[squid-users] WCCP Routing

2008-01-23 Thread Dave Raven
Hi all, Is it possible to make the request back out the router that sent in a WCCP packet to begin with? For example if you have two routers, and router A sends request A and router B sends request B to send them back through their origin routers, regardless of your default route etc so

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-14 Thread Dave Raven
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Moylan Sent: Wednesday, November 14, 2007 12:39 PM To: Dave Raven Subject: Re: [squid-users] Squid Performance (with Polygraph) Doesn't diskd have a bug whereby it has issues under heavy load. http://www.squid-cache.org/bugs/show_bug.cgi?id

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-14 Thread Dave Raven
] Sent: Wednesday, November 14, 2007 1:48 PM To: Dave Raven Cc: 'John Moylan'; 'squid-users' Subject: Re: [squid-users] Squid Performance (with Polygraph) Hi Dave, Dave Raven wrote: I have seen the error messages before, but not during these tests. diskd definitely seems to delay the time-till

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-14 Thread Dave Raven
... Thanks Dave -Original Message- From: Adrian Chadd [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 14, 2007 1:51 PM To: Dave Raven Cc: 'Adrian Chadd'; squid-users@squid-cache.org Subject: Re: [squid-users] Squid Performance (with Polygraph) What you may need to do is run the tests

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-14 Thread Dave Raven
because the diskd processes are able to use more than one processor? Except their cpu usage never goes over ~3%... Thanks Dave -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Thursday, November 15, 2007 3:07 AM To: Dave Raven Cc: 'Adrian Chadd'; squid-users@squid

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-13 Thread Dave Raven
higher than its doing. Thanks Dave -Original Message- From: Adrian Chadd [mailto:[EMAIL PROTECTED] Sent: Saturday, November 10, 2007 12:13 AM To: Dave Raven Cc: 'Adrian Chadd'; squid-users@squid-cache.org Subject: Re: [squid-users] Squid Performance (with Polygraph) On Fri, Nov 09, 2007

RE: [squid-users] How can I do this??

2007-11-13 Thread Dave Raven
You could use refresh_pattern to force everything to be cached... -Original Message- From: Robert Collins [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 14, 2007 3:37 AM To: murrah boswell Cc: squid-users Subject: Re: [squid-users] How can I do this?? On Tue, 2007-11-13 at 18:28

RE: [squid-users] How can I do this??

2007-11-13 Thread Dave Raven
What about using offline mode - if its educational I assume you could probably just download after hours ? Turn it off when you download with wget, and put it back on afterwards? -Original Message- From: murrah boswell [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 14, 2007 4:04 AM

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-09 Thread Dave Raven
PROTECTED] Sent: Friday, November 09, 2007 11:55 AM To: Dave Raven Cc: 'Adrian Chadd'; squid-users@squid-cache.org Subject: Re: [squid-users] Squid Performance (with Polygraph) Check netstat -mb and see if you're running out of mbufs? You haven't mentioned whether the CPU is being pegged at this point

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-09 Thread Dave Raven
(with the same results, just different times that it fails after). Thanks Dave -Original Message- From: Adrian Chadd [mailto:[EMAIL PROTECTED] Sent: Friday, November 09, 2007 3:35 PM To: Dave Raven Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Squid Performance (with Polygraph

[squid-users] Squid Performance (with Polygraph)

2007-11-08 Thread Dave Raven
Hi all, I'm busy testing a squid box with 8xSATA drives, 4gig of DDRII memory and 2x 2.6gig dual core processors. I'm using the basic datacomm test from polygraph. I've configured 6 of the drives to use COSS, and the other two diskd (I've also done basic ufs tests). During all of the

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-08 Thread Dave Raven
with iostat, it seems to stay the same even after my slow down period... Thanks Dave -Original Message- From: Adrian Chadd [mailto:[EMAIL PROTECTED] Sent: Thursday, November 08, 2007 5:17 PM To: Dave Raven Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Squid Performance

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-08 Thread Dave Raven
80 minutes -- very weird... I'll try to get you all the stats I can tomorrow morning Thanks again for the help Dave -Original Message- From: Adrian Chadd [mailto:[EMAIL PROTECTED] Sent: Thursday, November 08, 2007 5:37 PM To: Dave Raven Cc: 'Adrian Chadd'; squid-users@squid-cache.org

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-08 Thread Dave Raven
Chadd [mailto:[EMAIL PROTECTED] Sent: Thursday, November 08, 2007 8:05 PM To: Dave Raven Cc: 'Adrian Chadd'; squid-users@squid-cache.org Subject: Re: [squid-users] Squid Performance (with Polygraph) On Thu, Nov 08, 2007, Dave Raven wrote: Hi Adrian, I've got diskd configured to be used

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-08 Thread Dave Raven
, then a different motherboard etc - try some different setups today. Thanks again for all the help and please let me know if anyone has any ideas... Thanks Dave -Original Message- From: Adrian Chadd [mailto:[EMAIL PROTECTED] Sent: Friday, November 09, 2007 4:08 AM To: Dave Raven Cc: squid

[squid-users] Same Domain Caching

2007-10-22 Thread Dave Raven
Hi all, Is there a way to assume that anything under a certain domain is similar across servers? For example, www.youtube.com videos come from various servers -- 1191839044.533 53841 10.10.108.250 TCP_MISS/200 1770189 GET http://sjc-v180.sjc.youtube.com/get_video? - DIRECT/64.15.120.171

RE: [squid-users] Same Domain Caching

2007-10-22 Thread Dave Raven
for the help Dave -Original Message- From: Adrian Chadd [mailto:[EMAIL PROTECTED] Sent: Monday, October 22, 2007 9:38 AM To: Dave Raven Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Same Domain Caching On Mon, Oct 22, 2007, Dave Raven wrote: Hi all, Is there a way

[squid-users] tcp_recv_bufsize and performance

2007-10-03 Thread Dave Raven
Hi all, I've been doing some high performance testing with squid (2.6) and if you use enough hardware the problem shifts to being with network connections (for me at least). Above around 300 RPS on a unit with latency on both sides and many clients you start to chew up network buffers (on

[squid-users] FTP Proxy ?

2006-12-13 Thread Dave Raven
Hi, Is squid able to properly proxy ftp - e.g. support uploads and authentication through a web browser (like IE), or just downloads? I did do some googling but most of my findings were older Thanks in advance Dave

[squid-users] Strange Mbuf Problem

2006-09-18 Thread Dave Raven
Hi all, Are there any known bugs or config problems etc that might be able to cause mbufs on a FreeBSD box to be completely utilised? This is not under high load - its during the down time, and they are completely used within 5 minutes, whereas the cache has been running under much higher

[squid-users] Failure Ratio?

2006-08-30 Thread Dave Raven
Hi all, I have a strange problem with the Failure Ratio messages -- 2006/08/30 02:41:09| Failure Ratio at 1.37 2006/08/30 02:41:09| Going into hit-only-mode for 5 minutes... 2006/08/30 02:46:14| Failure Ratio at 1.46 2006/08/30 02:46:14| Going into hit-only-mode for 5 minutes...

RE: [squid-users] Need To Bind ICP To Specific Interface

2005-11-13 Thread Dave Raven
udp_incoming_address is correct, I don't know why its breaking. Can you send us a config file ? You could of course just deny access to the port on the other cards for an easy fix... Through some other mechanism. -Original Message- From: Vadim Pushkin [mailto:[EMAIL PROTECTED] Sent: 11

RE: [squid-users] software caused connection abort

2005-11-13 Thread Dave Raven
Try 'debug_options' -Original Message- From: Wojciech Puchar [mailto:[EMAIL PROTECTED] Sent: 12 November 2005 11:03 PM To: squid-users@squid-cache.org Subject: [squid-users] software caused connection abort can such messages Nov 12 22:01:47 hel squid[22265]: comm_accept: FD 8: (53)

RE: [squid-users] software caused connection abort

2005-11-13 Thread Dave Raven
Try 'debug_options' -Original Message- From: Wojciech Puchar [mailto:[EMAIL PROTECTED] Sent: 12 November 2005 11:03 PM To: squid-users@squid-cache.org Subject: [squid-users] software caused connection abort can such messages Nov 12 22:01:47 hel squid[22265]: comm_accept: FD 8: (53)

RE: AW: [squid-users] Squid unreachable every hour and 6 minutes.

2005-11-11 Thread Dave Raven
Run squid under some sort of trace program - you'll need to see whats causing it to crash... -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 11 November 2005 09:45 AM To: Serassio Guido; Chris Robertson; squid-users@squid-cache.org Subject: RE: AW:

RE: AW: [squid-users] Squid unreachable every hour and 6 minutes.

2005-11-11 Thread Dave Raven
Run squid under some sort of trace program - you'll need to see whats causing it to crash... -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 11 November 2005 09:45 AM To: Serassio Guido; Chris Robertson; squid-users@squid-cache.org Subject: RE: AW:

RE: AW: [squid-users] Squid unreachable every hour and 6 minutes.

2005-11-10 Thread Dave Raven
An: Dave Raven; squid-users@squid-cache.org Betreff: RE: [squid-users] Squid unreachable every hour and 6 minutes. I already tried to : - Stop Squid, delete swap.state, restart squid - Stop Squid, format my cache parition, squid -z, start squid - change cache_dir ufs /cache 5000 16 256

RE: [squid-users] Getting error Too few basicauthenticator processes are running

2005-11-10 Thread Dave Raven
Run '/usr/local/squid/libexec/ncsa_auth /usr/local/squid/etc/passwd' Type 'USERNAME PASSWORD' And see what it says - I suspect you wont get that far though. Once you try run it it should giv eyou and error -Original Message- From: ads squid [mailto:[EMAIL PROTECTED] Sent: 10

RE: [squid-users] Getting error Too few basicauthenticator processes are running

2005-11-10 Thread Dave Raven
Run '/usr/local/squid/libexec/ncsa_auth /usr/local/squid/etc/passwd' Type 'USERNAME PASSWORD' And see what it says - I suspect you wont get that far though. Once you try run it it should giv eyou and error -Original Message- From: ads squid [mailto:[EMAIL PROTECTED] Sent: 10

RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems

2005-11-09 Thread Dave Raven
anything Thanks Dave -Original Message- From: Abbas Salehi [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 12:22 PM To: Dave Raven Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Urgent Samba / Squid NTLM Auth Problems Dear sir I did all of your recommanded from document

RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems

2005-11-09 Thread Dave Raven
anything Thanks Dave -Original Message- From: Abbas Salehi [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 12:22 PM To: Dave Raven Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Urgent Samba / Squid NTLM Auth Problems Dear sir I did all of your recommanded from document

RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems

2005-11-09 Thread Dave Raven
Okay I have an update with more progress - it seems the problem is only to do with ntlmssp. If I only have a basic authenticator - which looks like the following, it works perfectly: auth_param basic program /usr/optec/ntlm_auth.sh basic auth_param basic children 10 auth_param basic realm

RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems

2005-11-09 Thread Dave Raven
Okay I have an update with more progress - it seems the problem is only to do with ntlmssp. If I only have a basic authenticator - which looks like the following, it works perfectly: auth_param basic program /usr/optec/ntlm_auth.sh basic auth_param basic children 10 auth_param basic realm

RE: [squid-users] Squid unreachable every hour and 6 minutes.

2005-11-09 Thread Dave Raven
Are there any .core files for squid? find / -name squid.core -print It seems like your cache is crashing for some unknown reason - are you not killing it every few hours somehow? Its highly unlikely that squid is dying after EXACTLY 66 minutes. Also try using the latest version...

RE: [squid-users] Squid unreachable every hour and 6 minutes.

2005-11-09 Thread Dave Raven
Are there any .core files for squid? find / -name squid.core -print It seems like your cache is crashing for some unknown reason - are you not killing it every few hours somehow? Its highly unlikely that squid is dying after EXACTLY 66 minutes. Also try using the latest version...

RE: [squid-users] Squid unreachable every hour and 6 minutes.

2005-11-09 Thread Dave Raven
Try use my method posted earlier to search for code files. The fact that your log suddenly shows squid restarting means it died unexpectedly. If there is a core file it'll be squids problem - if not its probably something else causing the problem. Also, you should try clean out your cache_dir

RE: [squid-users] Squid unreachable every hour and 6 minutes.

2005-11-09 Thread Dave Raven
Try use my method posted earlier to search for code files. The fact that your log suddenly shows squid restarting means it died unexpectedly. If there is a core file it'll be squids problem - if not its probably something else causing the problem. Also, you should try clean out your cache_dir

RE: [squid-users] RE: Urgent Samba / Squid NTLM Auth Problems

2005-11-09 Thread Dave Raven
options that are possible... -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of Adam Aube Sent: 09 November 2005 09:12 PM To: squid-users@squid-cache.org Subject: [squid-users] RE: Urgent Samba / Squid NTLM Auth Problems Dave Raven wrote: Okay I have an update with more

RE: [squid-users] RE: Urgent Samba / Squid NTLM Auth Problems

2005-11-09 Thread Dave Raven
options that are possible... -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of Adam Aube Sent: 09 November 2005 09:12 PM To: squid-users@squid-cache.org Subject: [squid-users] RE: Urgent Samba / Squid NTLM Auth Problems Dave Raven wrote: Okay I have an update with more

RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems

2005-11-08 Thread Dave Raven
Hi all, I'm currently working on this problem with Ian. It seems like ntlm_auth is handling the requests fine - [EMAIL PROTECTED] /usr/local/bin # ./ntlm_auth --username=ianb --configfile=/usr/local/etc/smb.conf password: NT_STATUS_OK: Success (0x0) It also works through squid when

RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems

2005-11-08 Thread Dave Raven
Hi all, I'm currently working on this problem with Ian. It seems like ntlm_auth is handling the requests fine - [EMAIL PROTECTED] /usr/local/bin # ./ntlm_auth --username=ianb --configfile=/usr/local/etc/smb.conf password: NT_STATUS_OK: Success (0x0) It also works through squid when

RE: [squid-users] Squid 2.5-Stable10 With Negotiate Patch and Sambe 3.x

2005-09-29 Thread Dave Raven
Hello, How does this login=*:secret option work? I have set up two caches and put the authentication on the bottom unit, setting a cache peer with login=*:secret (intead of PASS) and it doesn't work? Well, it all works, but with no username in the log file at the top... Any advice?

RE: [squid-users] Squid 2.5-Stable10 With Negotiate Patch and Sambe 3.x

2005-09-29 Thread Dave Raven
Hello, How does this login=*:secret option work? I have set up two caches and put the authentication on the bottom unit, setting a cache peer with login=*:secret (intead of PASS) and it doesn't work? Well, it all works, but with no username in the log file at the top... Any advice?

RE: [squid-users] SPNEGO patch

2005-09-21 Thread Dave Raven
with failure... Is there something I'm missing? Thanks again for the help Dave -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: 21 September 2005 02:40 AM To: Dave Raven Cc: squid-users@squid-cache.org Subject: Re: [squid-users] SPNEGO patch On Tue, 20 Sep 2005

RE: [squid-users] SPNEGO patch

2005-09-21 Thread Dave Raven
with failure... Is there something I'm missing? Thanks again for the help Dave -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: 21 September 2005 02:40 AM To: Dave Raven Cc: squid-users@squid-cache.org Subject: Re: [squid-users] SPNEGO patch On Tue, 20 Sep 2005

RE: [squid-users] SPNEGO patch

2005-09-21 Thread Dave Raven
Thanks Chris, after running bootstrap.sh and a little tweaking its compiled! Thanks again Dave -Original Message- From: Chris Robertson [mailto:[EMAIL PROTECTED] Sent: 21 September 2005 10:35 PM To: Dave Raven Cc: squid-users@squid-cache.org Subject: RE: [squid-users] SPNEGO patch

RE: [squid-users] SPNEGO patch

2005-09-21 Thread Dave Raven
Thanks Chris, after running bootstrap.sh and a little tweaking its compiled! Thanks again Dave -Original Message- From: Chris Robertson [mailto:[EMAIL PROTECTED] Sent: 21 September 2005 10:35 PM To: Dave Raven Cc: squid-users@squid-cache.org Subject: RE: [squid-users] SPNEGO patch

[squid-users] Digest + NTLM Auth

2005-09-20 Thread Dave Raven
Hi all, Is it possible to use digest as a failover to ntlmssp? E.g. in most configurations with ntlm the cache uses ntlm and then falls back to basic to authenticate browsers like netscape. Is it possible to make that fallback use digest authentication-ntlm, eliminating cleartext between

[squid-users] Digest + NTLM Auth

2005-09-20 Thread Dave Raven
Hi all, Is it possible to use digest as a failover to ntlmssp? E.g. in most configurations with ntlm the cache uses ntlm and then falls back to basic to authenticate browsers like netscape. Is it possible to make that fallback use digest authentication-ntlm, eliminating cleartext between

RE: [squid-users] Single Signon and Cache Peers

2005-09-13 Thread Dave Raven
Is anyone interested in this? We are willing to pay for the development. I have read up on it some more and it seems to be possible, but not as easy as I described below. -Original Message- From: Dave Raven [mailto:[EMAIL PROTECTED] Sent: 31 August 2005 10:22 AM To: squid-users@squid

RE: [squid-users] Single Signon and Cache Peers

2005-09-13 Thread Dave Raven
Is anyone interested in this? We are willing to pay for the development. I have read up on it some more and it seems to be possible, but not as easy as I described below. -Original Message- From: Dave Raven [mailto:[EMAIL PROTECTED] Sent: 31 August 2005 10:22 AM To: squid-users@squid

[squid-users] Single Signon and Cache Peers

2005-08-31 Thread Dave Raven
Hi all, A while ago I did a few tests to see why single signon was breaking through cache peers. It seems like a valid single signon request comes with a DOMAIN\user format, and no domain once its passed through the peers - causing it to fail? I did it a long time ago and didn't really do

[squid-users] Single Signon and Cache Peers

2005-08-31 Thread Dave Raven
Hi all, A while ago I did a few tests to see why single signon was breaking through cache peers. It seems like a valid single signon request comes with a DOMAIN\user format, and no domain once its passed through the peers - causing it to fail? I did it a long time ago and didn't really do

RE: [squid-users] HTTP1.1 Protocol

2005-06-07 Thread Dave Raven
Not as far as I know - pretty sure infact. The main reason for this has something to do with hop to hop gzip, but its getting pretty close. Someone else can give you more info hopefully -Original Message- From: squid squid [mailto:[EMAIL PROTECTED] Sent: 07 June 2005 07:06 AM To:

RE: [squid-users] HTTP1.1 Protocol

2005-06-07 Thread Dave Raven
Not as far as I know - pretty sure infact. The main reason for this has something to do with hop to hop gzip, but its getting pretty close. Someone else can give you more info hopefully -Original Message- From: squid squid [mailto:[EMAIL PROTECTED] Sent: 07 June 2005 07:06 AM To:

RE: [squid-users] User Authentification ?

2005-06-06 Thread Dave Raven
Afaik the only way is using challenge/response - you'll need winbindd to communicate with the logon server as the doze session (u/p) isn't in cleartext. On the note winbindd support is pretty reliable - maybe we can solve your problem with that? -Original Message- From: Phibee Network

RE: [squid-users] User Authentification ?

2005-06-06 Thread Dave Raven
Afaik the only way is using challenge/response - you'll need winbindd to communicate with the logon server as the doze session (u/p) isn't in cleartext. On the note winbindd support is pretty reliable - maybe we can solve your problem with that? -Original Message- From: Phibee Network

RE: [squid-users] Stopping Movies / Sound traffic in Squid using ACL

2005-06-06 Thread Dave Raven
I haven't tested this, but you may just have to fiddle with the regex or my late night typo's acl blockedstuff regex ^.*\.(mpe|mov|wmf|asf|divx|mpg|mpeg|mp3|wav|avi|ogg)$ http_access deny blockedstuff -Original Message- From: John Walubengo [mailto:[EMAIL PROTECTED] Sent: 06 June 2005

RE: [squid-users] Stopping Movies / Sound traffic in Squid using ACL

2005-06-06 Thread Dave Raven
I haven't tested this, but you may just have to fiddle with the regex or my late night typo's acl blockedstuff regex ^.*\.(mpe|mov|wmf|asf|divx|mpg|mpeg|mp3|wav|avi|ogg)$ http_access deny blockedstuff -Original Message- From: John Walubengo [mailto:[EMAIL PROTECTED] Sent: 06 June 2005

[squid-users] Myip / cache peer problems

2005-04-18 Thread Dave Raven
Hi all, I'm having a problem using a combination of myip and cache peer access. What I want to do is say if a user is pointing to the cache on ip 10.10.5.199 go to cache peer 10.10.0.1 and if its pointing to me on 10.10.5.200 go to the cache peer on 10.10.0.2 To do this I'm using two

[squid-users] Myip / cache peer problems

2005-04-18 Thread Dave Raven
Hi all, I'm having a problem using a combination of myip and cache peer access. What I want to do is say if a user is pointing to the cache on ip 10.10.5.199 go to cache peer 10.10.0.1 and if its pointing to me on 10.10.5.200 go to the cache peer on 10.10.0.2 To do this I'm using two

RE: [squid-users] Myip / cache peer problems

2005-04-18 Thread Dave Raven
Yes, and if I configure both to use round robin or use both with icp they both work.. Its something to do with the _access and myip I hope to have more info tomorrow though -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: 18 April 2005 09:52 PM To: Dave Raven

RE: [squid-users] Myip / cache peer problems

2005-04-18 Thread Dave Raven
Yes, and if I configure both to use round robin or use both with icp they both work.. Its something to do with the _access and myip I hope to have more info tomorrow though -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: 18 April 2005 09:52 PM To: Dave Raven

[squid-users] cache_peer_access limitations

2005-04-03 Thread Dave Raven
Hi all,     I have a rather serious problem – and can’t think of any way to solve it. I have a cache hierarchy with TWO cache boxes running on different internet links at the core, then 10 regional cache’s peering to the top. The reason I say two, is because one link is for a specific set

[squid-users] cache_peer_access limitations

2005-04-03 Thread Dave Raven
Hi all,     I have a rather serious problem – and can’t think of any way to solve it. I have a cache hierarchy with TWO cache boxes running on different internet links at the core, then 10 regional cache’s peering to the top. The reason I say two, is because one link is for a specific set

RE: [squid-users] Challenge/Response with Cache Peers (NTLM)

2005-01-31 Thread Dave Raven
-Original Message- From: Kinkie [mailto:[EMAIL PROTECTED] Sent: 29 January 2005 11:34 AM To: squid-users@squid-cache.org Subject: Re: [squid-users] Challenge/Response with Cache Peers (NTLM) On Thu, 2005-01-27 at 21:26 +0200, Dave Raven wrote: Hi all, I've been testing the behavior

RE: [squid-users] Challenge/Response with Cache Peers (NTLM)

2005-01-31 Thread Dave Raven
-Original Message- From: Kinkie [mailto:[EMAIL PROTECTED] Sent: 29 January 2005 11:34 AM To: squid-users@squid-cache.org Subject: Re: [squid-users] Challenge/Response with Cache Peers (NTLM) On Thu, 2005-01-27 at 21:26 +0200, Dave Raven wrote: Hi all, I've been testing the behavior

[squid-users] Challenge/Response with Cache Peers (NTLM)

2005-01-27 Thread Dave Raven
Hi all, I've been testing the behavior of Challenge/Response today with cache peers. the versions etc are not relevant as I have Challenge/Response and BASIC working fine if I point directly to the unit. Below is a makeshift diagram of how I've set this up now: -

[squid-users] Challenge/Response with Cache Peers (NTLM)

2005-01-27 Thread Dave Raven
Hi all, I've been testing the behavior of Challenge/Response today with cache peers. the versions etc are not relevant as I have Challenge/Response and BASIC working fine if I point directly to the unit. Below is a makeshift diagram of how I've set this up now: -

[squid-users] Cache_peer_access + NTLM groups

2004-08-25 Thread Dave Raven
Hi all, Is there any way that I might direct requests to different cache peers based on a group reply from an NTLM authentication? I wish to make a certain group go through one peer, and another group through the other... Are there any other ways of doing this? attachment: winmail.dat

RE: [squid-users] Uses a Windows NT authentication domain.

2004-08-21 Thread Dave Raven
Look into NTLM with squid, there is a lot of info on the site (www.squid-cache.org) -Original Message- From: Hiu Yen Onn [mailto:[EMAIL PROTECTED] Sent: 21 August 2004 07:12 PM To: [EMAIL PROTECTED] Subject: [squid-users] Uses a Windows NT authentication domain. hi, i am new to squid,

RE: [squid-users] user auth

2004-08-21 Thread Dave Raven
Absolutely, look into the possibility of a redirector like squidGuard as well as using basic auth. You can find more about it on www.squid-cache.org - you'll need to create password files etc., but its not terribly difficult, and its very possible. -Original Message- From: Barry Rumsey

RE: [squid-users] user auth

2004-08-21 Thread Dave Raven
I suspect the problem is that you allow non-authenticated traffic as well - you need to disallow all http access by default and allow authenticated users - something like this: acl NCSA proxy_auth REQUIRED http_access allow NCSA http_access deny all -Original Message- From: Barry Rumsey

RE: [squid-users] ip setup

2004-08-21 Thread Dave Raven
That's squid connecting to the foreign websites on port 80 (http). If you want to firewall it allow squid to setup a state out on port 80 (make sure its statefull), and firewall everything else in... You don't have a security problem with it connected from a random port to port 80 on another

RE: [squid-users] Squid + ICAP

2004-08-21 Thread Dave Raven
I do, I have been unable to get it working with the latest version though - so I'm using a snapshot from the page. It appears to be perfectly compliant so it should work with Symantec - as far as I know the only problem is with Trends IWSS. -Original Message- From: Christoph Nagelreiter

RE: [squid-users] LDAP groups with a redirector

2004-08-20 Thread Dave Raven
splitting it etc? Thanks again Dave -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: 19 August 2004 02:56 PM To: Dave Raven Cc: [EMAIL PROTECTED] Subject: Re: [squid-users] LDAP groups with a redirector On Thu, 19 Aug 2004, Dave Raven wrote: I have been looking

RE: [squid-users] hierarchy problerms

2004-08-20 Thread Dave Raven
Add login=PASS to the end of your cache peer line, this will instruct it to pass up any login information in the request. -Original Message- From: Swaroop Shere [mailto:[EMAIL PROTECTED] Sent: 20 August 2004 09:40 AM To: [EMAIL PROTECTED] Subject: [squid-users] hierarchy problerms

RE: [squid-users] squid chroot jail no running copy error

2004-08-20 Thread Dave Raven
I'm not what you would call a Fedora pro, but I suspect you will need to chroot to the enviroment in order to run the squid -k reconfigure... E.g. chroot /wka usr/local/squidSTABLE6/sbin/squid -k reconfigure ? -Original Message- From: Rick G. Kilgore [mailto:[EMAIL PROTECTED] Sent: 20

RE: [squid-users] Transparent config OK if not used?

2004-08-20 Thread Dave Raven
As long as your iptables rules only affect traffic that's not destined to your squid port, you should be fine -Original Message- From: Steve Snyder [mailto:[EMAIL PROTECTED] Sent: 20 August 2004 04:06 PM To: [EMAIL PROTECTED] Subject: [squid-users] Transparent config OK if not used? I

[squid-users] LDAP groups with a redirector

2004-08-19 Thread Dave Raven
Hi all, I have been looking into the group_ldap acl's in squid, and they look great. My problem is, are there any redirectors or ways to pass the group to a redirector, that will act on these ldap groups. Or ones with ldap support? At the moment I'm using squidguard and its not looking

[squid-users] FW: LDAP search through a AD Forest

2004-08-16 Thread Dave Raven
Hi all, I have ldap pretty much fully working, but I'm wondering if its possible to search through multiple domains, under one AD forest (ldap connection)? Other web cache's seem to have problems with this is squid able to do it? It is in Native mode so we have to use Kerberos to connect

[squid-users] IWSS + squid-icap

2004-07-27 Thread Dave Raven
Hello all, Saw some mention on the lists of a patch needed to use IWSS, is it possible to just change an option on the Trend server to fix it? Or do we defiantly need the patch? If so, please can someone tell me how to get the patch - on the list it says email protected for the contact

[squid-users] IWSS + squid-icap

2004-07-27 Thread Dave Raven
Hello all, Saw some mention on the lists of a patch needed to use IWSS, is it possible to just change an option on the Trend server to fix it? Or do we defiantly need the patch? If so, please can someone tell me how to get the patch - on the list it says email protected for the contact

[squid-users] ICAP configuration

2004-05-14 Thread Dave Raven
the request to go through BOTH servers... Are my assumptions correct? Thanks Dave Raven

[squid-users] ICAP build

2004-04-20 Thread Dave Raven
Hi all, I've been trying to build squid with ICAP support lately (applied the patch to the latest squid) and with the squid-icap-2.5-200404051745 snapshot and had no success (lots of automake/autoconf errors with the snapshot and a lot of errors in icap_common.c with the patch). Is anyone

RE: [squid-users] ICAP build

2004-04-20 Thread Dave Raven
] Error 1 Any help would be MOST appreciated, thanks Dave -Original Message- From: Dave Raven [mailto:[EMAIL PROTECTED] Sent: 20 April 2004 12:03 PM To: [EMAIL PROTECTED] Subject: [squid-users] ICAP build Hi all, I've been trying to build squid with ICAP support lately

[squid-users] Squid_ldap_auth with groups

2004-02-24 Thread Dave Raven
Hi all, I have my ldap auth working with users and all now, and -f sAMAccountName=%s works perfect, but I need to also check that the user is a member of iNet Users. Now my first guess is that maybe its not working because I don't have quotes around iNet users - but I can't get it to

[squid-users] Memory usage

2004-02-20 Thread Dave Raven
using so much memory ? It seems to have only started post ldap auth a few days ago... But that's not definate Thanks Dave Raven

[squid-users] Squid_ldap_auth stupid question

2004-02-17 Thread Dave Raven
Hi all, I have a stupid question with ldap_auth, its really a squid question - when I use a user of test\test to get in the ldap domain it removes the \ on the authenticate parameters line, if I escape it (\\) it puts two backslashes - I've tried

RE: [squid-users] Squid_ldap_auth stupid question

2004-02-17 Thread Dave Raven
To bind a search user - I have to use the test\ part or the login fails and I can't change the AD server.. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: 17 February 2004 01:40 PM To: Dave Raven Cc: [EMAIL PROTECTED] Subject: Re: [squid-users] Squid_ldap_auth

RE: [squid-users] Squid_ldap_auth stupid question

2004-02-17 Thread Dave Raven
- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: 17 February 2004 02:21 PM To: Dave Raven Cc: [EMAIL PROTECTED] Subject: RE: [squid-users] Squid_ldap_auth stupid question On Tue, 17 Feb 2004, Dave Raven wrote: To bind a search user - I have to use the test\ part or the login fails and I

[squid-users] squid_ldap_auth

2004-02-06 Thread Dave Raven
Hi all, I have a need with squid_ldap_auth, and am entirely unsure how to get it working.. I need to autheticate users in one OU, but only if they are a member of a group in another OU -- This would be the user: CN=Test

RE: [squid-users] squid_ldap_auth

2004-02-06 Thread Dave Raven
BSD - ldap directory is an AD server running 2000 -Original Message- From: Lewars, Mitchell (EM, PTL) [mailto:[EMAIL PROTECTED] Sent: 06 February 2004 01:55 PM To: 'Dave Raven' Subject: RE: [squid-users] squid_ldap_auth Are you running on Linux ? -Original Message- From: Dave

RE: [squid-users] squid 2.5.STABLE4 + FreeBSD 5.x = crash after a while...

2004-02-06 Thread Dave Raven
Agreed - info from cache.log and try recompile your squid now with bsd5 -Original Message- From: Elsen Marc [mailto:[EMAIL PROTECTED] Sent: 06 February 2004 03:08 PM To: Evren Yurtesen; [EMAIL PROTECTED] Subject: RE: [squid-users] squid 2.5.STABLE4 + FreeBSD 5.x = crash after a while...

Re: [squid-users] Squid

2003-04-01 Thread Dave Raven
check cache.log tail cache.log and mail if you can figure it out from there.. --Dave - Original Message - From: Kevin Hoffer [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 5:31 PM Subject: [squid-users] Squid : Squid will not stay running. I start it up with :

Re: [squid-users] Ftp help

2003-04-01 Thread Dave Raven
if people are pointing to squid. not transparently. Then it will log all requests as it does with http. --Dave - Original Message - From: darlene [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 6:29 PM Subject: [squid-users] Ftp help : : Is it possible to log

Re: [squid-users] Logs and Aol.

2003-04-01 Thread Dave Raven
acl aol dst 64.12.163.198 http_access allow aol dont make aol go through authentication you probably find your users aren't auth'ing with aol... I assume they have multiple ips though so... - Original Message - From: Ampugnani, Fernando [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent:

[squid-users] 2.5-stable1: mbuf clusters on fBSD

2003-03-26 Thread Dave Raven
Hi all, Having some serious troubles with a clients squid box, its running on FreeBSD-4.7-RELEASE-p9; and I've just installed the squid through ports, -STABLE1 + all the patches in ports Makefile. 26229/26624/133120 mbufs in use (current/peak/max): 23620 mbufs allocated to