Re: [squid-users] Cache everything (except when client explicitely sends No-Cache directive)

2009-05-14 Thread Amos Jeffries
Thibaut_ wrote: Hi, I do some large batch processing and would like to explicitely cache every page I request. (Because I sometimes request multiple pages again and don't want to hammer the servers). If I want a fresh copy, my programm explicitely sends a No-cache header to squid. I'm using

Re: [squid-users] New squid3 install

2009-05-14 Thread Amos Jeffries
Jason Staudenmayer wrote: I just got done setting up a new squid-3.0-STABLE15 server I'm using my old acl list from a squid-2.3-STABLE4 so far it's working fine but I'm starting to notice some things in the log file. It seems that every request is denied and then accepted, even when refreshing

Re: [squid-users] ultramonkey + squid settings

2009-05-14 Thread Amos Jeffries
Hiroshi Kouda wrote: I want to make High Availability place from ultramonkey and squid. - - | ultramonkey 1| | ultramonkey 2| | (active) | | (standby)| - - |

[squid-users] Squid 3.0.STABLE16-RC1 is available

2009-05-15 Thread Amos Jeffries
/http-mirrors.dyn http://www.squid-cache.org/Download/mirrors.dyn If you encounter any issues with this release please file a bug report. http://bugs.squid-cache.org/ Amos Jeffries

Re: [squid-users] New squid3 install

2009-05-17 Thread Amos Jeffries
Jason Staudenmayer wrote: I just got done setting up a new squid-3.0-STABLE15 server I'm using my old acl list from a squid-2.3-STABLE4 so far it's working fine but I'm starting to notice some things in the log file. It seems that every request is denied and then accepted, even when

Re: [squid-users] 3 ISPs: Routing problem

2009-05-17 Thread Amos Jeffries
RSCL Mumbai wrote: On Fri, May 15, 2009 at 10:38 AM, Amos Jeffries squ...@treenet.co.nz wrote: RSCL Mumbai wrote: On Thu, May 14, 2009 at 4:33 PM, Jeff Pang pa...@arcor.de wrote: RSCL Mumbai: What would like to configure is setup specific G/ws for specific clients. 192.168.1.100 to use G/w

Re: [squid-users] Reverse Proxy

2009-05-17 Thread Amos Jeffries
: https://mail.airarabia.ae/exchweb/ The following error was encountered: * Connection to 10.200.22.12 Failed The system returned: (71) Protocol error The remote host or network may be down. Please try the request again. Please help //Remy On Fri, 2009-05-15 at 16:35 +1200, Amos

Re: [squid-users] squid and ssl connect over ssl-proxy

2009-05-17 Thread Amos Jeffries
Frank Patzig wrote: Hallo, hier is the problem(SQUID26): client -- squid ssl-proxy --- web Connect the client direct the ssl-proxy can see the content from web-server. Is the client connect over the squid then are not data from web-server.(no errors) Hier is the example:

Re: [squid-users] How do I Ubuntu 9.04 + Squid3 + likewise-open +Active Directory on Windows Server 2003 R2

2009-05-17 Thread Amos Jeffries
michael hiatt wrote: Hi guys, I have Ubuntu 9.04 (Desktop) and attempting to use authentication to a windows werver 2003 r2 box. I have installed likewise-open and been able to successfully join with domainjoin-cli command using the following link as a guide:

Re: [squid-users] Blocked Domains help :(

2009-05-17 Thread Amos Jeffries
IBT wrote: I have added my config so that maybe someone with more experience can make sure it ok # NETWORK OPTIONS http_port 8085 acl QUERY urlpath_regex cgi-bin \? cache deny QUERY This QUERY stuff is just preventing some old crap pages from caching. We now recommend using the

Re: [squid-users] transparent proxy with Active Directory Login

2009-05-17 Thread Amos Jeffries
Gavin McCullagh wrote: On Thu, 14 May 2009, Amos Jeffries wrote: What can be done is to glean some details such as machine IP and do some local not-quite-auth testing on it to see who is logged in and get their username back (NP: not password). AD may be able to map IP to current user

Re: [squid-users] How to strip/ignore header in squid?

2009-05-17 Thread Amos Jeffries
Kurt Buff wrote: On Thu, May 14, 2009 at 21:56, Amos Jeffries squ...@treenet.co.nz wrote: Kurt Buff wrote: On Wed, May 13, 2009 at 18:18, Amos Jeffries squ...@treenet.co.nz wrote: On Tue, May 12, 2009 at 17:09, Chris Robertson crobert...@gci.net wrote: Kurt Buff wrote: All, My user

Re: [squid-users] Reverse Proxy

2009-05-17 Thread Amos Jeffries
+1200, Amos Jeffries wrote: Mario Remy Almeida wrote: Hi Amos, I followed the instruction as per http://wiki.squid-cache.org/ConfigExamples/Reverse/OutlookWebAccess But I am some how failing to configure https. My squid.conf

Re: [squid-users] TProxy not faking source address.

2009-05-17 Thread Amos Jeffries
rihad wrote: Looks like I'm the only one trying to use TProxy? Somebody else, please? To summarize: Squid does NOT spoof client's IP address when initiating connections on its own. Just as if there weren't a thing named TProxy. We have had a fair few trying it with complete success when its

Re: [squid-users] Reverse Proxy

2009-05-17 Thread Amos Jeffries
//Remy On Sun, 2009-05-17 at 19:33 +1200, Amos Jeffries wrote: Mario Remy Almeida wrote: Hi Amos, One thing I forgot to mentioned /etc/hosts has this entry 10.200.22.12 mail.airarabia.ae Output of host mail.airarabia.ae from dns is - mail.airarabia.ae has address 10.200.9.20

Re: [squid-users] Reverse Proxy

2009-05-17 Thread Amos Jeffries
off uri_whitespace strip coredump_dir /var/spool/squid windows_ipaddrchangemonitor off Thanks for the help //Remy On Mon, 2009-05-18 at 00:57 +1200, Amos Jeffries wrote: Mario Remy Almeida wrote: My squid.conf acl all src all acl manager proto cache_object acl localhost src 127.0.0.1/32 acl

Re: [squid-users] The acl for cache_peer_access

2009-05-17 Thread Amos Jeffries
Hi, all The acl for cache_peer_access is not onBlockingCheck but fastCheck. Why ? Are there any problem if the acl is onBlockingCheck. Using the long tests will have some impact on performance, possibly a large impact. No real issues that I'm aware of. As far as I know its simply because

Re: [squid-users] TProxy not faking source address.

2009-05-17 Thread Amos Jeffries
--enable-linux-netfilter and squid is 3.1.0.7 the debug_options ALL,1 89,6 output is like when we have not debug_options at all !! i had tproxy with my custom kernels but upgraded to Ubuntu 9.04 (Jaunty) to prevent custom compiling of kernel and iptables but it does not work Amos Jeffries-2

Re: [squid-users] Re: Any way to redirect pages on return code?

2009-05-18 Thread Amos Jeffries
Platoali wrote: Platoali wrote: Hi, I'm looking for a way to make squid to redirect my users to a specific page when a special return code have been encountered. for example, here a part of my access log: 1242562024.085347 172.20.0.68 TCP_MISS/403 1082 GET http://www.b.com -

Re: [squid-users] TProxy not faking source address.

2009-05-18 Thread Amos Jeffries
rihad wrote: Omid Kosari wrote: I solved the problem . I have installed aptitude install libcap2 libcap2-dev and then recompiled squid and tproxy problem solved. Thank you Amos for http://wiki.squid-cache.org/Features/Tproxy4 . please also edit troubleshooting section for Ubuntu 9.04 (Jaunty)

Re: [squid-users] Authentication problem. Squid3+ntlm_auth+Firefox.

2009-05-18 Thread Amos Jeffries
xor wrote: Hello, I have installed squid3 with authorisation in the windows2003 domain, with libraries kerberos5 and samba + winbind. OS Debian Lenny 5.0.1. Packages squid3, samba, krb and winbind are taken from official repositories (http://ftp.ru.debian.org/debian/). The proxy clients

Re: [squid-users] How to strip/ignore header in squid?

2009-05-18 Thread Amos Jeffries
Robert Collins wrote: On Wed, 2009-05-13 at 19:39 -0700, Kurt Buff wrote: I came to that conclusion on my own, and did recompile with that option ('make --enable-http-violations' then 'make install', and it went without error) but it didn't help, as I'm getting the same error message. I'm

Re: [squid-users] Transparent Squid Stalls For Up To Two Minutes

2009-05-18 Thread Amos Jeffries
Doug Eubanks wrote: I'm having an intermittent squid issue. It's plagued me with CentOS 5.x, Fedora 6, and now Fedora 11 (all using the RPM build that came with the OS). My DD-WRT router forwards all of my outgoing port 80 requests to my transparent proxy using IP tables. For some reason,

Re: [squid-users] New Squid3 Stable 13 Setup

2009-05-18 Thread Amos Jeffries
Hi, i am trying to setup proxy server as show below Client ==Sibling == Parent== Internet Huh? do you mean a: Client ==Squid == Parent== Internet ?? 'Sibling' is a two-way mesh term, meaning two proxies at teh same level: Client == ProxyA = ...elsewhere ||| Client == ProxyB

Re: [squid-users] TCP_MISS/503 and icp

2009-05-18 Thread Amos Jeffries
Hi, I have some hosts that use one squid-1 server that has a squid-2 parent: I mean squid-1 has: cache_peer parent.domain parent 80803130 But some sites are unaccessible, in special those sites with url having an ? for example: 1242674301.146104 10.128.255.189

Re: [squid-users] How to make squid caches windows + anti-virus updates?

2009-05-18 Thread Amos Jeffries
I would like to know what squid caches by default and where are these files kept? I thought that squid would cache everything, but I read that a few lines must be added to squid.conf to force squid to cache windows updates, which I Everything it can cache it does, yes. The WU requests are

Re: [squid-users] New Squid3 Stable 13 Setup

2009-05-18 Thread Amos Jeffries
Hi Amos, Thanks for responding to my message. i am trying to achieve as mentioned below Site A has proxy as Proxy 2 and another proxy is located in different country Site B through tunnel as Proxy1 Site A has local internet when fails need all web request to be forwarded to proxy 1

Re: [squid-users] New Squid3 Stable 13 Setup

2009-05-19 Thread Amos Jeffries
info? is it actually gong direct? what does log say? etc. etc Amos Thanks Amos Jeffries-2 wrote: Hi Amos, Thanks for responding to my message. i am trying to achieve as mentioned below Site A has proxy as Proxy 2 and another proxy is located in different country Site B through tunnel

Re: [squid-users] Transparent Squid Stalls For Up To Two Minutes

2009-05-19 Thread Amos Jeffries
. Thanks Doug Eubanks ad...@dougware.net 919-201-8750 Strange. What is the output of squid -v and squidclient mgr:info (AKA info cachmgr page)? Amos _ From: Amos Jeffries [mailto:squ...@treenet.co.nz] To: ad...@dougware.net Cc: squid-users@squid-cache.org Sent: Mon, 18 May 2009 14:55

Re: [squid-users] Does Squid scale well?

2009-05-19 Thread Amos Jeffries
Can someone please say how well Squid 3.1/tproxy scales? Would it have problems servicing more than 10k simultaneous HTTP requests, and pushing as much as 300 mbit/s of traffic? 500 mbit/s? 1 gbit/s? Planned hardware setup: Dell Poweredge 6850 server QUAD Dual Core 3.4GHz 8GB Hard

Re: [squid-users] Squid suddenly crashes (Maybe a bug)

2009-05-19 Thread Amos Jeffries
The main reason for using 3.1 is TPROXY so i can not use 3.0. How can i provide full info to Amos ? Bugzilla or squid-...@squid-cache.org is best for beta and RC releases. Amos Jeff Pang-4 wrote: Omid Kosari: Anyone? This problem occurs 5 times a day (average). and each time the

Re: [squid-users] How to log only the MISS

2009-05-19 Thread Amos Jeffries
Is it posible to log only the TCP_MISS or .*MISS Not yet. It's one of the open feature requests. Patches for 3.HEAD are welcome. Amos

Re: [squid-users] Log Request Header

2009-05-19 Thread Amos Jeffries
Mario Remy Almeida wrote: Hi I have not enabled squidmime. But logformat headers %ts.%03tu %tg %a %rp [%h] [%h] I understand that. I am asking you to set up a log using the (defined by default) squidmime format, and see if that displays the information you are interested in. Try and

Re: [squid-users] Reverse Proxy, multiple web servers, only one is reachable

2009-05-19 Thread Amos Jeffries
Hi there. Currently we are running squid 2.5.STABLE3 under RHEL3. However, this week our ssl certificate will expire and the new certificate is a chained certificate, which is not supported by that version of squid. Also it is an old server in need of an upgrade, so we are trying to

Re: [squid-users] Upstream Squid to identify user

2009-05-19 Thread Amos Jeffries
myocella wrote: Greeting I have set up an upstream Squid proxy to receive proxy traffic from other Squid servers. I would like to log user access on the upstream proxy. The downstream has this line: cache_peer upstreamproxy.foo.com parent 8080 7 no-query login=*:foo However, there

Re: [squid-users] Proxy and cache of SSL with client auth?

2009-05-19 Thread Amos Jeffries
This may sound insane, but here goes. I've got a file distribution system that relies on client certificate authentication through SSL (https) to authenticate clients prior to delivery of files. Typical apache with ssl and client cert setup. I have reached a situation, however, where it

Re: [squid-users] --enable-http-violations

2009-05-19 Thread Amos Jeffries
What exactly does compiling with --enable-http-violations do? I was under the impression it just allowed ignore-private, ignore-no-store, ignore-auth, override-expire, etc to work however I am starting to doubt that. It enables use of all config settings which, if changed from the defaults,

Re: [squid-users] Split caching by size

2009-05-20 Thread Amos Jeffries
Jason Spegal wrote: Just tested and verified this. At least in Squid 3.0 minimum_object_size affects both memory and disk caches. Anyone know if this is true in 3.1 as well? Any thoughts as to how to split it? I may be wrong and likely am but I recall there was separate minimum_object_size for

Re: [squid-users] Can't access non-anymous FTP via Internet Explorer

2009-05-20 Thread Amos Jeffries
James Zuelow wrote: I have a Squid 2.7Stable3 install. (Debian Lenny package, kernel, etc.) Clients are configured with a proxy.pac, and we use ntlm authentication. This is not a transparent proxy. When users attempt to use IE7 or IE8 for non-anonymous FTP sessions through Squid, they

Re: [squid-users] New Squid3 Stable 13 Setup

2009-05-20 Thread Amos Jeffries
see both TCP_MISS/200 503 errors Log for these? Amos Amos Jeffries-2 wrote: Thanks Amos its working now, but i see a small issue when i do query on search engine like google i can directly hit on any site but when i do search i get The system returned: (111) Connection refused The remote

Re: [squid-users] Blocked Domains help :(

2009-05-20 Thread Amos Jeffries
Thanks for the info. I have made the changes and here is my new script. Let me explain what happens now. # NETWORK OPTIONS http_port 8085 acl QUERY urlpath_regex cgi-bin \? refresh_pattern ^ftp: 144020% 10080 refresh_pattern ^gopher:14400% 1440

Re: [squid-users] DIRTY cache problem

2009-05-20 Thread Amos Jeffries
Hello All, Anybody know why I am getting Rebuilding storage in /usr/local/squid/var/cache (DIRTY) in my cache.log when I restart squid? I read in an old message from Heinrich that it was because squid wasn't shutdown properly. However, I have completely rebuilt squid and still get the same

Re: [squid-users] Forward SSH on internal machine through Squid to external server

2009-05-20 Thread Amos Jeffries
Hi there Squid users, I would like to forward an scp session from one internal machine through the Squid proxy and connect to an external machine. I have found many documents that write about running squid over SSH but not the other way around. I searched on the Squid-Cache wiki for

Re: [squid-users] how to setup a SSL reverse proxy

2009-05-20 Thread Amos Jeffries
Hi all I have setup a reverse proxy for http server. It works fine. However, I have no idea how to setup a SSL reverse proxy with VeriSign certificate. Have anyone try it before? http://wiki.squid-cache.org/ConfigExamples/Reverse/SslWithWildcardCertifiate We don't have an example for the

Re: [squid-users] ACLChecklist::~ACLChecklist: destroyed ERROR Messages

2009-05-20 Thread Amos Jeffries
Dear Techies, I configured squid server with MAC authentication in a CentOS 5.2 + squid 3.0 installation. I enabled debug_options ALL,1 33,2 28,9 in the squid.conf... Now in cache.log i can see so...o.o oo many ERROR messages as the following... HOW CAN I RESOLVE THIS

Re: [squid-users] Squid sporadic performance - goes OFF every 5-10 minutes

2009-05-20 Thread Amos Jeffries
Hello everyone, I'm trying to implement Squid project at our non-protfit organization (Squid + Squid Guard) for web content filtering. I use Squid 3.0. Because main focus is content filtering I disabled Squid's file caching feature. I use Pentium 2 PC with 1 GB of RAM. Because caching is

RE: [squid-users] Can't access non-anymous FTP via Internet Explorer

2009-05-20 Thread Amos Jeffries
-Original Message- From: Amos Jeffries Sent: Tuesday, 19 May, 2009 22:45 Is there a special trick to get IE7+ to use Squid for non-anonymous FTP? Yes. Send Squid the login details as part of the URL ftp://user:p...@domain/ Amos Thanks Amos! Unfortunately when our users

Re: [squid-users] Caching Video Content

2009-05-20 Thread Amos Jeffries
Hi, I am considering implementing Squid as my web cache for Video streams (YouTube etc). I am going to configure Squid over SAN centralized storage. I am aware of the additional plug-in required to normalize YouTube URL's. I have few questions: 1) Are there any example installations of

Re: [squid-users] Using Squid as in-memory Proxy

2009-05-20 Thread Amos Jeffries
Hi, I'm running Squid as reverse proxy under windows and he managed to destroy the ntfs file system (error 55, Cannot Delete or Repair Corrupted File on NTFS). Is there a way to tell Squid to not store anything to disk, instead just using ram? Depends on your Squid. 2.x provide the 'null'

Re: [squid-users] Question about np-query option in cache_peer

2009-05-20 Thread Amos Jeffries
Hi, Now I have an inner squid namely squid-1 and outer squid namely squid-2. squid-1 has a squid-2 as parent: cache_peer squid-2.domain parent 8080 0 no-query default never_direct allow all Please tell me if I understand what that means: a) Client behind (only) squid-2 ask for object

Re: [squid-users] Is COSS storage scheme stable?

2009-05-22 Thread Amos Jeffries
Chris Woodfield wrote: I can attest to stable performance under squid 2.7STABLE. The only outstanding bugs I've observed are: 1. COSS is always dirty when squid is shut down, so it must be rebuilt every startup 2. -F flag does not wait for COSS rebuild before binding ports Item 2 has a

Re: [squid-users] service squid reload - gives some messages in the stderr

2009-05-22 Thread Amos Jeffries
Truth Seeker wrote: Hello, in my squid.conf (squid 3.0 + CentOS 5.2) i had enabled the debugging with the following values. debug_options ALL,1 33,2 28,9 and the following is about the acl declaration (just the default with very few changes) [r...@igate ~]# egrep '^acl|^http_access'

Re: [squid-users] unsubscribed, BUT still received message

2009-05-22 Thread Amos Jeffries
gagita wrote: On Thu, May 21, 2009 at 8:24 PM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 21.05.09 10:53, gagita wrote: Return-Path: squid-users-return-91377-uhlar=fantomas...@squid-cache.org ^ From: gagita tux.gag...@gmail.com I

Re: [squid-users] Forward SSH on internal machine through Squid to external server

2009-05-22 Thread Amos Jeffries
Dave Dykstra wrote: On Thu, May 21, 2009 at 01:57:37PM +1200, Amos Jeffries wrote: I would like to forward an scp session from one internal machine through the Squid proxy and connect to an external machine. I have found many documents that write about running squid over SSH

Re: [squid-users] Connecting two networks via Squid

2009-05-22 Thread Amos Jeffries
Chris Robertson wrote: Harry Griff wrote: Thanks very much for your reply Chris! First off, I'm stuck using 2.5. It was a lot of work getting squid installed in the first place since the linux machine is located in another country and the administrator there is really unhelpful... That's

Re: [squid-users] squid_ldap_group group names cannot have spaces?

2009-05-22 Thread Amos Jeffries
Justin Yaple wrote: Hello, I have been working on getting my first squid proxy server up, and its been going slow, but good. I got LDAP authentication working, and then group authentication working also. The only problem I found is that a LDAP group with spaces in the name does not work. I

Re: [squid-users] squid2.6.STABLE21: reverse proxy+chained SSL certificates

2009-05-22 Thread Amos Jeffries
Joaquín Puga wrote: Hi everybody. We are running squid2.6.STABLE21 as a reverse proxy. Verisign does not issue unchained certificates anymore, so we have to use a chained one. I have been researching how to configure squid to use the chained certs, but I'd like that someone could confirm

Re: [squid-users] Load average problem

2009-05-22 Thread Amos Jeffries
Maxime Gaudreault wrote: Hi list, I have a squid+squidguard server. When I make some changes on my custom blacklist I run these commands: /usr/bin/squidGuard -c /etc/squid3/squidGuard.conf.local -C all /bin/chown -R proxy:proxy /var/lib/squidguard/db /usr/sbin/squid3 -k reconfigure To apply

Re: [squid-users] Re: [dansguardian] Re: DG without Squid

2009-05-24 Thread Amos Jeffries
RSCL Mumbai wrote: My recommendation is to get your routing issue (different source IPs to different ISPs) working first, and only then implement some kind of filtering. It's nice to plan ahead to try to ensure the solution to one problem doesn't interfere with the solution to the other

Re: [squid-users] Strange problem whit my Squid

2009-05-24 Thread Amos Jeffries
rey.manic wrote: Hello all, I have configure a squid at ubuntu, for 3 or 4 days it works perfect, but after that it dont work any more, it give many errors at the log file ie: TCP_MISS/504 TCP_MISS/302 and others but I discover that if I make a request to the squit proxy using

Re: [squid-users] Help needed setting up ssl proxy

2009-05-24 Thread Amos Jeffries
Magnus Moraberg wrote: Hi, I wish to set up a proxy server where the clients' browser will be configured to use this proxy for both http and https. Some of the clients are behind a firewall which prohibits ports other than 80 and 443. I have managed to create a http proxy server by setting

Re: [squid-users] Strange problem whit my Squid SOLVED !!!

2009-05-24 Thread Amos Jeffries
I have't set up any DNS IP server at squid.conf file so that's the problem now is working perfect I just add correct IP of my DNS servers and works. This is not a full solution. Just a hack to get around the problem. You should find out why its not getting the right values out of the system

Re: [squid-users] how to redirect HEAD method to url redirect program

2009-05-25 Thread Amos Jeffries
johan firdianto wrote: usually, url redirect program read GET and POST request method. I capture the request url, no head method is redirected to the program. How to redirect HEAD method to url redirect program ? Thanks. Johan With what version of Squid? All requests which have URL should get

Re: [squid-users] Filter sites containing keywords (not by url)

2009-05-25 Thread Amos Jeffries
Leonardo Rodrigues wrote: michael hiatt escreveu: Hi guys, Just wondering if its possible using squid (preference to not using any other plugins), to block sites that contain keywords I would place in a file. I have used url_regex to filter the urls that contain keywords, I want to

Re: [squid-users] MAC + IP Combined ACL - WIll it work???

2009-05-25 Thread Amos Jeffries
Truth Seeker wrote: Dear Pro's, I am implementing a squid proxy based on MAC address based authetication with squid 3.0 Stable + CentOS 5.2. I would like to know whether i could configure in such a way that squid will allow access only if both the MAC address and IP address pair matches.

Re: [squid-users] MAC + IP Combined ACL - WIll it work???

2009-05-25 Thread Amos Jeffries
Dear Amos, Thanks for your quick reply... I am not talking about a single user actually. There will be around 150 to 200 users. If i config the following (i didnt find any other way from my understanding); acl users_mac arp /list-of-mac acl users_ip ip /list-of-ip acl target_acl

RE: [squid-users] Re: Hot Objects suddenly decrease

2009-05-25 Thread Amos Jeffries
Hi, I found the same problem in squid 2.6.21, too. I guess that the problem would be caused by max object size in memory. The parameter is likely not to work in some situation. In the next month, if I have some time, I'm going to trace it. If somebody already fixed the problem, please let

Re: [squid-users] RE: reverse proxy problem

2009-05-25 Thread Amos Jeffries
Hello, I have build squid reverse proxy, for an web application called topdesk.. At first I get starting page but when I login I get some error's Can some one please help and tell me what is going wrong ?? See log and config files below: Squid is version squid-2.7.STABLE6 is running

Re: [squid-users] bandwidht control with delay_pools

2009-05-26 Thread Amos Jeffries
Hi Dayo and others, The documentation you sended was very useful. Is there a way to allow a user to use the full bandwidth when avaible, but try to assure a minimum bandwidth when lots of users are using the link. For example, with a 1Mb link. When user A is downloading a file, it uses the

Re: [squid-users] Running Squid 3.1.0.7 without disk cache

2009-05-26 Thread Amos Jeffries
Hello, Is there a possibility to run Squid without using a disk cache? Former versions had the null module for storeio which could be used for that. Now there is no such null module. Thanks in advance! Running without disk cache is now the default :) A Squid-3.1 squid.conf that contains no

Re: [squid-users] delay_pools to slow down instead of blocking sites like ebay.com

2009-05-26 Thread Amos Jeffries
Calamaris' statistics reveal that our users spend way too much time on non work-related pages. Can delay_pools be used to somewhat lessen the user experience of those non work-related sites (e.g. slow them down considerably?) Why yes. Thats their purpose. Use delay_pool_access to determine

RE: [squid-users] RE: reverse proxy problem

2009-05-26 Thread Amos Jeffries
to the WebApp properly. Amos Thanks for the help -Oorspronkelijk bericht- Van: Amos Jeffries [mailto:squ...@treenet.co.nz] Verzonden: dinsdag 26 mei 2009 6:06 Aan: Bas van den Dikkenberg CC: Bas van den Dikkenberg; squid-users@squid-cache.org Onderwerp: Re: [squid-users] RE

Re: [squid-users] Display how much bandwidth saved

2009-05-26 Thread Amos Jeffries
Hi Is there a way to display how much bandwidth have been saved by using Squid cache ? The cachemgr contains a lot of counters. I use: squidclient mgr:info ... Hits as % of bytes shows what % of traffic is coming out of the cache. Amos

Re: [squid-users] Re: Hot Objects suddenly decrease

2009-05-26 Thread Amos Jeffries
slowely). Amos Thanks! On Tue, May 26, 2009 at 1:00 AM, Amos Jeffries squ...@treenet.co.nz wrote: Hi, I found the same problem in squid 2.6.21, too. I guess that the problem would be caused by max object size in memory. The parameter is likely not to work in some situation. In the next month

Re: [squid-users] Reverse proxy with remote ssl

2009-05-26 Thread Amos Jeffries
Good morning, I have been searching high and low for an answer to my question, and a method of implementing. However I haven't had any luck! Perhaps someone can help me! I have installed a reverse proxy using Squid 3.0 STABLE8. My aim is to allow Please upgrade to at least STABLE12.

Re: [squid-users] X-Pad

2009-05-27 Thread Amos Jeffries
Jeff Pang wrote: (Status-Line) HTTP/1.0 200 OK Connectionkeep-alive Content-Length6623 Content-Type image/gif Date Wed, 27 May 2009 03:13:09 GMT ETag 9781c3-19df-45b36404d1e00 Last-Modified Sat, 08 Nov 2008 23:54:32 GMT ServerApache/2.2.3 (Red Hat) Via 3.0 Squid

Re: [squid-users] Firefox not googling anymore after setting up squid

2009-05-27 Thread Amos Jeffries
Boniforti Flavio wrote: Hello list, I've now set up my client to use squid proxy, which simply denies access (http_access deny) to a list of sites. This is the relevant config part: Missing the ACL defininitions, specifically that for 'localnet'. Maybe you have not set your local network

Re: [squid-users] TCP_MISS:FIRST_UP_PARENT error when use COSS store type

2009-05-27 Thread Amos Jeffries
Nguyen Cao Cuong wrote: Hi Everybody I am a newbie in Squid. I have a problem when configure squid with coss store type, can everybody help me to resolve this problem? │squid.conf cache_effective_user squid cache_effective_group squid cache_dir coss /usr/local/squid/var/cache 1024

Re: [squid-users] Firefox not googling anymore after setting up squid

2009-05-27 Thread Amos Jeffries
Boniforti Flavio wrote: Missing the ACL defininitions, specifically that for 'localnet'. Maybe you have not set your local network range properly into it. Sorry, here the ACLs: acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl localnet src

RE: [squid-users] Firefox not googling anymore after setting up squid

2009-05-27 Thread Amos Jeffries
On Wed, 27 May 2009 17:16:41 +0200, Boniforti Flavio fla...@piramide.ch wrote: In that case the config you posted is all correct. You have a global allow for localnet before domini_bloccati is ever tested so it can't even be a bad domain entry in there. It must be something else doing the

Re: [squid-users] direct access for local intranet urls

2009-05-27 Thread Amos Jeffries
On Wed, 27 May 2009 18:55:31 +0300, RoLaNd RoLaNd r_o_l_a_...@hotmail.com wrote: Hello, i'm not sure how to do this, though i want to make sure that my local intranet sites aren't cached with squid. any advice? cache deny ... http://www.squid-cache.org/Doc/config/cache/ Amos

Re: [squid-users] FW: Re[2]: squid with tproxy

2009-05-28 Thread Amos Jeffries
7441122 wrote: I have gone through http://wiki.squid-cache.org/Features/Tproxy4 done all as required. initially we had squid as gateway, but now i want to use wccp, is tehre any how to on this one ? Not specifically for the new TPROXY. I've been watching for one. People who are familiar with

[squid-users] Squid 3.1.0.8 beta is available

2009-05-28 Thread Amos Jeffries
with this release please file a bug report. http://bugs.squid-cache.org/ Amos Jeffries

Re: [squid-users] Firefox not googling anymore after setting up squid

2009-05-28 Thread Amos Jeffries
Amos Jeffries wrote: On Wed, 27 May 2009 17:16:41 +0200, Boniforti Flavio fla...@piramide.ch wrote: In that case the config you posted is all correct. You have a global allow for localnet before domini_bloccati is ever tested so it can't even be a bad domain entry in there. It must

Re: [squid-users] TCP_MISS:FIRST_UP_PARENT error when use COSS store type

2009-05-28 Thread Amos Jeffries
://redbot.org which has been created as a slightly better version (though still slightly experimental AFAIK). Amos -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Wednesday, May 27, 2009 7:42 PM To: Nguyen Cao Cuong Cc: squid-users@squid-cache.org Subject

Re: [squid-users] direct access for local intranet urls

2009-05-28 Thread Amos Jeffries
RoLaNd RoLaNd wrote: thanks for the advice.. i've checked the link below and searched through my squid.conf and the only relevant part i've found is the following: acl QUERY urlpath_regex cgi-bin \? cache deny QUERY any advice? all i want to do is to block *.devtest.com You found the only

Re: [squid-users] Gmail attachment

2009-05-28 Thread Amos Jeffries
Nitin Bhadauria wrote: Dear Ben, I have almost 6000 users on my proxy server i can't do it from user end. Ben Scott wrote: On Tue, May 26, 2009 at 11:18 AM, Nitin Bhadauria nitin.bhadau...@tetrain.com wrote: I am using squid 3.0 with ntlm authentication. Now when a user try to attach a

Re: [squid-users] position of Proxy-Authorization header (ICAP)

2009-05-28 Thread Amos Jeffries
yado wrote: Sorry,I corrected the question to a concise content. According to RFC 3507 , - Despite the above restrictions on encapsulation, the hop-by-hop Proxy-Authenticate and Proxy-Authorization headers MUST be

Re: [squid-users] HTCP logging?

2009-05-28 Thread Amos Jeffries
Amos Jeffries wrote: No there's not. See: http://www.squid-cache.org/bugs/show_bug.cgi?id=2627 Aye. FWIW I'm clearing up the logging code in 3.1 and extending it in 3.2. When the 3.1 cleanup is done and approved I'll take a look at how easy adding HTCP would be for that release

Re: Fwd: [squid-users] How to strip/ignore header in squid?

2009-05-28 Thread Amos Jeffries
Kurt Buff wrote: On Wed, May 27, 2009 at 12:11, Chris Robertson crobert...@gci.net wrote: Kurt Buff wrote: I cd'ed to /usr/ports/www/squid30/work/squid-3.0.STABLE15/ and saved the file as httpheader.patch, with the following results: -- squid# patch httpheader.patch Hmm... Looks like

Re: Fwd: [squid-users] How to strip/ignore header in squid?

2009-05-28 Thread Amos Jeffries
Amos Jeffries wrote: Kurt Buff wrote: On Wed, May 27, 2009 at 12:11, Chris Robertson crobert...@gci.net wrote: Kurt Buff wrote: I cd'ed to /usr/ports/www/squid30/work/squid-3.0.STABLE15/ and saved the file as httpheader.patch, with the following results: -- squid# patch

Re: [squid-users] Filter sites containing keywords (not by url)

2009-05-29 Thread Amos Jeffries
michael hiatt wrote: So given that products like dansguardian (assuming this is one solution) (in a school/corp environment) need to be purchased, would the logical choice be to just go and start using Squid 3 with ICAP?I'm a little green on how this works, if theres a link I could visit that

Re: [squid-users] How to set up squid?

2009-05-29 Thread Amos Jeffries
Yan Seiner wrote: I have a question about setting up squid in my environment. My network is fairly generic: a firewall running openwrt, 4 mb flash and 8 mb ram, providing NAT a server providing DNS and DHCP services; this machine is also used for terminal services so users are logged in to

Re: [squid-users] tproxy vs DNAT

2009-05-29 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, there's been a lot of talk about TPROXY being added back into the linux kernel and squid changing to support it. Currently, we do transparent proxying by policy routing port 80 traffic to the proxy server then using DNAT (iptables) on the proxy server. Could

Re: [squid-users] How to set up squid?

2009-05-29 Thread Amos Jeffries
Yan Seiner wrote: Amos Jeffries wrote: Yan Seiner wrote: I have a question about setting up squid in my environment. My network is fairly generic: a firewall running openwrt, 4 mb flash and 8 mb ram, providing NAT a server providing DNS and DHCP services; this machine is also used

Re: [squid-users] Why squid is using HTTP 1.0?

2009-05-29 Thread Amos Jeffries
Kinkie wrote: Squid (any version) stil does not fully conform to all required parts of HTTP/1.1 and thus it can't honestly advertise itself as compliant. On 5/29/09, Roy M. setesting...@gmail.com wrote: Hello, I use squid as reverse proxy, however, in the backend Apache access log, I found

Re: [squid-users] is this possible?

2009-05-29 Thread Amos Jeffries
botem...@gmail.com wrote: Greetings We have an unusual problem. One of our clients uses a program to request map data from one of our servers. We have a reverse proxy squid cache in front of it. Client hits squid, which gets data from web server and serves it back to client. Here's the

Re: [squid-users] Why squid is using HTTP 1.0?

2009-05-30 Thread Amos Jeffries
Roy M. wrote: Hey, On Sat, May 30, 2009 at 11:34 AM, Amos Jeffries squ...@treenet.co.nz wrote: Further, the access.log of Squid is likely recording the HTTP version of the visitor. But Squid do support HTTP 1.1 keep-alive? Yes. Squid does support most of HTTP/1.1 (2.6 and 3.0 supports

Re: [squid-users] squid2.7 Stable 6 passes in intervals where cpu usage hits 100%

2009-05-30 Thread Amos Jeffries
Ragheb Rustom wrote: Hi Chris, Thank you for the reply. I will use squid -k debug to check what is going on. As for the additional info sorry for not clearing the squid setup more anyway this is squid configuration values you have guessed as taken from my squid.conf Wild guesses based on the

Re: [squid-users] multiple FTP servers

2009-05-30 Thread Amos Jeffries
Ahmed Akkad wrote: hi, i am using the following configuration to access websites on multiple web servers: http_port 80 accel vhost cache_peer 127.0.0.1 parent 80 0 no-query originserver name=server1 cache_peer_domain server1 sub1.mydomain.com cache_peer 10.1.1.1 parent 80 0 no-query

<    7   8   9   10   11   12   13   14   15   16   >