Re: [squid-users] Re: Squid 3.1.12 hangs with HEAD request in LOG

2014-01-27 Thread Kinkie
No, I hadn't. Good :) On Mon, Jan 27, 2014 at 8:24 AM, 4eversr thomas.boelsc...@assmann.de wrote: @Kinkie I guess you have not seen my last edit where i described that 3.4.2 fix this issue. -- View this message in context:

[squid-users] Re: how to differentiate your clients ?

2014-01-27 Thread g35
Hello, thank you for your response. Unfortunately, my client has a dynamic IP address. My squid version is 2.7 stable 8 for windows. Perhaps there is a way with the mac adress of my client? -- View this message in context:

[squid-users] Re: Squid 3.1.12 hangs with HEAD request in LOG

2014-01-27 Thread babajaga
He did it already successfully. Pls refere to his last posting. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-3-1-12-hangs-with-HEAD-request-in-LOG-tp4664219p4664464.html Sent from the Squid - Users mailing list archive at Nabble.com.

[squid-users] rewriting cookies with squid ?

2014-01-27 Thread Travel Factory S.r.l.
In order to have an intranet application use a single sign on system we'd need to rewrite a cookie... A server sets a cookie for host1.domain.tld and we need to strip host1 so that the cookie is valid for the whole domain. Is it possibile with squid and/or with some rewriting plugins ?

Re: [squid-users] rewriting cookies with squid ?

2014-01-27 Thread Eliezer Croitoru
Hey There, The basic way to do that is to use ICAP service. You better set couple acls that will allow or disallow the routing of the http requests towards the ICAP service to lower the load on it. I have used in the past with GreasySpoon ICAP service which is based on java and offers lots of

[squid-users] Re: rewriting cookies with squid ?

2014-01-27 Thread babajaga
Depending upon how flexible your cookie-rwriting must be, and which version of squid you are using, small patches to squid-src should do the job nicely. Being (still) a fan of squid2.7, I patched squid to insert special header line into response to browser. Not a big deal. -- View this message

Re: [squid-users] Re: how to differentiate your clients ?

2014-01-27 Thread Leonardo Rodrigues
Em 27/01/14 06:29, g35 escreveu: Hello, thank you for your response. Unfortunately, my client has a dynamic IP address. My squid version is 2.7 stable 8 for windows. Perhaps there is a way with the mac adress of my client? MAC addresses only exists on the LAN segment of the network. In

[squid-users] question about large rock

2014-01-27 Thread k simon
Hi,Alex, I noticed large rock have merged to squid 3.5, I have some question about your large rock patch. 1,Does large rock support non-SMP instance? I know the rock store must used with worker. 2,Does large rock solve rebuilding time too long issue? 3,Can large rock support range splice?

[squid-users] Testing release of squid.head RPM.

2014-01-27 Thread Eliezer Croitoru
After quite some time I had the chance and joy to release the RPM of the squid.head branch(squid-3.HEAD-20140127-r13248). It should work just out of the box but I have not tested it myself yet. the location it is: http://www1.ngtech.co.il/rpm/centos/6/x86_64/head/ http://www1.ngtech.co.il/rpm

[squid-users] TPROXY does not redirect to squid port

2014-01-27 Thread Peter Warasin
hi guys I configured a transparent proxy environment using TPROXY following the howto on the squid wiki http://wiki.squid-cache.org/Features/Tproxy4 I setup a tproxy port in squid on port 18080 and created the following iptables rule: -A PREROUTING -p tcp --dport 80 -j TPROXY --on-port 18080

Re: [squid-users] Cross compilation in version 3.1

2014-01-27 Thread Alex Rousskov
On 01/27/2014 03:23 AM, Stefano Cordibella wrote: So now is the compile steps that fails, I have the following error: In file included from PortCfg.cc:2:0: ../../src/anyp/PortCfg.h:14:7: error: 'AnyP::PortCfg' declared with greater visibility than the type of its field

Re: [squid-users] question about large rock

2014-01-27 Thread Alex Rousskov
On 01/27/2014 05:26 AM, k simon wrote: I noticed large rock have merged to squid 3.5, I have some question about your large rock patch. Hello Simon, 1,Does large rock support non-SMP instance? Yes. Rock store can be used in non-SMP mode (as defined at [1]). Rock store uses blocking disk

Re: [squid-users] rewriting cookies with squid ?

2014-01-27 Thread Alex Rousskov
On 01/27/2014 02:53 AM, Travel Factory S.r.l. wrote: In order to have an intranet application use a single sign on system we'd need to rewrite a cookie... A server sets a cookie for host1.domain.tld and we need to strip host1 so that the cookie is valid for the whole domain. Is it

[squid-users] Setting SO_KEEPALIVE on outbound connections

2014-01-27 Thread eam
Hi all, I have a squid cache behind a stateful network device which drops idle TCP connections after 300 seconds. I need to ensure TCP level keepalives are set both for traffic to squid (accept) as well as traffic from squid (connect) in order to support long-lived connections with idle periods.

Re: [squid-users] TPROXY does not redirect to squid port

2014-01-27 Thread Eliezer Croitoru
Hey Peter, Tproxy is working and pretty nice for many users. You are probably missing couple rules in iptables and might not understand fully tproxy effects. I still doesn't understand the issue. What OS are you using? If you can tell me more about the system I might be able to understand

Re: [squid-users] TPROXY does not redirect to squid port

2014-01-27 Thread Amos Jeffries
On 2014-01-28 06:18, Peter Warasin wrote: hi guys I configured a transparent proxy environment using TPROXY following the howto on the squid wiki http://wiki.squid-cache.org/Features/Tproxy4 I setup a tproxy port in squid on port 18080 and created the following iptables rule: -A PREROUTING -p

Re: [squid-users] Cross compilation in version 3.1

2014-01-27 Thread Stefano Cordibella
Hi Alex, as suggested in bugzilla I try to add an extra [] at the end of the AC_RUN_IFELSE and the configure goes ahead (I report the very simple patch into bugzilla). Unfortunately I have a similar issue with the SSL certificate check that comes from acinclude/lib-checks.m4 (around line

Re: [squid-users] Setting SO_KEEPALIVE on outbound connections

2014-01-27 Thread Amos Jeffries
On 2014-01-28 08:33, eam wrote: Hi all, I have a squid cache behind a stateful network device which drops idle TCP connections after 300 seconds. I need to ensure TCP level keepalives are set both for traffic to squid (accept) as well as traffic from squid (connect) in order to support

Re: [squid-users] question about large rock

2014-01-27 Thread k simon
Thanks. 于 28/1/14 上午2:59, Alex Rousskov 写道: On 01/27/2014 05:26 AM, k simon wrote: I noticed large rock have merged to squid 3.5, I have some question about your large rock patch. Hello Simon, 1,Does large rock support non-SMP instance? Yes. Rock store can be used in non-SMP

[squid-users] Re: how to differentiate your clients ?

2014-01-27 Thread babajaga
Besides some sort of auth I used another scheme on LINUX: Set up some script on the client, to email change of dynamic IP to proxy machine. There, modify firewall rule to allow access to proxy for the new IP. As dynamic IPs usually do not change very often a day, this should be sufficient. --

[squid-users] TCP_NEGATIVE_HIT/502

2014-01-27 Thread Caracol Bartolito
Hi brothers and sisters. I am running Squid Cache: Version 2.7.STABLE9, over debian 6, as long as with apache2 creating virtual host. Everything was working good but, I am not able to get access to my virtual host (myhost.com) looking into squid access.log i got the next line: 1390867426.006

Re: [squid-users] TCP_NEGATIVE_HIT/502

2014-01-27 Thread Amos Jeffries
On 28/01/2014 5:59 p.m., Caracol Bartolito wrote: Hi brothers and sisters. I am running Squid Cache: Version 2.7.STABLE9, over debian 6, as long as with apache2 creating virtual host. Everything was working good but, I am not able to get access to my virtual host (myhost.com) looking into