Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-25 Thread bijayant kumar
I have already entered that line cat /etc/security/limits.conf | grep nofile * hardnofile 8192 No luck till now. I am restarting squid several times to avoid the slow browsing. -- Adrian Chadd [EMAIL PROTECTED] wrote: On Fri, Jan 25, 2008, bijayant kumar wrote: Hi, [EMAIL

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-25 Thread Adrian Chadd
On Fri, Jan 25, 2008, bijayant kumar wrote: I have already entered that line cat /etc/security/limits.conf | grep nofile * hardnofile 8192 No luck till now. I am restarting squid several times to avoid the slow browsing. I'd go and ask someone on the gentoo lists at this

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-25 Thread Ding Deng
bijayant kumar [EMAIL PROTECTED] writes: I have already entered that line cat /etc/security/limits.conf | grep nofile * hardnofile 8192 No luck till now. I am restarting squid several times to avoid the slow browsing. limits.conf(5): Also, please note that all limit

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-25 Thread bijayant kumar
Earlier in limits.conf, i had squid hardnofile 8192 Now i have * hardnofile 8192 In both the cases i have restarted my system, but it didnt affect on filedescriptor limit. --- Ding Deng [EMAIL PROTECTED] wrote: bijayant kumar [EMAIL PROTECTED] writes: I have already

[squid-users] Patching Squid 2.6 icap patch with Squid-2.6.STABLE10 - problem

2008-01-25 Thread selvi
Hello All, I am in the process of patching Squid 2.6 icap with Squid-2.6.STABLE10 version. Squid 2.6 icap patch is taken from http://devel.squid-cache.org/cgi-bin/diff2/icap-2_6.patch I had one rejection in client_side.c and i had done that change manually. But when i issue the command

Re: [squid-users] Re: Bug: version= option= tag failure

2008-01-25 Thread JSiergiej
Henrik, So I figured out that the SSL errors I was getting were because I still had Use SSL2 checked in the security settings of Internet Explorer. Once I unchecked this, leaving only use SSLv3 checked, I no longer received the errors and was able to access the page. However, I don't

RE: [squid-users] It stopped denying sites!

2008-01-25 Thread Davan Wong
Resurrecting an old thread This box did it again. As of January 15th, it stopped denying sites again. What I find really odd, I noticed this time around that it also stopped writing to access.log and store.log on that same date. Any ideas why this would be happening? Any info I can provide

Re: [squid-users] Load Balance Requests

2008-01-25 Thread ankush grover
On Jan 21, 2008 11:06 PM, Matt [EMAIL PROTECTED] wrote: Is there anyway to get Squid to load balance outgoing requests and downloads across a couple different IP's? Matt Hi, I am not sure whether squid can do or not but you can do this on linux box with a concept called Multirouting.

[squid-users] Re: Strange issues with squid

2008-01-25 Thread Ryan Thoryk
Well actually it seems like we found the problem. We were testing 3 of the 4 routers, and only 1 of those was having issues. By turning on the options no ip redirects and no ip proxy-arp on the router's ethernet interfaces, the problem went away. Also with that ipfw config, that's just how

RE: [squid-users] It stopped denying sites!

2008-01-25 Thread Davan Wong
I've narrowed it down It would appear that when I turned on the ipsec VPN, internet traffic now seems to by bypassing the transparent squid... I've narrowed it down to this line, in pf.conf: set skip on { lo $int_if enc0 } # VPN With that line commented out, Squid works as it should, but

Re: [squid-users] [SOLVED]Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-25 Thread Adrian Chadd
Graph the statistics from Squid, including SNMP. This'll include the number of active and free filedescriptors. :) Adrian On Fri, Jan 25, 2008, bijayant kumar wrote: Thanks to all you and all the members of the list who has supported me to rectify this problem. The startup/init script of

Re: [squid-users] client_http.hit_median_svc_time: what's the definition, again ?

2008-01-25 Thread Chris Robertson
john allspaw wrote: Hello smart and nice folks: We have some reverse-proxy caches on the west coast that get hit quite a bit from across the Pacific, and we see cache hit times much higher there than in our other datacenters. I *think* it's because client_http.hit_median_svc_time might also

[squid-users] Squid Transparent Proxy not work

2008-01-25 Thread duren duren
i have server running squid (transparent proxy) in Ubuntu linux server (squid installed using apt-get) this server have two interfaces, eth0 to internet eth1 to LAN this is my squid.conf ## --- squid.conf - http_port 192.168.10.1:3128 transparent hierarchy_stoplist cgi-bin ? acl QUERY

Re: [squid-users] Patching Squid 2.6 icap patch with Squid-2.6.STABLE10 - problem

2008-01-25 Thread Amos Jeffries
selvi wrote: Hello All, I am in the process of patching Squid 2.6 icap with Squid-2.6.STABLE10 version. Have you tried Squid 3.0 stable 1 ? It incorporates ICAP natively amongst other improvements. Amos -- Please use Squid 2.6STABLE17+ or 3.0STABLE1+ There are serious security advisories

[squid-users] error on compiling

2008-01-25 Thread Rafael Donggon
Below is the config.log error message upon compiling.. I am using Ubuntu 7.10 Desktop Ed. Please Help. Thank you. config.log error: This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. It was created by Squid Web Proxy

Re: [squid-users] error on compiling

2008-01-25 Thread Adrian Chadd
On Fri, Jan 25, 2008, Rafael Donggon wrote: Below is the config.log error message upon compiling.. I am using Ubuntu 7.10 Desktop Ed. Make sure you install the meta-package build-essential, and not individual packages. It sounds like you're missing part of the development libraries. Adrian

Re: [squid-users] Squid Transparent Proxy not work

2008-01-25 Thread Amos Jeffries
duren duren wrote: i have server running squid (transparent proxy) in Ubuntu linux server (squid installed using apt-get) this server have two interfaces, eth0 to internet eth1 to LAN this is my squid.conf ## --- squid.conf - http_port 192.168.10.1:3128 transparent hierarchy_stoplist

Re: [squid-users] Vary the cache objects based on the incoming http version, or buckets for different browsers

2008-01-25 Thread Adrian Chadd
On Tue, Jan 22, 2008, Tory M Blue wrote: Ideas? Yes 2.7, but trying to get an idea how stable folks think it is, as it's been noted it has more http/1.1 functionality. 2.7 seems stable enough for the handful of people who have evaluated it. The only real way to know if its stbale for you is,

Re: [squid-users] Vary the cache objects based on the incoming http version, or buckets for different browsers

2008-01-25 Thread Chris Robertson
Tory M Blue wrote: Okay So still working thru some http 1.1 issues as we keep finding more well that won't work.. Due to various bugs in IE 4-6 we have to return 1.1 or they get a script error (it's a .js file). tested both on ie7 and ie6 and in both cases with 1.1 enabled the page is fine.

Re: [squid-users] Squid Transparent Proxy not work

2008-01-25 Thread duren duren
--- Amos Jeffries [EMAIL PROTECTED] wrote: USER 1 $IPT -A PREROUTING -t nat -i $LAN -s $USER1 -m mac --mac-source $MAC_USER1 -j ACCEPT $IPT -t nat -A PREROUTING -i $LAN -s $USER1 -p tcp --dport 80 -j REDIRECT --to-port 3128 $IPT -A PREROUTING -t nat -i $LAN -s ! $USER1 -m mac

[squid-users] [SOLVED]Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-25 Thread bijayant kumar
Thanks to all you and all the members of the list who has supported me to rectify this problem. The startup/init script of squid was wrong, which comes in gentoo. It was setting the filedescriptor limit to 1024. I started it manually as suggested by Adrian Chadd, and it started showing 8192 file

Re: [squid-users] Re: Bug: version= option= tag failure

2008-01-25 Thread Henrik Nordstrom
On fre, 2008-01-25 at 10:21 -0500, [EMAIL PROTECTED] wrote: However, I don't believe this should be how Squid should be handling this issue. If users have both Use SSLv2 and Use SSLv3 checked in IE then SSLv3 should be used and let the user in, ignoring the Use SSLv2 option. The way this

RE: [squid-users] It stopped denying sites!

2008-01-25 Thread Davan Wong
Removing $int_if from that line seems to have solved my problem... -Original Message- From: Davan Wong [mailto:[EMAIL PROTECTED] Sent: January 25, 2008 10:46 AM To: squid-users@squid-cache.org Subject: RE: [squid-users] It stopped denying sites! I've narrowed it down

Re: [squid-users] Re: Bug: version= option= tag failure

2008-01-25 Thread JSiergiej
Henrik, I used the options=NO_SSLv2 tag and I can still access the website with SSLv2. I tested this with openssl and a firefox browser with tsl1 and sslv3 disabled and I get connected everytime. If I use the version=3 tag, I get the error below multiple times in the squid terminal window

[squid-users] How to balance outgoing traffic?

2008-01-25 Thread Gabriele
Hello list, I hope this is the right place to ask. I have googled a lot, but I couldn't find an answer to my problem. My setup is a Debian 4 box which acts as a iptables router/firewall, squid 2.6.18 + dansguardian 2.0.8.6. There are 3 xDSL connections available, and the request I have to

Re: [squid-users] How to balance outgoing traffic?

2008-01-25 Thread ankush grover
On Jan 25, 2008 9:19 PM, Gabriele [EMAIL PROTECTED] wrote: Hello list, I hope this is the right place to ask. I have googled a lot, but I couldn't find an answer to my problem. My setup is a Debian 4 box which acts as a iptables router/firewall, squid 2.6.18 + dansguardian 2.0.8.6. There