[squid-users] squid as reverse proxy

2005-11-16 Thread Thomas Steimann
Hi all, I need to configure squid as a reverse proxy with several web-servers behind. It is a Windows-Sharepoint-Portal Server which needs authentication. A Username/Passwort Window pops up. Now I did a test with this single host. My essential config: https_port xxx.xxx.xxx.xxx:443 cert=/etc/s

[squid-users] New Squid Install

2005-11-16 Thread Timothy Bushart
Hello! Do I need to worry about modifying message queues http://www.squid-cache.org/Doc/FAQ/FAQ-22.html#ss22.1 if I will be using the diskd file system. I am using new hardware (3GB RAM 3.2 GHZ Xeon, 15K Drives) for a new install of Squid. If so how do you go about balancing the correct numbers to

RE: [squid-users] CPU saturation?

2005-11-16 Thread Chris Robertson
> -Original Message- > From: James Vanns [mailto:[EMAIL PROTECTED] > Sent: Wednesday, November 16, 2005 3:49 AM > To: squid-users@squid-cache.org > Cc: Paul Mills ([EMAIL PROTECTED]); Benjamin Tanner > Subject: Re: [squid-users] CPU saturation? > > > On Wed, 2005-11-16 at 12:41 +, Jam

[squid-users] [Squid runnin' error] statHistBin(H, max) == H->capacity - 1

2005-11-16 Thread Adam Pokora
Hi there, Well i'm runnin' Gentoo 2005: Linux Nightwish 2.4.31-hardened #4 SMP Tue Nov 15 19:28:49 UTC 2005 i686 Pentium III (Katmai) GenuineIntel GNU/Linux Some time ago i needed to "reinstall" my server, because of HDD fail.Then i decided to run it on Gentoo distr. Everything was going fine till

[squid-users] Re: Squid LDAP Digest

2005-11-16 Thread Henrik Nordstrom
On Wed, 16 Nov 2005, Winfried Kuiper wrote: from http://www.squid-cache.org/mail-archive/squid-dev/200506/0031.html I know, there is a new digest authentication helper with ldap extension. Yes. So, is it now possible to make a secure communication between both, a) client-squidserver and b) s

Re: [squid-users] squid deletes cache_dir objects randomly - is there no solution?

2005-11-16 Thread Matus UHLAR - fantomas
On 16.11 07:13, H wrote: > On Wednesday 16 November 2005 07:38, Matus UHLAR - fantomas wrote: > > On 15.11 17:51, H wrote: > > > since v.12 squid empties without any reason the cache_dirs from time to > > > time > > > > does it remove whole cache_dir content? > > Yes, after that it fills them up a

Re: [squid-users] CPU saturation?

2005-11-16 Thread Denis Vlasenko
On Wednesday 16 November 2005 17:02, H wrote: > On Wednesday 16 November 2005 12:34, Denis Vlasenko wrote: > > > > # DONT! This incurs reverse DNS lookup if you supplied numeric IP > > # (and 5 min (!!!) timeout if that IP does not have reverse DNS set up) > > #acl adsdstdomain

Re: Fw: [squid-users] Re: squid_ldap_auth and Windows 2003 AD

2005-11-16 Thread Serassio Guido
Hi Colin, At 15.58 16/11/2005, Colin Farley wrote: Thanks for the more detailed explanation. I gave this a try and it solved the problem. It's funny how Microsoft can't even get their documentation right. I guess I should have been suspicious when I saw that the article said Windows 2000 all

Re: [squid-users] CPU saturation?

2005-11-16 Thread H
On Wednesday 16 November 2005 12:34, Denis Vlasenko wrote: > > # DONT! This incurs reverse DNS lookup if you supplied numeric IP > # (and 5 min (!!!) timeout if that IP does not have reverse DNS set up) > #acl adsdstdomain 81.222.128.3 www.linkexchange.ru > ad0.bigmir.net bbn.

Re: Fw: [squid-users] Re: squid_ldap_auth and Windows 2003 AD

2005-11-16 Thread Colin Farley
Thanks for the more detailed explanation. I gave this a try and it solved the problem. It's funny how Microsoft can't even get their documentation right. I guess I should have been suspicious when I saw that the article said Windows 2000 allows anonymous searches. Anyway, thanks again. Colin

Re: [squid-users] CPU saturation?

2005-11-16 Thread Denis Vlasenko
On Wednesday 16 November 2005 14:49, James Vanns wrote: > On Wed, 2005-11-16 at 12:41 +, James Vanns wrote: > > > > > > With approximately 3000 open file descriptors (configured at compile > > > > time and set at runtime with ulimit -HSn 16384) and an equivalent no. of > > > > client/server TC

Re: [squid-users] squid deletes cache_dir objects randomly - is there no solution?

2005-11-16 Thread H
On Wednesday 16 November 2005 11:29, Henrik Nordstrom wrote: > On Wed, 16 Nov 2005, H wrote: > > on the servers I do not log at all so I am sorry about not having > > anything more usefull since the server itself and the squid process did > > not die I didn't get a trap either to look in time > > S

RE: [squid-users] which user is using max bandwidth

2005-11-16 Thread Gix, Lilian (CI/OSR) *
Hello Sarg or Webaliser are probably what you are looking for Gix Lilian -Original Message- From: Jason Staudenmayer [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 16. November 2005 15:05 To: squid-users@squid-cache.org Subject: RE: [squid-users] which user is using max bandwidth Take a lo

RE: [squid-users] which user is using max bandwidth

2005-11-16 Thread Jason Staudenmayer
Take a look at SARG for squid reporting on the access.log -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 15, 2005 11:24 PM To: squid-users@squid-cache.org Subject: [squid-users] which user is using max bandwidth Hi, I am a novice in squid.

Re: [squid-users] squid deletes cache_dir objects randomly - is there no solution?

2005-11-16 Thread Henrik Nordstrom
On Wed, 16 Nov 2005, H wrote: on the servers I do not log at all so I am sorry about not having anything more usefull since the server itself and the squid process did not die I didn't get a trap either to look in time So it is entirely possible the Squid process restarted itself for some re

Re: [squid-users] proxy_auth acl causing challenge loop

2005-11-16 Thread Pim Zandbergen
Henrik Nordstrom wrote: http_access deny someacl authacl prompts for new credentials if matched (denied by authacl) http_access deny authacl someacl does nor prompt for new credentials (denied by someacl) Wow, thanks! It took me a week to ask this question, and you only minutes to answer

Re: [squid-users] squid deletes cache_dir objects randomly - is there no solution?

2005-11-16 Thread H
On Wednesday 16 November 2005 10:04, Henrik Nordstrom wrote: > > Any relevant messages in cache.log? > on the servers I do not log at all so I am sorry about not having anything more usefull since the server itself and the squid process did not die I didn't get a trap either to look in time H

Re: [squid-users] CPU saturation?

2005-11-16 Thread James Vanns
On Wed, 2005-11-16 at 12:41 +, James Vanns wrote: > > > > With approximately 3000 open file descriptors (configured at compile > > > time and set at runtime with ulimit -HSn 16384) and an equivalent no. of > > > client/server TCP connections we see a constant CPU usage of ~95-100%. > > > Is th

Re: [squid-users] CPU saturation?

2005-11-16 Thread James Vanns
> > With approximately 3000 open file descriptors (configured at compile > > time and set at runtime with ulimit -HSn 16384) and an equivalent no. of > > client/server TCP connections we see a constant CPU usage of ~95-100%. > > Is this normal!? The hardware is as follows: > > I don't think so. T

Re: [squid-users] CPU saturation?

2005-11-16 Thread Denis Vlasenko
On Wednesday 16 November 2005 13:21, James Vanns wrote: > A question to the floor. We are running squid 2.5STABLE3 and have a > non-caching setup including the following configuration statements: > > > cache_dir null /dev/null > > acl all src 0.0.0.0/0.0.0.0 > no_cache deny all > > ident_lookup

Re: [squid-users] Too few authenticator processes are running

2005-11-16 Thread Henrik Nordstrom
On Mon, 14 Nov 2005, Matt Alexander wrote: In the cache.log, we get squid restarting about once a minute: (squid_ldap_auth): error.c:221: ldap_parse_result: Assertion `r != ((void *)0)' failed. Your LDAP library is very unhappy about something in the response from your LDAP server. Hmm

Re: [squid-users] squid deletes cache_dir objects randomly - is there no solution?

2005-11-16 Thread Henrik Nordstrom
On Tue, 15 Nov 2005, H wrote: I know of eventual related bug reports but I have lots of servers which run a certain time and suddenly without any reason they start emptying the cache_dirs. the server is up for weeks squid was not restarted and did not crash Any relevant messages in cache.log?

[squid-users] CPU saturation?

2005-11-16 Thread James Vanns
A question to the floor. We are running squid 2.5STABLE3 and have a non-caching setup including the following configuration statements: cache_dir null /dev/null acl all src 0.0.0.0/0.0.0.0 no_cache deny all ident_lookup_access deny all request_timeout 1 minute connect_timeout 1 minute fqdncach

Re: [squid-users] squid deletes cache_dir objects randomly - is there no solution?

2005-11-16 Thread H
On Wednesday 16 November 2005 07:38, Matus UHLAR - fantomas wrote: > On 15.11 17:51, H wrote: > > since v.12 squid empties without any reason the cache_dirs from time to > > time > > does it remove whole cache_dir content? Yes, after that it fills them up again normally . H A mensagem foi

Re: [squid-users] proxy_auth acl causing challenge loop

2005-11-16 Thread Henrik Nordstrom
On Wed, 16 Nov 2005, Pim Zandbergen wrote: Well, I really prefer the old behaviour, so I hope the behaviour is not hardcoded, but configurable. It's not hardcoded, instead it is dependent on how your http_access rules are constructed. Squid prompts for login credentials if the user is denie

Re: [squid-users] squid deletes cache_dir objects randomly - is there no solution?

2005-11-16 Thread Matus UHLAR - fantomas
On 15.11 17:51, H wrote: > since v.12 squid empties without any reason the cache_dirs from time to > time does it remove whole cache_dir content? -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: n

[squid-users] proxy_auth acl causing challenge loop

2005-11-16 Thread Pim Zandbergen
After upgrading Fedora Core 3 to Fedora Core 4, my squid setup was upgraded from 2.5.STABLE6 to 2.5.STABLE11. I'm using ntlm authentication using winbindd, using group membership in Active Directory to split users into groups who have full, limited or no access to the Internet. Because of ntlm,

Re: [squid-users] max resource usgae

2005-11-16 Thread Matus UHLAR - fantomas
On 15.11 14:08, Houssam Melhem wrote: > I have 10 SCSI Hard disks each 73GB and 8GB of RAM I suppose you have 64bit CPU and OS... > PID USER PR NI VIRT RES SHR S%CPU %MEMTIME+ COMMAND > 17962 squid 18 0 2836m 2.3g 3664 R 97.6 28.9 4035:06 > squid ...looks

RE: [squid-users] Squid and trasparent auth with PDC

2005-11-16 Thread Administrateur
yes you can with this program : auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 30 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes but your proxy must join your AD domain. See this excelle

[squid-users] Squid and trasparent auth with PDC

2005-11-16 Thread Spada Marco
Hi everybody, I use Squid, and my customer would he like authenticating the users, that useas Squid, via Primary Domain Controler (Active Directory). In this moment I use the supported Squid program "msntauth": the user contact Squid that open the pop-up, the user e password are verifyed by the

Re: [squid-users] How to block shoutcast streams?

2005-11-16 Thread Odhiambo Washington
* On 16/11/05 09:04 +0100, Boniforti Flavio wrote: > Brent Clark wrote: > > >## Stop multimedia downloads ## > >acl useragent browser -i ^.*NSPlayer.* > >acl useragent browser -i ^.*player.* > >acl useragent browser -i ^.*Windows-Media-Player.* > >acl useragentq rep_mime_type ^.*video.* > >acl use

Re: [squid-users] How to block shoutcast streams?

2005-11-16 Thread Boniforti Flavio
Brent Clark wrote: ## Stop multimedia downloads ## acl useragent browser -i ^.*NSPlayer.* acl useragent browser -i ^.*player.* acl useragent browser -i ^.*Windows-Media-Player.* acl useragentq rep_mime_type ^.*video.* acl useragentq rep_mime_type ^.*audio.* http_access deny useragent http_access

Re: [squid-users] problem in opening specific website

2005-11-16 Thread Serassio Guido
Hi, At 06.41 16/11/2005, Jigar Raval wrote: Hello, I have configured Squid proxy server. It works fine. But since last few days, I am facing one problem for opening the below website http://www.cost723.org I could open it successfully from other network (Without Proxy).But While trying to