[squid-users] cache hit 100%

2009-01-07 Thread UK SquidUser (AXA-TECH-UK)
Hi... we are running squid 2.6 stable 17 that have been built within the last 6 months. The problem we are experiencing is that one of our servers has hit 100% on the proxycache partition. It is configured in its own filesystem, it shares with nothing... it has a partition of 36Gb and squid is

Re: [squid-users] Defining BL's via acls

2009-01-07 Thread Henrik K
On Tue, Jan 06, 2009 at 11:49:57PM -0700, Joseph L. Casale wrote: Depends on your chosen ACL type and the number of patterns. Many regex may be slower than DG, many dstdomain or dst may improve response time. It looks like the lists are far too large for any regex type acls but the acl

[squid-users] HTTP Header

2009-01-07 Thread Mehmet ÇELiK
Hi all, I am using Squid as Reverse Proxy for my Web Servers. Client IP Address is directing to Web Servers with X_FORWARDED_FOR. But, I want to write Client IP Address to Remote_Address.. I want to this, because.. I am using vBulletin Forum and vBulletin are taking Reverse Proxy IP as

Re: [squid-users] HTTP Header

2009-01-07 Thread Ralf Peng
2009/1/7 Mehmet ÇELiK r...@justunix.org: Hi all, I am using Squid as Reverse Proxy for my Web Servers. Client IP Address is directing to Web Servers with X_FORWARDED_FOR. But, I want to write Client IP Address to Remote_Address.. Yes you can. If I remember that correctly, you should be able

Re: [squid-users] Squid 2.6 and Wordpress

2009-01-07 Thread Frog
Hi, First off apologies for top posting - This mail client (Zimbra webmail) doesn't work well with replies contained in the original mail. If you want to increase Squid's chances of caching WordPress then you could install a Wordpress cache plugin as well. I use Squid as a reverse proxy and on

Re: [squid-users] Defining BL's via acls

2009-01-07 Thread Ralf Peng
2009/1/7 Henrik K h...@hege.li: When using dstdomain with a lot of entries (million), a squid reload might take tens of seconds. During this time it will refuse clients, which is not nice. That sounds not good. How about squid's rotating logs, will it also refuse clients at that time? Ralf.

RE: [squid-users] SquidGuard Replacement

2009-01-07 Thread Thomas Raef
I switched to ufdbguard and have been real pleased with it's performance and support. -Original Message- From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Tuesday, January 06, 2009 2:58 PM To: 'Philipp Rusch - New Vision-IT' Cc: squid-users@squid-cache.org Subject: RE:

[squid-users] squid monitoring

2009-01-07 Thread vivian t
hi how can i setup rrdtool snmpd

[squid-users] Squid failover between DIRECT connect and PARENT PROXY

2009-01-07 Thread Sébastien WENSKE
Hi all, I've set a squid server to use direct connections by default and to use a parent proxy if direct is unavailable: - http_port 8080 acl manager proto cache_object acl localhost

Re: [squid-users] squid monitoring

2009-01-07 Thread Ralf Peng
for SNMP with Squid see: http://wiki.squid-cache.org/SquidFaq/SquidSnmp http://www.visolve.com/squid/whitepapers/monitoringsquid.php 2009/1/7 vivian t vivij...@gmail.com: hi how can i setup rrdtool snmpd

[squid-users] WCCP configuration

2009-01-07 Thread viveksnv
OS - Fedor8 Kernal - 2.6.20 Cttproxy - 2.6.20 Cisco Router - IOS 12.4 We have compiled squid+Tproxy and it works fine. Tunelling has been done between the squid machine and the router. We need to configure WCCP. The WCCP config in squid:- wccp2_router xxx.xx.xxx.xxx wccp_version 4

Re: [squid-users] HTTP Header

2009-01-07 Thread Mehmet ÇELiK
Hello, I think you understand me wrong or you did not read all of my mail. The problem is that: I want to change the place of the value at X_FORWARDED_FOR.with REMOTE ADDR. I mean, when web server looked at to HEADER, It can see the Client IP Address, It does not see REVERSE. And I want to

Re: [squid-users] HTTP Header

2009-01-07 Thread Ralf Peng
2009/1/7 Mehmet ÇELiK r...@justunix.org: Hello, I think you understand me wrong or you did not read all of my mail. The problem is that: I want to change the place of the value at X_FORWARDED_FOR.with REMOTE ADDR. I mean, when web server looked at to HEADER, It can see the Client IP

[squid-users] Problems to access specific site

2009-01-07 Thread David Walcher
Hello and Happy new Year to all! Following problem: If I want to access http://www.dispo.co.at/ via Squid Proxy (Version 2.6.5-6etch2) i get an HTTP 500 Internal Server Error. If I access this page without Squid it works fine. Here is a debug log. http://paste-it.net/public/j56a24e/ Can

Re: [squid-users] WCCP configuration

2009-01-07 Thread Regardt van de Vyver
Hi, CEF: 11336 Indicates that all requests ended up going direct ie the router presumed your cache could not serve the request. Increase debugging levels on the cache with debug_options 80,3 and on the cisco with debug ip wccp packets and debug ip wccp events

[squid-users] Re Defining BL's via acls

2009-01-07 Thread Chuck Kollars
What kind of performance issues should I expect if I remove squidGuard and simply make a series of acl's pointing to shalla bl files directly then denying them with http_access deny statements? I have to admit I don't know specific numbers as I don't know anyone that's actually tried it. The

Re: [squid-users] Re Defining BL's via acls

2009-01-07 Thread Henrik K
On Wed, Jan 07, 2009 at 09:53:49AM -0800, Chuck Kollars wrote: What kind of performance issues should I expect if I remove squidGuard and simply make a series of acl's pointing to shalla bl files directly then denying them with http_access deny statements? I have to admit I don't know

[squid-users] Re: WCCP configuration

2009-01-07 Thread Henrik Nordstrom
ons 2009-01-07 klockan 08:46 -0500 skrev vivek...@aol.in: wccp2_router xxx.xx.xxx.xxx wccp_version 4 wccp2_forwarding_method 1 wccp2_return_method 1 wccp2_assignment_method 1 wccp2_service dynamic 80 wccp2_service_info 80 protocol=tcp flags=src_ip_hash priority=240 ports=80

RE: [squid-users] Re Defining BL's via acls

2009-01-07 Thread Joseph L. Casale
I think it's pretty clear he meant using the files downloaded from shalla on his server. I know of no system that queries remote files. BLs mean DNS based lookups, which shalla does not have. Yeah, that's exactly what I meant. I don't think over the fastest pipe one could remotely access these

RE: [squid-users] SquidGuard Replacement

2009-01-07 Thread Joseph L. Casale
I switched to ufdbguard and have been real pleased with it's performance and support. Thomas, Do I understand this right, the software is free but the db is not? Can one use shalla lists with this software? Thanks! jlc

Re: [squid-users] SquidGuard Replacement

2009-01-07 Thread Philipp Rusch - New Vision IT
Joseph L. Casale schrieb: I switched to ufdbguard and have been real pleased with it's performance and support. Thomas, Do I understand this right, the software is free but the db is not? Can one use shalla lists with this software? Thanks! jlc Joseph, I wasn't able to access the

Re: [squid-users] HTTP_HEADER

2009-01-07 Thread Mehmet ÇELİK
As per usual, the easiest fix is to re-write the web app properly. The REMOTE_ADDR is taken by PHP from the network layer below everything. Otherwise you will have to patch your kernel and use the tproxy feature of Squid. Amos -- Please be using Current Stable Squid 2.7.STABLE5 or

RE: [squid-users] SquidGuard Replacement

2009-01-07 Thread Joseph L. Casale
Joseph, I wasn't able to access the systems with the SG-config today. So let's solve your problem with SG tomorrow instead of hunting for a suboptimal solution. Did you try to post your prob to Shalla / Christine Kronberg ? She is usually a great help. Philipp, I did post just now, for some

Re: Re: [squid-users] Help with sarg usage

2009-01-07 Thread moktarino
I don't know if it's what you wanted, but I found a way to create reports on historical data in logs that have been rotated: gunzip squidlog*.gz -d -c large.log sarg -l ./large.log -d 01/01/2008-01/02/2008 Basically, unzipping all the logfiles (you could also just do a subset) to STDOUT and

Re: [squid-users] HTTP_HEADER

2009-01-07 Thread Adrian Chadd
No, I don't think it can. I'm just wrapping up some changes to FreeBSD-current and my Squid fork to support tproxy-like functionality under FreeBSD + ipfw. Adrian 2009/1/7 Mehmet ÇELİK r...@justunix.org: As per usual, the easiest fix is to re-write the web app properly. The REMOTE_ADDR is

[squid-users] Epoll Doubts

2009-01-07 Thread Rafael Gomes
Guys, Please help. I already searched in many websites, squid-cache too, but don't find. Can you please tell me what is epoll? What this do? What I can improve my Squid with this option? Thanks, Rafael Gomes Consultor em TI Embaixador Fedora LPIC-1 (71) 8709-1289

RE: [squid-users] SquidGuard Replacement

2009-01-07 Thread Joseph L. Casale
I wasn't able to access the systems with the SG-config today. So let's solve your problem with SG tomorrow instead of hunting for a suboptimal solution. Did you try to post your prob to Shalla / Christine Kronberg ? She is usually a great help. Philipp, It turned out to be the in-addr that was

Re: [squid-users] Problems to access specific site

2009-01-07 Thread Alex Braunegg
No issues accessing the site through Squid 3.0 3.0.STABLE10 on CentOS 5.2 or via IWSVA 3.1 On Thu, Jan 8, 2009 at 2:42 AM, David Walcher david.walc...@knapp.com wrote: Hello and Happy new Year to all! Following problem: If I want to access http://www.dispo.co.at/ via Squid Proxy (Version

[squid-users] disable-ident-lookups

2009-01-07 Thread Rafael Gomes
Hi Guys, This option disable what type of ident? Thanks Rafael Gomes Consultor em TI Embaixador Fedora LPIC-1 (71) 8709-1289

[squid-users] Tuning in compilation

2009-01-07 Thread Rafael Gomes
Guys, I am making a document with better options for a good one Squid compilation, with better option to improve perfomance. So I searched in many websites and found following options. Can you please tell me if there is more good options? The enviroment is a server for more than 200 people,

Re: [squid-users] Tuning in compilation

2009-01-07 Thread Ralf Peng
2009/1/8 Rafael Gomes linux.r...@gmail.com: Guys, I am making a document with better options for a good one Squid compilation, with better option to improve perfomance. So I searched in many websites and found following options. Can you please tell me if there is more good options? There

Re: [squid-users] Epoll Doubts

2009-01-07 Thread Ralf Peng
2009/1/8 Rafael Gomes linux.r...@gmail.com: Guys, Please help. I already searched in many websites, squid-cache too, but don't find. Can you please tell me what is epoll? see: http://linux.die.net/man/4/epoll What this do? You don't know much about it, just know it's an efficient

[squid-users] OWA accelerator authentication weirdness

2009-01-07 Thread Alan Lehman
Running 3.0 my accelerator for OWA works fine. The browser user authentication prompt is A user name and password are being requested by ... The same configuration on 2.6STABLE6 or 3.1.0.3 - The browser authentication prompt is now different: Enter user name and password for When I enter