Re: [squid-users] caching for 60 minutes, ignoring any header

2013-09-23 Thread Ron Klein
My example of favicons was to simplify the question. The real case is different. I want to cache all favicons (that is, other resources, internally used) for 60 minutes. For a given favicon, I'd like to have the following caching policy: The period of 60 minutes should start when the first

Re: [squid-users] caching for 60 minutes, ignoring any header

2013-09-23 Thread Ron Klein
Hi Amos, Thanks for your thorough response. Please refer to my response to Eliezer. Thanks! On 23-Sep-13 07:29, Amos Jeffries wrote: On 23/09/2013 3:01 p.m., Ron Klein wrote: Hi, I'm trying to cache all favicons files, named favicon.ico, located always in the root of the web site (when

Re: [squid-users] caching for 60 minutes, ignoring any header

2013-09-23 Thread Amos Jeffries
On 23/09/2013 7:21 p.m., Ron Klein wrote: My example of favicons was to simplify the question. The real case is different. Then please tell us the real details. In full if possible. favicon is one of the special-case type of URLs and like Eliezer and I already mentioned there are some

Re: [squid-users] caching for 60 minutes, ignoring any header

2013-09-23 Thread Ron Klein
I'll describe the real scenario in a more detailed way, but I can't disclose all of it. There are a few machines, let's name them M1 to M9, that are processing data. From time to time, those machines should make HTTP requests to external servers, that are business partners. All of these HTTP

[squid-users] WCCP issues with Centos 6.3 and Cisco 2901

2013-09-23 Thread Jordan Dalley
Hi Squid community, I have an issue whereby I am just struggling to find out why it wont work. I have trawled through multiple forums, howto's, faq's etc but no matter what I do, I cannot get it to work properly. Here is what I have done so far: Router IP: 10.114.3.34 Squid IP: 10.112.4.4 WAN

Re: [squid-users] Samba 4 vs Squid 3.2 - NTLM Authentication

2013-09-23 Thread Aecio Alves
Hi Eliezer! Any ideas or suggestions on how I can proceed? Thank you! Aécio Em 9/18/13 3:46 PM, Aecio Alves escreveu: Hello, Sorry for the delay in answering you. I'm using - helper-protocol = squid-2.5-ntlmssp. I tried to use version 3.3 of squid, but had several errors during

[squid-users] Fwd: Problem whitelisting .shiprush.com

2013-09-23 Thread Chris Nighswonger
So what am I missing in the following situation? Our mail dept uses shiprush.com. The software supplied by shiprush is not proxy-auth friendly, so I added a acl ShipRush dstdomain .shiprush.com and http_access allow campusnet ShipRush before my http_access line requiring authentication. Yet

Re: [squid-users] is nice useful?

2013-09-23 Thread Antony Stone
On Monday 23 September 2013 at 18:01:48, Alfredo Rezinovsky wrote: I have a heavy loaded squid and I noticed high latency. Please specify heavy loaded and high latency: - what spec machine is Squid running on? (CPU cores, speed, amount of RAM are the most important factors, also disk

[squid-users] RE: WCCP issues with Centos 6.3 and Cisco 2901

2013-09-23 Thread Luderitz Bob
Hey Jordan, I am running a similar config with wccp and CentOS 6.3 with Cisco routers. Your config looks close to what I have but I use the built-in gre0 tunnel so don't have the interface explicitly setup just have it in rc.local like this: ifconfig gre0 inet 1.2.3.4

[squid-users] is nice useful?

2013-09-23 Thread Alfredo Rezinovsky
I have a heavy loaded squid and I noticed high latency. using workers it seems a little faster I dont have 100% CPU load and iowait is also low. But clients browse faster when I disable the tproxy and let them pass bridged. Running squid with a lower nice value should improbe the latency?

[squid-users] What to do in an imperfect world

2013-09-23 Thread Mark Davies
Some time ago I set connect_timeout down to 10 seconds because we were hitting various sites that were advertising v6 addresses but not listening on them and it seemed that in this day and age connect times were generally under a second but now we've found a site (http://inspirehep.net) that

[squid-users] Problems with cache peering, sourcehash, *_uses_indirect, and follow_x_forwarded_for

2013-09-23 Thread Martín Ferco
Hello, I'm trying to use DansGuardian together with Squid and load-balancing to use more than one ISP. I've been able to achieve this by using cache_peer, and I should be able to perform load balancing with the following two lines: {{{ cache_peer squid-isp1 parent 13128 0 no-query round-robin

[squid-users] RE: WCCP issues with Centos 6.3 and Cisco 2901

2013-09-23 Thread Jordan Dalley
Thanks for your reply Bob, I tried what you said - completely removed any ifcfg-gre0 config and simply ran the commands: ifconfig gre0 inet 1.1.1.1 netmask 255.255.255.0 up iptables -F -t nat iptables -t nat -A PREROUTING -i gre0 -p tcp -m tcp --dport 80 -j DNAT --to-destination

Re: [squid-users] Problems with cache peering, sourcehash, *_uses_indirect, and follow_x_forwarded_for

2013-09-23 Thread Amos Jeffries
On 24/09/2013 9:06 a.m., Martín Ferco wrote: Hello, I'm trying to use DansGuardian together with Squid and load-balancing to use more than one ISP. I've been able to achieve this by using cache_peer, and I should be able to perform load balancing with the following two lines: {{{ cache_peer

Re: [squid-users] What to do in an imperfect world

2013-09-23 Thread Amos Jeffries
On 24/09/2013 9:04 a.m., Mark Davies wrote: Some time ago I set connect_timeout down to 10 seconds because we were hitting various sites that were advertising v6 addresses but not listening on them and it seemed that in this day and age connect times were generally under a second but now we've

Re: [squid-users] caching for 60 minutes, ignoring any header

2013-09-23 Thread Eliezer Croitoru
Hey Ron, I added notes near the quotes. On 09/23/2013 12:13 PM, Ron Klein wrote: I'll describe the real scenario in a more detailed way, but I can't disclose all of it. It's OK since it's a public list. There are a few machines, let's name them M1 to M9, that are processing data. OK From

Re: [squid-users] Samba 4 vs Squid 3.2 - NTLM Authentication

2013-09-23 Thread Eliezer Croitoru
Hey there, I will need to understand more about the NTLM auth process in order to try to help you. Can you tell me if it worked on another version of Samba? there is a DEBUG option if I am not wrong about the NTLM helper. I think that using kerberus can might solve couple issues.. As far as I can

Re: [squid-users] RE: WCCP issues with Centos 6.3 and Cisco 2901

2013-09-23 Thread Eliezer Croitoru
Before saying this or that, did you had the chance of looking at: http://wiki.squid-cache.org/ConfigExamples/UbuntuTproxy4Wccp2 ?? What version of IOS the 2901 has on it? Eliezer On 09/24/2013 02:31 AM, Jordan Dalley wrote: Thanks for your reply Bob, I tried what you said - completely