just a bit of help :) Cheers,

Re: [squid-users] Active - Active

onto another device on the private LAN, then an active-standby pair of firewalls, with common public and private addresses would be transparent to squid - wouldn't it ? cheers Graham === On Mon, 2009-04-06 at 03:21 +0200, Pieter De Wit wrote: When you

Re: [squid-users] Can a guru verify my config?

When you are confidant about this going, we can move on to the HTTPS and failover questions. Amos Hi Guys, Sorry that I am dropping in on this thread, but it reminded me that I need to find this out. I am working on a active-active firewall for a customer. It will be two Linux boxes

[squid-users] Fail-over config

Geez - what an off day - forgot to change the Subject and to add that it's going to be working as a transparent proxy. Thanks, Pieter On Mon, 6 Apr 2009, Pieter De Wit wrote: When you are confidant about this going, we can move on to the HTTPS and failover questions. Amos Hi Guys

Re: [squid-users] Squid, Symantec LiveUpdate, and HTTP 1.1 versus HTTP 1.0

Hi, iptables can match a DNS name so you can use that and just restart the firewall if they mess it up. If you do something like iptables -t nat -a dst not liveupdate.s.com -j REDIRECT it should work - it will make multiple rules and add them the the chain. Not sure on the real command

Re: [squid-users] mysterious crashes

Hi Hoover, Just a thought - what is the memory limit set to in squid and are other services like gkrellmd running ? Cheers, Pieter On Tue, 10 Mar 2009 15:43:17 -0700 (PDT), Hoover Chan c...@sacredsf.org wrote: It looks like Squid is what's crashing (I left a terminal session open with top

Re: [squid-users] Squid3 just Died

Hi, Might be totally off here, but I noted your swap size is large. Could it be that the cache has more objects (in count and in byte count ?) than can fit into a 32-bit counter ? I got to this by seeing that it crashes at the cache rebuild section as well as the fact the the build is i486.

Re: [squid-users] Squid3 just Died

) Remove the cache directory rm -r /squid/cache/* 3) Re-Create the squid cache directory squid -z 4) Start the squid My cache is pretty big and it would take a while to delete all the stuff in there. Also, I will loose all that data from months of objects... Pieter De Wit wrote: Hi

Re: [squid-users] Question

Amos Jeffries wrote: Monah Baki wrote: Hi all, We have 2 squid servers running 2.7 stable 5. One is locally in our data center, the other is located remotely on the clients network. Is it possible to have whatever cached objects our local server has be replicated on the client? Each squid

Re: [squid-users] Slow for one user, fast for everyone else

RM wrote: On Mon, Oct 6, 2008 at 4:08 AM, RM [EMAIL PROTECTED] wrote: On Mon, Oct 6, 2008 at 1:45 AM, Pieter De Wit [EMAIL PROTECTED] wrote: Hi JL, Does your server use DNS in it's logging ? Perhaps it's reverse DNS ? If he downloads a big file, does the speed pick up ? Cheers

Re: [squid-users] Slow for one user, fast for everyone else

Hi JL, Does your server use DNS in it's logging ? Perhaps it's reverse DNS ? If he downloads a big file, does the speed pick up ? Cheers, Pieter JL wrote: I have a server setup which provides an anonymous proxy service to individuals across the world. I have one specific user that is

Re: [squid-users] Adding secondary Disk for Cache

Juan C. Crespo R. wrote: Dears I want to ask if anyone could tell me an easy way (step by step) to add a secondary disk to the squid Cache Thanks Hi, Simply add the drive to the OS as per normal - then add another cache_dir line to squid.conf. Cheers, Pieter

Re: [squid-users] Adjusting Parent Cache weight based on acl

Hi Amos, Thanks for the reply, so it seems that squid already does what I need (in a way). Would you mind expanding on the data accounting comment, All I could find on google was ip accounting in squid. Like I said, the servers arn't ready yet so I can't test what I need to, but so far it's

[squid-users] Adjusting Parent Cache weight based on acl

IP a.b.c.d (say a dial up) then decrease the weight of the adsl proxy. I hope this is making sense, since I feel like i havn't really carried over the idea correctly. Thanks, Pieter De Wit

RE: [squid-users] Howto Allow 1 and block another

Hey Barry, Try this: acl julie src 192.168.1.20/32 acl jess src 192.168.1.12/32 HTH, Pieter -Original Message- From: Barry Rumsey [mailto:[EMAIL PROTECTED] Sent: 2005/12/11 05:12 To: Squid Subject: [squid-users] Howto Allow 1 and block another I am trying to setup squid to allow one

RE: [squid-users] adaptive bandwidth based on requested file size

Hey A. I would think that you would have to look into either iptables/CBQ or delay pools - I am sure I read somewhere that you can have acl's based on the reply-body size. Cheers, Pieter -Original Message- From: A. Laksmana [mailto:[EMAIL PROTECTED] Sent: 2005/12/04 05:13 To:

RE: [squid-users] autoconfig pac file

Hello Toto, Using a normal browser, try and download the file - something like: wget http://10.1.1.13/proxy/proxy.pac I think the problem lies with apache2 rather than squid or the file. Cheers, Pieter -Original Message- From: Toto Carpaccio [mailto:[EMAIL PROTECTED] Sent:

RE: [squid-users] Pipeline between two caches

Subject: Re: [squid-users] Pipeline between two caches On Friday 18 November 2005 07:25, Pieter De Wit wrote: I have two proxy (one remote - both squid). I was wondering if I can pipeline the two, or at least get the number of connections between the two down. Can they be connected via a single

[squid-users] Pipeline between two caches

Hello List, I have two proxy (one remote - both squid). I was wondering if I can pipeline the two, or at least get the number of connections between the two down. Can they be connected via a single TCP connection ? Thanks, Pieter “This e-mail is sent on the Terms and Conditions that can be

[squid-users] external_acl_type

Hello List, Can someone please point me to a resource describing what an external acl program must return and how. In my quest to bind an IP to a username I have created the following: ip_to_user.sh #!/bin/bash while [ 1 ] do while read ip do ip_done=0;

[squid-users] Binding IP address to username

Hello Everyone, I would like to know how I can bind an IP address to a username in squid. So let's say I have a user called user1 and a machine on IP 1.2.3.4. I would like squid to log any requests that come from 1.2.3.4 as if the user user1 logged in. Thanks, Pieter De Wit �This e-mail