Re: [squid-users] Chat Apps getting blocked

2008-04-21 Thread Amos Jeffries
g f wrote: I have a question about your reply: http_access deny CONNECT !SSL_ports Shouldnt this deny access to all but SSL_ports 443 and 563? but wouldnt this: acl Safe_ports port 1025-65535 # unregistered ports http_access deny !Safe_ports allow access on port 5222 (normally default xmpp p

Re: [squid-users] Does anyone know how to make https work?

2008-04-21 Thread Amos Jeffries
Brian Lu wrote: > Hi All > I meet a problem:when I use https to access the web pages,my IE always > show me: > 1.If setuped cache_peer: > 錯誤 > 欲連結之網址(URL)無法正確的傳回 > > 當嘗試傳回下面的網址(URL)時: > https://www.chb.com.tw/wcm/web/home/index.html > 發生了下列的錯誤: > Unsupported Request Method and Protocol > 尚未支援的要求

Re: [squid-users] Re: Force cache reload for object from browser

2008-04-21 Thread Amos Jeffries
Paul Bryson wrote: Henrik Nordstrom wrote: Good question how to ask a browser to do a reload of a non-displayable object... Heck, it doesn't really even need to even be a browser (though that would be most universally useful). I just need some way to tell the proxy to grab a new version of

Re: [squid-users] Rewrite http to https for owa.

2008-04-21 Thread Amos Jeffries
Dwyer, Simon wrote: Hey everyone, I am starting to really get my squid server under control here :) One last step to have it fully working is to rewrite address's coming in on http to https. This is for OWA. I have tried to use squirm and have some success. What I need to do is redirect http

Re: [squid-users] Problem with Restarted Squid Stable 2.6_19 Add

2008-04-21 Thread Adrian Chadd
On Mon, Apr 21, 2008, Nicole wrote: > Hi > The swaplog files are about 156 megs. Altho I have some servers that have > swaplogs that are 1.6 gigs but are fine as they the servers have never been > restarted. > > I have never run squid -k rotate. I have another server that just started > exibi

Re: [squid-users] Help Needed: Any suggestion on performance downgrade after enable Cache Digest?

2008-04-21 Thread Adrian Chadd
On Tue, Apr 22, 2008, Zhou, Bo(Bram) wrote: > Adrian, > > I'm using RHE4 with kernel 2.6.9. I used top to collect CPU utilization and > didn't use oprofile but just installed. I will use it to do profiling in the > later testing session. Thanks for your reminder. Make sure you also install the g

[squid-users] Rewrite http to https for owa.

2008-04-21 Thread Dwyer, Simon
Hey everyone, I am starting to really get my squid server under control here :) One last step to have it fully working is to rewrite address's coming in on http to https. This is for OWA. I have tried to use squirm and have some success. What I need to do is redirect http://mail.domainname.com

RE: [squid-users] Help Needed: Any suggestion on performance downgrade after enable Cache Digest?

2008-04-21 Thread Zhou, Bo(Bram)
Adrian, I'm using RHE4 with kernel 2.6.9. I used top to collect CPU utilization and didn't use oprofile but just installed. I will use it to do profiling in the later testing session. Thanks for your reminder. Best Regards, Bo Zhou >> -Original Message- >> From: Adrian Chadd [mailto:[EM

Re: [squid-users] Problem with Restarted Squid Stable 2.6_19 Add

2008-04-21 Thread Nicole
On 21-Apr-08 My Secret NSA Wiretap Overheard Adrian Chadd Saying : > On Sun, Apr 20, 2008, Nicole wrote: > >> > I took a look at this over the weekend (whilst looking at other stuff in >> > the >> > storage code) and I could -probably- make the AUFS swaplog parsing case >> > much >> > faster. I'

[squid-users] Re: Force cache reload for object from browser

2008-04-21 Thread Paul Bryson
Henrik Nordstrom wrote: Good question how to ask a browser to do a reload of a non-displayable object... Heck, it doesn't really even need to even be a browser (though that would be most universally useful). I just need some way to tell the proxy to grab a new version of the file. Atamido

Re: [squid-users] Force cache reload for object from browser

2008-04-21 Thread Henrik Nordstrom
mån 2008-04-21 klockan 14:03 -0500 skrev Paul Bryson: > I am wondering if there is any way (standard or not) to get a web > browser to force a web cache to check for an updated version of an > object. The reload button generally does that. Or if that fails Control+Reload or Shift+Reload dependi

[squid-users] Force cache reload for object from browser

2008-04-21 Thread Paul Bryson
I am wondering if there is any way (standard or not) to get a web browser to force a web cache to check for an updated version of an object. I'm using a Squid proxy that I do not have control over, and I'm trying to grab a file from a website, but the cache keeps handing me an older version of

Re: [squid-users] Proxy Auth sniffable?

2008-04-21 Thread Guido Serassio
Hi, At 17:59 21/04/2008, Andreas Pettersson wrote: Is the browser sending username and password in cleartext or a simple base64 encoding when user authenticaties with proxy authentication against an ldap directory? Yes, as any basic authentication helper. Regards Guido - =

Re: [squid-users] how to check virus using squid

2008-04-21 Thread Christos Tsantilas
Henrik K wrote: On Mon, Apr 21, 2008 at 12:11:49AM +0200, Henrik Nordstrom wrote: tor 2008-04-17 klockan 08:02 -0300 skrev Cassiano Martin: Its a anti-virus proxy wich uses clamav. You can use it together with squid. Or better yet, if using Squid-3 you can plug clamav directly into Squid usin

[squid-users] Proxy Auth sniffable?

2008-04-21 Thread Andreas Pettersson
Is the browser sending username and password in cleartext or a simple base64 encoding when user authenticaties with proxy authentication against an ldap directory? -- Andreas

Re: [squid-users] Help Needed: Any suggestion on performance downgrade after enable Cache Digest?

2008-04-21 Thread Adrian Chadd
Which OS? If Linux, did you start looking at the CPU use using oprofile? Adrian On Mon, Apr 21, 2008, Zhou, Bo(Bram) wrote: > Hi, > > Recently I did some interesting performance testing on the Squid configured > with Cache Digest Enabled. The testing result shows that the Squid use more > than

RE: [squid-users] Help Needed: Any suggestion on performancedowngrade after enable Cache Digest?

2008-04-21 Thread Zhou, Bo(Bram)
Alex, Thanks for your quick response and good suggestion. You are definitely right that I'm testing with a useless-digest Squid but with high cpu utilization which I did not expect. I will do more testing and profiling with modified Squid as you suggested in the next coming days, collect more data

Re: [squid-users] Help Needed: Any suggestion on performance downgrade after enable Cache Digest?

2008-04-21 Thread Alex Rousskov
On Mon, 2008-04-21 at 18:48 +0800, Zhou, Bo(Bram) wrote: > Recently I did some interesting performance testing on the Squid configured > with Cache Digest Enabled. The testing result shows that the Squid use more > than 20% CPU time than the Squid running without Cache Digest. Thank you for post

Re: [squid-users] Chat Apps getting blocked

2008-04-21 Thread Odhiambo Washington
On Mon, Apr 21, 2008 at 4:13 PM, Amos Jeffries <[EMAIL PROTECTED]> wrote: > > Odhiambo Washington wrote: > > > Hello List, > > > > I copycat(ed) a squid.conf from this list a few days ago and did > > minimal config mods just to allow my network to use it. It works great > > with youtube caching, bu

Re: [squid-users] Chat Apps getting blocked

2008-04-21 Thread Amos Jeffries
Odhiambo Washington wrote: Hello List, I copycat(ed) a squid.conf from this list a few days ago and did minimal config mods just to allow my network to use it. It works great with youtube caching, but stranegly, it blocks MSN/Yahoo chats, but I sincerely cannot see where this is happening. The f

Re: [squid-users] Upgrade from Squid 2.5 Stable6 to Squid 2.6Stable19 - Part II

2008-04-21 Thread Amos Jeffries
Henrik Nordstrom wrote: mån 2008-04-21 klockan 16:25 +0800 skrev Thompson, Scott (WA): #cat /proc/version Linux version 2.6.9-11.EL ([EMAIL PROTECTED]) (gcc version 3.4.3 20050227 (Red Hat 3.4.3-22)) #1 Wed Jun 8 16:59:52 CDT 2005 Then the update for RHEL should probably work for you: http:/

[squid-users] Does anyone know how to make https work?

2008-04-21 Thread Brian Lu
Hi All I meet a problem:when I use https to access the web pages,my IE always show me: 1.If setuped cache_peer: 錯誤 欲連結之網址(URL)無法正確的傳回 當嘗試傳回下面的網址(URL)時: https://www.chb.com.tw/wcm/web/home/index.html 發生了下列的錯誤: Unsupported Request Method and Protocol 尚未支援的要求方式或通訊協定 Squid does not support all re

RE: [squid-users] Help Needed: Any suggestion on performance downgrade after enable Cache Digest?

2008-04-21 Thread Zhou, Bo(Bram)
One thing missed: I'm using Squid 2.6 STABLE 19. Thanks. Best Regards, Bo Zhou Tel: +86-10-62295296 ext.5708 Fax: +86-10-950507 ext.336690 Confidential and Proprietary Information Notice: This email and any attached files are confidential and intended solely for the use of the individual o

[squid-users] Help Needed: Any suggestion on performance downgrade after enable Cache Digest?

2008-04-21 Thread Zhou, Bo(Bram)
Hi, Recently I did some interesting performance testing on the Squid configured with Cache Digest Enabled. The testing result shows that the Squid use more than 20% CPU time than the Squid running without Cache Digest. Following are my detailed testing environment and configuration and result. Any

RE: [squid-users] Upgrade from Squid 2.5 Stable6 to Squid 2.6Stable19 - Part II

2008-04-21 Thread Henrik Nordstrom
mån 2008-04-21 klockan 16:25 +0800 skrev Thompson, Scott (WA): > #cat /proc/version > Linux version 2.6.9-11.EL ([EMAIL PROTECTED]) (gcc version 3.4.3 20050227 > (Red Hat 3.4.3-22)) #1 Wed Jun 8 16:59:52 CDT 2005 Then the update for RHEL should probably work for you: http://www.squid-cache.org/D

Re: [squid-users] how to check virus using squid

2008-04-21 Thread Henrik K
On Mon, Apr 21, 2008 at 12:11:49AM +0200, Henrik Nordstrom wrote: > tor 2008-04-17 klockan 08:02 -0300 skrev Cassiano Martin: > > > Its a anti-virus proxy wich uses clamav. You can use it together with squid. > > Or better yet, if using Squid-3 you can plug clamav directly into Squid > using ICAP

RE: [squid-users] Upgrade from Squid 2.5 Stable6 to Squid 2.6Stable19 - Part II

2008-04-21 Thread Thompson, Scott (WA)
#cat /proc/version Linux version 2.6.9-11.EL ([EMAIL PROTECTED]) (gcc version 3.4.3 20050227 (Red Hat 3.4.3-22)) #1 Wed Jun 8 16:59:52 CDT 2005 -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Monday, 21 April 2008 4:18 PM To: Thompson, Scott (WA) Cc: squid-user

Re: [squid-users] Upgrade from Squid 2.5 Stable6 to Squid 2.6 Stable19 - Part II

2008-04-21 Thread Henrik Nordstrom
mån 2008-04-21 klockan 15:32 +0800 skrev Thompson, Scott (WA): > Sorry in my previous post I assumed I was running 2.6 Stable 6 and I > wanted to u/g to Stable 19 but it appears I am running 2.5 Stable6 and I > want to u/g to Squid 2.6 Stable 19 What OS are you running? Aparently some RedHat base

Re: [squid-users] Upgrade from Stable6 to stable19

2008-04-21 Thread Henrik Nordstrom
mån 2008-04-21 klockan 14:25 +0800 skrev Thompson, Scott (WA): > Stupid question I am sure, but Linux is not one of my strong points > Is there a good link for some doco on how to upgrade Squid from Stable 6 > to Stable 19? > Do I have to reinstall and recompile? 2.6.STABLE19 understands 2.6.STABL

Re: [squid-users] Marking Cached traffic..

2008-04-21 Thread Henrik Nordstrom
ons 2008-04-16 klockan 16:24 +0200 skrev Stephan Viljoen: > I was wondering whether it's posible to mark cached traffic with a different > TOS then uncached traffic. I need to come up with a way of passing cached > traffic through our bandwidth manager without taxing the end user for it. > Basic

Re: [squid-users] Upgrade from Squid 2.5 Stable6 to Squid 2.6 Stable19 - Part II

2008-04-21 Thread Adrian Chadd
(Top-post) Yes, that should work just fine. Adrian On Mon, Apr 21, 2008, Thompson, Scott (WA) wrote: > Sorry in my previous post I assumed I was running 2.6 Stable 6 and I > wanted to u/g to Stable 19 but it appears I am running 2.5 Stable6 and I > want to u/g to Squid 2.6 Stable 19 > > I hav

[squid-users] Upgrade from Squid 2.5 Stable6 to Squid 2.6 Stable19 - Part II

2008-04-21 Thread Thompson, Scott (WA)
Sorry in my previous post I assumed I was running 2.6 Stable 6 and I wanted to u/g to Stable 19 but it appears I am running 2.5 Stable6 and I want to u/g to Squid 2.6 Stable 19 I have found that when I run squid -v I get the following output Squid Cache: Version 2.5.STABLE6 configure options: --

Re: [squid-users] LDAP or windbinds?

2008-04-21 Thread Adrian Chadd
The "official" way is to use winbind. The samba guys know more about NTLM than us. For basic auth? ldap is fine. Adiran On Mon, Apr 21, 2008, Dwyer, Simon wrote: > Hi all, > > I am trying to get my squid server to talk to AD. It seems there are two > ways of doing this . Squid -> ldap -> ke