[squid-users] Squid3.3.10 tcp_outgoing_tos still does work with freeBSD ?

2013-12-26 Thread Ge Jin
Hi all! We want to use tcp_outgoing_tos with freeBSD 10.0-BETA2. And our test cases is very simple. Here is the related configure. # Squid normally listens to port 3128 acl normal_service_net src 192.168.1.1/32 acl good_service_net src 192.168.2.1/32 tcp_outgoing_tos 0x20 normal_service_net

Re: [squid-users] Re: squid_kerb_group (again)

2013-12-26 Thread Eugene M. Zheganin
Hi. On 24.12.2013 20:39, Markus Moeller wrote: Could you tell me which OS , kerberos, ldap and sasl version you use ? It's FreeBSD 10.0-BETA2 amd64 Heimdal Kerberos 1.5.2 cyrus-sasl 2.1.26 openldap-sasl-client-2.4.38 last two are from FreeBSD ports, -sasl- means it's compiled with

[squid-users] Re: Squid3.3.10 tcp_outgoing_tos still does work with freeBSD ?

2013-12-26 Thread Ge Jin
And I tested with the same sutation on my Ubuntu server, it works correct :) On Thu, Dec 26, 2013 at 3:59 PM, Ge Jin altman87...@gmail.com wrote: Hi all! We want to use tcp_outgoing_tos with freeBSD 10.0-BETA2. And our test cases is very simple. Here is the related configure. # Squid

[squid-users] Re: squid proxy kerberos authentication failure. Help!!!

2013-12-26 Thread Markus Moeller
I assume the *s are not in the real file. Can you run a strace against the auth helper to verify the right keytab is used ? Markus flypast wrote in message news:1387953737367-4664034.p...@n4.nabble.com... Hi Marcus, Please see my current /etc/init.d/squid file. I had added your suggested

Re: [squid-users] Problem in access to cache manager

2013-12-26 Thread ana any
thanks Amos i set cachemgr_passwd none all, even if i remove user and password for cache manager, it doesn't work yet with authenticatin! i searched in bugzilla and didn't find any bug about this problem. On Wednesday, December 25, 2013 1:55 PM, Amos Jeffries squ...@treenet.co.nz wrote: On

[squid-users] Re: Error using tcp_outgoing_mark

2013-12-26 Thread yogii
Sorry I'm just back. I don't understand functionality of tcp_outgoing_mark. How it works. how to use. Can I use this feature to set dscp field for every packet leaving squidbox and go to the client? do we need to do something with iptables after set tcp_outgoing_mark tag on squid? -- View

Re: [squid-users] Tracing squid 3.1 functions

2013-12-26 Thread Nikolai Gorchilov
Not possible because there is none that recognize request protocol. What happens is admin configure squid.conf ports manually, one per protocol type to be recieved. Squid only supports HTTP, HTTPS, ICP, HTCP, and SNMP incoming traffic. The non-HTTP traffic support in Squid is for gatewaying

Re: [squid-users] Re: Error using tcp_outgoing_mark

2013-12-26 Thread Amos Jeffries
On 27/12/2013 5:32 a.m., yogii wrote: Sorry I'm just back. I don't understand functionality of tcp_outgoing_mark. How it works. how to use. Can I use this feature to set dscp field for every packet leaving squidbox and go to the client? do we need to do something with iptables after set

Re: [squid-users] Tracing squid 3.1 functions

2013-12-26 Thread Amos Jeffries
On 26/12/2013 8:22 p.m., m.shahverdi wrote: Not possible because there is none that recognize request protocol. What happens is admin configure squid.conf ports manually, one per protocol type to be recieved. Squid only supports HTTP, HTTPS, ICP, HTCP, and SNMP incoming traffic. The

[squid-users] Squid, Firewall TCP RST Flags

2013-12-26 Thread Nyamul Hassan
Hi, Recently, we had some DDoS type attacks on our servers, so in an attempt to secure our systems, we added some iptables rules, which seems to work quite well on most of our servers. Even on systems dedicated to Squid, all seems to run well. However, one rule in particular seems to catch up a