On 11/18/2009 08:22 AM, Silamael wrote:
On 11/18/2009 01:59 AM, Amos Jeffries wrote:
Maybe yes, maybe no
What configuration are you referring too?
Is the ICAP server setting Content-Length correctly to the size of the
error page body?
Hello Amos,
As far as i can say, the Content-Length
sön 2009-11-22 klockan 21:32 -0500 skrev Riley E. Chandler:
I need to do a LDAP search for username based on source IP, I would
prefer to have Squid put it in the access.log. My other option is to
generate my own log file based off the access.log and to include the
LDAP info separately.
I am still trying to find time to look in more detail at this and
another digest auth issue in Squid-3. But my spare time available for
Squid has been somewhat short lately.
Regards
Henrik
mån 2009-11-23 klockan 11:14 +0530 skrev sankar m:
Dear Sir/Madam,
Please let me know the status of
Hi Squid users,
We're using squid3 as a reverse proxy on several boxes and he's working
quite well.
Squid configuration is quite simple :
cache_peer X.X.X.X parent 80 0 no-query originserver no-digest
cache_peer Y.Y.Y.Y parent 80 0 no-query originserver no-digest
cache_peer_domain X.X.X.X
I have installed a Squid proxy behind a corporate proxy. All I know
about it' the configuration for the browser: ipaddress and port, no
authentication.
I've tryed to put this lines in squid.conf:
cache_peer 172.20.127.20 parent 801 3130 no-query default
or
cache_peer 172.20.127.20 parent 801
David B. wrote:
Hi Squid users,
We're using squid3 as a reverse proxy on several boxes and he's working
quite well.
Squid configuration is quite simple :
cache_peer X.X.X.X parent 80 0 no-query originserver no-digest
cache_peer Y.Y.Y.Y parent 80 0 no-query originserver no-digest
Jenny Lee wrote:
Um, sounds like you might have a few legacy setting issues.
Mail me a copy of your config if you would like a free audit.
Amos, thank you so much for your help and offer, my config is working as
expected now. It is not necessary to waste more of your time. That 'all' made
On Sun, Nov 22, 2009 at 9:03 PM, Henrik Nordstrom
hen...@henriknordstrom.net wrote:
What is your average object size?
Well, hmm, it's a good question:
Connection information for squid:
Number of clients accessing cache: 15283
Number of HTTP requests received: 12646939
Hi List,
I use a Squid Cache version 3.0.STABLE16 as reverse proxy on an 100Mb server
(hosted by Iliad) to cache my web sites running on my home connection (1024Kb
Max).
This configuration Works pretty fine, but I have troubles to cache some images
(jpg|png) with a particular url:
For
Sorry I've make a mistake, the url to get the original picture is
http://gallery.wenske.fr/wallpapers/holland_dream_2560x1600.jpg.html?zp=full-image
This will force the download of the picture.
Regards,
Sebastien WENSKE
-Message d'origine-
De : Sébastien WENSKE
Date: Tue, 24 Nov 2009 02:08:01 +1300
From: squ...@treenet.co.nz
To: squid-users@squid-cache.org
Subject: Re: [squid-users] Squid3 reverse proxy Failed to select source
strange errors
David B. wrote:
Hi Squid users,
We're using squid3
Amos Jeffries a écrit :
[snip]
Exemple :
2009/11/23 08:36:28| Failed to select source for
'http://img43.imageshack.us/img43/416/greysanatomypromotional.jpg'
2009/11/23 08:36:28| always_direct = 0
2009/11/23 08:36:28|never_direct = 0
2009/11/23 08:36:28|timedout = 0
[snip]
Hi mike,
Mike Marchywka a écrit :
[snip]
Normal website attacks.
One of the benefits of using Squid is to prevent these resource wasters
getting near the backend processors. Failed to select source is good
news.
You might also want to occasionally scan the access.log to see if any
Date: Mon, 23 Nov 2009 16:32:29 +0100
From: haazel...@gmail.com
To: marchy...@hotmail.com
CC: squid-users@squid-cache.org
Subject: Re: [squid-users] Squid3 reverse proxy Failed to select source
strange errors
Hi mike,
Mike Marchywka a
Hi again,
In my previous mail I explained that I'm using a squid reverse proxy with high
bandwidth to cache my apache at home. There are connected by VPN, and I would
know if it is possible to get original IP in my apache logs.
Currently I see only the squid local IP:
sl03.wenske.local - -
Is there a way to know which ACL blocked my request? in the 403 error
page or in the logs.
--
*Leonardo de Souza Carneiro*
*Veltrac - Tecnologia em Logística.*
lscarne...@veltrac.com.br mailto:lscarne...@veltrac.com.br
http://www.veltrac.com.br http://www.veltrac.com.br/
/Fone Com.:
Hi!
But... such scripts are already part of squid, I don't have the names
at hand, but really: squid works really well with LDAP, you can even
create ACLs by-ldap-groups.
And, squid will produce something like this in the logs:
1258978126.154 5238 192.168.12.34 TCP_REFRESH_MISS/200 776 GET
There is only scripts for performing LDAP based authenitication based on
login+password, there is not scripts to query some LDAP on what user is
logged in at ip X.
tis 2009-11-24 klockan 15:23 +1930 skrev Jose Ildefonso Camargo Tolosa:
Hi!
But... such scripts are already part of squid, I
Sorry, missed the key point:
I don't authenticate, and I can't enable it.
Now, the question is: where does he stores the ldap authentication
+ IP I don't get what is Riley trying to do.
Where does the users log into?. Anywhere they log into, that system
should be able to log the IP and
On Mon, 23 Nov 2009 10:40:57 -0500, Mike Marchywka marchy...@hotmail.com
wrote:
Date: Mon, 23 Nov 2009 16:32:29 +0100
From: haazel...@gmail.com
To: marchy...@hotmail.com
CC: squid-users@squid-cache.org
Subject: Re: [squid-users] Squid3 reverse proxy
Sébastien WENSKE wrote:
Sorry I've make a mistake, the url to get the original picture is
http://gallery.wenske.fr/wallpapers/holland_dream_2560x1600.jpg.html?zp=full-image
This will force the download of the picture.
Regards,
Sebastien WENSKE
Your gallery software is not
mån 2009-11-23 klockan 15:34 +0100 skrev Sébastien WENSKE:
Sorry I've make a mistake, the url to get the original picture is
http://gallery.wenske.fr/wallpapers/holland_dream_2560x1600.jpg.html?zp=full-image
This will force the download of the picture.
That's a very very cache-unfriendly
mån 2009-11-23 klockan 17:41 +0100 skrev Sébastien WENSKE:
In my previous mail I explained that I'm using a squid reverse proxy
with high bandwidth to cache my apache at home. There are connected by
VPN, and I would know if it is possible to get original IP in my
apache logs.
Yes. You need
Hi
We run a number of squid 3.1.0.14 TPROXY caches in an ISP environment.
In our access log we are seeing a fair few client IP addresses of 127.0.0.1
and also RFC1918 address ranges.
The caches do not have any local users. We do not have any RFC1918 clients
accessing caches, all customers have
Thanks both,
I will check the code and try to fix or remove these headers.
Whit witch bin do you get this below information? Squidclient?
Regards,
Sébastien
-Message d'origine-
De : Henrik Nordstrom [mailto:hen...@henriknordstrom.net]
Envoyé : mardi 24 novembre 2009 00:24
À :
On Mon, 23 Nov 2009 16:29:20 +0100, David B. haazel...@gmail.com
wrote:
Amos Jeffries a écrit :
[snip]
Exemple :
2009/11/23 08:36:28| Failed to select source for
'http://img43.imageshack.us/img43/416/greysanatomypromotional.jpg'
2009/11/23 08:36:28| always_direct = 0
2009/11/23
On Mon, 23 Nov 2009 14:21:11 -0900, Chris Robertson crobert...@gci.net
wrote:
Sébastien WENSKE wrote:
Sorry I've make a mistake, the url to get the original picture is
http://gallery.wenske.fr/wallpapers/holland_dream_2560x1600.jpg.html?zp=full-image
This will force the download of the
On Tue, 24 Nov 2009 00:23:58 +0100, Henrik Nordstrom
hen...@henriknordstrom.net wrote:
mån 2009-11-23 klockan 15:34 +0100 skrev Sébastien WENSKE:
Sorry I've make a mistake, the url to get the original picture is
http://gallery.wenske.fr/wallpapers/holland_dream_2560x1600.jpg.html?zp=full-image
On Tue, 24 Nov 2009 10:34:38 +1100, Michael Bowe mb...@pipeline.com.au
wrote:
Hi
We run a number of squid 3.1.0.14 TPROXY caches in an ISP environment.
In our access log we are seeing a fair few client IP addresses of
127.0.0.1
and also RFC1918 address ranges.
The caches do not have any
On Mon, 23 Nov 2009 15:03:58 -0200, Leonardo Carneiro
lscarne...@veltrac.com.br wrote:
Is there a way to know which ACL blocked my request? in the 403 error
page or in the logs.
It's logged to cache.log when debug_options 33,2 is configured.
Slightly tricky to identify a particular request in
tis 2009-11-24 klockan 00:36 +0100 skrev Sébastien WENSKE:
Thanks both,
I will check the code and try to fix or remove these headers.
Whit witch bin do you get this below information? Squidclient?
squidclient is one way:
squidclient -m HEAD
Many thanks Henrik!
I have add these two directive in apache2.conf:
LogFormat %{X-Forwarded-For}i %l %u %t \%r\ %s %b \%{Referer}i\
\%{User-Agent}i\ reverse_proxy
and
SetEnvIf X-Forwarded-For ^.*\..*\..*\..* is-forwarder
And in my vhost:
CustomLog
Thank you for thorough explanation. I have squid compiled with:
--enable-delay-pools \
--enable-poll \
If possible I'd suggest going for epoll or kqueue instead. Much faster
socket handling.
I use epoll. But I think 'make check' bailed out or there was an error
somewhere so I defaulted
Thanks!
The LDAP server is also a Radius server that does Auth for all services. The
time zones are different and our ips are pooled so we get a lot of false
positives when we corelate the log files. The LDAP database stores the
username/ip so realtime lookups are to most accurate. We are
On Tue, 24 Nov 2009 01:27:30 +0100, Sébastien WENSKE sebast...@wenske.fr
wrote:
Many thanks Henrik!
I have add these two directive in apache2.conf:
LogFormat %{X-Forwarded-For}i %l %u %t \%r\ %s %b \%{Referer}i\
\%{User-Agent}i\ reverse_proxy
and
SetEnvIf
On Mon, 23 Nov 2009 09:22:42 -0500, Linda Messerschmidt
linda.messerschm...@gmail.com wrote:
On Sun, Nov 22, 2009 at 9:03 PM, Henrik Nordstrom
hen...@henriknordstrom.net wrote:
What is your average object size?
Well, hmm, it's a good question:
Connection information for squid:
On Mon, 23 Nov 2009 19:30:00 -0500, rchand...@ntelos.net wrote:
Thanks!
The LDAP server is also a Radius server that does Auth for all services.
The time zones are different and our ips are pooled so we get a lot of
false positives when we corelate the log files. The LDAP database
stores
On Mon, Nov 23, 2009 at 8:06 PM, Amos Jeffries squ...@treenet.co.nz wrote:
Accepting the challenge and going of the side tangent ;)
redirect helpers can be reduced or removed in a lot of cases by using:
Our redirectors aren't the problem. They work fine for 23:55 every
day; over 10
Hi!
I use to create custom error pages, and trigger them, something like this:
acl internethorario time MTWHF 08:30-11:30
acl internethorario time MTWHF 14:00-17:00
deny_info ERR_ACCESS_DENIED_Horario internethorario
http_access deny internethorario
http_access allow !internethorario
In this
On Mon, 2009-11-23 at 21:40 -0500, Linda Messerschmidt wrote:
Maybe. We would like to diagnose this problem and fix it properly,
but if
its too much hassle you can go that way.
It would definitely be my preference to diagnose and fix the problem
and I can live with a fair amount of
Hello all,
I'm trying to configure Squid to ask for authentication using LDAP but
ONLY on one cache_peer. Before I had it activated on all servers and
it worked perfectly. All the other webservers however have their own
authentication except this wiki.
This is what I have in my squid.conf in
Dear Sir,
Thank you for your response. I will wait to hear from you.
Regards,
Sankar.M
On Mon, Nov 23, 2009 at 3:10 PM, Henrik Nordstrom
hen...@henriknordstrom.net wrote:
I am still trying to find time to look in more detail at this and
another digest auth issue in Squid-3. But my spare time
mån 2009-11-23 klockan 19:30 -0500 skrev rchand...@ntelos.net:
The LDAP server is also a Radius server that does Auth for all
services. The time zones are different and our ips are pooled so we
get a lot of false positives when we corelate the log files. The LDAP
database stores the
On 11/23/2009 09:41 AM, Silamael wrote:
Hello Amos,
I found out that my test creates an invalid Encapsulated header. After
fixing it, squid dies with an assertion failure in
BodyPipe::undoCheckout().
Attached you find the cache.log of my test.
Greetings,
Matthias
Hello together,
I searched
44 matches
Mail list logo
