Re: [squid-users] Log Daemon (queue is too large)

2014-08-14 Thread Warren Baker
On Thu, Aug 14, 2014 at 8:43 AM, Amos Jeffries squ...@treenet.co.nz wrote: Are you using the default Squid daemon or a custom one? Its the default Squid daemon. Can you reproduce this problem with the current 3.4 stable release? I have not tried just yet - its the first time I have come

[squid-users] Log Daemon (queue is too large)

2014-08-13 Thread Warren Baker
HI all, I noticed this error message (multiple entries) for yesterday and today on Squid 3.3.11 2014/08/13 00:01:06 kid1| Logfile: daemon:/util/var/squid/log/access.log: queue is too large; some log messages have been lost. Its not a very high utilized proxy so I was a little surprised this

Re: [squid-users] external_acl_type helper exiting

2013-10-01 Thread Warren Baker
On Mon, Sep 30, 2013 at 5:46 PM, Amos Jeffries squ...@treenet.co.nz wrote: I can't help with the Go side of things unfortuately. It is still on my TODO list for learning. I am no pro myself :) Is it a timeout of the read() call or the stdin actually closing on timeout? The first one can

Re: [squid-users] external_acl_type helper exiting

2013-09-30 Thread Warren Baker
On Fri, Sep 27, 2013 at 4:53 PM, Warren Baker war...@decoy.co.za wrote: On Fri, Sep 27, 2013 at 4:27 PM, Amos Jeffries squ...@treenet.co.nz wrote: Arg. yes, too much wading through IP specs today. I meant rfc1738 encoding (Squid flavour of it anyway). Ah ok. So i need to cater

Re: [squid-users] external_acl_type helper exiting

2013-09-30 Thread Warren Baker
Hi Eliezer, On Mon, Sep 30, 2013 at 3:06 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: Just wondering if you can share the Golang source code? I can't as it is closed source. In a nutshell it a receives a request, checks a session table (in a nosql datastore) and responds. As to whether I

Re: [squid-users] external_acl_type helper exiting

2013-09-30 Thread Warren Baker
On Mon, Sep 30, 2013 at 5:11 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: OK so a pesudo code of the helper would be nice. datastore used:(what nosql engine?) Redis. I assume it's a simple test of is the ip exists? in a case of yes then reply with OK in a case that it dosnt' exits reply

Re: [squid-users] external_acl_type helper exiting

2013-09-27 Thread Warren Baker
On Thu, Sep 26, 2013 at 6:37 PM, Amos Jeffries squ...@treenet.co.nz wrote: It still might be Squid since there have been helper protocol changes in the last few versions. But you will only find that out from the helpers debug. Thanks Amos - it seems the helper was eventually receiving a EOF

Re: [squid-users] external_acl_type helper exiting

2013-09-27 Thread Warren Baker
On Fri, Sep 27, 2013 at 4:03 PM, Amos Jeffries squ...@treenet.co.nz wrote: Or because the data input to the helper contained a \0 byte that was not rfc1918 encoded. It must be this as Squid is not been reconfigured nor rotating log files. rfc1918? typo? thanks -- .warren

Re: [squid-users] external_acl_type helper exiting

2013-09-27 Thread Warren Baker
On Fri, Sep 27, 2013 at 4:27 PM, Amos Jeffries squ...@treenet.co.nz wrote: Arg. yes, too much wading through IP specs today. I meant rfc1738 encoding (Squid flavour of it anyway). Ah ok. So i need to cater for this. Thanks for the point in the right direction. -- .warren

[squid-users] external_acl_type helper exiting

2013-09-26 Thread Warren Baker
HI Guys, I have a problem where the helpers are exiting after a period of time in an external_acl_type setup. The acl is defined as follows: external_acl_type portal_page ipv4 children-idle=5 children-startup=5 ttl=60 negative_ttl=0 concurrency=20 %SRC /usr/local/bin/portal-authenticator

Re: [squid-users] external_acl_type helper exiting

2013-09-26 Thread Warren Baker
On Thu, Sep 26, 2013 at 4:33 PM, Amos Jeffries squ...@treenet.co.nz wrote: The debug options for Squid will not help with this. The helper is a completely separate program and all Squid can know is that the connection to it died before told it to shutdown. Exactly what your log snippet stated.

Re: [squid-users] Plain HTML site not opening through squid.

2013-04-15 Thread Warren Baker
On Mon, Apr 15, 2013 at 7:00 AM, Vivek Sharma vi...@hqr.drdo.in wrote: I am facing this weird problem while trying to open a site mkm.drdo.gov.in = using squid 3.1.10. While the site works fine bypassing squid. While using squid - I am getting Zero Sized Reply on the client browser w=

Re: [squid-users] Re: Authentication problem

2012-11-23 Thread Warren Baker
On Fri, Nov 23, 2012 at 12:05 PM, Amos Jeffries squ...@treenet.co.nz wrote: You are guessing right. As it documented in the wiki ... (seems to be down right now). Thanks Amos - that was my first point of reference, however it was down at the time so thought i might ping the list. The way

[squid-users] Authentication problem

2012-11-22 Thread Warren Baker
HI List I have squid-3.2.3 configured to make use of negotiate, and to authenticate certain users. However the following config doesn't work acl userA proxy_auth warren acl userB proxy_auth testb http_access allow userA http_access allow userB http_access deny all userA successfully

[squid-users] Re: Authentication problem

2012-11-22 Thread Warren Baker
On Thu, Nov 22, 2012 at 3:57 PM, Warren Baker war...@decoy.co.za wrote: I have squid-3.2.3 configured to make use of negotiate, and to authenticate certain users. However the following config doesn't work acl userA proxy_auth warren acl userB proxy_auth testb http_access allow userA

Re: [squid-users] FATAL: Ipc::Mem::Segment::create failed to shm_open(/squid-squid-page-pool.shm): (13) Permission denied

2012-09-17 Thread Warren Baker
On Mon, Sep 17, 2012 at 9:44 PM, Holmes, Michael A (Mike) mike.hol...@lsi.com wrote: I just added workers 4 to my working configuration and I get an shm_open error. I assume it is trying to write to the root directory /squid-squid-page-pool.shm as the user squid which will fail. How do I

Re: [squid-users] Fw: [ERROR] commonUfsDirOpenSwapLog: Failed to open swap log

2012-07-23 Thread Warren Baker
On Mon, Jul 23, 2012 at 8:02 AM, Anonymous eletters_m...@yahoo.com wrote: squid_enableYES If you installed Squid from ports then you will have a file called /usr/local/etc/rc.d/squid - which is the startup file. You can get the startup variables from this file by executing it and passing the

Re: [squid-users] Fw: [ERROR] commonUfsDirOpenSwapLog: Failed to open swap log

2012-07-23 Thread Warren Baker
On Mon, Jul 23, 2012 at 11:02 AM, Anonymous eletters_m...@yahoo.com wrote: Well! I have tried every mentioned method and still getting the same old error...! Send the contents (sanitized if needed) of your /etc/rc.conf and the contents of your /usr/local/etc/rc.d/ directory. -- .warren

Re: [squid-users] Fw: [ERROR] commonUfsDirOpenSwapLog: Failed to open swap log

2012-07-23 Thread Warren Baker
On Mon, Jul 23, 2012 at 12:51 PM, Anonymous eletters_m...@yahoo.com wrote: Send the contents (sanitized if needed) of your /etc/rc.conf hostname=test sshd_enable=YES powerd_enable=YES # Set dumpdev to AUTO to enable crash dumps, NO to disable dumpdev=NO pdnsd_enable=YES apache22_enable=YES

Re: [squid-users] NTLM auth to remote server fails through squid

2012-07-17 Thread Warren Baker
On Tue, Jul 17, 2012 at 4:43 AM, Amos Jeffries squ...@treenet.co.nz wrote: Please update to the latest beta though before doing more testing. 3.2.0.20 is out and the latest snapshot has some relevant bug fixes. I'm only seeing 3.2.0.18 and 3 daily auto-generated releases on

Re: [squid-users] cache videos/bittorrent

2012-05-16 Thread Warren Baker
On Wed, May 16, 2012 at 12:55 PM, Mário Sérgio Candian mscand...@mastercabo.com.br wrote: Thanks for the answer Amos. I saw the solution of PeerApp and I thought that the squid could do the same as their software, perhaps with some modification. Some years ago, I used cachevideo with squid,

Re: [squid-users] Problem with swf streams from www.tv4play.se behind squid

2012-03-09 Thread Warren Baker
On Fri, Mar 9, 2012 at 4:24 PM, Peter Olsson p...@leissner.se wrote: Hello! Hi. We can't access swf streams from www.tv4play.se behind squid since about a month ago. Earlier we could at least play some of them, but now it seems that none of them work through squid. We haven't changed

Re: [squid-users] Host header forgery

2012-02-28 Thread Warren Baker
On Mon, Feb 27, 2012 at 11:01 PM, Amos Jeffries squ...@treenet.co.nz wrote: 3.2.0.15+ will do a soft-fail type behaviour, which allows the request through but does not allow caching of the response and only relays the original destination IP. Which hides the problems from client visibility, at

[squid-users] Host header forgery

2012-02-27 Thread Warren Baker
HI all, Just a question with regards to 3.2.0.X and 'Host header forgery' detection. If there are multiple name servers specified on the client and squid and for whatever reason (timeout,network problem etc.) the client uses a different name server to resolve a site (eg facebook) to what Squid

Re: [squid-users] Host header forgery

2012-02-27 Thread Warren Baker
On Mon, Feb 27, 2012 at 12:58 PM, Amos Jeffries squ...@treenet.co.nz wrote: It is best to consider interception an action of last resort, for this any many other reasons. yeah of course. 3.2.0.15+ will do a soft-fail type behaviour, which allows the request through but does not allow