Re: [squid-users] How to Block HTTPS url on squid 2

2010-08-24 Thread Amos Jeffries
Mohamed Ashraf wrote: Date: Tue, 24 Aug 2010 01:00:35 + From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] How to Block HTTPS url on squid 2 On Mon, 23 Aug 2010 18:17:09 +, Mohamed Ashraf asrafonl...@hotmail.com wrote: Hi All Who

RE: [squid-users] How to Block HTTPS url on squid 2

2010-08-24 Thread Mohamed Ashraf
Date: Tue, 24 Aug 2010 01:00:35 + From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] How to Block HTTPS url on squid 2 On Mon, 23 Aug 2010 18:17:09 +, Mohamed Ashraf asrafonl...@hotmail.com wrote: Hi All Who can help me regarding squid

RE: [squid-users] How to Block HTTPS url on squid 2

2010-08-24 Thread Mohamed Ashraf
Dear Amos, Thank you for your reply How do I block all https except some. Ashraf Date: Tue, 24 Aug 2010 18:08:37 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] How to Block HTTPS url on squid 2 Mohamed

[squid-users] strange log entries

2010-08-24 Thread Jürgen Winkler
Hi, I have noticed some strange log entries in my messages, and I don´t know what they mean an how to fix this problem if this is one;-) I hope someone can explain what this means : squid[2099]: WARNING: HTTP: Invalid Response: No object data received for : x AKA x squid[2099]:

Re: [squid-users] Problem compiling Squid as a TPROXY with WCCP

2010-08-24 Thread Leonardo
Amos wrote: Yes. It's worth a try if possible. Just to be sure before doing a whole machine reinstall: under the Squeeze release, the Squid binaries available directly through apt-get are already compiled with support for TPROXY via WCCP and Reverse Proxy mode? Would you recommend the

[squid-users] Squid 3.1.7 is available

2010-08-24 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.1.7 release! This release fixes a number of bugs in the earlier Squid releases. One regression introduced with 3.1.6 when contacting IPv4-only DNS resolvers opens a small but exploitable DoS vulnerability.

[squid-users] Re: Dynamic delay pool status

2010-08-24 Thread Jean-Baptiste Denis
On Fri, 20 Aug 2010 12:37:12 -0300, Leonardo Rodrigues wrote: have you ever tried using tcp_outgoing_tos to mark your 'good' and 'bad' traffic and let Linux QoS system handles your QoS rules ?? thank you for your suggestion, but my connection to the outside world is not managed by a

Re: [squid-users] Re: Dynamic delay pool status

2010-08-24 Thread Amos Jeffries
Jean-Baptiste Denis wrote: On Fri, 20 Aug 2010 12:37:12 -0300, Leonardo Rodrigues wrote: have you ever tried using tcp_outgoing_tos to mark your 'good' and 'bad' traffic and let Linux QoS system handles your QoS rules ?? thank you for your suggestion, but my connection to the outside

Re: [squid-users] Problem compiling Squid as a TPROXY with WCCP

2010-08-24 Thread Amos Jeffries
Leonardo wrote: Amos wrote: Yes. It's worth a try if possible. Just to be sure before doing a whole machine reinstall: under the Squeeze release, the Squid binaries available directly through apt-get are already compiled with support for TPROXY via WCCP and Reverse Proxy mode? Would you

Re: [squid-users] strange log entries

2010-08-24 Thread Amos Jeffries
Jürgen Winkler wrote: Hi, I have noticed some strange log entries in my messages, and I don´t know what they mean an how to fix this problem if this is one;-) I hope someone can explain what this means : squid[2099]: WARNING: HTTP: Invalid Response: No object data received for : x

[squid-users] Configure cache-peers so that correct parent is favored

2010-08-24 Thread Bucci, David G
Hi - sorry if this is in the FAQ somewhere, but I couldn't find it - how do you configure your caching hierarchy so that certain parents will be favored for addresses to certain domains, while still permitting routing through other parents for redundancy? We have SERVER1 and SERVER2, each

[squid-users] TCP_DENIED/407 for some HTTP-sites

2010-08-24 Thread Tom Tux
Hi In my access.log I have some TCP_DENIED/407-messages like the following (from different sites): 1282649791.425 0 xx.xx.xx.xx TCP_DENIED/407 4406 GET http://wiki.squid-cache.org/wiki/squidtheme/css/projection.css - NONE/- text/html What does this means? The site is accessible correctly.

[squid-users] usinq squid as reverse proxy for streaming

2010-08-24 Thread Tapas Mishra
Can squid be used as a reverse proxy for streaming protocol such as rtmp running at 1935. If yes please give a link I would like to implement it. -- Tapas http://mightydreams.blogspot.com

[squid-users] Squid gives 503 Service Unavailable for a known working service

2010-08-24 Thread J5K
Dear all, I have encountered a problem with our Squid server, where it does not seem to proxy a certain connection. The problem appeared on the 19th August. The last configuration change on the squid server was on the 16th. I rolled back the change, but it did not solve the problem,

Re: [squid-users] How to Block HTTPS url on squid 2

2010-08-24 Thread Tim Bates
On 24/08/2010 4:20 PM, Mohamed Ashraf wrote: Thank you for your reply How do I block all https except some. Please go and read some guides about Squid ACLs. What you want is relatively simple once you have a basic understanding of the ACLs. Below is the basic idea, which I have NOT

Re: [squid-users] Squid gives 503 Service Unavailable for a known working service

2010-08-24 Thread Jakob Curdes
I suppose that the origin server reacts strangely on the information passed by squid. remember that the fact that a proxy is in the path is normally detectable for the origin server via the request headers. Perhaps you can try to play with header_access, but be carefull you may easily repair

Re: [squid-users] Problem compiling Squid as a TPROXY with WCCP

2010-08-24 Thread Leonardo
I think for now I'll stick with Lenny and try to get Squid working with that release. The question for which I am still unable to find an answer is: how to get the libcap-??? library necessary to compile Squid with the TPROXY feature? Alternatively: is there a way (perhaps via some backport) to

[squid-users] Squid gives 503 Service Unavailable for a known working service

2010-08-24 Thread J5K
Sent once more because I never received a copy back from the mailing list, which is unusual. j. Original Message Subject:Squid gives 503 Service Unavailable for a known working service Date: Tue, 24 Aug 2010 14:44:10 +0200 From: J5K ju...@klunky.co.uk Reply-To:

Re: [squid-users] Bigger cache size on hdd

2010-08-24 Thread Jose Ildefonso Camargo Tolosa
Hi! On Tue, Aug 24, 2010 at 12:59 AM, Hamza Sani Abubakar Usman hamza_s...@hotmail.com wrote: Hi, Can you please tell me that How much amount of ram will required if we use 100GB partition for squid caching. I don't remember. A quick google search gave me this:

[squid-users] NTLM not working for squid in windows server

2010-08-24 Thread José Carlos Correia
Dear all, I have installed Squid in Windows 2008 with NTLM authentication but the browser still prompts for login. I read in the forums that NTLM won't work if: - the client is not joined to a domain - the client is configured not to attempt automatica authentication to the proxy - the

Re: [squid-users] icap 407 from icap-server

2010-08-24 Thread Mikio Kishi
Hi, That poster did not register a bug report. We have not yet fixed the problem. I did. # Bug 3025 Sincerely, -- Mikio Kishi On Tue, Aug 24, 2010 at 11:18 AM, Amos Jeffries squ...@treenet.co.nz wrote: On Mon, 23 Aug 2010 12:39:01 -0700, Ming Fu ming...@watchguard.com wrote: Hi, I was

[squid-users] tproxy and https

2010-08-24 Thread Mamadou Touré
Hi i'd like to know if it is possible to make a transparent proxy of https traffric with squid and tproxy. regards.

[squid-users] about Bug 2583

2010-08-24 Thread Mikio Kishi
Hi, I have still been facing the #bug 2583. (using squid3.1.4) http://bugs.squid-cache.org/show_bug.cgi?id=2583 It have already fixed, right ? I really really hope that the patch is applied to squid3.1 Sincerely, -- Mikio Kishi

Re: [squid-users] Bigger cache size on hdd

2010-08-24 Thread Marcus Kool
Jose Ildefonso Camargo Tolosa wrote: Hi! On Tue, Aug 24, 2010 at 12:59 AM, Hamza Sani Abubakar Usman hamza_s...@hotmail.com wrote: Hi, Can you please tell me that How much amount of ram will required if we use 100GB partition for squid caching. I don't remember. A quick google search

[squid-users] Modifying and redistribution of Squid

2010-08-24 Thread Ryan
Hi, I have modified squid and want to redistribute it. All I did was modify the configuration file but I saw this in the license: - You must notify IRTF-RD regarding your distribution of  *       the derivative work. How do I notify IRTF-RD? Thanks, Ryan

Re: [squid-users] Modifying and redistribution of Squid

2010-08-24 Thread Leonardo Rodrigues
modifying configuration files only is not a 'derivate work'. derivate work is when you modify the sources of the software. i really dont think you need to notify anyone as, at least as you told, you did not modify squid in anyway. Em 24/08/2010 18:24, Ryan escreveu: Hi, I have

Re: [squid-users] Modifying and redistribution of Squid

2010-08-24 Thread Ryan
I downloaded the source and modified the configuration file included. This way I can create my own Custom Build. This makes me think that I need to notify this group or what ever it is.

Re: [squid-users] Modifying and redistribution of Squid

2010-08-24 Thread Jorge Armando Medina
Ryan wrote: I downloaded the source and modified the configuration file included. This way I can create my own Custom Build. This makes me think that I need to notify this group or what ever it is. You are doing what most distributions do with squid packages, they ship with a predefined

[squid-users] allow certain pages to blocked users

2010-08-24 Thread Landy Landy
Hello. I am currently running squid Version 3.0.STABLE24 and is working really well. I block user's by ip address: acl registered src /etc/msd/ipAllowed http_access allow registered http_access deny all but, now I would like UNregistered clients to be able to access some specific websites

Re: [squid-users] NTLM not working for squid in windows server

2010-08-24 Thread Amos Jeffries
On Tue, 24 Aug 2010 17:22:09 +0100, José Carlos Correia jcorr...@tintadigital.com wrote: Dear all, I have installed Squid in Windows 2008 with NTLM authentication but the browser still prompts for login. I read in the forums that NTLM won't work if: - the client is not joined to a domain

Re: [squid-users] Modifying and redistribution of Squid

2010-08-24 Thread Amos Jeffries
On Tue, 24 Aug 2010 17:24:23 -0400, Ryan ccrr.m...@gmail.com wrote: Hi, I have modified squid and want to redistribute it. All I did was modify the configuration file but I saw this in the license: - You must notify IRTF-RD regarding your distribution of * the derivative work. How do

[squid-users] squidaio_queue_request: WARNING - Queue congestion

2010-08-24 Thread Mike Diggins
OS: RHEL 5.3 64 Bit Squid: squid-2.7.STABLE9 Decided to do a very light load test on a new Squid server (specs above). I'm running the AUFS file system cache_dir aufs /usr/local/squid/var/cache 2 16 256 The test ran for about an hour with about 10 clients loading random web

Re: [squid-users] Squid gives 503 Service Unavailable for a known working service

2010-08-24 Thread Amos Jeffries
On Tue, 24 Aug 2010 17:08:44 +0200, J5K ju...@klunky.co.uk wrote: Sent once more because I never received a copy back from the mailing list, which is unusual. j. Original Message Dear all, I have encountered a problem with our Squid server, where it does not seem

Re: [squid-users] about Bug 2583

2010-08-24 Thread Amos Jeffries
On Wed, 25 Aug 2010 02:03:45 +0900, Mikio Kishi mki...@104.net wrote: Hi, I have still been facing the #bug 2583. (using squid3.1.4) http://bugs.squid-cache.org/show_bug.cgi?id=2583 It have already fixed, right ? I really really hope that the patch is applied to squid3.1 It's been

Re: [squid-users] tproxy and https

2010-08-24 Thread Amos Jeffries
On Tue, 24 Aug 2010 16:28:29 +, Mamadou Touré e2ia...@gmail.com wrote: Hi i'd like to know if it is possible to make a transparent proxy of https traffric with squid and tproxy. regards. It is possible to use TPROXY to pass HTTPS traffic to a listening port on Squid, just as it was

Re: [squid-users] about Bug 2583

2010-08-24 Thread Mikio Kishi
Hi, Amos It's been committed to 3.HEAD and currently winding it's way down the releases. Possibly in 3.1.8 if it applies cleanly. OK, I'll be waiting for 3.1.8 !!! --mkishi On Wed, Aug 25, 2010 at 11:11 AM, Amos Jeffries squ...@treenet.co.nz wrote: On Wed, 25 Aug 2010 02:03:45 +0900, Mikio

Re: [squid-users] allow certain pages to blocked users

2010-08-24 Thread Amos Jeffries
Landy Landy wrote: Hello. I am currently running squid Version 3.0.STABLE24 and is working really well. I block user's by ip address: acl registered src /etc/msd/ipAllowed http_access allow registered http_access deny all but, now I would like UNregistered clients to be able to access