Re: [squid-users] This list generates a forward loop ...

2017-07-18 Thread Amos Jeffries
On 19/07/17 01:42, Walter H. wrote: (expanded from ): mail forwarding loop for squid-us...@squid-cache.org Why? You sent a mail to the address squid-users@squid-cache.* The mailing list address is squid-users@lists.* Amos ___ squid-u

Re: [squid-users] HDD/RAM Capacity vs store_avg_object_size

2017-07-18 Thread bugreporter
Hi, FYI I had the same object (an image) duplicated x1000, x1, x3, x6, x10, x13, x16 and finally x20. The real size of my object was ~ 45 KB (48 KB for squid as in counts headers + fs structure I guess). The growth was almost linear and values I posted here is an avera

Re: [squid-users] Packets logged as blocked even Firewall (IPtables) accepts them ...

2017-07-18 Thread Amos Jeffries
On 19/07/17 01:37, Walter H. wrote: On Tue, July 18, 2017 15:28, Matus UHLAR - fantomas wrote: On 18.07.17 14:29, Walter H. wrote: -A INPUT -i br0 -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -i br0 -m tcp -p tcp --dport 3128 -m state --state NEW -j ACCEPT -A INPUT -j LOG --log

Re: [squid-users] Squid box for two networks

2017-07-18 Thread Amos Jeffries
On 19/07/17 00:28, Antony Stone wrote: Maybe you could also answer my questions: In addition to those answers, please also post at least the http_port and https_port lines from your squid.conf. Amos ___ squid-users mailing list squid-users@lists.

Re: [squid-users] HDD/RAM Capacity vs store_avg_object_size

2017-07-18 Thread Alex Rousskov
On 07/18/2017 12:32 PM, bugreporter wrote: > Hi Alex & Amos. Below results: > > On a x64 machine: > v ~ 207 Bytes For the record, sizeof(StoreEntry) + sizeof(LruNode) = 104 + 24 = 128 bytes (for Squid v5 on an x64 host). If your results are correct, we cannot account for ~80 bytes, which is ~50

Re: [squid-users] HDD/RAM Capacity vs store_avg_object_size

2017-07-18 Thread bugreporter
Hi Alex & Amos. Below results: On a x64 machine: v ~ 207 Bytes On a x86 machine: v ~ 116 Warm Regards, - Bug Reporter Contributor OpenSource = Open-Minded -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/HDD-RAM-Capacity-vs-store-avg-object-size-tp46830

[squid-users] debugging ssl-bump

2017-07-18 Thread Marcus Kool
I am trying to debug ssl-bump and am looking specifically for decisions that Squid takes with regard to bumping, splicing and unsupported protocol. The config file for Squid 4.0.21 has debug_options ALL,1 33,9 83,9 http_port 10.10.10.1:3230ssl-bump ... acl tls_is_skype ssl::server_na

Re: [squid-users] This list generates a forward loop ...

2017-07-18 Thread Antony Stone
On Tuesday 18 July 2017 at 14:42:21, Walter H. wrote: > Hello, > > On every post I get an error mail back What's the difference between the posts which generate an error, and this one which got through? Are you sending all from the same address, through the same mail server? Antony. -- "On

[squid-users] This list generates a forward loop ...

2017-07-18 Thread Walter H.
Hello, On every post I get an error mail back: Subject:Undelivered Mail Returned to Sender From: "Mail Delivery System" Date: Tue, July 18, 2017 15:36 To: ... Priority: Normal This is the mail system at host lists.squid-cache.org. I'm sorry to hav

Re: [squid-users] Packets logged as blocked even Firewall (IPtables) accepts them ...

2017-07-18 Thread Walter H.
On Tue, July 18, 2017 15:28, Matus UHLAR - fantomas wrote: > On 18.07.17 14:29, Walter H. wrote: >>-A INPUT -i br0 -m state --state ESTABLISHED,RELATED -j ACCEPT > >>-A INPUT -i br0 -m tcp -p tcp --dport 3128 -m state --state NEW -j ACCEPT > >>-A INPUT -j LOG --log-prefix "IP[IN]: " --log-level 7 >

Re: [squid-users] Packets logged as blocked even Firewall (IPtables) accepts them ...

2017-07-18 Thread Matus UHLAR - fantomas
On 18.07.17 14:29, Walter H. wrote: -A INPUT -i br0 -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -i br0 -m tcp -p tcp --dport 3128 -m state --state NEW -j ACCEPT -A INPUT -j LOG --log-prefix "IP[IN]: " --log-level 7 [17-Jul-2017; 19:49:13.590130] IP[IN]: IN=br0 OUT= MAC=24:01:

[squid-users] Problem with login to website by Squid web proxy 3.5.20 on Centos 7

2017-07-18 Thread WP.PL
Hi, I have a problem to login to one website (http://intouch.techdata.com) using Squid 3.5.20 on Centos 7 with default Squid configuration, which is acting as web proxy (non-transparent) on 3128 port in my network: -- # # Reco

Re: [squid-users] Packets logged as blocked even Firewall (IPtables) accepts them ...

2017-07-18 Thread Antony Stone
On Tuesday 18 July 2017 at 13:29:04, Walter H. wrote: > Hello, > > my Router Box runs a CentOS 6, with the EPEL squid34 RPM package > > this the iptables > Does the output of "iptables -L -nvx" match the ruleset you've quoted here? I'm just wondering whether the rules have got loaded properly

[squid-users] Packets logged as blocked even Firewall (IPtables) accepts them ...

2017-07-18 Thread Walter H.
Hello, my Router Box runs a CentOS 6, with the EPEL squid34 RPM package this the iptables *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT DROP [0:0] # Allow multicast -A INPUT -d 224.0.0.0/4 -j ACCEPT -A OUTPUT -d 224.0.0.0/4 -j ACCEPT # Allow anything on the local link -A INPUT -i lo -j

Re: [squid-users] Squid box for two networks

2017-07-18 Thread Antony Stone
On Tuesday 18 July 2017 at 13:09:31, Pablo Ruben Maldonado wrote: > The iptables only follow configuration: > > -A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 > -A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 3129 Oh, you didn't say this was an intercepting pro

Re: [squid-users] Squid box for two networks

2017-07-18 Thread Pablo Ruben Maldonado
The iptables only follow configuration: -A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 -A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 3129 On Tue, Jul 18, 2017 at 8:11 AM, Matus UHLAR - fantomas wrote: > On 17.07.17 17:31, Pablo Ruben Maldonado wrote: > >> He

Re: [squid-users] Squid box for two networks

2017-07-18 Thread Antony Stone
On Tuesday 18 July 2017 at 12:11:58, Matus UHLAR - fantomas wrote: > On 17.07.17 17:31, Pablo Ruben Maldonado wrote: > >Hello, I have a squid box 3.5 working without problems for the lan > >192.168.110.0/24 for several months. Now I want setup to another lan > >192.168.115.0/24 but I cannot. Tcpdu

Re: [squid-users] Squid box for two networks

2017-07-18 Thread Matus UHLAR - fantomas
On 17.07.17 17:31, Pablo Ruben Maldonado wrote: Hello, I have a squid box 3.5 working without problems for the lan 192.168.110.0/24 for several months. Now I want setup to another lan 192.168.115.0/24 but I cannot. Tcpdump inform me that the packages come to squid box. But in Squid's log I do not

Re: [squid-users] HDD/RAM Capacity vs store_avg_object_size

2017-07-18 Thread Amos Jeffries
On 18/07/17 02:56, bugreporter wrote: Thank you Amos, OK so how can I accurately measure the memory usage? I don't have an answer to that one sorry. I personally just use the top values. Amos ___ squid-users mailing list squid-users@lists.squid-ca