Re: [squid-users] Re: Squid3 issues

2010-03-19 Thread Amos Jeffries
Linda Walsh wrote: Gmail wrote: I have used many softwares, packages, compiled stuff for years, never ever had an experience such as this one, it's a package full of headaches, and problem after problem, And to be honest the feedback I get is always blaming other things, why can't you people

Re: [squid-users] Squid proxy Setup in fail-over mode

2010-03-19 Thread Amos Jeffries
GIGO . wrote: How to setup squid proxy to run in fail-over mode? Any guide. There is no such mode in Squid. As the other respondents have said so far, to have fail-over from your users perspective when squid dies you need multiple squid and some load balancer setup (WPAD counts as a load

Re: [squid-users] Squid Accelerator mode: HTTP/1.0 and 'defaultsite' header

2010-03-19 Thread Amos Jeffries
Riccardo Castellani wrote: Most clients these days will do so regardless of their version. defaultsite is completely optional, in your case if you omit it broken clients will get the squid invalid request error page instead of tomcat front page If I insert 'defaultsite', I think so for

Re: [squid-users] Cancelled downloads

2010-03-19 Thread Amos Jeffries
CASALI COMPUTERS - Michele Brodoloni wrote: Hello, is it possible to stop squid from keep downloading a file when a user stops the download from his browser? If an user initiates a 1GB of web download and then hits “cancel”, squid doesn’t mind it and continues to download until it finishes,

Fwd: [squid-users] Squid3 issues

2010-03-19 Thread Nyamul Hassan
Hi, As a normal courtesy on regular mailing lists, it is more appropriate to use your regular name, rather than just GMail. The answers on this list still come from humans, and it's always nice to know the name of the person we're communicating with. Also, in one of your emails, you said that

Re: [squid-users] error libcap2 --

2010-03-19 Thread Amos Jeffries
Ariel wrote: Hello .. please someone can help me with this error because more than a week ago that I'm swearing and I just realized I asked this in Centos 5.4 i386 kernel 2.6.30 iptables 1.4.5 it asks for libcap2 and libcap2-dev, but there in centos 5.3 and I am following this guide to install

Re: [squid-users] Requests through proxy take 4x+ longer than direct to the internet

2010-03-19 Thread Amos Jeffries
David Parks wrote: Hi, I set up a dev instance of squid on my windows system. I've configured 2 browsers (Chrome Firefox), chrome direct to the internet, firefox through the locally running instance of squid. I expected similar response times from the two browsers, but I consistently see

Re: [squid-users] Squid not caching anything

2010-03-19 Thread Amos Jeffries
jayesh chavan wrote: Hi, My squid is working but not caching anything.What is problem?Whenever I use purge command for any url,it replies 404 not found. * Run some of the URLs through www.redbot.org and see if there is any particular reason for that. * check your configuration. Using

[squid-users] R: [squid-users] Cancelled downloads

2010-03-19 Thread CASALI COMPUTERS - Michele Brodoloni
Hmmm.. So I guess this behaviour is caused by these following lines: range_offset_limit -1 maximum_object_size 200 MB quick_abort_min -1 Which are used to cache the most possible from windows update... (from: http://wiki.squid-cache.org/SquidFaq/WindowsUpdate) At this point I'm asking if

Re: [squid-users] squid consuming too much processor/cpu

2010-03-19 Thread Matus UHLAR - fantomas
On Wed, 2010-03-17 at 19:54 +1100, Ivan . wrote: you might want to check out this thread http://www.mail-archive.com/squid-users@squid-cache.org/msg56216.html On Wed, Mar 17, 2010 at 11:09 PM, Muhammad Sharfuddin m.sharfud...@nds.com.pk wrote: I checked, but its not clear to me

Re: [squid-users] R: [squid-users] Cancelled downloads

2010-03-19 Thread Amos Jeffries
CASALI COMPUTERS - Michele Brodoloni wrote: Hmmm.. So I guess this behaviour is caused by these following lines: range_offset_limit -1 maximum_object_size 200 MB quick_abort_min -1 Which are used to cache the most possible from windows update... (from:

[squid-users] R: [squid-users] R: [squid-users] Cancelled downloads

2010-03-19 Thread CASALI COMPUTERS - Michele Brodoloni
In this case, are you aware of some third-party software/squid plugin which may could do the job? I'm still crawling the entire internet without luck... I've seen a redirector written in perl, but it seems to use other caching mechanism, so it renders useless my windows updates collection

Re: [squid-users] Reverse Proxy SSL Options

2010-03-19 Thread Matus UHLAR - fantomas
On 18.03.10 13:12, Dean Weimer wrote: We have multiple websites using a certificate that has subject alternative names set to use SSL for the multiple domains. That part is working fine, and traffic will pass through showing with Valid certificates. However, I need to Disable it from

[squid-users] Absolute Beginner help required on concepts related to Cache_effective_user.

2010-03-19 Thread GIGO .
On a compiled squid3 stable24. I am unable to run squid as root in Ubuntu. So the cache_effective_user defined in squid.conf never comes into play. Is this a security concern? what good is cache_effective_user for? Is it right to run squid with the default ubuntu user one has installed

[squid-users] Yet another IMAP support request

2010-03-19 Thread Sabyasachi Ruj
I went through this thread: http://www.mail-archive.com/squid-users@squid-cache.org/msg59892.html. I also needed that IMAP to work via Squid.  There was no conclusion on that thread. Is it possible to use Squid for IMAP traffic using HTTP's CONNECT method? If not, can anybody tell us the reason?

Re: [squid-users] Cancelled downloads

2010-03-19 Thread John Doe
From: CASALI COMPUTERS - Michele Brodoloni m.brodol...@casalicomputers.com In this case, are you aware of some third-party software/squid plugin which may could do the job? I'm still crawling the entire internet without luck... I've seen a redirector written in perl, but it seems to use

Re: [squid-users] Absolute Beginner help required on concepts related to Cache_effective_user.

2010-03-19 Thread John Doe
From: GIGO . gi...@msn.com On a compiled squid3 stable24. I am unable to run squid as root in Ubuntu. So the cache_effective_user defined in squid.conf never comes into play. Is this a security concern? what good is cache_effective_user for? Is it right to run squid with the default

Re: [squid-users] Yet another IMAP support request

2010-03-19 Thread Jakob Curdes
Sabyasachi Ruj schrieb: I went through this thread: http://www.mail-archive.com/squid-users@squid-cache.org/msg59892.html. I also needed that IMAP to work via Squid. There was no conclusion on that thread. Is it possible to use Squid for IMAP traffic using HTTP's CONNECT method? If not, can

Re: [squid-users] Yet another IMAP support request

2010-03-19 Thread Sabyasachi Ruj
Okay. Any pointer what can be achieved with Squid's HTTP CONNECT method? Quote: The tunnel CONNECT patch mentioned in the thread might help, but only if you have a target that accepts what has been tunneled. If I understand you correctly, the IMAP server should wrap IMAP responses with HTTP

Re: [squid-users] Reverse Proxy SSL Options

2010-03-19 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: On 18.03.10 13:12, Dean Weimer wrote: We have multiple websites using a certificate that has subject alternative names set to use SSL for the multiple domains. That part is working fine, and traffic will pass through showing with Valid certificates. However, I

[squid-users] RE: NTLM error

2010-03-19 Thread Dawie Pretorius
Hi is it possible that someone can come back to me on this request. Thank you Dawie Pretorius -Original Message- From: Dawie Pretorius [mailto:da...@tradebridge.co.za] Sent: 11 March 2010 10:40 AM To: squid-users@squid-cache.org Subject: [squid-users] NTLM error Hi, I continually

Re: [squid-users] Yet another IMAP support request

2010-03-19 Thread Jakob Curdes
If I understand you correctly, the IMAP server should wrap IMAP responses with HTTP responses, and accept IMAP requests wrapped with HTTP requests? Right, but I am not aware of an IMAP server capable of doing this. JC

Re: [squid-users] Squid3 issues

2010-03-19 Thread a...@gmail
Hi, As a common courtesy I did give my name at the end, with best regards Adam if you really looked. And when I created this account years ago, I named it Gmail because I have many other accounts, it helps me filter through my email boxes, second of all I am new to the mainling list system, I

[squid-users] squid, squirm, clamav, viralator 0.9.8, Invoked with the arguments

2010-03-19 Thread Stefan Reible
Hey, I am using squid 3.0.19 with squirm 1.23, clamav 0.95.3, viralator 0.9.8 from svn and mozilla firefox with configured proxy. If I put following url in my Firefox: http://squid1.testdomain.de/cgi-bin/viralator.cgi?action=http://putty.very.rulez.org/latest/x86/putty.exe I get this

Re: [squid-users] error libcap2 --

2010-03-19 Thread Victor Javier Brizuela
On Fri, Mar 19, 2010 at 03:46, Amos Jeffries squ...@treenet.co.nz wrote: What error? As I understand it libcap2 is a piece of system software, not an error. Could you clarify please what problem you have hit? The proper translation of his email would be:

Re: [squid-users] Yet another IMAP support request

2010-03-19 Thread Amos Jeffries
Jakob Curdes wrote: If I understand you correctly, the IMAP server should wrap IMAP responses with HTTP responses, and accept IMAP requests wrapped with HTTP requests? Right, but I am not aware of an IMAP server capable of doing this. Other way around I would have thought. The client

Re: [squid-users] Yet another IMAP support request

2010-03-19 Thread Jakob Curdes
Other way around I would have thought. The client usually makes connection to server. One of the reasons CONNECT is so dangerous is that the receiving server does not need to know HTTP to communicate once the client has setup the tunnel. Oh, right, I did not read the OP's message

[squid-users] What version of squid in the upcoming ubuntu 10.4 repo

2010-03-19 Thread tcygne
The new LTS ubuntu coming in april will be vresion 10.4. I'm wondering if anyone knows what version of squid will be in the repos and thus apt-get'able. -- View this message in context: http://n4.nabble.com/What-version-of-squid-in-the-upcoming-ubuntu-10-4-repo-tp1599340p1599340.html Sent from

Re: [squid-users] RE: NTLM error

2010-03-19 Thread Amos Jeffries
Dawie Pretorius wrote: Hi is it possible that someone can come back to me on this request. Thank you Dawie Pretorius Maybe yes, maybe no. You did add this: message and may be subject to legal privilege. Access to this e-mail by anyone other than the intended is unauthorised. If you are

Re: [squid-users] Yet another IMAP support request

2010-03-19 Thread Matus UHLAR - fantomas
On 19.03.10 15:00, Sabyasachi Ruj wrote: I went through this thread: http://www.mail-archive.com/squid-users@squid-cache.org/msg59892.html. I also needed that IMAP to work via Squid.  There was no conclusion on that thread. need? Why do you _need_ it? -- Matus UHLAR - fantomas,

[squid-users] Squid3 issues

2010-03-19 Thread a...@gmail
Hi Amos, Thanks for your comments, All I was doing is hit reply, this is the very first time ever I used any mailing list It doesn't matter anymore, I am sorry if I offended anyone, it was not my intention, when I get an email I simply hit reply I will try and solve my problems, and if I do get

Re: [squid-users] R: [squid-users] R: [squid-users] Cancelled downloads

2010-03-19 Thread Amos Jeffries
CASALI COMPUTERS - Michele Brodoloni wrote: In this case, are you aware of some third-party software/squid plugin which may could do the job? I'm still crawling the entire internet without luck... I've seen a redirector written in perl, but it seems to use other caching mechanism, so it

Re: [squid-users] R: [squid-users] R: [squid-users] Cancelled downloads

2010-03-19 Thread Leonardo Carneiro - Veltrac
Well, if you haev any windows server on your network, you could use WSUS. http://technet.microsoft.com/en-us/wsus/default.aspx CASALI COMPUTERS - Michele Brodoloni wrote: In this case, are you aware of some third-party software/squid plugin which may could do the job? I'm still crawling the

Re: [squid-users] RE: NTLM error

2010-03-19 Thread Jeff Foster
Dawie, Welcome to the squid It's Microsoft and it's broke, so it's not our fault list. I had the same problem and did find a work around that seems to stop the pop-up authentication. The hack is to change the registry setting MaxConnectionsPerServer to 1. This is a link for setting the registry

Re: [squid-users] Yet another IMAP support request

2010-03-19 Thread Sabyasachi Ruj
Does that mean that if I modify the client to use HTTP proxy's CONNECT method, it can connect to any standard IMAP server? Say, Gmail IMAP server? I also think the client only has to setup the tunnel once. Then there is no need to wrap the requests with HTTP requests. It can just write the

RE: [squid-users] RE: NTLM error

2010-03-19 Thread Dawie Pretorius
Hello Amos Thanks I will look into that. And I apologize for adding that, didn't even know that was added :D Have a good weekend... :D Dawie Pretorius Pretorius wrote: Hi is it possible that someone can come back to me on this request. Thank you Dawie Pretorius Maybe yes, maybe no.

RE: [squid-users] RE: NTLM error

2010-03-19 Thread Dawie Pretorius
Hello Jeff Thanks for help and the link, finally an answer that I can work with :D Thanks again. Dawie Pretorius Dawie, Welcome to the squid It's Microsoft and it's broke, so it's not our fault list. I had the same problem and did find a work around that seems to stop the pop-up

Re: [squid-users] Squid3 issues

2010-03-19 Thread Amos Jeffries
a...@gmail wrote: Hi Amos, Thanks for your comments, All I was doing is hit reply, this is the very first time ever I used any mailing list It doesn't matter anymore, I am sorry if I offended anyone, it was not my intention, when I get an email I simply hit reply I will try and solve my

Re: [squid-users] Cancelled downloads

2010-03-19 Thread Marcello Romani
CASALI COMPUTERS - Michele Brodoloni ha scritto: Hello, is it possible to stop squid from keep downloading a file when a user stops the download from his browser? If an user initiates a 1GB of web download and then hits “cancel”, squid doesn’t mind it and continues to download until it

RE: [squid-users] Reverse Proxy SSL Options

2010-03-19 Thread Dean Weimer
On 18.03.10 13:12, Dean Weimer wrote: We have multiple websites using a certificate that has subject alternative names set to use SSL for the multiple domains. That part is working fine, and traffic will pass through showing with Valid certificates. However, I need to Disable it from

Re: [squid-users] Yet another IMAP support request

2010-03-19 Thread Amos Jeffries
Sabyasachi Ruj wrote: Does that mean that if I modify the client to use HTTP proxy's CONNECT method, it can connect to any standard IMAP server? Say, Gmail IMAP server? I also think the client only has to setup the tunnel once. Then there is no need to wrap the requests with HTTP requests. It

Re: [squid-users] RE: NTLM error

2010-03-19 Thread Amos Jeffries
Jeff Foster wrote: Dawie, Welcome to the squid It's Microsoft and it's broke, so it's not our fault list. I had the same problem and did find a work around that seems to stop the pop-up authentication. The hack is to change the registry setting MaxConnectionsPerServer to 1. This is a link for

Re: [squid-users] Cache_dir size considerations

2010-03-19 Thread Marcello Romani
GIGO . ha scritto: Well i want to make sure that my settings are optimized and want to learn more about the cache_dir settings.let me come in details Gigo, you are asking a lot of questions all at once. This is a volounteer-based support list, so your chances of getting (good)

[squid-users] tcp_outgoing_address binding to wrong address

2010-03-19 Thread john
Hi, I seem to be running in to a problem with tcp_outgoing_address binding to the incorrect interface address when sending traffic. I have a private subnet which is not routable which I use squid to reach stuff on. This is on a seperate network interface on the server. Squid also sends other

RE: [squid-users] Ignore requests from certain hosts in access_log

2010-03-19 Thread Baird, Josh
Amos, Do you think that what I am trying to achieve is possible? Thanks, Josh -Original Message- From: Baird, Josh Sent: Tuesday, March 16, 2010 9:25 AM To: Amos Jeffries; squid-users@squid-cache.org Subject: RE: [squid-users] Ignore requests from certain hosts in access_log Hi Amos,

RE: [squid-users] Cache_dir size considerations

2010-03-19 Thread GIGO .
Yes you are right about asking of lot of questions at once. i be careful. + Thank you Date: Fri, 19 Mar 2010 16:44:18 +0100 From: mrom...@ottotecnica.com To: gi...@msn.com CC: squid-users@squid-cache.org Subject: Re: [squid-users] Cache_dir size

Re: [squid-users] Squid3 issues

2010-03-19 Thread a...@gmail
Hi Amos, Thanks again for your reply, I have tried these two links, I have used them for one server at a time, or maybe the issue is that I was trying to access the backend Server which is currently running in virtualhost mode and holds the 3 websites. As I said before I have completely

[squid-users] How to orward CONNECT and POST to parent cache.

2010-03-19 Thread Krist van Besien
I have the following in my Squid (the rest is standard) cache_peer p.somewhere.com parent443 0 no-digest no-query proxy-only l cache_peer_domain p.somewhere.com .domain.net In my logfile I see that GET requests are forwarded to the peer, but POST and CONNECT still goest DIRECT.

[squid-users] Re: How to orward CONNECT and POST to parent cache.

2010-03-19 Thread Krist van Besien
Forgot to add: This is squid 2.7 on Ubuntu Jaunty. Krist -- krist.vanbes...@gmail.com kr...@vanbesien.org Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email

Re: [squid-users] Squid3 issues

2010-03-19 Thread a...@gmail
Hi Amos, I forgot to ask you about this comment Amos Wrote: The IRC-server / Digichat server may not be proxy-able at all through Squid. It depends if they use HTTP services, or if they are accessible via HTTP According to you or from what I understand, proxy server (Squid) can only allow

RE: [squid-users] Requests through proxy take 4x+ longer than direct to the internet

2010-03-19 Thread David Parks
Ah brilliant, thank you for passing this link along, it's very helpful! Question then: Does the proxy server have a similar functionality as the browser, that of limiting concurrent requests to a given domain (as described in this article)? What I want to know really is: Can I have my users bump

[squid-users] What version of squid in the upcoming ubuntu 10.4 repo

2010-03-19 Thread a...@gmail
Have you tried to ask the question on Ubuntu forums? You're more likely to get an answer, I believe it will be version 3.0 Stable 25 I am only guessing Regards Adam

[squid-users] Squid-2.7STABLE7: problem with Vary

2010-03-19 Thread Krzysztof Olędzki
Hello, I'm have been trying to configure Squid to store and provide two versions of the same obiect, but so far with no luck. I configured my load balancer to append an additional header to a request depending on a client status, something like: X-ASP-CFlag: Yes or X-ASP-CFlag: No I also

Re: [squid-users] Ignore requests from certain hosts in access_log

2010-03-19 Thread Amos Jeffries
Baird, Josh wrote: Amos, Do you think that what I am trying to achieve is possible? Yes. Do exactly the same myself with a simple !aclname at the end of access_log directives. I can't figure out why neither that nor the longer log_access is working for you. Amos -Original

RE: [squid-users] Ignore requests from certain hosts in access_log

2010-03-19 Thread Baird, Josh
And, you still see the non-healthcheck, normal traffic logged using the X-Forwarded-For information? Here is my entire config, maybe this will help: # What port do we want to listen on? http_port 80 # Define refresh patterns for content types refresh_pattern ^ftp: 1440 20% 10080

Re: [squid-users] Squid3 issues

2010-03-19 Thread Amos Jeffries
a...@gmail wrote: Hi Amos, I forgot to ask you about this comment Amos Wrote: The IRC-server / Digichat server may not be proxy-able at all through Squid. It depends if they use HTTP services, or if they are accessible via HTTP I said that because my reading of one of your earlier

Re: [squid-users] Squid3 issues

2010-03-19 Thread Amos Jeffries
a...@gmail wrote: Hi Amos, Thanks again for your reply, I have tried these two links, I have used them for one server at a time, or maybe the issue is that I was trying to access the backend Server which is currently running in virtualhost mode and holds the 3 websites. As I said before I

Re: [squid-users] Ignore requests from certain hosts in access_log

2010-03-19 Thread Amos Jeffries
Baird, Josh wrote: And, you still see the non-healthcheck, normal traffic logged using the X-Forwarded-For information? Yes. Here is my entire config, maybe this will help: snip # We want to append the X-Forwarded-For header for Websense follow_x_forwarded_for allow loadbalancers

Re: [squid-users] tcp_outgoing_address binding to wrong address

2010-03-19 Thread Amos Jeffries
john wrote: Hi, I seem to be running in to a problem with tcp_outgoing_address binding to the incorrect interface address when sending traffic. I have a private subnet which is not routable which I use squid to reach stuff on. This is on a seperate network interface on the server. Squid

Re: [squid-users] How to orward CONNECT and POST to parent cache.

2010-03-19 Thread Amos Jeffries
Krist van Besien wrote: I have the following in my Squid (the rest is standard) cache_peer p.somewhere.com parent443 0 no-digest no-query proxy-only l cache_peer_domain p.somewhere.com .domain.net In my logfile I see that GET requests are forwarded to the peer, but POST and

[squid-users] Unsupported method attempted by

2010-03-19 Thread a...@gmail
Hi, I was wondering if anyone here could help with this problem I have just finished reinstalling my proxy server Squid3.0STABLE25 As soon as I start it with Squid -NCd 10 I check if everything is running ok, so I get this warning: ClientParseRequestMethod: Unsupported method attempted by :

Re: [squid-users] Requests through proxy take 4x+ longer than direct to the internet

2010-03-19 Thread Amos Jeffries
David Parks wrote: Ah brilliant, thank you for passing this link along, it's very helpful! Question then: Does the proxy server have a similar functionality as the browser, that of limiting concurrent requests to a given domain (as described in this article)? Not certain about other proxies.

Re: [squid-users] What version of squid in the upcoming ubuntu 10.4 repo

2010-03-19 Thread Amos Jeffries
a...@gmail wrote: Have you tried to ask the question on Ubuntu forums? You're more likely to get an answer, I believe it will be version 3.0 Stable 25 I am only guessing Regards Adam Ubuntu 10.04 Lucid went into freeze with 3.0.STABLE19 + a few security patches. 3.1 will make Debian

Re: [squid-users] Squid3 issues

2010-03-19 Thread a...@gmail
Well IRC can be accessed with IRC clients such as mIRC and so on But they can also be accessed via the web with Java Applets using in fact a web browser That's why I am asking the question, if anyone has had this done. As for Digichat, is a 100% Java written programme, and it also uses the Web

Re: [squid-users] Squid-2.7STABLE7: problem with Vary

2010-03-19 Thread Amos Jeffries
Krzysztof Olędzki wrote: Hello, I'm have been trying to configure Squid to store and provide two versions of the same obiect, but so far with no luck. I configured my load balancer to append an additional header to a request depending on a client status, something like: X-ASP-CFlag: Yes or

Re: [squid-users] Squid3 issues

2010-03-19 Thread Amos Jeffries
a...@gmail wrote: Well IRC can be accessed with IRC clients such as mIRC and so on But they can also be accessed via the web with Java Applets using in fact a web browser That's why I am asking the question, if anyone has had this done. Ah okay. I think you will find that those IRC Java

Re: [squid-users] Squid3 issues

2010-03-19 Thread a...@gmail
- Original Message - From: Amos Jeffries squ...@treenet.co.nz To: squid-users@squid-cache.org Sent: Saturday, March 20, 2010 1:38 AM Subject: Re: [squid-users] Squid3 issues a...@gmail wrote: Well IRC can be accessed with IRC clients such as mIRC and so on But they can also be