Re: [squid-users] Error making squid-3.1.0.7-20090412 on Mac OS X 10.4

2009-04-12 Thread Amos Jeffries
Thank you for the report. Beta release code problems only to squid-...@squid-cache.org or bugzilla in future please. CC'd squid-dev for now. vollkom...@gmx.net wrote: I'm running into the following error(s) making squid-3.1.0.7-20090412 on Mac OS X 10.4.11 with gcc 4.0.1. Is there any

Re: [squid-users] squid 2.0 syslog

2009-04-13 Thread Amos Jeffries
Emile Petit wrote: Hi, I want to sent my squid's log (access.log) to a syslog-ng server. I find for squid 2.7 access.log syslog:local4 squid and after in the syslogd deamon : local4.* @ip but I haven't find for my squid version (2). Can you help me please? You serious? 2.0? the one that

Re: [squid-users] Initial webpage before surfing on squid

2009-04-13 Thread Amos Jeffries
Jorge Bastos wrote: Great!, now that works perfectly! And all sites entered are redirecting me first to the page I specified. Now I need to understand a few things and symptoms. When I open a browser window, I digit http://kernel.org, and I get redirected to http://1.1.1../inicial.php, and then

Re: [squid-users] Initial webpage before surfing on squid

2009-04-13 Thread Amos Jeffries
Jorge Bastos wrote: Damn! :) What can i do? If i write to the squid_session, will he answer? I saw sometimes that he post here on the list. I mean, write to the squid_session creator, Henrik Possibly. Amos -- Please be using Current Stable Squid 2.7.STABLE6 or 3.0.STABLE14 Current Beta

Re: [squid-users] squid-3.0.STABLE14 - assertion failed

2009-04-14 Thread Amos Jeffries
Zeller, Jan wrote: dear squid list, after compiling squid-3.0.STABLE14 on GNU/Linux Debian Lenny 5.0.1 like # ./squid -v Squid Cache: Version 3.0.STABLE14 configure options: '--prefix=/opt/squid-3.0.STABLE14' '--enable-icap-client' '--enable-ssl' '--enable-default-err-language=English'

Re: [squid-users] squid-3.0.STABLE14 - assertion failed

2009-04-14 Thread Amos Jeffries
Zeller, Jan wrote: Amos Jeffries wrote: Zeller, Jan wrote: dear squid list, after compiling squid-3.0.STABLE14 on GNU/Linux Debian Lenny 5.0.1 like # ./squid -v Squid Cache: Version 3.0.STABLE14 configure options: '--prefix=/opt/squid-3.0.STABLE14' '--enable-icap-client' '--enable-ssl

Re: [squid-users] ICP behaviour question ?

2009-04-14 Thread Amos Jeffries
vincent.blon...@ing.be wrote: Hello all, I am doing some tests for implementing ICp in our SQUID platform including two level of SQUID devices, the SQUID proxies the users are connected on and the Gateways directly connected on the internet. After reading some old pdf documents I found on the

Re: [squid-users] squid 2.0 syslog

2009-04-14 Thread Amos Jeffries
syslog formats. Amos -Message d'origine- De : Amos Jeffries [mailto:squ...@treenet.co.nz] Envoyé : lundi 13 avril 2009 12:30 À : Emile Petit Cc : squid-users@squid-cache.org Objet : Re: [squid-users] squid 2.0 syslog Emile Petit wrote: Hi, I want to sent my squid's log (access.log

Re: [squid-users] Squid with Tproxy

2009-04-15 Thread Amos Jeffries
trasor wrote: Running squid with tproxy I am seeing entries in the cache log of 'commBind: cannot bind to socket FD # to x.x.x.ip: (22) Invalid argument'. This is followed by a 'Warning: Reset of FD # for x.x.x.ip failed to bind: (22) Invalid argument'. From reading, this may be related to

Re: [squid-users] %EXT_USER value

2009-04-15 Thread Amos Jeffries
Bartel Viljoen wrote: Dear Squid users. Does anyone have a working squid conf example of the %EXT_USER that is available in squid 3. When I debug the value of %EXT_USER via a external helper, the value is always -, even though the log file is showing the real username. %EXT_USER is the value

Re: [squid-users] squid 3.0.STABLE14 not redirecting to squidGuard

2009-04-15 Thread Amos Jeffries
vollkom...@gmx.net wrote: Currently running squid 3.0.STABLE14-20090412, but the issue has been around for months, possibly ever since moving to 3.0STABLE release from 3.0PRE, or maybe squid 3.0 config: url_rewrite_program /usr/local/squid/bin/squidGuard -c

Re: [squid-users] SNMP MIB updates?

2009-04-15 Thread Amos Jeffries
Gregori Parker wrote: I was creating a fresh batch of cacti graph templates for Squid the other day (focused on reverse proxy setups, I will release them soon), and while crawling the Squid MIB I noticed that HTCP metrics don't register anywhere. Furthermore, the entire MIB seems to be in

Re: [squid-users] Using Squid as a proxy to change network devices' properties instead of web broswers'?

2009-04-15 Thread Amos Jeffries
Phillip Pi wrote: Hello. I got Squid v2.7 stable 6 installed and working in a Windows XP Pro. SP2 machine, with its IIS, as a proxy server. I can make clients' web browsers (e.g., IE and Firefox in Windows XP), go through this proxy server with no problems. I am wondering if I can use

Re: [squid-users] squid - loading, checking and purging

2009-04-15 Thread Amos Jeffries
Sir June wrote: i'm looking for command-line options.. squidclient is your friend for atomic type object operations. Just be careful when pulling binary objects since it will dump the resulting page to stdout/screen. 1) squidclient -H Cache-Control: only-if-cached\n

Re: [squid-users] It doesnt cacche

2009-04-15 Thread Amos Jeffries
Merdouille wrote: Hi, I dont understand why my squid doesn't cache anything : Here you neglect to say what version and release of squid you are using... my acces log said TCP_CLIENT_REFRESH_MISS:DIRECT Here you show a line which indicates that yes, your squid cached something, and on

Re: [squid-users] squid - Reverse Proxy to access customer's modem interface

2009-04-15 Thread Amos Jeffries
Antoine Rouchet wrote: Hello everyone I'm Antoine Rouchet, I work for a french cable ISP (Numericable). My actual project is to allow our hotliners and IT staff to access customer's modem web management interface: - We have several thousands of modems on the network, each of them have a

Re: [squid-users] Putting squid-machine on IPcop's router DMZ interface

2009-04-15 Thread Amos Jeffries
Donatas Gedvilas wrote: Hello, I am looking for a help and I am not very good in english so sorry in advance:). I am a system-network administrator in one company. I like open source and I have the task to control users http traffic, my deadline 3 months. I refused Fortigate and Astaro complete

RE: [squid-users] Using Squid as a proxy to change network devices' properties instead of web broswers'?

2009-04-15 Thread Amos Jeffries
to clients with group policy. Thanks, Dean Weimer Network Administrator Orscheln Management Co -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Wednesday, April 15, 2009 7:32 AM To: Phillip Pi Cc: squid-users@squid-cache.org Subject: Re: [squid

RE: [squid-users] SNMP MIB updates?

2009-04-15 Thread Amos Jeffries
difference. If you want to see my graphs for a better idea of what I'm saying, I can attach them and send off-list. Thanks guys, Gregori -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Wednesday, April 15, 2009 5:23 AM To: Gregori Parker Cc: squid-users@squid

RE: [squid-users] %EXT_USER value

2009-04-15 Thread Amos Jeffries
-Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: 15 April 2009 01:56 PM To: Bartel Viljoen Cc: squid-users@squid-cache.org Subject: Re: [squid-users] %EXT_USER value Bartel Viljoen wrote: Dear Squid users. Does anyone have a working squid conf example

Re: [squid-users] Using Squid as a proxy to change network devices' properties instead of web broswers'?

2009-04-16 Thread Amos Jeffries
Phillip Pi wrote: Question about this proxycfg.exe in XP: Does this work for all Internet program? I can get it to work with IE (v6-v7) and CDBurnerXP (to download its update for the program), but not Firefox. I read that the program has to know winHTTP. Am I understanding this correctly? If

[squid-users] MySAR and logformat

2009-04-16 Thread Amos Jeffries
My turn for a question to all the MySAR people out there... Anyone have a script that imports common log format into the MySAR database? And any other scripts you find useful to use with it? Amos -- Please be using Current Stable Squid 2.7.STABLE6 or 3.0.STABLE14 Current Beta Squid 3.1.0.7

Re: [squid-users] squid cachehttp hits oid for solarwinds

2009-04-16 Thread Amos Jeffries
Ghasem Abbasi wrote: Hi Dear I want Add Squid Cache to Solarwinds Orion For Monitor Performance , But I cant Found Oid For This Work. Please Help Me squid-data-dir/mib.txt Content depends on your version of quid installed. File location may vary if installed with a distro packaging

Re: [squid-users] Fwd: Howto Measure bandwidth consumption of HTTPS traffic?

2009-04-16 Thread Amos Jeffries
M Admin wrote: Hello everyone -- I am currently proxying all traffic from the client through SQUID. I am trying to measure the amount of bandwidth used by the client. The client is connecting to Gmail.com via HTTPS. I see the connections to Gmail in the access.log as such: 1239680667.335

Re: [squid-users] ident auth problem with squid 3.1.0.6

2009-04-16 Thread Amos Jeffries
Kinkie wrote: On Wed, Apr 15, 2009 at 10:08 PM, Michael Kastinger m.kastin...@gmail.com wrote: /push Is there no one who could help me with this problem? Or is there someone else who have the same issue? Every information regarding this would be fine! Ident is not a widely-used

Re: AW: [squid-users] ident auth problem with squid 3.1.0.6

2009-04-16 Thread Amos Jeffries
michael.kastin...@spar.at wrote: Hi Amos, what dou you mean with: This thread started with Same problem in 3.1.0.6 no reference to _which_ problem. The thread was started with detailed information regarding this ident issue (strace, cache.log) see posting with Subject [squid-users] ident

Re: [squid-users] Initial webpage before surfing on squid

2009-04-16 Thread Amos Jeffries
Chris Robertson wrote: Jorge Bastos wrote: Whoops. Try... external_acl_type session ttl=14400 negative_ttl=0 children=1 concurrency=200 %SRC /usr/lib/squid3/squid_session -t 14400 Well, seems to be working fine now :) The only problem is that I get a access denied on every first access

Re: [squid-users] HI, MY ACL HELPER need help

2009-04-16 Thread Amos Jeffries
Rodrigo Gliksberg wrote: hi all, i have acl helper to lookup user from db by ip. include(db.php); // loop while (!feof(STDIN)) { $line = trim(fgets(STDIN)); $ip = rawurldecode($line); checkIp($ip); } // Check db function checkIp($ip) { $ip = mysql_escape_string($ip);

Re: [squid-users] Implications of Disabling via headers

2009-04-16 Thread Amos Jeffries
Dean Weimer wrote: I have a problem with a website that doesn't like going through a parent child proxy setup, if you access the site pointing the client directly at the parent proxy it open just fine. However, when the client accesses the website using the child proxy the page fails to load.

Re: [squid-users] Using Squid as a proxy to change network devices' properties instead of web broswers'?

2009-04-16 Thread Amos Jeffries
Phillip Pi wrote: On Thu, Apr 16, 2009 at 10:38:44PM +1200, Amos Jeffries wrote: Phillip Pi wrote: Question about this proxycfg.exe in XP: Does this work for all Internet program? I can get it to work with IE (v6-v7) and CDBurnerXP (to download its update for the program), but not Firefox. I

Re: RES: [squid-users] squid cache problem

2009-04-16 Thread Amos Jeffries
Chris Robertson wrote: Luciano Sousa wrote: Chris, the squid denies access yes, see below: I shut down the computer normally yesterday evening ... this morning when I called the computer performed the following procedures in a .sh file: RunCache RunAccel squid You are effectively

Re: [squid-users] Fwd: Howto Measure bandwidth consumption of HTTPS traffic?

2009-04-16 Thread Amos Jeffries
by Squid. Amos On Thu, Apr 16, 2009 at 4:00 AM, Amos Jeffries squ...@treenet.co.nz wrote: M Admin wrote: Hello everyone -- I am currently proxying all traffic from the client through SQUID. I am trying to measure the amount of bandwidth used by the client. The client is connecting to Gmail.com

Re: [squid-users] RE: Squid doesn't cache some objetcs

2009-04-16 Thread Amos Jeffries
Harvey Dueck wrote: I suspect the culprit is the Range: header issued by the application. You should be able to configure squid to always download the while file anyway. Depending on the squid version, setting quick_abort_min -1 KB You want: range_offset_limit -1 Amos might work

Re: [squid-users] %DST is waiting for domain lookup in external_acl_type

2009-04-16 Thread Amos Jeffries
Chris Robertson wrote: Julien P. wrote: Hi everybody, I am trying to use an external_acl_type to be able to filter internet traffic according to specific User-agent headers and destination (let's say you have the right to browse facebook only by using Firefox). this is my external acl:

Re: [squid-users] TCP_MISS/200 with squid-2.7.STABLE6 Reverse proxy config

2009-04-16 Thread Amos Jeffries
Quin Guin wrote: Hi, I have been using squid for many years as a forward proxy and now I need to setup a reverse. I have read and study many different email threads and FAQ on this topic but I can't seem to get past TCP_MISS/200s. Please see my most basic config below and I know there is a lot

Re: [squid-users] TCP_DENIED on youtube

2009-04-16 Thread Amos Jeffries
Stefan Jensen wrote: Am Donnerstag, den 16.04.2009, 12:52 -0800 schrieb Chris Robertson: acl microsoft dstdomain .microsoft.com .windowsupdate.com http_access deny !microsoft blockfiles That was easy! :-) Thank you very much. The full currently known list of WU sites is listed at:

Re: [squid-users] Problem with squivir2, anyone?

2009-04-17 Thread Amos Jeffries
Frank Fiene wrote: Am 16.04.2009 um 17:52 schrieb Henrik K: On Thu, Apr 16, 2009 at 03:57:35PM +0200, Frank Fiene wrote: Hi i have a problem with integrating clamav with squivir2 into squid. Not that it helps with this specific question, but get yourself a real tool. Redirector based

Re: [squid-users] store log - problem with subdirectories

2009-04-17 Thread Amos Jeffries
lorenor wrote: lorenor schrieb: Hello, I'm using squid 3.0. By default the cache dir contains 2 level of subdirectories. But the store log has only 1 dir number. Am i missing something or how can i find the path to a cached file? thanks lorenor Ok I found my mistake. The dir number has

Re: [squid-users] Multiple Ranges in Range: header - issues with non-sequential/overlapping ranges

2009-04-17 Thread Amos Jeffries
Chris Woodfield wrote: Hi, We've noticed that when a request is sent that has multiple byte ranges in the Range: header, the behavior is not what one would expect. If one requests multiple byte ranges that are sequential and do not overlap (i.e. Range: bytes=1-20,30-50), the response is the

Re: [squid-users] Allow Single IP to bypass Squid Proxy

2009-04-17 Thread Amos Jeffries
robp2175 wrote: robp2175 wrote: I want one ip on my network to bypass the squid proxy. How do I go about accomplishing this. Any help is greatly appreciated. Transparent Proxy with dansguardian and wpad Then configure your firewall to omit that IP from the interception. Configure your PAC

Re: [squid-users] Not Anonymous ?

2009-04-18 Thread Amos Jeffries
file. Right ? Yes you should have them both turned ON. Amos Thank you so much for your daily contributions, Julien Sent from San Francisco, California, United States On Sun, Apr 5, 2009 at 3:29 AM, Amos Jeffries squ...@treenet.co.nz wrote: Julien P. wrote: Hi there, I wasn't able to find

Re: AW: [squid-users] ident auth problem with squid 3.1.0.6

2009-04-18 Thread Amos Jeffries
Segment Violation...dying. after disabling ident auth in squid.conf, its working fine. whats wrong? -p0 is the patch type. Maybe something else going wrong now, can we get a back trace? and lets shove this to squid-dev since its getting code deep. Amos 2009/4/17 Amos Jeffries squ

Re: [squid-users] Squid reverse proxy with upstream webserver authentication

2009-04-18 Thread Amos Jeffries
Paul Wickham wrote: Hi We are running squid 2.6-21 (as bundled with Centos 5.3) and are trying to configure a reverse proxy for an intranet webserver that requires authentication. This is so that users can conect to the squid server and see the authenticated content without providing a username

Re: [squid-users] reverse proxy filtering?

2009-04-18 Thread Amos Jeffries
Jeff Sadowski wrote: I'm new to trying to use squid as a reverse proxy. I would like to filter out certain pages and if possible certain words. I installed perl so that I can use it to rebuild pages if that is possible? My squid.conf looks like so start acl all src all http_port 80 accel

Re: [squid-users] welcome page with checkbox

2009-04-18 Thread Amos Jeffries
Stefan Jensen wrote: Hi,... i have this in my squid.conf for a initial welcome page: external_acl_type session ttl=300 negative_ttl=0 children=1 concurrency=200 %SRC /usr/local/bin/squid_session -t 300 acl session external session http_access deny !localwebsrv !windowsupdate !session deny_info

Re: [squid-users] reverse proxy filtering?

2009-04-18 Thread Amos Jeffries
Jeff Sadowski wrote: On Sat, Apr 18, 2009 at 5:18 PM, Amos Jeffries squ...@treenet.co.nz wrote: Jeff Sadowski wrote: I'm new to trying to use squid as a reverse proxy. I would like to filter out certain pages and if possible certain words. I installed perl so that I can use it to rebuild

Re: [squid-users] reverse proxy filtering?

2009-04-19 Thread Amos Jeffries
Jeff Sadowski wrote: On Sat, Apr 18, 2009 at 10:24 PM, Amos Jeffries squ...@treenet.co.nz wrote: Jeff Sadowski wrote: On Sat, Apr 18, 2009 at 5:18 PM, Amos Jeffries squ...@treenet.co.nz wrote: Jeff Sadowski wrote: I'm new to trying to use squid as a reverse proxy. I would like to filter out

Re: [squid-users] reverse proxy filtering?

2009-04-19 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, On Sun, 19 Apr 2009, Jeff Sadowski wrote: I am helping a library to setup a way to display available books to the outside. The internal website allows you to login and check out books which they want blocked to the outside. They do not want to modify the web

Re: [squid-users] Allow Single IP to bypass Squid Proxy

2009-04-19 Thread Amos Jeffries
settings related. As for the PAC file, it looks something like this: function findProxyForUrl(host, url) { if(host == 192.68.0.1) return DIRECT; return PROXY fu; } Amos Jeffries-2 wrote: robp2175 wrote: robp2175 wrote: I want one ip on my network to bypass the squid proxy. How do I go

Re: [squid-users] is there a squid cache rank value available for statistics?

2009-04-19 Thread Amos Jeffries
Hi, I'm wondering about ways to measure the optimum size for a cache, in terms of the value you gain from each GB of cache space. If you've got a 400GB cache and only 99% of your hits come from the first 350GB, there's probably no point looking for a larger cache. If only 80% come from

Re: [squid-users] Headers control in Squid 3.0

2009-04-20 Thread Amos Jeffries
Oleg wrote: Hi. Before Squid 3.0 I can change a Proxy-Authenticate header through duplet: header_access Proxy-Authenticate deny browserFirefox osLinux header_replace Proxy-Authenticate Negotiate That because first authenticate method is NTLM for IE. After upgrade to Squid 3.0, header_access

Re: [squid-users] Re: squid 3.0STABLE14: Detected DEAD Parent [proxy]

2009-04-20 Thread Amos Jeffries
vollkom...@gmx.net wrote: I've made one change in squid.conf that seems to cure most of the problem, with STABLE14-20090411: cache_peer 127.0.0.1 parent 8123 0 no-query no-digest no-netdb-exchange default Interestingly, I was searching about tunnelReadServer: FD 70: read failure: (0) Unknown

Re: [squid-users] squid 3.0STABLE14: Detected DEAD Parent [proxy]

2009-04-20 Thread Amos Jeffries
vollkom...@gmx.net wrote: Since v3.0 doesn't have IPv6 support, I set up the Polipo proxy (http://www.pps.jussieu.fr/~jch/software/polipo/) as a 6to4 relay in front of squid, by adding cache_peer 127.0.0.1 parent 8123 3130 to squid.conf. I was able to browse multiple IPv6 sites such as

Re: [squid-users] Forwarding problems

2009-04-20 Thread Amos Jeffries
Pandu E Poluan wrote: Hi all! I've configured my proxies correctly, and now they work as expected. * Requests to fast sites get forwarded to ProxyA, which uses FastInet * Other requests gets handled directly by ProxyB and ProxyC, which uses SlowInet There's a problem, however, that recently

Re: [squid-users] Forwarding problems

2009-04-20 Thread Amos Jeffries
this is setting up a break in the mesh. But for the life of me, I still can't figure out how to make ProxyA receive those forwards. That is what never_direct and cache_peer_access do at proxyB and proxyC. Rgds. [p] Amos Jeffries wrote: Pandu E Poluan wrote: Hi all! I've configured my proxies

Re: [squid-users] is there a squid cache rank value available for statistics?

2009-04-20 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, On Mon, 20 Apr 2009, Amos Jeffries wrote: Squid suffers from a little bit of an anochronism in the way it stores object. the classic ufs systems essentially use round-robin and hash to determine storage location for each object separately. This works wonders

Re: [squid-users] Memory leak?

2009-04-20 Thread Amos Jeffries
Bin Liu wrote: I've already set memory_pools off in squid.conf, so squid should free all unused memory. But I can still see these lines in cachemgr after running for some time: memPoolAlloc calls: 549769495 memPoolFree calls: 545292412 Did I miss something? Usually this turns out to be

Re: [squid-users] Squid BUG?

2009-04-20 Thread Amos Jeffries
Hi, after upgrade from 3.0.STABLE13 to 3.0.STABLE14, my Squid box crashed. From cache.log (with debug_options ALL,1 11,6 73,6): 2009/04/20 18:05:05| Store rebuilding is 821.74% complete 2009/04/20 18:05:20| Store rebuilding is 822.48% complete 2009/04/20 18:05:35| Store rebuilding is

Re: [squid-users] Getting error msgs when trying to start squid

2009-04-20 Thread Amos Jeffries
Amos Jeffries-2 wrote: FYI: The squid wiki http://wiki.squid-cache.org has the authoritative current information and how-tos. The config manual http://www.squid-cache.org/Doc/config has the authoritative content on all options since Squid-2.5 what they do and where they are available

Re: [squid-users] Squid BUG?

2009-04-20 Thread Amos Jeffries
On Tue, 21 Apr 2009 12:54:53 +1200 (NZST), Amos Jeffries squ...@treenet.co.nz wrote: [cut] 2009/04/20 18:05:20| Store rebuilding is 822.48% complete what type of file system is in use? ext3 with what settings? 4x 300GB SAS disks cache_swap_low 80 cache_swap_high 85 cache_dir

Re: [squid-users] Memory leak?

2009-04-21 Thread Amos Jeffries
Bin Liu wrote: Thanks for your reply. # /usr/local/squid/sbin/squid -v Squid Cache: Version 2.7.STABLE6 configure options: '--prefix=/usr/local/squid' '--with-pthreads' '--with-aio' '--with-dl' '--with-large-files' '--enable-storeio=ufs,aufs,diskd,coss,null'

Re: [squid-users] Squid BUG?

2009-04-21 Thread Amos Jeffries
Herbert Faleiros wrote: On Tue, 21 Apr 2009 14:58:22 +1200 (NZST), Amos Jeffries squ...@treenet.co.nz wrote: [cut] As a side issue: know who the maintainer is for slackware? I'm trying to get in touch with them all. Sorry, here Squid was build from sources. The distro maintainer and more info

Re: [squid-users] Can I rewrite URL on browser?

2009-04-21 Thread Amos Jeffries
Oleg wrote: Hi2All. Can Squid redirect user's request to another URL on browser concordance? For example, if user use MSIE 6.0 redirect him to page with browser update from IT site page. I'm found only access rules for browser string (User-Agent), but not I mean. I'd use a custom

Re: [squid-users] Can I rewrite URL on browser?

2009-04-21 Thread Amos Jeffries
Oleg wrote: Ya, is what I need! Thank you. Amos Jeffries пишет: Oleg wrote: Hi2All. Can Squid redirect user's request to another URL on browser concordance? For example, if user use MSIE 6.0 redirect him to page with browser update from IT site page. I'm found only access rules for browser

Re: [squid-users] allowedURL don't work

2009-04-22 Thread Amos Jeffries
Chris Robertson wrote: Phibee Network Operation Center wrote: Hi i have a new problems with my Squid Server (NTLM AD) My configuration: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 15 auth_param ntlm keep_alive on auth_param basic

Re: [squid-users] caching behavior during COSS rebuild

2009-04-22 Thread Amos Jeffries
Chris Woodfield wrote: So I'm running with COSS under 2.7STABLE6, we've noticed (as I can see others have, teh Googles tell me so) that the COSS rebuild a. happens every time squid is restarted, and b. takes quite a while if the COSS stripes are large. However, I've noticed that while the

Re: [squid-users] squid AND ssl

2009-04-22 Thread Amos Jeffries
joe ryan wrote: Hi, I have a simple webserver that listens on port 80 for requests. I would like to secure access to this webserver using squid and SSL. I can access the simple website through http without any issue. When I As your config shows. Squid is never involved with port 80 inbound

Re: [squid-users] Squid and TC - Traffic Shaping

2009-04-22 Thread Amos Jeffries
Wilson Hernandez - MSD, S. A. wrote: Hello. I was writing a script to control traffic on our network. I created my rules with tc and noticed that it wasn't working correctly. I tried this traffic shaping on a linux router that has squid doing transparent cache. When measuring the download

Re: [squid-users] Authenticator processes after reconfigure.

2009-04-22 Thread Amos Jeffries
Oleg wrote: Hello. Version: Squid 3.0.STABLE13 on Gentoo 2.6.22-vs2.2.0.7 `squid -k reconfigure` do not close old authenticator processes if that was a clients. So my 'NTLM Authenticator Statistics' looks like below. Is anybody has same symptom? Maybe. The 23 of 15 issue has been resolved

Re: [squid-users] problems with SQUID 3.x and IBM Proventia

2009-04-22 Thread Amos Jeffries
Udo Rader wrote: Hi, one of our customers has an issue with a Debian Lenny based squid 3.x in connection with an IBM Proventia security appliance. The setup is like this: internet - proventia - squid Now proventia comes with a transparent web content filter, removing dangerous things

Re: [squid-users] CONNECT method support(for https) using squid3.1.0.6 + tproxy4

2009-04-22 Thread Amos Jeffries
Mikio Kishi wrote: Hi, Amos Ah, you need the follow_x_forwarded_for feature on Proxy(1). That's right, I know about that, but I'd like to use source address spoofing... Just only following enables my anxiety. lol. replacing In tunnelStart()#tunnel.cc sock =

Re: [squid-users] Getting error msgs when trying to start squid

2009-04-22 Thread Amos Jeffries
Henrique M. wrote: Amos Jeffries-2 wrote: acl localhost src 192.168.2.5 # 192.168.2.5 Server IP, 192.168.2.1 Modem IP localhost is a special term used in networking to mean the IPs 127.0.0.1 and sometimes ::1 as well. When defining an ACL for 'public' squid box IPs its better to use

Re: [squid-users] problems with SQUID 3.x and IBM Proventia

2009-04-22 Thread Amos Jeffries
Amos Jeffries wrote: So of course the problem is proventia corrupting the HTTP headers and we will raise an issue about that with IBM. But for the time being: is there a chance to make squid more tolerant about those kind of problems? Without surprize I did not find any fitting config

Re: [squid-users] HTCP logging?

2009-04-22 Thread Amos Jeffries
No there's not. See: http://www.squid-cache.org/bugs/show_bug.cgi?id=2627 Aye. FWIW I'm clearing up the logging code in 3.1 and extending it in 3.2. When the 3.1 cleanup is done and approved I'll take a look at how easy adding HTCP would be for that release. But chances are small for

Re: [squid-users] Auto Detect Proxy in Browser, visiting users.

2009-04-22 Thread Amos Jeffries
i do believe a native squid transparent settings will do this. you can configure squid with transparency settings, configure squid with authentication (basic or LDAP) , set your Unix box (i will assume Linux) to be the default gateway, enable ip forwarding (act as a router), configure

Re: [squid-users] Auto Detect Proxy in Browser, visiting users.

2009-04-22 Thread Amos Jeffries
gavguinness wrote: Hi I'm new to Squid. New in the sense that this time yesterday, I didn't know what Squid was. I knew what I wanted to achieve though, and I've achieved most of this today using Squid and a few helpful online guides... To have users promted to authenticate when they

Re: [squid-users] using icp_hit_stale on small cache farm

2009-04-23 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: Hello, I have 4 cache servers on the same network, configured as siblings, with cache digests rutned on. AFAIK using cache digests (nearly) wipes out benefits of ICP. Now I am not sure, if: - I should turn ICP off - I should turn icp_hit_stale on (allow_miss is

Re: [squid-users] Configuration file

2009-04-23 Thread Amos Jeffries
Wong wrote: All, Below the lines that exist in my squid.conf acl our_networks src 192.168.1.0/24 http_access allow our_networks http_access deny all Will it be more effective below? Precisely zero difference on its own. Utility comes from whether or not custom error pages are used and need

Re: [squid-users] visible_hostname versus unique_hostname

2009-04-23 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: Hello, I was searching for the logic of setting visible_hostname and unique_hostname. I found out that value of unique_hostname is set by calling getMyHostname() function, which returns value of visible_hostname, if it's set. However, I would prefer not to do this

Re: [squid-users] caching behavior during COSS rebuild

2009-04-23 Thread Amos Jeffries
, rebuild-from-log and rebuild-from-rawdevice tools. Adrian On Wed, Apr 22, 2009, Chris Woodfield wrote: On Apr 22, 2009, at 4:56 AM, Amos Jeffries wrote: Chris Woodfield wrote: So I'm running with COSS under 2.7STABLE6, we've noticed (as I can see others have, teh Googles tell me so

Re: [squid-users] Intermittent slow response from Squid

2009-04-23 Thread Amos Jeffries
molybtek wrote: I've been able to do a little more monitoring on squid - the DNS Lookups are still below 1 seconds for the 5 minute averages during the times when there is a slowdown in squid response. And the connections averages around 5 per seconds, just like the time when there isn't a slow

Re: [squid-users] Auto Detect Proxy in Browser, visiting users.

2009-04-23 Thread Amos Jeffries
Dustin Hane wrote: Also, you could do it the way I am running it..Or attempting to.. If you are on a windows domain (assuming you are as you're using LDAP or NTLM)..Use a Group policy object to push out the proxy. So long as all of your boxes are at least WIN2K you can do it in 4 minutes.. If

Re: [squid-users] Web Messengers

2009-04-23 Thread Amos Jeffries
Jorge Bastos wrote: Hi guys, I'm starting to investigate on how to block a plague, that is the web messengers. There's every day more web messengers available, and it's almost impossible to be adding then as a iptables rule to block them, or in Squid. Is there a way to block this in squid, that

Re: [squid-users] Proxy https

2009-04-23 Thread Amos Jeffries
Stun Box wrote: Hello, I have a wireless network which gives visitor access through a captive portal. I am using coovachilli, but it does not ensure protection. (Open Association Http) I am looking for a proxy which can receive a http request (http://www.google.fr), redirect to https protocol

Re: [squid-users] rotate logfiles with multiple instances of squid

2009-04-23 Thread Amos Jeffries
Ross Tsolakidis wrote: Hi all, I have a machine running multiple instances of squid, it's happily humming along. Debian package. One instance uses the standard startup script, with pretty much the default conf. The 2nd I start using squid -f /etc/squid/squid2.conf The squid2.conf file

Re: [squid-users] Problems with IDENT lookup logging

2009-04-23 Thread Amos Jeffries
Dustin Hane wrote: Hello all! I'm trying to get around having to do the LDAP or NTLM authentication schemas. It may be a lot easier, but I'm just not exactly sure how..So what I have done is this.. I pushed out via a GPO a script that will report the username to a text file. I then use

Re: [squid-users] [Scanned]

2009-04-23 Thread Amos Jeffries
Len Taylor wrote: Hi I am trying to set up squid on a xp computer in a windows server 2003 domain but I am having problems with authentication it just ask for your username and password 3 time and then says Cache Access Denied. This is the first time I have used squid so dont no if I have set

Re: [squid-users] redirecting body_pipe 0x85d6140*1 ( Slow PDF?? )

2009-04-23 Thread Amos Jeffries
twintu...@f2s.com wrote: 3.0.STABLE13 I am getting errors in my cachelog client_side_request.cc(825) redirecting body_pipe 0x85d6140*1 from request 0x8520fd8 to 0x85206c8 This is Squid responding normally to receiving a 3xx: redirection reply from the web server. Is this a problem, we

Re: [squid-users] CONNECT method support(for https) using squid3.1.0.6 + tproxy4

2009-04-23 Thread Amos Jeffries
Mikio Kishi wrote: Hi, Amos Ah, you need the follow_x_forwarded_for feature on Proxy(1). That's right, I know about that, but I'd like to use source address spoofing... Just only following enables my anxiety. replacing In tunnelStart()#tunnel.cc sock = comm_openex(SOCK_STREAM,

Re: [squid-users] squid on windows domain users

2009-04-24 Thread Amos Jeffries
Vicks wrote: dear friends, i m from india is using a 2 Mbps Leased Line connection, distributing it through windows 2003 server with squid ip based filtering. frequently i suffer from problems like ip conflicts bcoz users who dnt hav internet facility track the ip on which internet is

Re: [squid-users] Using DNSSEC in Squid

2009-04-24 Thread Amos Jeffries
Silamael wrote: Hello! Is there any possibility at moment to use DNSSEC in Squid? We want to present a special error page if a DNS answer is received which fails the DNSSEC check. Are there any built-in features, patches or anything else to realize this? Thanks in advance! Greetings, Matthias

Re: [squid-users] Web Messengers

2009-04-24 Thread Amos Jeffries
Jorge Bastos wrote: It's only a plague if you are not billing clients for their bandwidth usage :) http://wiki.squid-cache.org/ConfigExamples/Chat If you know of other clients that go through Squid and can be identified, please let me know what and how the ID is done. Hi Amos, For MSN case

Re: [squid-users] Proxy https

2009-04-24 Thread Amos Jeffries
Stun Box wrote: Not the way you want to do it. You can happily do steps 1-2, but as soon as the browser starts the HTTPS connection you loose all control over what happens inside the encrypted tunnel. You cannot configure browsers with WPAD/PAC to connect to the proxy over SSL since none of

Re: [squid-users] Squid Parent: child process 28104 exited due to signal 9

2009-04-24 Thread Amos Jeffries
Vivek wrote: Hi All, I am using two squid server with Tproxy- WCCP setup. version - squid-2.7 stable 6. One server is running perfectly. But one squid stops abnormally. The following error, we got in syslog. Kernel - 2.6.20 ( ctt proxy) OS - Fedora 7. RAM - 4GB (256 cache_mem)

Re: [squid-users] Long running squid proxy slows way down

2009-04-24 Thread Amos Jeffries
Seann Clark wrote: All, I am looking for ideas on ways to avoid this, as the tuning guides I have found lead me all over the place. What I am seeing is over time the cache starts to slow down from being lightning fast to being ok, to it taking 1-3 minutes to decide to load, and I know it

Re: [squid-users] user auth - set time limit?

2009-04-24 Thread Amos Jeffries
Mister Raven wrote: Is there a way to use ncsa_auth to enforce daily time limits for authenticated users? ie) A user can only use 1 hour of time a day and then they can no longer log onto the proxy? Thank you! To get Squid to check credentials after a set time period auth_param ...

Re: [squid-users] Web service

2009-04-24 Thread Amos Jeffries
Colloca Gabriel (Medios Digitales - Desarrollo de Productos) wrote: snip Is a simple question. Can I cache a (.Net) webservice with squid. I made some tests and I always get a Miss. If I can do it, what squid check to think that the content was no modify. I want to getting information

Re: [squid-users] Long running squid proxy slows way down

2009-04-25 Thread Amos Jeffries
Gavin McCullagh wrote: Hi Amos, On Sat, 25 Apr 2009, Amos Jeffries wrote: ipcache_low 90 # ipcache_high 95 ipcache_high 95 cache_mem 1024 MB # cache_swap_low 90 cache_swap_low 90 # cache_swap_high 95 cache_swap_high 95 For cache 1GB the difference of 5% between high/low can mean long

Re: [squid-users] Squid on transparent proxy for 443 request

2009-04-25 Thread Amos Jeffries
Jorge Bastos wrote: Hi there, What are the concerns that I need to have to make squid act as a transrent proxy on port 443? I need to catch the data that is being sent from a website that works under https, is it possible? Data Right now I only use it for standard port 80. Not possible.

Re: [squid-users] how to avoid external acl caching ? external_acl_cache_add

2009-04-25 Thread Amos Jeffries
Julien P. wrote: Hi everyone, I am trying to setup a very specific ACL using an external acl program written in C. I looked almost everywhere and I wasn't able to find anything about that ... This is the output that I get when I try to access a website that I didn't try to access before:

<    5   6   7   8   9   10   11   12   13   14   >