[squid-users] Freebsd -Squid - danguardian- Winbind- XMalloc Error

2006-09-01 Thread Erick Dantas Rotole
I have a box with freebsd 6.1, squid-2.5.13_1 (Ntlm authentication), dansguardian-2.9.6.1_1 and samba-3.0.22,1 2gb RAM 2 cpu. When The box has 800MB memory active, 1.2GB memory inact and 0 free memory. I get the error FATAL: xmalloc: Unable to allocate 65535 bytes and the squid process restart. I

RE: [squid-users] Regex url lists and DNS blacklist acls

2006-09-01 Thread Thomas Nilsen
Thanks for the reply Henrik. As utils like squidguard/dansguardian are able to handle regex files with good performance, I was hoping to achieve the same with asqredir or similar light tools. I assume Squid caches any external regex_url file? I'll go ahead and see if I can get dnsbl_redir and

RE: [squid-users] swap.log size continuing to grow?

2006-09-01 Thread wangzicai
Thanks If : In the I changed the Interscan`s working port to 8080,and change the squid`s configuration the line: cache_peer 127.0.0.1 parent 8080 3130 no-query It will be work? Regards garlic -Original Message- From: Thomas Nilsen [mailto:[EMAIL PROTECTED] Sent: Friday, September 01,

RE: [squid-users] swap.log size continuing to grow?

2006-09-01 Thread Thomas Nilsen
You need to change the squid port as well (http_port) of course, so both don't listen to 8080 - unless interscan and squid bind to different interfaces. Apart from that it should be fine. Thomas -Original Message- From: wangzicai [mailto:[EMAIL PROTECTED] Sent: Friday, September 01, 2006

Re: [squid-users] Freebsd -Squid - danguardian- Winbind- XMalloc Error

2006-09-01 Thread Henrik Nordstrom
fre 2006-09-01 klockan 03:21 -0300 skrev Erick Dantas Rotole: 800MB memory active, 1.2GB memory inact and 0 free memory. I get the error FATAL: xmalloc: Unable to allocate 65535 bytes and the squid process restart. I really need help, I have already search google and the list but haven't

RE: [squid-users] swap.log size continuing to grow?

2006-09-01 Thread wangzicai
Thanks I have changed the squid prot to 80 , but the server can not connect to the internet directly it must throw another proxy(server in another company). In the intrascan I set the proxy to that proxy and the port is also 8080 When I try to access the internet the error occers: InterScan Error

RE: [squid-users] swap.log size continuing to grow?

2006-09-01 Thread Thomas Nilsen
Suggest you configure this in stages. 1. Get Interscan to work on port 8080 and pass it's request on the the parent proxy in the other company. Configure your browser to use your interscan server IP and port 8080 as proxy and test. 2. Once step 1 works. Configure squid to use parent proxy on

RE: [squid-users] swap.log size continuing to grow?

2006-09-01 Thread wangzicai
Thanks I have solved the problem! Regards Garlic -Original Message- From: Thomas Nilsen [mailto:[EMAIL PROTECTED] Sent: Friday, September 01, 2006 2:32 PM To: wangzicai Cc: squid-users@squid-cache.org Subject: RE: [squid-users] swap.log size continuing to grow? You need to change the

RE: [squid-users] Regex url lists and DNS blacklist acls

2006-09-01 Thread Henrik Nordstrom
fre 2006-09-01 klockan 08:22 +0200 skrev Thomas Nilsen: As utils like squidguard/dansguardian are able to handle regex files with good performance, I was hoping to achieve the same with asqredir or similar light tools. squidguard doesn't handle large regex expression lists any better than

Re: [squid-users] delivering stale content while fetching fresh

2006-09-01 Thread Gregor Reich
Henrik Nordstrom schrieb: tor 2006-08-31 klockan 16:14 +0200 skrev Gregor Reich: But is there a possibility to have squid responding - to a client that request a document that is (in some way) expired - with the stale document while - at the same time fetching the new one and storing it to

[squid-users] CacheMgr: Process Filedescriptor Allocation

2006-09-01 Thread MichaƂ Margula
Hello! For last two days I had trouble with squid performance. It turns out that some kind of virus was heavily flooding with SYN packets which reduced availible numer of file descriptors and degraded performance I used menu Process Filedescriptor Allocation to finally find that guy. But

[squid-users] Authentication problem

2006-09-01 Thread Strandell, Ralf
Hi I try to access a page that requires a username and a password. The page is hosted on IIS. 1) If I bypass Squid completely, I get through (after the XP authentication dialog). 2) If I use Squid, I am asked for the username and password three times (auth dialog by web browser) and then I get

RES: [squid-users] Freebsd -Squid - danguardian- Winbind- XMallocError

2006-09-01 Thread Erick Dantas Rotole
Henrik, I had already read the FAQ. But the configuration for FREEBSD I think it is for older version. Searching the web I found. add the following values to /boot/loader.conf which worked: kern.maxdsiz=1073741824 # 1GB kern.dfldsiz=1073741824 # 1GB kern.maxssiz=134217728 # 128MB Is that

[squid-users] Squid LDAP authentication with 2003 AD

2006-09-01 Thread Saqib Khan \(horiba/eu\)
Hello List members, I am getting problem after authenticating a user over ldap. After getting authenticated I get the following error message: ERROR The requested URL could not be retrieved While trying to retrieve the URL: http://www.google.de/ The following error was encountered:

[squid-users] use squid for just images

2006-09-01 Thread Nick Duda
I've read about the issues with NTLM passthrough on squid. Is there any way a client can be configured to use squid for its cached content (like images) but go directly to a server for NTLM (nt auth)? The scenario is that one of our branch offices has a squid cache. They have dedicated private

Re: [squid-users] delivering stale content while fetching fresh

2006-09-01 Thread Henrik Nordstrom
On Fri, 2006-09-01 at 09:37 +0200, Gregor Reich wrote: Kind of. See the collapsed_forwarding and refresh_stale_hit options. Thank you for the hint; I searched the archives, googled and searched squid.conf (Squid3) but I didn't found any description of these options See the current STABLE

Re: [squid-users] Authentication problem

2006-09-01 Thread Henrik Nordstrom
On Fri, 2006-09-01 at 12:42 +0300, Strandell, Ralf wrote: Hi I try to access a page that requires a username and a password. The page is hosted on IIS. Which Squid version? Should work with current STABLE release (2.6.STABLE3). Squid-2.5 can only forward HTTP compliant authentication

Re: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-01 Thread Alejandro Decchi
Hi ! my squid friend.Can you explain me how did you do to install everything . A long tome ago i tried but i could not made this method of athentication. Can you give me a hand explain me step by step how this you all I read a lot of article hou to install ldap and squid with active directory

Re: RES: [squid-users] Freebsd -Squid - danguardian- Winbind- XMallocError

2006-09-01 Thread Henrik Nordstrom
On Fri, 2006-09-01 at 07:27 -0300, Erick Dantas Rotole wrote: Henrik, I had already read the FAQ. But the configuration for FREEBSD I think it is for older version. Possible. The reasoning is the same. Searching the web I found. add the following values to /boot/loader.conf which

Re: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-01 Thread Henrik Nordstrom
On Fri, 2006-09-01 at 15:07 +0200, Saqib Khan (horiba/eu) wrote: Hello List members, I am getting problem after authenticating a user over ldap. After getting authenticated I get the following error message: ERROR The requested URL could not be retrieved While trying to retrieve

RE: [squid-users] Authentication problem

2006-09-01 Thread Nick Duda
Are you saying 2.6 can work with the microsoft broken authentication schemes? This would be so nice...and solve lots of my problems. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Friday, September 01, 2006 10:44 AM To: Strandell, Ralf Cc:

Re: [squid-users] use squid for just images

2006-09-01 Thread Henrik Nordstrom
On Fri, 2006-09-01 at 09:58 -0400, Nick Duda wrote: I've read about the issues with NTLM passthrough on squid. Those should be pretty much an issue of the past now with the release of Squid-2.6 with support for NTLM passthrough. If you still have problems with 2.6.STABLE3 please file a bug

RE: [squid-users] Authentication problem

2006-09-01 Thread Henrik Nordstrom
On Fri, 2006-09-01 at 10:47 -0400, Nick Duda wrote: Are you saying 2.6 can work with the microsoft broken authentication schemes? Yes. Regards Henrik

[squid-users] Errors during make

2006-09-01 Thread Robert Shatford
Hey guys, this is my first post on this forum, so I would like to say hello. I am having troubles when I run make. It throws a bunch of errors that I don't understand. I was wondering if it outputs those errors to log somewhere and then I was wondering how do I find out what these errors mean.

Re: [squid-users] Errors during make

2006-09-01 Thread fulan Peng
Probablly you did not upgrade your libxml2. If you configure with ssl, you need the newest openssl. I have set up Squid on Linux, FreeBSD and Windows, all accelerator mode with SSL. I can help you in my chat server at http://breakevilaxis.org if you want do the same mode. I have scripts to create

[squid-users] Help with acl's

2006-09-01 Thread Jason
Hello, I have searched and read until I wanna bang my head. What I want squid to do: I have 6 internet computers that will access the internet (they have static ip's) and 2 homework computers (also static) that will only have access (whitelist) to a couple of websites (www.tutor.com for example).

[squid-users] access.log stopped working after 2.5 to 2.6 upgrade

2006-09-01 Thread Nick Duda
The 2.5 to 2.6 upgrade went great, everything appears to work , except its throwong some ntlm stuff which I think I can figure out...however, the access.log has stopped working, it doesnt write to it anymore. The store.log and cache.log work fineany ideas? Regards, Nick

[squid-users] Authenticate Squid Using Digital Certificate

2006-09-01 Thread Zaki Akhmad
Hello I am trying to use digital certificate for squid authentication. I have my certicate export to LDAP server. Is it possible to authenticate squid using digital certificate? Should I install extra package? And what configuration that I should add on the squid.conf? I had browse this

[squid-users] getting rid of 304's

2006-09-01 Thread Nick Duda
Client -- Squid --- server (IIS) We just put squid into play like this for a test we are doing. Prior to the test the client would hit the server directly for its pages. The web log showed the clients hits and downloading the pages, images...etc. We then put squid inbetween them, and the

[squid-users] reverse proxy v2.6

2006-09-01 Thread dale wilhelm
it appears that reverse proxy has been removed from the 2.6 version... does anyone know of a reason why this rm'd and if there is a work around??? i have the following in my config for 2.5: httpd_accel_host ( ip addr ) httpd_accel_port 8083 httpd_accel_single_host on httpd_accel_with_proxy on

Re: [squid-users] reverse proxy v2.6

2006-09-01 Thread Odhiambo WASHINGTON
* On 01/09/06 12:28 -0700, dale wilhelm wrote: | it appears that reverse proxy has been removed from the 2.6 | version... does anyone know of a reason why this rm'd and if there is | a work around??? i have the following in my config for 2.5: | | httpd_accel_host ( ip addr ) | httpd_accel_port

[squid-users] Re: Just a question?

2006-09-01 Thread Henrik Nordstrom
fre 2006-09-01 klockan 15:37 -0500 skrev Greg Bledsoe: Ok, one I've tried to look on your website for a windows .exe file on your website and was unsuccessful. So, do you have to use CYGWin or some other program to run it, or if not could you tell me where it is. Another thing, if I can't

Re: [squid-users] Errors during make

2006-09-01 Thread Henrik Nordstrom
fre 2006-09-01 klockan 10:56 -0500 skrev Robert Shatford: Hey guys, this is my first post on this forum, so I would like to say hello. I am having troubles when I run make. It throws a bunch of errors that I don't understand. Golden rule: Start with the first error, ignore the rest. If

Re: [squid-users] Help with acl's

2006-09-01 Thread Henrik Nordstrom
fre 2006-09-01 klockan 11:35 -0500 skrev Jason: # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS # Example rule allowing access from your local networks. Adapt # to list your (internal) IP networks from where browsing should # be allowed #acl our_networks src 192.168.1.0/24

Re: [squid-users] access.log stopped working after 2.5 to 2.6 upgrade

2006-09-01 Thread Henrik Nordstrom
fre 2006-09-01 klockan 14:33 -0400 skrev Nick Duda: The 2.5 to 2.6 upgrade went great, everything appears to work , except its throwong some ntlm stuff which I think I can figure out...however, the access.log has stopped working, it doesnt write to it anymore. The store.log and cache.log work

Re: [squid-users] Authenticate Squid Using Digital Certificate

2006-09-01 Thread Henrik Nordstrom
fre 2006-09-01 klockan 11:32 -0700 skrev Zaki Akhmad: I am trying to use digital certificate for squid authentication. I have my certicate export to LDAP server. Is it possible to authenticate squid using digital certificate? Yes, but browses only support this when using Squid as reverse

Re: [squid-users] reverse proxy v2.6

2006-09-01 Thread Henrik Nordstrom
fre 2006-09-01 klockan 22:37 +0300 skrev Odhiambo WASHINGTON: * On 01/09/06 12:28 -0700, dale wilhelm wrote: | it appears that reverse proxy has been removed from the 2.6 | version... does anyone know of a reason why this rm'd and if there is | a work around??? i have the following in my

Re: [squid-users] Authenticate Squid Using Digital Certificate

2006-09-01 Thread Henrik Nordstrom
fre 2006-09-01 klockan 15:04 -0700 skrev Zaki Akhmad: On 9/1/06, Henrik Nordstrom [EMAIL PROTECTED] wrote: Yes, but browses only support this when using Squid as reverse proxy infront of your web servers, not when using it as an Internet proxy. Squid doesn't use LDAP to verify the

[squid-users] cache peering question

2006-09-01 Thread Daniel Appleby
Hi, Just a question about cache_peering. If you have proxys setup in a sibling relationship does one proxy require authentication to access cache of another proxy if both proxys use prxoy_auth? i.e. does proxy A have to auth to proxy B in ordered to get its cache? Thanks in Advance Regards

[squid-users] Large Files

2006-09-01 Thread Mark Nottingham
I'd appreciate some enlightenment as to how Squid handles large files WRT memory and disk. In particular; - squid.conf says that memory is used for in-transit objects. What exactly is kept in memory for in-transit objects; just metadata, or the whole thing? - if something is in memory

Re: [squid-users] Large Files

2006-09-01 Thread Adrian Chadd
On Fri, Sep 01, 2006, Mark Nottingham wrote: I'd appreciate some enlightenment as to how Squid handles large files WRT memory and disk. In particular; - squid.conf says that memory is used for in-transit objects. What exactly is kept in memory for in-transit objects; just metadata,

Re: [squid-users] cache peering question

2006-09-01 Thread Adrian Chadd
On Sat, Sep 02, 2006, Daniel Appleby wrote: Hi, Just a question about cache_peering. If you have proxys setup in a sibling relationship does one proxy require authentication to access cache of another proxy if both proxys use prxoy_auth? i.e. does proxy A have to auth to proxy B in

[squid-users] proxy.pac file problem

2006-09-01 Thread Raj
Hi All, I am running Version 2.5.STABLE10 on an Open BSD operating system. I am having problems with proxy.pac file. I have the following proxy.pac file. if (isInNet(myIpAddress(), 172.26.96.0, 255.255.240.0)) return PROXY 172. 26.11.50:3128; PROXY 172.26.11.150:3128; if

[squid-users] strange, dont have cache peers but installer adds it to the default configuration

2006-09-01 Thread SSCR Internet Admin
Hi, I just updated my squid to squid-2.6.1 but strange it adds up a default cache_peer entry against itself. Could some help me out? cant figured it out during configure... heres my squid configure switches ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu

[squid-users] WCCPv2 GRE with 2.6 on Linux

2006-09-01 Thread Stephen Fletcher
Hi I have compiled the Debian Unstable package of Squid 2.6.3 and cannot get WCCPv2 GRE working. I have built with standard confiure options so WCCPv2 support should be available. I configure my wccp2_router and leave it as other default wccp2 options such that it is using ID 0 and GRE. I see the

Re: [squid-users] WCCPv2 GRE with 2.6 on Linux

2006-09-01 Thread Adrian Chadd
On Sat, Sep 02, 2006, Stephen Fletcher wrote: Hi I have compiled the Debian Unstable package of Squid 2.6.3 and cannot get WCCPv2 GRE working. I have built with standard confiure options so WCCPv2 support should be available. I configure my wccp2_router and leave it as other default wccp2

RE: [squid-users] WCCPv2 GRE with 2.6 on Linux

2006-09-01 Thread Stephen Fletcher
My config options configure options: '--prefix=/usr' '--exec_prefix=/usr' '--bindir=/usr/sbin' '--sbindir=/usr/sbin' '--libexecdir=/usr/lib/squid' '--sysconfdir=/etc/squid' '--localstatedir=/var/spool/squid' '--datadir=/usr/share/squid' '--enable-async-io' '--with-pthreads'

Re: [squid-users] WCCPv2 GRE with 2.6 on Linux

2006-09-01 Thread Adrian Chadd
Just to compare: Squid Cache: Version 3.0.PRE4-CVS (same options for 2.6 work fine.) configure options: '--prefix=/usr/local/squid' '--enable-storeio=ufs aufs null' '--enable-linux-netfilter' Config: cache_effective_user adrian wccp2_service standard 0 #wccp2_service dynamic 80