Hello,
We recently had to upgrade a proxy server from Debian 4 to Debian 5 and
installed Squid 2.7 :
#squid -v
Squid Cache: Version 2.7.STABLE3
configure options: '--prefix=/usr' '--exec_prefix=/usr'
'--bindir=/usr/sbin' '--sbindir=/usr/sbin' '--libexecdir=/usr/lib/squid'
That was 4 months ago.
The netfilter MARK feature is now completed and working AFAIK in the 3.2
betas.
Amos
Hello,
Is there a way to verify that packet are really marked ?
In my squid.conf I've :
acl user1 src /etc/squid/ip_user/user1
tcp_outgoing_mark 0x1 user1
acl user85 src
On 23/12/10 01:53, lupuscramus wrote:
That was 4 months ago.
The netfilter MARK feature is now completed and working AFAIK in the 3.2
betas.
Amos
Hello,
Is there a way to verify that packet are really marked ?
iptables should have something to track packet markings with.
In my
Also check that Squid was built with the netfilter-conntrack library and
the QoS feature enabled.
--enable-zph-qos --with-netfilter-conntrack
Oh, I hadn't add these options.
when not explicitly specified for ./configure the feature support is at
the mercy of the automatics and may be
On 22/12/10 22:34, Francis GASCHET wrote:
Hello,
We recently had to upgrade a proxy server from Debian 4 to Debian 5 and
installed Squid 2.7 :
#squid -v
Squid Cache: Version 2.7.STABLE3
configure options: '--prefix=/usr' '--exec_prefix=/usr'
'--bindir=/usr/sbin' '--sbindir=/usr/sbin'
On 22/12/10 18:39, Tom Tux wrote:
Hi
Is there a squid-snmp-oid or a squidclient-option to get the following
values (since startup of squid or since creation of cache_dirs)?
- tcp_miss
- tcp_hit
- tcp_mem_hit
If not, how can I determine these values?
Thanks a lot.
Tom
On 23/12/10 02:21, lupuscramus wrote:
Also check that Squid was built with the netfilter-conntrack library and
the QoS feature enabled.
--enable-zph-qos --with-netfilter-conntrack
Oh, I hadn't add these options.
when not explicitly specified for ./configure the feature support is at
the
Ah sorry I wasn't clear. The URIs are NOT unique after the GUID part is
removed. That was the purpose of this exercise, to make them more unique, but
not so unique so that every deploy gets stored using a different cache key for
the exact same file.
Our tool doesn't send If-Modified-Since
Dear Friends,
I m new to squid.Please guide me about tproxy and transparent proxy.I
see intercept and tproxy option in squd 3.1.9 version with http_port
option in configuration file.Please guide me for the same and what r
the difference between them.
Both r working for transparent proxy and.
Greetings,
I seem to be having some trouble denying access to my proxy. I'm running squid
3.1.9. Here's the relevant part of my squid.conf:
# my machine only
acl myMachine src 10.8.144.43
# some destination servers
acl dest1 dst 10.8.110.13
acl dest2 dst
On 12/22/2010 05:43 PM, Volker-Yoblick, Adam wrote:
Greetings,
I seem to be having some trouble denying access to my proxy. I'm running squid
3.1.9. Here's the relevant part of my squid.conf:
# my machine only
acl myMachine src 10.8.144.43
# some destination servers
Thanks so much, that solved the problem. Looks like I had the syntax wrong for
allowing a specific group of machines access to a specific IP range.
Thanks again!
-Original Message-
From: John Doe [mailto:gues...@gmail.com]
Sent: Wednesday, December 22, 2010 11:55 AM
To: Volker-Yoblick,
Thank you Amos, it works.
I just forgot that in the xxx_access directives the ACLs are ANDed !
Ciao!
--
Francis GASCHET / NUMLOG
http://www.numlog.fr
Tel.: +33 (0) 130 791 616
Fax.: +33 (0) 130 819 286
Le 12/22/2010 02:23 PM Amos Jeffries a écrit :
On 22/12/10 22:34, Francis GASCHET
Hi,
I'd like to cache files locally, but only from a small list of
domains. This setup might be this:
http://wiki.squid-cache.org/ConfigExamples/Intercept/LinuxLocalhost
I haven't found a way to cache only certain requests (e.g.
http://ftp.drupal.org/*), but not cache any other traffic (web
Is it possible that you run a samba daemon like winbindd ? If samba is
fully configured it will emulate a Windows desktop/server and changes on a
regular basis the machine password which is used for the Kerberos key. So
if the machine password is changed ther key in hye keytab will be
Greetings,
I'm interested in changing the timestamp format in the squid log files, as I'd
rather read a local time than seconds since epoch.
I have two questions:
1. I've been able to change the format of the output in my access_log by
defining a logformat as follows (this is the default
Looks right for the Squid part.
Also check that Squid was built with the netfilter-conntrack library and
the QoS feature enabled.
--enable-zph-qos --with-netfilter-conntrack
when not explicitly specified for ./configure the feature support is at
the mercy of the automatics and may be
On 23/12/10 04:36, benjamin fernandis wrote:
Dear Friends,
I m new to squid.Please guide me about tproxy and transparent proxy.I
see intercept and tproxy option in squd 3.1.9 version with http_port
option in configuration file.Please guide me for the same and what r
the difference between them.
On 23/12/10 04:36, benjamin fernandis wrote:
Dear Friends,
I m new to squid.Please guide me about tproxy and transparent proxy.I
see intercept and tproxy option in squd 3.1.9 version with http_port
option in configuration file.Please guide me for the same and what r
the difference between them.
On 23/12/10 07:32, Michael Cole wrote:
Hi,
I'd like to cache files locally, but only from a small list of
domains. This setup might be this:
http://wiki.squid-cache.org/ConfigExamples/Intercept/LinuxLocalhost
I haven't found a way to cache only certain requests (e.g.
On 23/12/10 03:55, Volker-Yoblick, Adam wrote:
Ah sorry I wasn't clear. The URIs are NOT unique after the GUID part is removed. That was
the purpose of this exercise, to make them more unique, but not so unique so
that every deploy gets stored using a different cache key for the exact same
On 23/12/10 11:57, lupuscramus wrote:
Looks right for the Squid part.
snip
I'm not familiar with the specific tc configuration to help further sorry.
Do you know someone who managed to use the squid marked packets
to make a QoS based on ip source with classful queuing ? (cbq, htb)
Or do you
On 21/12/10 06:15, Jason Greene wrote:
So what do you recommend as a solution?
The only line I have in my conf that has ssl in it is this
acl SSL_ports port 443 563
I'd recommend adding back in the basic security for CONNECT requests
then. The config order can be found here:
On Wed, 2010-12-22 at 23:57 +0100, lupuscramus wrote:
Looks right for the Squid part.
Also check that Squid was built with the netfilter-conntrack library and
the QoS feature enabled.
--enable-zph-qos --with-netfilter-conntrack
when not explicitly specified for ./configure the
ons 2010-12-22 klockan 12:37 -0800 skrev Volker-Yoblick, Adam:
I'd like to further customize the time format of the local time (%tl) to be
%Y/%m/%d:%H:%M:%S %z , but the docs don't make it very clear on how to supply
the strftime format argument. Can someone explain what the correct syntax
Hello list, Markus,
thanks for your hint; this is also described in the Wiki entry - I
only have used Samba to create the keytab. It is not running as a
daemon here.
However I think I've found the (fairly trivial) problem... There was
an issue with the ESX host/Storage the Linux Squid was
On 23/12/2010, at 12:03 AM, Amos Jeffries wrote:
On 22/12/10 18:39, Tom Tux wrote:
Hi
Is there a squid-snmp-oid or a squidclient-option to get the
following
values (since startup of squid or since creation of cache_dirs)?
- tcp_miss
- tcp_hit
- tcp_mem_hit
If not, how can I determine
27 matches
Mail list logo
