Re: [squid-users] Bad Amount of File Descriptors

2011-05-24 Thread gaël therond
Ok then, I've just test again the Ulimit command with the correct syntax and it's working perfectly. It was my bad, the Debian Distrib need the following syntax: ulimit [Options] Amount of FD BUT in fact the command is ulimit -SH -n 256000 instead of the ulimit -SHn 256000 as we could believe

[squid-users] squid configuration information

2011-05-24 Thread francescobocca...@libero.it
Hi to all, i'm of the squid world. I have some question for you. I explain my problem. I have an application, intalled in one server A, that use openlayer library for load data tiles from a second server B.The second one server have 3 server alias name: a.mydomain.eu b.mydomain.eu

Re: [squid-users] Block HTTPS website

2011-05-24 Thread Amos Jeffries
On 24/05/11 13:10, Malvin Rito wrote: Thanks, Could you send me a procedure on how to do this via Redhat box firewall. Using iptables to block HTTPS is: iptables -t filter -I PREROUTING 1 -p tcp --deport 443 -j REJECT You will have to contact RedHat or more specific support channels for

Re: [squid-users] Bad Amount of File Descriptors

2011-05-24 Thread Amos Jeffries
On 24/05/11 19:36, gaël therond wrote: Ok then, I've just test again the Ulimit command with the correct syntax and it's working perfectly. It was my bad, the Debian Distrib need the following syntax: ulimit [Options] Amount of FD BUT in fact the command is ulimit -SH -n 256000 instead of the

[squid-users] How to clear all the cached files under a folder

2011-05-24 Thread Wang Shiqiang
Hi All: I use squidclient to clear single file cache. Does anyone know how to clear all the cached files under one folder? Thanks Best Regards! --- Green Wang

Re: [squid-users] How to clear all the cached files under a folder

2011-05-24 Thread Amos Jeffries
On 24/05/11 22:31, Wang Shiqiang wrote: Hi All: I use squidclient to clear single file cache. Does anyone know how to clear all the cached files under one folder? Defined folder please. URL path level? cache_dir location? cache_dire sub-directory? Amos -- Please be

Re: [squid-users] Bad Amount of File Descriptors

2011-05-24 Thread gaël therond
No problems, it's been my pleasure, you helped me (and John Doe also), I help you. That the way the thinks should work ;) See ya later folks ! - Mail original - De: Amos Jeffries squ...@treenet.co.nz À: squid-users@squid-cache.org Envoyé: Mardi 24 Mai 2011 11:09:05 Objet: Re:

[squid-users] SslBump and bad cert

2011-05-24 Thread Ming Fu
Hi, When using sslbump and encounter a bad server cert, the squid can choose to deny or allow such error. Some static ACL can be used to choose the sites that the squid would tolerate a bad cert. However, such acl is like a fixed list in the configure. Every time the user encounter a new

Re: [squid-users] SslBump and bad cert

2011-05-24 Thread Alex Crow
E.g. if the server cert has expired, sign an expired squid cert to the browser. At least this will reproduce the same behavior as if the sslbump is not turned on. The browser will warn the certificate problem and the user can proceed at his own risk. The squid administrator can be kept out of

RE: [squid-users] SslBump and bad cert

2011-05-24 Thread Ming Fu
Hi Alex, One question about sslbump implementation, was the client side cert exchange done before squid start the ssl to the server? If so, it might be too late when squid learns that the server cert is not good. The client side cert was already sent out. If the client side cert was exchanged

[squid-users] ..::Best Practice::..

2011-05-24 Thread Alfonso Alejandro Reyes Jimenez
Hi list. We would like to know whats the best practice when we have more than 3000 rules on our squid. Right now squid takes more than 15 minutes to start or restart, we think that's because we have a lot of rules. The question is: If we change all that rules to a text file, squid will start

[squid-users] https squid reverse proxy to an http web site

2011-05-24 Thread Anna K. Hegedus
Hi Everyone, I have a bit of an issue that I am trying to resolve with Squid, but I cannot quite get the hang of things. I was wondering if someone could help me out or point me in the right direction. I have a simple piece of hardware that uses a web interface. This hardware only uses http

[squid-users] Secure Squid

2011-05-24 Thread Andrew Gilfillan
Hello, I'm having an issue with Squid, Is it possible to add a username and password onto the IP range, so the user is asked to login before using the IP? If so, could you tell me how, please!. Thanks! Andrew.

RE: [squid-users] Secure Squid

2011-05-24 Thread Alfonso Alejandro Reyes Jimenez
Hi Andrew. We usually use radius server for the authentication we don't pay attention to IP's only the usernames and passwords. If you need assistance with the radius server please let me know. Regards.                   Alfonso. -Mensaje original- De: Andrew Gilfillan

Re: [squid-users] Secure Squid

2011-05-24 Thread Jakob Curdes
Am 24/05/2011 21:36, schrieb Andrew Gilfillan: Hello, I'm having an issue with Squid, Is it possible to add a username and password onto the IP range, so the user is asked to login before using the IP? If so, could you tell me how, please!.

Re: [squid-users] ..::Best Practice::..

2011-05-24 Thread Luis Daniel Lucio Quiroz
HOla :) consultoria!! We did have the same problem, from 15 mins we reduce up to 30 seconds, Squid 3.0 and 3.1 has a feature, that they stop all traffic until the hole set of ACL are processed, there is not much to dup than acl optimization/reducction in a single-box scenario. LD Le mardi

Re: [squid-users] https squid reverse proxy to an http web site (solved)

2011-05-24 Thread Anna K. Hegedus
Hey everyone, I figured out what was going on and have everything working smoothly. for future references, here's what I did: 1.) configure squid. Here's the relevant chunk of the config: --- https_port 443 cert=/usr/misc/certs/squid.cert key=/usr/misc/certs/squid.pem

Re: [squid-users] https squid reverse proxy to an http web site (solved)

2011-05-24 Thread Amos Jeffries
On 25/05/11 11:07, Anna K. Hegedus wrote: Hey everyone, I figured out what was going on and have everything working smoothly. for future references, here's what I did: 1.) configure squid. Here's the relevant chunk of the config: --- https_port 443 cert=/usr/misc/certs/squid.cert

[squid-users] Sudden error (1067) when starting squid service W2K3

2011-05-24 Thread Rhys Evans
I've encountered this strange error situation and would appreciate any attempts to shed light on the issue. I've got a squid service running on Windows Server 2003 (this squid service has been running since October 2008) and just the other day (after a power cut) the service will no longer start.

Re: [squid-users] How to clear all the cached files under a folder

2011-05-24 Thread Wang Shiqiang
-邮件原件- 发件人: Amos Jeffries [mailto:squ...@treenet.co.nz] 发送时间: 2011年5月24日 18:37 收件人: squid-users@squid-cache.org 主题: Re: [squid-users] How to clear all the cached files under a folder On 24/05/11 22:31, Wang Shiqiang wrote: Hi All: I use squidclient to clear single file

[squid-users] Re: Sudden error (1067) when starting squid service W2K3

2011-05-24 Thread Rhys Evans
I've tried an absolutely fresh install of squid and still get a 1067 error when starting the service. There is now nothing written to squid.exe.log but cache.log includes the text below: 2011/05/25 13:54:39| Starting Squid Cache version 2.7.STABLE8 for i686-pc-winnt... 2011/05/25 13:54:39|

Re: [squid-users] ..::Best Practice::..

2011-05-24 Thread Eliezer Croitoru
it depends on the machine... to make sure that the 3000 rules loading is the problem you can run the squid server on a verbose mode to see how long it takes to load the rules. from what i have seen the stop process depends less on the amount of rules but on the amount of connections used on

[squid-users] Re: Sudden error (1067) when starting squid service W2K3

2011-05-24 Thread Rhys Evans
Seeing as I don't have any neighbour caches, I set htcp_port 0 and things seem to be OK. It still seems odd that this issue came up, I'm wondering if maybe some Windows update altered some behaviour in regard to allowing the binding required? On 25 May 2011 13:58, Rhys Evans rhys.ev...@gmail.com

Re: [squid-users] Squid 3.1.12 slow on a site

2011-05-24 Thread Eliezer Croitoru
well i just used wget to download http://www.bandiweb.it/Left.asp and it's got stuck after couple of seconds without squid or cache(in my zone) almost must be a site problem. cause it's only http://www.bandiweb.it/Left.asp and not other parts of the site. On 20/05/2011 18:36, Brian

Re: [squid-users] Squid 3.1.12 slow on a site... sorry

2011-05-24 Thread Eliezer Croitoru
every asp part of the site.. http://www.bandiweb.it/RegistrazioneProva.asp also... the same contact the site manager. On 20/05/2011 18:36, Brian Tuley wrote: I'm running squid proxy 2.7 and that site is almost unresponsive to me as well. Works fine when I bypass squid however. I've been