[squid-users] help me

2004-08-24 Thread Aanandh P C
Hi all I am working on Squid to reduce the resolutions of the cached JPEG objects. For that i am getting the informations (dirn ,swapfilen) of the cached file while invoking storeSwapOutFileClosed() method. I am directly read the file from ufs.and compressing it by reducing it's resolution then

[squid-users] Re: credentials ttl for digest scheme

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, Shu Ung wrote: I have been searching for credentials ttl parameter in the digest scheme and came across this thread of yours in the archives. Could you please tell me if credentials ttl parameter in the digest scheme is now possible? Not that I know of. Patches are welcome.

Re: [squid-users] help me

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, Aanandh P C wrote: I am working on Squid to reduce the resolutions of the cached JPEG objects. For that i am getting the informations (dirn ,swapfilen) of the cached file while invoking storeSwapOutFileClosed() method. Yes, but this is not the correct place to hook in such

RE: [squid-users] accelerating proxy and default page (index.html )

2004-08-24 Thread André Füchsel
At 04:59 24.08.2004 +0200, Internet Admin wrote: Hmmm, guess index.html is not listed on your configuration as the default file to lookup, if you are using apache, look under DirectoryIndex... Well, I am using JBoss as backend server. It is configured correctly. Here are my relevant squd

[squid-users] replicating a single live stream to many clients simultaneously

2004-08-24 Thread L. Jankok
Hi, Is this to much work to implement in Squid: The NetCache appliance caches on-demand streams or connects to an origin media server for live webcasts to access a single live stream and automatically replicate it to thousands of clients simultaneously. network and server congestion is

[squid-users] https tranparent proxying

2004-08-24 Thread Manjunath Prabhu
hi all, i have a scenario as described below, client---squidInterent--https://google.com |---private n/w---| I have a private network...and have squid and firewall running on the same machine. I have a huge number of clients. i am able to easily configure squid to proxy http

RE: [squid-users] https tranparent proxying

2004-08-24 Thread Elsen Marc
hi all, i have a scenario as described below, client---squidInterent--https://google.com |---private n/w---| I have a private network...and have squid and firewall running on the same machine. I have a huge number of clients. i am able to easily configure squid

[squid-users] forwarding requests to a parent proxy outside local network

2004-08-24 Thread PraktikantMPI Toni (MPI)
Hi all, I have set up a Squid Proxy as child proxy in a LAN. It should forward all http requests (which are not directed to the LAN = this is nonrelevant for my problem) to a proxy outside the LAN. This proxy belongs a third party provider, it is a black boxfor me, i have no access to and no

RE: [squid-users] parent proxy ?

2004-08-24 Thread ThE LinuX_KiD
Thank you, Henrik I've putted in my squid.conf next rules: -- acl local-hosts dst 172.16.10.0/24 acl nic dstdomain .nic.ar never_direct deny local-hosts never_direct allow nic # also... cache_peer 12.10.130.114 parent 80 7 round-robin

[squid-users] Encrypted authentication and LDAP.

2004-08-24 Thread Jean-Michel Bonnefond
Hi all, I would like to secure all the authentication traffic between the final client and an LDAP Active Directory server via squid. After a lot of research in the list archive and other sources, it appear that (tell me if I'm wrong): -Use of LDAPS is now supported in squid, starting from

RE: [squid-users] parent proxy ?

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, ThE LinuX_KiD wrote: Thank you, Henrik I've putted in my squid.conf next rules: -- acl local-hosts dst 172.16.10.0/24 acl nic dstdomain .nic.ar never_direct deny local-hosts for the above you should use always_direct...

RE: [squid-users] accelerating proxy and default page (index.html )

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, André Füchsel wrote: But when I connect through squid (http://192.168.200.12/), the access log looks different and I am not shown the index.html page: 192.168.200.12 - - [24/Aug/2004:08:32:12 +0100] GET / HTTP/1.0 302 - Did you notice the difference? Here the protocol is

RE: [squid-users] accelerating proxy and default page (index.html )

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, André Füchsel wrote: More analysis follows: It seems, that it depends on httpd_accel_uses_host_header on. If I use Mozilla Firebird to connect to the squid proxy url using http://192.168.200.12;, the URL is REWRITTEN in the browser to http://192.168.200.12:8100; which is OF

Re: [squid-users] forwarding requests to a parent proxy outside local network

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, PraktikantMPI Toni (MPI) wrote: I have set up a Squid Proxy as child proxy in a LAN. It should forward all http requests (which are not directed to the LAN = this is nonrelevant for my problem) to a proxy outside the LAN. This proxy belongs a third party provider, it is a

[squid-users] How to use accelerating proxies correctly?

2004-08-24 Thread André Füchsel
Hi, after reading everything I could find about accelerating proxies I still cannot solve my problem described in accelerating proxy and default page (index.html). Therefore I would like to summarize what I would like to do and why: We have JBoss with it's integrated web server running in the

Re: [squid-users] Encrypted authentication and LDAP.

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, Jean-Michel Bonnefond wrote: -Use of LDAPS is now supported in squid, starting from version 2.5 Stable5 which should resolv the encryption problem between squid and Active directory. Correct. But this does not solve client-Squid. -Using Digest authentication method between

[squid-users] Help me size my cache

2004-08-24 Thread Debelius, Brian
Hey all, How big of a disk cache would I need to accommodate about 75 users for Internet caching? Brian-

[squid-users] High CPU Utilization

2004-08-24 Thread trainier
This has happened before and I guess I have never gotten to the bottom of it. All of the sudden, squid took and held onto 98% of the CPU. The machine has plenty of CPU and RAM, not to mention disk space. There were no warnings in the cache.log. cache_effective_user is set to nobody.

RE: [squid-users] accelerating proxy and default page (index.html )

2004-08-24 Thread André Füchsel
Thanks Henry! More analysis follows: It seems, that it depends on httpd_accel_uses_host_header on. If I use Mozilla Firebird to connect to the squid proxy url using http://192.168.200.12;, the URL is REWRITTEN in the browser to http://192.168.200.12:8100; which is OF COURSE wrong! If I use

[squid-users] Are there any issues using MS Proxy 2 as upstream?

2004-08-24 Thread Chris Wilcox
Hi all, Are there any issues using MS Proxy 2 as an upstream proxy for Squid? If so what are they and are they resolvable? Regards, Chris

Re: [squid-users] How to use accelerating proxies correctly?

2004-08-24 Thread Merton Campbell Crockett
On Tue, 24 Aug 2004, wrote: We have JBoss with it's integrated web server running in the LAN which NOT accessible from the outside. Squid is running in demilitarized zone not for caching and accelerating the HTTP-requests, but to redirecting external requests to the internal JBoss server

RE: [squid-users] Help me size my cache

2004-08-24 Thread Elsen Marc
Hey all, How big of a disk cache would I need to accommodate about 75 users for Internet caching? Round about 1 week of total generated traffic by this community. M.

AW: [squid-users] forwarding requests to a parent proxy outside local network

2004-08-24 Thread PraktikantMPI Toni (MPI)
-Ursprüngliche Nachricht- Von: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Gesendet: Dienstag, 24. August 2004 15:17 An: PraktikantMPI Toni (MPI) Cc: squid mailingliste (E-Mail) Betreff: Re: [squid-users] forwarding requests to a parent proxy outside local network On Tue, 24 Aug 2004,

RE: [squid-users] High CPU Utilization

2004-08-24 Thread Elsen Marc
This has happened before and I guess I have never gotten to the bottom of it. All of the sudden, squid took and held onto 98% of the CPU. The machine has plenty of CPU and RAM, not to mention disk space. There were no warnings in the cache.log. cache_effective_user is set to

Re: [squid-users] How to use accelerating proxies correctly?

2004-08-24 Thread André Füchsel
At 06:58 24.08.2004 -0700, Merton Campbell Crockett wrote: What javac options did you set when you compiled JBoss? One of your posts seems to indicate that deferred name resolution was not defined during compilation. This results in the internal IP address being inserted into URLs instead of the

RE: [squid-users] parent proxy ?

2004-08-24 Thread ThE LinuX_KiD
sorry, Henrik but it doesn't work. I already have acl local-hosts dst 172.16.10.0/24 acl nic dstdomain .nic.ar always_direct deny local-hosts never_direct allow nic half_closed_clients off cache_peer 12.10.130.114 parent 80 7 round-robin no-query cache_peer_domain 12.10.130.114 .nic.ar

[squid-users] Transparent Squid Proxy doesn't work

2004-08-24 Thread Guillermo Javier Nardoni
Hello, I have working squid proxy properly but i want to set it up in transparent mode. so i give my configuration in fact to helped by someone with a beautiful heart jejeeje. eth0 ip: 10.0.0.1 nm: 255.0.0.0.0 eth1 ip: 192.168.0.1 nm: 255.255.255.0 eth2 ip: 192.168.1.1 nm: 255.255.255.0 (wlan)

[squid-users] Encrypted authentication and LDAP.

2004-08-24 Thread Jean-Michel Bonnefond
Hi all, I would like to secure all the authentication traffic between the final client and an LDAP Active Directory server via squid. After a lot of research in the list archive and other sources, it appear that (tell me if I'm wrong): -Use of LDAPS is now supported in squid, starting from

[squid-users] Squid interworking with a ftp proxy

2004-08-24 Thread Wan Kwong Yeung
Understood that Squid is not a ftp proxy, however, it may be required to interwork with an upstream ftp proxy. My case is any machine must go through a ftp proxy for antivirus scanning before ftping in/out of Internet. This rule includes ftp:// via browsers too. Therefore the Internet facing

Re: [squid-users] can not access sites due to acl when using ntlm auth

2004-08-24 Thread Jim_Brouse/PYT
Part of my problem was kiosk was defined as url_regex it should have been src. This was the specifics on KIOSK acl KIOSK url_regex /etc/squid/acl/kiosk.src acl KIOSK.dstdomain dstdomain /etc/squid/acl/kiosk.dstdomain.acl http_access allow KIOSK.dstdomain http_access allow KIOSK Now they are:

[squid-users] problem after upgrading from squid 2.5.STABLE1

2004-08-24 Thread Michael Hohenegger
hi, after updating stable1 to stable2...6, i get the following error line starting squid: FATAL: Bungled squid.conf line 1291: external_acl_type foobar ttl=10 %PROTO %DST %URLPATH %LOGIN /path/to/check_url.pl in stable1 it works, but in version 2.5-STABLE 1 the %URLPATH throws this error.

Re: [squid-users] How to use accelerating proxies correctly?

2004-08-24 Thread Serassio Guido
Hi, At 16.07 24/08/2004, André Füchsel wrote: At 06:58 24.08.2004 -0700, Merton Campbell Crockett wrote: What javac options did you set when you compiled JBoss? One of your posts seems to indicate that deferred name resolution was not defined during compilation. This results in the internal IP

[squid-users] ftp thru squid

2004-08-24 Thread Rick Whitley
Is there anything I need to do special for wsftp to work through squid? I already have 21 as a valid port. thanks rick... Rom.5:8

Re: [squid-users] ftp thru squid

2004-08-24 Thread Hendrik Voigtländer
Rick Whitley wrote: Is there anything I need to do special for wsftp to work through squid? I already have 21 as a valid port. thanks IMHO wsftp needs a native ftp-proxy, squid serves ftp-content via http-pages, therefore this will never work. I have seen only a few client which support proxying

Re: [squid-users] ftp thru squid

2004-08-24 Thread Joel Jaeggli
On Tue, 24 Aug 2004, Hendrik Voigtländer wrote: Rick Whitley wrote: Is there anything I need to do special for wsftp to work through squid? I already have 21 as a valid port. thanks IMHO wsftp needs a native ftp-proxy, squid serves ftp-content via http-pages, therefore this will never work. I

RE: [squid-users] accelerating proxy and default page (index.html )

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, André Füchsel wrote: Well, the server contains an index.html, which contains the following line: meta http-equiv=refresh content=0; url=index.jsp It should redirect to index.jsp. But I assumed, the URL rewriting is done by squid in both direction, thus leading to

Re: [squid-users] can not access sites due to acl when using ntlm auth

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004 Jim_Brouse/[EMAIL PROTECTED] wrote: egrep -v '^$|^#' /etc/squid.conf |grep http_access -i http_access allow manager localhost http_access deny manager http_access allow KIOSK KIOSK.dstdomain Shouldn't there be a http_access deny KIOSK here? if not the KIOSK is allowed to access

Re: [squid-users] How to use accelerating proxies correctly?

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, André Füchsel wrote: Internet - FW - squid (192.168.200.12:80) - FW - JBoss (10.0.10.102:8100) This (different ports) can only be done if your web server (JBoss) support running on another port than it announces in URLs generated by the software running on your web server,

Re: [squid-users] Are there any issues using MS Proxy 2 as upstream?

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, Chris Wilcox wrote: Are there any issues using MS Proxy 2 as an upstream proxy for Squid? None that I know of, except that if you use authentication you should make sure to have support for plain text enabled in MS Proxy as the Windows Integrated (NTLM / Negotiate) does not

Re: [squid-users] Transparent Squid Proxy doesn't work

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, Guillermo Javier Nardoni wrote: when i do a ping www.google.com from the client computer, ping said host unknown. Your client computer needs to have DNS configured. Using the ISP DNS is probably fine, but if you have many clients installing a caching DNS locally is

Re: [squid-users] Squid interworking with a ftp proxy

2004-08-24 Thread Henrik Nordstrom
On Wed, 25 Aug 2004, Wan Kwong Yeung wrote: Understood that Squid is not a ftp proxy, however, it may be required to interwork with an upstream ftp proxy. Ok. [EMAIL PROTECTED] type FTP proxies is accessible via Squid, either by manually translating the FTP proxy request into URL syntax or

Re: [squid-users] problem after upgrading from squid 2.5.STABLE1

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, Michael Hohenegger wrote: FATAL: Bungled squid.conf line 1291: external_acl_type foobar ttl=10 %PROTO %DST %URLPATH %LOGIN /path/to/check_url.pl %URLPATH has never existed in Squid-2.5 (only Squid-3), but there has been some patches floating around adding this. Your older

Re: [squid-users] ftp thru squid

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, Rick Whitley wrote: Is there anything I need to do special for wsftp to work through squid? You need a version of wsftp capable of using HTTP proxies, and tell it to use a HTTP proxy in the firewall settings screen. Regards Henrik

RE: [squid-users] SSL and Reverse Proxy

2004-08-24 Thread Henrik Nordstrom
On Tue, 24 Aug 2004, Brad Taylor wrote: I updated my Squid install with the SSL update. I'm still having trouble getting this to work. Here is what I have. http_port 80 httpd_accel_host 192.168.60.100 (SSL web server) This should be the public domain name. httpd_accel_port 80 the web site at the

RE: [squid-users] SSL and Reverse Proxy

2004-08-24 Thread Brad Taylor
-Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 24, 2004 5:52 PM To: Brad Taylor Cc: Henrik Nordstrom; Chris Perreault; [EMAIL PROTECTED] Subject: RE: [squid-users] SSL and Reverse Proxy On Tue, 24 Aug 2004, Brad Taylor wrote: I updated my

Re: [squid-users] ftp thru squid

2004-08-24 Thread Hendrik Voigtländer
Joel Jaeggli wrote: curl or wget work really well as ftp clients over http proxies... For a single file: absolutely. Now that you mention it... But mirroring a site or a part of it can be a bit tricky. Most of the time I see such problems from the users point of view - most of them cant/wont use

[squid-users] Squid access.log (view/logging)

2004-08-24 Thread simmen
Hello all I am trying to get a logging software/script for squid (access.log) like SARG. Which logs who ..?downloaded what..?. I would appriciate any help regarding this. Thx. __ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty

Re: [squid-users] Squid access.log (view/logging)

2004-08-24 Thread Joe Cooper
simmen wrote: Hello all I am trying to get a logging software/script for squid (access.log) like SARG. Which logs who ..?downloaded what..?. I would appriciate any help regarding this. Ummm...What's wrong with SARG?

Re: [squid-users] Squid access.log (view/logging)

2004-08-24 Thread simmen
ALL Downloaded what..? Means: What files were dowloaded by which user e.g mp3 , exe , zip etc. Thx --- Joe Cooper [EMAIL PROTECTED] wrote: simmen wrote: Hello all I am trying to get a logging software/script for squid (access.log) like SARG. Which logs who ..?downloaded

[squid-users] Might be useful to someone - realtime log view

2004-08-24 Thread James Gray
Greetings all, I wrote a simple one-liner that follows the access.log and formats the output in a useful way (for me anyway). It's designed for FreeBSD and requires awk/gawk/mawk etc. Here's the script (all on one line, or put it into a file) :) START clear ; tail -F

[squid-users] squid - k rotate problem

2004-08-24 Thread Jeff Donovan
greetings i have squid running as a transparent proxy with squidguard as a content filter. I recently increased the filter list size and my machine is choking when i rotate the logs. i have a cron job execute squid -k rotate at night. the CPU pegs out at 100% and it takes for ever for

RE: [squid-users] squid - k rotate problem

2004-08-24 Thread Elsen Marc
greetings i have squid running as a transparent proxy with squidguard as a content filter. I recently increased the filter list size and my machine is choking when i rotate the logs. i have a cron job execute squid -k rotate at night. the CPU pegs out at 100% and it takes for

[squid-users] Squid with no cache

2004-08-24 Thread Boskey Chheda
Hi All, i have deployed Squid basically to get report for users, to know who's going where etc. And therefore i am not caching any thing on the server. But ,Internet access through squid is very slow. There is no major acivity going on the router , which is the gateway to Squid. The CPU and