Re: [squid-users] squidaio_queue_request: WARNING - Queue congestion

2010-08-25 Thread Amos Jeffries
Mike Diggins wrote: OS: RHEL 5.3 64 Bit Squid: squid-2.7.STABLE9 Decided to do a very light load test on a new Squid server (specs above). I'm running the AUFS file system cache_dir aufs /usr/local/squid/var/cache 2 16 256 The test ran for about an hour with about 10 clients

[squid-users] Re: Dynamic delay pool status

2010-08-25 Thread Jean-Baptiste Denis
On Tue, 24 Aug 2010 20:45:59 +1200, Amos Jeffries wrote: Linux is not required AFAIK. QoS is a networking standard that is supported in various forms by many other modern systems and devices. So your current gateway device may support it. It may be called QoS, TOS or DiffServ. Yes i know,

[squid-users] Regarding long pauses with Squid3 as a reverse proxy to Exchange 2010 OWA

2010-08-25 Thread Paul Freeman
Apologies in advance for the long posting. I have tried to provide what I hope is sufficient information to explain a problem I am experiencing. The problem is very similar to that reported to this list by James Nguy on March 17 2010 -

[squid-users] Http1.1 Squid 3.1.7

2010-08-25 Thread Jürgen Winkler
Hi, we have updated to Squid 3.1.7 yesterday and we are using it as reverse proxy. Now I am asking you and myself if it is possible to use Http1.1 to talk to the clients, in this case not the back ends this works but rather the web browsers. Is there anything i have to configure to make

RE: [squid-users] RE: Re: [squid-users] Feasibility - Squid as user-specific SSL tunnel (poor-man's VPN

2010-08-25 Thread Bucci, David G
Ok, Amos, now I finally understand in detail what you suggested below ... and cool as it is, it won't work for us. To review, what you outlined is an approach to having client software on the PC authenticate to the local squid (forcing the authentication with an http_access allow !all). Then,

[squid-users] Need help to setup ntlm authentication on Windows

2010-08-25 Thread sanghamitra
Hi, I have installed Squid2.7 on my windows machine. I want to enable ntlm/windows authentication for proxy on Windows machine, but I am unable to find instructions for setting up authentication on Windows. Please help Thanks,

Re: [squid-users] Http1.1 Squid 3.1.7

2010-08-25 Thread Amos Jeffries
Jürgen Winkler wrote: Hi, we have updated to Squid 3.1.7 yesterday and we are using it as reverse proxy. Now I am asking you and myself if it is possible to use Http1.1 to talk to the clients, in this case not the back ends this works but rather the web browsers. Is there anything i have to

[squid-users] squid 3.1.6 won't compile

2010-08-25 Thread Helmut Hullen
Hallo, I'm trying to compile Squid 3.1.6 with the SBo script http://slackbuilds.org/repository/13.1/network/squid/ http://slackbuilds.org/slackbuilds/13.1/network/squid/squid.SlackBuild - it fails with /usr/lib/gcc/i486-slackware-linux/4.4.4/../../../ libpthread.a(pthread_create.o): In

Re: [squid-users] squid 3.1.6 won't compile

2010-08-25 Thread Kinkie
On Wed, Aug 25, 2010 at 12:02 PM, Helmut Hullen hul...@t-online.de wrote: Hallo, I'm trying to compile Squid 3.1.6 with the SBo script    http://slackbuilds.org/repository/13.1/network/squid/   http://slackbuilds.org/slackbuilds/13.1/network/squid/squid.SlackBuild - it fails with

Re: [squid-users] Regarding long pauses with Squid3 as a reverse proxy to Exchange 2010 OWA

2010-08-25 Thread Amos Jeffries
Paul Freeman wrote: Apologies in advance for the long posting. I have tried to provide what I hope is sufficient information to explain a problem I am experiencing. Excellent collection of details. Thank you. I'm going to snip most of them After reading I have a theory ... A detailed look

Re: [squid-users] squid 3.1.6 won't compile

2010-08-25 Thread Amos Jeffries
Helmut Hullen wrote: Hallo, I'm trying to compile Squid 3.1.6 with the SBo script http://slackbuilds.org/repository/13.1/network/squid/ http://slackbuilds.org/slackbuilds/13.1/network/squid/squid.SlackBuild - it fails with /usr/lib/gcc/i486-slackware-linux/4.4.4/../../../

Re: [squid-users] squid 3.1.6 won't compile

2010-08-25 Thread Helmut Hullen
acl/.libs/libacls.a acl/.libs/libstate.a auth/.libs/libauth.a acl/.libs/libapi.a ip/.libs/libip.a fs/.libs/libfs.a icmp/.libs/libicmp.a icmp/.libs/libicmp-core.a ../compat/.libs/libcompat.a /usr/lib/libstdc++.so -L/tmp/SBo/squid-3.1.7-20100825/lib repl/liblru.a repl/libheap.a libAIO.a

[squid-users] squid 3.1.6 also won't compile

2010-08-25 Thread Tóth Tibor Péter
Hi! I'm getting this problem: === configuring in lib/libTrie (/root/squid-3.1.6/lib/libTrie) configure: running /bin/sh ./configure --disable-option-checking '--prefix=/usr/local/squid' '--with-squid=/root/squid-3.1.6' '--enable-ltdl-convenience' --cache-file=/dev/null --srcdir=. checking for

[squid-users] Problem: unable to compile squid with TPROXY, broken libcap?

2010-08-25 Thread Leonardo
Hi all, I am re-posting this as a separate thread so to handle one problem at once. My aim is to use Squid with TPROXY capabilities enabled, so I am trying to build the latest source (3.1.6) on Debian Lenny 5.0.5: ./configure --enable-linux-netfilter The build issues a warning complaining that

[squid-users] Re: squid 3.1.6 also won't compile

2010-08-25 Thread Helmut Hullen
Hallo, Tóth, Du meintest am 25.08.10: I'm getting this problem: === configuring in lib/libTrie (/root/squid-3.1.6/lib/libTrie) configure: running /bin/sh ./configure --disable-option-checking '--prefix=/usr/local/squid' '--with-squid=/root/squid-3.1.6' '--enable-ltdl-convenience'

Re: [squid-users] squid 3.1.6 won't compile

2010-08-25 Thread Helmut Hullen
) http://arktur.shuttle.de/CD/Testpakete/squid-3.1.7-20100825-i486-1_SBo.tgz Viele Gruesse! Helmut

Re: [squid-users] NTLM not working for squid in windows server

2010-08-25 Thread Nick Cairncross
I have a related question: I have a Kerberos helper followed by an NTLM helper in my squid setup. I haven't yet figured out a way to deal with non-domain computers. Users are prompted for the login, which they can't ever satisfy. However if they enter their credentials once (e.g. domain\username

Re: [squid-users] Problem: unable to compile squid with TPROXY, broken libcap?

2010-08-25 Thread Silamael
On 08/25/2010 04:34 PM, Leonardo wrote: Hi all, I am re-posting this as a separate thread so to handle one problem at once. My aim is to use Squid with TPROXY capabilities enabled, so I am trying to build the latest source (3.1.6) on Debian Lenny 5.0.5: ./configure

Re: RE: Re: [squid-users] Feasibility - Squid as user-specific SSL tunnel (poor-man's VPN

2010-08-25 Thread Markus Moeller
Did you try something like http://squidkerbauth.cvs.sourceforge.net/viewvc/squidkerbauth/squid_kerberizer/ ? It is a local proxy which uses the credentials of the logged in user to authenticate to the next proxy (e.g. squid). It is a POC and works on Unix and Windows. Markus Bucci, David

[squid-users] Failed to parse NTLMSSP packet

2010-08-25 Thread Mike Diggins
OS: RHEL 5.3 64 Bit Squid: squid-2.7.STABLE9 Samba: samba-3.3.12 I went live with a new Squid server today. It appears to be working and authenticating using NTLM fine, but my cache.log file is recording a large number of these messages. [2010/08/25 15:04:21, 1]

[squid-users] Issues with squid_ldap_auth against a windows AD Server

2010-08-25 Thread Mike Langhorst
I've been struggling with getting Squid to authenticate against AD using squid_ldap_auth. OS:  OEL 5.3 (Redhat) Squid: squid-2.6.STABLE21-3.el5 I've been able to get it to authenticate successfully against SunONE Directory server, but our internal users aren't in that LDAP but should in theory

[squid-users] some url unreachable

2010-08-25 Thread salah khater
hi all I have squid3.1.6 with no authintication , when I go to some sites like http://www.debian.org/ site it give me error (101) network unreachable . and in squid access log I get tcp-miss/503 . I can resolve the site with my cach dns (pdnsd service). what couse this problem? os debian

RE: [squid-users] Regarding long pauses with Squid3 as a reverse proxy to Exchange 2010 OWA

2010-08-25 Thread Paul Freeman
or 3.1.7 Beta testers wanted for 3.2.0.1 __ Information from ESET Smart Security, version of virus signature database 5397 (20100825) __ The message was checked by ESET Smart Security. http://www.eset.com __ Information from ESET Smart Security, version of virus

[squid-users] WCCP2 L2 redirect with Squid transparent

2010-08-25 Thread Shawn Wright
Hello, I've been trying to get a transparent squid setup to work with our Cisco Cat 6500 MSFC layer 3 switch, which supports WCCP2 with L2 redirect (not GRE). I can see the traffic reaching the squid box, and using a shorewall redirect rule, it should be reaching squid on port 3128, but I

Re: [squid-users] squid 3.1.6 won't compile

2010-08-25 Thread Amos Jeffries
the next few days, Slackware packet) http://arktur.shuttle.de/CD/Testpakete/squid-3.1.7-20100825-i486-1_SBo.tgz Viele Gruesse! Helmut eCAP requires loadable-modules, but if you need to adding -I../libltdl to the flags can avoid the LTDL problems for 3.1.5.1 thru 3.1.7. I've finally got

[squid-users] Re: Issues with squid_ldap_auth against a windows AD Server

2010-08-25 Thread Mike Langhorst
So, making some progress I think, but seeing unexpected behavior. I changed the to ' surrounding my DN, and got more output in the squid log. However it's definitely behaving differently from within squid then from cli. Attempting to auth my browser (firefox) pointing to squid I get the

Re: [squid-users] squid 3.1.6 also won't compile

2010-08-25 Thread Amos Jeffries
On Wed, 25 Aug 2010 15:13:24 +0200, Tóth Tibor Péter tibor.peter.t...@mtv.hu wrote: Hi! I'm getting this problem: === configuring in lib/libTrie (/root/squid-3.1.6/lib/libTrie) configure: running /bin/sh ./configure --disable-option-checking '--prefix=/usr/local/squid'

Re: [squid-users] NTLM not working for squid in windows server

2010-08-25 Thread Amos Jeffries
On Wed, 25 Aug 2010 17:32:41 +0100, Nick Cairncross nick.cairncr...@condenast.co.uk wrote: I have a related question: I have a Kerberos helper followed by an NTLM helper in my squid setup. I haven't yet figured out a way to deal with non-domain computers. Users are prompted for the login,

RE: [squid-users] Regarding long pauses with Squid3 as a reverse proxy to Exchange 2010 OWA

2010-08-25 Thread Amos Jeffries
On Thu, 26 Aug 2010 08:17:23 +1000, Paul Freeman paul.free...@eml.com.au wrote: Amos, Thank you for your analysis and comments. I appreciate them greatly. I have looked at another packet capture for a session between the client browser and exchange 2010 OWA via http but without squid in

Re: [squid-users] WCCP2 L2 redirect with Squid transparent

2010-08-25 Thread Amos Jeffries
On Wed, 25 Aug 2010 15:47:18 -0700 (PDT), Shawn Wright swri...@shawnigan.ca wrote: Hello, I've been trying to get a transparent squid setup to work with our Cisco Cat 6500 MSFC layer 3 switch, which supports WCCP2 with L2 redirect (not GRE). I can see the traffic reaching the squid box, and

[squid-users] Not receiving latest posts.

2010-08-25 Thread Landy Landy
Hello. I havent been recieving any post from the list since last week. I've been keeping updated by going the the archive. Is anybody else experiencing the same?

RE: [squid-users] Regarding long pauses with Squid3 as a reverse proxy to Exchange 2010 OWA

2010-08-25 Thread Paul Freeman
Exchange into handing back some useful information such as the object chunk sizes to Squid. I may be able to provide a source package bundle in a few days for that if you need one. Amos __ Information from ESET Smart Security, version of virus signature database 5397 (20100825

Re: [squid-users] some url unreachable

2010-08-25 Thread Amos Jeffries
On Wed, 25 Aug 2010 13:47:29 -0700 (PDT), salah khater sal2...@yahoo.com wrote: hi all I have squid3.1.6 with no authintication , when I go to some sites like http://www.debian.org/ site it give me error (101) network unreachable . and in squid access log I get tcp-miss/503 . I can