Re: [squid-users] wbinfo_group.pl ?? return a error cannot run ..

2008-10-16 Thread Chris Robertson
Phibee Network Operation Center wrote: Hi We have a problems with our new squid server, when we want add wbinfo_group.pl, he can't start it : 2008/10/14 06:07:39| Starting Squid Cache version 3.0.STABLE7 for i386-redhat-linux-gnu... 2008/10/14 06:07:39| Process ID 26104 2008/10/14 06:07:39|

Re: [squid-users] Disk Space problem in a squid-proxy server

2008-10-17 Thread Chris Robertson
Angela Williams wrote: Have a look at your squid.conf file and look for this line cache_dir My one I have configured like this. cache_dir aufs /data/squid 5000 15 256 To give 5G in /data/squid If you change it you will need to trash the current cache and create new with squid -z This

Re: [squid-users] The request or reply is too large, error

2008-10-22 Thread Chris Robertson
Tarak Ranjan wrote: Hi List, I have set those acl for limiting the download size in squid.conf file, acl limitsize2 time MTWHF 00:30-07:55 acl limitsize time MTWHF 8:00-20:00 acl limitsize1 time SA 00:10-23:59 reply_body_max_size 25600 allow limitsize reply_body_max_size 1024 allow limitsize2

Re: [squid-users] The request or reply is too large, error

2008-10-28 Thread Chris Robertson
Tarak wrote: Hi List, [EMAIL PROTECTED] interfaces]# squid -k check 2008/10/28 17:41:04| squid.conf line 2574: reply_body_max_size 25600 KB allow limitsize 2008/10/28 17:41:04| aclParseAccessLine: expecting 'allow' or 'deny', got 'KB'. 2008/10/28 17:41:04| squid.conf line 2576:

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-28 Thread Chris Robertson
matlor wrote: I have configured squid with winbind integrated in the active directory of a windows 2003 domain. If I browse internet trough IE 7 everething is ok, no user and password prompted, because of the common login. While, if I open Firefox (2 or 3 version), it prompts for user and

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Chris Robertson
Chris Nighswonger wrote: On Wed, Oct 29, 2008 at 5:16 PM, nairb rotsak [EMAIL PROTECTED] wrote: http_access allow all NTLMUsers Does the 'all' trump the 'NTLMUsers' acl here? Chris The all is redundant. The all ACL will always match, so the test next falls to checking the

Re: [squid-users] Re: R: [squid-users] Connection to webmail sitesproblem using more than one parent proxy

2008-11-18 Thread Chris Robertson
Amos Jeffries wrote: ICP is yet another very different way of choosing the peer to send through. It's always on by default so needs to be turned off for the methods that break with ICP selection. Care to expound on this? What cache_peer selection methods break with ICP enabled? I'm not

Re: [squid-users] error 401 when going via squid ???

2008-11-18 Thread Chris Robertson
Kinkie wrote: Could you try a more recent version of squid? I don't think that 2.6S4 supports proxying content when the server only offers ntlm authentication For what it's worth, any 2.6 (or 2.7) release should perform the required connection pinning to proxy NTLM authentication...

Re: [squid-users] acl allow???

2008-11-18 Thread Chris Robertson
Roger Thomas wrote: Hi, This is my first time posting to the mailing list, but I just wanted to know whether anyone knew how to do the below: I use the following to block a list of words from URL’s: acl misc_block_list url_regex -i /etc/squid/block/misc_block.list http_access deny

Re: [squid-users] customize logformat to see header

2008-11-18 Thread Chris Robertson
zulkarnain wrote: Hi, I'm trying to modify logformat to display header of this folowing websites. My purpose is to be able to use the correct pattern for refresh_pattern. Here are my rules acl googlevideo url_regex -i googlevideo\.com acl kaspersky url_regex -i kaspersky\.com acl

Re: [squid-users] Accessing a transparent cache on localhost

2008-11-19 Thread Chris Robertson
Jonathan Gazeley wrote: Hi, I'm new to Squid. I've successfully set up a transparent cache on a server which is also the gateway/firewall/NAT for a small LAN. All the clients on my LAN use the cache properly. However, the server running the cache doesn't use its own cache. I've inserted what

Re: [squid-users] ICP queries for 'dynamic' urls?

2008-11-19 Thread Chris Robertson
Steve Webb wrote: Hello. I'm caching dynamic content (urls with ? and in them) and everything's working fine with one exception. I'm seeing ICP queries for only static content and not dynamic content even though squid is actually caching dynamic content. Q: Is there a setting somewhere

Re: [squid-users] ICP queries for 'dynamic' urls?

2008-11-19 Thread Chris Robertson
Gregori Parker wrote: I'm curious about this as well - so is the answer that siblings cannot be queried for dynamic content and you need to use hierarchy_stoplist to keep squid from trying? Or is there a way to get ICP/HTCP to query siblings with the entire URI, query arguments and all? I have

Re: [squid-users] ICP queries for 'dynamic' urls?

2008-11-19 Thread Chris Robertson
Gregori Parker wrote: I understand all that and am not using or questioning the default config. Right. Sorry 'bout that, then. My config lacks definition for hierarchy_stoplist completely, which means it's defined as internal default (which should be nada). What I'm asking is: are my

Re: [squid-users] disable-internal-dns not working on 2.6.18

2008-11-20 Thread Chris Robertson
Joseph Jamieson wrote: Hello again. I followed that document to the letter here, and squid doesn't want to allow any traffic to my cache sites: - ERROR The requested URL could not be retrieved While trying to retrieve the URL: http://my.site.com/ The following error was encountered:

Re: [squid-users] squid rewrite feature ... help

2008-11-20 Thread Chris Robertson
chudy fernandez wrote: # TAG: rewrite i've tried rewrite %301:http://www.google-analytics.com/__utm.gif utm doesn't work. whats missing? Wow. That's a vague question. What version of Squid are your using (apparently this directive is only available in the Squid 2 development release)?

Re: [squid-users] tuning an overloaded server

2008-11-21 Thread Chris Robertson
Al - Image Hosting Services wrote: Hi, I hope that someone can help me. I have 3 servers running squid acting as a web accelerator for a single http server. I have been having a large amount of problems with the http server locking up and having drive failures and squid seems to be a great

Re: [squid-users] Squid downloading same files many times?

2008-11-21 Thread Chris Robertson
Elvar wrote: Elvar wrote: Hello, Recently I discovered that one of my clients' bonded T1 links to the internet was getting maxed out for up to an hour at a time. After doing some research and using Sawmill to generate some usage statistics on the user surfing activity, I found that some

Re: [squid-users] Recommended Store Size

2008-11-24 Thread Chris Robertson
Nyamul Hassan wrote: Is there any recommended store size for a forward proxy for a given link speed? We have a 70 Mbps link, and a client base of approximately 4,000 to 4,500. The rule of thumb I've read previously is storage equivalent to a week's traffic. If you pass an average of 30GB

Re: [squid-users] SSL Question

2008-11-24 Thread Chris Robertson
jhnns wrote: I have configured Squid only with the http port. I'm not using --enable-ssl. When I go to an https URL in a browser the URL works. How is this possible? I expected that the browser should create an https connection to squid. Regards, Johannes

Re: [squid-users] Recommended Store Size

2008-11-24 Thread Chris Robertson
Nyamul Hassan wrote: Thank you Chris for your response. Greatly appreciate your advise. However, in our system, the LRU Reference Age is around 3.5 days, and our combined cache_dir is 256GB. Does it mean we should upgrade? Regards HASSAN I can't really give a yes or no answer, as there

Re: [squid-users] redirect_children and Squid 3

2008-11-24 Thread Chris Robertson
Tom Williams wrote: I'm running Squid 3.0STABLE10 on RedHat Enterprise Linux 5 and I noticed the following message in my cache.log file; 2008/11/16 15:05:07| client_side.cc(2701) WARNING! Your cache is running out of filedescriptors I was doing a performance test using Apache's ab tool at

Re: [squid-users] Recommended Store Size

2008-11-25 Thread Chris Robertson
Nyamul Hassan wrote: Thx Chris. Cost of hardware does not become a big factor here, as it is directly related to the amount of BW that we save, and also the customer experience of getting pages faster from the cache. After looking many of the threads here, I've found that some guys are

Re: [squid-users] Recommended Store Size

2008-11-26 Thread Chris Robertson
Nyamul Hassan wrote: Thank you Chris for your valualbe info. Sorry about asking the should I increase store size question. It was a bit on the duh side. :) Is there a measurement inside the squid counters that tells me the bytes of data transferred? I use the SCALAR log analyzer

Re: [squid-users] URGENT : How to limit some ext

2008-11-26 Thread Chris Robertson
░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: how to limit .zip .swf only from squid.conf in 2 option 1. Global Rule ( i mean all user will get this rule - limit on zip and swf ) 2. Individual Rule ( only certain ppl that listed ) thx b4 in urgent ASAP :( it's about dead and live :( There's a whole

Re: [squid-users] NTLM Auth and not authenticated pages

2008-11-26 Thread Chris Robertson
Matias Chris wrote: Hello All, Im currently in the process of changing the way we authenticate users from LDAP to NTLMSSP. Now we are in test phase and while ntlm auth is working fine and allowing all users that are already logged to the AD Domain to access the web without asking for their

Re: [squid-users] Re: IMAP support

2008-11-26 Thread Chris Robertson
RW wrote: On Wed, 12 Nov 2008 14:28:51 -0200 Leonardo Rodrigues Magalh__es [EMAIL PROTECTED] wrote: julian julian escreveu: Because all my traffic to internet is managed by squid. Do you have any suggestion? no, it's not. Only http/https/ftp/gopher can be handled by

Re: [squid-users] Sign out

2008-12-04 Thread Chris Robertson
[EMAIL PROTECTED] wrote: Why didn't you just give me the answer instead of a lesson? I still have to write yet again now. For what it's worth, no you didn't. Your original message requesting help still stands (even though it does get stuffed in an other thread). Second, try the Squid

Re: [squid-users] snmpwalk issue squid 2.5

2008-12-08 Thread Chris Robertson
Ausmus, Matt wrote: First off , I'm posting this question here because it appears the SNMP mailing list is now defunct. If this is the wrong list to post this please let me know and I'll repost it in the correct one. First I'm running squid with snmp enabled on Centos 4.7. the version of

Re: [squid-users] issue with htcp support on squid

2008-12-09 Thread Chris Robertson
Bostonian wrote: While I am trying HTCP support for squid 3.0 stable 10, I ran into some issues. Hope someone could give me some leads on how to solve it. Here is my setting. I have two Linux running squid, which is compiled with --enable-htcp. One is used as parent for the other. On the

Re: [squid-users] How to exclude domain from rep_mime acl

2008-12-09 Thread Chris Robertson
Jevos, Peter wrote: Hi, I've set the rep_mime_type acl to block the flash video. Unfortunately it has to be allowed on our domain sites. How could I exlude specified domain from that acl ? I tried to do: acl mydomain dstdomain .MYDOMAIN.com http_access allow mydomain and put it before

Re: [squid-users] How to exclude some ip addresses from squid access log.

2008-12-10 Thread Chris Robertson
Indunil Jayasooriya wrote: Hi Everyone, I have the need of monitoring squid web browsing . So I am going to use sarg. It usually shows all the ip addresses. I want to excldue ip addresses of some managers from sarg. So , I think If I can exclude those ips from squid access.log, It would be a

Re: [squid-users] please help

2008-12-10 Thread Chris Robertson
Matheus wrote: Hello squid gurus, i need help here please. is there anyone i can get help from around. I need help with squid configuration. am green with this stuff but am glad it exists and i truly want to be a part of it. I happen to be a fast learner. my problem is that my squid is not

Re: [squid-users] Time based ACL

2008-12-11 Thread Chris Robertson
Amos Jeffries wrote: Nyamul Hassan wrote: Hi, I have a few time based ACLs which are used in delay_pools. In the literature, it suggests that the higher limit in time based ACL should always be higher than the lower limit, which works well, but what about if we want to define something

Re: [squid-users] Class 4 Delay pools

2008-12-15 Thread Chris Robertson
Johnny Edge wrote: Hello folks, I have a NT Group based acl Squid setup. Everything is fine with it, except for I'd like to provide certain NT Security Groups with more bandwidth than others, i.e. allocate bw by username/groupname. Atm the traffic control is done on a iproute2/tc basis which

Re: [squid-users] preferred DNS config

2008-12-15 Thread Chris Robertson
Rick Chisholm wrote: What would you say is preferable - having squid hit a local instance of BIND (or djbdns) or pointing it at the closest upstream name server(s)? It really depends on your situation, but I personally feel the more caching, the better. Have a local instance of BIND (or

Re: RES: [squid-users] block https requests

2008-12-16 Thread Chris Robertson
Ricardo Augusto de Souza wrote: ? noone Easy tiger. This is a list populated with volunteers. If you want faster service, you have to pay for it... -Mensagem original- De: Ricardo Augusto de Souza [mailto:ricardo.so...@cmtsp.com.br] Enviada em: terça-feira, 16 de dezembro de

Re: [squid-users] clientNatLookup: PF open failed: (13) Permission denied

2008-12-16 Thread Chris Robertson
Leslie Jensen wrote: I'm running Squid-3.0.10 on FreeBSD 7.0-RELEASE-p4 with PF. I've noticed that in cache.log are a lot of entries as the one below clientNatLookup: PF open failed: (13) Permission denied I've found some information on the problem via Google. One is start Squid as root.

Re: RES: [squid-users] block https requests

2008-12-18 Thread Chris Robertson
Dean Weimer wrote: The host is still known from the request header, and is not encrypted in https, only the data in the body of the request and reply is encrypted, if the headers were encrypted a proxy would never be able to direct the request to the origin server. Here is a direct copy from

Re: [squid-users] squid group authentication and dansguardian

2008-12-18 Thread Chris Robertson
Kevin Kimani wrote: Hi guys, Am having a system running squid that authenticates users from the Active Directory. Squid is version 2.6 STABLE6 running in CentOS 5.1. It authenticates users according to the various groups that have been defined in the Active Directory. If i run squid directly,

Re: [squid-users] Use parent proxy when direct failed

2008-12-18 Thread Chris Robertson
Sébastien WENSKE wrote: Hi all, I need to setup squid to use a parent proxy when direct connection failed. -- acl playlist dstdomain .yacast.net http_access allow manager localhost http_access deny manager http_access

Re: [squid-users] TCP_MISS followed by multiple TCP_DENIED

2008-12-18 Thread Chris Robertson
Paul Cocker wrote: I'm having a problem with a lot of timeouts or failures to connect to a particular website. A typical section of the log is as follows: 1229617601.885156 192.168.1.1 TCP_MISS/200 39 CONNECT web.site.com:443 domain\user DIRECT/170.146.245.34 - 1229617603.854 0

Re: [squid-users] forcing squid to use a parent for a domain?

2008-12-23 Thread Chris Robertson
Carl Brewer wrote: Hello, I've got a squid 3.0 proxy that I'm trying to force to use an upstream proxy for a specific domain to get around a path MTU problem that's proving difficult to fix. I have the following in my squid.conf : cache_peer proxy.xxx.yyy.zz parent 8080 7

Re: [squid-users] Handling websites that switch between http https

2008-12-30 Thread Chris Robertson
Joseph L. Casale wrote: You've just reminded me of the hotmail problems... Joseph: see if it disappears when you turn balance_on_multiple_ip off. It still defaults to on in most Squid installs. Amos, I am on holidays w/o access to this system atm, but wouldn't this only matter if their

Re: [squid-users] Squid 2.6 and Wordpress

2009-01-06 Thread Chris Robertson
Dan Casey wrote: I'm running squid 2.6 from CentOS 5 repository, as an http accelerator for wordpress. I've got it working to a point using a configuration I found elsewhere (I'm not very familiar with squid yet, and most docs I've found are not relevant to this version). It is successfully

Re: [squid-users] Possible regressions in dstdom_regex based matching

2009-01-08 Thread Chris Robertson
Sameer Naik wrote: Hi, I have created a filter file named block.lst with the following contents /youtube. /orkut. /songs.pk /senduit. I have created an acl based on the domain regex for the above filter by specifying the following rule in the squid.conf acl list_blocked dstdom_regex

Re: [squid-users] cache hit 100%

2009-01-08 Thread Chris Robertson
UK SquidUser (AXA-TECH-UK) wrote: Hi... we are running squid 2.6 stable 17 that have been built within the last 6 months. The problem we are experiencing is that one of our servers has hit 100% on the proxycache partition. It is configured in its own filesystem, it shares with nothing... it

Re: [squid-users] Squid failover between DIRECT connect and PARENT PROXY

2009-01-08 Thread Chris Robertson
Sébastien WENSKE wrote: Hi all, I've set a squid server to use direct connections by default and to use a parent proxy if direct is unavailable: - http_port 8080 acl manager proto

Re: [squid-users] HTTP Header

2009-01-08 Thread Chris Robertson
Mehmet ÇELiK wrote: Hi all, I am using Squid as Reverse Proxy for my Web Servers. Client IP Address is directing to Web Servers with X_FORWARDED_FOR. But, I want to write Client IP Address to Remote_Address.. I want to this, because.. I am using vBulletin Forum and vBulletin are taking

Re: [squid-users] reverse proxy - accelerate sites caching static content

2009-01-08 Thread Chris Robertson
Wj wrote: Each page is supposed to be sent with an expiry or cache-control and Last-modified headers from the web server. To set expiry times for proxy different to web browsers use the s-* options meaning 'server' for the proxy times. I'm sorry but i don't understand what i have to do in

Re: [squid-users] Re: Dual auth based on IP source

2009-01-08 Thread Chris Robertson
David Rodríguez Fernández wrote: Hi, I have my own auth_param basic program script to authenticate my squid users. My perl script is working fine. I do an autentication based on login/password and a query to an oracle database. I have a squid server for all mi organization. All the users are

Re: [squid-users] max_user_ip directive on balanced proxy with ntlm authentication in AD2003

2009-01-08 Thread Chris Robertson
lukefo wrote: Hi to all,I’d like to know if there is any solution to implement a max_user_ip directive for avoiding user account sharing within a squid farm balanced by an hw appliance. The squid servers are configured with ntlm authentication in Active Directory 2003. I have already implemented

Re: [squid-users] Fwd: Webapp problems with squid 2.7.STABLE3

2009-01-08 Thread Chris Robertson
Chris Nighswonger wrote: Hi all, I'm running Squid 2.7.STABLE3. I just moved off of 2.6.STABLE12. We run a USPS webapp called Shipping Assistant. With 2.6, this app worked fine. During my upgrade, I introduced no config changes. With 2.7, this app is broken. Comparing a tcpdump of the app

Re: [squid-users] Fwd: help

2009-01-13 Thread Chris Robertson
vivian t wrote: hello i have problem with memory the OS centos 5.2 i have 146 GB total size of hard disk the size of cache_dir 91GB i have 5GB RAM squid version 2.7stable5 my conf file is cache_dir aufs /var/spool/squid 91000 130 256 cache_mem 512 MB maximum_object_size 5 MB

Re: [squid-users] Is external_acl_type must under authentication mode?

2009-01-13 Thread Chris Robertson
NetSnake wrote: hi,all I want to use external_acl_type to distribute my user to different server, these user need NOT authentication. Squid start my application, but when I access to a special host, no data send to my program from Squid. my program is a very simple script, and when I use an

Re: [squid-users] Is external_acl_type must under authentication mode?

2009-01-14 Thread Chris Robertson
NetSnake wrote: I add http_access before my cache_peer_access, no effect. In order to best help you, can you please post the output of ... egrep -v (^ *$|^#) /path/to/squid.conf ...obviously replacing /path/to/squid.conf with the proper path to your active squid configuration file. If

Re: [squid-users] strange input traffic peaks

2009-01-15 Thread Chris Robertson
Anatoly Oreshkin wrote: Hello, We have squid server version squid-3.0.STABLE11-20090112 running on Scientific Linux 4.4. I noticed that sometimes, usually in working hours input traffic sharply increases. I saw this increase in GANGLIA graph for proxy server I looked into squid log files

Re: [squid-users] oot: about sarg

2009-01-16 Thread Chris Robertson
░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: i use crontab */30 * * * * /usr/bin/sarg -f /etc/squid/sarg.conf but the sarg always display 2 lines 16Jan2009-16Jan2009 Fri Jan 16 07:30:01 EST 20097 82.28M 11.75M 15Jan2009-16Jan2009 Fri Jan 16 06:30:12 EST 200998 3.44G 35.13M

Re: [squid-users] Problems with squidclient

2009-01-16 Thread Chris Robertson
Andreev Nikita wrote: Hi. I'm trying to get basic squid info by issuing 'squidclient -p 8080 mgr:info'. Port 8080 is where our squid is listening to connections. All clients works fine through the squid. But squidclient return http response (lets say mydomain.com is my domain): ERROR The

Re: [squid-users] squid caching report

2009-01-16 Thread Chris Robertson
bijayant kumar wrote: Hello list, I want to have reports about the squid performance like how much caching is being done by Squid, how much bandwidth is being saved by the squid cache by returning objects from cache. I thought of cache manager output but my seniors want to see reports in a less

Re: [squid-users] Frequent cache rebuilding

2009-01-16 Thread Chris Robertson
Andreev Nikita wrote: Hi. What are the reasons of squid rebuilding it's cache? Sometimes after startup sometimes during work it starts to rebuild cache. I see it in cahce.log: Squid rebuilds the swap.state file when a logrotate (and I think reconfigure) is called for. Usually it's not a

Re: [squid-users] SNMP OIDs

2009-01-16 Thread Chris Robertson
Luis Daniel Lucio Quiroz wrote: Hi, We are trying to get rid fo a commercial reverse proxy, how ever, we must get this data from SNMP. I know that squid has snmp support, I've used, but I dont know all oids. Does any one has a link where oids are specified? Regards, There is a MIB

Re: [squid-users] prevent 301 sites to be cached

2009-01-20 Thread Chris Robertson
Carsten Bachert wrote: Hi all, I use squid as revers proxy to server web pages. Therefore I want to disable 301 sites to be cached. My rule is: acl stat301 http_status 301 cache deny stat301 //some lines deeper acl aclname http_status 200 301 302 500- 400-403 ... # status code in

Re: [squid-users] Frequent cache rebuilding

2009-01-21 Thread Chris Robertson
Matus UHLAR - fantomas wrote: On 21.01.09 10:05, Andreev Nikita wrote: Squid cache resides on NFS partition on storage system. It is 1Gb link and both sides are connected to the same switch. Squid has dual core Xeon processor and 4GB of RAM. The main concern here is that squid always eats

Re: [squid-users] cache_mem

2009-01-21 Thread Chris Robertson
Paul Cocker wrote: Simple one I hope Once you have squid up and running and know its memory use and overall system memory use, should cache_mem be set as a percentage of the free memory available, or should you be leaving a large amount of memory for the use of the OS file cache and keeping

Re: [squid-users] cache.log error

2009-01-21 Thread Chris Robertson
Enrique wrote: hi all looking for errors on my squid i see many errors i'm using: squid3 -v Squid Cache: Version 3.0.PRE5 That was a pre-release version of Squid 3 and is now over two years old. The Squid 3.0 branch is up to stable release 12. There have been numerous bug fixes in the

Re: [squid-users] Latest greatest Active Directory Auth solution?

2009-01-21 Thread Chris Robertson
Jeff Jensen wrote: Is someone keeping track of all the Active Directory Authentication solutions available in the Squid distribution? In /usr/lib/squid3 I have all these and no idea which is the latest best. pam_auth smb_auth smb_auth.sh smb_auth.pl ntlm_auth msnt_auth squid_ldap_auth

Re: [squid-users] oot: about sarg

2009-01-22 Thread Chris Robertson
░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: still same :(( -- Squid User Access Reports FILE/PERIOD CREATION DATE USERS BYTES AVERAGE 22Jan2009-22Jan2009 Thu Jan 22 07:32:48 EST 20095 2.71M 543.46K 21Jan2009-22Jan2009 Thu Jan 22 07:01:10 EST 200996

Re: [squid-users] Frequent cache rebuilding

2009-01-22 Thread Chris Robertson
Andreev Nikita wrote: Why does squid eat 100% of processor if the problem is in FS? How is your cache_dir defined? aufs (in general) is a better choice than ufs, diskd might still have some stability issues under load, and coss is a good supplement as a small object cache.

Re: [squid-users] TCP_MISS 407 Error

2009-01-22 Thread Chris Robertson
Jack, Andrew wrote: Hi there, I'm trying to forward requests from a Squid proxy to our Blue Coat proxy which requires authentication. I'm running Squid NT 2.7 Stable 5 since I figured setting up AD Authentication would be easier on a Windows server then on a Linux one since my Linux knowledge

Re: [squid-users] No LSF support?

2009-01-22 Thread Chris Robertson
Heinz Diehl wrote: Hi, now that squid-3.0STABLE12 is out, i gave it a try, did a complete clean rebuild of the whole system included cache directories, and encountered the same behaviour as with STABLE11: cache.log shows 2009/01/22 09:25:37| Version 1 of swap file without LFS support

Re: [squid-users] Squid 3.0 STABLE 12 is available

2009-01-23 Thread Chris Robertson
Enrique wrote: Finaly i haved upgraded to SQUID3.0STABLE, but my problem persiste, for example when i maje a image search in google many images no show, i;m looking for the size of that images for some imformation abaut my chache_mem or maximum objets but the sixe of the images no show is

Re: [squid-users] Squid cache problem

2009-01-23 Thread Chris Robertson
Amos Jeffries wrote: George wrote: Hi, I've set up the following acls/outgoing_ip settings in my squid: acl ip1 myip 1.1.1.1 tcp_outgoing_address 1.1.1.1 ip1 for each IP I have on the server. I need this to be able to use each IP of the server as the outbound one. The problem is that if I

Re: [squid-users] unable to see client ip address in log file

2009-01-23 Thread Chris Robertson
prophetmr wrote: Im new to squid and i have the same problem im running squid transparently primarily to keep tabs on what my kids are up to on the internet and i have set the kids laptops to static ips but in the logs i only show the network ip not the users ip. Daily i run srg with a date

Re: [squid-users] Help needed with Squid 3.0-STABLE12 reverse proxy messages in cache.log

2009-01-23 Thread Chris Robertson
Tom Williams wrote: Amos Jeffries wrote: Tom Williams wrote: I've got Squid 3.0-STABLE12 configured as a reverse proxy on RedHat Enterprise Linux 5. We have pages for logged-in users we DO NOT want cached and pages for anonymous users (not logged into the site) that we do want cached. We

Re: [squid-users] building squid3stable12

2009-01-23 Thread Chris Robertson
Enrique wrote: i reciving many errors refered to authentications helper after remove one by one of configure options make all fine. ./configure --build=i486-linux-gnu --prefix=/usr --includedir=${prefix}/include --mandir=${prefix}/share/man --infodir=${prefix}/share/info --sysconfdir=/etc

Re: [squid-users] WCCP+Squid not working. Could use some of your experience.

2009-01-23 Thread Chris Robertson
Anthony DeMatteis wrote: Greetings Group, I'm new to this group... We're an ISP trying to control some of our bandwidth issues. I've never set up squid before. I have a working squid server, working very well, including caching youtube vids. However, this is via setting up the proxy

Re: [squid-users] unable to see client ip address in log file

2009-01-23 Thread Chris Robertson
prophetmr wrote: currently its set to default client_netmask 255.255.255.255 if i change it to 255.255.255.0 will it pass the ips thru? If changed from the default (255.255.255.255), it will mask the IPs in the Squid logs. Can you verify that the IPs exist in full in the access_log?

Re: [squid-users] unable to see client ip address in log file

2009-01-23 Thread Chris Robertson
prophetmr wrote: i can save you the trouble of looking at the conf file everything is default except i set it to http_port 192.168.3.107:3128 transparent using 2.7 defaults,the reason i did that is im divorced and running squid transparent is so i dont have to set the browsers to proxy

Re: [squid-users] Squid Proxy Force options

2009-01-26 Thread Chris Robertson
Seann Clark wrote: All, This may be a long shot with squid, I do know commercial proxies can do this, but I want to do something simple regarding google. I haven't found much online for it yet, but I am wondering if anyone has come up with a way to force google to use only safe search

Re: [squid-users] squid cannot open page, but the other proxy can

2009-01-27 Thread Chris Robertson
myszaty wrote: you're right. here's the result of squidclient with correct address squidclient http://www.malopolska.uw.gov.pl HTTP/1.0 200 OK Date: Tue, 27 Jan 2009 07:16:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 3416 Content-Type: text/html Expires: Tue, 27 Jan

Re: [squid-users] which stable version should one use

2009-01-27 Thread Chris Robertson
sameer shinde wrote: Hi All, Whenever I visit squid-cache.org site. I always have a doubt is, why there are multiple stable version available for production release? What i mean is, when there is 3.0 stable release is available for production, then still why 2.7 is available. I can understand

Re: [squid-users] Allowing youtube vidoe on single ip address

2009-01-27 Thread Chris Robertson
climax wrote: Hi, i am using squid as web proxy server. i have used acl to block all type of videos. When i comment the acl to block the videos file the video open on all the ip addresses but i want to open the video on the particular ip address only. i have used the following ACL.

Re: [squid-users] Can i block ping with squid?

2009-01-28 Thread Chris Robertson
Maoz wrote: on iptables iptables -A INPUT -p icmp -j DROP Which is just a HORRID idea. If you want to block ping, block ping requests... iptables -A INPUT -p icmp --icmp-type 8 -j DROP ...but for the LOVE OF THE INTERNET don't block destination-unreachable, source quench or

Re: [squid-users] what this mean

2009-01-28 Thread Chris Robertson
░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: LIBError number: %e/B %e = ? where i can get all % string command ? http://wiki.squid-cache.org/Features/CustomErrors Chris

Re: [squid-users] website does not open

2009-01-28 Thread Chris Robertson
sameer shinde wrote: Hi All, We are accessing airtel website with following address. http://117.99.128.32:81/ or http://117.99.128.32/ So far when we were having windows proxy server, we were able to access the site through our proxy, but as now we've moved to squid3.0 stable1 proxy server,

Re: [squid-users] SCAVR problems

2009-01-28 Thread Chris Robertson
polloxx wrote: Dear group, I'm trying to setup a squid proxy server (2.6.5-6etch4) with clamav content scanning (0.94.dfsg.2-1~volatile1) on a Debian Etch server. As a helper program I use SCAVR 1.8.0. When I start squid it crashes with the below messages from syslog. In squid.conf I have:

Re: [squid-users] SCAVR problems

2009-01-29 Thread Chris Robertson
polloxx wrote: Thanks for your answer Chris. I had to use the syntax like: su -c /usr/local/bin/SquidClamAV_Redirector.py -c /etc/squid/SquidClamAV_Redirector.conf proxy Than I saw that I was missing libclamav2. After installing this libary squid didn't crash anymore, but does nothing at all.

Re: [squid-users] google safebrowsing

2009-01-29 Thread Chris Robertson
Matt Harrison wrote: Matus UHLAR - fantomas wrote: On 29.01.09 09:47, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: no not like that i mean using external like phishtank.com put .phishtank.com to /etc/squid/dangerwebsite.txt No, I think he means he wants to use external lists for blocking domains,

Re: [squid-users] squid as anonymous proxy server

2009-01-29 Thread Chris Robertson
J. Bakshi wrote: Dear list, If I transfer money to wirecard bank outside Germany it says Please note that Wirecard is currently not offered in your country. But I have no problem to do the same when I'm in Germany. Hence I have installed squid version-3 in a dedicated server located in

Re: [squid-users] Squid 3.0 reverse proxy performance eh?

2009-01-29 Thread Chris Robertson
Woodward, Andrew wrote: Hello, I've got a couple of questions that I'm hoping that some of you more experienced can enlighten me with. 1)We're recently set up several squid servers to act as a reverse proxy accelerator for some of our web-content servers. When we first set them up they were

Re: [squid-users] SCAVR problems

2009-01-30 Thread Chris Robertson
polloxx wrote: On Thu, Jan 29, 2009 at 10:11 PM, Chris Robertson crobert...@gci.net wrote: polloxx wrote: Thanks for your answer Chris. I had to use the syntax like: su -c /usr/local/bin/SquidClamAV_Redirector.py -c /etc/squid/SquidClamAV_Redirector.conf proxy Than I saw that I

Re: [squid-users] squid as anonymous proxy server

2009-01-30 Thread Chris Robertson
J. Bakshi wrote: Chris Robertson wrote: J. Bakshi wrote: Dear list, If I transfer money to wirecard bank outside Germany it says Please note that Wirecard is currently not offered in your country. But I have no problem to do the same when I'm in Germany. Hence I have installed

Re: [squid-users] Precaching? Is it possible?

2009-01-30 Thread Chris Robertson
Matt Browne wrote: Hi, Does anyone know if it's possible to configure precaching in squid. Ie squid will follow all the links on a page and cache the contents before the user goes there? Perhaps with an ICAP plugin and Squid 3. Squid, by itself, does nothing with the content of the

Re: [squid-users] Squid as HTTPS Proxy Server

2009-02-04 Thread Chris Robertson
Keefe John wrote: Hello, I currently have a standard squid proxy server setup doing forward proxying. I'd like to encrypt the traffic between the clients and the squid server. Have you found a browser that supports this? None of the big four (IE, Firefox, Safari or Chrome) do. All support

Re: [squid-users] Intermittent slow response from Squid

2009-02-04 Thread Chris Robertson
Moses Truong wrote: We have squid running on a server with delay pools enabled. The squidclient usually responds very quickly - in less than 0.03 seconds most of the time. However, there are times when this rises to over 39 seconds. There are 2 Gb of RAM, and there's about 900mb used.

Re: [squid-users] bind socket

2009-02-04 Thread Chris Robertson
vivian t wrote: hello when i try to surf any site from any pc i start the squid server in debug level 1 and found this lines commBind: cannot bind socket FD 14 to X.X.X.X: (99) cannot assign requested address what is it mean ...? It means that Squid can't open a network socket on the IP

Re: [squid-users] Squid, ntlm, java, and gotomeeting

2009-02-04 Thread Chris Robertson
Kevin Blackwell wrote: Hi, I currently have a deployment of Squid. We use it to track surfing habbits of users on Windows 2003 Terminal Servers. It's AD aware and using ntlm. It seems that when a users tries to goto gotomeeting.com and start a meeting. An Auth box pops up that says ntlm at the

Re: [squid-users] Squid as HTTPS Proxy Server

2009-02-05 Thread Chris Robertson
Keefe John wrote: I'm actually not using a browser as the client. I'm using an IPTV streaming client that does support both HTTP and HTTPS proxy. On squid 2.x when I attempt to connect I see the following error in cache.log: 2009/02/04 18:30:30| clientNegotiateSSL: Error negotiating SSL

Re: [squid-users] Bandwidth Limiting

2009-02-05 Thread Chris Robertson
Anthony DeMatteis wrote: Hi group, Has anyone played with limiting bandwidth via squid? I currently have three bandwidth managers between my border router and customer base. These servers limit traffic based on service customer has selected (1.5M/768k, etc). There are a number of issues with

  1   2   3   4   5   6   7   8   9   10   >