Re: [squid-users] Issue on COSS storage scheme(Please help me)

2009-02-03 Thread Henrik Nordstrom
tis 2009-02-03 klockan 13:30 +0900 skrev Ja-Ryeong Koo: > > Whenever I do "squid -z" for COSS storage scheme, the amount of the > size of COSS file is allocated to "used memory". > > So, when I do "squid -z" for 4G COSS file, "used memory" on "free -m" > also becomes about 4G. You need to read

RE: [squid-users] Re: WCCP configuration

2009-01-11 Thread Henrik Nordstrom
> From: vivek...@aol.in [mailto:vivek...@aol.in] > We have configured as squid+tproxy. The squid ip is not displayed and > only the client ip is displayed when we do the proxy test. But after > configuring wccp we find that the server ip is displayed in the proxy > test instead of the client ip.

[squid-users] Re: WCCP configuration

2009-01-07 Thread Henrik Nordstrom
ons 2009-01-07 klockan 08:46 -0500 skrev vivek...@aol.in: > wccp2_router xxx.xx.xxx.xxx > wccp_version 4 > wccp2_forwarding_method 1 > wccp2_return_method 1 > wccp2_assignment_method 1 > wccp2_service dynamic 80 > wccp2_service_info 80 protocol=tcp flags=src_ip_hash priority=240 > ports=80 > wccp

Re: [squid-users] sarg segment fault must clean squid access.log to solved it

2008-12-15 Thread Henrik Nordstrom
The information requested is needed for anyone looking into the problem. Regards Henrik On Mon, 2008-12-15 at 08:17 +0700, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: > @hendrik : > to bad i dont know about C Programming :( > > @all " any solution : ? > > On Sun, Dec 14, 2008 at 5:

Re: [squid-users] WCCP2 service info

2008-12-15 Thread Henrik Nordstrom
On Sun, 2008-12-14 at 20:47 +, kgardenia42 wrote: > Yeah I thought so too but unless I missed something that doesn't > appear to work, or not on the latest 2.7 release. For the record, I > was able to get it working by commenting out these lines : > > if (!(flags & WCCP2_SERVICE_PORTS_DE

Re: [squid-users] Negative Byte Hit Ratio

2008-12-13 Thread Henrik Nordstrom
On Sun, 2008-12-14 at 03:49 +0600, Nyamul Hassan wrote: > Could I be missing something? Any advise would be greatly appreciable. Any range_offset_limit settings? retry_on_error? Regards Henrik

Re: [squid-users] TR: [Bulk] Re: [squid-users] Certificate Validation problem due to Sha 256 message digest

2008-12-13 Thread Henrik Nordstrom
On Fri, 2008-12-12 at 14:53 +0100, Raphael wrote: > I use Openssl 0.9.8i which manages to check the certificate. I am also able > to get the sha256 digest of a file : > openssl dgst -sha256 /root/openssl-0.9.8i.tar.gz > is working and giving me the message digest. That's fine. But the digest algo

Re: [squid-users] Squid rpms for EL4

2008-12-13 Thread Henrik Nordstrom
On Fri, 2008-12-12 at 12:25 +, Vandaman wrote: > I tried searching the archives but I didn't find an answer. > Are there any rpms for EL4 (RHEL 4/CentOS 4) for > > - 2.7 STABLE5 Not at this time. > - 2.6 STABLE22 Not sure about RHEL, but there is 2.6.STABLE22 RPM for Fedora 8 and should b

Re: [squid-users] sarg segment fault must clean squid access.log to solved it

2008-12-13 Thread Henrik Nordstrom
On Fri, 2008-12-12 at 17:55 +0700, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: > SARG: Reading access log file: /var/log/squid/access.log > Segmentation fault Should be easy to fix if you know a little C programming. Or even if you don't collect information on the crash and post them hoping that someone else p

Re: [squid-users] Time based ACL

2008-12-12 Thread Henrik Nordstrom
On Thu, 2008-12-11 at 13:54 -0900, Chris Robertson wrote: > Is it possible to combine multiple times, so acl "t" if defined like... > > acl t time 18:00-23:59 > acl t time 00:00-02:00 > > ...would work as requested? Yes, should work. Was broken some (several) years ago, but should work in all

Re: [squid-users] Netscape to Squid conversion Issues

2008-12-10 Thread Henrik Nordstrom
tor 2008-12-11 klockan 12:51 +1300 skrev Amos Jeffries: > > So is DHCP. (or the IPv6 version, used for distributing parameters like > > this even if the address as such is autoconfigured) > > There was no DHCPv6 option for WPAD/PAC when I checked last year. Technically there is none in DHCP(v4)

Re: [squid-users] Netscape to Squid conversion Issues

2008-12-10 Thread Henrik Nordstrom
ons 2008-12-10 klockan 15:31 +0100 skrev Matus UHLAR - fantomas: > However the log line above looks to me (and to Amos apparently too) as > intercepted request. No. It's the PAC request. The browser as manually configured to use http://proxy.host.net:8080/ as PAC address. Quote from the orig

Re: [squid-users] Squid3 just Died

2008-12-10 Thread Henrik Nordstrom
ons 2008-12-10 klockan 06:25 -0800 skrev Chuck Kollars: > Does performance really continue to improve significantly with increasing > cache size even when the cache is already very very large? At least up to a month worth of cache growth shows noticeable increases in hit ratio, both bytes and r

Re: [squid-users] Squid3 just Died

2008-12-10 Thread Henrik Nordstrom
ons 2008-12-10 klockan 00:00 -0400 skrev Wilson Hernandez - MSD, S. A.: > I then decided to also delete, actually rename, access.log and store.log > files. This time when I restarted, it worked. I had to do it that way > because that was the only solution I found. I there is another way to > re

Re: [squid-users] Netscape to Squid conversion Issues

2008-12-10 Thread Henrik Nordstrom
ons 2008-12-10 klockan 10:53 +1300 skrev Amos Jeffries: > > 10.49.0.145 - - [30/Apr/2001:16:28:40 -0400] "GET / HTTP/0.0" 400 1094 > > NONE:NONE > > That is a transparently intercepted request. But your squid.conf does > not appear to include any "http_port ... transparent". THe browsers are c

Re: [squid-users] Netscape to Squid conversion Issues

2008-12-10 Thread Henrik Nordstrom
ons 2008-12-10 klockan 10:29 +0100 skrev Jan Welker: > Thanks for your help. It got me closer. My current config looks like this: > > http_port 8080 transparent > cache_peer localhost parent 80 0 no-query originserver name=pac > acl pac dstdomain proxy.company.com 192.168.0.10 > cache_peer_access

Re: [squid-users] issue with htcp support on squid

2008-12-09 Thread Henrik Nordstrom
tis 2008-12-09 klockan 13:19 -0800 skrev Bostonian: > Thank you for your help, Chris. > > I turned on all the debug_options you suggested and found out the > problem. By mistake I disabled > icp_port to use htcp. The log file indicated that no ICP socket. The > problem is solved now. Please file

RE: [squid-users] snmpwalk issue squid 2.5

2008-12-09 Thread Henrik Nordstrom
tis 2008-12-09 klockan 11:02 -0800 skrev Matt Ausmus: > Whoops! Meant for my response to go to the message board for anyone else > having this issue. Henrik, your idea worked perfectly. I thing I found was > if I used multiple variables (chapman1 chapman2 chapman3 where each variable > is an

Re: [squid-users] SquidNT 2.6 Stable 16 - Uploading Files Problem

2008-12-09 Thread Henrik Nordstrom
ons 2008-12-10 klockan 07:18 +1030 skrev web: > Hi, I have a number of SquidNT 2.6 Stable 17 caches running on Windows > XP machines. I am being told that users are having problems uploading > files to webmail apps and other sites (moodle) that allow for > uploading. I am not sure what I should be

Re: [squid-users] Netscape to Squid conversion Issues

2008-12-09 Thread Henrik Nordstrom
tis 2008-12-09 klockan 15:03 +0100 skrev Jan Welker: > A. Netscape browsers with manual proxy servers set up for http and > https as proxy.host.net:8080 > B. Netscape browsers with automatic proxy configuration with URL setup > as proxy.host.net:8080 (note they're the same). Ugh.. This kind of s

Re: [squid-users] Era time in logs from GMT to my GMT

2008-12-09 Thread Henrik Nordstrom
mån 2008-12-08 klockan 21:09 -0600 skrev Luis Daniel Lucio Quiroz: > Is there a way to tell squid to log with a -6 offset? I dont want to move my > time at my server, because all other logs has time correctly. The default squid log format is timezone neutral, logging UNIX timestamps instead of

Re: [squid-users] WCCP2 service info

2008-12-08 Thread Henrik Nordstrom
mån 2008-12-08 klockan 20:51 + skrev kgardenia42: > Hi, > > When defining a wccp2 dynamic service group it seems that it only > allows for a finite list of up to 8 ports which should be redirected > to the squid box. In my case I don't want to statically list the > ports to be redirected in t

Re: [squid-users] snmpwalk issue squid 2.5

2008-12-08 Thread Henrik Nordstrom
mån 2008-12-08 klockan 10:34 -0800 skrev Ausmus, Matt: > First off , I'm posting this question here because it appears the SNMP > mailing list is now defunct. If this is the wrong list to post this please > let me know and I'll repost it in the correct one. > > First I'm running squid with snmp

Re: [squid-users] Problem with Squid 3 and secure web sites

2008-12-08 Thread Henrik Nordstrom
mån 2008-12-08 klockan 08:33 -0800 skrev Sean Eckton: > We are currently using Squid 3 3.0.STABLE9-6.1 on SuSE Linux > Enterprise Server 10 SP1 (latest version I could find built on > opensuse.org for SLES). The problem we're having is that some web > sites either don't work or are so slow they're

Re: [squid-users] redirect large files via second provider

2008-12-08 Thread Henrik Nordstrom
mån 2008-12-08 klockan 07:30 -0800 skrev mvard: > my squid box has 2 internet providers. > how can it be configured to proxy large file downloads via concrete provider? It's not possible to do it 100% right, but you can make very good approximations. Basically it boils down to using url patters t

Re: [squid-users] why http code status is 0 when tcp_hit:none ?

2008-12-08 Thread Henrik Nordstrom
mån 2008-12-08 klockan 09:28 +0800 skrev William Hanwoody: > I have abserved squid logs at that time. > When this happened, the response time of squid is often more than 30 seconds, > and no other urls are abnormal. Are you using any of the following features in squid.conf? external_acl_type acl

Re: [squid-users] Number of Spindles

2008-12-07 Thread Henrik Nordstrom
mån 2008-12-08 klockan 04:10 +0600 skrev Nyamul Hassan: > Ok. Then, for LFUDA, is there a way to tell how often the cache is being > revised entirely? There is no such thing for any of the policies. In all of the policies the cache is gradually replaced as needed by removing what the policy con

Re: [squid-users] Number of Spindles

2008-12-07 Thread Henrik Nordstrom
sön 2008-12-07 klockan 20:48 +0100 skrev Henrik Nordstrom: > sön 2008-12-07 klockan 23:30 +0600 skrev Nyamul Hassan: > > > lör 2008-12-06 klockan 08:06 -0500 skrev Adrian Chadd: > > >> I thought that the storedir page listed the number of objects in the > >

Re: [squid-users] How to interrupt ongoing transfers?

2008-12-07 Thread Henrik Nordstrom
mån 2008-12-08 klockan 00:31 +0530 skrev Kaustav Dey Biswas: > Actually, I need to implement the quota system as a part of my final > year Engineering project. I am planning to make it as a sort of an > add-on package over Squid, which will be compatible with all current > versions of Squid. As yo

Re: [squid-users] Number of Spindles

2008-12-07 Thread Henrik Nordstrom
sön 2008-12-07 klockan 23:30 +0600 skrev Nyamul Hassan: > > lör 2008-12-06 klockan 08:06 -0500 skrev Adrian Chadd: > >> I thought that the storedir page listed the number of objects in the > >> cache. > > > > It does. > > > I can't seem to decipher which statistic value indicates the number of > o

Re: [squid-users] Current List of Good Analysis Tools?

2008-12-07 Thread Henrik Nordstrom
tor 2008-12-04 klockan 09:50 -0800 skrev Mike Ely: > Am wondering what folks out there are using for squid analysis. Our current > need is for something that breaks usage down by user, preferably with > manager-friendly purty graphs. > > The list at http://www.squid-cache.org/Scripts/ is pretty

Re: [squid-users] Sign out

2008-12-07 Thread Henrik Nordstrom
tor 2008-12-04 klockan 11:41 -0600 skrev [EMAIL PROTECTED]: > Why didn't you just give me the answer instead of a lesson? I still have to > write yet again now. Please do, as I have no clue what your question was. It got deleted when deleting the thread you "responded" to. So klick on "New messa

Re: [squid-users] NTLM Password Cache on Squid ?

2008-12-07 Thread Henrik Nordstrom
ons 2008-12-03 klockan 18:13 +0100 skrev Phibee Network Operation Center: > - We use Squid with Windbind/NTLM auth > > - When we change a password on the Active Directory, > squid don't see the change before a lot of hours ... As others already said it's an AD feature to make sure th

Re: [squid-users] SSL on Squid 2.7 Windows

2008-12-07 Thread Henrik Nordstrom
ons 2008-12-03 klockan 06:25 -0800 skrev TheoB: > I have a running http reverse proxy setup. Now I want to add SSL. > > The first thing I try is to make squid listening on port 443: > > https_port 192.168.1.151:443 accel cert=C:/squid/ssl/xxx.pem > key=C:/squid/ssl/xxx.pem defaultsite=mirror.xxx.

Re: [squid-users] Regex Problem - Squid 3.0STABLE10

2008-12-07 Thread Henrik Nordstrom
ons 2008-12-03 klockan 18:43 +1300 skrev Amos Jeffries: > Is there someone with expertise in the types of regex. Who can say > whether or not the pcre library is capable of seamlessly handling the > old basic regex patterns as well as the pcre patterns? PCRE only hanles Perl regex, not POSIX r

Re: [squid-users] Squid Fails on Reconfigure

2008-12-07 Thread Henrik Nordstrom
lör 2008-12-06 klockan 14:52 -0500 skrev Rick Chisholm: > there might be a common denominator here - this is happening on a Dell > SC1435, dual-core Opteron 2212... maybe it's an AMD thing. That may > change my plans for another server. Unlikely. More likely something else. Regards Henrik

Re: [squid-users] Squid Fails on Reconfigure

2008-12-07 Thread Henrik Nordstrom
tis 2008-12-02 klockan 09:40 -0500 skrev Rick Chisholm: > I'm having a recurring issue with squid 2.7STABLE5 on FreeBSD 6.3 - part > of the problem is that I cannot pinpoint the cause. Often (though not > always) when squid -k reconfigure is run squid goes a bit haywire and > maxes out one core

Re: [squid-users] Number of Spindles

2008-12-07 Thread Henrik Nordstrom
lör 2008-12-06 klockan 08:06 -0500 skrev Adrian Chadd: > I thought that the storedir page listed the number of objects in the > cache. It does. Regards Henrik

Re: [squid-users] Number of Spindles

2008-12-07 Thread Henrik Nordstrom
mån 2008-12-01 klockan 11:33 +1300 skrev Amos Jeffries: > > sön 2008-11-30 klockan 09:56 +0600 skrev Nyamul Hassan: > > > >> "The primary purpose of these tests is to show that Squid's performance > >> doesn't increase in proportion to the number of disk drives. Excluding > >> other > >> factors,

Re: [squid-users] Fwd: website problem via squid

2008-12-07 Thread Henrik Nordstrom
mån 2008-11-24 klockan 17:46 -0600 skrev Joe Pukepail: > Hello, > I'm having problems with www.morgankeegan.com especially this page > http://www.morgankeegan.com/ECM/ECMHome.htm when accessed through > squid. When we attempt to view this site it does not finish rendering > (we are using IE, have

Re: [squid-users] squid_ldap_group against nested groups/Ous

2008-12-07 Thread Henrik Nordstrom
mån 2008-11-24 klockan 13:04 -0800 skrev Mike Ely: > directly a member of the acl group. What I need to do is be able to use > nested groups. (Sorry, it looks like I've stated this two different ways) nested groups unfortunately does not map very well to LDAP, and is not supported by squid_ldap

Re: [squid-users] Understanding Expect 100 default setting

2008-12-07 Thread Henrik Nordstrom
tor 2008-12-04 klockan 11:45 + skrev Paul Cocker: > What I'm looking for is a brief, technical explanation of why this > setting defaults to off rather than on. I didn't really get from that > thread why the defaults were the way they were, especially as the > behaviour described with the Expe

Re: [squid-users] why http code status is 0 when tcp_hit:none ?

2008-12-07 Thread Henrik Nordstrom
tor 2008-12-04 klockan 15:42 +0800 skrev William Hanwoody: > squid log: > 218.108.56.170 - - [03/Dec/2008:20:01:08 +0800] > 6582 "GET /public/js/livecast/function.js HTTP/1.1" 0 > 0 "http://xxx.com.cn/livecast/k/live.php?id=313"; "Mozilla/4.0 (compatible; > MSIE 6.0; Windows NT 5.1; SV1; .NET CL

Re: [squid-users] Routing requests issues in hierarchy setup

2008-12-07 Thread Henrik Nordstrom
ons 2008-12-03 klockan 20:09 -0200 skrev Lucas Brasilino: > I'm getting puzzled with routing requests with Squid 2.7STABLE5 and how > 'always_direct' and 'never_direct' works. always_direct allow means that this Squid MUST NOT use any cache_peer while forwarding the request, instead it must go to

Re: [squid-users] Squid3 + Digestauth agains a HTTP/FTP ntlm site aware

2008-12-07 Thread Henrik Nordstrom
ons 2008-12-03 klockan 12:37 -0600 skrev Luis Daniel Lucio Quiroz: > In sites such as ftp://partnerweb.trendmicro.com.br using squid it fails. It > seems that this site use NTLM and squid get confuses about authentication > user > for squid and then authenticating site using NTLM. No Squid ve

Re: [squid-users] Why don't I look local

2008-12-01 Thread Henrik Nordstrom
mån 2008-12-01 klockan 17:13 +1000 skrev Jonathan Hunt: > Hi, > > I am running Squid on my work computer and using it at remotely. What > I am wanting to do is be able to use journal remotely that my > university has a site-license for (when I am traveling). > I've set up options > via off > and >

Re: [squid-users] "FATAL: Cannot open 'on' for writing." Solution for anyone having this problem.

2008-12-01 Thread Henrik Nordstrom
tis 2008-12-02 klockan 01:24 +1300 skrev Amos Jeffries: > Thanks. Yes it was the log lines. > Those two are now expecting the filenames to log to not just on/off toggles. > > emulate_httpd_log is still and on/off since it only affects the > access_log files. You may need to keep it unchanged for

Re: [squid-users] TCP connections keep alive problem after 302 HTTP response from web

2008-11-30 Thread Henrik Nordstrom
sön 2008-11-30 klockan 12:14 -0500 skrev Adrian Chadd: > Good detective work! I'm not sure whether this is a requirement or > not. Henrik would know better. Not intentional. > Henrik, is this worthy of a bugzilla report? Yes. Regards Henrik signature.asc Description: Detta är en digitalt sign

Re: [squid-users] Number of Spindles

2008-11-30 Thread Henrik Nordstrom
sön 2008-11-30 klockan 09:56 +0600 skrev Nyamul Hassan: > "The primary purpose of these tests is to show that Squid's performance > doesn't increase in proportion to the number of disk drives. Excluding other > factors, you may be able to get better performance from three systems with > one dis

Re: [squid-users] assertion failed: store_swapout.cc:317: "mem->swapout.sio == self"

2008-11-30 Thread Henrik Nordstrom
File a bug report, preferably with a stack backtrace. Regards Henrik lör 2008-11-29 klockan 03:24 +0200 skrev Marcel Grandemange: > Looks like squid broke itself again. > If anybody could advise me as to what's happening here it would be great. > > Im thinking the move to v3 has been disasterous

Re: [squid-users] Read Error - 104 connection reset by peer

2008-11-30 Thread Henrik Nordstrom
fre 2008-11-28 klockan 13:43 +0100 skrev Jevos, Peter: > I'd like to ask you if these error is about the proxy error or network > problem > > Read Error - 104 connection reset by peer - error condition while > reading data from network If you see this often on random major sites which works wel

Re: [squid-users] outside squid link overload.

2008-11-30 Thread Henrik Nordstrom
fre 2008-11-28 klockan 17:52 +0700 skrev Alexey Kovrizhnykh: > Question: How to make Squid not to download a new part of file unless the > old part is already loaded by the user? Squid only buffers a small amount (16KB) plus the TCP window buffering done by the OS. It's hard to say exactly w

Re: [squid-users] Squid default log rotation period

2008-11-21 Thread Henrik Nordstrom
On tor, 2008-11-20 at 11:09 -0800, kaustav_deybiswas wrote: > Henrik, > > I havent written any scripts, for sure. My crontab is empty, but squid still > rotates logs after every 7 days. I havent even configured anything relating > to log rotation in squid.conf. > > I am using squid-2.6.STABLE16-

Re: [squid-users] Very slow and high usage CPU on "Rebuilding storage"

2008-11-21 Thread Henrik Nordstrom
On tor, 2008-11-20 at 18:38 +0300, Alexey Vlasov wrote: > [pid 5875] stat("/var/cache/squid", {st_mode=S_IFDIR|0750, > st_size=4096, ...}) = 0 > [pid 5875] open("/proc/mounts", O_RDONLY) = 13 I wonder why /proc/mounts is read. It's not something intentionally done by Squid but rather done intern

Re: [squid-users] Squid default log rotation period

2008-11-20 Thread Henrik Nordstrom
On tor, 2008-11-20 at 07:05 -0800, kaustav_deybiswas wrote: > I have recently installed Squid and I found that Squid is automatically > rotating its logs every week. No it doesn't. But maybe you have a logrotate script doing the log rotation? Regards Henrik signature.asc Description: This is a

Re: [squid-users] Squid very slow

2008-11-20 Thread Henrik Nordstrom
On ons, 2008-11-19 at 22:06 -0400, Wilson Hernandez - MSD, S. A. wrote: > The dnsserver returned: > > Refused: The name server refuses to perform the specified operation. > > This means that: > > The cache was not able to resolve the hostname presented in the URL. > Check if the address

Re: [squid-users] cachemgr no Cache Client List

2008-11-20 Thread Henrik Nordstrom
On ons, 2008-11-19 at 19:26 -0500, Rick Chisholm wrote: > anytime I check the Cache Client List I get: > > Cache Clients: > TOTALS > ICP : 0 Queries, 0 Hits ( 0%) > HTTP: 0 Requests, 0 Hits ( 0%) > > even when I know the Cache has clients... it's weird. Probably you have set "client_db off" in

RE: [squid-users] NTLM auth popup boxes && Solaris 8 tuning for upgrade into 2.7.4

2008-11-19 Thread Henrik Nordstrom
On ons, 2008-11-19 at 20:29 +0100, [EMAIL PROTECTED] wrote: > okay but I already get 128 ntlm_auth processes running .. is this enough > for a load of 250 req/sec ?? Can't say. Do you get any relevant warnings in cache.log? And what does cachemgr say about the helper usage? > on the other hand,

Re: [squid-users] Different Auth methods depending who

2008-11-19 Thread Henrik Nordstrom
On ons, 2008-11-19 at 12:48 -0600, Luis Daniel Lucio Quiroz wrote: > I wonder to know if it is possible to tell squid to let some auth-methods > depending Browser. We have as a security policy to use digest, the fact is > that some clients are not digest-aware. Such as pidgin, so I wonder if w

RE: [squid-users] NTLM auth popup boxes && Solaris 8 tuning for upgrade into 2.7.4

2008-11-19 Thread Henrik Nordstrom
On ons, 2008-11-19 at 19:39 +0100, [EMAIL PROTECTED] wrote: > >>auth_param ntlm ttl > > > >do you advice using it because I do not find any reference on it on > squid configuration guide website. > > > > you spoke about ttl parameter .. do you advice using it ?? Not sure who spoke about an auth_

Re: [squid-users] Re: R: [squid-users] Connection to webmail sitesproblem using more than one parent proxy

2008-11-18 Thread Henrik Nordstrom
On tis, 2008-11-18 at 12:37 -0900, Chris Robertson wrote: > Care to expound on this? What cache_peer selection methods break with > ICP enabled? I'm not seeing anything regarding this in the > documentation (http://www.squid-cache.org/Doc/config/cache_peer/)... None or all depending on your v

RE: [squid-users] Downgrade from 3.0stable10 to 3.0stable9

2008-11-18 Thread Henrik Nordstrom
On tis, 2008-11-18 at 12:01 +0200, Marcel Grandemange wrote: > How and why would this happen? The box hasn't been powered off in months. > Also first time something like this has happened. > So far im guesing it was upgrade to stable 10 that mucked things up. > Personally ive never had so many iss

Re: [squid-users] Multiple site example

2008-11-18 Thread Henrik Nordstrom
On fre, 2008-11-14 at 13:24 -0800, Ramon Moreno wrote: > How do I configure this parameter for 3 sites while using the same > port? I am guessing, but would it be something like this: > http_port 80 accel defaultsite=bananas.mysite.com vhost > http_port 80 accel defaultsite=apples.mysite.com vhos

Re: [squid-users] Squid and Radius authentication

2008-11-18 Thread Henrik Nordstrom
On ons, 2008-11-12 at 21:45 -0600, Johnson, S wrote: > I'm trying to get the squid_radius_auth working and have tried to > manually connect to my Microsoft radius server. I cannot get an ok > for a response when manually testing the connection. Although, I can > see the attempts in my Microsoft r

Re: [squid-users] Downgrade from 3.0stable10 to 3.0stable9

2008-11-18 Thread Henrik Nordstrom
On tis, 2008-11-18 at 21:14 +1300, Amos Jeffries wrote: > Do you have the same 64/32 bit settings and --with-large-files on both > builds? Didn't we make the cache and swap.state format large-files independent in Squid-3? Regards Henrik signature.asc Description: This is a digitally signed me

Re: [squid-users] Re: squid_ldap_auth and passwords in clear text

2008-11-18 Thread Henrik Nordstrom
On sön, 2008-11-16 at 10:48 -0800, Chuck Kollars wrote: > Eavesdropping on all network traffic from any connection used to be a big > problem when network hubs repeated all traffic everywhere. Although Ethernet > has changed hugely, the old paranoia remains. Any modern device is > a "switch" (n

RE: [squid-users] very basic question on enforcing use of proxy

2008-11-18 Thread Henrik Nordstrom
On lör, 2008-11-15 at 14:24 -0800, Gregori Parker wrote: > You could enforce proxy-pac file via global policy, or depending on > your network equipment, you may be able to do policy-based routing > (route by port) and/or even wccp...there are a several ways to get > squid inbetween your users and t

Re: [squid-users] squid_ldap_auth and passwords in clear text

2008-11-18 Thread Henrik Nordstrom
On fre, 2008-11-14 at 10:31 -0600, Johnson, S wrote: > I just got the squid_ldap_auth working ok on my segment but when > watching the protocol analyzer I see that the auth requests against the > AD are coming in as clear text passwords. Is there anyway we can > encrypt the ldap domain requests?

Re: [squid-users] Squid in chroot jail reconfigure/rotate FATAL errors: SOLVED

2008-11-18 Thread Henrik Nordstrom
On fre, 2008-11-14 at 16:41 +0100, Rudi Vankemmel wrote: > I have seen quite some postings indicating errors when issuing a > squid -k reconfigure or squid -k rotate from within a chroot jail. -k rotate should work fine in a chroot, but -k reconfigure requires a bit of dual filesystem layout and r

Re: FW: [squid-users] Squid Stops Responding Sporadically

2008-11-18 Thread Henrik Nordstrom
On tor, 2008-11-13 at 19:40 +0200, Marcel Grandemange wrote: > Under further investigation system log file presented following: > > Nov 13 19:37:21 thavinci kernel: pid 66367 (squid), uid 100: exited on > signal 6 (core dumped) > Nov 13 19:37:21 thavinci squid[66118]: Squid Parent: child process

Re: [squid-users] problem with reply_body_max_size and external ACL

2008-11-18 Thread Henrik Nordstrom
On fre, 2008-11-14 at 02:05 +1300, Amos Jeffries wrote: > Based on this and a few other occurrences I'm beginning to suspect that > credential re-checks are missing on all reply controls. Also reply_body_max_size is a "fast" acl lookup. Regards Henrik signature.asc Description: This is a digi

Re: [squid-users] About squid ICAP implementation

2008-11-18 Thread Henrik Nordstrom
On lör, 2008-11-15 at 05:51 +0900, Takashi Tochihara wrote: > I think to send "Allow: 204" & Preview: , squid must buffer not the > whole message, but the whole *Previewed* message. (part of the message) "Allow: 204" is not related to previews. It tells the ICAP server that it's OK to respond wit

Re: [squid-users] Downgrade from 3.0stable10 to 3.0stable9

2008-11-18 Thread Henrik Nordstrom
On tis, 2008-11-18 at 09:47 +0200, Marcel Grandemange wrote: > Good day. > > Im wondering if anybody could shed some light for me. > > Ive had to downgrade a machine of mine due to bugs in stable10, however > since the downgrade im noticing a HELL of a lot of "TCP_SWAPFAIL_MISS/200" > Messages in

Re: [squid-users] Age header

2008-11-18 Thread Henrik Nordstrom
On tis, 2008-11-18 at 14:53 +0800, mSQL dba wrote: > Hello, > > When an object is passed through squid, squid adds a Age header in the > response. > How does squid calculate the value for this Age field? Thanks. Based on how long the object has been in the cache, and received Age and Date header

Re: [squid-users] helper-protocol setting under Squid 3 for NTLM

2008-11-18 Thread Henrik Nordstrom
On mån, 2008-11-17 at 08:48 -0800, Mark Krawec wrote: > > I'm running Squid 3-STABLE10 and Samba 3.2.4. > > My auth_param statement looks like: > > auth_param ntlm program /usr/local/squid/libexec/ntlm_auth -b dc01 dc02 > dc03 Ouch... see mailinglist discussions regarding this helper. > aut

Re: [squid-users] acl deny versus acl allow?

2008-11-18 Thread Henrik Nordstrom
On mån, 2008-11-17 at 15:25 +, Roger Thomas wrote: > Hi, > > This is my first time posting to the mailing list, but I just wanted to know > whether anyone knew how to do the below: > > I use the following to block a list of words from URL’s: > > acl misc_block_list url_regex -i "/etc/squid/b

Re: [squid-users] Multiple site example

2008-11-15 Thread Henrik Nordstrom
On fre, 2008-11-14 at 13:24 -0800, Ramon Moreno wrote: > How do I configure this parameter for 3 sites while using the same > port? I am guessing, but would it be something like this: > http_port 80 accel defaultsite=bananas.mysite.com vhost > http_port 80 accel defaultsite=apples.mysite.com vhost

Re: [squid-users] Multiple site example

2008-11-14 Thread Henrik Nordstrom
On fre, 2008-11-14 at 12:19 -0800, Ramon Moreno wrote: > I know how to accelerate for one site based on the faq, however not > too sure how to do multiple. It's also in the FAQ.. Squid FAQ Reverse Proxy - Sending different requests to different backend web servers http://wiki.squid-cache.org/Sq

Re: [squid-users] About squid ICAP implementation

2008-11-14 Thread Henrik Nordstrom
On fre, 2008-11-14 at 15:49 +0900, Mikio Kishi wrote: > Hi, Henrik > > > Allow: 204 is sent if it's known the whole message can be buffered > > within the buffer limits (SQUID_TCP_SO_RCVBUF). It's not relaed to > > previews. > > Why is there such a limitation (SQUID_TCP_SO_RCVBUF) ? > I hope that

Re: [squid-users] Someone's using my cache?

2008-11-12 Thread Henrik Nordstrom
On ons, 2008-11-12 at 16:18 -0600, [EMAIL PROTECTED] wrote: > Any chance someone could give me a working config to get me started? > > -The server has 2GB of memory and 1TB of space which is can use. There is > nothing else running on it, this is all it will do, be a reverse proxy. > > -1 publ

RE: [squid-users] parseHTTPRequest problem with SQUID3

2008-11-12 Thread Henrik Nordstrom
On ons, 2008-11-12 at 13:51 -0800, Gregori Parker wrote: > So, do I need to file a bug report, so that this can get addressed? Or > are the devs already aware? The devs are aware (or at least both me and Amos), but please file a bug report anyway. Much easier for us to track the issue then. Rega

Re: [squid-users] Gzip at Squid?

2008-11-12 Thread Henrik Nordstrom
On ons, 2008-11-12 at 22:33 +0800, howard chen wrote: > If my Apache cannot have gzip enabled, is it possible to gzip the page > using Squid before sending to client? No. squid requires the web server to do the compression, and also requires the web server to do it correctly (which most versions

Re: [squid-users] IMAP support

2008-11-12 Thread Henrik Nordstrom
On ons, 2008-11-12 at 17:34 +, Jose Celestino wrote: > Not completely right, Thunderbird may also need to do some http to > render html e-mails with external references. Yuck.. will defenitely stay away from Thunderbird then. Regards Henrik signature.asc Description: This is a digitally si

Re: [squid-users] Squid & Win XP & transparent mode

2008-11-12 Thread Henrik Nordstrom
On ons, 2008-11-12 at 10:06 +0100, Jose wrote: > Binarys are for Windows xp professional. We don't use dhcp, domain. All my > network is in a workgroup without servers. Transparent interception is not yet officially supported on Windows as far as I know. But may still work reasonably well if you

Re: [squid-users] Squid stops suddenly

2008-11-12 Thread Henrik Nordstrom
On tis, 2008-11-11 at 18:56 -0600, Luis Daniel Lucio Quiroz wrote: > Using squid 3 stable 9, with digest ldap auth, randomly i got this: > > assertion failed: ACLProxyAuth.cc:146: > "authenticateValidateUser(auth_user_request)" > > later, squid dies > > Any comment? File a bug. Don't forget to

Re: [squid-users] Strange RST packet

2008-11-12 Thread Henrik Nordstrom
On tis, 2008-11-11 at 16:53 -0600, Luis Daniel Lucio Quiroz wrote: > I have a pcap file captured and, traffic is exchanged and then suddenly a RST > from squid to client. No FIN before? Regards Henrik signature.asc Description: This is a digitally signed message part

Re: [squid-users] About squid ICAP implementation

2008-11-12 Thread Henrik Nordstrom
On tor, 2008-11-13 at 05:31 +0900, Mikio Kishi wrote: > In ACLChecklist.cc#check() > > > 128 /* deny if no rules present */ > > 129 currentAnswer(ACCESS_DENIED); > > .. > > 188 > > 189 checkCallback(currentAnswer() != ACCESS_DENIED ? ACCESS_DENIED : > > ACCESS_AL

Re: [squid-users] Helper

2008-11-11 Thread Henrik Nordstrom
On tis, 2008-11-11 at 13:01 -0600, Luis Daniel Lucio Quiroz wrote: > now, I have a situation. Because here we must use digest auth, not all > applications are aware of this. And many users are complaining about > applications. I was thinking of a external helper that let an IP without > auth

Re: [squid-users] squid and Multiple companies

2008-11-11 Thread Henrik Nordstrom
On tis, 2008-11-11 at 14:02 -0600, Kevin Blackwell wrote: > This seems to be my only issue. > > access_log /var/log/squid/access.log common > access_log /var/log/squid/40access.log common 40_auth > > acl 40_auth external nt_group DomainGroup > > FATAL: Bungled squid.conf line 1080: access_log >

Re: [squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection refused

2008-11-11 Thread Henrik Nordstrom
On tis, 2008-11-11 at 15:33 +0800, zhang yikai wrote: > 10.0.2.110 is the machine run squid and dansguardian, thank you for your > reply. Yes, but why does a DNS lookup of www.google.com return 10.0.2.110? You are not google. Regards Henrik signature.asc Description: This is a digitally signed

Re: [squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection refused

2008-11-10 Thread Henrik Nordstrom
On tis, 2008-11-11 at 11:36 +0800, zhang yikai wrote: > - DIRECT/10.0.2.110 text/html > 1226418445.662137 127.0.0.1 TCP_MISS/503 1883 GET http://www.google.com/ > - DIRECT/10.0.2.110 text/html Why does your Squid server resolve www.google.com to 10.0.2.110? Regards Henrik signature.asc De

RE: [squid-users] parseHTTPRequest problem with SQUID3

2008-11-10 Thread Henrik Nordstrom
On tis, 2008-11-11 at 15:24 +1300, Amos Jeffries wrote: > Not fully 1.1, but from (0.9 + 1.0) to fully 1.0 + partial 1.1. Which is > weird because 2.6 went almost fully 1.0 as well quite a while back. From this discussion it seems Squid-3 no longer accepts the obsolete HTTP/0.9 style requests. S

Re: [squid-users] About squid ICAP implementation

2008-11-10 Thread Henrik Nordstrom
On sön, 2008-11-09 at 16:11 +0900, Mikio Kishi wrote: > Hi, would you tell me the ICAP implementation on squid. > > - Question.1 > If there is no "icap_access" setting, > The default icap access control is "allow" or "deny" ? > It looks "allow"... Should be deny.. icap_access selects which

Re: [squid-users] squid 3.1 is stable enough for production / testing?

2008-11-10 Thread Henrik Nordstrom
3.1 is certainly ready for testing. That's why we started making beta releases (3.1.0.X). Please give it a try and report back your findings. I don't think this is a setup that is commonly tested so it's very good if you can test this now while the release is actively being tested. Regards Henrik

Re: [squid-users] Unable to forward this request at this time.

2008-11-10 Thread Henrik Nordstrom
On tis, 2008-11-11 at 03:14 +1300, Amos Jeffries wrote: > Henrik Nordstrom wrote: > > From the error it sounds like it has declared the peer down. > > But why? I'm thinking forwarding loops. Forwarding loops is logged very aggressively in cache.log as such, and don't

Re: [squid-users] No password to internal addresses

2008-11-10 Thread Henrik Nordstrom
On mån, 2008-11-10 at 09:50 +0100, yagh mur wrote: > http_access allow to_mynetwork users1 > http_access allow password users1 > http_access allow mynetwork > http_access deny all I think the above should be http_access allow mynetwork to_mynetwork http_access allow mynetwork users1 http_access

Re: [squid-users] Unable to forward this request at this time.

2008-11-10 Thread Henrik Nordstrom
From the error it sounds like it has declared the peer down. On mån, 2008-11-10 at 11:35 +0700, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: > here is my squid .conf > === > http_port 2210 transparent > icp_port 3130 > snmp_port 3401 > cache_mgr admin > emulate_httpd_log off > cache_replacement_policy h

Re: [squid-users] mallinfo() vs. sbrk()

2008-11-09 Thread Henrik Nordstrom
On sön, 2008-11-09 at 14:06 -0800, Mark Nottingham wrote: > What about > > Memory accounted for: > Total accounted: 2039507 KB > > This seems to be the only one that's not wrapped around to negative > above 2G on Linux... both mallinfo and sbrk are. total accounted for works, but d

Re: [squid-users] deny_info customization

2008-11-07 Thread Henrik Nordstrom
On fre, 2008-11-07 at 12:23 -0600, Luis Daniel Lucio Quiroz wrote: > Hi Squids, > > There are several questions I have about deny_info I couldnt find. > > Looking at I found that %U corresponds url blocked, %w to wemaster email. > There are other several %'s that I dont understand, Is there a

Re: [squid-users] Assertion failed in store_client.cc:430

2008-11-07 Thread Henrik Nordstrom
On fre, 2008-11-07 at 13:40 +0100, Dietmar Braun wrote: > we are using Squid 3.0 STABLE9. Once a day, we get a > > 2008/11/06 22:28:07| assertion failed: store_client.cc:430: > "STORE_DISK_CLIENT == getType()" > > with a restart of Squid. Is this a known bug, can we do anything here? File a bu

<    1   2   3   4   5   6   7   8   9   10   >