[squid-users] tproxy bridge issues

2011-02-23 Thread jiluspo
acc. to http://wiki.squid-cache.org/Features/Tproxy4 2.6.32 to 2.6.34 have bridging issues on some systems what are these systems. does anybody could confirm ubuntu 10.10 x64 has same issue? -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to

Re: [squid-users] Dedicate Bandwidth to IP Address

2011-02-23 Thread Eliezer
Well it depends on the protocol that is used on the video conference and not necessarily related to the cache proxy. Regards Eliezer On 23/02/2011 09:17, Edmonds Namasenda wrote: Dear all. I would like to have a video conference call on my LAN using a particular I.P Address. This is going

Re: [squid-users] Squid appliance?

2011-02-23 Thread Amos Jeffries
On 23/02/11 19:46, Eliezer wrote: Thanks amos. was very helpful well if you do ask me i think i know the reasons cause i have seen the traffic logs at my work place (some ISP) and some rules sets that people published on the net. also i wanted to ask about the squid-appliance plan

Re: [squid-users] Squid with three isp

2011-02-23 Thread Hasanen AL-Bana
Hi, If you have different IP ranges on the same machine , then you need to add 3 gateways using linux ip route , then you can make use of tcp_outgoing_address. I have it documented here : http://www.snono-systems.com/files/squid-multiwan.pdf On Wed, Feb 23, 2011 at 9:50 AM, Senthilkumar

Re: [squid-users] Squid with three isp

2011-02-23 Thread Amos Jeffries
On 23/02/11 19:50, Senthilkumar wrote: Amos Jeffries wrote: On Wed, 23 Feb 2011 10:41:20 +0530, Senthilkumar wrote: Hello All, We have a gateway machine which has three upstream isp and to make clients use the particular isp we use advance routing based on the source address. When we run

Re: [squid-users] tproxy bridge issues

2011-02-23 Thread Amos Jeffries
On 23/02/11 21:44, jiluspo wrote: acc. to http://wiki.squid-cache.org/Features/Tproxy4 2.6.32 to 2.6.34 have bridging issues on some systems what are these systems. does anybody could confirm ubuntu 10.10 x64 has same issue? -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.11

Re: [squid-users] tproxy bridge issues

2011-02-23 Thread Amos Jeffries
On 23/02/11 21:44, jiluspo wrote: acc. to http://wiki.squid-cache.org/Features/Tproxy4 2.6.32 to 2.6.34 have bridging issues on some systems what are these systems. does anybody could confirm ubuntu 10.10 x64 has same issue? The kernel issues mentioned were sighted and reported in relation

Re: [squid-users] Dedicate Bandwidth to IP Address

2011-02-23 Thread Edmonds Namasenda
Eliezer, these are general video calls; Skype, Sonix etc On Wed, Feb 23, 2011 at 12:45 PM, Eliezer elie...@ec.hadorhabaac.com wrote: Well it depends on the protocol that is used on the video conference and not necessarily related to  the cache proxy. Regards Eliezer On 23/02/2011 09:17,

Re: [squid-users] Squid with three isp

2011-02-23 Thread Senthilkumar
Amos Jeffries wrote: On 23/02/11 19:50, Senthilkumar wrote: Amos Jeffries wrote: On Wed, 23 Feb 2011 10:41:20 +0530, Senthilkumar wrote: Hello All, We have a gateway machine which has three upstream isp and to make clients use the particular isp we use advance routing based on the source

Re: [squid-users] Dedicate Bandwidth to IP Address

2011-02-23 Thread Eliezer
well squid is not a QOS software and in this specific case you should do it in squid with\and your routing\networking system and not only on squid because most of skype data is going using other protocols then http using your squid server however in many cases they are using also http\port 80.

Re: [squid-users] Squid with three isp

2011-02-23 Thread Senthilkumar
Thank you. When we use tcp_outgoing address and select isp . The all traffic seems to be going through the default gateway Ethernet of the squid machine and only reply comes through the tcp out going address assigned Ethernet. Eg isp1- eth1(default gateway) isp2-eth2, client- eth0 In

[squid-users] ESI include fails. Need help with configuration.

2011-02-23 Thread Bo Bendtsen DR TU Web Publicering
Hello, I'm testing different proxies with ESI, so far I have gotten Varnish [ http://www.varnish-cache.org/ ] to process simple edge side includes. But I'm having trouble getting squid to work: ESI processing fails. I would appreciate any help. I have two hosts; one with squid3 (esilinuxtst01

[squid-users] reverse proxy and exchange 2007

2011-02-23 Thread gohone
Hello, I have a 2007 exchange server and I would like make it available from the outside. So I set up a reverse proxy with squid (version 3.0 STABLE19) and a self signed certificate. client -- squid-- Exchange OWA https https The access is

[squid-users] RDP, Certificates and Squid

2011-02-23 Thread Damian Teasdale
Here is our environment: LAN users all go through the proxy for internet access, works fine. A few users need access to RDP to an external partners Terminal Server. The terminal server has a Certificate issued by GoDaddy.com. When the users on the LAN attempt to connect to the external

Re: [squid-users] RDP, Certificates and Squid

2011-02-23 Thread Chad Naugle
In order to troubleshoot, we will need your entire ACL / http_access portions copy/pasted, with sensitive portions edited, if need be. Damian Teasdale da...@oppy.com 2/23/2011 1:12 PM Here is our environment: LAN users all go through the proxy for internet access, works fine. A few users need

RE: [squid-users] RDP, Certificates and Squid

2011-02-23 Thread Damian Teasdale
This is the whole list from what I can tell. acl PURGE method PURGE acl pdr dstdomain clients.performanceobjects.com acl Blackberry src 192.168.x.3 acl Citrix src 192.168.x.34 acl InternetDenied external nt_group Internet_Denied acl FacebookUsers external nt_group FacebookUsers acl Facebook

RE: [squid-users] RDP, Certificates and Squid

2011-02-23 Thread Chad Naugle
I am not certain with my response, but I have some ideas. - Your ACL ordering, that is often the case, is most likely to blame. Squid applies ACL's in order, top-down, and checks each ACL in their order when http_access is being applied. - I believe the ACL blocking access may be the 'PURGE'

RE: [squid-users] RDP, Certificates and Squid

2011-02-23 Thread Amos Jeffries
On Wed, 23 Feb 2011 13:55:54 -0500, Chad Naugle wrote: I am not certain with my response, but I have some ideas. - Your ACL ordering, that is often the case, is most likely to blame. Squid applies ACL's in order, top-down, and checks each ACL in their order when http_access is being applied. -

Re: [squid-users] reverse proxy and exchange 2007

2011-02-23 Thread Amos Jeffries
On Wed, 23 Feb 2011 08:45:46 -0800 (PST), gohone wrote: Hello, I have a 2007 exchange server and I would like make it available from the outside. So I set up a reverse proxy with squid (version 3.0 STABLE19) and a self signed certificate. client -- squid-- Exchange OWA

[squid-users] TIMEOUT_ROUNDROBIN_PARENT and poor SIBLING_HIT performance

2011-02-23 Thread M. Leong Lists
Hi, I've 2 problems where squid is taking excessive time to service a request. My setup: -Accelerator setup -backends are on load balancer, squid is configured to connect to the load balancer IP multiple times -squid's configured to store the cache as long as possible. -icp time is set to

[squid-users] Re: reverse proxy and exchange 2007

2011-02-23 Thread gohone
Thanks for you reply. You are right about the old setting acl all src 0.0.0.0/0.0.0.0 . I removed it and the warning message has disappeared when the daemon is restarted. Concerning my main issue I don't understand when you suggest You can present a real non- self-signed certificate to the

Re: [squid-users] Re: reverse proxy and exchange 2007

2011-02-23 Thread Amos Jeffries
On Wed, 23 Feb 2011 15:19:20 -0800 (PST), gohone wrote: Thanks for you reply. You are right about the old setting acl all src 0.0.0.0/0.0.0.0 . I removed it and the warning message has disappeared when the daemon is restarted. Concerning my main issue I don't understand when you suggest

Re: [squid-users] TIMEOUT_ROUNDROBIN_PARENT and poor SIBLING_HIT performance

2011-02-23 Thread Amos Jeffries
On Wed, 23 Feb 2011 14:55:25 -0800, M. Leong Lists wrote: Hi, I've 2 problems where squid is taking excessive time to service a request. My setup: -Accelerator setup -backends are on load balancer, squid is configured to connect to the load balancer IP multiple times -squid's configured to

[squid-users] NTLM Auth problem

2011-02-23 Thread Julian Pilfold-Bagwell
Hi All, I have a problem with NTLM authentication on squid-2.6.STABLE21-6.el5 on CentOS 5.5. If I run /usr/bin/ntml_auth --username=jpb --domain=BGS, it returns success. Samba (v3.5.6) file sharing works as does winbind's wbinfo -, wbinfo -g, wbinfo -t so I'm fairly sure that both Samba

Re: [squid-users] NTLM Auth problem

2011-02-23 Thread Amos Jeffries
On Thu, 24 Feb 2011 00:59:58 +, Julian Pilfold-Bagwell wrote: Hi All, I have a problem with NTLM authentication on squid-2.6.STABLE21-6.el5 on CentOS 5.5. If I run /usr/bin/ntml_auth --username=jpb --domain=BGS, it returns success. Samba (v3.5.6) file sharing works as does winbind's

Re: [squid-users] Frustrating Invalid Request Reply

2011-02-23 Thread Amos Jeffries
Please keep the replies on the mailing list for others to benefit from. I charge for private assistance. On Wed, 23 Feb 2011 12:32:56 +0200, Ümit Kablan wrote: Hi, 2011/2/22 Amos Jeffries : On Tue, 22 Feb 2011 17:24:39 +0200, Ümit Kablan wrote: 2011/2/21 Amos Jeffries wrote: On Mon, 21