Re: [squid-users] Squid 3.1.6 tracking image ?

2010-08-17 Thread Amos Jeffries
John Michaels wrote: Hello everyone. First of all, let me begin by thanking the developer team for their hard work ... I've been using squid to improve network performance for a small network (~200 sistems) for some years. Recently, I've upgraded to 3.1.6 (from the Gentoo portage) and I was

Re: [squid-users] Squid 3.1.6 tracking image ?

2010-08-17 Thread John Michaels
On Tue, 17 Aug 2010 18:20:32 +1200 Amos Jeffries squ...@treenet.co.nz wrote: It has been mentioned. Please be assured we do intend or use it as a tracker. Could you please point me to the discution ? I think there is a typo in the second line ... it reads like you _do_ intend to use it as a

[squid-users] Connection lost in browser based curriculum

2010-08-17 Thread DanC
List, I have recently setup Squid for the first time. I work for a small school and our goal is to use a machine running Squid, Dan's Guardian, Shorewall and a few other things to make an effective filter to protect our students and keep our parents happy. So far, everything works wonderfully

Re: [squid-users] Connection lost in browser based curriculum

2010-08-17 Thread Amos Jeffries
DanC wrote: List, I have recently setup Squid for the first time. I work for a small school and our goal is to use a machine running Squid, Dan's Guardian, Shorewall and a few other things to make an effective filter to protect our students and keep our parents happy. Good luck. The cynic in

Re: [squid-users] Error loading pdf behind squid

2010-08-17 Thread Amos Jeffries
Joseph L. Casale wrote: Users are needing access to the pdf's in http://ccemc.ca/process/guidelines such as http://ccemc.ca/_uploads/CCEMC-166-Proposal-Guide6.pdf but in ie8 and ff 3.6.8 the pdfs fail to render, w/o the proxy they seem to always load. I have tried in squid-3.0.STABLE20 and

[squid-users] maximum concurrent user limit

2010-08-17 Thread Ozan UÇAR
Hello Squid Users, I have been on the lookout for a solution to limit the number of users allowed to connect to the Internet. What I am looking for is not maxconn. I do not wish to limit the number of total connections per client. A client can have as many connections as s/he wishes. Say, I

[squid-users] Log Files running out disk space

2010-08-17 Thread Nyamul Hassan
Hi, One of proxies died down today, because the log files were overwhelming: -rw-r- 1 squid squid       61440 Aug 17 16:01 access.log -rw-r- 1 squid squid   523366451 Aug 17 02:59 access.log.0 -rw-r- 1 squid squid   771658231 Aug 17 00:00 access.log.1 -rw-r- 1 squid squid  

Re: [squid-users] maximum concurrent user limit

2010-08-17 Thread John Doe
From: Ozan UÇAR m...@ozanucar.com I have been on the lookout for a solution to limit the number of users allowed to connect to the Internet. What I am looking for is not maxconn. I do not wish to limit the number of total connections per client. A client can have as many connections as

[squid-users] Fwd: %path% in acl list squid 2.6

2010-08-17 Thread sushi squid
HI there, I am a newbie in squid ... my squid config file is giving some strange error My OS is Windows XP and squid version is 2.6Stable In the acl permission list the path is as follows acl goodsite url_regex -i %userprofile%/whitelist.txt on starting squid the error is as follows :

Re: [squid-users] maximum concurrent user limit

2010-08-17 Thread Ozan UÇAR
1. How do I reset the TTL of an IP? 2. Do you know of any example external ACLs that can be used to limit number of users? After all, if there is a way to limit number of users, that is what I'm looking for.. John Doe yazmış: From: Ozan UÇAR m...@ozanucar.com I have been on the lookout

Re: [squid-users] Fwd: %path% in acl list squid 2.6

2010-08-17 Thread John Doe
From: sushi squid sushi.sq...@gmail.com I am a newbie in squid ... my squid config file is giving some strange error My OS is Windows XP and squid version is 2.6Stable In the acl permission list the path is as follows acl goodsite url_regex -i %userprofile%/whitelist.txt Maybe I am wrong

Re: [squid-users] Log Files running out disk space

2010-08-17 Thread Amos Jeffries
Nyamul Hassan wrote: Hi, One of proxies died down today, because the log files were overwhelming: -rw-r- 1 squid squid 61440 Aug 17 16:01 access.log -rw-r- 1 squid squid 523366451 Aug 17 02:59 access.log.0 -rw-r- 1 squid squid 771658231 Aug 17 00:00 access.log.1

Re: [squid-users] Log Files running out disk space

2010-08-17 Thread Nyamul Hassan
On Tue, Aug 17, 2010 at 17:03, Amos Jeffries squ...@treenet.co.nz wrote: Nyamul Hassan wrote: Hi, One of proxies died down today, because the log files were overwhelming: -rw-r- 1 squid squid       61440 Aug 17 16:01 access.log -rw-r- 1 squid squid   523366451 Aug 17 02:59

Re: [squid-users] maximum concurrent user limit

2010-08-17 Thread John Doe
From: Ozan UÇAR m...@ozanucar.com John Doe yazmış: From: Ozan UÇAR m...@ozanucar.com I have been on the lookout for a solution to limit the number of users allowed to connect to the Internet. What I am looking for is not maxconn. I do not wish to limit the number of total connections

Re: [squid-users] Log Files running out disk space

2010-08-17 Thread Amos Jeffries
Nyamul Hassan wrote: On Tue, Aug 17, 2010 at 17:03, Amos Jeffries squ...@treenet.co.nz wrote: Nyamul Hassan wrote: Hi, One of proxies died down today, because the log files were overwhelming: -rw-r- 1 squid squid 61440 Aug 17 16:01 access.log -rw-r- 1 squid squid 523366451

Re: [squid-users] Restricting bandwidth usage through squid

2010-08-17 Thread Andrew Beverley
I have been looking around for a howto on this. Numerous google searches have only lead me to half explanations, etc. Can anyone please point me to a nice howto on setting this up. Depending on what exactly you want to achieve, you could, of course, also use some of the tc

[squid-users] Error 101 network unreachable

2010-08-17 Thread Babelo Gmvsdm
Hi, My squid server has a strange behaviour with one website: http://www.01net.com when I do this search on google for instance: 7zip 01 the results sent by google give me www.01net.com at first place, but when i try to click the link i have this error: L'erreur suivante a été rencontrée en

[squid-users] RE: EXTERNAL: Re: [squid-users] Feasibility - Squid as user-specific SSL tunnel (poor-man's V

2010-08-17 Thread Bucci, David G
Squid *C* needs a cache_peer line for each separate certificate it uses to contact Squid S. Getting back to this, Amos. Have roughed out the solution, but am now trying to layer in client certificates. Again, we have multiple users/PC, but can guarantee that only one user will be on at a

Re: [squid-users] Fwd: %path% in acl list squid 2.6

2010-08-17 Thread sushi squid
Thanks JD for the reply, My Problem is this ... Imagine a system with three accounts: 1)Administrator 2)John 3)Sushi I want that in the config file the path should be such that … when John logsin he has a different block list and when sushi logs in a different black list is loaded This has to be

RE: [squid-users] ldap fallback not working

2010-08-17 Thread Joseph L. Casale
I think its a matter of username (Basic) vs dom...@username (Kerberos). You can test this by replacing the group lookup with a fake external_acl_helper which logs the credentials passed to the group helper. Doing a few requests through both auth mechanisms will show you what difference the group

Re: [squid-users] Squid blocks web page in port 7779

2010-08-17 Thread p3dRø
Hi Amos, I have my proxy as another host in the network (with only one ethernet card = eth0). The communication flow is: Internet -- Router ADSL -- Firewall -- Squid -- PCs What I mean with transparent is that all the hosts go to proxy without authentication and without blocking anything yet.

[squid-users] WCCP and parent authentication

2010-08-17 Thread Dean Weimer
I know when using squid as an intercept proxy it can't do authentication as the clients don't know it's there, but do any of you out there know if you can use it with a parent proxy that requires authentication? The specific scenario I am considering is Squid in DMZ with WCCPv2 used in

[squid-users] using squid to proxy from internal lan to remote ldaps

2010-08-17 Thread Derek Doucette
Hello: I have a java based web application that is sitting behind our DMZ. A customer we host has an ldaps instance running which I am trying to connect to through from the application server. I was wondering if anyone has ever attempted to use squid to proxy ldaps requests to a remote site.

[squid-users] Re: Squid_kerb_ldap intermittently failing auth

2010-08-17 Thread Markus Moeller
Can you run both squid_kerb_ldap and squid_kerb_auth with -d. It should give a lot more details to find out why it happens Markus Mark deJong dejo...@gmail.com wrote in message news:aanlktikvdju6+ysywkdn7vxyzyts4rtdjgf7ccnzm...@mail.gmail.com... Hello, I'm having an issue with

Re: [squid-users] using squid to proxy from internal lan to remote ldaps

2010-08-17 Thread Jakob Curdes
Am 17.08.2010 21:29, Derek Doucette wrote: I was wondering if anyone has ever attempted to use squid to proxy ldaps requests to a remote site. I haven't, but I see no reason it should not work. Remarks: - you will need to add the standard ldaps port to safe_ports or use port 443 for your

[squid-users] rewrite domain

2010-08-17 Thread Thomas E. Maleshafske
Hey everyone, I'm having problems with rewrite rules. here is my situation. I run an Apt Mirror inside my local network, but currently I set my sources.list to reflect that, but if a laptop leaves the network it still has that sources.list which is no good due. basically I'm wanting to rewrite

Re: [squid-users] Squid blocks web page in port 7779

2010-08-17 Thread Ulises M. Alvarez
On 8/17/10 1:14 PM, p3dRø wrote: I reconfigured my config file and I have this now: http_port 3128 intercept cache_mem 100 MB cache_dir ufs /var/spool/squid 150 16 256 acl red_local src 192.168.1.0/24 acl localhost src 127.0.0.1/32 acl all src all http_access allow localhost http_access allow

Re: [squid-users] Squid blocks web page in port 7779

2010-08-17 Thread p3dRø
acl Safe_ports port 7779 is already included in the configuration. -- Pedro 2010/8/17 Ulises M. Alvarez u...@fata.unam.mx: On 8/17/10 1:14 PM, p3dRř wrote: I reconfigured my config file and I have this now: http_port 3128 intercept cache_mem 100 MB cache_dir ufs /var/spool/squid 150 16

[squid-users] How to deal with metalinks?

2010-08-17 Thread Stefan Jensen
Hi,... i'm using squid-3.1.4-2.fc13.x86_64 and have a acl for update-sites e.g.: acl updates dstdomain .windowsupdate.microsoft.com www.update.microsoft.com .windowsupdate.com download.microsoft.com ntservicepack.microsoft.com wustat.windows.com urs.microsoft.com spynet2.microsoft.com

Re: [squid-users] Re: Squid_kerb_ldap intermittently failing auth

2010-08-17 Thread Mark deJong
Hello Markus, It turns out it was an issue with ipv6. I recompiled and that fixed the problem. Thanks for getting back! Best, Mark On Tue, Aug 17, 2010 at 3:39 PM, Markus Moeller hua...@moeller.plus.com wrote: Can you run both squid_kerb_ldap and squid_kerb_auth with -d. It should give a lot

Re: [squid-users] Fwd: %path% in acl list squid 2.6

2010-08-17 Thread Amos Jeffries
On Tue, 17 Aug 2010 22:37:31 +0530, sushi squid sushi.sq...@gmail.com wrote: Thanks JD for the reply, My Problem is this ... Imagine a system with three accounts: 1)Administrator 2)John 3)Sushi I want that in the config file the path should be such that … when John logsin he has a

RE: [squid-users] ldap fallback not working

2010-08-17 Thread Amos Jeffries
On Tue, 17 Aug 2010 17:57:13 +, Joseph L. Casale jcas...@activenetwerx.com wrote: I think its a matter of username (Basic) vs dom...@username (Kerberos). You can test this by replacing the group lookup with a fake external_acl_helper which logs the credentials passed to the group helper.

Re: [squid-users] RE: EXTERNAL: Re: [squid-users] Feasibility - Squid as user-specific SSL tunnel (poor-man's V

2010-08-17 Thread Amos Jeffries
On Tue, 17 Aug 2010 11:43:38 -0400, Bucci, David G david.g.bu...@lmco.com wrote: Squid *C* needs a cache_peer line for each separate certificate it uses to contact Squid S. Getting back to this, Amos. Have roughed out the solution, but am now trying to layer in client certificates. Again,

Re: [squid-users] How to deal with metalinks?

2010-08-17 Thread Amos Jeffries
On Tue, 17 Aug 2010 23:56:01 +0200, Stefan Jensen sjen...@versanet.de wrote: Hi,... i'm using squid-3.1.4-2.fc13.x86_64 and have a acl for update-sites e.g.: acl updates dstdomain .windowsupdate.microsoft.com www.update.microsoft.com .windowsupdate.com download.microsoft.com

Re: [squid-users] Re: Squid_kerb_ldap intermittently fa iling auth

2010-08-17 Thread Amos Jeffries
On Tue, 17 Aug 2010 18:00:46 -0400, Mark deJong dejo...@gmail.com wrote: Hello Markus, It turns out it was an issue with ipv6. I recompiled and that fixed the problem. Thanks for getting back! What was the problem specifically please? and was there anything other than a simple recompile with

Re: [squid-users] Error 101 network unreachable

2010-08-17 Thread Amos Jeffries
On Tue, 17 Aug 2010 15:10:46 +0200, Babelo Gmvsdm hercul...@hotmail.com wrote: Hi, My squid server has a strange behaviour with one website: http://www.01net.com when I do this search on google for instance: 7zip 01 the results sent by google give me www.01net.com at first place, but

Re: [squid-users] WCCP and parent authentication

2010-08-17 Thread Amos Jeffries
On Tue, 17 Aug 2010 14:00:57 -0500, Dean Weimer dwei...@orscheln.com wrote: I know when using squid as an intercept proxy it can't do authentication as the clients don't know it's there, but do any of you out there know if you can use it with a parent proxy that requires authentication? The

[squid-users] High load server Disk problem

2010-08-17 Thread Robert Pipca
Hi. I'm using squid on a high speed network (with 110M of http traffic). I'm using 2.7.STABLE7 with these cache_dir: cache_dir aufs /cache 756842 60 100 cache_dir coss /cache/coss1 65520 max-size=1048575 max-stripe-waste=32768 block-size=4096 membufs=15 cache_dir coss /cache/coss2 65520

Re: [squid-users] Squid blocks web page in port 7779

2010-08-17 Thread Amos Jeffries
On Tue, 17 Aug 2010 13:14:25 -0500, p3dRø ip2tr...@gmail.com wrote: Hi Amos, I have my proxy as another host in the network (with only one ethernet card = eth0). The communication flow is: Internet -- Router ADSL -- Firewall -- Squid -- PCs What I mean with transparent is that all the

Re: [squid-users] High load server Disk problem

2010-08-17 Thread Jose Ildefonso Camargo Tolosa
Hi! In my own personal opinion: your hard drive alone is not enough to handle that much traffic (110MBytes/s, ~1Gbps). See, most SATA hard drives (7200rpm) gives around 50~70MB/s *sequential* read speed, your cache reads are *not* sequential, so, it will be slower. In my opinion, you need

Re: [squid-users] High load server Disk problem

2010-08-17 Thread Jose Ildefonso Camargo Tolosa
Hi! Sorry, had to post some corrections. duh On Tue, Aug 17, 2010 at 10:43 PM, Jose Ildefonso Camargo Tolosa ildefonso.cama...@gmail.com wrote: Hi! In my own personal opinion: your hard drive alone is not enough to handle that much traffic (110MBytes/s, ~1Gbps).  See, most SATA hard

Re: [squid-users] High load server Disk problem

2010-08-17 Thread Amos Jeffries
On Tue, 17 Aug 2010 22:43:33 -0430, Jose Ildefonso Camargo Tolosa ildefonso.cama...@gmail.com wrote: Hi! In my own personal opinion: your hard drive alone is not enough to handle that much traffic (110MBytes/s, ~1Gbps). See, most SATA hard drives (7200rpm) gives around 50~70MB/s