Re: [squid-users] MS update woes

2016-01-25 Thread Alex Samad
Hi Sorry I had redacted some " auth_param negotiate program /usr/bin/ntlm_auth --helper-protocol=gss-spnego --configfile /etc/samba/smb.conf-squid auth_param negotiate children 20 startup=0 idle=3 auth_param negotiate keep_alive on auth_param ntlm program /usr/bin/ntlm_auth

Re: [squid-users] MS update woes

2016-01-24 Thread Amos Jeffries
On 25/01/2016 11:20 a.m., Alex Samad wrote: > Hi > > Seems like I getting a bit confused in my conf now .. with > never_direct, always_direct. and miss_access > never_direct and always_direct determine whether cache_peer are required or allowed to be used on that connection respectively. You

Re: [squid-users] MS update woes

2016-01-24 Thread Alex Samad
Hi Seems like I getting a bit confused in my conf now .. with never_direct, always_direct. and miss_access # ## # acl # ## acl sblMal dstdomain -i "/etc/squid/lists/squid-malicious.acl" acl sblPorn dstdomain -i "/etc/squid/lists/squid-porn.acl" acl localnet src 10.32.80.0/24 acl localnet_auth

Re: [squid-users] MS update woes

2016-01-19 Thread Alex Samad
Oh I am missing something. your saying the actualy get include more past the ? and that squid logging isn't recording it ! So what I really need to do is modify the original to exclude any urls that have ? something like ? "windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip)[^?]"

Re: [squid-users] MS update woes

2016-01-19 Thread Amos Jeffries
On 20/01/2016 1:56 p.m., Alex Samad wrote: > Oh > > I am missing something. your saying the actualy get include more past > the ? and that squid logging isn't recording it ! Yes. There is part of the URL that is not logged by default. Sometimes that part is very big by many KB, and/or wrongly

Re: [squid-users] MS update woes

2016-01-18 Thread Amos Jeffries
On 18/01/2016 1:58 p.m., Alex Samad wrote: > Hi > > so I have this in place now > > This works well for delaying YAY > > # > # Delay Pools > # http://wiki.squid-cache.org/Features/DelayPools > # >

Re: [squid-users] MS update woes

2016-01-18 Thread Alex Samad
On 19 January 2016 at 16:59, Amos Jeffries wrote: > > Hmm. Are you using the exact same HTTP headers as WU tools on the other > machines do to prefetch the URL into the cache ? I have a script that checks the squid logs and then does a download of the files through the

Re: [squid-users] MS update woes

2016-01-18 Thread Amos Jeffries
On 19/01/2016 7:11 p.m., Alex Samad wrote: > Hi > > Think I answered my own on this > refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 > > > Does the last refresh_pattern config win ? > No, this one does: "windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip)" The problem is

Re: [squid-users] MS update woes

2016-01-18 Thread Alex Samad
On 19 January 2016 at 16:59, Amos Jeffries wrote: >> refresh_pattern -i >> microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% >> 129600 reload-into-ims >> refresh_pattern -i >> windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 >> 80%

Re: [squid-users] MS update woes

2016-01-18 Thread Alex Samad
Hi Think I answered my own on this refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 Does the last refresh_pattern config win ? On 19 January 2016 at 17:08, Alex Samad wrote: > On 19 January 2016 at 16:59, Amos Jeffries wrote: >>> refresh_pattern -i

[squid-users] MS update woes

2016-01-17 Thread Alex Samad
Hi so I have this in place now This works well for delaying YAY # # Delay Pools # http://wiki.squid-cache.org/Features/DelayPools # http://www.serverwatch.com/tutorials/article.php/3357241/Reining-in-Bandwidth-With-Squid-Proxying.htm delay_pools 1 delay_class 1 1 # 10Mb/s fille rate , 20Mb/s

Re: [squid-users] MS Update

2016-01-11 Thread Alex Samad
Hi On 11 January 2016 at 18:54, Amos Jeffries wrote: >> guessing I have to bump up the 200M max to 800mb. > > Maybe. But IMHO use the ACLs tat range_offset_limit can take. your suggesting to limit the offset limit to just the windows update sites > >> are the other values

Re: [squid-users] MS Update

2016-01-11 Thread Amos Jeffries
On 11/01/2016 11:18 p.m., Alex Samad wrote: > Hi > > On 11 January 2016 at 18:54, Amos Jeffries wrote: >>> guessing I have to bump up the 200M max to 800mb. >> >> Maybe. But IMHO use the ACLs tat range_offset_limit can take. > > your suggesting to limit the offset limit to

Re: [squid-users] MS Update

2016-01-10 Thread Amos Jeffries
On 11/01/2016 2:33 p.m., Alex Samad wrote: > Hi > > I burnt up 172G of download in 24 hours with multi machines doing the > download of the same file (MS SQL patch) > > I think I am running into the same issue > > > So multiple machines are trying to do the download... > Q) why don't they

[squid-users] MS Update

2016-01-10 Thread Alex Samad
Hi I burnt up 172G of download in 24 hours with multi machines doing the download of the same file (MS SQL patch) I think I am running into the same issue So multiple machines are trying to do the download... Q) why don't they share the same download ! 1452459804.945 64052 10.172.208.108