Hi All
Few days back i had the problem of DNS which arised due to the upgrade
from 2.5STABLE3-6 to 2.5STABLE12. so i uninstall and reinstall the default
one that is 2.5STABLE3-6 my problem was solved.
next day i downloaded squid-2.5.STABLE3-6.3E.src.rpm and applied
follow_xff-2.5.patch
Hi All
Slow to access internet how to troubleshoot
result of top command
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
4646 squid16 0 23260 22M 2316S 4.0
1.1 7:07 0squid
Thanks Regards,
Remy Almeida
NIO System Admin
* On 13/01/06 15:00 +0530, Remy Almeida wrote:
Hi All
Few days back i had the problem of DNS which arised due to the upgrade
from 2.5STABLE3-6 to 2.5STABLE12. so i uninstall and reinstall the default
one that is 2.5STABLE3-6 my problem was solved.
next day i downloaded
Hi2All!
I have some trouble with DNS-resolving in squid-2.5.STABLE11-3.FC3
With some sites theres no any problems.
But when I try to load
www.someserver.com/some_dir/somescript.php(*.cgi,*.pl, etc...)
theres an error Unable to determine IP address from host name for
... appears.
BUT, when I try to
* On 13/01/06 15:09 +0530, Remy Almeida wrote:
Hi All
Slow to access internet how to troubleshoot
result of top command
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
4646 squid16 0 23260 22M 2316S 4.0
1.1 7:07 0squid
On Thu, 12 Jan 2006, Gregori Parker wrote:
I have read that RAID is a bad idea for squid caches
For Internet proxies yes, as they rotate their cache content quite
frequently, causing a lot of small writes which most RAID setups isn't
very happy about.
For accelerators where the content
On Thu, 12 Jan 2006, Carlson, Justin wrote:
I am Justin Carlson working in a division of Amazon.com that routes
contacts to the different divisions, we have had two or so network
engineers look at the problem and they have not been able to figure out
the issue. I would like to post/request
On Thu, 12 Jan 2006, H wrote:
anyway I think that aufs-pthread-aio in squid is confusing when talking
freeBSD and not so very well documented
aufs does not use aio. It's only the coss driver which uses aio.
BTW I believe pthreads are not so good on FreeBSD at all and work different as
on
On Thu, 12 Jan 2006, H wrote:
still some guess because only a day running this but it seems to be some kind
of SHM or MSGMNB problem where squid gets confused instead of accusing busy
msgqueue or out of shm like in squid-manager busy or failed queues
when I reduce SHMMAX I can accelerate the
On Thu, 12 Jan 2006, Dustin wrote:
Yes, that is what I'd like to accomplish, limit the sites which this
group 'de_InetAllow' can access.
Then you need to make sure you do not allow them (de_InetAllow) access
anywhere else..
acl localnet proxy_auth REQUIRED
acl de_urls dstdomain .fedex.com
On Fri, 13 Jan 2006, Fes wrote:
Hi2All!
I have some trouble with DNS-resolving in squid-2.5.STABLE11-3.FC3
With some sites theres no any problems.
But when I try to load
www.someserver.com/some_dir/somescript.php(*.cgi,*.pl, etc...)
theres an error Unable to determine IP address from host
On Thu, 12 Jan 2006, Gendel, David wrote:
What authentication schemes are available to use for web applications
running on the IIS?
- Basic
Yes.
- Forms Based
Yes.
- Digest
Yes, but needs to be enabled both in IIS and the ADS domain/account
policy if you want integration with the
On Thu, 12 Jan 2006, Christopher Fink wrote:
Hi,
I'm trying to build an expressionlist in order to block proxy servers by
keywords like proxy and anonymous.
However, it's not working.
Here's what I have (I'm not entirely positive with what to enter)
At 1137154743s since epoch (01/13/06 01:19:03 -0500 UTC), Mark Elsen wrote:
Does it work , when the user , uses SQUID directly, through proxy
settings in the browser ?
No, I still get the delay (that was Test #3 in my original message).
Jason
--
Jason Healy
http://www.logn.net/
I want to make squid ask for authentication only for
certain content-type of the http response. For all
other content-type I don't want the browser to raise
authentication popup window.
The solution I've in mind is to make an external acl
helper that retrieves only the http header of the url
and
Can be anything from your provider up to your hardware.Have you checked
all that?What happnes when you go to the internet minus squid?please
comeback if all fails.
We are always here
Ronny
***
PGP Fingerprint: 6695 794A B84E D922
At 1137150799s since epoch (01/13/06 00:13:19 -0500 UTC), Richard Mittendorfer
wrote:
Also sprach Jason Healy [EMAIL PROTECTED] (Thu, 12 Jan 2006
22:37:58 -0500 (EST)):
What are you using for your speed tests? I'm using wget, so I know
there's no browser cache issue.
Originally I do a
On Fri, 13 Jan 2006, Adolfo Mussi wrote:
I want to make squid ask for authentication only for
certain content-type of the http response. For all
other content-type I don't want the browser to raise
authentication popup window.
authentication has to take place before the request is forwarded,
Hi All,
Anybody could help with squid_ldap_auth usage examples?
Say, I'd like to athenticate users belogning to the group Internet in
DC=domain, DC=com, OU=Users (Microsoft AD)
Thanks a lot!
Alex
-
The information
I meant SQUID_LDAP_GROUP and not AUTH.
Thank you.
-Original Message-
From: Meyerovich Aleksandr EB_NY
Sent: Friday, January 13, 2006 9:19 AM
To: squid-users@squid-cache.org
Subject: SQUID_LDAP_AUTH
Hi All,
Anybody could help with squid_ldap_auth usage examples?
Say, I'd like to
--- Henrik Nordstrom [EMAIL PROTECTED] wrote:
You could in theory also do the authentication in
http_reply_access,
dropping the already received reply if
authentication is required. Should
give less overhead than the above external acl
approach..
But http_reply_access is not so kind
Also sprach Jason Healy [EMAIL PROTECTED] (Fri, 13 Jan 2006
08:57:39 -0500 (EST)):
At 1137150799s since epoch (01/13/06 00:13:19 -0500 UTC), Richard
Mittendorfer wrote:
Also sprach Jason Healy [EMAIL PROTECTED] (Thu, 12 Jan 2006
22:37:58 -0500 (EST)):
What are you using for your speed
No, I still get the delay (that was Test #3 in my original message).
Checkout, using squid in your standard mode what the site return headers
are with :
http://web-sniffer.net/
M.
Mr. H, thanks for your help.
After re-compile squid without these options, everything is working fine.
Regards
Edinilson
-
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br
- Original Message -
Thanks for the answers...I forgot to mention that this deployment of
squid will be used to accelerate back-end servers and geographically
extend our CDN. I was planning to use RAID5, am I hearing this is okay
for non-proxy implementations?
-Original Message-
From: Gregori Parker
Sent:
Hi,
I have just placed at Sourceforge new subversion - 0.41 - of Squeezer -
multi-dimensional Squid's performace analysis script. The change is now
only the view of report - it's now more readable and (I hope) more
understandable.
The script is available from here:
Hi Guys,
Are there any debugging switches for squid_ldap_auth to get something
more descriptive than ERR?
Facts:
- I can reach the MSAD LDAP server by short name as well as FQDN
- squid_ldap_auth compiled with no problems:
ldd squid_ldap_auth
libldap.so.2 = /usr/lib/libldap.so.2
acl localnet proxy_auth REQUIRED
acl de_urls dstdomain .fedex.com .ups.com
acl de_InetAllow external win_domain_group Web_access_dataentry
http_access allow de_InetAllow de_urls
acl Full_InetAllow external win_domain_group Web_access_full
http_access allow Full_InetAllow
The above
On Friday 13 January 2006 09:48, Henrik Nordstrom wrote:
On Thu, 12 Jan 2006, H wrote:
still some guess because only a day running this but it seems to be some
kind of SHM or MSGMNB problem where squid gets confused instead of
accusing busy msgqueue or out of shm like in squid-manager busy
On Friday 13 January 2006 09:46, Henrik Nordstrom wrote:
On Thu, 12 Jan 2006, H wrote:
anyway I think that aufs-pthread-aio in squid is confusing when talking
freeBSD and not so very well documented
aufs does not use aio. It's only the coss driver which uses aio.
good, as I said then a
While squid starting it says Rebuilding storage in
/usr/local/squid/var/cache DIRTY
What does this mean?
Just wanted to report back that we solved our
digest-auth-through-http-accelerator problem. The culprit was a mismatch
of the URI referenced in the Authorization: header. Everything starting
at the third slash in the URL must match up between proxy and backend.
Thanks to ethereal and especially
While squid starting it says Rebuilding storage in
/usr/local/squid/var/cache DIRTY
It means that the previous instance of SQUID, ended abnormally.
It´s the same as an OS crash that due to the event stream
doesn´t mark a file system as being unmounted
cleanly.
M.
On Fri, 13 Jan 2006, H wrote:
configure:7448: gcc -o conftest -g -O2 -Wall -D_REENTRANT -g conftest.c
-lpthread -lm 15
configure:7479: checking for aio_read in -lrt
configure:7498: gcc -o conftest -g -O2 -Wall -D_REENTRANT -g conftest.c -lrt
-lpthread -lm
15
/usr/bin/ld: cannot find -lrt
On Fri, 13 Jan 2006, Mark Foster wrote:
Just wanted to report back that we solved our
digest-auth-through-http-accelerator problem. The culprit was a mismatch
of the URI referenced in the Authorization: header. Everything starting
at the third slash in the URL must match up between proxy and
On Fri, 13 Jan 2006, Meyerovich Aleksandr EB_NY wrote:
Anybody could help with squid_ldap_auth usage examples?
There is several in the man page.
Say, I'd like to athenticate users belogning to the group Internet in
DC=domain, DC=com, OU=Users (Microsoft AD)
Then you probably should
On Fri, 13 Jan 2006, Richard Mittendorfer wrote:
Jepp, they are TCP_HIT.
What type of cache_dir are you using?
Squid version?
How much other traffic at the same time to this Squid?
Why I ask is because diskd is known to be somewhat slow on large cache
hits in certain situations UNLESS
On Fri, 13 Jan 2006, Gregori Parker wrote:
Thanks for the answers...I forgot to mention that this deployment of
squid will be used to accelerate back-end servers and geographically
extend our CDN. I was planning to use RAID5, am I hearing this is okay
for non-proxy implementations?
Yes.
And does this affect anything,
- Squid will kind of do a check on the store dir. Purge duplicate objects
e.d. ,and other maintenance stuff which would not be needed if the SQUID Cache
was shutdown properly
and how can I shutdown squid normaly?
% squid -k shutdown
Check further
On Fri, 13 Jan 2006, Meyerovich Aleksandr EB_NY wrote:
Are there any debugging switches for squid_ldap_auth to get something
more descriptive than ERR?
-d gives you some details. But there isn't much it can give. Most
operations is of works/fails nature mainly depending on getting the
On Fri, 13 Jan 2006, Dustin wrote:
The above rules only gives access, it does not restrict access. Only deny
lines restricts access..
But what I'm saying is, with the configuration above, de_InetAllow
cannot go anywhere (has no access). The group Full_InetAllow can
though. There's something
On Fri, 13 Jan 2006, H wrote:
shm and msg sizes needs to be well within the requirements for diskd
spelled out in the FAQ.
nothing new but this thread is about the problem stated in the subject
Right.. the answer is almost..
The correct answer is to look into the q1/q2 parameers of your
Any other http_access lines denying access BEFORE these ones?
Nope, no denies before. Here's the config again:
acl localnet proxy_auth REQUIRED
acl de_urls dstdomain .fedex.com .ups.com
acl de_InetAllow external win_domain_group Web_access_dataentry
http_access allow de_InetAllow de_urls
acl
On Fri, 13 Jan 2006, Dustin wrote:
acl de_urls dstdomain .fedex.com .ups.com
acl de_InetAllow external win_domain_group Web_access_dataentry
Members of Full_InetAllow have full internet access, and it is
working. Members of de_InetAllow do not have access to anything,
not even to the sites
I have an issue where a certain app is talking on a
port that appaprently doesn't like squid (State of
Illinois app... so I won't say anything more about the
app ;-)
...
You probably mean, going-direct-from-the-browser.
This can´t be solved at the squid level, because once
a request
45 matches
Mail list logo
