Re: [squid-users] Squid 2.7STABLE9 'zph_sibling' seemingly not tagging traffic

2013-02-12 Thread Nick Fennell
he reply/info. Nick -- Nick Fennell n...@tbfh.org On 12 Feb 2013, at 10:08, Amos Jeffries wrote: > On 12/02/2013 10:31 p.m., Nick Fennell wrote: >> Hey Amos. >> >> I was waiting for that! >> >> We have a few requirements not yet satisfied in Squid 3.x, storeurl_r

Re: [squid-users] Squid 2.7STABLE9 'zph_sibling' seemingly not tagging traffic

2013-02-12 Thread Nick Fennell
ou aware of any bugs that may cause sibling_hit to be ineffective. I saw on the Lusca project that their code had an issue preventing the mark from ever being applied. I wonder if Squid suffers with a similar fault. Nick -- Nick Fennell n...@tbfh.org On 12 Feb 2013, at 02:05, Amos Jeffries wro

[squid-users] Squid 2.7STABLE9 'zph_sibling' seemingly not tagging traffic

2013-02-11 Thread Nick Fennell
zph_local 0x30 zph_sibling 0x31 }}} I can see traffic tagged as 0x30 from both units however, I see no traffic marked with 0x31. Nothing at all. The closest reference to my issue is here, http://www.squid-cache.org/mail-archive/squid-users/201201/0364.html Any suggestions appreciated. Many Thanks,

Re: [squid-users] websites blocked using wccpv2 and squid2.7stable9

2012-12-14 Thread Nick Fennell
Hi Mustafa, Is it only a single site you are having issues with? All other sites working OK? What type of WCCP deployment have you gone for? Web-Cache or TPROXY with WCCP service groups? Nick -- Nick Fennell n...@tbfh.org On 13 Dec 2012, at 20:28, Mustafa Raji wrote: > hi > i have a p

Re: [squid-users] Tproxy without spoofed source address

2012-11-29 Thread Nick Fennell
other. My suggestion: Bypass TPROXY for LAN traffic. Nick -- Nick Fennell n...@tbfh.org On 28 Nov 2012, at 16:12, Steve Hill wrote: > On 28.11.12 13:30, Nick Fennell wrote: > >> The route needs to be Symmetric. >> >> The way I work round this behaviour is to have the Sq

Re: [squid-users] Problem with squid tcp_outgoing_address

2012-11-27 Thread Nick Fennell
at 15:53, Bruno de Oliveira Bastos wrote: > Yes, my adsl is 192.168.1.1 and my network lan is 192.168.1.2. > > 2012/11/27 Nick Fennell : >> What is your default route address? >> >> Are your LAN and ADSL links sharing the same subnet? >> >> Can you pro

Re: [squid-users] Problem with squid tcp_outgoing_address

2012-11-27 Thread Nick Fennell
What is your default route address? Are your LAN and ADSL links sharing the same subnet? Can you provide more information on interface names and subnet addressing? Thanks. Nick -- On 27 Nov 2012, at 10:52, Bruno de Oliveira Bastos wrote: > Hi, i am using the squid 3.1.10, and i have 3 links

Re: [squid-users] Rate limiting inbound requests in squid conf

2012-11-26 Thread Nick Fennell
A rule set like the below may help; iptables -I INPUT -p tcp --dport 3128 -m state --state NEW -m recent --set iptables -I INPUT -p tcp --dport 3128 -m state --state NEW -m recent --update --seconds 60 --hitcount 30 -j DROP This should new requests being dropped when more than 30 connections hav