Re: [squid-users] https questions

2008-06-07 Thread Henrik Nordstrom
On lör, 2008-06-07 at 09:58 +0800, Ken W. wrote: 2008/6/7 Henrik Nordstrom [EMAIL PROTECTED]: But you are quite likely to run into issues with the server sending out http:// URLs in it's responses unless the server has support for running behind an SSL frontend. See for example the

Re: [squid-users] https questions

2008-06-07 Thread Ken W.
2008/6/7 Henrik Nordstrom [EMAIL PROTECTED]: Thanks Henrik. Under my setting, can squid work correctly for this flow? clients --https-- squid --http-- webserver webserver --http-- squid --https-- clients Again, yes, provided your web server application has support for being used

[squid-users] How to bypass banned sites

2008-06-07 Thread Mr Crack
My ISP banned most sites. So, i make them use YourFreedom but it generates a lot of traffics. As more users, Traffice becomes large and very slow. When connetion becomes slow, YourFreedom does not work. Then I try to use Ultra Surf but not works when connection is slow or sometimes. I googled

Re: [squid-users] How to bypass banned sites

2008-06-07 Thread Leonardo Rodrigues Magalhães
Mr Crack escreveu: My ISP banned most sites. Any comments are welcomed Change ISP or move from China .. -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem

Re: [squid-users] RE : [squid-users] performances ... again

2008-06-07 Thread Matus UHLAR - fantomas
On 06.06.08 18:14, GARDAIS Ionel wrote: I will try the host != some.url.com part. For the isInNet() trick, the problem is that it inducts a DNS resolution call for every request to compare with the IP/mask parameters. Don't you have local resolver? Do you think that your browser doesn't

Re: [squid-users] Squid Performance, VMware vs Physical Machine

2008-06-07 Thread Matus UHLAR - fantomas
On 06.06.08 18:35, Brodsky, Jared S. wrote: Getting ready to roll out a squid server in my organization after doing about a month of testing on it on a virtual machine in VMware server. Is running squid in a virtual environment recommended, or is having a dedicated box a safer way to go? I'll

Re: [squid-users] https questions

2008-06-07 Thread Ken W.
Hello members, My squid's config for https looks as below: http_port 80 accel vhost https_port 443 accel vhost cert=/usr/local/squid/etc/ssl/server.cert key=/usr/local/squid/etc/ssl/server.key cache_peer 12.34.56.78 parent 80 0 no-query front-end-https=auto originserver name=origin_1 acl

Re: [squid-users] Squid Performance, VMware vs Physical Machine

2008-06-07 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: On 06.06.08 18:35, Brodsky, Jared S. wrote: Getting ready to roll out a squid server in my organization after doing about a month of testing on it on a virtual machine in VMware server. Is running squid in a virtual environment recommended, or is having a dedicated

[squid-users] Yet another Invalid URL question

2008-06-07 Thread Escuela Episcopal Bilingüe Santísima Trinidad
Am trying to set up a separate box (with two NICs) as a firewall/filter using the following configuration. When Squid was running without Dansguardian, and I connected a laptop to the second NIC and pointed the laptop to Squid, everything worked fine. With the iptables set and Dansguardian

Re: [squid-users] Transparent proxy with MSN

2008-06-07 Thread Sergio Belkin
2008/6/7 Amos Jeffries [EMAIL PROTECTED]: Sergio Belkin wrote: 2008/6/5 Amos Jeffries [EMAIL PROTECTED]: Sergio Belkin wrote: Hi, I'd want to know if it's possible allos MSN usage along transparent proxy. Possible. But not always easy. It depends highly on the type of network you have

[squid-users] Blocking web sites

2008-06-07 Thread Carlos Alberto Bernat Orozco
Hi Why is necessary an additional tool for squid to block web sites like SquidGuard or DansGuardian? is there an issue with performance? Thanks in advanced

[squid-users] Cacheboy-1.1 release, testers wanted!

2008-06-07 Thread Adrian Chadd
Hi everyone, I've just released Cacheboy-1.1, which is essentially an almost current snapshot of Squid-2.HEAD with a whole lot of code reorganisation and a couple of new minor features. It certainly seems stable enough in local testing and limited third party testing. I'll see if I can get

Re: [squid-users] Blocking web sites

2008-06-07 Thread Leonardo Rodrigues Magalhães
Carlos Alberto Bernat Orozco escreveu: Hi Why is necessary an additional tool for squid to block web sites like SquidGuard or DansGuardian? is there an issue with performance? You're completly mistaken. DansGuardian and SquidGuard are OPTIONAL tools, they are not REQUIRED. Squid

Re: [squid-users] Blocking web sites

2008-06-07 Thread Carlos Alberto Bernat Orozco
Thanks for your message. I wass totally mistaken. Thanks! 2008/6/7 Leonardo Rodrigues Magalhães [EMAIL PROTECTED]: Carlos Alberto Bernat Orozco escreveu: Hi Why is necessary an additional tool for squid to block web sites like SquidGuard or DansGuardian? is there an issue with

[squid-users] strange squid problem

2008-06-07 Thread DD Dods
Dear Sir, I'm using Mandriva spring 2007.1, (squid 2.6.Stable7) I can surf the internet,use messenger even watch a music video, but can't download a complete program. I've tried to download avg anti-virus free edition 8.0 - 45.57mb i only receive 25.0mb of the file. I'm downloading on a

Re: [squid-users] https questions

2008-06-07 Thread Henrik Nordstrom
On lör, 2008-06-07 at 18:29 +0800, Ken W. wrote: 2008/06/07 14:37:02| httpsAccept: Error allocating handle: error:0906A068:PEM routines:PEM_do_header:bad password read Your SSL key is encrypted and you have not given the encryption key to Squid so it can not set up the SSL proper. Decrypt the

Re: [squid-users] strange squid problem

2008-06-07 Thread Leonardo Rodrigues Magalhães
DD Dods escreveu: I'm using Mandriva spring 2007.1, (squid 2.6.Stable7) I can surf the internet,use messenger even watch a music video, but can't download a complete program. I've tried to download avg anti-virus free edition 8.0 - 45.57mb i only receive 25.0mb of the file. I'm

Re: [squid-users] High tcp_hit times

2008-06-07 Thread leongmzlist
Hmm, that's weird because I don't have any ACL that would require DNS. See my original post w/ the squid config. mike At 10:46 PM 6/6/2008, Henrik Nordstrom wrote: On fre, 2008-06-06 at 15:30 -0700, leongmzlist wrote: Does squid still use dns for reverse proxy requests? All my requests

[squid-users] Re: Cacheboy-1.1 release, testers wanted!

2008-06-07 Thread Linda W
Is squid being renamed? Or what the relation of cacheboy to the squid project? Or was it the 2.7 branch that was renamed to cacheboy (is there one for girls?...not sure a I want a boy caching my webcontent -- but thats another matter...:-)) I'm also a bit perturbed, that 3.0, which has been

[squid-users] Re: performances ... again

2008-06-07 Thread Linda W
GARDAIS Ionel wrote: Beside the fact that the hit rate is low, response time are way too long for users (cache-misses median service times are around 200ms and cache-hits are around 3ms) Have you tried access without a squid-proxy -- but maybe using 'socks' (if you need to bridge

Re: [squid-users] Re: Cacheboy-1.1 release, testers wanted!

2008-06-07 Thread Ray Van Dolson
On Sat, Jun 07, 2008 at 01:32:31PM -0700, Linda W wrote: So I guess, how did cacheboy come to be and why is it here (which may become obvious if I know the connection to the 'main' squid project...)? :-? This thread may be of some interest to you: http://marc.info/?t=12108954741r=1w=2

[squid-users] Re: squid_kerb_auth on mac os x

2008-06-07 Thread Markus Moeller
Find below a small test program to create a token. Run a kinit as a user and then ./squid_kerb_auth_test proxy_fqdn. It creates a token like: ./squid_kerb_auth_test opensuse.suse.home Token:

[squid-users] Re: squid_kerb_auth on mac os x

2008-06-07 Thread Markus Moeller
Alex, what Kerberos version do you use ? I think Mac uses MIT 1.4.1 which does not support spnego as far as I recall. So in your compile don't use -DHAVE_SPNEGO. Markus Alex Morken [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, This is the first time I have posted on

Re: [squid-users] Re: Cacheboy-1.1 release, testers wanted!

2008-06-07 Thread Henrik Nordstrom
On lör, 2008-06-07 at 13:32 -0700, Linda W wrote: Is squid being renamed? No. Or what the relation of cacheboy to the squid project? CacheBoy is a fork of the Squid project, where Adrian tries out some new ideas of what the future should look like. I'm also a bit perturbed, that 3.0, which

Re: [squid-users] Re: Cacheboy-1.1 release, testers wanted!

2008-06-07 Thread Henrik Nordstrom
On sön, 2008-06-08 at 00:11 +0200, Henrik Nordstrom wrote: On lör, 2008-06-07 at 13:32 -0700, Linda W wrote: Is squid being renamed? No. Or what the relation of cacheboy to the squid project? CacheBoy is a fork of the Squid project, where Adrian tries out some new ideas of what the

Re: [squid-users] Yet another Invalid URL question

2008-06-07 Thread Amos Jeffries
Escuela Episcopal Bilingüe Santísima Trinidad wrote: Am trying to set up a separate box (with two NICs) as a firewall/filter using the following configuration. When Squid was running without Dansguardian, and I connected a laptop to the second NIC and pointed the laptop to Squid, everything

Re: [squid-users] Transparent proxy with MSN

2008-06-07 Thread Amos Jeffries
Sergio Belkin wrote: 2008/6/7 Amos Jeffries [EMAIL PROTECTED]: Sergio Belkin wrote: 2008/6/5 Amos Jeffries [EMAIL PROTECTED]: Sergio Belkin wrote: Hi, I'd want to know if it's possible allos MSN usage along transparent proxy. Possible. But not always easy. It depends highly on the type of

Re: [squid-users] Re: Cacheboy-1.1 release, testers wanted!

2008-06-07 Thread Adrian Chadd
Its reasonably simple, and was documentedin the past. Cacheboy is a fork of Squid-2.HEAD, with the intent to implement all the various things which I believed we should have done to Squid-2 before we forked it off and started along the Squid-3 path. Some of these medium term goals may conflict

[squid-users] How to control download banwidth

2008-06-07 Thread Mr Crack
I setup squid at many Cyber cafe; The performnace is normal. but the following problem occurs. If one of the users download large files with download manager e.g. IDM, Free Download managers, . the whole Internet cafe speed becomes very slow. I have set download limit policies but it is not

Re: [squid-users] How to control download banwidth

2008-06-07 Thread Amos Jeffries
Mr Crack wrote: I setup squid at many Cyber cafe; The performnace is normal. but the following problem occurs. If one of the users download large files with download manager e.g. IDM, Free Download managers, . the whole Internet cafe speed becomes very slow. I have set download limit

[squid-users] use squid for bandwidth limiting

2008-06-07 Thread MihanNIC :: Get RealTime Services
Hi, I have 4 server that used for web hosting. we have an internet connection that shared between these servers without any management . we want to manage and limit bandwidth of some of our server. I want to add a new server just for bandwidth management. what is the best bandwidth management

Re: [squid-users] How to control download banwidth

2008-06-07 Thread Agung T. Apriyanto
--- Amos Jeffries [EMAIL PROTECTED] wrote: Usually used with maxconn ACL to limit people using too many seperate connections. Gozilla for example opens 3+ HTTP requests for different parts of the same object... Amos -- Please use Squid 2.7.STABLE1 or 3.0.STABLE6 afaik, maxconn