Re: [squid-users] strip_query_terms parameter

2015-06-12 Thread Amos Jeffries
On 13/06/2015 5:43 p.m., Mohammad Shakir wrote: > We are using squid 3.4.9 on centos 64bit and getting following issue. > > In access.log we can not see the complete log of filehippo.com see the > access.log > > TCP_MISS/301 336 GET > http://filehippo.com/download/file/f9efedf505ee8f42fcaab2569

[squid-users] strip_query_terms parameter

2015-06-12 Thread Mohammad Shakir
We are using squid 3.4.9 on centos 64bit and getting following issue. In access.log we can not see the complete log of filehippo.com see the access.log TCP_MISS/301 336 GET http://filehippo.com/download/file/f9efedf505ee8f42fcaab2569982d439e08c4e88dd569e7c2e68efed55ace44e/ But when we pause th

Re: [squid-users] Proxy Parent

2015-06-12 Thread Amos Jeffries
On 13/06/2015 7:27 a.m., Jonathan Filogna wrote: > Hi all, here's my new situation (still on squid 2.7) Much easier to do these types of things during or after upgrading to current version. 1) The current Squid actually obey HTTP behaviour requirements by default a LOT better than 2.7 is even capa

Re: [squid-users] reverse proxies and Host request header

2015-06-12 Thread Amos Jeffries
On 13/06/2015 2:08 a.m., Julianne Bielski wrote: > I have a general question about the use of the http Host request header by > reverse proxies. > > As I understand it, the Host request header is used by transparent forward > proxies as a way to route a request to the correct > origin server since

Re: [squid-users] Proxy Parent

2015-06-12 Thread Luis Daniel Lucio Quiroz
Quieres que te hagan el trabajo :) jejeje mandame email Luis Daniel Lucio Quiroz CISSP, CISM, CISA Linux, VoIP and much more fun www.okay.com.mx Need LCR? Check out LCR for FusionPBX with FreeSWITCH Need Billing? Check out Billing for FusionPBX with FreeSWITCH 2015-06-12 15:27 GMT-04:00 Jonatha

Re: [squid-users] grab hostnames via SNI to use it for parent proxy

2015-06-12 Thread Atman Sense
Am 2015-06-05 00:22, schrieb Amos Jeffries: You can block by SNI in the ssl_bump checks without having bumped the connection. Like so: # get the public TLS metadata (includes SNI) ssl_bump peek all # block based on SNI matching (or server cert matching) acl blocked ssl::server_name .examp

Re: [squid-users] Is there a way to limit the number of upload/downloads

2015-06-12 Thread Amos Jeffries
On 12/06/2015 11:47 p.m., TarotApprentice wrote: > I've looked through the reference and the nearest thing I can find is > the delay pools. I am trying to limit the number of concurrent > downloads and uploads to save saturating a DSL link. > That would be because the number of transactions is me

Re: [squid-users] mimeInit: /etc/squid/mime.conf: (13) Permission denied

2015-06-12 Thread Amos Jeffries
On 12/06/2015 10:05 p.m., Kinkie wrote: > Hi all, > file system corruption at times manifests itself as permission problems. > Can you fsck? > Good idea. I'm also wondering about that use of execute permission on text files inside /etc subdirectory. Seems bonkers. And I've seen in passing a fe

[squid-users] Proxy Parent

2015-06-12 Thread Jonathan Filogna
Hi all, here's my new situation (still on squid 2.7) i want to send by DIRECT uservipstr, uservip i want to send by PARENT userti, userlimitado, user200mb, userinternet i want to send by DIRECT all the NTLM users that don't belong to any list of above (ikr, my english sucks) i want to block str

Re: [squid-users] reverse proxies and Host request header

2015-06-12 Thread Antony Stone
On Friday 12 June 2015 at 17:49:38 (EU time), Julianne Bielski wrote: > With virtual hosting, the client is asking for a virtual origin server's > host and DNS enables the ip address for the physical host to respond. The > virtual host still sees "its" hostname in the host header, not the physical

Re: [squid-users] 3.5.0.2 core, constant under heavy load.

2015-06-12 Thread Tory M Blue
On Thu, Jun 11, 2015 at 4:07 PM, Tory M Blue wrote: > Okay well I took the RPM from your counter parts link and it gave me > > http://wiki.squid-cache.org/KnowledgeBase/CentOS > > squid-3.5.0.4-1.el6.x86_64.rpm > > > So am I using the wrong version? > > Thank you sir! :) > > Tory > > Okay Amos, s

Re: [squid-users] reverse proxies and Host request header

2015-06-12 Thread Julianne Bielski
With virtual hosting, the client is asking for a virtual origin server's host and DNS enables the ip address for the physical host to respond. The virtual host still sees "its" hostname in the host header, not the physical host's. With a reverse proxy, the backend origin server doesn't see its Ho

Re: [squid-users] reverse proxies and Host request header

2015-06-12 Thread Antony Stone
On Friday 12 June 2015 at 16:08:59 (EU time), Julianne Bielski wrote: > reverse proxies are always "transparent" from the perspective of > the client and the Host header is often used by the proxy > to map to the correct back end origin server. > > I also think they usually pass the Host header a

[squid-users] reverse proxies and Host request header

2015-06-12 Thread Julianne Bielski
I have a general question about the use of the http Host request header by reverse proxies. As I understand it, the Host request header is used by transparent forward proxies as a way to route a request to the correct origin server since, unlike with an explicit proxy, the host is not included in

Re: [squid-users] How to mark trafic from squid and squidguard

2015-06-12 Thread CIROBOTICS
Thx for your reply. how could I test the visiting website to the pornsite databe and set the tos. regards. 2015-06-12 0:48 GMT+00:00 Amos Jeffries : > On 12/06/2015 12:28 a.m., CIROBOTICS wrote: > > Hi dear is there a mean to mark trafic from squid/squidguard? > > I'd like for example mark all tr

[squid-users] Is there a way to limit the number of upload/downloads

2015-06-12 Thread TarotApprentice
I've looked through the reference and the nearest thing I can find is the delay pools. I am trying to limit the number of concurrent downloads and uploads to save saturating a DSL link. Delay_pools seems to be based upon throttling the speed rather than limiting the number of concurrent up/down

Re: [squid-users] no fallback to ipv4 if ipv6 remote address is non-functional

2015-06-12 Thread Brian J. Murrell
On Fri, 2015-06-12 at 10:13 +1200, Amos Jeffries wrote: > > see Of course, I did see the rest of the messages in the thread. I'm not sure what I'm supposed to be seeing in that particular message though other than 3.4.3 worked

Re: [squid-users] mimeInit: /etc/squid/mime.conf: (13) Permission denied

2015-06-12 Thread Kinkie
Hi all, file system corruption at times manifests itself as permission problems. Can you fsck? On Fri, Jun 12, 2015 at 12:00 PM, yashvinder hooda wrote: > Hi Amos > > Squid pkg version is 3.5.2 and ‎it's running on openwrt. > In logs I can see one more permission related error ‎ and that is: >

Re: [squid-users] mimeInit: /etc/squid/mime.conf: (13) Permission denied

2015-06-12 Thread yashvinder hooda
Hi Amos Squid pkg version is 3.5.2 and ‎it's running on openwrt. In logs I can see  one more permission related error ‎ and that is: ParseEtcHosts: /etc/hosts ()Permission denied Regards, Yashvinder   Original Message   From: Amos Jeffries Sent: Friday 12 June 2015 3:18 PM To: squid-users@lists.s

Re: [squid-users] mimeInit: /etc/squid/mime.conf: (13) Permission denied

2015-06-12 Thread FredB
> > ‎Hi, > Fred > > Squid directory permission is 644 with nobody:root and same is for > mime.conf and squid.conf > Hi Your cache user name is ? nobody ? eg my configuration: cache_effective_user squid in squid.conf /etc/squid drwxr-xr-x 2 squid root4096 juin 3 10:48 squid

Re: [squid-users] mimeInit: /etc/squid/mime.conf: (13) Permission denied

2015-06-12 Thread Amos Jeffries
On 12/06/2015 9:35 p.m., yashvinder hooda wrote: > ‎Hi, > Fred > > Squid directory permission is 644 with nobody:root and same is for mime.conf > and squid.conf > > Regards, > Yashvinder Okay. Wierd. Its not even like Squid is trying to open for write or anything fancy. Its just reading. Ar

Re: [squid-users] Error Resolution (TunnelStateData::Connection:: error )

2015-06-12 Thread Amos Jeffries
On 12/06/2015 5:39 p.m., Iruma Keisuke wrote: > Thank you Amos. > I really appreciate your response. > > We analyzed the trend of FD an error has occurred. > > 2015/06/01_08:52:35 nsu01pint-int01 [cache]2015/06/01 08:52:32| > TunnelStateData::Connection:: error : FD 81: read/write failure: (110)

Re: [squid-users] mimeInit: /etc/squid/mime.conf: (13) Permission denied

2015-06-12 Thread yashvinder hooda
‎Hi,  Fred  Squid directory permission is 644 with nobody:root and same is for mime.conf and squid.conf  Regards, Yashvinder   Original Message   From: FredB Sent: Friday 12 June 2015 2:55 PM Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] mimeInit: /etc/squid/mime.conf: (13)

Re: [squid-users] mimeInit: /etc/squid/mime.conf: (13) Permission denied

2015-06-12 Thread FredB
> > On 11/06/2015 4:47 p.m., yashvinder hooda wrote: > > Squid log says Permission denied for the file /etc/squid/mime.conf > > While permission on it is > > > > -rwxrwxrwx 1 nobody root 11364 May 9 15:40 mime.conf > > And the squid directory permissions ? user nobody ? can you try try ch