Re: changes to make mib.txt work with current net-snmp

2003-02-07 Thread Duane Wessels
On Fri, 7 Feb 2003, David Luyer wrote: You can make that more compact as: SQUID-MIB DEFINITIONS ::= BEGIN enterprises OBJECT IDENTIFIER ::= { iso org(3) dod(6) internet(1) private(4) 1 } nlanr OBJECT IDENTIFIER ::= { enterprises 3495 } (you can merge those two lines also, but that's

of possible interest to ICAP developers

2003-06-19 Thread Duane Wessels
http://shweby.sourceforge.net/ I find their logo interesting, especially since the badmouth Squid in http://shweby.sourceforge.net/doc.php

Re: Making statCounter.syscalls.disk counters more consistent

2003-07-17 Thread Duane Wessels
On Thu, 18 Jul 2003, Robert Collins wrote: This won't increment the counters: the statCounter used by cachemanager is not the statCounter available to the external unlinkd process. yeah, my mistake, it belongs in the other part. None of the above are safe. They are all potentially racey

MAGIC1 in src/fs/aufs/store_asyncufs.h

2003-08-04 Thread Duane Wessels
We have: #define NUMTHREADS (Config.cacheSwap.n_configured*16) #define MAGIC1 (NUMTHREADS*Config.cacheSwap.n_configured*5) which means: #define MAGIC1 (Config.cacheSwap.n_configured*16*Config.cacheSwap.n_configured*5) It seems wrong to me that MAGIC1 is proportional to the SQUARE

Re: Squid-2.5 bugs to kill

2003-08-14 Thread Duane Wessels
On Sun, 10 Aug 2003, Henrik Nordstrom wrote: There is now 4 bugs on the list of Squid-2.5 issues classified as worth to fix during the 2.5 cycle, preferably soonish to have them included in the upcoming 2.5.STABLE4 release. Not in your list is a relatively minor ICP timeout bug: #736: ICP

Re: squid-2.5 and coss

2003-08-20 Thread Duane Wessels
Well, theoretically, I should be able to easily forwardport my COSS changes to 3.0 once I know it works. Believe me, once its running I'm going to be looking to move to 3.0. kqueue and epoll are my next thing to sell. :) Adrian, FYI, my coss changes have not been commited to squid-3 yet

Re: squid-2.5 and coss

2003-08-27 Thread Duane Wessels
Here's a fun suggestion from our friend Robert - how about creating a _directory_ instead of a file for the COSS cachedir? Then we can place the store logfile in there, the coss storefile in there _and_ any other metadata. It'd make life a whole lot easier and mean you won't get bitten by the

Re: permanently enabling some -DPURIFY features.

2003-09-03 Thread Duane Wessels
On Wed, 3 Sep 2003, Robert Collins wrote: How do folk feel about us (post 3.0) permanently enabling the tidy cleanup stuff currently enabled by -DPURIFY, leaving the assert() changes and the mem pools disabling alone? I see no harm having squid behave well on shutdown, and it will help

Re: Why is no-cache ignored on pending objects?

2004-01-02 Thread Duane Wessels
On Sun, 21 Dec 2003, Henrik Nordstrom wrote: There is a section in the clientProcessRequest2() on cache hit processing relating to the no-cache flags on requests for STORE_PENDING objects which I do not quite get what it is about, and the CVS log comment does not make me any wiser.. what

Re: Squid logfile 2GB problem

2004-02-05 Thread Duane Wessels
On Wed, 4 Feb 2004, Luigi Gangitano wrote: Hi, I'm the Debian maintainer for squid and got a bugreport about the 3GB limit on logfiles. I saw bug #319 and noticed that no solution was implemented except the --enable-large-files option in HEAD. Is there any way to backport that patch for

Re: Squid-2.5.STABLE5 still not ready

2004-02-11 Thread Duane Wessels
To make things even more strange this problem apparently is introduced some time in November, but there has not been any ipcache or dlink related changes from what I can see.. Really? src/ipcache.c had a minor change (+7 -3 lines) on Nov 28 and a very big change ( +89 -81 lines) on Dec 6.

Re: Squid-2.5.STABLE5 still not ready

2004-02-11 Thread Duane Wessels
This change looks suspicious to me: @@ -199,11 +199,15 @@ static void ipcacheAddEntry(ipcache_entry * i) { -hash_link *e = hash_lookup(ip_table, i-hash.key); +ipcache_entry *e = (ipcache_entry *) hash_lookup(ip_table, i-hash.key); if (NULL != e) { - /* avoid colission */

Re: icap support in squid

2004-03-31 Thread Duane Wessels
On Wed, 31 Mar 2004, Peter V. Saveliev wrote: ... I'm author of drweb-icapd server, and interested in ICAP support in Squid proxy. It would be very nice, if somebody from developers has agreed to help me on this topic. You can mail me: peet at drweb.com ('cause of moderated access, I'm

Re: How does it work?

2004-05-21 Thread Duane Wessels
On Thu, 13 May 2004, Mati wrote: hi, I was wondering if there are some tools that you use to test squid? At my day job we have a functionality/compliance tool called Co-Advisor. We would be happy to give you access to the on-line version so you can test your features. In order to use the

Re: Secure basic authentication. Is it possible?

2004-05-21 Thread Duane Wessels
On Fri, 21 May 2004, [koi8-r] Slivarez ![koi8-r] wrote: Hi, ALL. I'm using squid-2.5.STABLE5+basic_auth(ncsa_auth). BUT simply Sniffer can get USERID and PASSWORD from tcp packets. Is there any possibility to make basic authentication more secure? Basic authentication is fundamentally

Re: Microsoft NTLM proxy authentication

2004-06-08 Thread Duane Wessels
On Mon, 7 Jun 2004, dilox wrote: I'looking for Microsoft NTLM proxy authentication, but http://devel.squid-cache.org/cgi-bin/diff2/ntlm?auth_rewrite says: Sorry, patch for ntlm branch of auth_rewrite in squid is not yet available. Please try again in a few hours If the problem persists

Re: squid-2.5 / ICAP patch

2004-08-04 Thread Duane Wessels
I've finally committed your patch to the sourceforge CVS. They look good to me, but I have not tested them. Thanks a lot! Duane W.

Job opportunity with The Measurement Factory

2005-01-18 Thread Duane Wessels
More info at http://www.measurement-factory.com/jobs.html Duane W.

Squid-3 and gcc 2.95

2005-02-18 Thread Duane Wessels
I spent half a day trying to figure out why Squid-3-cvs was core dumping in the debugs() macro. Alex suggested that GCC 2.x may have bugs in its support for stringstream. With GCC 3.3 it no longer dumps core at that spot. Give this, shouldn't we be checking the GCC version in ./configure? DW

Re: Time to merge squid3-ipv6 into HEAD ?

2005-07-07 Thread Duane Wessels
On Mon, 27 Jun 2005, Rafael Martinez Torres wrote: I think it's a good opportunity to merge now. Then, my merge wtih HEAd will became simpler. I am willing to attempt the merge and let you know how it goes... Duane W.

Re: Need help with dns_query patch

2005-07-14 Thread Duane Wessels
On Wed, 13 Jul 2005, Luigi Gangitano wrote: Hi, I packaged an update squid 2.4.STABLE6 for Debian woody with the backported squid-2.5.STABLE9-dns_query from RedHat RHSA-2005-489, which is quite straight. With this patch squid fails[1] with rfc1035.c:410: rfc1035RRUnpack: Assertion `(*off)

Re: Dijjerizer redirector for squid

2005-07-15 Thread Duane Wessels
On Fri, 15 Jul 2005, daniele wrote: Hi! I don't know if that is the right place. Anyway, I wrote a simple redirect_program for Squid to redirect dijjerizable urls to a dijjer server. Maybe someone is interested: you can find the description and the code here: -

Re: LRU frequency

2005-07-18 Thread Duane Wessels
On Mon, 18 Jul 2005, Lucas Brasilino wrote: Hi! I looking around LRU informations to get into the code. I read a doc, I really don't remember where, that says LRU replacement policy runs every second. Is that correct ? So do heap LFUDA and GDSF ? It is true. This is the call in store.c:

Re: Summary of Squid-2.6 opinions

2005-11-02 Thread Duane Wessels
No answer yet: * Duane Wessels * Robert Collins I have mixed feelings about 2.6. On one hand I think 2.5 has lived too long and it looks bad that we have not incremented the stable branch number for years. But on the other hand I feel cheated because I remember being scolded for adding

Re: .cvsignore files

2005-11-08 Thread Duane Wessels
On Tue, 8 Nov 2005, Serassio Guido wrote: Hi, What should be the standard content of a .cvsignore file ? As Alex said, basically any file that gets created by running 'make' on a clean tree. DW

Re: cvs commit: squid3/src/ICAP ICAPModXact.cc

2005-11-23 Thread Duane Wessels
In squid 3 we should not need to use printf, which reduces the weight of 64 bit support a lot. find . -name '*.cc' | xargs grep -i printf | wc -l 1609

make distclean annoyance

2005-12-01 Thread Duane Wessels
Does anyone know how to make 'make distclean' work again for squid3? Making distclean in auth ... rm -rf basic/.deps digest/.deps negotiate/.deps ntlm/.deps ... Making distclean in . Makefile, line 2358: Could not find auth/basic/.deps/basicScheme.Po Makefile, line 2359: Could not find

Re: [squid2.5-icap] patch: X-Server-IP support

2005-12-22 Thread Duane Wessels
On Wed, 14 Dec 2005, olivier wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, I recently made a small patch to add the X-Server-IP feature in Squid2.5. Basically: send the origin server ip in the ICAP headers if it's available from the ip cache. I've been using it in

Re: --disable-internal-dns

2006-02-24 Thread Duane Wessels
On Sat, 14 Jan 2006, Rafael Martinez Torres wrote: Hi: I need transiently to bypass squid3's own dns subsystem, so I compiled with ./configure --disable-internal-dns... Things use to go well, unless you get an alias address, i.e. http://www.google.es bash-2.04$ host www.google.es

Re: Logo

2006-02-24 Thread Duane Wessels
On Mon, 6 Feb 2006, Andrew Pantyukhin wrote: Some time ago I posted to the squid-users list, saying that the old logo looks great whith just a little shadow: Thanks! I've put your shaded logo in place.

Re: wikis...

2006-04-24 Thread Duane Wessels
That's not how I remember it. From what I remember the objection from Duane wrt Kinkies wiki was more of a control and backup issue. docuwiki was selected by Duane as it's trivial to back up, and additionally the back-end content isn't hard to reuse for other purposes later on. I'm happy for

Re: config.test fragments

2006-04-24 Thread Duane Wessels
On Sun, 23 Apr 2006, Guido Serassio wrote: Hi Robert, At 13.17 23/04/2006, Robert Collins wrote: seems to me that if we exported all the autoconf values during a config.test run, they would be more portable: see for instance Guido's recent commit to probe /usr/local as well: unless

Re: so what is involved in calling squid-3.0 'stable'?

2006-04-24 Thread Duane Wessels
My own criteria: be able to deploy Squid3 with ESI as a reverse accelarator under real load without it falling over (I don't run Squid as a forward-cache at all). Can somebody point to a current how to help with Squid3 development document? E.g., I don't even know how to get a current checkout

squid3 commit heads up: ClientBody - BodyReader

2006-04-26 Thread Duane Wessels
I'm about ready to commit some changes related to the way Squid handles request bodies. The ClientBody class didn't work very well with ICAP, which also needs to read message bodies. I've replaced it with a BodyReader class and made a number of related changes. DW

Re: refresh.cc - refreshIsCachable()

2006-04-26 Thread Duane Wessels
On Tue, 25 Apr 2006, Doug Dixon wrote: It looks like the call to refreshCheck() is only used to short-circuit the function (if you can call it a short circuit, given the size of the callout) and to update some statistics. The main, and original, purpose of refreshCheck() is to check the

Re: refresh.cc - refreshIsCachable()

2006-04-27 Thread Duane Wessels
The return value of refreshIsCachable() can be calculated without making a call to refreshCheck(). I.e. you can remove the call to refreshCheck() from refreshIsCachable(), and refreshIsCachable() will still return the correct result. Sorry, still not following you. refreshIsCachable() uses

from IRC

2006-04-27 Thread Duane Wessels
(I don't get why xassert is disabled when PURIFY is set.. Duane?) I don't remember exactly any more. Maybe because assert() interferred with purify's ability to get a good stack trace. It can be removed as far as I'm concerned.

Re: BodyReader

2006-04-27 Thread Duane Wessels
On Fri, 28 Apr 2006, Henrik Nordstrom wrote: tor 2006-04-27 klockan 19:27 + skrev [EMAIL PROTECTED]: Replacing ClientBody class with BodyReader. Seems to be some issues there, maybe 64-bit related. BodyReader.cc: In member function void BodyReader::read(void (*)(MemBuf, void*),

Re: HTTPMSGLOCK/UNLOCK

2006-05-02 Thread Duane Wessels
On Sat, 29 Apr 2006, Robert Collins wrote: I'm unclear why we have these macros rather than smart pointers... having these macros as a pattern means we'll need to learn LOCK/UNLOCK macros for every class that is in use. I tried and found it very difficult. Perhaps you can do better.

Re: inline the ICAP Makefile ?

2006-05-02 Thread Duane Wessels
On Sun, 30 Apr 2006, Robert Collins wrote: Duane, how do you feel about me inlining the ICAP Makefile into the src Makefile ? It makes it easier for automake to track dependencies, particular when building individual files - less recursion etc. Um, I guess. I certainly don't have a strong

Re: Squid-3 errors and blank pages

2006-05-02 Thread Duane Wessels
On Tue, 2 May 2006, Reuben Farrelly wrote: Squid-3 cvs seems to be functioning for me now - it's usable again but I am seeing lots of errors like this logged on random pages: 2006/05/01 23:07:12| http.cc(1866) Transaction aborted while reading HTTP body This corresponds with this code

Re: Current -cvs crashing when invalid hostname in client requested URL

2006-05-07 Thread Duane Wessels
On Sun, 7 May 2006, Reuben Farrelly wrote: Seems to be new breakage in the last few days, but if I try to surf to a URL which is invalid eg www.firfox.org, squid-3/CVS dies an ugly death: Looks like this was caused by one of my bugfixes yesterday. I backed it out and will look for

Re: 3.0 branding - release plans - etc

2006-09-11 Thread Duane Wessels
On Sun, 10 Sep 2006, Robert Collins wrote: So, chatting with Adrian today, and some friends, I have some thoughts about what precisely 3.0 should be. I think 3.0 STABLE1 when release should be: * more functional than 2.6 STABLEX - there should be no regressions in functionality. * within

Re: font for the new artwork buttons?

2006-09-29 Thread Duane Wessels
On Wed, 27 Sep 2006, Robert Collins wrote: Duane, do you know what font was used in making the sample buttons for the new artwork ? It is called Allspeed.I added the font package file to the website cvs under share/Fonts

proposal to remove port 563 from default ACLs

2006-09-29 Thread Duane Wessels
Our default ACL configuration allows CONNECT requests to port 563, which is for NNTP over SSL. Assuming that nobody really uses NNTP over SSL, especially through an HTTP proxy, I suggest that we remove it from the defaults.

Re: cvs commit: squid/src stat.c tools.c

2006-11-03 Thread Duane Wessels
On Thu, 2 Nov 2006, Henrik Nordstrom wrote: ons 2006-11-01 klockan 13:58 -0700 skrev Duane Wessels: struct kb_t uses squid_off_t, which might be signed. That means that kb_t.kb could overflow and become negative in kb_incr(). If we detect that it is negative, add increasing powers

Re: some help with the website please

2007-04-12 Thread Duane Wessels
On Wed, 4 Apr 2007, Adrian Chadd wrote: I hate to ask for help when I said I'd do it, but I'm running very short on spare time at the moment and I'd appreciate some help in finishing off the new.squid-cache.org website so its ready to be made live. Someone with server access: help, please?

Re: cvs commit: squid3/src main.cc

2007-04-12 Thread Duane Wessels
On Thu, 12 Apr 2007, Alex Rousskov wrote: rousskov2007/04/12 08:51:10 MDT Modified files: src main.cc Log: This change should fix bug #1837: Segfault on configuration error When quitting on a fatal error, such as a configuration error, Squid may need to write

Re: cvs commit: squid3/src Store.h protos.h store.cc store_client.cc store_swapout.cc

2007-04-19 Thread Duane Wessels
On Wed, 18 Apr 2007, Tsantilas Christos wrote: Hi Duane, the StoreEntry::swapOut() does not compile when SIZEIF_OFF_T==4 I am using the following patch, but I am not sure if it is OK ... Thanks, I've applied the patch.

Re: squid3-largeobj and %lld

2007-04-19 Thread Duane Wessels
On Thu, 19 Apr 2007, Robert Collins wrote: On Wed, 2007-04-18 at 20:52 +0200, Guido Serassio wrote: I think that here should be used the standard ISO C99 macro PRId64 like in Squid 2.6. This allow the portability of the code: on Windows %lld is not available, when on some Unix 64 bit

Re: Removed some uses of RefCount::getRaw() in DelayPool.cc

2007-04-23 Thread Duane Wessels
On Sun, 22 Apr 2007, Tsantilas Christos wrote: Hi Duane, I think there is an error in DelayPool.cc file and squid3 does not compiles if delay pools are enabled. Thanks, I committed your fix. Strange that it compiled okay for me with --enable-delay-pools on FreeBSD (gcc 3.4.2). DW

Re: [squid-users] Question about authenticateNegotiateHandleReply

2007-05-09 Thread Duane Wessels
On Wed, 9 May 2007, Markus Moeller wrote: I have written a helper program for the negotiate protocol (only the Kerberos part of it). I can get it to determine the correct userid but somehow the reply doesn't get back to squid. I don't get any debug from authenticateNegotiateHandleReply. What

Re: Squid 3 download page stuck

2007-05-14 Thread Duane Wessels
On Sun, 13 May 2007, Henrik Nordstrom wrote: s??n 2007-05-13 klockan 10:39 +0200 skrev Guido Serassio: The Squid 3 download page is stuck at 9 May, may be related to PRE6 release. Checking... yes. The -CVS part of the version tag should not be removed. It's removed automatically by the

Re: tarball help

2007-07-15 Thread Duane Wessels
On Mon, 16 Jul 2007, [EMAIL PROTECTED] wrote: hey Guys, I'm thinking its about time I got around to making a source D/L tarball of the IPv6 branch. Am I correct is assuming that I can run bootstrap locally and bundle the results for people just to run configure and make themselves? or is

Re: Event order

2007-07-26 Thread Duane Wessels
On Thu, 26 Jul 2007, Alex Rousskov wrote: I am leaning towards (2) for now because it minimizes the modifications and risk. The attached patch implements that option. Your patch is simple enough that I do not find it offensive :-) My only suggestion is to add more comments, in particular

Re: cvs commit: www2/content/Download mirrors.dyn

2007-08-06 Thread Duane Wessels
On Sun, 5 Aug 2007, Amos Jeffries wrote: Don't know what the bug was (background-color?) Missing $ RCS file: /server/cvs-server/squid/www2/content/Download/mirrors.dyn,v retrieving revision 1.11 retrieving revision 1.12 diff -u -3 -p -r1.11 -r1.12 --- mirrors.dyn 4 Aug 2007 01:55:12 -

RC1 time

2007-09-30 Thread Duane Wessels
Alex tells me that its time to release Squid-3 RC1. I plan to start the process tonight. If all goes well it should be done and announceable in 24-48 hours. DW

Re: RC1 time

2007-10-01 Thread Duane Wessels
On Sun, 30 Sep 2007, Duane Wessels wrote: Alex tells me that its time to release Squid-3 RC1. I plan to start the process tonight. If all goes well it should be done and announceable in 24-48 hours. squid-3.0.RC1 is now on the master web/ftp sites for download. Is now a good time

Re: positive_dns_ttl

2007-10-10 Thread Duane Wessels
On Wed, 10 Oct 2007, Mark Nottingham wrote: From ipcache.c; if (ttl == 0 || ttl Config.positiveDnsTtl) ttl = Config.positiveDnsTtl; if (ttl Config.negativeDnsTtl) ttl = Config.negativeDnsTtl; i-expires = squid_curtime + ttl; As I read this, if the TTL from an

Re: [squid-users] Solaris/OpenSSL/MD5 Issues

2007-11-13 Thread Duane Wessels
The patches to make MD5 work on Solaris have broken things on FreeBSD (at least) which also has a sys/md5.h. Compile fails with error: `MD5_DIGEST_LENGTH' was not declared in this scope It seems to me that the original problem was just that Squid's own MD5 routines are using names that collide

Re: caching dynamic content

2007-11-14 Thread Duane Wessels
On Thu, 15 Nov 2007, Adrian Chadd wrote: What about default refresh_pattern to not cache cgi-bin and/or ? URLs? I assume you mean to always refresh (validate) cgi-bin and/or ? Because if you don't want them to be cached then the 'cache' access list is the place to do that. yes, I could

Re: caching dynamic content

2007-11-14 Thread Duane Wessels
On Thu, 15 Nov 2007, Adrian Chadd wrote: Ideally I'd like to cache cgi-bin / ? content if cache information is given (max-age, Expires, etc; henrik knows more about the options than right. I'm not sure my current refresh patterns handle this: refresh_pattern ^ftp: 1440

Re: caching dynamic content

2007-11-14 Thread Duane Wessels
On Thu, 15 Nov 2007, Adrian Chadd wrote: I'd like to see something default in the next Squid release, so we can release it with a few interesting tag lines like Can cache google maps! I can support removing '?' from the default QUERY acl definition. I cannot support adding default

ESI on Solaris

2007-11-15 Thread Duane Wessels
On Sat, 10 Nov 2007, Randall DuCharme wrote: Ok this is strange. It looks like it's trying to compile ESI specific support in yet I've not done --enable-esi. In autoconf.h #define ESI 0 is present. I've removed the -Werror flag for now so the multiple inclusion warning shouldn't be

Re: ESI on Solaris

2007-11-15 Thread Duane Wessels
On Fri, 16 Nov 2007, Amos Jeffries wrote: Could you make that 'USE_ESI' instead? that seems to be a defacto standard within squid for enabling components. Easier to keep things consistent. I could make it USE_SQUID_ESI if you like. I'm still concerned that USE_ESI is too generic and

Re: Problem with CVS pserver?

2008-04-14 Thread Duane Wessels
On Wed, 9 Apr 2008, Benno Rice wrote: I've started getting this today: cvs -z9 -d :pserver:[EMAIL PROTECTED]:/squid co squid open /dev/null failed Operation not supported Has something broken on the CVS server? It was broken when I upgraded the OS from FreeBSD-5 to -6. Fixed now. DW

some debug message cleanup in squid-2

2008-04-24 Thread Duane Wessels
FYI I'm planning to fix and commit all cases that I can find where debugging messages contain the wrong function name. For example: @@ -3959,8 +3959,8 @@ clientTryParseRequest(ConnStateData * co /* Limit the number of concurrent requests to 2 */ for (n = conn-reqs.head, nrequests = 0;

Re: [noc] translation toolkit

2008-08-08 Thread Duane Wessels
On Tue, 5 Aug 2008, Amos Jeffries said: Can someone with admin access to squid-cache.org please install the translation toolkit. done. textproc/translate-toolkit has been installed

Squid Developer? (fwd)

2009-02-13 Thread Duane Wessels
Duane: I'm a second year student at the Harvard Business School. Prior to coming back to school for my MBA I was the co-founder of something called Project Honey Pot (www.projecthoneypot.org). Project Honey Pot tracks malicious behavior online. We work with law enforcement agencies worldwide and