[squid-users] about refresh_pattern

2008-10-23 Thread Sandy lone
Hello, Under what cases squid will use refresh_pattern? If the response objects have expire or age headers, squid will follow their values. If the response objects have neither expire nor age headers, squid will not cache them at all. So when will squid use the refresh_pattern settings? Thanks.

[squid-users] problem with flash player behind NATed firewall

2008-10-23 Thread Walton, Jason (Accenture)
Hi, We've got a peculiar problem which no matter what, I can't find any solution to. I'm hoping that somebody out there has had a similar experience and will be able to say oh, that's easy!. Our site is trying to access flash videos on website

Re: [squid-users] problem with flash player behind NATed firewall

2008-10-23 Thread Simon Waters
On Thursday 23 October 2008 09:37:39 Walton, Jason (Accenture) wrote: http://www.healthtalkonline.org/Bones_joints/Rheumatoid_Arthritis/Topic/ 2209/Interview/1499/Clip/9712 It is using RTMP on port 1935 when I play flash from the site. Without checking I'm guessing you aren't providing a proxy

Re: [squid-users] about refresh_pattern

2008-10-23 Thread Amos Jeffries
Sandy lone wrote: Hello, Under what cases squid will use refresh_pattern? If the response objects have expire or age headers, squid will follow their values. Yes. Unless refresh_pattern have been specified with ignore-* HTTP violations. If the response objects have neither expire nor age

Re: [squid-users] squid3 keeps many idle connections

2008-10-23 Thread Malte Schröder
On Thu, 23 Oct 2008 01:10:58 +0200 Henrik Nordstrom [EMAIL PROTECTED] wrote: On ons, 2008-10-22 at 11:31 +0200, Malte Schröder wrote: Not normal. Squid version? 3.0.STABLE10 And how did you measure these? You are not counting TIME_WAIT sockets are you? by getting

Re: [squid-users] How can I block a https site?

2008-10-23 Thread Matus UHLAR - fantomas
Matus UHLAR - fantomas wrote: On 21.10.08 16:23, Alejandro Bednarik wrote: You can also use url_regex -i acl bad_sites url_regex -i /etc/squid/bad_sites.txt http_access deny bad_sites using regexes is very ineffective and may lead to problems if you don't count with: - dot matching

RE: [squid-users] problem with flash player behind NATed firewall

2008-10-23 Thread Walton, Jason (Accenture)
When we monitor the firewall, we can see port 80 taking via squid and port 1935 talking to our test server when it has a public IP, as soon as we take away the public IP, all port 1935 traffic stops but port 80 still routes via squid. I'm going to look at a socks server (dante seems to be the

Re: [squid-users] squid3 keeps many idle connections

2008-10-23 Thread Amos Jeffries
Malte Schröder wrote: On Thu, 23 Oct 2008 01:10:58 +0200 Henrik Nordstrom [EMAIL PROTECTED] wrote: On ons, 2008-10-22 at 11:31 +0200, Malte Schröder wrote: Not normal. Squid version? 3.0.STABLE10 And how did you measure these? You are not counting TIME_WAIT sockets are you? by getting

Re: [squid-users] How can I block a https site?

2008-10-23 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: Matus UHLAR - fantomas wrote: On 21.10.08 16:23, Alejandro Bednarik wrote: You can also use url_regex -i acl bad_sites url_regex -i /etc/squid/bad_sites.txt http_access deny bad_sites using regexes is very ineffective and may lead to problems if you don't count

Re: [squid-users] squid3 keeps many idle connections

2008-10-23 Thread Malte Schröder
On Thu, 23 Oct 2008 23:39:01 +1300 Amos Jeffries [EMAIL PROTECTED] wrote: Malte Schröder wrote: On Thu, 23 Oct 2008 01:10:58 +0200 Henrik Nordstrom [EMAIL PROTECTED] wrote: On ons, 2008-10-22 at 11:31 +0200, Malte Schröder wrote: Not normal. Squid version? 3.0.STABLE10

Re: [squid-users] about refresh_pattern

2008-10-23 Thread Henrik Nordstrom
On tor, 2008-10-23 at 16:30 +0800, Sandy lone wrote: Hello, Under what cases squid will use refresh_pattern? If the response objects have expire or age headers, squid will follow their values. Yes. Unless overridden in refresh_pattern override options. If the response objects have neither

Re: [squid-users] Update Accelerator, Squid and Windows Update Caching

2008-10-23 Thread Regardt van de Vyver
Amos Jeffries wrote: Richard Wall wrote: On Fri, Oct 10, 2008 at 12:30 PM, Amos Jeffries [EMAIL PROTECTED] wrote: Richard Wall wrote: Hi, I've been reading through the archive looking for information about squid 2.6 and windows update caching. The FAQ mentions problems with range offsets but

RE: [squid-users] problem with flash player behind NATed firewall

2008-10-23 Thread Henrik Nordstrom
On tor, 2008-10-23 at 11:19 +0100, Walton, Jason (Accenture) wrote: When we monitor the firewall, we can see port 80 taking via squid and port 1935 talking to our test server when it has a public IP, as soon as we take away the public IP, all port 1935 traffic stops but port 80 still routes

[squid-users] squid and vbulletin

2008-10-23 Thread TheGash35
Is there a directive I need to use to make sure that squid is properly sending http headers to the web server? More specifically, I am running vbulletin and using squid as a reverse proxy. However it is causing some registration and login issues because vBulletin sees all registrations as

[squid-users] Trouble getting kerberos auth working with squid 3.0

2008-10-23 Thread Steven Cardinal
Just installed an OpenSUSE 11.0 system to replace our aging Suse 9.0 squid proxy server. I've chosen to use the 3.0 version of squid that was included. I am trying to get kerberos authentication working against our AD (Win2003) environment. I followed the instructions at

[squid-users] Problems with downloads

2008-10-23 Thread Osmany Goderich
Hi everyone, I have Squid3.0STABLE9 installed on a CentOS5.2_x86_64 system. I have problems with downloads, especially large files. Usually downloads are slow in my network because of the amount of users I have but I dealt with it using download accelerators like “FlashGET”. Now the downloads get

Re: [squid-users] squid and vbulletin

2008-10-23 Thread Henrik Nordstrom
On tor, 2008-10-23 at 08:02 -0700, TheGash35 wrote: vBulletin already has code built in that looks for HTTP_X_FORWARDED_FOR , but it looks like my squid is not configured to pass this because all activity is coming from the proxy server IP, not the user's IP address. Squid sends

Re: [squid-users] Trouble getting kerberos auth working with squid 3.0

2008-10-23 Thread Henrik Nordstrom
On tor, 2008-10-23 at 14:25 -0400, Steven Cardinal wrote: I see no sign on my DCs of any failed authentication. A tcpdump trace on my workstation shows no attempts from my Windows PC to perform any kerberos authentication. If I try running the command line specified in the squid.conf, I get:

Re: [squid-users] Problems with downloads

2008-10-23 Thread Henrik Nordstrom
On tor, 2008-10-23 at 14:34 -0500, Osmany Goderich wrote: Hi everyone, I have Squid3.0STABLE9 installed on a CentOS5.2_x86_64 system. I have problems with downloads, especially large files. Usually downloads are slow in my network because of the amount of users I have but I dealt with it

RE: [squid-users] Problems with downloads

2008-10-23 Thread Osmany Goderich
On tor, 2008-10-23 at 14:34 -0500, Osmany Goderich wrote: Hi everyone, I have Squid3.0STABLE9 installed on a CentOS5.2_x86_64 system. I have problems with downloads, especially large files. Usually downloads are slow in my network because of the amount of users I have but I dealt with it

RV: [squid-users] Problems with downloads

2008-10-23 Thread Osmany Goderich
On tor, 2008-10-23 at 14:34 -0500, Osmany Goderich wrote: Hi everyone, I have Squid3.0STABLE9 installed on a CentOS5.2_x86_64 system. I have problems with downloads, especially large files. Usually downloads are slow in my network because of the amount of users I have but I dealt with it

Re: [squid-users] Squid 3 HTTP accelerator not caching content

2008-10-23 Thread Tom Williams
Amos Jeffries wrote: Tom Williams wrote: Amos Jeffries wrote: So, I setup my first Squid 3.0STABLE9 proxy in HTTP accelerator mode over the weekend. Squid 3 is running on the same machine as the web server and here are my HTTP acceleration related config options: http_port 80 accel vhost

[squid-users] Question about ACLs and http_access in Squid 3

2008-10-23 Thread Tom Williams
Ok, now that I've basically got Squid 3 configured as a HTTP accelerator, I have a question about ACL rules and http_access. Here is the basic config: I've got two web servers behind a load balancer. The idea is to have Squid server as a HTTP accelerator for Apache so it will cache static