Re: The use of cbdataFree() in HEAD

2003-03-11 Thread Robert Collins
On Tue, 2003-03-11 at 08:58, Henrik Nordstrom wrote: The following uses of cbdataFree in HEAD is dubious: src/client_side_reply.cc:253:cbdataFree ((clientReplyContext *)address); src/store_client.cc:79:cbdataFree ((store_client *)address); src/ESI.cc:2425:cbdataFree ((esiRemove

Re: Windows port merge - MS Visual C++ compatibility [PATCH]

2003-03-11 Thread Robert Collins
On Tue, 2003-03-11 at 08:41, Henrik Nordstrom wrote: My question is why the cast is at all needed and from where address is? address is the base address of the memory allocated for the object. It's the address to be freed. Rob -- GPG key available at:

Re: HEAD make dist fails

2003-03-11 Thread Robert Collins
I think I've broken bootstrap under some shells - Henrik, could you have a quick look? (just run bootstrap on squid-cache.org.) Rob -- GPG key available at: http://users.bigpond.net.au/robertc/keys.txt. signature.asc Description: This is a digitally signed message part

Re: about client connection

2003-03-11 Thread Henrik Nordstrom
On Tuesday 11 March 2003 11.05, atit_ldce wrote: how squid will handle client Connection squid is listening on port 3128 for client request. does it create another connection for client request or use 3128 for all clie nts HTTP uses a single TCP connection. See RFC2616. if it use 3128 for

Re: Windows port merge - MS Visual C++ compatibility [PATCH]

2003-03-11 Thread Guido Serassio
Hi Robert, Il 09.13 11/03/2003 Robert Collins ha scritto: On Tue, 2003-03-11 at 07:30, Guido Serassio wrote: Is there anyway we can avoid the whole file #ifdefs in VS ? I'm applying this anyway, but as we get more modular, this is going to becomeannoying. Now on MS Visual Studio I'm

Re: Object naming conflict on nt branch

2003-03-11 Thread Robert Collins
On Tue, 2003-03-11 at 21:36, Guido Serassio wrote: Yes, but there is still a problem: max() and min() are already defined on Windows platform. Ah, thats easy. Just protect their defines with #ifndef max ... #endif and #ifndef min ... #endif -- GPG key available at:

Re: [PATCH]: Linux Transparent Proxy

2003-03-11 Thread Gianni Tedesco
On Mon, 2003-03-10 at 16:59, Henrik Nordstrom wrote: 2. You must supply a tcp_outgoing_address in your squid.conf, this is because of some deep magic in the Linux TCP/IP stack. If anyone would like me to explain the reasons more thoroughly just ask. This is deep magic in the TPROXY

Re: Another build problems on MS Visual Studio

2003-03-11 Thread Guido Serassio
Hi Robert, At 12.01 11/03/2003, Robert Collins wrote: On Tue, 2003-03-11 at 21:08, Guido Serassio wrote: Hi, Build process stops on MS Visualstudio with the following error: c:\work\nt-3.0\include\array.h(324) : error C2244: 'VectorIteratorBaseC::*' : unable to resolve function overload

Re: Object naming conflict on nt branch

2003-03-11 Thread Guido Serassio
Hi Robert, Il 11.41 11/03/2003 Robert Collins ha scritto: On Tue, 2003-03-11 at 21:36, Guido Serassio wrote: Yes, but there is still a problem: max() and min() are already defined on Windows platform. Ah, thats easy. Just protect their defines with #ifndef max ... #endif and #ifndef min ...

Re: Another new build problem on nt branch

2003-03-11 Thread Robert Collins
On Tue, 2003-03-11 at 22:42, Guido Serassio wrote: Hi, I have found a new build problem trying to build the nt branch: comm.cc:57:18: macro connect requires 3 arguments, but only 1 given comm.cc:57: variable or field `connect' declared void ... #define connect(s,n,l) squid_connect(s,n,l)

Re: [PATCH]: Linux Transparent Proxy

2003-03-11 Thread Henrik Nordstrom
tis 2003-03-11 klockan 12.16 skrev Gianni Tedesco: Yeah that is what the current check is but as I say this is pretty useless unless the capability system allows for dropping root privs while keeping CAP_NET_ADMIN. I'm not too familiar with the capability syscalls so I'll take a look. Either

Re: [PATCH]: Linux Transparent Proxy

2003-03-11 Thread Gianni Tedesco
On Tue, 2003-03-11 at 13:08, Henrik Nordstrom wrote: Of the three only the last is somewhat functioning in a stock Linux system, but it is actually the other two methods which makes capabilities interesting as a security tool as they provide means whereby limited trust can be given to

Re: Problem with origin server connections

2003-03-11 Thread Henrik Nordstrom
tis 2003-03-11 klockan 14.50 skrev Brian Akins: Yes that is one of the symptoms. So half_closed_clients affects origin servers as well. It affects how quickly Squid detects that the client connection has gone away, which in turn affects origin server connections. The worse problem, however,

Re: Problem with origin server connections

2003-03-11 Thread Andres Kroonmaa
On 11 Mar 2003, at 15:55, Henrik Nordstrom [EMAIL PROTECTED] wrote: The worse problem, however, is once this probelm occurs (origing servers partially down) squid refuses to serve some objects from cache. The objects are in the cache and fresh, but squid does an IMS to the origin for

Re: Problem with origin server connections

2003-03-11 Thread Henrik Nordstrom
tis 2003-03-11 klockan 16.40 skrev Andres Kroonmaa: Not sure if this could be valid reason, but can it be that when squid goes for origin check, url is put into private state, invalidating local copy until origin reply allows it to become cached again. And if origin reply never comes, all

Re: Problem with origin server connections

2003-03-11 Thread Adrian Chadd
On Mon, Mar 10, 2003, David Nicklay wrote: Brian and I have been trying to puzzle out a problem we are having related to back end origin server connections initiated by squid. We have squid (2.5.stable1) set up in a reverse proxy configuration pointing at a group of origin servers which

about squid internals

2003-03-11 Thread atit_ldce
i find that peer selection is based on follwing algorithms peer_sa_none peer_sa_digest peer_sa_icp peer_sa_netdb what is priority of this alogorithms if all are enabled what is purpose of aclCheck_t structure can u suggest non-technical name for this struct what command line opiton i have to

Re: about squid internals

2003-03-11 Thread Henrik Nordstrom
On Wednesday 12 March 2003 11.37, atit_ldce wrote: i find that peer selection is based on follwing algorithms peer_sa_none peer_sa_digest peer_sa_icp peer_sa_netdb what is priority of this alogorithms if all are enabled The order they are used in peerSelectFoo(). what is purpose of