[squid-users] Squid 3.1.0.14 beta is available

2009-09-30 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.1.0.14 beta release! This release contains fixes for a large number of bugs. Mostly annoyance bugs and behavior corrections. The most notable change is a collection of bugs within NTLM and Negotiate

[squid-users] reverse proxy - sporadic TCP_MISS/403

2009-09-30 Thread Michael Grimm
Hi everyone, I have a problem with my reverse proxy running Squid 3.0.STABLE19 in the following scenario: I give customers access to one of our internal web-applications running tomcat on port 8080 (unencrypted). The customer accesses the reverse proxy on port 443 (certificates are in place)

[squid-users] Https contents

2009-09-30 Thread Ivan . Galli
Hi, i have a question about https traffic content. There is some way to check what pass through ssl tunnel? Can squidguard or any other programs help me? Thanks and regards. Ivan

[squid-users] Caching is growing faster than releasing objects

2009-09-30 Thread Luis Daniel Lucio Quiroz
Hi all, Well, after implementing cache, in a heavy environment (with about 5k users) I'm seeing that our squid is not freeing far enough objects, our 100GB disk cache fills in 5 days. I wonder I misunderstood refresh_pattern options. I have this: refresh_pattern -i \.png$ 28801%

Re: [squid-users] not caching enough

2009-09-30 Thread ant2ne
Thanks for the continued support! You say The CONNECT rule does need to be deny CONNECT !SSL_Ports. - But I dont' see a !SSL_Ports You say I'd shift that one http pattern above up above the ftp pattern. But I dont see http as a refresh pattern. I do see html. Is this what you mean? My

Re: [squid-users] Caching is growing faster than releasing objects

2009-09-30 Thread Marcus Kool
What are the values for the parameters cache_swap_low and cache_swap_high ? For a large cache it is recommended to have them close to each other. E.g. cache_swap_low 90 cache_swap_high 91 You can also add refresh_pattern (cgi-bin|\?)0 0% 0 since dynamic pages should not be

Re: [squid-users] Caching is growing faster than releasing objects

2009-09-30 Thread Luis Daniel Lucio Quiroz
Le mercredi 30 septembre 2009 11:14:43, Marcus Kool a écrit : What are the values for the parameters cache_swap_low and cache_swap_high ? For a large cache it is recommended to have them close to each other. E.g. cache_swap_low 90 cache_swap_high 91 You can also add refresh_pattern

Re: [squid-users] Want accel-mode squid to pass real IP to httpd

2009-09-30 Thread Roger Cornelius
Thanks to you and Amos Jeffries. This is what I was looking for. Roger On 09/29/2009 12:41, tookers wrote: Roger Cornelius wrote: Apologies for what is probably a newbie question. I've searched the squid directives, archives of this list, the net, etc., and haven't discovered,

Re: [squid-users] Caching is growing faster than releasing objects

2009-09-30 Thread Chris Robertson
Marcus Kool wrote: What are the values for the parameters cache_swap_low and cache_swap_high ? Also, what size have you specified your cache_dir? For a large cache it is recommended to have them close to each other. E.g. cache_swap_low 90 cache_swap_high 91 You can also add

[squid-users] Re: Kerberos Authentication

2009-09-30 Thread Markus Moeller
squid_kerb-auth should work. Markus Ron Richardson rrichard...@liverpool.k12.ny.us wrote in message news:fc.000f714603d9ae87000f714603d9ae87.3d9a...@liverpool.k12.ny.us... Has anyone put Kerberos authentication into the MacPort of Squid? If so, would you care to share how you did it? If

Re: [squid-users] Caching is growing faster than releasing objects

2009-09-30 Thread Marcus Kool
Luis Daniel Lucio Quiroz wrote: Le mercredi 30 septembre 2009 11:14:43, Marcus Kool a écrit : What are the values for the parameters cache_swap_low and cache_swap_high ? For a large cache it is recommended to have them close to each other. E.g. cache_swap_low 90 cache_swap_high 91 You can

Re: [squid-users] reverse proxy - sporadic TCP_MISS/403

2009-09-30 Thread Amos Jeffries
On Wed, 30 Sep 2009 12:18:47 +0200, Michael Grimm michigr...@gmx.de wrote: Hi everyone, I have a problem with my reverse proxy running Squid 3.0.STABLE19 in the following scenario: I give customers access to one of our internal web-applications running tomcat on port 8080 (unencrypted).

Re: [squid-users] Caching is growing faster than releasing objects

2009-09-30 Thread Amos Jeffries
On Wed, 30 Sep 2009 17:22:34 -0300, Marcus Kool marcus.k...@urlfilterdb.com wrote: Luis Daniel Lucio Quiroz wrote: Le mercredi 30 septembre 2009 11:14:43, Marcus Kool a écrit : What are the values for the parameters cache_swap_low and cache_swap_high ? For a large cache it is recommended to

Re: [squid-users] not caching enough

2009-09-30 Thread Amos Jeffries
On Wed, 30 Sep 2009 06:35:06 -0700 (PDT), ant2ne tcy...@altonschools.org wrote: Thanks for the continued support! You say The CONNECT rule does need to be deny CONNECT !SSL_Ports. - But I dont' see a !SSL_Ports The ! means NOT in boolean and squid.conf access language. The very next thing

Re: [squid-users] Https contents

2009-09-30 Thread Amos Jeffries
On Wed, 30 Sep 2009 14:58:08 +0200, ivan.ga...@aciglobal.it wrote: Hi, i have a question about https traffic content. There is some way to check what pass through ssl tunnel? Can squidguard or any other programs help me? The 'S' in HTTPS means Secure or SSL encrypted. Why do you want to do

[squid-users] Squid squid3-3.0.STABLE10-2.11, IE7/IE8, Microsoft Applications

2009-09-30 Thread Walter Cuestas
Hi, in short : Every time a user click on a link in a MS Office document or select some Internet related app (like MS Windows Media Player), the user if forced to re-authenticate (a popup window appears). We have tested using Firefox instead IE7/IE8 and happens the same, but, if we use

Re: [squid-users] Squid squid3-3.0.STABLE10-2.11, IE7/IE8, Microsoft Applications

2009-09-30 Thread Amos Jeffries
On Wed, 30 Sep 2009 21:05:07 -0500, Walter Cuestas wcues...@open-sec.com wrote: Hi, in short : Every time a user click on a link in a MS Office document or select some Internet related app (like MS Windows Media Player), the user if forced to re-authenticate (a popup window appears). We

Re: [squid-users] Squid stops responding-LTSP and WinXP clients

2009-09-30 Thread Avinash Rao
On Tue, Sep 29, 2009 at 7:24 PM, Avinash Rao avinash@gmail.com wrote: The file is too huge, the email bounced back, I am pasting few records which has different entries. 2009/09/29 16:43:02| statHistCopy: Dest=0x85baa8, Orig=0x86fd68 2009/09/29 16:43:02| statHistCopy: capacity 300 300