Re: [squid-users] Warnings after upgrade

2011-09-06 Thread Amos Jeffries
On 06/09/11 17:22, andreas.moro...@sb-brixen.it wrote: Hello, I upgraded squid from 2.7 to 3.1.5 I got several warnings about the netmask and about the usage of 0.0.0.0/0.0.0.0 I changed 0.0.0.0/0.0.0.0 to all but now I get this warnigns: 2011/09/06 00:05:01| WARNING: (B) '::/0' is a

Re: [squid-users] ssl_bump + ldap authentication problem

2011-09-06 Thread Amos Jeffries
On 05/09/11 22:03, Łukasz Makowski wrote: Hello everyone, I'm using Squid and ldap_authentication, and recently decided do deploy ssl_bump feature. I have made tests for ssl_bump and everything works just fine, but when combined with ldap authentication, it appeared to have one big

[squid-users] Large Downloads Killing Squid

2011-09-06 Thread Justin Lawler
Hi, We had a situation where a user tried to download 20 mp4 files (at 115+ Mb each) at the same time through squid, and squid died for up to 20 minutes after, not responding to any other traffic. Is this a known issue? Can we work around it with setting update in squid.conf? We're running

Re: [squid-users] Large Downloads Killing Squid

2011-09-06 Thread Amos Jeffries
On 06/09/11 19:13, Justin Lawler wrote: Hi, We had a situation where a user tried to download 20 mp4 files (at 115+ Mb each) at the same time through squid, and squid died for up to 20 minutes after, not responding to any other traffic. Is this a known issue? Can we work around it with

Re: [squid-users] Compiling squid-3.1.15 + openssl 1.0.0c

2011-09-06 Thread Amos Jeffries
On 06/09/11 00:44, Víctor José Hernández Gómez wrote: Dear squid users, I am trying to compile squid from source, using 3.1.15 and openssl 1.0.0c... Server: RedHat 5.5 x86_64 GCC version is 4.1.2 Small mistake on the fixes for OpenSSL 1.0.0d problems. Please try this patch:

Re: [squid-users] Performances: Global rule to size a server

2011-09-06 Thread David Touzeau
Le mardi 06 septembre 2011 à 16:15 +1200, Amos Jeffries a écrit : On Mon, 05 Sep 2011 20:23:02 +0200, David Touzeau wrote: Dear I would like to create a kind of law calculation in order to quickly calculate server performances to store squid... I know there is a lot of parameters that

Re: [squid-users] External Authentication Error

2011-09-06 Thread Amos Jeffries
On 31/08/11 03:04, Josh Phillips wrote: I have squid setup to authenticate with my Active Directory. On my internal network it works and even does single sign-on. Externally, it prompts for user name and password (which is what I wanted really...), but no matter if I use a correct or incorrect

Re: [squid-users] Compiling squid-3.1.15 + openssl 1.0.0c

2011-09-06 Thread Víctor José Hernández Gómez
I am trying to compile squid from source, using 3.1.15 and openssl 1.0.0c... Server: RedHat 5.5 x86_64 GCC version is 4.1.2 Small mistake on the fixes for OpenSSL 1.0.0d problems. Please try this patch: http://www.squid-cache.org/Versions/v3/3.HEAD/changesets/squid-3-11702.patch I am

Re: [squid-users] Compiling squid-3.1.15 + openssl 1.0.0c

2011-09-06 Thread Amos Jeffries
On 06/09/11 23:24, Víctor José Hernández Gómez wrote: I am trying to compile squid from source, using 3.1.15 and openssl 1.0.0c... Server: RedHat 5.5 x86_64 GCC version is 4.1.2 Small mistake on the fixes for OpenSSL 1.0.0d problems. Please try this patch:

Re: [squid-users] Compiling squid-3.1.15 + openssl 1.0.0c

2011-09-06 Thread Víctor José Hernández Gómez
I am trying to compile squid from source, using 3.1.15 and openssl 1.0.0c... Server: RedHat 5.5 x86_64 GCC version is 4.1.2 Small mistake on the fixes for OpenSSL 1.0.0d problems. Please try this patch: http://www.squid-cache.org/Versions/v3/3.HEAD/changesets/squid-3-11702.patch I

Re: [squid-users] Compiling squid-3.1.15 + openssl 1.0.0c

2011-09-06 Thread Amos Jeffries
On 07/09/11 00:43, Víctor José Hernández Gómez wrote: I am trying to compile squid from source, using 3.1.15 and openssl 1.0.0c... Server: RedHat 5.5 x86_64 GCC version is 4.1.2 Small mistake on the fixes for OpenSSL 1.0.0d problems. Please try this patch:

Re: [squid-users] ssl_bump + ldap authentication problem

2011-09-06 Thread Łukasz Makowski
W dniu 2011-09-06 08:08, Amos Jeffries pisze: On 05/09/11 22:03, Łukasz Makowski wrote: Hello everyone, I'm using Squid and ldap_authentication, and recently decided do deploy ssl_bump feature. I have made tests for ssl_bump and everything works just fine, but when combined with ldap

Re: [squid-users] squid - transparent + sslbump + all via parent proxy

2011-09-06 Thread Markus Ferlitsch
Hi, ssl-bump is the process of decrypting a CONNECT request. Intercepted (aka transparent) traffic does not contain CONNECT requests. Squid also does not (yet) re-encrypt when sending traffic via peers. This is why we block it instead. Ok, the re-encryption of such traffic would be

RE: [squid-users] Authorization header is overwritten with cache_peer credentials (tricky config or bug?)

2011-09-06 Thread zongo saiba
Amos, Thanks for the reply. I have compiled the latest Squid version 3.2.0.11 and moved up my 'auth_param' above acl. I do not get the error mentioned in first email. When I run 'squid -k reconfigure' squid runs fine but seems to let the connection anyhow from all clients without requesting

Re: [squid-users] ssl_bump + ldap authentication problem

2011-09-06 Thread Amos Jeffries
On Tue, 06 Sep 2011 15:15:08 +0200, Łukasz Makowski wrote: W dniu 2011-09-06 08:08, Amos Jeffries pisze: On 05/09/11 22:03, Łukasz Makowski wrote: Hello everyone, I'm using Squid and ldap_authentication, and recently decided do deploy ssl_bump feature. I have made tests for ssl_bump and

[squid-users] cache_peer siblings

2011-09-06 Thread John Kenyon
Hi All, I was wondering if someone can shed some light on cache peers with a sibling relationship? I have 3 x squid boxes (running 3.1.15) for my web proxy (WP01,WP02,WP03) and am wanting to setup a sibling relationship between them. The following is an example config I have on WP01:

Re: [squid-users] cache_peer siblings

2011-09-06 Thread Amos Jeffries
On Wed, 7 Sep 2011 12:22:21 +1000, John Kenyon wrote: Hi All, I was wondering if someone can shed some light on cache peers with a sibling relationship? I have 3 x squid boxes (running 3.1.15) for my web proxy (WP01,WP02,WP03) and am wanting to setup a sibling relationship between them. The

RE: [squid-users] cache_peer siblings

2011-09-06 Thread John Kenyon
Open icp_port 3130 to receive the packets. Amos Hi Amos, Sorry, I've also got this in my squid.conf: icp_port 3130 log_icp_queries on icp_query_timeout 2000 Also, port 3130 is open in iptables. Any other ideas? Cheers, JLK