[squid-users] Multiple SSL Domains on Reverse Proxy

2014-11-30 Thread Roman Gelfand
Is it possible to listen on port 443 for requests for multiple domains ie... www.xyz.com, www.mno.com, etc...? If yes, could you point me to sample config. Thanks in advance ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squ

[squid-users] Squid WCCP with multiple workers

2014-11-30 Thread Stephen Baynes
Is WCCP supposed to work with Squid multiple workers? It works with 1 worker. If we change the number of workers from 1 to 2 we see it fail. The router no longer is aware of Squid and does not reroute the data to the Squid box. This can be seen on the router with "show ip wccp" . The "Number of S

Re: [squid-users] WARNING: there are more than 100 regular expressions

2014-11-30 Thread navari.lore...@gmail.com
this is the error: WARNING: there are more than 100 regular expressions. Consider using less REs or use rules without expressions like 'dstdomain'. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/WARNING-there-are-more-than-100-regular-expressions-tp46685

Re: [squid-users] squid 3.5x: Active Directory accounts with space issue

2014-11-30 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/11/2014 12:52 a.m., David Touzeau wrote: > > Le 26/11/2014 11:27, Amos Jeffries a écrit : On 24/11/2014 12:01 > a.m., David Touzeau wrote: Hi We have connected 3.5.0.2-20141121-r13666 with Active Directory. It seems where th

Re: [squid-users] Existing root certificate not working with SSL Bump (squid 3.3.10)

2014-11-30 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 27/11/2014 6:45 a.m., HaxNobody wrote: > Alright, I figured out a possible cause. I downloaded the > certificate that the browsers were complaining about, and used > openssl verify to verify against the root certificate that I have. > I got error 20

Re: [squid-users] squid-3.5.0.2-20141031-r13657 crashes

2014-11-30 Thread James Harper
This has happened again a day or so after wiping the cache directory. Core dump this time: #0 StoreEntry::checkCachable (this=this@entry=0x284c440) at store.cc:962 962 getReply()->content_length > store_maxobjsize) || (gdb) bt #0 StoreEntry::checkCachable (this=this@entr

Re: [squid-users] Minor nit with cachemgr.cgi in 3.5.0.2

2014-11-30 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Please report through bugzilla so we do not loose track of this. Amos -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJUeUkXAAoJELJo5wb/XPRjUDcIAIUQIhNmd1OMCSax99wbCTBz LmSYPLwzeu7qE+YWMJiUXwnPxHD07f8SMFwYdczJpeuVDMYGOrb

Re: [squid-users] squid 3.5x: Active Directory accounts with space issue

2014-11-30 Thread David Touzeau
Le 26/11/2014 11:27, Amos Jeffries a écrit : -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 24/11/2014 12:01 a.m., David Touzeau wrote: Hi We have connected 3.5.0.2-20141121-r13666 with Active Directory. It seems where there are spaces in login account squid use only the last argument. For

[squid-users] 2.7.STABLE9 & Error with option deny_info from local requests

2014-11-30 Thread Mark Riede
Hello, I have a strange behavior with Squid 2.7.STABLE9 and local requests which should be intercept by the option deny_info. I am using Squid as a reverse proxy. I have configured a list of subdomains (i.e. subdomain.domain.tld) in a file via the option dstdomain, which will be forwarded to th

Re: [squid-users] Cannot display page correctly with SSL-Bump

2014-11-30 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 27/11/2014 5:38 p.m., Rino M Nur wrote: > Hi, > > Im trying to get ssl bump work correctly but when i get a site with > https then browser display the page with no CSS or javascript. log > : 1417149172.053175 192.168.10.10 TAG_NONE/200 0 CONNEC

Re: [squid-users] RFC2616 headers in bumped requests

2014-11-30 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/11/2014 11:51 p.m., Steve Hill wrote: > On 17/11/14 22:05, Amos Jeffries wrote: > >> Would you mind running an experiment for me? >> >> To see what happens if Squid delivers either of these Via >> headers instead of its current output: >> >> V

Re: [squid-users] long standing bug about aufs on freebsd 10

2014-11-30 Thread dan
FWIW I have this bug in CentOS 6. On Mon, Dec 1, 2014 at 4:48 PM, k simon wrote: > Hi, Lists, >AUFS can not run stable one day and report: > 2014/11/30 07:10:15 kid1| WARNING: swapfile header inconsistent with > available data > 2014/11/30 07:10:15 kid1| Could not parse headers from on disk

[squid-users] long standing bug about aufs on freebsd 10

2014-11-30 Thread k simon
Hi, Lists, AUFS can not run stable one day and report: 2014/11/30 07:10:15 kid1| WARNING: swapfile header inconsistent with available data 2014/11/30 07:10:15 kid1| Could not parse headers from on disk object 2014/11/30 07:10:15 kid1| BUG 3279: HTTP reply without Date: 2014/11/30 07:10:15 kid

Re: [squid-users] WARNING: there are more than 100 regular expressions

2014-11-30 Thread Henrik Nordstrom
tor 2014-11-27 klockan 01:59 -0800 skrev navari.lore...@gmail.com: > "Consider using less REs ..." is not possible. > > if there is no other solution > i will break the files in many files with less then 100 entries. > > Probably will have the same problem with black list. How many REs do you n

Re: [squid-users] Memory Leak Squid 3.4.9 on FreeBSD 10.0 x64

2014-11-30 Thread Doug Sampson
> On 25/11/2014 9:06 a.m., Doug Sampson wrote: > > Recently due to squid 2.7 being EOL'ed, we migrated our squid > > server to version 3.4.9 on a FreeBSD 10.0-RELEASE running on 64-bit > > hardware. We started seeing paging file being swapped out > > eventually running out of available memory. From

[squid-users] Persistent Connections - only one side

2014-11-30 Thread Mathew Marulla
Need to know if this is even possible… We have a PHP app that uses CURL to send requests/get responses from servers of various business partners. The connections to these partner servers are not currently persistent. Setting keep-alive headers would be ineffective because the connections are

[squid-users] cannot start Squid 3.4.9

2014-11-30 Thread Fernandez-Touzon, Carlos E (CTR)
RHEL 6.6 x86_64 Squid v3.4.9 I downloaded the 3.4.9 RPM from http://www1.ngtech.co.il/repo/centos/6/x86_64/squid-3.4.9-2.el6.x86_64.rpm The squid service fails to start. $ sudo service squid start Starting squid: [FAILED] Squid doesn't write anything

Re: [squid-users] using squid 3.head for large rock , but i still have mean object size is 32 !!!!!

2014-11-30 Thread Ahmed Allzaeem
More info ... sample_start_time = 1415972068.352725 (Fri, 14 Nov 2014 13:34:28 GMT) sample_end_time = 1415972368.441291 (Fri, 14 Nov 2014 13:39:28 GMT) client_http.requests = 624.049293/sec client_http.hits = 52.839655/sec client_http.errors = 8.046615/sec client_http.kbytes_in = 481

[squid-users] using squid 3.head for large rock , but i still have mean object size is 32 !!!!!

2014-11-30 Thread Ahmed Allzaeem
Hi , I migrated from squid 3.4.3 so that I wish to have a chance to save bw. Im using : Squid Cache: Version 3.HEAD-20141105-r13687 With options below : Service Name: squid configure options: '--prefix=/usr' '--includedir=/include' '--mandir=/share/man' '--infodir=/share/info'

[squid-users] bad kernel logs on high traffic server

2014-11-30 Thread Ahmed Allzaeem
Hi guys , I have server with about 1000 users and its okay with 2 workers Now I added more 1000 and its now 2000 users with 4 workers But sometime some process of squid get killed suddenly and here is log below , Here is sysctl.conf [root@Largerock-squid ~]# cat /etc/sysctl.conf

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-11-30 Thread Paul Freeman
Pedro, This sounds similar to a problem I had a couple of years ago when using Kerberos authentication with Squid (3.1.x) on Ubuntu (10.04 at that stage). (see RE: [squid-users] Re: Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2, squid-users group Nov 3

[squid-users] Delay Class 3 - Squid (Amos Jeffries)

2014-11-30 Thread Jorge Visentini
Hello Amos Jeffries! I tried to use three parameters, but it did not work. I did not understand why this is giving error... 2014-10-27 14:40 GMT-02:00 : > Send squid-users mailing list submissions to > squid-users@lists.squid-cache.org > > To subscribe or unsubscribe via the World Wi

Re: [squid-users] Transparent proxy with Peek and Splice feature.

2014-11-30 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 28/11/2014 2:48 a.m., Vadim Rogoziansky wrote: > Hello Amos. > > Thank you for answer. > > There was made an investigation related to squid's peek and splice > issues in transparent mode. One-line explanation is as follows - in > intercept mode s

Re: [squid-users] WARNING: there are more than 100 regular expressions

2014-11-30 Thread navari.lore...@gmail.com
I saw that the error does not preclude the use of the lines over the 100. I have no problem with the CPU ( 7 % ) . Only I do not like to see " Warning" -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/WARNING-there-are-more-than-100-regular-expressions-tp46685

[squid-users] squid-3.5.0.2-20141031-r13657 crashes

2014-11-30 Thread James Harper
I've been getting squid crashes with squid-3.5.0.2-20141031-r13657. Basically I think my cache got corrupt - started seeing TCP_SWAPFAIL_MISS and md5 mismatches. Config is cache_dir ufs /usr/local/squid/var/cache/squid 102400 16 256 It's possible that at one point I might have started 2 instance