[squid-users] Re: max number of file descriptors ?

2010-12-10 Thread Jan-Frode Myklebust
FYI: I opened an RFE with Red Hat support to get their squid package built with higher --with-maxfd setting. -jf

[squid-users] Re: squid service TIME_WAIT

2010-12-10 Thread Jan-Frode Myklebust
On 2010-12-09, Amos Jeffries squ...@treenet.co.nz wrote: TIME_WAIT are FD which have been finished with but are in a TCP timeout in case there are stray packets still somewhere in the network. Somewhat around 5 minutes IIRC. Sockets (FD) cannot be re-used until there is no chance of stray

Re: [squid-users] Re: max number of file descriptors ?

2010-12-10 Thread Amos Jeffries
On 07/12/10 21:05, Jan-Frode Myklebust wrote: On 2010-12-06, Amos Jeffriessqu...@treenet.co.nz wrote: If you have max_filedesc available you don't need to touch --with-maxfd. The build option just sets the default for the squid.conf option. Hmm.. I tried pretty hard to increase it beyond

Re: [squid-users] Cache firefox ok, chrome... not!

2010-12-10 Thread Rodolfo Alcazar Portillo
[sorry, if this message repeats, I've got a rejection, and not sure if it arrived.] On Fri, 2010-12-10 at 17:03 +1300, Amos Jeffries wrote: Its clear from your message that something other than the usual timing headers are affecting things. Yes, but I suppose it has no relation with this ffox

Re: [squid-users] Cache firefox ok, chrome... not!

2010-12-10 Thread Amos Jeffries
On 11/12/10 02:04, Rodolfo Alcazar Portillo wrote: [sorry, if this message repeats, I've got a rejection, and not sure if it arrived.] On Fri, 2010-12-10 at 17:03 +1300, Amos Jeffries wrote: Its clear from your message that something other than the usual timing headers are affecting things.

RE: [squid-users] RE: Forcing squid to cache files

2010-12-10 Thread Volker-Yoblick, Adam
Another related question: I notice that the lastmod and expires values for every line in my store.log is -1. Is squid unable to cache files without lastmod and expires headers? -Original Message- From: Volker-Yoblick, Adam [mailto:avol...@ea.com] Sent: Thursday, December 09, 2010 9:59

RE: [squid-users] RE: Forcing squid to cache files

2010-12-10 Thread Volker-Yoblick, Adam
Nevermind, if that was the case, I wouldn't see any SWAPOUT lines. Still stumped on this one. Anyone have any tips on how to debug this further? A very small amount of my data is actually being cached. =( -Original Message- From: Volker-Yoblick, Adam Sent: Friday, December 10, 2010

[squid-users] Proxy for youtube - noncaching

2010-12-10 Thread Scott Oyer
Squid noob here. Our company offers video hosting for school districts. As you might know, most school districts block youtube from their internal users. Our customers have the ability to upload approved links from youtube for their internal users. Since they block youtube the user can load the

Re: [squid-users] Proxy for youtube - noncaching

2010-12-10 Thread Rick Chisholm
They might be blocking with a DNS sinkhole or something like OpenDNS. Blocking YouTube content usually isn't as simple as blocking just the domain, but the content delivery network as well. If their Squid setup did allow for this workaround - kids could deploy similar redirects from their home

[squid-users] OT - FTP Proxy?

2010-12-10 Thread Baird, Josh
Sorry for the off-topic post, but this seems like a decent place to ask. What FTP proxy are people using these days? Is there a better alternative to Frox? Thanks, Josh

RE: [squid-users] RE: Forcing squid to cache files

2010-12-10 Thread Volker-Yoblick, Adam
Update: I configured firefox to use my proxy server, and I see squid caching items on normal web browsing. I also see many cache hits in my access.log, so I believe my cache is working correctly. I imagine there's something funky in the http headers we use in our proprietary tool which is

[squid-users] Custom error page

2010-12-10 Thread Marcio Garcia
Hello, I am trying to use a custom page, wich contains a css file and images. I renamed the page from index.html to ERR_ACCESS_DENIED and it only appears the HMTL content when I received a page error, without images and formats (from css file). I am using the 3.1 version. I need to

RE: [squid-users] RE: Forcing squid to cache files

2010-12-10 Thread Volker-Yoblick, Adam
Okay, so I think I figured out why stuff is not saving to my cache correctly. Most of the files I'm transferring are 4 MB, and the default max size for cached files is 4MB. I added the following line to my squid.conf file, and the saving to cache problem seems to be resolved.

RE: [squid-users] RE: Forcing squid to cache files

2010-12-10 Thread Volker-Yoblick, Adam
So the cache is filling up correctly now, but I still get all TCP_MISS/200 in my access.log. I don't see these issues when caching web pages. Anyone got any ideas? =) -Original Message- From: Volker-Yoblick, Adam Sent: Friday, December 10, 2010 2:14 PM To: Volker-Yoblick, Adam; 'Amos

RE: [squid-users] RE: Forcing squid to cache files

2010-12-10 Thread Volker-Yoblick, Adam
Also, it seems that when I use squidclient to get the same file 2 times in a row, the cache DOES behave as expected. First call outputs this: HTTP/1.0 200 OK Date: Fri, 10 Dec 2010 19:25:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET X-AspNet-Version: 2.0.50727 Content-Disposition:

[squid-users] Re: Re: kerberos-authentication, msktutil, w2k8-domain-controllers and the old encryption-type rc4-hmac?

2010-12-10 Thread Markus Moeller
Hi Tom, AES is a stronger encryption than RC4, why it is selected first by clients who support it (Windows 7,Vista, 2008, newer MIT/Heimdal versions on Unix). XP/Windows 2003 clients will continue to use RC4 as AES is not supported in XP/Windows 2003 . Markus Tom Tux tomtu...@gmail.com

[squid-users] Re: Re: Kerberos authentication with MIT KDC

2010-12-10 Thread Markus Moeller
Hi Rob, Before you used xst you must have created the principal with a command like add_principal or ank with either a -pw or -randkey option. This would have set the password for the principal. Can you try the same kinit on your Centos box ( I assume you have the correct krb5.conf) ? If

[squid-users] Caching identical items from a dynamic URL

2010-12-10 Thread Volker-Yoblick, Adam
Greetings, I've got a fairly unique problem that maybe someone can assist with. I'm sending files to a machine through my cache, but part of the URL is dynamic, even if the file is exactly the same. For example, the lines in my access.log all look like this: GET

Re: [squid-users] Re: Re: Kerberos authentication with MIT KDC

2010-12-10 Thread Rob Asher
Hi Markus, I added the principal with a query instead of at the kadmin console. Here's the command I used: kadmin.local -q add_principal HTTP/proxyserver.paragould.psd I'm just guessing here that since I didn't specify a password that it defaulted to a random key. I tried the same kinit on

[squid-users] Re: Re: Re: Kerberos authentication with MIT KDC

2010-12-10 Thread Markus Moeller
Hi Rob, It looks like no password was set or the keytab does not contain the right key (password). Can you try to use add_principal with -randkey ? Markus Rob Asher ras...@paragould.k12.ar.us wrote in message news:4d025e0c02370004e...@rsc... Hi Markus, I added the principal with a

Re: [squid-users] Re: Re: Re: Kerberos authentication with MIT KDC

2010-12-10 Thread Rob Asher
Markus, I did run change_password on the HTTP/proxyserver.paragould.psd principal to set it's password. I also removed and re-added the principal to the krb5.keytab on the KDC then exported/added it to the proxyserver.keytab and copied that file over to the centos box. Running kinit -kt

[squid-users] Re: Re: Re: Re: Kerberos authentication with MITKDC

2010-12-10 Thread Markus Moeller
That looks better. In theory it should work now. Markus Rob Asher ras...@paragould.k12.ar.us wrote in message news:4d026b1102370004e...@rsc... Markus, I did run change_password on the HTTP/proxyserver.paragould.psd principal to set it's password. I also removed and re-added the

Re: [squid-users] Caching identical items from a dynamic URL

2010-12-10 Thread Amos Jeffries
On 11/12/10 10:59, Volker-Yoblick, Adam wrote: Greetings, I've got a fairly unique problem that maybe someone can assist with. I'm sending files to a machine through my cache, but part of the URL is dynamic, even if the file is exactly the same. For example, the lines in my access.log all look

Re: [squid-users] Custom error page

2010-12-10 Thread Amos Jeffries
On 11/12/10 06:46, Marcio Garcia wrote: Hello, I am trying to use a custom page, wich contains a css file and images. I renamed the page from index.html to ERR_ACCESS_DENIED and it only appears the HMTL content when I received a page error, without images and formats (from css file).