Re: [squid-users] Explaining RELEASEs

2011-04-15 Thread Amos Jeffries
On 16/04/11 14:12, Yang Zhang wrote: We're seeing a bunch of the following pairs of RELEASE/SWAPOUT lines for the same URL in our store.log. Can anyone help me understand what's happening here? 1302893424.155 RELEASE 00 000830A0 6E5CACCDB20F6654643A090ACC1B995D 200 1302893423-1-

[squid-users] Explaining RELEASEs

2011-04-15 Thread Yang Zhang
We're seeing a bunch of the following pairs of RELEASE/SWAPOUT lines for the same URL in our store.log. Can anyone help me understand what's happening here? 1302893424.155 RELEASE 00 000830A0 6E5CACCDB20F6654643A090ACC1B995D 200 1302893423-1-1 application/json 2058/2058 GET http:/

Re: [squid-users] adaptation_access and rep_mime_type -- It doesn't seem to work

2011-04-15 Thread Amos Jeffries
On 15/04/11 20:46, Trever L. Adams wrote: I am using squid 3.1.10. I have a virus scanner and a content classifier (to build content filter with Squid ACLs). The virus scanner has several modes. One scans transparently and passes on data in chunks. I have this working for various update sites, et

Re: [squid-users] Using login data of the user

2011-04-15 Thread Amos Jeffries
On 16/04/11 13:25, Leonardo Rodrigues wrote: Em 15/04/11 21:30, Joachim Wiedorn escreveu: Hello, since some days I search for the way how I can use the login data of the user on his computer (client) for authentication check while he is using his browser. As I have understood if I activate aut

Re: [squid-users] Compression

2011-04-15 Thread Amos Jeffries
On 16/04/11 12:06, Yang Zhang wrote: Does squid support any sort of compression of its on-disk cache? Squid does not perform compression. Whether the disks do it is up to them. Whether the traffic is compressed on arrival is up to the client. Whether the traffic stored is compressed is up t

Re: [squid-users] Using login data of the user

2011-04-15 Thread Leonardo Rodrigues
Em 15/04/11 21:30, Joachim Wiedorn escreveu: Hello, since some days I search for the way how I can use the login data of the user on his computer (client) for authentication check while he is using his browser. As I have understood if I activate authentication in /etc/squid3/squid.conf then the

Re: [squid-users] Using login data of the user

2011-04-15 Thread Amos Jeffries
On 16/04/11 12:30, Joachim Wiedorn wrote: Hello, since some days I search for the way how I can use the login data of the user on his computer (client) for authentication check while he is using his browser. As I have understood if I activate authentication in /etc/squid3/squid.conf then the br

Re: [squid-users] limit squid memory ram use - squid becomes slow when ram full

2011-04-15 Thread Amos Jeffries
On 16/04/11 11:56, rpere...@lavabit.com wrote: Given those cache sizes, your Squid box should be using around 110 MB of RAM for index plus a little. Even assuming a worst-case of a minutes traffic accumulated in transit buffers comes nowhere close to filling 16 GB up. Some questions tha

Re: [squid-users] [Transparent Proxy] Why doesn't the proxy host drop the packets with differnet MAC

2011-04-15 Thread Amos Jeffries
On 16/04/11 08:52, Henry Yuan wrote: Hi folks, A caveat, I don't have practical network management experience, so the following could be totally nonsense

Re: [squid-users] Allow full access during a limited time period

2011-04-15 Thread Amos Jeffries
On 16/04/11 01:25, Chad Naugle wrote: I'm not sure about dansguardian, but I'm sure that Squid can open itself up at a specific time interval for *all* users during the work day, ie: (Note that the time slot mentioned is in 24-hour format, and only a quick and dirty example) acl break_time time

Re: [squid-users] compile squid with large files option

2011-04-15 Thread Amos Jeffries
On 16/04/11 02:46, Eliezer Croitoru wrote: On 15/04/2011 16:02, Leonardo Rodrigues wrote: i'm pretty sure that the --with-large-files is needed on 32 bit installations (x86). Large file support is the default on x86_64 machines. please someone correct me if i'm wrong ... Em 15/04/11 09:23, H

Re: [squid-users] Gmail HTTPS Block

2011-04-15 Thread Amos Jeffries
Re-wind. back to the original question and problem... On 16/04/11 03:48, Mohammad Fattahian wrote: Is the any way to block HTTPS for some web sites? I have to block access to Gmail accounts. It's done for http but I did not find any solution for https. This is part of my configuration: acl

[squid-users] Using login data of the user

2011-04-15 Thread Joachim Wiedorn
Hello, since some days I search for the way how I can use the login data of the user on his computer (client) for authentication check while he is using his browser. As I have understood if I activate authentication in /etc/squid3/squid.conf then the browser ask the user at the first time of web

[squid-users] Compression

2011-04-15 Thread Yang Zhang
Does squid support any sort of compression of its on-disk cache? -- Yang Zhang http://yz.mit.edu/

Re: [squid-users] limit squid memory ram use - squid becomes slow when ram full

2011-04-15 Thread rpereyra
> > Given those cache sizes, your Squid box should be using around 110 MB of RAM for index plus a little. Even assuming a worst-case of a minutes traffic accumulated in transit buffers comes nowhere close to filling 16 > GB up. > > Some questions that may help narrow down where the slow is comin

[squid-users] [Transparent Proxy] Why doesn't the proxy host drop the packets with differnet MAC

2011-04-15 Thread Henry Yuan
Hi folks, A caveat, I don't have practical network management experience, so the following could be totally nonsense ---

RE: [squid-users] Squid proxy with white list and Apache Tomcat web server on same machine?

2011-04-15 Thread MargaretGillon
>You mention you have no external access, what do you cache with >squid? Perhaps I was unclear. We needed a proxy server that could use a white list so users could go out to a limited number of sites for their benefits enrollment but not anywhere else on the internet. I already had the Ubuntu serv

RE: [squid-users] Squid proxy with white list and Apache Tomcat web server on same machine?

2011-04-15 Thread Joseph L. Casale
>The Ubuntu Server had an Apache Tomcat web server on it that we were not >using at the time. It seems the Squid has disabled it. Is it possible to >run both on the same server? >I have crawled the archives but do not see any >reference to this specific issue. Right now the Squid and the Apache Tom

[squid-users] Squid proxy with white list and Apache Tomcat web server on same machine?

2011-04-15 Thread MargaretGillon
I posted this question a few days ago and didn't get a response, maybe because I posted so late in the day. I am trying one more time. Thank you for any response. *** Last year with the list's help I configured squid as a proxy server on Ubuntu 10.4 us

[squid-users] Re: squid in sneakernet/Delay-tolerant network

2011-04-15 Thread Tom Sparks
>From: >"Amos Jeffries" >To: >squid-users@squid-cache.org >On 15/04/11 09:40, Tom Sparks wrote: >> I have a computer that has not network or internet connection >> >> Can I use squid in a sneakernet/Delay-tolerant network? >Squid is usually limited by Human delay tolerance. Which is somewhere >be

RE: [squid-users] Gmail HTTPS Block

2011-04-15 Thread Mohammad Fattahian
It does not block HTTPS. I want to block GMAIL, not all the google web site -Original Message- From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: April-15-11 11:42 AM To: squid-users@squid-cache.org Subject: RE: [squid-users] Gmail HTTPS Block >Is the any way to block HTT

RE: [squid-users] Gmail HTTPS Block

2011-04-15 Thread Joseph L. Casale
>Is the any way to block HTTPS for some web sites? > >I have to block access to Gmail accounts. > >It's done for http but I did not find any solution for https. > >This is part of my configuration: > >acl gmail1 dstdomain google.com >acl gmail2 dstdomain google.ca >http_access deny CONNECT gmail1 g

Re: [squid-users] compile squid with large files option

2011-04-15 Thread Eliezer Croitoru
On 15/04/2011 16:02, Leonardo Rodrigues wrote: i'm pretty sure that the --with-large-files is needed on 32 bit installations (x86). Large file support is the default on x86_64 machines. please someone correct me if i'm wrong ... Em 15/04/11 09:23, Helmut Hullen escreveu: Hallo, Tó

Re: [squid-users] Allow full access during a limited time period

2011-04-15 Thread Eliezer Croitoru
On 15/04/2011 15:49, Fran Márquez wrote: Hi, I have a doubt: Can I setup squid for allow full and free access during a limited time period (for example, 15 minutes per day) for users can access to any site without restrictions? I don't like prohibit access to some popular sites, but I can't

[squid-users] Gmail HTTPS Block

2011-04-15 Thread Mohammad Fattahian
Hi all, Is the any way to block HTTPS for some web sites? I have to block access to Gmail accounts. It's done for http but I did not find any solution for https. This is part of my configuration: acl gmail1 dstdomain google.com acl gmail2 dstdomain google.ca http_access deny CONNECT gmail1 gma

Re: [squid-users] Allow full access during a limited time period

2011-04-15 Thread Chad Naugle
I'm not sure about dansguardian, but I'm sure that Squid can open itself up at a specific time interval for *all* users during the work day, ie: (Note that the time slot mentioned is in 24-hour format, and only a quick and dirty example) acl break_time time M T W H F 12:00-12:15 acl auth_users ac

Re: [squid-users] compile squid with large files option

2011-04-15 Thread Leonardo Rodrigues
i'm pretty sure that the --with-large-files is needed on 32 bit installations (x86). Large file support is the default on x86_64 machines. please someone correct me if i'm wrong ... Em 15/04/11 09:23, Helmut Hullen escreveu: Hallo, Tóth, Du meintest am 15.04.11: What is the option

[squid-users] Allow full access during a limited time period

2011-04-15 Thread Fran Márquez
Hi, I have a doubt: Can I setup squid for allow full and free access during a limited time period (for example, 15 minutes per day) for users can access to any site without restrictions? I don't like prohibit access to some popular sites, but I can't open it permanently, since this is an off

Re: [squid-users] compile squid with large files option

2011-04-15 Thread Helmut Hullen
Hallo, Tóth, Du meintest am 15.04.11: > What is the option when I compile squid to cache files over 2GB ? --with-large-files > How can I see what are the default compile options for an apt-get > based debian installation? squid -v Viele Gruesse! Helmut

RE: [squid-users] Squid uses all cpu

2011-04-15 Thread Ming Fu
Hi Tibby, Try turn on some debug options and -k reconfigure the squid, not restarting it. Maybe we can find out what is using the cpu for. It happens to me a while ago. The squid does not receive any traffic, but use 100% of one cpu core. The debug shown that the squid is logging "Engine i

[squid-users] compile squid with large files option

2011-04-15 Thread Tóth Tibor Péter
What is the option when I compile squid to cache files over 2GB ? How can I see what are the default compile options for an apt-get based debian installation? I would need to recompile a version just like the apt-get install, except I would have to have large file support. Thanks, Tibby

Re: [squid-users] certificate auth?

2011-04-15 Thread Tom Tux
A few weeks ago, there was a post concerning certificate authentication: http://squid-web-proxy-cache.1019090.n4.nabble.com/Client-Certificate-Authentication-td3353759.html Regards, Tom 2011/4/15 J. Webster : > > Is there a way to generate authentication certificates for access to a proxy > ser

[squid-users] adaptation_access and rep_mime_type -- It doesn't seem to work

2011-04-15 Thread Trever L. Adams
I am using squid 3.1.10. I have a virus scanner and a content classifier (to build content filter with Squid ACLs). The virus scanner has several modes. One scans transparently and passes on data in chunks. I have this working for various update sites, etc. However, I need to run streaming media t

[squid-users] certificate auth?

2011-04-15 Thread J. Webster
Is there a way to generate authentication certificates for access to a proxy server instead of or in addition to ncsa auth? I understand there is an IP address auth check in squid but is this for local network (192.168.x.x) only? My current setup is that users login through ncsa auth and all t