[squid-users] I: Re: [squid-users] R: Re: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-24 Thread projpr...@virgilio.it
Messaggio originale Da: projpr...@virgilio.it Data: 24-gen-2011 8.34 A: squ...@treenet.co.nz Ogg: R: Re: [squid-users] R: Re: [squid-users] Squid - ldap auth against active directory 2008 R2 Thanks a lot for your reply. this sounds really good...strange that on opensuse i don´t

Re: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Eliezer
It's a small peace and most of the answers are not really suppose to there. the first thing is that your cache is not just cache it's a store house.. it;'s not bad but you can try to change the ufs to aufs.. can get better performance. what are the specification of the machine? core i7

RE: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Saiful Alam
TRIED AUFS, but didn't get better performance, while researching in the web, I read everywhere that AUFS is better than UFS in terms of performance,but I don't know why I get bad performance with this. Processor is Intel(R) Core(TM) i7 CPU 870 @ 2.93GHz Motherboard is Intel® Desktop

Re: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Eliezer
are you kdding me? 500 clients? if most of the clients are just doing almost nothing just downloading one page of 2 MB.. how much is your HD I\O ?? in this case?(in speed MBps) ? so first.. change the UFS to AUFS you dont need to do anything to the cache it self cause it the same system

RE: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Saiful Alam
OK I have kept your suggestion in my mind, but right now I'm not in a position to buy two HDD's. May be I can afford to buy 15 days later. For the time being, my prime problem is the loading of two major sites from where my users download mp3. Those are www.music.com.bd   and   www.djmaza.com

Re: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Michael Hendrie
On 24/01/2011, at 8:17 PM, Saiful Alam wrote: OK I have kept your suggestion in my mind, but right now I'm not in a position to buy two HDD's. May be I can afford to buy 15 days later. For the time being, my prime problem is the loading of two major sites from where my users download

Re: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Amos Jeffries
On 24/01/11 22:02, Saiful Alam wrote: TRIED AUFS, but didn't get better performance, while researching in the web, I read everywhere that AUFS is better than UFS in terms of performance,but I don't know why I get bad performance with this. Processor is Intel(R) Core(TM) i7 CPU 870 @ 2.93GHz

Re: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Amos Jeffries
On 24/01/11 23:09, Michael Hendrie wrote: On 24/01/2011, at 8:17 PM, Saiful Alam wrote: OK I have kept your suggestion in my mind, but right now I'm not in a position to buy two HDD's. May be I can afford to buy 15 days later. For the time being, my prime problem is the loading of two major

Re: [squid-users] Missing content-length header for POST and PUT

2011-01-24 Thread Amos Jeffries
On 24/01/11 13:28, Henrik Nordström wrote: fre 2011-01-21 klockan 05:45 +1300 skrev Amos Jeffries: empty? No. If they have no content length indicated they have to be assumed as being infinite length transfers. HTTP specs require this 411 reply message. Not quite. Requests without an entity

[squid-users] squid webmin start problem

2011-01-24 Thread Tom B.
Hi to all, i had installed squid as part of the webmin package and configured it as proxy. No problem with that, it worked flawlessly. But yesterday i discovered that the proxy is not working anymore. When i tried to start the squid with /etc/init.d/squid start i get just ok and no other

Re: [squid-users] squid webmin start problem

2011-01-24 Thread Eliezer
set the squid settting on debug mode all 1 and then try to start it.. after this open the error log file.../cache log file. it can be because of the cahce partition /dir or just settings.. On 24/01/2011 15:33, Tom B. wrote: Hi to all, i had installed squid as part of the webmin package

RE: [squid-users] squid webmin start problem

2011-01-24 Thread Tom B.
ok i did one change to the ownership of the squid/log files and fired: tomo@hel-test:~$ sudo squid -z 2011/01/24 15:14:54| Creating Swap Directories tomo@hel-test:/var/log$ sudo squid -NCd1 2011/01/24 15:23:49| Starting Squid Cache version 2.6.STABLE18 for i386-debian-linux-gnu... 2011/01/24

Re: [squid-users] squid webmin start problem

2011-01-24 Thread Eliezer
SOLVED!!! so happy to use squid!!! now my isp is using cache that breaks parts of my sites =\ (and they didnt want me to fix it for them =\) On 24/01/2011 16:26, Tom B. wrote: ok i did one change to the ownership of the squid/log files and fired: tomo@hel-test:~$ sudo squid -z

[squid-users] Slackware Bridge + Tproxy + 2.6.37 + squid 3.1.10

2011-01-24 Thread Agua Emagrece
Hello! I am using: - Slackware Linux Bridge working fine (eth0 = Internet and eth1 = Users) - Latest 2.6.37 kernel - Iptables 1.4.9 - Ebtables 2.0.9-2 - Squid 3.1.10 I configured squid.conf with http_port 3129 tproxy , and it's working: tcp0 0 0.0.0.0:31290.0.0.0:*

Re: [squid-users] Why is Cache-Control: max-age added to forwarded HTTP requests?

2011-01-24 Thread John Craws
Hi Amos, Thank you for your reply. I am wondering if squid should still be doing this if, as in my particular case, caching is disabled on the proxy instance. Based on my observations, it does. Thank you, John Craws On Sat, Jan 22, 2011 at 12:00 AM, Amos Jeffries squ...@treenet.co.nz wrote:

[squid-users] Squid as Proxy for Exchange 2010‏

2011-01-24 Thread smudly Quickhands
I am setting up a new exchange server.   I have set it up with the CAS facing the internet but I did not set up an Edge server.   I was considering using SQUID as a proxy for remote access.  When i setup the Exchange server I used a SSL certificate with the domain mail.myco.com.  Now that I

Re: [squid-users] NONE/501 in an https:// POST request

2011-01-24 Thread Ralf Hildebrandt
* Henrik Nordström hen...@henriknordstrom.net: fre 2011-01-21 klockan 11:31 +0100 skrev Ralf Hildebrandt: 1294685115.286 0 10.43.120.109 NONE/501 4145 POST https://enis.eurotransplant.nl/donor-webservice/dpa?WDSL - HIER_NONE/- text/html So, I enabled SSL using --enable-ssl

Re: [squid-users] Squid 3.x very slow loading on ireport.cnn.com

2011-01-24 Thread Ralf Hildebrandt
* Max Feil mf...@qnx.com: Already did use Wireshark. Here is some more info: If you look through the traces you'll notice that at some point Squid sends a TCP [FIN, ACK] right in the middle of a connection for seemingly no reason. (Attempting to close the connection) The server ignores

RE: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Saiful Alam
Hi Amor, I have recompiled Squid with the following parameters. ./configure --prefix=/usr/local/squid --enable-async-io=8 --enable-storeio=ufs,aufs,diskd --enable-removal-policies=lru,heap --enable-delay-pools --enable-cache-digests --enable-underscores --enable-icap-client

RE: [squid-users] Squid as Proxy for Exchange 2010‏

2011-01-24 Thread Joseph L. Casale
When i setup the Exchange server I used a SSL certificate with the domain mail.myco.com.  Now that I am considering using Squid I was wondering how I would set that up since i have already used the domain and if I could use a separate SSL Certificate with the same domain name on the SQUID

RE: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Saiful Alam
Dear Everyone, It is now 12AM here (GMT +0600) and very peak time for our ISP. Most of our users are now online. I took a snapshot from my cachemgr to show you guys. Squid Object Cache: Version 3.1.10 Start Time:Mon, 24 Jan 2011 13:58:44 GMT Current Time:Mon, 24 Jan 2011 18:04:49 GMT

[squid-users] Re: Squid + SSL + Safari

2011-01-24 Thread jamesj
Hello Folks, We're currently using squid + DG as a content filtering system and it's fantastic. The problem lies with a combination of Squid + Safari and the site facebook.com. Students can currently get around our blocks by changing the protocol from http to https. The logs show that squid

Re: [squid-users] NONE/501 in an https:// POST request

2011-01-24 Thread Henrik Nordström
mån 2011-01-24 klockan 18:44 +0100 skrev Ralf Hildebrandt: In the section case Squid and the server did not agree on the SSL protocol. I wonder what went wrong in that case. Could be many things unfortunatey. But to be honest it's not worth investigating in your case. You ended up in the

RE: [squid-users] Squid as Proxy for Exchange 2010‏

2011-01-24 Thread smudly Quickhands
You are saying that I can use the same certificate on two servers by following the instructions below?  Is that legal?   From: jcas...@activenetwerx.com To: squid-users@squid-cache.org Date: Mon, 24 Jan 2011 18:06:45 + Subject: RE: [squid-users]

Re: [squid-users] ecap adapter munging cached body

2011-01-24 Thread Henrik Nordström
mån 2011-01-24 klockan 17:46 +1300 skrev Amos Jeffries: AFAIK, that proper variant handling was not yet ported to squid-3. Only in squid-2 right now. Correct, but even the basic variant handling is 1-N. The difference is that the basic mode do not merge equal responses, and each possible

RE: [squid-users] Squid 3.x very slow loading on ireport.cnn.com

2011-01-24 Thread Henrik Nordström
sön 2011-01-23 klockan 23:35 -0500 skrev Max Feil: If you look through the traces you'll notice that at some point Squid sends a TCP [FIN, ACK] right in the middle of a connection for seemingly no reason. From the browser side it seems to be given no notification that the connection was

Re: [squid-users] Re: Squid + SSL + Safari

2011-01-24 Thread Henrik Nordström
mån 2011-01-24 klockan 12:09 -0600 skrev jam...@mail.milton.k12.wi.us: the CONNECT function and tries to block it but it still passes through. What does access.log report? REgards Henrik

Re: [squid-users] Squid 3.x very slow loading on ireport.cnn.com

2011-01-24 Thread Eliezer
i will try now On 24/01/2011 22:01, Henrik Nordström wrote: squid -k debug

Re: [squid-users] Missing content-length header for POST and PUT

2011-01-24 Thread Henrik Nordström
tis 2011-01-25 klockan 02:01 +1300 skrev Amos Jeffries: But to be honest we do not really need to check that POST/PUT have a request entity. This is mostly a relic from way back when request entities were handled very special. Can I expect a patch soon then? Sure. Revision 11172.

Re: [squid-users] Why is Cache-Control: max-age added to forwarded HTTP requests?

2011-01-24 Thread Henrik Nordström
mån 2011-01-24 klockan 10:44 -0500 skrev John Craws: Hi Amos, Thank you for your reply. I am wondering if squid should still be doing this if, as in my particular case, caching is disabled on the proxy instance. Based on my observations, it does. It's been discussed from time to time

Re: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Marcus Kool
Amos Jeffries wrote: On 24/01/11 23:09, Michael Hendrie wrote: On 24/01/2011, at 8:17 PM, Saiful Alam wrote: OK I have kept your suggestion in my mind, but right now I'm not in a position to buy two HDD's. May be I can afford to buy 15 days later. For the time being, my prime problem is

RE: [squid-users] Squid as Proxy for Exchange 2010‏

2011-01-24 Thread Henrik Nordström
mån 2011-01-24 klockan 19:52 + skrev smudly Quickhands: You are saying that I can use the same certificate on two servers by following the instructions below? Is that legal? Sure. Perfectly fine, and commonly done in many situations. - reverse proxy setups, like yours - clustered servers

Re: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Henrik Nordström
mån 2011-01-24 klockan 18:39 -0200 skrev Marcus Kool: I did not find options to configure bind/named to ignore lookups either so I would love to see Squid have the new option. It does. a) If Squid is built without IPv6 support b) If the host where Squid runs do not have IPv6 support at

Re: [squid-users] NONE/501 in an https:// POST request

2011-01-24 Thread Ralf Hildebrandt
* Henrik Nordström hen...@henriknordstrom.net: mån 2011-01-24 klockan 18:44 +0100 skrev Ralf Hildebrandt: In the section case Squid and the server did not agree on the SSL protocol. I wonder what went wrong in that case. Could be many things unfortunatey. But to be honest it's not

Re: [squid-users] Squid 3.x very slow loading on ireport.cnn.com

2011-01-24 Thread Amos Jeffries
On Mon, 24 Jan 2011 18:56:48 +0100, Ralf Hildebrandt wrote: * Max Feil: Already did use Wireshark. Here is some more info: If you look through the traces you'll notice that at some point Squid sends a TCP [FIN, ACK] right in the middle of a connection for seemingly no reason. (Attempting to

[squid-users] external_acl problem with cache

2011-01-24 Thread Luis Enrique Sanchez Arce
I have an external acl to running some logic. the Acl modify the squid log with parameter %ea the acl returns something like this: ERR message= log=uuid or OK message= log=uuid uuid is a unique key generate by the acl. When I check the access.log file appears repeated uuid. I

RE: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Amos Jeffries
On Tue, 25 Jan 2011 05:08:00 +1100, Saiful Alam saifu...@hotmail.com wrote: Dear Everyone, It is now 12AM here (GMT +0600) and very peak time for our ISP. Most of our users are now online. I took a snapshot from my cachemgr to show you guys. Squid Object Cache: Version 3.1.10 Start

Re: [squid-users] external_acl problem with cache

2011-01-24 Thread Amos Jeffries
On Mon, 24 Jan 2011 17:31:18 -0500 (CST), Luis Enrique Sanchez Arce lesanc...@uci.cu wrote: I have an external acl to running some logic. the Acl modify the squid log with parameter %ea the acl returns something like this: ERR message= log=uuid or OK message= log=uuid uuid

Re: [squid-users] external_acl problem with cache

2011-01-24 Thread Amos Jeffries
On Mon, 24 Jan 2011 23:28:48 +, Amos Jeffries squ...@treenet.co.nz wrote: On Mon, 24 Jan 2011 17:31:18 -0500 (CST), Luis Enrique Sanchez Arce lesanc...@uci.cu wrote: I have an external acl to running some logic. the Acl modify the squid log with parameter %ea the acl returns something

Re: [squid-users] ecap adapter munging cached body

2011-01-24 Thread Amos Jeffries
On Mon, 24 Jan 2011 20:57:08 +0100, Henrik Nordström wrote: mån 2011-01-24 klockan 17:46 +1300 skrev Amos Jeffries: AFAIK, that proper variant handling was not yet ported to squid-3. Only in squid-2 right now. Correct, but even the basic variant handling is 1-N. The difference is that

Re: [squid-users] Multiple Parents

2011-01-24 Thread Tiz
On 1/21/11 7:57 PM, Amos Jeffries squ...@treenet.co.nz wrote: That config is: http_port 80 accel defaultsite=yum-slave-01 cache_peer 1.1.1.1 parent 80 0 no-query round-robin name=yum1 forcedomain=yum-slave-01 cache_peer 2.2.2.2 parent 80 0 no-query round-robin name=yum2

Re: [squid-users] Multiple Parents

2011-01-24 Thread Amos Jeffries
On Mon, 24 Jan 2011 16:14:35 -0800, Tiz wrote: On 1/21/11 7:57 PM, Amos Jeffries wrote: That config is: http_port 80 accel defaultsite=yum-slave-01 cache_peer 1.1.1.1 parent 80 0 no-query round-robin name=yum1 forcedomain=yum-slave-01 cache_peer 2.2.2.2 parent 80 0 no-query

Re: [squid-users] Slackware Bridge + Tproxy + 2.6.37 + squid 3.1.10

2011-01-24 Thread Amos Jeffries
On Mon, 24 Jan 2011 13:30:05 -0200, Agua Emagrece aguaemagr...@gmail.com wrote: Hello! I am using: - Slackware Linux Bridge working fine (eth0 = Internet and eth1 = Users) - Latest 2.6.37 kernel - Iptables 1.4.9 - Ebtables 2.0.9-2 - Squid 3.1.10 The config you have looks fine. There

Re: [squid-users] Slackware Bridge + Tproxy + 2.6.37 + squid 3.1.10

2011-01-24 Thread Agua Emagrece
Hello, Amos, how are you? I just did a test downgrading my kernel to 2.6.30 (downloaded from ftp.kernel.org), using the same kernel .config of the 2.6.37 I was using, and all the same iptables/ebtables/sysctl configuration. TPROXY just began to work perfectly. If I switch again to 2.6.37,

Re: [squid-users] Slackware Bridge + Tproxy + 2.6.37 + squid 3.1.10

2011-01-24 Thread Amos Jeffries
On Tue, 25 Jan 2011 00:24:43 -0200, Agua Emagrece aguaemagr...@gmail.com wrote: Hello, Amos, how are you? I just did a test downgrading my kernel to 2.6.30 (downloaded from ftp.kernel.org), using the same kernel .config of the 2.6.37 I was using, and all the same iptables/ebtables/sysctl

Re: [squid-users] Slackware Bridge + Tproxy + 2.6.37 + squid 3.1.10

2011-01-24 Thread Agua Emagrece
Both from ftp.kernel.org and using exactly the same .config file. I'll try to get the time to test 2.6.32 to 2.6.36. Thanks! On Tue, Jan 25, 2011 at 12:36 AM, Amos Jeffries squ...@treenet.co.nz wrote: On Tue, 25 Jan 2011 00:24:43 -0200, Agua Emagrece aguaemagr...@gmail.com wrote: Hello, Amos,

[squid-users] SQUID 3.1.10 keep 100% cpu after exiting

2011-01-24 Thread Sunny
Hi there, since I upgraded to 3.1 (both .6 .9 and .10) have such problem. After I issue squid3 -k shutdown, the squid will exit but the process won't stop after it clams exit normally The process will still use 100% cpu and network connections are not closed due to output of netstat

RE: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Saiful Alam
As advised earlier, I have disabled ipv6 support while recompiling squid, but the problem still exist. Do you want me to disable ipv6 in the OS and try again? Regards, Saiful Date: Mon, 24 Jan 2011 18:39:42 -0200 From: marcus.k...@urlfilterdb.com To:

Re: [squid-users] external_acl problem with cache

2011-01-24 Thread Amos Jeffries
On 25/01/11 17:19, Luis Enrique Sanchez Arce wrote: hello, I put the variable grace = 0 but the problem persist. This is my program - #!/usr/bin/env perl use UUID::Random; $| = 1; while ($in_squid =STDIN) { $uuid = UUID::Random::generate;

[squid-users] SQUID doesn't stop current user's download at dead hour

2011-01-24 Thread zoky zzandry
Hi all, Some of our users could not access Internet during business hours. ... acl wtime time 08:00-12:00 acl wtime time 14:00-18:00 http_access allow blocked_user !wtime http_access deny all This works, except some download which were launched for e.g at 13:50 and still remaining alive and

Re: [squid-users] Some pages loading very slow in 3.1.10 Stable

2011-01-24 Thread Michael Hendrie
On 24/01/2011, at 11:03 PM, Amos Jeffries wrote: On 24/01/11 23:09, Michael Hendrie wrote: On 24/01/2011, at 8:17 PM, Saiful Alam wrote: snip I had issues with some random sites being slow with 3.1.10 and tracked it down to squid trying to get records for the problem sites (or