[squid-users] NTLM Auth and Java applets (Any update)

2009-04-27 Thread Nitin Bhadauria
Dear All, I have the same problem .. Everytime a browser proxying through squid tries to load a secure java applet, it comes up with a red x where the java applet should be. So I have bybass those sites for authentication, But the problem is users how don't have permission to access

[squid-users] Question on changing from ufs to aufs+coss

2009-04-27 Thread Pandu E Poluan
All, I currently use ufs. Based on discussions here and elsewhere, it seem better to use aufs+coss. So, if I want to change over to ufs, is it enough to do the following: * Stop squid * Recursive-delete the cache directory * Run squid -z * Start squid Inputs are appreciated.

Re: [squid-users] Question on changing from ufs to aufs+coss

2009-04-27 Thread Amos Jeffries
Pandu E Poluan wrote: All, I currently use ufs. Based on discussions here and elsewhere, it seem better to use aufs+coss. So, if I want to change over to ufs, is it enough to do the following: * Stop squid * Recursive-delete the cache directory * Run squid -z * Start squid

RE: [squid-users] Squid on transparent proxy for 443 request

2009-04-27 Thread Jorge Bastos
Concerns? 1) transparent interception == man-in-middle attack. 2) private details of clients are opened to you and anyone who gets access to the middle machine. 3) clients may be made aware by the security systems involved that you are attacking them. The only semi-legitimate

[squid-users] 2.7 to 3.0.13 upgrade issue

2009-04-27 Thread Adam Carter
Gentoo has recently moved stable from 2.7 to 3.0.13, and i have found that www.skylinesaustralia.com now fails with both firefox and IE. The message from firefox is: Content Encoding Error The page you are trying to view cannot be shown because it uses an invalid or unsupported form of

Re: [squid-users] Question on changing from ufs to aufs+coss

2009-04-27 Thread Pandu E Poluan
Ah, thanks for the explanation. One thing is still unclear for me, though: Why is it not a good idea to have 2+ cache on same disk? In my understanding (CMIIW), aufs is better for larger objects while coss is better for smaller objects (or the other way around). Rgds. [p] Amos

Re: [squid-users] Question on changing from ufs to aufs+coss

2009-04-27 Thread Gavin McCullagh
Hi, On Mon, 27 Apr 2009, Pandu E Poluan wrote: One thing is still unclear for me, though: Why is it not a good idea to have 2+ cache on same disk? In my understanding (CMIIW), aufs is better for larger objects while coss is better for smaller objects (or the other way around). Is there

Re: [squid-users] Question on changing from ufs to aufs+coss

2009-04-27 Thread Matus UHLAR - fantomas
On 27.04.09 16:41, Pandu E Poluan wrote: Ah, thanks for the explanation. One thing is still unclear for me, though: Why is it not a good idea to have 2+ cache on same disk? In my understanding (CMIIW), aufs is better for larger objects while coss is better for smaller objects (or the

Re: [squid-users] 2.7 to 3.0.13 upgrade issue

2009-04-27 Thread Amos Jeffries
Adam Carter wrote: Gentoo has recently moved stable from 2.7 to 3.0.13, and i have found that www.skylinesaustralia.com now fails with both firefox and IE. The message from firefox is: Content Encoding Error The page you are trying to view cannot be shown because it uses an invalid or

Re: [squid-users] Question on changing from ufs to aufs+coss

2009-04-27 Thread Matus UHLAR - fantomas
On Mon, 27 Apr 2009, Pandu E Poluan wrote: One thing is still unclear for me, though: Why is it not a good idea to have 2+ cache on same disk? In my understanding (CMIIW), aufs is better for larger objects while coss is better for smaller objects (or the other way around). On

Re: [squid-users] visible_hostname versus unique_hostname

2009-04-27 Thread Matus UHLAR - fantomas
Matus UHLAR - fantomas wrote: I was searching for the logic of setting visible_hostname and unique_hostname. I found out that value of unique_hostname is set by calling getMyHostname() function, which returns value of visible_hostname, if it's set. However, I would prefer not to do this - to

Re: [squid-users] FTP access configuration

2009-04-27 Thread uxmax
Hello, i have excatly the same problem (squid with proxy_auth). is there any way to enforce ie7 and mozilla to prompt for login cred. using ftp://ftp.mysite.com method? thank you regards uxmax Henrik Nordstrom-5 wrote: mån 2008-02-25 klockan 13:57 +0530 skrev Arun Shrimali: I have

[squid-users] Help me save bandwidth

2009-04-27 Thread Wilson Hernandez - MSD, S. A.
Hello everybody. I am somewhat confused on how squid helps to save bandwidth. I know it saves visited websites to cache and when someone else request the same site it will serve it from the cache. Please correct me if that is wrong. Now, I've been checking my traffic before (external nic) and

Re: [squid-users] Long running squid proxy slows way down

2009-04-27 Thread Wilson Hernandez - MSD, S. A.
I have a similar setup, squid was slow and crashing when it had a long time running, crashing every three to six days. I never found out why it crashed. I looked in the log files and couldn't find anything. It just crashed for no reason. There are some post to the least about it. I decided

Re: [squid-users] Long running squid proxy slows way down

2009-04-27 Thread Gavin McCullagh
Hi, On Mon, 27 Apr 2009, Wilson Hernandez - MSD, S. A. wrote: I have a similar setup, squid was slow and crashing when it had a long time running, crashing every three to six days. I never found out why it crashed. I looked in the log files and couldn't find anything. It just crashed

[squid-users] GURU opinion required.

2009-04-27 Thread goody goody
after going thru different articles and analyzing the behavior of squid 2.5 stable10 transparent proxy over freebsd machine, it is not possible that https requests are entertained in other words it simply means proxying will not be done for https traffic. now let's dvlvle in details. in case

[squid-users] number of clients

2009-04-27 Thread Tech W.
Hello, I'm using squid3.0-stable13, on a linux box with the kernel 2.6.24. I found the value for this stat argument below is not correct most time. (got it with squidclient mgr:info). Number of clients accessing cache: 212 for example, now its value is 212, but after some time it maybe

Re: [squid-users] Help me save bandwidth

2009-04-27 Thread Jose Ildefonso Camargo Tolosa
Hi! On Tue, Apr 28, 2009 at 7:54 AM, Wilson Hernandez - MSD, S. A. w...@msdrd.com wrote: Hello everybody. I am somewhat confused on how squid helps to save bandwidth. I know it saves visited websites to cache and when someone else request the same site it will serve it from the cache. Please

Re: [squid-users] Long running squid proxy slows way down

2009-04-27 Thread Matus UHLAR - fantomas
On Mon, 27 Apr 2009, Wilson Hernandez - MSD, S. A. wrote: I have a similar setup, squid was slow and crashing when it had a long time running, crashing every three to six days. I never found out why it crashed. I looked in the log files and couldn't find anything. It just crashed

Re: [squid-users] number of clients

2009-04-27 Thread Matus UHLAR - fantomas
On 27.04.09 22:11, Tech W. wrote: I'm using squid3.0-stable13, on a linux box with the kernel 2.6.24. I found the value for this stat argument below is not correct most time. (got it with squidclient mgr:info). Number of clients accessing cache: 212 for example, now its value is

Re: [squid-users] Long running squid proxy slows way down

2009-04-27 Thread Gavin McCullagh
On Mon, 27 Apr 2009, Matus UHLAR - fantomas wrote: On 27.04.09 13:35, Gavin McCullagh wrote: I had a similar experience and it turned out to be down to the RAM usage of squid exceeding 3GB (the limit for a process on a 32bit OS). As the cache memory filled up, squid's ram size increased

RE: [squid-users] Web service

2009-04-27 Thread Colloca Gabriel (Medios Digitales - Desarrollo de Productos)
Thanks a lot, is very usefull that page. In unbeliable but it throws: http://rcd.lanacion.com.ar/deportiva/service1.svc/cc/obt/9993 Expires 1 min 19 sec from now (Mon, 27 Apr 2009 15:45:55 GMT) Cache-Control max-age=394000 Last-Modified 2 days 17 hr ago (Fri, 24 Apr 2009 21:55:00 GMT)

[squid-users] Strange Problem regarding Accept-Encoding ans compression

2009-04-27 Thread Stefan Hartmann
Hello, i am running squid as reverse proxy in front of a web server farm. We are trying to implement Content-Compression, and it gets broken from time to time. The www-servers are windows IIS 5, and the compression is done using a ISAPI Filter (no, not the original broken M$ filter from the

RE: [squid-users] Problems with IDENT lookup logging

2009-04-27 Thread Dustin Hane
1) you mention having questions but don't ask any. -- Well, one of them is..I have read that using LDAP lookup..When attempting to visit a blocked site, squid will challenge the authentication. Is this true? We're trying to keep this as transparent as possible. Will squid have any

RE: [squid-users] problem fakeauth_auth

2009-04-27 Thread Joao Alves Neto
Hi Amos I'll post this issue to squid-dev, but fyi, here is the change I made(FOR TESTE ONLY). - *** /root/src/squid-3.0.STABLE14-20090424/helpers/ntlm_auth/fakeauth/fakeauth_auth.c 2009-04-24 06:21:00.0 -0300 ---

RE: [squid-users] redirecting unauthenticated users

2009-04-27 Thread Philippe Boeij
Hi Amos, Thanks very very much for your help. I'm not really trying to authenticate to an external web site, only Squid is involved. What I'm trying to do is: 1 http_access allow all # redirector program 2 http_access2 allow freesites 3 http_access2 allow AuthUsers 4 http_access2 deny all -

[squid-users] squid 2.7 stable 6 increased load from 2.6

2009-04-27 Thread Tory M Blue
Greetings, I just recently upgraded (or in the midst of testing) and I note that 3 servers that I upgraded from 2.6 stable 13 to 2.7 stable 6, are running 3-4x load of the identical servers running the 2.6 stable variety. I was wondering what would cause this? Should I stick with 2.6 stable 13

Re: [squid-users] number of clients

2009-04-27 Thread Amos Jeffries
Hello, I'm using squid3.0-stable13, on a linux box with the kernel 2.6.24. I found the value for this stat argument below is not correct most time. (got it with squidclient mgr:info). Number of clients accessing cache: 212 for example, now its value is 212, but after some time it

Re: [squid-users] Help me save bandwidth

2009-04-27 Thread Amos Jeffries
Hi! On Tue, Apr 28, 2009 at 7:54 AM, Wilson Hernandez - MSD, S. A. w...@msdrd.com wrote: Hello everybody. I am somewhat confused on how squid helps to save bandwidth. I know it saves visited websites to cache and when someone else request the same site it will serve it from the cache.

[squid-users] Proxy/no proxy GET results differ

2009-04-27 Thread Dan Sopher
Hello. When running the following GET commands from a shell(same results from browsers), the results are different, with the error occurring when squid(Squid Cache: Version 3.0.STABLE13) is in the data path. Any help is appreciated. Thank you in advance. Examples and packet capture data is

Re: [squid-users] Strange Problem regarding Accept-Encoding ans compression

2009-04-27 Thread Amos Jeffries
Hello, i am running squid as reverse proxy in front of a web server farm. We are trying to implement Content-Compression, and it gets broken from time to time. The www-servers are windows IIS 5, and the compression is done using a ISAPI Filter (no, not the original broken M$ filter from

RE: [squid-users] redirecting unauthenticated users

2009-04-27 Thread Amos Jeffries
Hi Amos, Thanks very very much for your help. I'm not really trying to authenticate to an external web site, only Squid is involved. What I'm trying to do is: 1 http_access allow all # redirector program 2 http_access2 allow freesites 3 http_access2 allow AuthUsers 4 http_access2 deny

RE: [squid-users] Problems with IDENT lookup logging

2009-04-27 Thread Amos Jeffries
1) you mention having questions but don't ask any. -- Well, one of them is..I have read that using LDAP lookup..When attempting to visit a blocked site, squid will challenge the authentication. Is this true? LDAP (authentication) and IDENT (identification) are two very different things.

Re: [squid-users] number of clients

2009-04-27 Thread Tech W.
Thanks amos. what's the time unit for this argument? for example, does it mean the clients number for last 60 minutes or what others? Regards.. --- On Tue, 28/4/09, Amos Jeffries squ...@treenet.co.nz wrote: From: Amos Jeffries squ...@treenet.co.nz Subject: Re: [squid-users] number of clients

Re: [squid-users] Proxy/no proxy GET results differ

2009-04-27 Thread Amos Jeffries
Hello. When running the following GET commands from a shell(same results from browsers), the results are different, with the error occurring when squid(Squid Cache: Version 3.0.STABLE13) is in the data path. Any help is appreciated. Thank you in advance. You appear to be confused by proper

Re: [squid-users] number of clients

2009-04-27 Thread Amos Jeffries
Thanks amos. what's the time unit for this argument? for example, does it mean the clients number for last 60 minutes or what others? Okay, looking at it much closer its a measure of the number of records in the client_db cache. Clients for which network speed information, and requests

Re: [squid-users] squid 2.7 stable 6 increased load from 2.6

2009-04-27 Thread Amos Jeffries
Greetings, I just recently upgraded (or in the midst of testing) and I note that 3 servers that I upgraded from 2.6 stable 13 to 2.7 stable 6, are running 3-4x load of the identical servers running the 2.6 stable variety. I was wondering what would cause this? Should I stick with 2.6

Re: [squid-users] squid 2.7 stable 6 increased load from 2.6

2009-04-27 Thread Mark Nottingham
try update_headers off and see if there's a difference. On 28/04/2009, at 1:56 PM, Amos Jeffries wrote: Greetings, I just recently upgraded (or in the midst of testing) and I note that 3 servers that I upgraded from 2.6 stable 13 to 2.7 stable 6, are running 3-4x load of the identical

[squid-users] Squid and auth and Custom banner.

2009-04-27 Thread Parvinder Bhasin
Hi, After researching a lot on this subject, I finally decided to post this here. What I would like to achieve is basically is: 1): A user is connected on my wireless / wired network , operating in transparent proxy I would like user before they can get to a site with squid is basically

[squid-users] ICP vs Cache Digest

2009-04-27 Thread vincent.blondel
Hello all, something I do not understand .. I plan enabling ICP between my squid proxy web caches hosted in internal lan area and my internet gateways hosted in dmz area. Everything seem to work correctly, I see the ICP packets exchanged between all devices except I always receive this type of

[squid-users] External C program

2009-04-27 Thread Julien Philibin
Hi, I've been trying to find a typical external ACL C program skeleton for a while, but I wasn't able to find anything very interesting ... What I would like to do, is to read to different strings and process them in order to allow/disallow access to a website. This is what I have: external.c

Re: [squid-users] Question on changing from ufs to aufs+coss

2009-04-27 Thread Pandu E Poluan
I see. About different disks, must this be different physical disks or different partition is sufficient? Rgds, [p] Matus UHLAR - fantomas wrote: On 27.04.09 16:41, Pandu E Poluan wrote: Ah, thanks for the explanation. One thing is still unclear for me, though: Why is it not a good

[squid-users] problem with ACL.

2009-04-27 Thread Jagdish Rao
Hi, I have configure my Squid to work only for some time for one group of users. I find that this is not being effective. Below is the squid conf file # SQUID DEFAULTS http_port 8000 hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY