Re: [squid-users] how about releasing the major supported linux distros results? and what about dynamic content sites?

2012-01-04 Thread Amos Jeffries
On 4/01/2012 5:32 p.m., Eliezer Croitoru wrote: i have couple of things things: i have made a long way of testing squid for a couple of days on various versions of linux distors such as centos 5.7\6.0\6.2 fedora 15\16 ubuntu 10.04.3\11.10 gentoo(on the last portage) using tproxy and forward

Re: [squid-users] Ephemeral Port Range

2012-01-04 Thread Amos Jeffries
On 4/01/2012 8:09 p.m., Chia Wei LEE wrote: Hi I add the below config to squid.conf max_filedescriptors 8192 and i run the /usr/local/squid/bin/squidclient mgr:info | grep 'file descri', and it show the correct value that i want for the max_filedescriptors. Is it a must to reconfigure again

[squid-users] filtering out cache.log messages in Squid 3.2

2012-01-04 Thread alex sharaz
Hi, I'm running a number of 3.2 caches behind a hardware load balancer that performs health checks every 30 seconds by doing a head http:// non resolvable FQDN/fred.txt and expecting a 503 status code to be returned from the server. If it gets this, real traffic is passed to the cache

Re: [squid-users] Squid 3.2.0.14 on OpenBSD with 1 workers results in Cannot fake shared segments in SMP config errors

2012-01-04 Thread Amos Jeffries
On 4/01/2012 7:28 p.m., Henri Wahl wrote: Your system is missing shared memory support. So this would not work in general on OpenBSD? On the other hand there are certain SHM-settings on OpenBSD: kern.sysvshm=1 kern.malloc.kmemnames=... kern.malloc.kmemstat.shm=(inuse = 2, calls = 2, memuse

[squid-users] Squid Forbidden error for some websites

2012-01-04 Thread Muhammed Sameer
Hey, I installed and configured squid 2.6 stable, everything was working fine till my users started complaining of forbidden errors on certain websites The exact error that was reported was s Forbidden You do not have permission to access / on this server. Additionally, A 500 Internal Server

Re: [squid-users] filtering out cache.log messages in Squid 3.2

2012-01-04 Thread Amos Jeffries
On 4/01/2012 10:32 p.m., alex sharaz wrote: Hi, I'm running a number of 3.2 caches behind a hardware load balancer that performs health checks every 30 seconds by doing a head http:// non resolvable FQDN/fred.txt and expecting a 503 status code to be returned from the server. If it gets this,

Re: [squid-users] Squid Forbidden error for some websites

2012-01-04 Thread Amos Jeffries
On 4/01/2012 10:58 p.m., Muhammed Sameer wrote: Hey, I installed and configured squid 2.6 stable, everything was working fine till my users started complaining of forbidden errors on certain websites The exact error that was reported was s Forbidden You do not have permission to access / on

Re: [squid-users] how about releasing the major supported linux distros results? and what about dynamic content sites?

2012-01-04 Thread Eliezer Croitoru
On 04/01/2012 11:15, Amos Jeffries wrote: On 4/01/2012 5:32 p.m., Eliezer Croitoru wrote: i have couple of things things: i have made a long way of testing squid for a couple of days on various versions of linux distors such as centos 5.7\6.0\6.2 fedora 15\16 ubuntu 10.04.3\11.10 gentoo(on the

Re: [squid-users] Squid 3.2.0.8 and SMP workers problem.

2012-01-04 Thread Paweł Mojski
W dniu 2012-01-03 23:41, Amos Jeffries pisze: [...] config? tried 3.2.0.14? All works fine now. I made a mistake, squid had no rights to write var/run/squid/*.ipc files. Thanks for your help Amos. Regards; Pawel Mojski

Re: [squid-users] ICAP problem in 3.1.18

2012-01-04 Thread Daniel Beschorner
There is also a strange 1-byte body attached. It could be the body pipeline or network I/O functions hung waiting for more data in order to prevent single-byte packets. Amos Hi Amos, exactly this seems to be the point, but in an other way! I think the patch fails to do the contentSize =

Re: [squid-users] squid ssl interception Vscan plus content filtering

2012-01-04 Thread Christian Kasper
Hmmm, i think the description of my problem was not correct. I mean, i want to vscan the ssl traffic and maybe avoid download of special filetypes in the same step. I want to use dansguardian to solve this problem. Momentary my Client connect to dansquardian, then to squid - sslbumps to

[squid-users] Re: squid ssl interception Vscan plus content filtering

2012-01-04 Thread sichent
On 1/4/2012 3:00 PM, Christian Kasper wrote: Hmmm, I mean, i want to vscan the ssl traffic and maybe avoid download of special filetypes in the same step. I want to use dansguardian to solve this problem. Momentary my Client connect to dansquardian, then to squid - sslbumps to clamav. All http

Re: [squid-users] ICAP problem in 3.1.18

2012-01-04 Thread Daniel Beschorner
I think the patch fails to do the contentSize = 1 handling correctly, because the bytesWanted call returns ambiguously 0 in case of contentSize = 1. Daniel Filed by another user as http://bugs.squid-cache.org/show_bug.cgi?id=3466 So we can close this here. Thank you! Daniel

Re: [squid-users] squid ssl interception Vscan plus content filtering

2012-01-04 Thread Amos Jeffries
On Wed, 04 Jan 2012 15:00:39 +0100, Christian Kasper wrote: Hmmm, i think the description of my problem was not correct. I mean, i want to vscan the ssl traffic and maybe avoid download of special filetypes in the same step. I want to use dansguardian to solve this problem. Momentary my Client

Re: [squid-users] Re: Re: Kerberos with LDAP authentication failover and iTunes auth problems

2012-01-04 Thread James Robertson
You should use two different computer accounts. For Kerberos the machine name does not matter only the user- and service-principalname is of importance. So use net ads join computername and for msktutil use something like computername-HTTP as computername. The issue with using the same name