[squid-users] negative ACL

2012-07-19 Thread Rick Chisholm
on the network and then try to use a NOT operator like http_access allow !known_browsers before the auth required setting. thoughts? -- Rick Chisholm Systems Administrator Parallel42

Re: [squid-users] Reverse Proxy + Exchange OWA issue

2011-11-05 Thread Rick Chisholm
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thanks Amos - I will try the configuration change first and look into the new version. On 11-11-04 8:44 PM, Amos Jeffries wrote: On 5/11/2011 5:03 a.m., Rick Chisholm wrote: I'm not intimidated by that option, but I prefer to use ports (which

[squid-users] Reverse Proxy + Exchange OWA issue

2011-11-04 Thread Rick Chisholm
works great. If you sign-out and back in, you are still fine, unless you clear your cache, then you get the pause again. The light versions of OWA work fine. Squid version is 2.7.9_1 -- Rick Chisholm Systems Administrator Parallel42

Re: [squid-users] Reverse Proxy + Exchange OWA issue

2011-11-04 Thread Rick Chisholm
3.2 does not appear to be available in the BSD ports tree at this time. On Fri, November 4, 2011 11:39 am, Eliezer Croitoru wrote: On 04/11/2011 16:55, Rick Chisholm wrote: clear your cache, then you get the pause again. The light versions of OWA did you tried the 3.2 branch? as let say

Re: [squid-users] Reverse Proxy + Exchange OWA issue

2011-11-04 Thread Rick Chisholm
solution (3.2) is the answer. On Fri, November 4, 2011 11:45 am, Eliezer Croitoru wrote: On 04/11/2011 17:41, Rick Chisholm wrote: 3.2 does not appear to be available in the BSD ports tree at this time. compile it yourself.. it pretty simple.. Eliezer On Fri, November 4, 2011 11:39 am

Re: [squid-users] Proxy for youtube - noncaching

2010-12-10 Thread Rick Chisholm
in advance for any suggestions or help with this. Scott -- Rick Chisholm Systems Administrator Parallel42

[squid-users] Squid + LDAP + Active Directory

2010-09-10 Thread Rick Chisholm
I'm sure this has been asked before - working on a squid box that is to Auth to AD. Unable to authenticate and getting error in squid cache log: WARNING: could not bind to binddn 'Invalid credentials' -- Rick Chisholm Systems Administrator Parallel42

Re: [squid-users] reverse proxy question

2010-03-23 Thread Rick Chisholm
Jeff Peng wrote: Also, could someone recommend a light weight server for static content? Apache is good enough IMO. a stripped down Apache would server static content just fine, but a couple other options would be Lighttpd and Nginx. -- Rick Chisholm System Administrator

Re: [squid-users] WARNING: redirector .....

2010-01-31 Thread Rick Chisholm
is running out of filedescriptors 2010/01/31 15:34:36| client_side.cc(2843) WARNING! Your cache is running out of filedescriptors -- Rick Chisholm sysadmin Parallel42 e. rchish...@parallel42.ca m. 519-325-8630 w. www.parallel42.ca

Re: [squid-users] Squid and YahooMail

2009-08-12 Thread Rick Chisholm
putting login.yahoo.com in the domains whitelist, instead of a more specific URL in the URLs whitelist has fixed the problem. -- Rick Chisholm sysadmin Parallel42 e. rchish...@parallel42.ca m. 519-325-8630 w. www.parallel42.ca

Re: [squid-users] Squid and YahooMail

2009-08-11 Thread Rick Chisholm
, 10 Aug 2009 22:17:54 -0400, Rick Chisholm rchish...@parallel42.ca wrote: In this config - squid is using it's own dnsservers setting in squid.conf in order to avoid the local resolver setting on the OS. We are essentially using squid to avoid openDNS for a particular group at work who need

Re: [squid-users] Squid and YahooMail

2009-08-11 Thread Rick Chisholm
We are using squidGuard. Henrik Nordstrom wrote: mån 2009-08-10 klockan 22:01 -0400 skrev Rick Chisholm: Our marketing dept. at work needs access to Yahoo Analytics, but they have to login via Yahoo! regular login. Squid complains about a DNS resolution issue but names the link as http

Re: [squid-users] Squid and YahooMail

2009-08-11 Thread Rick Chisholm
%2fH%3dc2VjdXJlPXRydWUgc2VjdXJlPVwidFwi%2fS%3d1%2fJ%3d8AF18E44Q=0O=0.5384668989691079 Rick Chisholm wrote: it's just redirecting to login.yahoo.com again... but with a long URL, I will do some more digging and get you a more specific answer. I will also check, but I'm pretty sure we

[squid-users] Squid and YahooMail

2009-08-10 Thread Rick Chisholm
what's up with Squid and https://login.yahoo.com? Our marketing dept. at work needs access to Yahoo Analytics, but they have to login via Yahoo! regular login. Squid complains about a DNS resolution issue but names the link as http://443 It's quite odd. -- Rick Chisholm sysadmin Parallel42 e

Re: [squid-users] n00b question - show version

2009-03-17 Thread Rick Chisholm
squid -v should get you what you are looking for. mcnicholas wrote: Hi Guys Sorry for such an inane post, but can someone tell me what command to run that will show the version of Squid is installed on a red hat server? I've inherited some production boxes with no documentation. Thanks

Re: [squid-users] mysterious crashes

2009-02-26 Thread Rick Chisholm
might be worthwhile to run memtest86 against your server to rule out memory issues, esp. since you appear to have clear logs. Is squid crashing or is the OS locking up? Hoover Chan wrote: Hi, I'm new to this mailing list and relatively new to managing Squid. I'm running a Squid cache using

Re: [squid-users] How do I see who's connected to my SQUID server?

2009-01-06 Thread Rick Chisholm
something basic like netstat -an will give you some info, if you want squid specific info, you can setup cachemgr ... Johnson, S wrote: I'm using NTLM_AUTH for my authentication mechanism, but if I run smbstatus I do not see anyone connected (and I know I am). Is there another tool to see who

Re: [squid-users] Squid consumes a lot dsk space

2009-01-05 Thread Rick Chisholm
Where is the disk space going - the cache dir(s) or the logs? You can set the size of cache you wish to use in squid.conf; but if you are not mindful of your logs they can grow out of control as well. squid -k rotate will rotate your logs and allow you to clean up the old ones if you wish.

[squid-users] preferred DNS config

2008-12-15 Thread Rick Chisholm
What would you say is preferable - having squid hit a local instance of BIND (or djbdns) or pointing it at the closest upstream name server(s)? -- Rick Chisholm sysadmin Parallel42

Re: [squid-users] preferred DNS config

2008-12-15 Thread Rick Chisholm
is lag time between Squid and its' supplier of DNS info. If you have a local recursive server, its usually giving less lag than an upstream one would. thanks, that pretty much confirms what I thought. -- Rick Chisholm sysadmin Parallel42

Re: [squid-users] Squid Fails on Reconfigure

2008-12-07 Thread Rick Chisholm
Thx Henrik - I will try that when it happens again. Henrik Nordstrom wrote: tis 2008-12-02 klockan 09:40 -0500 skrev Rick Chisholm: Please attach gdb to the process and print out a stack backtrace to figure out what it's doing. cat /usr/local/squid/logs/squid.pid gdb /usr/local/squid

Re: [squid-users] Squid Fails on Reconfigure

2008-12-06 Thread Rick Chisholm
there might be a common denominator here - this is happening on a Dell SC1435, dual-core Opteron 2212... maybe it's an AMD thing. That may change my plans for another server. ian j hart wrote: On Tuesday 02 December 2008 14:40:19 Rick Chisholm wrote: Sorry I can't offer a solution but I can

Re: [squid-users] Squid Fails on Reconfigure

2008-12-06 Thread Rick Chisholm
ian j hart wrote: On Saturday 06 December 2008 19:52:10 Rick Chisholm wrote: I seriously doubt it's an AMD thing. I have an identically configured test server that does not exhibit the same behaviour at all and the only real difference being it's a PE 1900 Xeon Quad. In fact of all

[squid-users] Squid Fails on Reconfigure

2008-12-02 Thread Rick Chisholm
I'm having a recurring issue with squid 2.7STABLE5 on FreeBSD 6.3 - part of the problem is that I cannot pinpoint the cause. Often (though not always) when squid -k reconfigure is run squid goes a bit haywire and maxes out one core and becomes unresponsive to connections. SquidGuard log is

Re: [squid-users] User Access With Using A Squid Proxy

2008-11-21 Thread Rick Chisholm
sounds like you have a bit of a hybrid solution going with the proxy.pac handling some of the ACL work. Depending on the size of user base you are dealing with, you could have various ACLs in squid based on client IP. Otherwise you might be looking at using one of the built-in squid auth

[squid-users] cachemgr no Cache Client List

2008-11-19 Thread Rick Chisholm
anytime I check the Cache Client List I get: Cache Clients: TOTALS ICP : 0 Queries, 0 Hits ( 0%) HTTP: 0 Requests, 0 Hits ( 0%) even when I know the Cache has clients... it's weird. Rick

Re: [squid-users] Squid very slow

2008-11-19 Thread Rick Chisholm
are you running DNS on the same box as squid or on the LAN? create a list of domain names, like 20-25 in a file like names.lst and run dig -f names.lst - gives you an idea how well DNS is working. Sometimes everything works fine but, sometimes the system is extremely slow and I get the