[squid-users] Are you on mobile/handset?

2009-06-16 Thread Luis Daniel Lucio Quiroz
Hi Squids, How do you think should be the best way to detect if a user is surfing inet throut its mobile/handset? TIA LD

Re: [squid-users] Are you on mobile/handset?

2009-06-16 Thread Gavin McCullagh
Hi On 16 Jun 2009, at 08:05, Luis Daniel Lucio Quiroz luis.daniel.lu...@gmail.com wrote: Hi Squids, How do you think should be the best way to detect if a user is surfing inet throut its mobile/handset? The user agent string sounds like the obvious answer? Gavin

Re: [squid-users] How to setup squid proxy to run in fail-over mode

2009-06-16 Thread Gontzal
Hi Abdul, As has been said the most simple solution is to use a PAC file, i'm using it at my company and balancing the connections depending on the subnet: subnet A goes throught proxy1 and subnet B goes throught proxy2. When proxy1 goes down, connections goes to proxy2, but it doesn´t

[squid-users] Authntication loop

2009-06-16 Thread csampath
Hi All, I am using squid3.0 satble 15. I am facing the authentication loop . For a page to load squid is asking for 3 to 5 times (may be for each ajax request) When I give wrong password it is saying Sorry, you are not currently allowed to request http://yahoo.com from this cache until you

Re: [squid-users] Squid on DMZ

2009-06-16 Thread João Kuchnier
Thanks for your help! I manage how to configure rules on shorewall fixing squid on DMZ: http://www.shorewall.net/Shorewall_Squid_Usage.html In addition of HTTP traffic loading, this extra flow interfere on Internet browsing speed? João Hi everyone! Today I'm running squid on firewall and

[squid-users] Help with squid cache dir

2009-06-16 Thread Juan Manuel Perrote
Hello: I have a problem with a cache squid, squid not generate files on the cache dir. * I have a squid as a reverse proxy. * My version of squid is 3.0.RC1. * On the cache dir structure I have a lot of directories, but all are empty. * The cache dir have 777 permissions on all structure * The

[squid-users] Bypassing Squid using ACL's

2009-06-16 Thread Jamie Orzechowski
I am trying to avoid using iptables to bypass some sites which have issues with squid. I have created the following but the sites are still broken ... any ideas how to force these sites to go direct? acl directurls url_regex /etc/squid3/direct-urls cache deny directurls Contents of

[squid-users] Applying ACLs to access_log directive

2009-06-16 Thread Jon Gregory
I am using SquidNT 2.7 STABLE 5 on WinXP SP3 running as a service and would like to sense check what I am attempting but failing to achieve.  From all the documentation I have read from Visolve, squid-cache.org FAQ and this lists history I am creating a valid set of directives in the below

Re: [squid-users] Bypassing Squid using ACL's

2009-06-16 Thread Tim Bates
Is the issue that they complain you aren't allowed to view content due to location? If so, what you want to do is prevent the X-Forwarded-For header from being sent by using the header_access ACL. To disable sending it for any site use: header_access X-Forwarded-For deny all To do it for just

[squid-users] Squid rules analyser

2009-06-16 Thread Alberto Cappadonia
Dear squid users, we are developing a Java-based tool to analyse content filtering rules (acl, http_access,...) for squid. The objective is to provide administrators with a tool able to help them in identifying potential mistakes in the squid configuration. More in detail, the aims are: -

[squid-users] optimize squid

2009-06-16 Thread squid proxy
hi I'd like to optimize according to this webpage http://www.linux-faqs.com/squid.php my squid 2.6.STABLE5 installed on Debian Etch (PC 4, 2GHz, 2GB RAM) for about 150 users. I should put the following two lines: ulimit -HSn 8192 echo 1024 32768 /proc/sys/net/ipv4/ip_local_port_range in

[squid-users] commBind Errors

2009-06-16 Thread twinturbo
SLES10 Squid 3.1.0.7 I am seeing continual errors commBind: Cannot bind socket FD 34 to 10.106.88.65:3128: (98) Address already in use I can't seem to find any usefull information about these errors? can anyone shed any light? Thanks Rob

[squid-users] SUID as inbound https proxy and out bound http proxy

2009-06-16 Thread csampath
Hello, Could any one successful in configuring the squid as both inbound and out bound proxy? client)--- squidorigin server All web traffic should go as https

[squid-users] Computers on my network cannot access internet via Squid cache

2009-06-16 Thread Mark Lodge
I have installed debian to run Squid cache as a caching proxy. Ive been bashing away now for 2 days and i have managed to install squid (i first tried manually, but that did not work so i used synaptic software packager to install it (from Administration menu) That went well, thereafter i

[squid-users] Squid Slowing down flash based speed tests

2009-06-16 Thread Jamie Orzechowski
For some reason when squid is running a speed test (www.speedtest.net) will run fine though the download but when it tries the upload test there will be a 20 second pause then it will start. With squid disabled everything runs as normal. No delay pools in my configs. It affects other flash

Re: [squid-users] AD groups / wbinfo_group.pl problem

2009-06-16 Thread Kevin Blackwell
Jakob, recently I've been having the same problem. You find a fix? Kevin On Tue, Oct 7, 2008 at 11:50 AM, Jakob Curdesj...@info-systems.de wrote: Hi, when trying to setup NTLM authentication  against an AD controller I ran into an issue with testing against Windows Group membership.

Re: [squid-users] Bypassing squid for certain sites

2009-06-16 Thread Chris Robertson
Jamie Orzechowski wrote: I am having issues with a few sites like megavideo, hotmail, etc and looking to bypass them entirely via IPTables ... I have added some rules to IPTables but I still see the traffic hitting the caches. Any ideas? Strange thing is that when running an iptables --list it

[squid-users] wbinfo and wbinfo_group.pl broken

2009-06-16 Thread Kevin Blackwell
I'm not sure what happened, but all of a sudden wbinfo and wbinfo_group.pl are not returning group data. ./testwb ++ wbinfo -n USER + sid='S-1-5-21-1607859618-1323328405-3834754132-2081 User (1)' + wbinfo -Y 'S-1-5-21-1607859618-1323328405-3834754132-2081 User (1)' Could not convert sid

[squid-users] NTLM authentication + Administrator user

2009-06-16 Thread Sergio - Embalatec
Hello, is my first post in the list, I wonder if someone already went through this problem. I'm using Squid 2.7.STABLE3 with NTLM authentication. Windows users authenticate without problems, but when logged in with User administrator can not access the Internet, is how he had managed to

Re: [squid-users] How to setup squid proxy to run in fail-over mode

2009-06-16 Thread Chris Robertson
Gontzal wrote: Hi Abdul, As has been said the most simple solution is to use a PAC file, i'm using it at my company and balancing the connections depending on the subnet: subnet A goes throught proxy1 and subnet B goes throught proxy2. When proxy1 goes down, connections goes to proxy2, but it

Re: [squid-users] squid_ldap_auth failure

2009-06-16 Thread Chris Robertson
Benjamin Fleckenstein wrote: Hi there, I've tried to set up a connection from a Squid Proxy (Version 2.6.STABLE10) to our AD Server (Windows 2003 Server). I've already tried several commands but there always appears an error. I already checked different forums and manuals but I don't get the

Re: [squid-users] Authntication loop

2009-06-16 Thread Chris Robertson
csampath wrote: Hi All, I am using squid3.0 satble 15. I am facing the authentication loop . For a page to load squid is asking for 3 to 5 times (may be for each ajax request) When I give wrong password it is saying Sorry, you are not currently allowed to request http://yahoo.com from this

Re: [squid-users] Help with squid cache dir

2009-06-16 Thread Chris Robertson
Juan Manuel Perrote wrote: Hello: I have a problem with a cache squid, squid not generate files on the cache dir. * I have a squid as a reverse proxy. * My version of squid is 3.0.RC1. Yikes. 3.0.RC1 is at least better than the PRE versions, but it's still not a Stable release. It's

Re: [squid-users] wbinfo and wbinfo_group.pl broken

2009-06-16 Thread Kinkie
On Tue, Jun 16, 2009 at 8:27 PM, Kevin Blackwellakblack...@gmail.com wrote: I'm not  sure what happened, but all of a sudden wbinfo and wbinfo_group.pl are not returning group data. You may want to talk to some Samba users group. Squid uses Samba's services for AD-related activities. --

Re: [squid-users] Applying ACLs to access_log directive

2009-06-16 Thread Chris Robertson
Jon Gregory wrote: I am using SquidNT 2.7 STABLE 5 on WinXP SP3 running as a service and would like to sense check what I am attempting but failing to achieve. From all the documentation I have read from Visolve, squid-cache.org FAQ and this lists history I am creating a valid set of

Re: [squid-users] optimize squid

2009-06-16 Thread Chris Robertson
squid proxy wrote: hi I'd like to optimize according to this webpage http://www.linux-faqs.com/squid.php This article talks about patching ReiserFS into the 2.2 kernel and adding UDMA 66 support. Neat. my squid 2.6.STABLE5 installed on Debian Etch (PC 4, 2GHz, 2GB RAM) for about 150

Re: [squid-users] commBind Errors

2009-06-16 Thread Chris Robertson
twintu...@f2s.com wrote: SLES10 Squid 3.1.0.7 I am seeing continual errors commBind: Cannot bind socket FD 34 to 10.106.88.65:3128: (98) Address already in use I can't seem to find any usefull information about these errors? can anyone shed any light? Something is already using

Re: [squid-users] SUID as inbound https proxy and out bound http proxy

2009-06-16 Thread Chris Robertson
csampath wrote: Hello, Could any one successful in configuring the squid as both inbound and out bound proxy? Are you looking to use one Squid instance as both an accelerator AND a caching web proxy?

Re: [squid-users] Computers on my network cannot access internet via Squid cache

2009-06-16 Thread Chris Robertson
Mark Lodge wrote: I have installed debian to run Squid cache as a caching proxy. Ive been bashing away now for 2 days and i have managed to install squid (i first tried manually, but that did not work so i used synaptic software packager to install it (from Administration menu) That went

Re: [squid-users] Squid Slowing down flash based speed tests

2009-06-16 Thread Chris Robertson
Jamie Orzechowski wrote: For some reason when squid is running a speed test (www.speedtest.net) will run fine though the download but when it tries the upload test there will be a 20 second pause then it will start. With squid disabled everything runs as normal. No delay pools in my configs.

Re: [squid-users] AD groups / wbinfo_group.pl problem

2009-06-16 Thread Chris Robertson
Kevin Blackwell wrote: Jakob, recently I've been having the same problem. You find a fix? Kevin Perhaps related to http://www.mail-archive.com/debian-bugs-d...@lists.debian.org/msg349766.html? Chris

Re: [squid-users] extracting icp_query_timeout info?

2009-06-16 Thread Chris Robertson
Ross J. Reedstrom wrote: On Mon, Jun 15, 2009 at 12:16:27PM -0800, Chris Robertson wrote: Using squidclient mgr:server_list there is a AVG RTT value. In mgr:digest_stats there is icp.query_median_svc_time. Which are both useful values. However, they don't tell me what value the

[squid-users] 2.7.Stable6 httpReadReply: Excess data

2009-06-16 Thread Quin Guin
Hi, I am in the need of some assistance in looking into a high number of httpReadReply: Excess data entries around 3000 cache.log entries per day per SQUID server. The httpReadReply: Excess data from GET http://xx; this is happening on many sites from my reading it is in most cases it

[squid-users] Problems with H/W SSL acceleration

2009-06-16 Thread Steven Paster
Hi, We are trying to use a Cavium H/W SSL acceleration card to accelerate SSL encryption.  The Cavium driver builds and installs without complaint.  Cavium supplies an SDK for building libcrypto.a and libssl.a.  These too built without issue.  We compiled Squid 3.1.0.4 statically using the

[squid-users] Squid for Windows users **Best Practice**

2009-06-16 Thread Beavis
All, I just want to get some views from folks that use squid on a windows environment. I'm looking at the following scenario. a.) running squid that can be use by windows users (auth via ldap, ntlm. AD) b.) site access is on a per group basis (squid auth or through squidguard) c.) Squid

[squid-users] Squid - WCCP and ASA

2009-06-16 Thread Parvinder Bhasin
I have setup of squid ..which was compiled with --enable-delay-pools option. Works really well but without WCCP. I enabled WCCP support in the squid config and also enabled wccp support on my ASA. Setup GRE tunnel etc. For my testing purpose I am only having ONE client IP go through WCCP.

FW: [squid-users] Tproxy Help // Transparent works fine

2009-06-16 Thread Alexandre DeAraujo
-Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Monday, June 15, 2009 9:21 PM To: Alexandre DeAraujo Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Tproxy Help // Transparent works fine Should just be an upgrade Squid to 3.1 release and follow the

Re: FW: [squid-users] Tproxy Help // Transparent works fine

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 17:06:19 -0700, Alexandre DeAraujo al...@cal.net wrote: -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Monday, June 15, 2009 9:21 PM To: Alexandre DeAraujo Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Tproxy Help //

Re: [squid-users] 2.7.Stable6 httpReadReply: Excess data

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 15:25:05 -0700 (PDT), Quin Guin quing...@yahoo.com wrote: Hi, I am in the need of some assistance in looking into a high number of httpReadReply: Excess data entries around 3000 cache.log entries per day per SQUID server. The httpReadReply: Excess data from GET

Re: [squid-users] Squid - WCCP and ASA

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 16:49:56 -0700, Parvinder Bhasin parvinder.bha...@gmail.com wrote: I have setup of squid ..which was compiled with --enable-delay-pools option. Works really well but without WCCP. I enabled WCCP support in the squid config and also enabled wccp support on my ASA.

Re: [squid-users] Squid for Windows users **Best Practice**

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 17:29:33 -0600, Beavis pfu...@gmail.com wrote: All, I just want to get some views from folks that use squid on a windows environment. I'm looking at the following scenario. a.) running squid that can be use by windows users (auth via ldap, ntlm. AD) b.) site access

Re: [squid-users] Problems with H/W SSL acceleration

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 15:30:54 -0700, Steven Paster spas...@facetime.com wrote: Hi, We are trying to use a Cavium H/W SSL acceleration card to accelerate SSL encryption. The Cavium driver builds and installs without complaint. Cavium supplies an SDK for building libcrypto.a and libssl.a.

Re: [squid-users] AD groups / wbinfo_group.pl problem

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 13:02:53 -0800, Chris Robertson crobert...@gci.net wrote: Kevin Blackwell wrote: Jakob, recently I've been having the same problem. You find a fix? Kevin Perhaps related to http://www.mail-archive.com/debian-bugs-d...@lists.debian.org/msg349766.html? Chris That

Re: [squid-users] Help with squid cache dir

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 09:23:36 -0300, Juan Manuel Perrote jperr...@educacion.rionegro.gov.ar wrote: Hello: I have a problem with a cache squid, squid not generate files on the cache dir. * I have a squid as a reverse proxy. * My version of squid is 3.0.RC1. * On the cache dir structure I

Re: [squid-users] NTLM authentication + Administrator user

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 15:37:52 +, Sergio - Embalatec sergio.so...@embalatec.com.br wrote: Hello, is my first post in the list, I wonder if someone already went through this problem. I'm using Squid 2.7.STABLE3 with NTLM authentication. Windows users authenticate without problems, but

Re: [squid-users] Squid rules analyser

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 16:14:27 +0200, Alberto Cappadonia alberto.cappado...@polito.it wrote: Dear squid users, we are developing a Java-based tool to analyse content filtering rules (acl, http_access,...) for squid. The objective is to provide administrators with a tool able to help them in

Re: [squid-users] Squid on DMZ

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 08:43:29 -0300, João Kuchnier joao.kuchn...@gmail.com wrote: Thanks for your help! I manage how to configure rules on shorewall fixing squid on DMZ: http://www.shorewall.net/Shorewall_Squid_Usage.html In addition of HTTP traffic loading, this extra flow interfere on

Re: [squid-users] Are you on mobile/handset?

2009-06-16 Thread Amos Jeffries
On Tue, 16 Jun 2009 08:05:17 +0200, Luis Daniel Lucio Quiroz luis.daniel.lu...@gmail.com wrote: Hi Squids, How do you think should be the best way to detect if a user is surfing inet throut its mobile/handset? TIA LD Pretty much the purpose of the User-Agent: header. Amos

Re: [squid-users] Squid for Windows users **Best Practice**

2009-06-16 Thread Beavis
thanks for the reply amos.. I'm sorry it seems that i have not been clear on how i want to do this. I'm not planning to put squid on windows, my plan is to get some best practice from folks that have experience on using squid as a proxy for their windows network (with AD and all). I'm looking

Fw: Re: [squid-users] NONE/411 Length Required

2009-06-16 Thread Bijayant Kumar
Bijayant Kumar --- On Mon, 15/6/09, Bijayant Kumar bijayan...@yahoo.com wrote: From: Bijayant Kumar bijayan...@yahoo.com Subject: Re: [squid-users] NONE/411 Length Required To: squid users squid-users@squid-cache.org Date: Monday, 15 June, 2009, 6:48 PM --- On Mon, 15/6/09, Amos