Re: [squid-users] refusing connections

2010-12-27 Thread J Webster
Now it is 2799 -rw-r- 1 squid squid 2863056 Dec 27 08:50 /var/spool/squid/swap.state but it was root:squid I changed something in webmin - could that have caused the issue? Why would webmin change the file permissions? -- From: Travel

[squid-users] tproxy configuration

2010-12-27 Thread benjamin fernandis
Hi, I want to deploy tproxy in my network .I m using rhel 5.5.Please provide me good document or configuration guide for getting good explanation.I m new to tproxy. And please suggest me for the same, means what are the caviates , kept in mind while using tproxy. Thanks, Benjo

[squid-users] squid-3.1 couldn't be installed.

2010-12-27 Thread Seok Jiwoo
Dear all, I have a problem of installing of squid-3.1.8-1 when I installed 'squid' on Redhat 5.2, I had the erre message in cache.log, Failed dependencies: per (DBI) is needed by squid-3.1.8-1.el5.x86_64. Please, let me know its reason. best regards. J.

Re: [squid-users] [HELP] As times passed, web browser didn't open.

2010-12-27 Thread Seok Jiwoo
Thaks for reply~ ^^ I did reinstalled [squid 3.0] and I set 'squid.conf' as below. o visible_hostname localhost o http_access allow locahost o http_port 3128 o cache_dir ufs /var/spool/squid/cache 100 16 256 (as default) but still the squid makes web-browser slower and slower. at the end,

Re: [squid-users] squid-3.1 couldn't be installed.

2010-12-27 Thread Orestes Leal R.
I think that you must just install the package Perl::DBI and you're done. LeaL Dear all, I have a problem of installing of squid-3.1.8-1 when I installed 'squid' on Redhat 5.2, I had the erre message in cache.log, Failed dependencies: per (DBI) is needed by squid-3.1.8-1.el5.x86_64.

[squid-users] size of squid binary

2010-12-27 Thread Orestes Leal R.
I've built squid 3.1.10 on openbsd4.6 sucessfuly but my squid binary it's 40M of size, then I do a: strip --strip-unneeded squid to low this to 2M and all ok. it's this size by default normal? squid gets a debug build by default? LeaL

Re: [squid-users] refusing connections

2010-12-27 Thread J Webster
Is it possible that something in this squid.conf might cause a memory block or excessive CPU usage that could lead to this: It seems a coincidence that a server reboot seemed to fix the issue. auth_param basic realm NameHere proxy server auth_param basic credentialsttl 2 hours auth_param basic

Re: [squid-users] Squid 3.2 - Dynamic SSL certs that aren't self-signed

2010-12-27 Thread Alex Ray
Looks like dynamic ssl certs are still broken as of 3.2.0.4: microsoft.com uses an invalid security certificate. The certificate is not trusted because it is self-signed. The certificate is only valid for microsoft.com-BEGIN CERTIFICATE- (Error code: sec_error_untrusted_issuer)

Re: [squid-users] size of squid binary

2010-12-27 Thread Helmut Hullen
Hallo, Orestes, Du meintest am 27.12.10: I've built squid 3.1.10 on openbsd4.6 sucessfuly but my squid binary it's 40M of size, then I do a: strip --strip-unneeded squid to low this to 2M and all ok. it's this size by default normal? squid gets a debug build by default? Slackware,

[squid-users] Add MAC-addresses to log

2010-12-27 Thread Alibek Bolatov
Hello. Do I have a problem for which you need write MAC-addresses to log-files. I do not know very well the C-language itself to make such changes in the source code could not. I understand that I need to make changes to the file access_log.c, the function accessLogCustom or accessLogCommon, using

Re: [squid-users] Remove entries from access.log

2010-12-27 Thread Amos Jeffries
On 27/12/10 07:09, David Touzeau wrote: Dear I have these entries in access.log squid-maison.localhost - - [26/Dec/2010:19:05:13 +0100] GET cache_object://127.0.0.1/diskd HTTP/1.0 200 679 TCP_MISS:NONE squid-maison.localhost - - [26/Dec/2010:19:05:13 +0100] GET

Re: [squid-users] prevent squid being used as spam passthrough

2010-12-27 Thread Amos Jeffries
On 27/12/10 09:23, J Webster wrote: Is it possible for a proxy running on port 80 or 8080 to be used as a pass through or zone origination for spam email? Maybe. If it has been configured as an open proxy. http://wiki.squid-cache.org/SquidFaq/SecurityPitfalls We have had some users sign up

Re: [squid-users] Add MAC-addresses to log

2010-12-27 Thread Amos Jeffries
On 28/12/10 08:44, Alibek Bolatov wrote: Hello. Do I have a problem for which you need write MAC-addresses to log-files. I do not know very well the C-language itself to make such changes in the source code could not. I understand that I need to make changes to the file access_log.c, the

Re: [squid-users] Squid 3.2 - Dynamic SSL certs that aren't self-signed

2010-12-27 Thread Amos Jeffries
On 28/12/10 06:42, Alex Ray wrote: Looks like dynamic ssl certs are still broken as of 3.2.0.4: microsoft.com uses an invalid security certificate. The certificate is not trusted because it is self-signed. The certificate is only valid for microsoft.com-BEGIN CERTIFICATE- (Error code:

Re: [squid-users] User-Agent redirect?

2010-12-27 Thread Amos Jeffries
On 27/12/10 11:07, Daniel Gary wrote: I have a client that runs a handful of vhosts on a single server, frontended by Squid 3 (debian) What would be the simplest solution to doing a redirect in squid when the user-agent is an iphone for example, but only for a specific domain (leaving the other

Re: [squid-users] Monitoring/Performance tuning of squid (stands behind a firewall)

2010-12-27 Thread Amos Jeffries
On 27/12/10 20:40, a bv wrote: Hi , For a squid proxy running behind a firewall (and has a QOS rule for itself) how can i monitor/measure /tune the performance of it. People are always ready to say that internet connection is slow (already have a low bandwith) but i need to find out if there

Re: [squid-users] tproxy configuration

2010-12-27 Thread Amos Jeffries
On 28/12/10 00:55, benjamin fernandis wrote: Hi, I want to deploy tproxy in my network .I m using rhel 5.5.Please provide me good document or configuration guide for getting good explanation.I m new to tproxy. Step #1: upgrade. And please suggest me for the same, means what are the

Re: [squid-users] TCP_MISS/401 when accessing portal on IIS

2010-12-27 Thread Amos Jeffries
On 27/12/10 20:25, Senthilkumar wrote: Hi All, I am using squid 3.1.8 with icap, ntlm scheme. Everything works fine. I have a problem when i connect to a portal which is running on IIS server and it has external authentication.(i am not sure about the authentication used by the iis server, we

Re: [squid-users] Squid 3.2 - Dynamic SSL certs that aren't self-signed

2010-12-27 Thread Alex Ray
Here are logs from /usr/local/squid/var/lib/ssl_db/index.txt V 131124202916Z 058BD142unknown /CN=www.microsoft.com-BEGIN CERTIFICATE- V 131124203005Z 058BD143unknown /CN=clients1.google.com-BEGIN CERTIFICATE- V 131124203006Z

Re: [squid-users] Squid 3.2 - Dynamic SSL certs that aren't self-signed

2010-12-27 Thread Alex Ray
Disregard, I figured it out. In my helper script I had a mistake in counting the number of chars in my cert/key. Fixed that and now it works. On Mon, Dec 27, 2010 at 1:56 PM, Alex Ray alex...@espsolution.net wrote: Here are logs from /usr/local/squid/var/lib/ssl_db/index.txt V      

[squid-users] How to set up squid_session with transparent proxy

2010-12-27 Thread mpnordland
I want to set up a transparent squid proxy to monitor the same box it is running on. It needs to use squid_session to first force a login screen to the user, and then allow web browsing until an idle timeout. This is on Ubuntu 10.10, with squid 2.7. I'd like to use squid3 but I'm not sure it

Re: [squid-users] TCP_MISS/401 when accessing portal on IIS

2010-12-27 Thread Senthilkumar
Thank you. I will check it. Amos Jeffries wrote: On 27/12/10 20:25, Senthilkumar wrote: Hi All, I am using squid 3.1.8 with icap, ntlm scheme. Everything works fine. I have a problem when i connect to a portal which is running on IIS server and it has external authentication.(i am not sure

[squid-users] squid-users-unsubscribe-balramg=gmail....@squid-cache.org

2010-12-27 Thread Balram
squid-users-unsubscribe-balramg=gmail@squid-cache.org