Re: [squid-users] cannot use squid-3.5.x for production

2015-07-01 Thread Tom Tom
Hi Othmar The same behaviour here with squid 3.5.5: # Catching an existing file results in a correct 200: $ curl -x proxy:3128 -I ftp://mirror.switch.ch/README HTTP/1.1 200 OK Server: squid Mime-Version: 1.0 Date: Wed, 01 Jul 2015 07:58:28 GMT Content-Type: text/plain Last-Modified: Wed, 05 Dec

[squid-users] Squid3 authentification proxy and method CONNECT SSL

2015-07-01 Thread Alexandre Magnat
Hello, I use Squid3 (3.1.20) with Squidguard filtering linked with an user 's authentication on a OpenLDAP. But, recurrently, Firefox, Thunderbird, Chrome (certainly IE) ask again frequently the login and password in a popup. It seem, the popup authentication appear when the browser try a

Re: [squid-users] cannot use squid-3.5.x for production

2015-07-01 Thread Othmar Truniger
Thank you Amos, I'm glad I got your attention on this. I realized that when I did a quick code comparison. I also hope we get a quick fix for this because I would like to upgrade to a supported version soon. Othmar The FTP handling code was re-written and shuffled around a lot to get FTP

Re: [squid-users] Squid3 authentification proxy and method CONNECT SSL

2015-07-01 Thread Alexandre Magnat
Hi Amos; Thanks you for this complete response. You're true, I have to upgrade my Debian :) soon ! For the conf, I have put this value in my squid.conf auth_param ntlm keep_alive off auth_param negotiate keep_alive off but it seems it's not working (one user have call me) to be sure,

Re: [squid-users] cannot use squid-3.5.x for production

2015-07-01 Thread truni...@bluewin.ch
Thanks Tom, as I described in Bug-Id 4279, the whole external FTP communication is working and completed perfectly, as with older releases. It's just that the FTP result status is not put into any http-response. Instead the client-proxy connection stays open 'forever'. Othmar # Catching an

Re: [squid-users] squid version 3.5.5

2015-07-01 Thread Antony Stone
On Wednesday 01 July 2015 at 13:49:00 (EU time), Paul Martin wrote: Hello, I am using 2 machines with 2 squid versions, same squid.conf and both with 700 Http requests/sec. -squid version 3.3.8: I have 40k squid cache objects -squid version 3.5.5: I have 2k squid cache objects Do

Re: [squid-users] cannot use squid-3.5.x for production

2015-07-01 Thread Amos Jeffries
On 1/07/2015 9:24 p.m., truni...@bluewin.ch wrote: Thanks Tom, as I described in Bug-Id 4279, the whole external FTP communication is working and completed perfectly, as with older releases. It's just that the FTP result status is not put into any http-response. Instead the client-proxy

[squid-users] squid version 3.5.5

2015-07-01 Thread Paul Martin
Hello, I am using 2 machines with 2 squids versions,same squid.conf and both with 700 Http requests/sec. -squid version 3.3.8: I have 40k squid cache objects -squid version 3.5.5: I have 2k squid cache objects Do you have an idea why squid cache objects is so different with squid version 3.5.5

Re: [squid-users] Squid3 authentification proxy and method CONNECT SSL

2015-07-01 Thread Amos Jeffries
On 1/07/2015 8:55 p.m., Alexandre Magnat wrote: Hello, I use Squid3 (3.1.20) Please upgrade. with Squidguard filtering linked with an user 's authentication on a OpenLDAP. But, recurrently, Firefox, Thunderbird, Chrome (certainly IE) ask again frequently the login and password in a

Re: [squid-users] squid version 3.5.5

2015-07-01 Thread Amos Jeffries
On 1/07/2015 11:49 p.m., Paul Martin wrote: Hello, I am using 2 machines with 2 squids versions,same squid.conf and both with 700 Http requests/sec. -squid version 3.3.8: I have 40k squid cache objects -squid version 3.5.5: I have 2k squid cache objects Do you have an idea why squid

Re: [squid-users] acl for redirect

2015-07-01 Thread Mike
Rafael, We're trying to keep the setups lean, and primarily just deal with google and youtube, not all websites. ICAP processes deal with a whole new layer of complexity and usually cover all websites, no just the few. On 6/30/2015 16:17 PM, Rafael Akchurin wrote: Hello Mike, May be it is

Re: [squid-users] acl for redirect

2015-07-01 Thread Marcus Kool
The article does not say to change from a proxy to a DNS server. Instead, it says to add an entry for google to your own DNS server (the one that Squid uses) and continue to use your proxy. Marcus Marcus, This is multiple servers used for thousands of customers across North America, not an

Re: [squid-users] Squid kerberos_ldap_group ACL dependencies on SUSE12.

2015-07-01 Thread Tom Tom
Whats the error-message? I also run a SLES12-Box with kerberos-auth. I had to ensure, that in the users-path, from which you try to configure make make install, the following directories are present: export PATH=$PATH:/usr/lib/mit/bin:/usr/lib/mit/sbin Regards, Tom On Wed, Jul 1, 2015 at 6:54

Re: [squid-users] acl for redirect

2015-07-01 Thread Mike
This is a proxy server, not a DNS server, and does not connect to a DNS server that we have any control over... The primary/secondary DNS is handled through the primary host (Cox) for all of our servers so we do not want to alter it for all several hundred servers, just these 4 (maybe 6). I

[squid-users] Squid kerberos_ldap_group ACL dependencies on SUSE12.

2015-07-01 Thread Ashish Behl
Hello All, I have been trying to compile squid on SUSE12 enterprise, but the only option that fails is external ACL kerberos_ldap_group. Can someone please let me know the dependencies for this external helper? I have tried my best but cannot find a reason why this does not build.. Please note

[squid-users] Personal Request

2015-07-01 Thread Ignazio Raia
‎Good morning Amos, I would unsuscribe from the mailing list. I have unsuscribed from the forum yet, but i receive mail again. I found the forum very useful, but at the moment i have a different mission  in my firm. With reguards Ignazio Raia Invio eseguito dallo smartphone BlackBerry 10.  

Re: [squid-users] squid version 3.5.5

2015-07-01 Thread Paul Martin
Hello Thanks and just another question about internet bandwith I notice -squid version 3.3.8: I have 40k squid cache objects -squid version 3.5.5: I have 2k squid cache objects Does it mean I need x10 to x20 times more internet bandwith network with squid 3.5.5 compare to 3.3.8 ? Because if I

[squid-users] a lot of TCP_SWAPFAIL_MISS/200

2015-07-01 Thread HackXBack
after upgrading to 3.5.5 i see in cache.log 2015/07/02 01:51:51 kid1| DiskThreadsDiskFile::openDone: (2) No such file or directory 2015/07/02 01:51:51 kid1| /cache01/2/16/AA/0016AA3B - ORIGINAL_DST/203.77.186.75 video/mp4 access.log TCP_SWAPFAIL_MISS/200 -- View this message in

Re: [squid-users] cannot use squid-3.5.x for production

2015-07-01 Thread truni...@bluewin.ch
Not much reaction on my statements so far. So let me ask: is anyone actually receiving a valid 404-http-response from squid 3.5.x when trying to download a file which does not exist on the FTP-server? I don't and I think it's a bug with 3.5.x and I wonder why I seem to be the only one facing