Re: [squid-users] url_rewrite_concurrency

2010-04-08 Thread Gemmy
It's OK now.Thanks a lot~ 2010-4-8 12:15, Amos Jeffries wrote: On Thu, 08 Apr 2010 11:24:27 +0800, Gemmychen...@163.com wrote: Hi~ I have a squid running url_rewrite_program, but when I using url_rewrite_concurrency in squid.conf, rewrite failed. The access.log like that:

Re: [squid-users] to Amos Jeffries,you said squid performance could be up to 300,000 rps in lab test.

2010-04-08 Thread Amos Jeffries
wang.gao...@zte.com.cn wrote: I read this at the end of http://www.squid-cache.org/mail-archive/squid-users/201002/0795.html I want to use squid as a reverse proxy,so I am interested in the squid performance. Can you post a detailed result about this lab test? The test is a test about single

Re: [squid-users] [Urgent] Please help : NAT + squid2.7 on ubuntu server 9.10 + cisco firewall (ASA5510)

2010-04-08 Thread Amos Jeffries
Vichao Saenghiranwathana wrote: What I have done so far are 1. Connected squid transparent proxy server with ASA5510 via eth0 interface 2. Set up NAT at ASA5510 to map squid transparent proxy server(192.168.9.251) with the public ip (203.130.133.9) There should be no need for NAT on the ASA.

Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-08 Thread Amos Jeffries
David Robinson wrote: My range_offset_limit and quick_abort_* setting were all default. I tried setting range_offset_limit -1 - did not fix the problem quick_abort_min 0 and quick_abort_max 0 - did not fix the problem quick_abort_min -1 - did not fix the problem The type of urls its

[squid-users] Squid ACL per-user basis

2010-04-08 Thread CASALI COMPUTERS - Michele Brodoloni
Hello, i'm using squid 2.6 Version 2.6.STABLE21 (provided with CentOS 5.x), using NTLM AUTH. Since I'm able to apply ACLs to Windows Groups, I'm just wondering if I can apply an ACL only to a single user. Should I need to create a group only for that user and apply an acl to that group or

Re: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread Nick Cairncross
Bilal, I'm working on much the same thing, with added Apple Mac just to complicate things. My aim is to create an SSO environment for all my Windows, OSX and nix machines. I want to use Kerberos as my primary authentication as IE7 and FF onwards are moving that way..but for my situation some

[squid-users] how to cache youtube

2010-04-08 Thread sameer khan
hey all great; does any one have successfully cached youtube. any pointer will be much appreciated. Thanks _ http://clk.atdmt.com/UKM/go/195013117/direct/01/ We want to hear all your

Re: [squid-users] how to cache youtube

2010-04-08 Thread Kinkie
On Thu, Apr 8, 2010 at 11:46 AM, sameer khan khanza...@hotmail.com wrote: hey all great; does any one have successfully cached youtube. any pointer will be much appreciated. Please see http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube -- /kinkie

RE: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread GIGO .
Nick, Thank you so much for your support. I am now much confident about Negotiate/Kerberos and have just decided to jump into the real thing (as enough theory). As far as KVNo i have not experienced it yet(as not practically implemented) however i may too in due course and surely will share

Re: [squid-users] UDP errors after upgrade to 3.1.1

2010-04-08 Thread donovan jeffrey j
snip Second and probably more important. squid -d1x squid -k check shows squid: ERROR: No running copy squid -k rotate squid: ERROR: No running copy squid -k shutdown squid: ERROR: No running copy ps -ax | grep squid root# ps -ax | grep squid 29428 ?? 0:00.00 squid -d1x

RE: [squid-users] UDP errors after upgrade to 3.1.1

2010-04-08 Thread Dean Weimer
-Original Message- From: donovan jeffrey j [mailto:dono...@beth.k12.pa.us] Sent: Thursday, April 08, 2010 7:37 AM To: Amos Jeffries Cc: squid-users@squid-cache.org Subject: Re: [squid-users] UDP errors after upgrade to 3.1.1 snip no pid file in the 3.1.1 build. I check my other copies

Re: [squid-users] UDP errors after upgrade to 3.1.1

2010-04-08 Thread donovan jeffrey j
On Apr 8, 2010, at 9:12 AM, Dean Weimer wrote: -Original Message- From: donovan jeffrey j [mailto:dono...@beth.k12.pa.us] Sent: Thursday, April 08, 2010 7:37 AM To: Amos Jeffries Cc: squid-users@squid-cache.org Subject: Re: [squid-users] UDP errors after upgrade to 3.1.1 snip

[squid-users] Address Network Report Sarg

2010-04-08 Thread Rafael Poch || DB1 Informática
Hi, Recently in my sarg report appeared an address 10.1.1.0 together my user list. 10.1.1.0 is my network address. I don’t understand why this entry appear. Anybody know how to solve this issue ? Att. Rafael Poch Vieira Palma INFRA-ESTRUTURA - T.I (44)3033-6300 - Ramal 6323 / Fax

[squid-users] Squid is unable to connect to local webservers

2010-04-08 Thread Johnson, S
I've got a squid proxy running in transparent mode with an AUP on a public wireless network which is separated from our private network.  We run a local webserver here and found that users get the AUP and cannot click past it when attempting to get to the local web server. Without using the

RE: [squid-users] Squid is unable to connect to local webservers

2010-04-08 Thread Johnson, S
Another piece of information I just discovered... I use a wpad.dat file to assign the proxy to users. It works just fine except for the local servers. However, when I force the connection in the browser to the proxy with 8080 (dansguardian) then I can get to my local web servers.

Re: [squid-users] [Urgent] Please help : NAT + squid2.7 on ubuntu server 9.10 + cisco firewall (ASA5510)

2010-04-08 Thread Vichao Saenghiranwathana
I still stunned. Can you explain more in deeper detail so I can understand what the problem is. I'm really appreciate it Vichao S On Thu, Apr 8, 2010 at 2:03 PM, Amos Jeffries squ...@treenet.co.nz wrote: Vichao Saenghiranwathana wrote: What I have done so far are 1. Connected squid

Re: [squid-users] Creating a kerberos Service Principal.

2010-04-08 Thread Khaled Blah
Hi Bilal, 1. ktpass and msktutil practically do the same, they create keytabs which include the keys that squid will need to decrypt the ticket it receives from the user. However ktpass only creates a file which you will then have to securely transfer to your proxy server so that squid can access

Re: [squid-users] Creating a kerberos Service Principal.

2010-04-08 Thread Khaled Blah
I forgot this link to an Example configuration: http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos 2010/4/8 Khaled Blah khaled.b...@googlemail.com: Hi Bilal, 1. ktpass and msktutil practically do the same, they create keytabs which include the keys that squid will need to

[squid-users] Squid 2.7.8 + pfSense 'zero sized reply'

2010-04-08 Thread Luke Jaeger
I'm running Squid 2.7.8 on pfSense 1.2.2. As of today, we get the 'zero sized reply' error when trying to load www.questgarden.com. It worked yesterday! (I rebooted the firewall this morning during an ISP outage - presumably that's when it broke). I can load the page thru curl, but not in a

[squid-users] Re: Creating a kerberos Service Principal.

2010-04-08 Thread Markus Moeller
BTW You do not need Administrator rights. You can set permission for different Groups on OUs for example for Unix Kerberos Admins. Markus Khaled Blah khaled.b...@googlemail.com wrote in message news:n2j4a3250ab1004080957id2f4a051xb31445428c62b...@mail.gmail.com... Hi Bilal, 1. ktpass and

[squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread Markus Moeller
Hi Nick, Did you use samba to create the keytab. I have seen that if you use samba for more then squid (e.g. cifs, winbind, etc) it will update regularly the AD entry and key for the host/fqdn principal which is the same as for HTTP/fqdn. I usually use msktutil and create a second AD entry

[squid-users] url_regex file format

2010-04-08 Thread Jean-Luc Wasmer
Hi, What is the format of the regex file when defining an ACL based on regexes? Can I have comments in there? What is the -i option for? Also, what RE are supported? Thanks, Jean-Luc

[squid-users] Authentication logging

2010-04-08 Thread John Horne
Hello, Using squid 2.7 stable 9, I have set the debug_options to 29,2 which logs authenticated users, e.g: user 'xxx' has been seen at a new IP address (11.22.33.44) However, is there a way I can log unsuccessful authentication attempts? I have increased the debug level to 6, but it still

Re: [squid-users] Authentication logging

2010-04-08 Thread John Horne
On Thu, 2010-04-08 at 21:43 +0100, John Horne wrote: Hello, Using squid 2.7 stable 9, I have set the debug_options to 29,2 which logs authenticated users, e.g: user 'xxx' has been seen at a new IP address (11.22.33.44) However, is there a way I can log unsuccessful authentication

RE: [squid-users] url_regex file format

2010-04-08 Thread Mellem, Dan
-Original Message- From: Jean-Luc Wasmer [mailto:sq...@2010.jl.wasmer.ca] Sent: Thursday, April 08, 2010 1:02 PM Hi, What is the format of the regex file when defining an ACL based on regexes? Just a list of matches. E.g.: ^http://www\.google\.com #Allow access to Google # News

RE: [squid-users] url_regex file format

2010-04-08 Thread Henrik Nordström
tor 2010-04-08 klockan 14:59 -0700 skrev Mellem, Dan: Also, what RE are supported? The same as egrep / grep -E. Which is also known as POSIX Extended Regex. Regards Henrik

Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-08 Thread Henrik Nordström
tor 2010-04-08 klockan 20:43 +1200 skrev Amos Jeffries: FWIW, the flash player and the server are somewhat broken and playing bad games with HTTP/1.1 Range requests. Which quite likely triggers confusion within Squid as the store/object interface is range aware. Has been issues there in the

RE: [squid-users] how to cache youtube

2010-04-08 Thread sameer khan
thanks kinkie, but does it work ? any one experience with below link ? will be much appreciated for any help. thanks Date: Thu, 8 Apr 2010 11:48:35 +0200 Subject: Re: [squid-users] how to cache youtube From: gkin...@gmail.com To: khanza...@hotmail.com CC: squid-users@squid-cache.org

RE: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-08 Thread David Robinson
Which quite likely triggers confusion within Squid as the store/object interface is range aware. Has been issues there in the past, and quite likely is more issues.. Is squid 2.7 Content-Range aware? Since these requests work in 2.7, is 2.7 just ignoring the range requests? -Original

Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-08 Thread Mark Nottingham
The response to the request with the fs query arg is sending back a Content-Range header; http://redbot.org/?uri=http%3A%2F%2Fserver437.files.youporn.com%2Fe4%2Fflv%2F426677_Splash.flv%3Fe%3D1273284436%26h%3D47ee1fbcb8d3ab05a06988683c2d94c1%26fs%3D4281434 That's weird. On 08/04/2010, at

Re: [squid-users] Squid is unable to connect to local webservers

2010-04-08 Thread Amos Jeffries
Johnson, S wrote: Another piece of information I just discovered... I use a wpad.dat file to assign the proxy to users. It works just fine except for the local servers. However, when I force the connection in the browser to the proxy with 8080 (dansguardian) then I can get to my local web

Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-08 Thread Amos Jeffries
Henrik Nordström wrote: tor 2010-04-08 klockan 20:43 +1200 skrev Amos Jeffries: FWIW, the flash player and the server are somewhat broken and playing bad games with HTTP/1.1 Range requests. Which quite likely triggers confusion within Squid as the store/object interface is range aware. Has

RE: [squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread GIGO .
Hi Markus/Nick, I have chosen the following method of creating the keytab can you give me your advice/expereince regarding it. 1. I have created a user account for SPN in Active directory with password never expires and preauthentication not required checked. squidLhr-proxy Pwd: X

RE: [squid-users] Re: Creating a kerberos Service Principal.

2010-04-08 Thread GIGO .
Markus could not get you please can you elaborate a bit. thank you all! regards, Bilal To: squid-users@squid-cache.org From: hua...@moeller.plus.com Date: Thu, 8 Apr 2010 20:04:30 +0100 Subject: [squid-users] Re: Creating a kerberos Service

Re: [squid-users] how to cache youtube

2010-04-08 Thread Kinkie
On Fri, Apr 9, 2010 at 12:32 AM, sameer khan khanza...@hotmail.com wrote: Please see http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube thanks kinkie, but does it work ? any one experience with below link ? will be much appreciated for any help. To the best of my