[squid-users] Config file tweak archive?

2008-04-20 Thread Tuc at T-B-O-H.NET
Hi, I've done a bunch of googling to see if I could find any sort of archive of squid configs and/or tweaks. I'm trying to look for an agressive, but not overly agressive caching of objects. Is there also the notion of forward caching? (If thats the right name). Where it

[squid-users] squid virus problem

2008-04-20 Thread Anil Saini
my squid showing this log comes from different ips. generating 100s of request in a sec. . is that some virus problem with the users(172.16.18.38)..machine or some other problem 1208689937.821 0 172.16.18.38 TCP_DENIED/403 1479 OPTIONS http://127.0.0.6/ - NONE/- text/html 1208689937.858

[squid-users] identify virus

2008-04-20 Thread Anil Saini
how can we roughly identify the virus on host machine by seeing squid access.log and cache.log - Anil Saini M.E. - Software Systems B.E. - Electronics and Communication Project Assistant CISCO LAB Information Processing Center Unit BITS-PILANI -- View this message in context:

[squid-users] Access Controls using MAC address

2008-04-20 Thread Odhiambo Washington
Hello list, I want to control access using mac address but I cannot figure out how to bundle machines into a group. Is this possible when you use ARP acl type? In the docs, I see the following example: acl M1 arp 01:02:03:04:05:06 acl M2 arp 11:12:13:14:15:16 http_access allow M1 http_access

Re: [squid-users] Only one outgoing connection for an incomming connection

2008-04-20 Thread Henrik Nordstrom
ons 2008-04-16 klockan 23:58 +1200 skrev Amos Jeffries: What you are describing sounds like the default behaviour of Squid. Except that there is no in/out connection relation as HTTP connection management is hop-by-hop, not end-to-end. Which means that when connections is kept persistent the

Re: [squid-users] squid virus problem

2008-04-20 Thread Dieter Bloms
Hi, On Sun, Apr 20, Anil Saini wrote: generating 100s of request in a sec. . is that some virus problem with the users(172.16.18.38)..machine or some other problem 1208689937.821 0 172.16.18.38 TCP_DENIED/403 1479 OPTIONS http://127.0.0.6/ - NONE/- text/html 1208689937.858 0 it

Re: [squid-users] authentification and banners

2008-04-20 Thread Henrik Nordstrom
ons 2008-04-16 klockan 18:31 +0400 skrev Serj A. Androsov: Hello all, I use basic authentification and want to open full access to some site blabla.com. The blabla.com page can contain images from the different sites. The authentification windows appeared because of these banners have

Re: [squid-users] Re: Clock sync accuracy importance?

2008-04-20 Thread Henrik Nordstrom
tis 2008-04-15 klockan 10:01 -0700 skrev Jon Drukman: i guess i don't really understand the difference between doing Expires: now plus 5 minutes (in apache speak) and Cache-Control: max-age=300 There is no real difference. Regards Henrik

Re: [squid-users] Problems accessing a website

2008-04-20 Thread Henrik Nordstrom
tor 2008-04-17 klockan 06:19 +0100 skrev [EMAIL PROTECTED]: Using Firefox 2.013 a blank page is returned, but in Firefox 3 beta5 there is a message about a compression type not supported, no info on what compression type though. Enable log_mime_hdrs and you'll get full HTTP details logged in

Re: [squid-users] Problems accessing a website

2008-04-20 Thread Henrik Nordstrom
fre 2008-04-18 klockan 02:06 +1200 skrev Amos Jeffries: A quick test shows the server at that site is broken and sending chunked encoded (HTTP/1.1) data back to HTTP/1.0 squid. I don't think thats supported properly in 3.0, just in the upcoming 2.7 and 3.1. It won't get handled properly in

Re: [squid-users] how to check virus using squid

2008-04-20 Thread Henrik Nordstrom
tor 2008-04-17 klockan 08:02 -0300 skrev Cassiano Martin: Its a anti-virus proxy wich uses clamav. You can use it together with squid. Or better yet, if using Squid-3 you can plug clamav directly into Squid using ICAP and the C-ICAP project... Regards Henrik

Re: [squid-users] tcp_denied

2008-04-20 Thread Henrik Nordstrom
tor 2008-04-17 klockan 04:59 -0700 skrev Jigar Raval: Hello, Squid log flooded with TCP_DENIED/400 1521 GET error:invalid-request. Around 20lacs entry in file. What could be the problem? Can i eliminate this entry not to be logged in access_log file. There probably is more details on the

Re: [squid-users] problem with purge

2008-04-20 Thread Henrik Nordstrom
tor 2008-04-17 klockan 19:55 +0530 skrev selvi nandu: Hi All, I am trying to use purge to view and delete the objects from the diskcache. I had taken the tar file from http://www.wa.apana.org.au/~dean/squidpurge/. I am facing some problems when i try to use the same in itanium 64 (ia64)

Re: [squid-users] squid-3 make

2008-04-20 Thread Henrik Nordstrom
fre 2008-04-18 klockan 07:27 +0200 skrev Florian: Another compiler (gcc 4.1.1) crashes too when compiling the squid-3.1 sources. Where is my mistake? Bye Florian CC=/usr/bin/gcc4; export CC Here.. you only upgraded gcc (C), not g++ (C++). CXX=/usr/bin/g++4; export CXX odilo

Re: [squid-users] change in source code

2008-04-20 Thread Henrik Nordstrom
fre 2008-04-18 klockan 15:57 +1200 skrev Amos Jeffries: It looks like Henrik has fixed the problem in the same way our patch works. It'll be in the next round of snapshots. Yes I did. Regards Henrik

Re: [squid-users] SSRS (reporting server) and reverse squid.

2008-04-20 Thread Henrik Nordstrom
fre 2008-04-18 klockan 12:20 +1000 skrev Dwyer, Simon: I am trying to get squid reverseing a SSRS on a IIS server. Its 443 to squid then 80 to the backend server. The problem is that most of the links on the site are https but some buttons like the ones up the top (home, settings, etc) are

Re: [squid-users] http://www.synopsys.com connection timeout

2008-04-20 Thread Henrik Nordstrom
fre 2008-04-18 klockan 13:14 +0900 skrev [EMAIL PROTECTED]: Clients are behind firewall(OpenBSD PF) and accessing web via squid proxy. Accessing http://www.synopsys.com failed with connection timeout error. Squid access log says TCP_MISS/504. This kind of errors is usually an TCP/IP error.

Re: [squid-users] forcing retrieval of cached copy

2008-04-20 Thread Henrik Nordstrom
fre 2008-04-18 klockan 13:07 -0700 skrev Mark Nottingham: Cache-Control: only-if-cached. Hmm... maybe we should start a Melbourne Squid Users Group... :) max-stale is also a good one in the context. Regards Henrik

Re: [squid-users] Squid 3 in Transparent mode problem

2008-04-20 Thread Henrik Nordstrom
lör 2008-04-19 klockan 10:15 +0530 skrev sekar it: Hello all, I have installed and configured the squid-3.0Stable1 in transparent mode with following options. http_port 3128 transparent I have redirected the traffic from my Gateway to Squid box with following rule. ( x.x.x.sq - squid

Re: [squid-users] Config file tweak archive?

2008-04-20 Thread Henrik Nordstrom
sön 2008-04-20 klockan 07:13 -0400 skrev Tuc at T-B-O-H.NET: I've done a bunch of googling to see if I could find any sort of archive of squid configs and/or tweaks. I'm trying to look for an agressive, but not overly agressive caching of objects. Search for refresh_pattern and you

Re: [squid-users] squid virus problem

2008-04-20 Thread Henrik Nordstrom
sön 2008-04-20 klockan 05:35 -0700 skrev Anil Saini: my squid showing this log comes from different ips. generating 100s of request in a sec. . is that some virus problem with the users(172.16.18.38)..machine or some other problem 1208689937.821 0 172.16.18.38 TCP_DENIED/403 1479

Re: [squid-users] Access Controls using MAC address

2008-04-20 Thread Henrik Nordstrom
sön 2008-04-20 klockan 17:29 +0300 skrev Odhiambo Washington: acl underdogs /path/to/file/with/several-mac-addresses http_access allow underdogs TIME-RESTRICTION http_access deny underdogs? Something like that possible? Should work exacly as you typed... Regards Henrik

[squid-users] Major Problem with Restarted Squid Stable 2.6_19

2008-04-20 Thread Nicole
I have several FreeBSD servers with 3 disks just for cache spools running Stable_2.6.19 in accelerator mode. Every so often, I have had a server lock up on me. Usually, before I upgraded them to ver 19, I would just reboot them and they would recover and start working again. Now however, apon

Re: [squid-users] identify virus

2008-04-20 Thread Amos Jeffries
how can we roughly identify the virus on host machine by seeing squid access.log and cache.log Turn on query-string logging and google the full URI which the client is trying to connect to. Some virus have well-known attack URI, or analysis by others published. If you can't find anything

Re: [squid-users] Access Controls using MAC address

2008-04-20 Thread Amos Jeffries
sön 2008-04-20 klockan 17:29 +0300 skrev Odhiambo Washington: acl underdogs /path/to/file/with/several-mac-addresses http_access allow underdogs TIME-RESTRICTION http_access deny underdogs? Something like that possible? Should work exacly as you typed... Just make sure you have

[squid-users] IP-to-Country csv file and conditionnal relay.

2008-04-20 Thread Julien MARY
Hi, After have googled a lot concerning my issue, I'm coming here. I'm using two servers, one is a transparent proxy, sitting in office in China. The other one is in another asian country. I have set up and ssh tunnel between the two computers in order to connect the two proxies in a secured

Re: [squid-users] IP-to-Country csv file and conditionnal relay.

2008-04-20 Thread Colin Campbell
Hi, On Mon, 2008-04-21 at 11:09 +0800, Julien MARY wrote: Hi, After have googled a lot concerning my issue, I'm coming here. I'm using two servers, one is a transparent proxy, sitting in office in China. The other one is in another asian country. I have set up and ssh tunnel between the

RE: [squid-users] Problem with Restarted Squid Stable 2.6_19 Addl Info

2008-04-20 Thread Nicole
On 21-Apr-08 My Secret NSA Wiretap Overheard Nicole Saying : I have several FreeBSD servers with 3 disks just for cache spools running Stable_2.6.19 in accelerator mode. Every so often, I have had a server lock up on me. Usually, before I upgraded them to ver 19, I would just reboot

[squid-users] LDAP or windbinds?

2008-04-20 Thread Dwyer, Simon
Hi all, I am trying to get my squid server to talk to AD. It seems there are two ways of doing this . Squid - ldap - kerberos - ad or Squid - winbinds - kerberos - ad. Is there a prefered method or do both work the same? Cheers, Simon

Re: [squid-users] Problem with Restarted Squid Stable 2.6_19 Addl Info

2008-04-20 Thread Adrian Chadd
On Sun, Apr 20, 2008, Nicole wrote: I hate replying to my own post, but some further info on this in that quite a bit of time that the cache.log is reporting that it is validating entries and taking quite a bit of time. Why is it going through this validation procedure and it seems to