Re: [squid-users] Setting Squid to allow active FTP connections

2008-02-24 Thread Shishir Saud
Kirtimaan wrote: Hello, Recently I installed the Squid Proxy server in our network on Fedora Core 7 linux box. Other windows system use this linux box as their Internet Gateway and DNS server. All traffic on port 80 on fedora system is forwarded to Squid port 3128. Our FTP server does not

[squid-users] how to see real time traffice in squid

2008-02-24 Thread ankush grover
Hi friends, I need a script/utility (command-line/web based) to see which ip/ips are consuming the most bandwidth at the given time. I tried squidtaild script it tells you which connections/websites u want to track but it does not shows how much bandwidth consumed by those connections. What I am

[squid-users] Clearing the cache

2008-02-24 Thread Ric
In http://wiki.squid-cache.org/SquidFaq/ClearingTheCache, it says to purge the cache via: squid -k shutdown rm -r /squid/cache/* squid -z squid I've seen elsewhere say to use: squid -k shutdown echo '' /squid/cache/swap.state squid I like this second one -- it's fast and simple (and less

Re: [squid-users] Clearing the cache

2008-02-24 Thread Amos Jeffries
Ric wrote: In http://wiki.squid-cache.org/SquidFaq/ClearingTheCache, it says to purge the cache via: squid -k shutdown rm -r /squid/cache/* squid -z squid I've seen elsewhere say to use: squid -k shutdown echo '' /squid/cache/swap.state squid I like this second one -- it's fast and

Re: [squid-users] Logging users

2008-02-24 Thread Amos Jeffries
Sam Carleton wrote: On Fri, Feb 22, 2008 at 12:43 PM, Odhiambo Washington [EMAIL PROTECTED] wrote: What is the setup like? Have you heard about dansguardian? My setup? It is a Squid-Cache 2.6 install on my OpenBSD 3.5 firewall. It is a transparent proxy such that everything on the inbound on

Re: [squid-users] any thought to making collapsed_forwarding acl-based?

2008-02-24 Thread Amos Jeffries
Neil Harkins wrote: hi. this might belong on squid-dev, but figure i'll try here first. squid doesn't know if an object is even cacheable until it gets the headers back from origin, thus collapsed forwarding seems to impair performance of non-cacheable content, by blocking what will have to be

Re: [squid-users] Setting Squid to allow active FTP connections

2008-02-24 Thread Amos Jeffries
Kirtimaan wrote: Hello, Recently I installed the Squid Proxy server in our network on Fedora Core 7 linux box. Other windows system use this linux box as their Internet Gateway and DNS server. All traffic on port 80 on fedora system is forwarded to Squid port 3128. Our FTP server does not

Re: [squid-users] LDAP AUTH acl for WAN externals clients ?

2008-02-24 Thread Amos Jeffries
Frank Bonnet wrote: Hello Actually I use a very simple config with squid every machine into our LAN has proxy access the acl is IP address based. it works Now I would like to let our users use our proxy from the Internet through the LDAP AUTH mechanism. I have configured both configs

Re: [squid-users] Logging users

2008-02-24 Thread Sam Carleton
On Sun, Feb 24, 2008 at 7:45 AM, Amos Jeffries [EMAIL PROTECTED] wrote: Sam Carleton wrote: On Fri, Feb 22, 2008 at 12:43 PM, Odhiambo Washington [EMAIL PROTECTED] wrote: What is the setup like? Have you heard about dansguardian? My setup? It is a Squid-Cache 2.6 install on my

[squid-users] proxy-connection question

2008-02-24 Thread Markus Moeller
I have a setup where I authenticate to squid with Negotiate and then I authenticate to an apache web server with Negotiate. The problem I have is that to a web server running on Solaris it works, but to another on Linux it doesn't. The only difference I can see is that when I go to the

Re: [squid-users] Logging users

2008-02-24 Thread Odhiambo Washington
Then use an identd as has been mentioned in this list before. On 2/24/08, Sam Carleton [EMAIL PROTECTED] wrote: On Sun, Feb 24, 2008 at 7:45 AM, Amos Jeffries [EMAIL PROTECTED] wrote: Sam Carleton wrote: On Fri, Feb 22, 2008 at 12:43 PM, Odhiambo Washington [EMAIL PROTECTED] wrote:

Re: [squid-users] Clearing the cache

2008-02-24 Thread Ric
On Feb 24, 2008, at 4:40 AM, Amos Jeffries wrote: Ric wrote: In http://wiki.squid-cache.org/SquidFaq/ClearingTheCache, it says to purge the cache via: squid -k shutdown rm -r /squid/cache/* squid -z squid I've seen elsewhere say to use: squid -k shutdown echo '' /squid/cache/swap.state

[squid-users] Redirection

2008-02-24 Thread Steve Billig
Now I know you are able to redirect websites to others with squid, but how. I read up on like Squid Guard, but that did not help at all. -- -Steve

Re: [squid-users] proxy-connection question

2008-02-24 Thread Henrik Nordström
sön 2008-02-24 klockan 14:43 + skrev Markus Moeller: I have a setup where I authenticate to squid with Negotiate and then I authenticate to an apache web server with Negotiate. The problem I have is that to a web server running on Solaris it works, but to another on Linux it doesn't.

Re: [squid-users] Clearing the cache

2008-02-24 Thread Henrik Nordström
sön 2008-02-24 klockan 02:46 -0800 skrev Ric: In http://wiki.squid-cache.org/SquidFaq/ClearingTheCache, it says to purge the cache via: squid -k shutdown rm -r /squid/cache/* squid -z squid I've seen elsewhere say to use: squid -k shutdown echo '' /squid/cache/swap.state squid

Re: [squid-users] round robin DNS and the occassional failing IP.

2008-02-24 Thread Henrik Nordström
sön 2008-02-24 klockan 03:54 +1100 skrev Tim Connors: I am having trouble on two machines on two completely different networks, both using squid -- for months now, a reasonably portion of the time, squid fails to get through to google.com.au for the first minute. A tcpdump revealed that

Re: [squid-users] how to make squid support gzip compression?

2008-02-24 Thread Henrik Nordström
fre 2008-02-22 klockan 17:55 +0800 skrev J. Peng: how to make squid support gzip compression? most useragents and web servers support gzip compression feature, how to config squid support it? Squid supports it provided the server complies with HTTP specifications and sends a proper Vary

Re: [squid-users] how to make squid support gzip compression?

2008-02-24 Thread Henrik Nordström
fre 2008-02-22 klockan 19:32 +0800 skrev J. Peng: 2.6+ and 3.1+ are capable of properly handling broken servers producing chunked-encoding data. what's this Amos? can you give me the more detailed description? thanks. Some servers responds with chunked transfer encoding on HTTP/1.0

Re: [squid-users] --enable-underscore

2008-02-24 Thread Henrik Nordström
fre 2008-02-22 klockan 16:33 +0800 skrev J. Peng: does squid-2.6.18 support --enable-underscore compling option by default? because I didn't see that option when running ./configure --help |grep underscore. It has moved into squid.conf. Regards Henrik signature.asc Description: Detta är en

Re: [squid-users] Reverse proxy woes

2008-02-24 Thread Henrik Nordström
tor 2008-02-21 klockan 18:45 -0500 skrev Anthony Tonns: HTTP/1.0 200 OK Date: Thu, 21 Feb 2008 23:31:55 GMT Server: Resin/3.1.3 Cache-Control: max-age=60, must-revalidate, proxy-revalidate Expires: Thu, 21 Feb 2008 23:32:54 GMT Content-Type: text/html; charset=iso-8859-1 X-Cache:

Re: [squid-users] problem with wccp v2 and cisco

2008-02-24 Thread Henrik Nordström
sön 2008-02-24 klockan 09:58 +0900 skrev Adrian Chadd: There's only a small number of things you have to do to setup WCCPv2. * configure/compile squid with the relevant transparent interception option. For you its --enable-linux-netfilter IIRC. * enable ip forwarding in linux ip

Re: [squid-users] cannot auth win 2003 users with squid ldap_auth

2008-02-24 Thread Henrik Nordström
tor 2008-02-21 klockan 08:55 -0800 skrev Sheldon Carvalho: Hi, I was trying to setup squid on fc7. Version 2.6.STABLE16. I have a domain setup in win 2003 server with about 20 users (abcgroup.local), the IP address of the domain controller being 192.168.10.3. I have a group(abcgroup), which

Re: [squid-users] FTP access configuration

2008-02-24 Thread Henrik Nordström
fre 2008-02-22 klockan 12:48 +0530 skrev Arun Shrimali: Is there any way that browser pop up for the username and password, because the said method disclose the password to all and that could be a security issue ... Squid supports this mode of operation when seeing ftp://[EMAIL

Re: [squid-users] confused config on default squid.conf

2008-02-24 Thread Henrik Nordström
tor 2008-02-21 klockan 09:43 +0800 skrev J. Peng: # By combining nonhierarchical_direct off and prefer_direct on you # can set up Squid to use a parent as a backup path if going direct # fails. Why it's nonhierarchical_direct off and prefer_direct on? I think it should

Re: [squid-users] original server down

2008-02-24 Thread Henrik Nordström
ons 2008-02-20 klockan 22:23 +1300 skrev Amos Jeffries: Will squid get cache MISS object from its sibling? Yes, IFF the sibling has it fresh. Which requires a peering method. I.e. ICP/HTCP/Cache Digests. Regards Henrik signature.asc Description: Detta är en digitalt signerad

[squid-users] Squid Outside Exchange Server

2008-02-24 Thread Martin, Jeremy
We have been using squid for about a year now and have worked through most of our issue. However we have one issue that we have not been able to resolve as of yet. We use NTLM auth through our Active Directory and all is good until a user tries to check there email from an outside Exchange

RE: [squid-users] Random image generator w/ reverse-proxy

2008-02-24 Thread Henrik Nordström
mån 2008-02-18 klockan 16:31 -0600 skrev Keith M. Richard: To try and give a little more data to the original message, here is output from squidclient: [EMAIL PROTECTED] squidclient -r -v -p -m GET

Re: [squid-users] confused config on default squid.conf

2008-02-24 Thread J. Peng
On Mon, Feb 25, 2008 at 10:43 AM, Henrik Nordström [EMAIL PROTECTED] wrote: tor 2008-02-21 klockan 09:43 +0800 skrev J. Peng: # By combining nonhierarchical_direct off and prefer_direct on you # can set up Squid to use a parent as a backup path if going direct #

Re: [squid-users] any thought to making collapsed_forwarding acl-based?

2008-02-24 Thread Henrik Nordström
fre 2008-02-22 klockan 16:20 -0800 skrev Neil Harkins: most site administrators know what's cacheable or not on their site, and could craft regex to differentiate thus collapsed_forwarding being acl-based would be extremely beneficial, but it appears to be global on/off today. is this

Re: [squid-users] DNS-based reverse proxy peer selection, 2.5 vs 2.6

2008-02-24 Thread Henrik Nordström
mån 2008-02-18 klockan 12:57 + skrev Sven Edge: In the 2.5 config, httpd_accel_host virtual and possibly also httpd_accel_single_host off httpd_accel_uses_host_header on mean that web servers are chosen from our internal DNS, without needing to be hardcoded as

Re: [squid-users] Reverse Proxy, getting 503 errors when POST

2008-02-24 Thread Henrik Nordström
tis 2008-02-19 klockan 12:54 -0500 skrev Nick Duda: I've setup a very basic reverse proxy (maybe the error is because of my config). It appears to be working as the reverse proxy properly, however I can not perform a HTTP POST , I get TCP_MISS/503 error in my access.log Client surfs to

Re: [squid-users] v2.6. Dynamic ACL time management

2008-02-24 Thread Henrik Nordström
mån 2008-02-18 klockan 13:46 +0300 skrev Serj A. Androsov: Hello there, Is there ways to perform a dynamic time management for several src's net? The problem is: A couple of subnets (stored in MySQL database) A couple of internet access time acl's (alse stored in MySQL database). Also

Re: [squid-users] strange memory use

2008-02-24 Thread Henrik Nordström
mån 2008-02-18 klockan 15:16 +0800 skrev J. Peng: it said my storage mem size is 4404 KB, though I have set the cache_mem size to 1.8 GB in squid.conf: Only 4404 KB of that 1.8 GB has been used. Either all small objects already exised on disk, or your clients are mainly requesting objects

Re: [squid-users] squid source compile

2008-02-24 Thread Henrik Nordström
fre 2008-02-15 klockan 06:20 -0800 skrev pokeman: can i compile and hide the squid.conf nobody can view settings one method would be to start Squid as squid -f '|/path/to/some/program/printing/a/squid.conf' (3.0 required) Regards Henrik signature.asc Description: Detta är en digitalt

Re: [squid-users] Squid in Transparent ?

2008-02-24 Thread Henrik Nordström
fre 2008-02-15 klockan 13:29 +0100 skrev Phibee Network Operation Center: Hi it's a problems that use squid with a iptable redirect: 80 to 8080 and into squid.conf don't put transparent to : http_port 8080 Yes. Without transparent Squid will not understand what to do with the redirected

Re: [squid-users] confused config on default squid.conf

2008-02-24 Thread Henrik Nordström
mån 2008-02-25 klockan 11:20 +0800 skrev J. Peng: On Mon, Feb 25, 2008 at 10:43 AM, Henrik Nordström [EMAIL PROTECTED] wrote: tor 2008-02-21 klockan 09:43 +0800 skrev J. Peng: # By combining nonhierarchical_direct off and prefer_direct on you # can set up Squid to use

Re: [squid-users] Setting Squid to allow active FTP connections

2008-02-24 Thread Kirtimaan
Hello Shishir, I tried the command you mentioned below and it worked. Now I can access ftp in active mode. Can you provide some hint what ip_nat_ftp module exactly do ? I know its not squid related directly, but it might help me to understand how this kernel module allowed squid for active

Re: [squid-users] Setting Squid to allow active FTP connections

2008-02-24 Thread Kirtimaan
Hello Amos, Thanks for your reply, I tried the command which Shishir suggested and it worked. Thanks, Kirtimaan Amos Jeffries wrote: Kirtimaan wrote: Hello, Recently I installed the Squid Proxy server in our network on Fedora Core 7 linux box. Other windows system use this linux box as