Re: [squid-users] Removing a URL from SQUID

2008-05-29 Thread Henrik Nordstrom
On tor, 2008-05-29 at 04:55 +0300, Mr. Issa(*) wrote: THanks Chris it worked BUT check this: Clearing URL http://www.google.com/ .. HTTP/1.0 404 Not Found Server: squid/2.6.STABLE19 Date: Thu, 29 May 2008 01:31:43 GMT Content-Length: 0 .. done. it Says that the URL is not found?

Re: [squid-users] Squid core

2008-05-29 Thread Matus UHLAR - fantomas
On 28.05.08 09:36, [EMAIL PROTECTED] wrote: Hello, I have a problem with Squid. Every day, over 0:00h (when logs are rotated) my squid generates a core file that almost full all '/var/spool/squid' partition. Looking at squid-cache logs, here is what it's shown: 2008/05/27 00:06:12|

Re: [squid-users] Squid Disconnection problem for messenger

2008-05-29 Thread Cassiano Martin
Do you mean MSN messenger? No, it wont pass thru squid, only if you block port 1863. Are you sure that is squid causing this? Amod Kulkarni wrote: Hello, I am using squid proxy in our network. Since last few days, we are facing problem with our squid proxy server that it gets disconnected

[squid-users] Problem while accessing the site

2008-05-29 Thread Amod Kulkarni
Hello Squid, Presently I have a problem to access a URL The problem details is given below: The requested URL could not be retrieved While trying to retrieve the URL: http://googlewebtoolkit.blogspot.com/ The following error was encountered: Unable to determine IP address from host name

Re: [squid-users] Problem while accessing the site

2008-05-29 Thread Amos Jeffries
Amod Kulkarni wrote: Hello Squid, Presently I have a problem to access a URL The problem details is given below: The requested URL could not be retrieved While trying to retrieve the URL: http://googlewebtoolkit.blogspot.com/ The following error was encountered: Unable to determine IP

Re: [squid-users] Errors building 2.7.STABLE1 - delay pools

2008-05-29 Thread Amos Jeffries
JPP wrote: Ooops. Must have missed that post to the list if there was one... I will wait patiently! Or you could grab the daily snapshot of 2.7. http://www.squid-cache.org/Versions/v2/2.7/ Thanks for the quick response. Jerome On Thu, 29 May 2008 13:35:43 +0800, Adrian Chadd wrote

Re: [squid-users] Does anyone know how to make SSL bump work?

2008-05-29 Thread Amos Jeffries
Treker Chen wrote: Dear all I downloaded squid-3.HEAD-20080528, compiled it with --enable-ssl --enable-icap-client. and configured squid.conf with SSL bump with the following setting http_port 3128 sslBump cert=/usr/local/squid/etc/apache.crt key=/usr/local/squid/etc/apache.pem ssl_bump allow

Re: [squid-users] file descriptor error...

2008-05-29 Thread Visolve
Hello Tommy, First increase the file descriptor for your terminal using ulimit -n 8192 . Then start the squid and check the cache.log. Thanks, -Visolve Squid Team www.visolve.com/squid/ [EMAIL PROTECTED] wrote: greeting for dear all... how can i upgrade my file descriptor in my

Re: [squid-users] squid 2.6, wccp and tproxy

2008-05-29 Thread Amos Jeffries
Ritter, Nicholas wrote: In websense the client IP addresses that show up are those of the squid boxes I have deployed. Websense does not utilize, as far as I know, the x-forwarded-for header. The doc on squid-cache.org about how to setup TPROXY with squid is a bit out of date because the

Re: [squid-users] Problem while accessing the site

2008-05-29 Thread Cassiano Martin
Yup, and this could be the same problem you are having with your messaging software. This is like DNS failures. Amos Jeffries wrote: Amod Kulkarni wrote: Hello Squid, Presently I have a problem to access a URL The problem details is given below: The requested URL could not be retrieved

Re: [squid-users] file descriptor error...

2008-05-29 Thread [EMAIL PROTECTED]
Dear All... I'm already solving the problem for that file descriptor. Thanks for support :) This is a little bit of my cache.log : 2008/05/29 19:18:12| Starting Squid Cache version 2.6.STABLE18 for i386-unknown-openbsd4.3... 2008/05/29 19:18:12| Process ID 19231 2008/05/29 19:18:12| With 8192

Re: [squid-users] problem with 3.0 and reply_header_access

2008-05-29 Thread Amos Jeffries
Leonardo Rodrigues Magalhães wrote: Amos Jeffries escreveu: Two things. 1) The ACL should be dstdomain .microsoft.com not a slow regex. OK, fixed that it wont make much difference for me, as i have very few requests on this squid box and a lot of available CPU power. 2) The

Re: [squid-users] problem with 3.0 and reply_header_access

2008-05-29 Thread Leonardo Rodrigues Magalhães
Amos Jeffries escreveu: Anyway . even with request_header_access or reply_header_access as i told on the original message, i cannot see these parameters when using 'Current Squid Configuration' option of cachemgr.cgi. I think this looks a minor bug .. It does. Could you file

RE: [squid-users] squid 2.6, wccp and tproxy

2008-05-29 Thread Ritter, Nicholas
That is interesting to note, and part of where my problem lies. Given the way the files are marked on the balabit site, I would not have known of the support versions and differences. I just downloaded the patches for the versions of squid, iptables, and kernel I was using. During the setup of

Re: [squid-users] Authentication problem/oddity/ignorance

2008-05-29 Thread Rob Asher
Chris Robertson [EMAIL PROTECTED] 5/28/2008 5:03 PM Proxies. Plural. How are you spreading the traffic among the proxies. A number of authentication requiring websites associate login credentials with a source IP. Using a round robin load balancer (without source NATing the outgoing

Re: [squid-users] Does anyone know how to make SSL bump work?

2008-05-29 Thread Treker Chen
That error looks like your ACL are denying access somewhere. Is there a peer configured and never_direct lines anywhere? Nope, there is no peer or never_direct configured, the following is the entire squid.conf with # filtered debian40r3:/usr/local/squid# more etc/squid.conf acl manager

[squid-users] RE: Re[squid-users] d Hat 5 - Squid 2.6 Stable 13 WCCP V2 and GRE

2008-05-29 Thread domboy
Just for everyone's future reference, I found the problem with my setup. There was a Barracuda Networks webfilter located between our Cisco ASA5520 and the Squid box. Even though Barracuda claims the webfilter should work fine with Squid, it broke my Squid/WCCP setup. In their defense, it does

Re: [squid-users] wccp v2 and cisco working info

2008-05-29 Thread domboy
Just for everyone's future reference, I found the problem with my setup. There was a Barracuda Networks webfilter located between our Cisco ASA5520 and the Squid box. Even though Barracuda claims the webfilter should work fine with Squid, it broke my Squid/WCCP setup. In their defense, it does

[squid-users] RE: Re[squid-users] d Hat 5 - Squid 2.6 Stable 13 WCCP V2 and GRE

2008-05-29 Thread domboy
Just for everyone's future reference, I found the problem with my setup. There was a Barracuda Networks webfilter located between our Cisco ASA5520 and the Squid box. Even though Barracuda claims the webfilter should work fine with Squid, it broke my Squid/WCCP setup. In their defense, it does

Re: [squid-users] wccp v2 and cisco working info

2008-05-29 Thread domboy
Just for everyone's future reference, I found the problem with my setup. There was a Barracuda Networks webfilter located between our Cisco ASA5520 and the Squid box. Even though Barracuda claims the webfilter should work fine with Squid, it broke my Squid/WCCP setup. In their defense, it does

Re: [squid-users] wccp v2 and cisco working info

2008-05-29 Thread domboy
Just for everyone's future reference, I found the problem with my setup. There was a Barracuda Networks webfilter located between our Cisco ASA5520 and the Squid box. Even though Barracuda claims the webfilter should work fine with Squid, it broke my Squid/WCCP setup. In their defense, it does

[squid-users] RE: Re[squid-users] d Hat 5 - Squid 2.6 Stable 13 WCCP V2 and GRE

2008-05-29 Thread domboy
Just for everyone's future reference, I found the problem with my setup. There was a Barracuda Networks webfilter located between our Cisco ASA5520 and the Squid box. Even though Barracuda claims the webfilter should work fine with Squid, it broke my Squid/WCCP setup. In their defense, it does

[squid-users] Basic Config Question

2008-05-29 Thread Squidly
I have a consultant telling me that I need to have my squid server dual homed and bypassing my firewall for squid to be able to properly report usage. Is this the case? Is there some other reason this config is required?

[squid-users] can squid deny some ips dynamically?

2008-05-29 Thread Changying Li
Hi. I am using squid 2.6 as my reverse proxy. Sometimes there are many many requests from same ip in a very shot period ( like 100 requests/ second). is it possible to deny these ips dynamically ? I has written a script to check access log one time per minute in cron and add these ips into deny

[squid-users] JEDI unsupported http request error

2008-05-29 Thread Rhino
In my cache.log I get flooded with the following error: parseHttpRequest: Unsupported method 'JEDI' From what I've been able to find, JEDI must refer to Joint Endeavour of Delphi Innovators. Has anyone encountered this, suggest a workaround, etc.? Running SQUID 2.7.STABLE1-20080528 on

Re: [squid-users] Basic Config Question

2008-05-29 Thread Joel Jaeggli
Squidly wrote: I have a consultant telling me that I need to have my squid server dual homed and bypassing my firewall for squid to be able to properly report usage. Is this the case? Is there some other reason this config is required? reporting and connectivity are separate issues. measuring

[squid-users] squid_ldap_group from command line

2008-05-29 Thread Squidly
I have tried quite a few variations of the squid_ldap_group eg: [EMAIL PROTECTED]:/usr/lib/squid# ./squid_ldap_group -b ou=groups,dc=example,dc=com -f ((cn=%v)(member=%u)(objectClass=group)) -B ou=people,dc=example,dc=com testuser testgroup ERR May 29 10:00:11 control slapd[5925]: hdb_search: no

Re: [squid-users] JEDI unsupported http request error

2008-05-29 Thread Guy Helmer
Rhino wrote: In my cache.log I get flooded with the following error: parseHttpRequest: Unsupported method 'JEDI' From what I've been able to find, JEDI must refer to Joint Endeavour of Delphi Innovators. Has anyone encountered this, suggest a workaround, etc.? Running SQUID

Re: [squid-users] Removing a URL from SQUID

2008-05-29 Thread Chris Robertson
Henrik Nordstrom wrote: On tor, 2008-05-29 at 04:55 +0300, Mr. Issa(*) wrote: THanks Chris it worked BUT check this: Clearing URL http://www.google.com/ .. HTTP/1.0 404 Not Found Server: squid/2.6.STABLE19 Date: Thu, 29 May 2008 01:31:43 GMT Content-Length: 0 .. done. it Says that the

Re: [squid-users] squid_ldap_group from command line

2008-05-29 Thread Leonardo Rodrigues Magalhães
Squidly escreveu: I have tried quite a few variations of the squid_ldap_group eg: [EMAIL PROTECTED]:/usr/lib/squid# ./squid_ldap_group -b ou=groups,dc=example,dc=com -f ((cn=%v)(member=%u)(objectClass=group)) -B ou=people,dc=example,dc=com testuser testgroup ERR But cannot get this to run

Re: [squid-users] Authentication problem/oddity/ignorance

2008-05-29 Thread Chris Robertson
Rob Asher wrote: Chris Robertson [EMAIL PROTECTED] 5/28/2008 5:03 PM The traffic isn't being balanced among the proxies. I have multiple locations, 4 to be exact, all trying to access the same site with the same results. Each location uses it's own proxy. None of them are transparent

Re: [squid-users] JEDI unsupported http request error

2008-05-29 Thread Chris Robertson
Rhino wrote: In my cache.log I get flooded with the following error: parseHttpRequest: Unsupported method 'JEDI' From what I've been able to find, JEDI must refer to Joint Endeavour of Delphi Innovators. Has anyone encountered this, suggest a workaround, etc.? Running SQUID

[squid-users] Limit Download Manager Session...

2008-05-29 Thread [EMAIL PROTECTED]
Dear All... How to limiting the download manager session in Squid? I have the problem for that case. I wanna limit only 2 download session in every download manager that connected to my Squid box. My configuration like this : acl koneksi maxconn 2 acl TIME-03 time SMTWHFA 00:00-07:59 acl

RE: [squid-users] Basic Config Question

2008-05-29 Thread Dean Weimer
I run squid in a DMZ and have no problem getting usage information from it. The only issue I could see a firewall causing is if your firewall is using NAT (Network Address Translation) or PAT (Port Address Translation), you could not determine which machine the request came from, unless you

[squid-users] NAT-Aware squid

2008-05-29 Thread William Gacquer
Hello I want to create a captive portal able to deal with users that are behind a NAT. The network diagram is : userA1---(priv subnet)---[NAT gateway A]---(pub subnet)---| userA2---(priv subnet)---[NAT gateway A]---(pub subnet)---| ... |

[squid-users] Transparent proxy with DansGuardian using IDENT

2008-05-29 Thread modulok
I have setup a squid server with dansguardian. I also have a server setup with iptables acting as the default gateway. I have transparent proxy with dansguardian filtering working. When using transparent proxy, the squid server does not process the Ident info. If I manually put in the proxy info

Re: [squid-users] Limit Download Manager Session...

2008-05-29 Thread Chris Robertson
[EMAIL PROTECTED] wrote: Dear All... How to limiting the download manager session in Squid? I have the problem for that case. I wanna limit only 2 download session in every download manager that connected to my Squid box. My configuration like this : acl koneksi maxconn 2 acl TIME-03 time

[squid-users] ldap_auth

2008-05-29 Thread Squidly
I am hoping there is a way to encrypt user name and password as they are are passed from the browser to my debian squid box. I have looked around the web and just keep getting more confused. I found some reference to digest_ldap_auth but that does not exist in my lib and seems to be for windowz.

Re: [squid-users] Transparent proxy with DansGuardian using IDENT

2008-05-29 Thread Henrik Nordstrom
On tor, 2008-05-29 at 12:34 -0700, modulok wrote: I have setup a squid server with dansguardian. I also have a server setup with iptables acting as the default gateway. I have transparent proxy with dansguardian filtering working. When using transparent proxy, the squid server does not process

Re: [squid-users] squid_ldap_group from command line

2008-05-29 Thread Henrik Nordstrom
On tor, 2008-05-29 at 10:05 -0700, Squidly wrote: I have tried quite a few variations of the squid_ldap_group eg: [EMAIL PROTECTED]:/usr/lib/squid# ./squid_ldap_group -b ou=groups,dc=example,dc=com -f ((cn=%v)(member=%u)(objectClass=group)) -B ou=people,dc=example,dc=com testuser testgroup

Re: [squid-users] can squid deny some ips dynamically?

2008-05-29 Thread Henrik Nordstrom
On tor, 2008-05-29 at 23:30 +0800, Changying Li wrote: Hi. I am using squid 2.6 as my reverse proxy. Sometimes there are many many requests from same ip in a very shot period ( like 100 requests/ second). is it possible to deny these ips dynamically ? I has written a script to check access

Re: [squid-users] wccp v2 and cisco working info

2008-05-29 Thread Henrik Nordstrom
On tor, 2008-05-29 at 06:53 -0700, domboy wrote: Just for everyone's future reference, I found the problem with my setup. There was a Barracuda Networks webfilter located between our Cisco ASA5520 and the Squid box. Even though Barracuda claims the webfilter should work fine with Squid, it

Re: [squid-users] Does anyone know how to make SSL bump work?

2008-05-29 Thread Henrik Nordstrom
On tor, 2008-05-29 at 21:23 +0800, Treker Chen wrote: And if i set always_direct allow all in squid.conf, then i can connect to https website without problem Sounds like ssl bump handles decrypted https requests as accelerated requests by default.. file a bug on that please. but i don't

Re: [squid-users] ldap_auth

2008-05-29 Thread Henrik Nordstrom
On tor, 2008-05-29 at 16:21 -0700, Squidly wrote: I am hoping there is a way to encrypt user name and password as they are are passed from the browser to my debian squid box. I have looked around the web and just keep getting more confused. I found some reference to digest_ldap_auth but that

Re: [squid-users] Basic Config Question

2008-05-29 Thread Indunil Jayasooriya
I am runnig squid servers on firewalls and on DMZ. no issue at all. -- Thank you Indunil Jayasooriya

[squid-users] coss swap.state

2008-05-29 Thread liwei
Hi,all I have a script which used to parse swap.state, it works well in aufs, but I don't know whether it will be ok in coss,who can give me some advices?thanks a lot.

Re: [squid-users] ldap_auth

2008-05-29 Thread Squidly
Is there a good guide detailing how to set this digest up with openLdap? On Thu, May 29, 2008 at 4:40 PM, Henrik Nordstrom [EMAIL PROTECTED] wrote: On tor, 2008-05-29 at 16:21 -0700, Squidly wrote: I am hoping there is a way to encrypt user name and password as they are are passed from the

Re: [squid-users] NAT-Aware squid

2008-05-29 Thread Amos Jeffries
Hello I want to create a captive portal able to deal with users that are behind a NAT. The network diagram is : userA1---(priv subnet)---[NAT gateway A]---(pub subnet)---| userA2---(priv subnet)---[NAT gateway A]---(pub subnet)---| ...

Re: [squid-users] ldap_auth

2008-05-29 Thread Indunil Jayasooriya
Hi, Is there a good guide detailing how to set this digest up with openLdap? http://yajith.blogspot.com/2007/12/squid-ldap-and-active-directory.html -- Thank you Indunil Jayasooriya

RE: [squid-users] squid 2.6, wccp and tproxy

2008-05-29 Thread Amos Jeffries
That is interesting to note, and part of where my problem lies. Given the way the files are marked on the balabit site, I would not have known of the support versions and differences. I just downloaded the patches for the versions of squid, iptables, and kernel I was using. So you have the

Re: [squid-users] cache manager access

2008-05-29 Thread cc
Chris Robertson wrote: cc wrote: Hi, I have Squid: The Definitive guide and have installed v2.6STABLE 16 installed. I'm *quite* confused as to how to access the cache-manager. The book has the following: Cache Host: localhost Cache Port: 3128 Manager Name: Password: continue

[squid-users] Auto Proxy ISP Squid questions

2008-05-29 Thread Mr Crack
How can I use squid with auto-proxy ISP Do I need to use cache_peer ? Thanks and Advance Mr Crack 007