[squid-users] many parseHttpRequest: Unsupported method found

2008-07-03 Thread Siu-kin Lam
Dear all I am using version2.7 stable 3 as a proxy server. I have found many parseHttpRequest: Unsupported method in cache.log. Is it possible to fix it? Also, could it change to allow any Unsupported method by default ? Thanks SK

Re: [squid-users] Squid web interface

2008-07-03 Thread Angela Williams
On Thursday 03 July 2008, Patrick G. Victoriano wrote: Hi, Is there a software or program where you can set acl's on squid using a web browser? If there's any, please advise me. Webmin does a reasonable job. You will still need to set the order of the acl's so that they are parsed in the

RE: [squid-users] Squid web interface

2008-07-03 Thread Patrick G. Victoriano
Thanks Everyone. I'll give it a shot. Thanks a lot. Regards, (TRIK) -Original Message- From: Angela Williams [mailto:[EMAIL PROTECTED] Sent: Thursday, July 03, 2008 4:04 PM To: squid-users@squid-cache.org Cc: Patrick G. Victoriano Subject: Re: [squid-users] Squid web

[squid-users] Slow clients in reverse proxy setup...

2008-07-03 Thread John Doe
Hi again, I simulated a slow client (throttled at 512k/s) and squid kept the apache connection open the whole time, while he could have closed it after 1 second... It was a 20MB file and maximum_object_size 32768 KB. Accessed a second time, the object is cached correctly, no more apache access.

Re: [squid-users] Squid performance... RAM or CPU?

2008-07-03 Thread Henrik Nordstrom
On ons, 2008-07-02 at 18:12 -0500, Carlos Alberto Bernat Orozco wrote: Why I'm making this question, because when I installed squid for 120 users, the ram went to the sky ram usage is not very dependent on the amount of users, more on how you configure Squid. There is a whole chapter in

Re: [squid-users] Could squid change src ip to client ipaddress in the Transparent mode?

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 12:02 +0900, S.KOBAYASHI wrote: I want squid or Linux to change to http_client ip address from squid:eth1 ip address which is in processing of the proxy in transparent mode. Eventually, nobody needs to change the firewall settings. See tproxy. Requires Linux with a

Re: [squid-users] many parseHttpRequest: Unsupported method found

2008-07-03 Thread Amos Jeffries
Siu-kin Lam wrote: Dear all I am using version2.7 stable 3 as a proxy server. I have found many parseHttpRequest: Unsupported method in cache.log. Is it possible to fix it? If you know what the methods are supposed to be. Squid 2.x has a squid.conf option extension_methods ... which

Re: [squid-users] Account expiry

2008-07-03 Thread Henrik Nordstrom
Please do not reply to an existing question when asking a new question. Changing the subject is not sufficient, your message is still a response to the original, and gets threaded as such in thread aware mail clients and mail archives. On tor, 2008-07-03 at 11:32 +0800, Patrick G. Victoriano

Re: [squid-users] objects after expire time

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 11:53 +0800, Ken W. wrote: My original server includes the expire headers in its response. When an object cached on squid get expired, for the succedent requests to this object, does squid revalidate it to original server every time? No, just once to update the expiry,

Re: [squid-users] Slow clients in reverse proxy setup...

2008-07-03 Thread Amos Jeffries
John Doe wrote: Hi again, I simulated a slow client (throttled at 512k/s) and squid kept the apache connection open the whole time, while he could have closed it after 1 second... It was a 20MB file and maximum_object_size 32768 KB. Accessed a second time, the object is cached correctly, no

Re: [squid-users] Squid web interface

2008-07-03 Thread Matus UHLAR - fantomas
Hello, please, if you are writing a new post, send it as new mail and not as reply/followup on old mail. It makes people with threading clients angry and they can also in such case miss your e-mail. Thank you. On 03.07.08 11:58, Patrick G. Victoriano wrote: From: Patrick G. Victoriano [EMAIL

Re: [squid-users] many parseHttpRequest: Unsupported method found

2008-07-03 Thread Siu-kin Lam
Hi Amos Thanks for the reply. I found most unsupported method in cache.log are control-code included. I think they are come from some BT clients. Thanks S K --- On Thu, 7/3/08, Amos Jeffries [EMAIL PROTECTED] wrote: From: Amos Jeffries [EMAIL PROTECTED] Subject: Re: [squid-users] many

Re: [squid-users] Recommend for hardware configurations

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 12:04 +0800, Roy M. wrote: We are planning to replace this testing server with two or three cheaper 1U servers (sort of redundancy!) Intel Dual Core or Quad Core CPU x1 (no SMP) Squid uses only one core, so rather Dual core than Quad... 4GB DDR2 800 RAM 500GB or

Re: [squid-users] Access to IP websites blocked partially

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 12:57 +0800, Josh wrote: Hey list, I have an issue with my squid proxy server. My setup is like that : client --- squid --- netcache --- internet When I enter in my client's browser the url: http://17.149.160.10/ , I got stucked... the page cannot be displayed.

Re: [squid-users] Reverse Proxy, OWA RPCoHTTPS and NTLM

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 07:28 +0200, Abdessamad BARAKAT wrote: Hi, I try to setup squid as ssl reverse proxy for publishing OWA services (webmail, rpc/http and activesync), now the publish is made by a ISA server and I want to replace this ISA Server. the flow: Internet = Firewall(NAT)

Re: [squid-users] Slow clients in reverse proxy setup...

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 02:38 -0700, John Doe wrote: Are there parameters in the configuration to tell squid to go full throttle with the server, close the connection and then continue alone with the client? http://www.squid-cache.org/Versions/v3/3.0/cfgman/read_ahead_gap.html For info, I

RE: [squid-users] LDAP Authentication with Umlauts

2008-07-03 Thread enrico . hoyme
Hi, I also had problems with umlauts. We use our Lotus Domino Server as LDAP server and since an update from version 6.5 to 8, our users are unable to authenticate via IE or Firefox if their password contains umlauts. We are running squid on BSD and Linux and on both system you are able to

Re: [squid-users] Reverse Proxy, OWA RPCoHTTPS and NTLM

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 12:35 +0200, Abdessamad BARAKAT wrote: I have tried login=PASS without succes. If I have understand correctly, the credentials are sent to the backend server without any modifications Yes. Finally, If I set Basic authentication on the outlook client, it's

Re: [squid-users] Slow clients in reverse proxy setup...

2008-07-03 Thread John Doe
I simulated a slow client (throttled at 512k/s) and squid kept the apache connection open the whole time, while he could have closed it after 1 second... It was a 20MB file and maximum_object_size 32768 KB. Accessed a second time, the object is cached correctly, no more apache

[squid-users] TCP connection to 127.0.0.1/80 failed

2008-07-03 Thread WestWind
Hi, Some error occured when I am using http_load to test my squid server 2008/07/03 18:07:42| TCP connection to 127.0.0.1/80 failed 2008/07/03 18:07:42| TCP connection to 127.0.0.1/80 failed 2008/07/03 18:07:42| TCP connection to 127.0.0.1/80 failed 2008/07/03 18:07:42| TCP connection to

Re: [squid-users] Slow clients in reverse proxy setup...

2008-07-03 Thread John Doe
Are there parameters in the configuration to tell squid to go full throttle with the server, close the connection and then continue alone with the client? http://www.squid-cache.org/Versions/v3/3.0/cfgman/read_ahead_gap.html Thx, works great. Can I set the same value as maximum_object_size,

[squid-users] Help with integrarting squid with active directory

2008-07-03 Thread Tejpal Amin
HI, I am trying to integrate squid 3.0 with my windows 2003 active directory using squid_ldap_auth helper. I have been unsuccesful in doing so, request your help. Tejpal Amin Disclaimer Privilege Notice: This e-Mail may contain proprietary, privileged and confidential information and is

Re: [squid-users] Pseudo-random 403 Forbidden...

2008-07-03 Thread John Doe
Looks like a false positive. For info, if I remove the digests, everything works fine... Cache digests has a higher false positives rate than ICP, but it can happen with ICP as well. I checked with no digests again and there is an odd behavior. If by example: squid2 has the

Re: [squid-users] Squid3 Authentication digest ldap problema

2008-07-03 Thread Edward Ortega
Hi and thanks for all! Almost is work, but i have another problem, i get this on /var/log/squid3/cache.log: user filter 'uid=user1', searchbase 'dc=something,dc=com' 2008/07/03 08:50:42| helperHandleRead: unexpected read from digestauthenticator #1, 16 bytes 'ERR No such user'

RE: [squid-users] httpReadReply: Request not yet fully sent POSThttp://xxx/yyy.php

2008-07-03 Thread Joe Tiedeman
Hi Guys, I've also begun experiencing this issue with a few sites that we host internally, we have a Mediawiki and a Joomla CMS installation both of which use Windows Integrated Authentication (Kerberos not NTLM) behind a squid reverse proxy. The error seems to show up when doing a large POST

Re: [squid-users] Recommend for hardware configurations

2008-07-03 Thread Roy M.
Hi, On 7/3/08, Henrik Nordstrom [EMAIL PROTECTED] wrote: On tor, 2008-07-03 at 12:04 +0800, Roy M. wrote: Squid uses only one core, so rather Dual core than Quad... But will it help if I am using external redirector? (Currently I don't but maybe later) For Squid it's easier with JBOD

[squid-users] CONNECT errors with 2.7.STABLE2-2

2008-07-03 Thread Ralf Hildebrandt
A tool supposedly worked until May and now, due to the evil squid update to 2.7.x, won't work anymore. Of course squid is to blame, as always. Since we all know, the professional tool is written with great care, adhering to the specs and RFC by knowledgeable people. Unlike squid. Of course. Call

RE: [squid-users] Squid 2.6 not caching downloaded files

2008-07-03 Thread Tony Da Silva
Hi Adrian. I don't think this is the problem because no files are being cached. Previously norton updates would be cached but not even that is happening anymore ... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adrian Chadd Sent: Thursday, July 03,

[squid-users] GET cache_object://localhost/info on a reverse proxy setup

2008-07-03 Thread David Obando
Dear all, I'm using Squid as a reverse proxy in a Squid/Pound/Zope/Plone-setup. Squid is running on port 80. I would like to access the cache manager with the munin plugins to monitor Squid. The plugins use a HTTP request GET cache_object://localhost/info HTTP/1.0. Standard port 3128 isn't

Re: [squid-users] CONNECT errors with 2.7.STABLE2-2

2008-07-03 Thread Adrian Chadd
Attaching the actual request thats being made would probably be a good place to start :) Adrian 2008/7/3 Ralf Hildebrandt [EMAIL PROTECTED]: A tool supposedly worked until May and now, due to the evil squid update to 2.7.x, won't work anymore. Of course squid is to blame, as always. Since

Re: [squid-users] CONNECT errors with 2.7.STABLE2-2

2008-07-03 Thread Ralf Hildebrandt
* Adrian Chadd [EMAIL PROTECTED]: Attaching the actual request thats being made would probably be a good place to start :) Yes, how do I log this? -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155

[squid-users] url_rewrite_program doesn't seem to work on squid 2.6 STABLE17

2008-07-03 Thread Martin Jacobson (Jake)
Hi, I hope that someone on this group can give me some pointers. I have a squid proxy setup running version 2.6 stable 17 of squid. I recently upgraded from a very old version of squid, 2.4 something. The proxy sits in front of a search appliance and all search requests goes through the

Re: [squid-users] Reverse Proxy, OWA RPCoHTTPS and NTLM

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 14:02 +0200, Abdessamad BARAKAT wrote: Le 3 juil. 08 à 12:46, Henrik Nordstrom a écrit : On tor, 2008-07-03 at 12:35 +0200, Abdessamad BARAKAT wrote: I have tried login=PASS without succes. If I have understand correctly, the credentials are sent to the backend

Re: [squid-users] Recommend for hardware configurations

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 22:11 +0800, Roy M. wrote: Squid uses only one core, so rather Dual core than Quad... But will it help if I am using external redirector? (Currently I don't but maybe later) url rewriters generally do not use a lot of CPU. If I only have 2 slots of disks, should I

[squid-users] how safe is server_http11?

2008-07-03 Thread Chris Woodfield
So we're looking to upgrade from 2.6 to 2.7, primarily to get the HTTP/ 1.1 header support. I realize that the full 1.1 spec is not completely implemented, but are there any real Danger, Will Robinson! implications? Specifically, is there any functionality or access to content that would

[squid-users] Squid and HTTP Host value

2008-07-03 Thread Julian Gilbert
I am trying to configure squid 2.5 and looking for some assistance. When I make client request to squid in the form: GET http://66.102.9.147/ HOST www.google.co.uk the squid proxy makes the following request to the web server: GET / HOST 66.102.9.147 How do I configure squid not to overwire

[squid-users] Re: Account Expiry

2008-07-03 Thread Patrick G. Victoriano
Hi, I am very sorry Henrik, Matus and to everyone who got angry/irritated for what I’ve done. I do not know the implications of that so please forgive me this time. I assure everyone this will not happen again. Thanks for the replies. Henrik, Thank you for the acl regarding the the date. I

Re: [squid-users] Slow clients in reverse proxy setup...

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 04:02 -0700, John Doe wrote: Are there parameters in the configuration to tell squid to go full throttle with the server, close the connection and then continue alone with the client? http://www.squid-cache.org/Versions/v3/3.0/cfgman/read_ahead_gap.html Thx,

RE: [squid-users] LDAP Authentication with Umlauts

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 12:39 +0200, [EMAIL PROTECTED] wrote: Hi, I also had problems with umlauts. We use our Lotus Domino Server as LDAP server and since an update from version 6.5 to 8, our users are unable to authenticate via IE or Firefox if their password contains umlauts. HTTP

Re: [squid-users] CONNECT errors with 2.7.STABLE2-2

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 16:43 +0200, Ralf Hildebrandt wrote: A tool supposedly worked until May and now, due to the evil squid update to 2.7.x, won't work anymore. Of course squid is to blame, as always. Since we all know, the professional tool is written with great care, adhering to the specs

Re: [squid-users] CONNECT errors with 2.7.STABLE2-2

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 20:16 +0200, Ralf Hildebrandt wrote: * Adrian Chadd [EMAIL PROTECTED]: Attaching the actual request thats being made would probably be a good place to start :) Yes, how do I log this? log_mime_hdrs on Regards Henrik signature.asc Description: This is a digitally

Re: [squid-users] GET cache_object://localhost/info on a reverse proxy setup

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 17:01 +0200, David Obando wrote: Dear all, I'm using Squid as a reverse proxy in a Squid/Pound/Zope/Plone-setup. Squid is running on port 80. I would like to access the cache manager with the munin plugins to monitor Squid. The plugins use a HTTP request GET

Re: [squid-users] how safe is server_http11?

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 16:55 -0400, Chris Woodfield wrote: So we're looking to upgrade from 2.6 to 2.7, primarily to get the HTTP/ 1.1 header support. I realize that the full 1.1 spec is not completely implemented, but are there any real Danger, Will Robinson! implications? server_http11

Re: [squid-users] Squid and HTTP Host value

2008-07-03 Thread Henrik Nordstrom
On tor, 2008-07-03 at 22:29 +0100, Julian Gilbert wrote: I am trying to configure squid 2.5 and looking for some assistance. When I make client request to squid in the form: GET http://66.102.9.147/ HOST www.google.co.uk That's a request for http://66.102.9.147/. The Host header in there

Re: [squid-users] Re: Account Expiry

2008-07-03 Thread Henrik Nordstrom
On fre, 2008-07-04 at 06:40 +0800, Patrick G. Victoriano wrote: I am very sorry Henrik, Matus and to everyone who got angry/irritated for what I’ve done. not angry. Only slightly annoyed. Almost missed your question entirely because of that, but you were lucky and I noticed the change in

Re: [squid-users] many parseHttpRequest: Unsupported method found

2008-07-03 Thread Amos Jeffries
Siu-kin Lam wrote: Hi Amos Thanks for the reply. I found most unsupported method in cache.log are control-code included. I think they are come from some BT clients. Ah, in that case there is nothing that can be done in squid. You need to educate users on proper use of proxies with BT, if

Re: [squid-users] Squid and HTTP Host value

2008-07-03 Thread Amos Jeffries
Julian Gilbert wrote: I am trying to configure squid 2.5 and looking for some assistance. The first assistance we can give is upgrade to 3.0 or 2.7. 2.5 is well and truly obsolete now. When I make client request to squid in the form: GET http://66.102.9.147/ HOST www.google.co.uk the

Re: [squid-users] url_rewrite_program doesn't seem to work on squid 2.6 STABLE17

2008-07-03 Thread Amos Jeffries
Martin Jacobson (Jake) wrote: Hi, I hope that someone on this group can give me some pointers. I have a squid proxy setup running version 2.6 stable 17 of squid. I recently upgraded from a very old version of squid, 2.4 something. The proxy sits in front of a search appliance and all search

Re: [squid-users] many parseHttpRequest: Unsupported method found

2008-07-03 Thread Siu-kin Lam
Hi Amos is this kind connection harmful for Squid daemon? I meant Besides Squid drop this connection, would this kind of connection cause unstable to the daemon ? Also, how could I know the destination IP/host of this kind of connections ? I could find the client (source) IP address from

Re: [squid-users] many parseHttpRequest: Unsupported method found

2008-07-03 Thread Amos Jeffries
Hi Amos is this kind connection harmful for Squid daemon? I meant Besides Squid drop this connection, would this kind of connection cause unstable to the daemon ? Not. Squid dumps the TCP connection as soon as the error is found and reported. Also, how could I know the destination IP/host

Re: [squid-users] many parseHttpRequest: Unsupported method found

2008-07-03 Thread Siu-kin Lam
Hi Amos I understand. Thanks for the information Best Regards, S K --- On Fri, 7/4/08, Amos Jeffries [EMAIL PROTECTED] wrote: From: Amos Jeffries [EMAIL PROTECTED] Subject: Re: [squid-users] many parseHttpRequest: Unsupported method found To: [EMAIL PROTECTED] Cc: Amos Jeffries [EMAIL

[squid-users] Delay Pools: Big values for maximum and resto

2008-07-03 Thread Sergio Belkin
Hi Squid community, Does impact on performance if I set maximum and restore on very high values instead infinite (-1), I do that in order to audit the traffic level. If I set -1 squidclient is not clear about its usage... please tell me if I'm wrong... I am using squid 2.6.x on Centos 5.1

[squid-users] https site access problem!!!

2008-07-03 Thread Shiva Raman
Dear All I got a squidIcap Installation running with following squid.conf - http_port 80 hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY cache_mem 8 MB cache_dir ufs /usr/local/squidICAP/var/cache 500 16 256