Re: [squid-users] Re: Kerberos

2010-05-17 Thread Matthew Smith
Hi Markus, Thanks for the info. If squid can use MIT kerberos, then hopefully I should be ok to get it working with Mac OS X Server (and OpenDirectory), based off http://developer.apple.com/opensource/kerberosintro.html On the Novell front, it's harder to find info on it's kerberos

Re: [squid-users] squid crashing while trying use url_rewrite_program

2010-05-17 Thread John Doe
From: jyothi jyo...@cse.iitm.ac.in What happens when you run in manually as the proxy user? does it keep running until you abort it? Sorry I am new to this, run in manually as the proxy user means? What happens if you run your script from the command line as the squid user? JD

Re: [squid-users] squid crashing while trying use url_rewrite_program

2010-05-17 Thread jyothi
Sorted out! Perl script was not set to executable permissions. But I am facing some other problem Forwarding requests to other proxy cache_peer 10.65.0.32 parent 3128 3130 no-digest login=PASS As suggested in FAQ I have added this line squid.conf. 10.65.0.32 needs authentication. When I

[squid-users] never_direct/always_direct

2010-05-17 Thread GIGO .
Dear all, never_direct/always_direct Why two directives had to be created while one directive could have done the trick? Please guide regards, Bilal _ Hotmail: Free, trusted and rich

Re: [squid-users] never_direct/always_direct

2010-05-17 Thread Amos Jeffries
GIGO . wrote: Dear all, never_direct/always_direct Why two directives had to be created while one directive could have done the trick? Please guide Internal coding style for Squid is a bit limited for what these two are supposed to do in relation to prefer_direct and

Re: [squid-users] never_direct/always_direct

2010-05-17 Thread Peng, Jeff
2010/5/17 GIGO . gi...@msn.com: Dear all, never_direct/always_direct Why two directives had to be created while one directive could have done the trick? Please guide always_direct has priority over never_direct. statement below: always_direct allow A never_direct allow B

Re: [squid-users] File with zero size when using squid proxy

2010-05-17 Thread Emmanuel Lesouef
Hi Hassan, Le Thu, 13 May 2010 04:03:01 +0600, Nyamul Hassan mnhas...@usa.net a écrit : Every iteration of stable release has some fixes for known problems, and might also inadvertently introduce a new problem, which has to be fixed after a bug report is done. That is why it is suggested

[squid-users] How many requests

2010-05-17 Thread Georg Höllrigl
Hello Everyone, How many HTTP requests can squid as reverse proxy do? Im getting an average of 4500 per Minute which are aroun 75 requests per second. When do you think a squid will give up (given a load with many small files)? What would fail first, when I see around 80 - 90 % CPU idle time?

Re: [squid-users] Access.log

2010-05-17 Thread Leonardo Carneiro - Veltrac
Amos Jeffries wrote: Leonardo Carneiro - Veltrac wrote: Leonardo Carneiro - Veltrac wrote: Amos Jeffries wrote: GIGO . wrote: Hi all, Can anybody please explain me what does this error mean and why it occurs it happens while i was testing youtube/facebook caching. TCP_NEGATIVE_HIT/204

Re: [squid-users] How many requests

2010-05-17 Thread Peng, Jeff
2010/5/17 Georg Höllrigl georg.hoellr...@xidras.com: Hello Everyone, How many HTTP requests can squid as reverse proxy do? That's decided by how large the objects are. I saw my cache was serving with 200 requests per second. -- Tech support agency in China http://duxieweb.com/

Re: [squid-users] http CONNECT method with fwd proxy to content server on same subnet

2010-05-17 Thread Quin Guin
Amos, Thank you for your reply and see reply below: Thanks, Guin - Original Message From: Amos Jeffries squ...@treenet.co.nz To: squid-users@squid-cache.org Sent: Sat, May 15, 2010 2:14:14 AM Subject: Re: [squid-users] http CONNECT method with fwd proxy to content server on same

Re: [squid-users] http CONNECT method with fwd proxy to content server on same subnet

2010-05-17 Thread Quin Guin
Thank you Henrik, Yes I agree as I stated in a reply to Amos this is not an ideal or a good design but I need to make it work. I do have SQUID configured as forward proxy but I think I need to setup some routing policy (iptables) to make everything go directly through our servers as they are

[squid-users] Shalla's blacklist

2010-05-17 Thread Rich Winkel
Could someone explain the organization of this blacklist? There's a BL directory which includes the same categories as the top-level directory (and more) but the overlapping categories seem to have more entries. Is this for differing levels of safety or ?? Thanks! Rich

[squid-users] Deny IPs

2010-05-17 Thread kranthi
Hi all, I want squid to deny requests from certain IPs and forward the rest. The list of IPs will be saved in an external file (or a MySql database), which will be updated every minute. (and my squid server can't be restarted every minute) ny ideas how this can be done ? Thanks KK.

Re: [squid-users] Shalla's blacklist

2010-05-17 Thread John Doe
From: Rich Winkel wink...@missouri.edu Could someone explain the organization of this blacklist? There's a BL directory which includes the same categories as the top-level directory (and more) but the overlapping categories seem to have more entries. Is this for differing levels of safety

RE: [squid-users] Dynamic Content Caching/Windowsupdate/Facebook/youtube

2010-05-17 Thread GIGO .
You recommended the change in order of refresh_patterns same is written in the reference materials. I tried to understand what could be the reason for that but have no clue yet please guide. Further for windows clients (xpwithservice pack 3 an latest windows mostly ) do i need to manually do

RE: [squid-users] RE: Anacron log entries

2010-05-17 Thread Simon Brereton
From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Friday, May 14, 2010 1:32 AM Simon Brereton wrote: From: Henrik Nordström [mailto:hen...@henriknordstrom.net] Sent: Wednesday, May 12, 2010 4:06 PM ons 2010-05-12 klockan 14:40 +0200 skrev Simon Brereton:

Re: [squid-users] http CONNECT method with fwd proxy to content server on same subnet

2010-05-17 Thread Henrik Nordström
mån 2010-05-17 klockan 08:14 -0700 skrev Quin Guin: I do have SQUID configured as forward proxy but I think I need to setup some routing policy (iptables) to make everything go directly through our servers as they are acting like a proxy but not a caching proxy and can not handle CONNECT

[squid-users] squidclient: how to list cached websites uris

2010-05-17 Thread David Touzeau
Dear I would to get cached objects especially the websites name stored into squid cache. the squidclient mgr:objects command line display information that did not allow me to extract web site names : is there any other tips or tweak to get the list of store web sites ? KEY

Re: [squid-users] Negative values at % hits

2010-05-17 Thread Henrik Nordström
mån 2010-05-17 klockan 18:15 -0500 skrev Luis Daniel Lucio Quiroz: Hits as % of all requests: 5min: 7.7%, 60min: 17.2% Hits as % of bytes sent:5min: -19.3%, 60min: -5.3% does negative values has a special meaning or it is a bug? What is your quick_abort_* and

Re: [squid-users] squidclient: how to list cached websites uris

2010-05-17 Thread Henrik Nordström
mån 2010-05-17 klockan 21:31 +0200 skrev David Touzeau: I would to get cached objects especially the websites name stored into squid cache. Not easily done as the Squid cache index is just MD5(URL). But see the purge tool. This can index the ufs family of cache directories (ufs, aufs,

[squid-users] Caching specifics websites

2010-05-17 Thread David Touzeau
Dear I would like to know how to force squid to create more cache from specific web sites defined in list ? Best regards

Re: [squid-users] never_direct/always_direct

2010-05-17 Thread Henrik Nordström
mån 2010-05-17 klockan 11:02 + skrev GIGO .: Dear all, never_direct/always_direct Why two directives had to be created while one directive could have done the trick? Please guide Because both common and complex configuration is generally easier to model with two directives than

Re: [squid-users] Negative values at % hits

2010-05-17 Thread Luis Daniel Lucio Quiroz
Le lundi 17 mai 2010 18:34:04, vous avez écrit : mån 2010-05-17 klockan 18:15 -0500 skrev Luis Daniel Lucio Quiroz: Hits as % of all requests: 5min: 7.7%, 60min: 17.2% Hits as % of bytes sent:5min: -19.3%, 60min: -5.3% does negative values has a special meaning or

Re: [squid-users] Caching specifics websites

2010-05-17 Thread Luis Daniel Lucio Quiroz
Le lundi 17 mai 2010 18:38:54, David Touzeau a écrit : Dear I would like to know how to force squid to create more cache from specific web sites defined in list ? Best regards More cache? depending on what you mean with that. You may tell squid to keep in fresh state more time in cache

Re: [squid-users] Kerberos

2010-05-17 Thread Henrik Nordström
mån 2010-05-17 klockan 11:15 +1000 skrev Matthew Smith: Hi! I have been trying to find out some info on kerberos auth and squid, but most of my searching points to setting up kerberos for single signon with windows AD. Are other directory services supported? If so, which? Also does anyone

Re: [squid-users] Negative values at % hits

2010-05-17 Thread Henrik Nordström
mån 2010-05-17 klockan 18:42 -0500 skrev Luis Daniel Lucio Quiroz: Le lundi 17 mai 2010 18:34:04, vous avez écrit : mån 2010-05-17 klockan 18:15 -0500 skrev Luis Daniel Lucio Quiroz: Hits as % of all requests: 5min: 7.7%, 60min: 17.2% Hits as % of bytes sent:5min:

Re: [squid-users] How many requests

2010-05-17 Thread Amos Jeffries
On Mon, 17 May 2010 14:50:28 +0200, Georg Höllrigl georg.hoellr...@xidras.com wrote: Hello Everyone, How many HTTP requests can squid as reverse proxy do? This question is frequently asked. It is also somewhat akin to asking how fast is the wind blowing? The answer depends on a lot of

Re: [squid-users] removing Proxy

2010-05-17 Thread Jose Ildefonso Camargo Tolosa
Hi! On Sun, May 16, 2010 at 6:14 PM, Amos Jeffries squ...@treenet.co.nz wrote: On Sun, 16 May 2010 14:06:55 -0430, Jose Ildefonso Camargo Tolosa ildefonso.cama...@gmail.com wrote: Hi! On Fri, May 14, 2010 at 10:27 AM, a...@gmail adbas...@googlemail.com wrote: Hello all I was wondering if

RE: [squid-users] Dynamic Content Caching/Windowsupdate/Facebook/youtube

2010-05-17 Thread Amos Jeffries
On Mon, 17 May 2010 16:22:19 +, GIGO . gi...@msn.com wrote: You recommended the change in order of refresh_patterns same is written in the reference materials. I tried to understand what could be the reason The refresh_pattern options configure the staleness heuristic (estimate of how long

Re: [squid-users] http CONNECT method with fwd proxy to content server on same subnet

2010-05-17 Thread Amos Jeffries
On Mon, 17 May 2010 08:07:23 -0700 (PDT), Quin Guin quing...@yahoo.com wrote: Amos, Thank you for your reply and see reply below: Thanks, Guin NP: your email client needs to be fixed too it seems. It's attributing your reply to me. - Original Message From: Amos

Re: [squid-users] Deny IPs

2010-05-17 Thread Amos Jeffries
On Tue, 18 May 2010 05:51:41 +0800, Peng, Jeff p...@l.nsbeta.info wrote: 2010/5/18 kranthi kranthi...@gmail.com: Hi all, I want squid to deny requests from certain IPs and forward the rest. The list of IPs will be saved in an external file (or a MySql database), which will be updated every

Re: [squid-users] Deny IPs

2010-05-17 Thread Peng, Jeff
2010/5/18 Amos Jeffries squ...@treenet.co.nz: Wrong. http://wiki.squid-cache.org/SquidFaq/SquidAcl#Does_Squid_support_the_use_of_a_database_such_as_mySQL_for_storing_the_ACL_list.3F IP-based authorization is done via an external_acl_type helper that takes %SRC as its format parameter.

RE: [squid-users] RE: Anacron log entries

2010-05-17 Thread Amos Jeffries
On Mon, 17 May 2010 19:35:50 +0200, Simon Brereton simon.brere...@dada.net wrote: From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Friday, May 14, 2010 1:32 AM Simon Brereton wrote: From: Henrik Nordström [mailto:hen...@henriknordstrom.net] Sent: Wednesday, May 12, 2010 4:06 PM

[squid-users] Squid 2.6 - Deny all users in a specific Active Directory OU (not group)

2010-05-17 Thread Kris Glynn
Hi, I would like to know if it is possible to deny/allow based on a specific OU in Active Directory. Problem: I have an OU (OU=Service Accounts,dc=company,dc=internal) that contains accounts that should not be allowed access through squid. How would I go about denying access to all users in