Re: [squid-users] [FTP BUG] squid 3.HEAD-BZR returns empty. Squid 3.1.8-20101023 ok.

2010-10-25 Thread Amos Jeffries
On Tue, 26 Oct 2010 00:04:45 +0800, Jeff Chua wrote: > On Mon, Oct 25, 2010 at 1:42 PM, Amos Jeffries > wrote: >> On 24/10/10 16:23, Jeff Chua wrote: > >> As documented everywhere about reporting bugs and mailing list usage "do >> NOT >> send bug reports to

Re: [squid-users] disallow caching based on agent

2010-10-25 Thread Amos Jeffries
On Mon, 25 Oct 2010 12:38:49 -0400, alexus wrote: > is there a way to disallow serving of pages based on browser (agent)? > I'm getting a lot of these: > > XX.XX.XX.XX - - [25/Oct/2010:16:37:44 +] "GET > http://www.google.com/gwt/x? HTTP/1.1" 200 2232 "-" > "SAMSUNG-SGH-E250/1.0 Profile/MIDP-

Re: [squid-users] Reverse Proxy Cache ONLY Relative URL

2010-10-26 Thread Amos Jeffries
On Tue, 26 Oct 2010 09:43:45 -0500, "Sokol, Ryan - 1244" wrote: > Sorry if this has already been answered, but I can't seem to find it under > what I'm searching. > > I have 2 squids set up as reverse proxies and are load balanced for the > URL http://www.domain.com. I am trying to precache cert

Re: [squid-users] Authenticating Across Windows Domains

2010-10-26 Thread Amos Jeffries
On Tue, 26 Oct 2010 17:30:48 -0500, "Clive Christie" wrote: > Hi , > > So this is my setup. I have a web filter running Dansguardian and I'm using > squid as the underlying proxy server. I have to login to an Intranet Site So you have a two-proxy hierarchy: Client -> DG -> Squid --> Internet

Re: [squid-users] disallow caching based on agent

2010-10-26 Thread Amos Jeffries
On Tue, 26 Oct 2010 16:34:52 -0400, alexus wrote: > On Mon, Oct 25, 2010 at 6:38 PM, Amos Jeffries > wrote: >> On Mon, 25 Oct 2010 12:38:49 -0400, alexus wrote: >>> is there a way to disallow serving of pages based on browser (agent)? >>> I'm getting a lot of

Re: [squid-users] ACL blocks http, but not https

2010-10-27 Thread Amos Jeffries
On 27/10/10 19:57, Daniel van Soest wrote: Marc Muehlfeld schrieb: Hello, I have blocked some URLs through an url_regex acl, which works, if the URL contains any protocol execept https. The "blocked_urls.lst" file contains lines like: ([^\/]\.facebook\.com\/|[^\/]\.facebook\.com$|^.*://faceboo

Re: [squid-users] ACL blocks http, but not https

2010-10-27 Thread Amos Jeffries
Re-doing since my earlier mail seems to have gone astray. Apologies if you get this twice. On 27/10/10 01:12, Marc Muehlfeld wrote: Hello, I have blocked some URLs through an url_regex acl, which works, if the URL contains any protocol execept https. The "blocked_urls.lst" file contains lines

Re: [squid-users] ACL blocks http, but not https

2010-10-27 Thread Amos Jeffries
On 27/10/10 22:24, Marc Muehlfeld wrote: One more information: I enabled debugging and got the following information: 2010/10/27 11:22:36| The request CONNECT www.facebook.com:443 is ALLOWED, because it matched 'MyNetworkMR_Clt' But why it matches 'MyNetworkMR_Clt' and not rule 'blocked_urls'?

Re: [squid-users] disallow caching based on agent

2010-10-27 Thread Amos Jeffries
On Wed, 27 Oct 2010 13:39:59 -0400, alexus wrote: > On Tue, Oct 26, 2010 at 10:15 PM, Amos Jeffries > wrote: >> On Tue, 26 Oct 2010 16:34:52 -0400, alexus wrote: >>> On Mon, Oct 25, 2010 at 6:38 PM, Amos Jeffries >>> wrote: >>>> On Mon, 25 Oct 2010 12:

Re: [squid-users] ACL blocks http, but not https

2010-10-28 Thread Amos Jeffries
On 28/10/10 23:00, Marc Muehlfeld wrote: Am 27.10.2010 12:10, schrieb Amos Jeffries: What you need to take away from this is that 1) where possible add whole domains and sets of sub-domains to "A" the first ACL. and 2) always make sure that your second "B" and regex ACL ar

Re: [squid-users] Squid 3.1.7 cannot load flash video in news.yahoo.com

2010-10-28 Thread Amos Jeffries
On 28/10/10 23:07, Pete Fong wrote: Hi Everybody, My linux box is Centos 5.5 with Squid 3.1.7. I can not play the flash video in news.yahoo.com. It will be showed the black screen on the flash video screen. Anybody know how to fix it ? I have tried the Squid 3.0.x, I got the same fail result. I

Re: [squid-users] Proxy-Connection: Keep-Alive in POST Requests?

2010-10-31 Thread Amos Jeffries
On 30/10/10 00:45, Mikio Kishi wrote: Hi, Henrik Was the post handling specification modified on squid-3.1.9 ? On 3.1.9, multi post requests in a http connection became OK. I think we still misunderstand each other on this thread... * Multiple POST on a connection has always been allowed. *

Re: [squid-users] Squid proxy: big initial delay with certain pages

2010-10-31 Thread Amos Jeffries
On 29/10/10 22:02, Gianni Costanzi wrote: Hi, I've noticed a very bad problem with my squid installation... it seems to work without errors (nothing wrong in the log files), but when I load some sites as www.repubblica.it my browser shows a blank page and it says "waiting for oas.repubblica.it"..

Re: WG: [squid-users] WG: squid 2.7 clamav

2010-10-31 Thread Amos Jeffries
On 30/10/10 10:15, ma...@it-schuth.net wrote: Hey, how is it possible to setup squid 2.7 with clamav, WITHOUT dansguardin ? thanks! clamav does not know about network protocols (it is not a proxy) so it needs a connector which can do that part. DansGuardian is one, c-icap in squid-3 is ano

Re: [squid-users] Problem refreshing cache. Eating all of my Bandwidth.

2010-10-31 Thread Amos Jeffries
On 30/10/10 13:36, Rogelio Sevilla Fernandez wrote: Im using squid 2.9 Stable 9 behind my E3 and my local network. Recently, 2.9? no such Squid. Did you mean the "2.7.STABLE9" release ? i used some rules to cache windows updates to save bandwidth. In the morning-Afternoon, the clients are "Hi

RE: [squid-users] Authenticating Across Windows Domains

2010-10-31 Thread Amos Jeffries
On Wed, 27 Oct 2010 07:33:56 -0500, "Clive Christie" wrote: > I am running Squid 2.7 Stable 6 as stated previously I authenticate on the > Intranet Site using an AD account on the Remote site that I am connected to > by VPN. Regarding privacy and anonymity, I am not sure the only changes I > made

Re: [squid-users] Set-Cookie2 and Cookie2 Non-Existant

2010-10-31 Thread Amos Jeffries
On Fri, 29 Oct 2010 08:44:25 +, Jenny Lee wrote: > Hello Folks, > > I checked in HTTPheader.c and these headers are not available in 3.2.0.1: > Set-Cookie2, Cookie2 > > parse_http_header_access: unknown header name 'Set-Cookie2' > > I downloaded all the other sources and they are not ava

Re: [squid-users] High cpu load with squid

2010-10-31 Thread Amos Jeffries
On Sun, 31 Oct 2010 20:45:33 +0100, Michał Prokopiuk wrote: > Hi. > For the last few days I have had troubles with my squid (3.0.24) - it gets > a lot of cpu, and > response time is very long, about 4000 ms. I didn't see any information > in cache.log, so I tried to upgrade to latest stable releas

Re: [squid-users] using debug_options for fun and pro fit

2010-10-31 Thread Amos Jeffries
On Thu, 28 Oct 2010 17:12:02 -0400, Aldric Giacomoni wrote: > Hi all, > I'm trying to figure out what Squid could possibly be doing that takes > forever on some requests. So, like any good person running blindly > into the fray, I've done educated guesses to increase logging. > I've gotten as far

Re: [squid-users] Problem with ACL (disabling download)

2010-10-31 Thread Amos Jeffries
On 01/11/10 12:46, Konrado Z wrote: Hello, I have encountered a problem with ACL. I want to disable download all kinds of files for subnet specified except pdf, doc, xls, txt, zip. I have created officeFile file wich is shown below: \.[Dd][Oo][Cc]$ \.[Tt][Xx][Tt]$ etc. but, acl clients 192.16

[squid-users] Squid 3.1.9 is available

2010-10-31 Thread Amos Jeffries
://www.squid-cache.org/Download/http-mirrors.dyn http://www.squid-cache.org/Download/mirrors.dyn If you encounter any issues with this release please file a bug report. http://bugs.squid-cache.org/ Amos Jeffries

Re: [squid-users] Problem with ACL (disabling download)

2010-11-01 Thread Amos Jeffries
write it, to give them > access to the Internet and allow them download only 4, 5 types of > files? As requested earlier: "Please list the exact fill set of patterns you are using. One of them is probably wrong." That means the exact and full content of /etc/squid/officeFiles. Sorry

Re: [squid-users] forward and reverse proxy in 3.1.x https forward proxy failing

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 12:41:44 -0500, "Dean Weimer" wrote: > I had an older machine that was still running 3.0 STABLE 12, that was > functioning as a forward and reverse proxy using port 80 for both. And a > reverse proxy for one site on Port 443, the machine sits in a DMZ the > forward proxy only d

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 15:00:21 +, decl...@is.bbc.co.uk wrote: > Greetings! > > I am poking a potential squid upgrade from squid 2 to 3.1.8 with a new > config, but it's added around 40% more CPU load, and I'm looking for > tune-ups. > > One thing I notice it doing when I truss is read()ing HTTP

Re: [squid-users] Kerb auth with LDAP groups

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 17:03:11 -0400, "Kelly, Jack" wrote: > Hi everyone, > I've successfully set up authentication to my proxy with squid_kerb_auth > to get us away from using basic LDAP authentication for everything. I > used the config guide from the squid-cache wiki (below) which worked > perfect

Re: [squid-users] Problem with ACL (disabling download)

2010-11-01 Thread Amos Jeffries
load? when the HTML page (or HTML email), download button graphics, captcha security, search scripts and layout CSS are all blocked? I really think you need to clarify which types and sizes of object things are limited to. Then use http_reply_access on the file rep_mime_type. Probabl

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 22:55:12 +, Declan White wrote: > On Mon, Nov 01, 2010 at 09:36:53PM +0000, Amos Jeffries wrote: >> On Mon, 1 Nov 2010 15:00:21 +, decl...@is.bbc.co.uk wrote: >> > I went for a rummage in the code for the buffer size decisions, but got >> &g

Re: [squid-users] TPROXY - possible in such network setup (hanging connections)?

2010-11-01 Thread Amos Jeffries
On Mon, 01 Nov 2010 23:55:27 +0100, Tomasz Chmielewski wrote: > I'm trying to configure Squid to work in tproxy mode (IPv4, when it > works, IPv6), but my connections are hanging and I'm not sure how to > debug this. > > > Perhaps my network setup won't just work with tproxy? > > > My networ

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 23:20:52 +, Declan White wrote: > On Mon, Nov 01, 2010 at 10:55:12PM +, Declan White wrote: >> On Mon, Nov 01, 2010 at 09:36:53PM +0000, Amos Jeffries wrote: >> > On Mon, 1 Nov 2010 15:00:21 +, decl...@is.bbc.co.uk wrote: >> > > I went

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Amos Jeffries
On Tue, 2 Nov 2010 00:55:38 +, Declan White wrote: > On Tue, Nov 02, 2010 at 12:10:25AM +0000, Amos Jeffries wrote: >> On Mon, 1 Nov 2010 22:55:12 +, Declan White >> wrote: >> > On Mon, Nov 01, 2010 at 09:36:53PM +, Amos Jeffries wrote: >> >> On

Re: [squid-users] url_rewrite

2010-11-01 Thread Amos Jeffries
On 02/11/10 17:28, viswanathan wrote: Hi All, I am using squid 2.6 stable 19 .we are using url redirector.Every request passes through redirector. Why? Is there not some large portion which can go without having the URL fiddled with? In cache.log we can see following error, WARNING: All u

Re: [squid-users] squid not storing objects to disk andgettingRELEASED on the fly

2010-11-01 Thread Amos Jeffries
On 29/10/10 05:28, Rajkumar Seenivasan wrote: switching from LFUDA to GDSF didn't make much of a difference. I assume the following is happening... I pre-cache around 2 to 3GB of data everyday and get 40 to 50% HITS everyday. Check that those 40-50% hits are from actual visitors, not from your

Re: [squid-users] url_rewrite

2010-11-01 Thread Amos Jeffries
On 02/11/10 17:59, viswanathan wrote: Thanks much for the reply Actally we are redirecting all request to the websense filter. If we increase url_rewrite children and url_rewrite concurrency the problem will be solved? It's a workaround to fix a shortcoming in the url-rewriter hack. We are

[squid-users] Re: Proxy & Redirection help

2010-11-02 Thread Amos Jeffries
On 02/11/10 20:18, Edmonds Namasenda wrote: Hello Amos, I emailed the content below to the users mailing list but kept getting bounced messages about "MIME Content" so I chose to email you privately for help. Hope it is okay. Reply sent on-list. Set your emailer not to include a web page along

[squid-users] Re: Proxy & Redirection help

2010-11-02 Thread Amos Jeffries
On 02/11/10 22:54, Edmonds Namasenda wrote: Thank you, Amos. More queries inline below. Hello All. I request for help using openSuSe 11.2, Squid 3.0 and Shorewall 2.2.2 My squid.conf ACLs. acl net_ed src 10.100.#.0/24 192.168.#.0/24 10.208.#.0/24#

Re: [squid-users] Set-Cookie2 and Cookie2 Non-Existant

2010-11-03 Thread Amos Jeffries
On 04/11/10 03:28, Jenny Lee wrote: Date: Mon, 1 Nov 2010 00:58:50 + From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Set-Cookie2 and Cookie2 Non-Existant On Fri, 29 Oct 2010 08:44:25 +, Jenny Lee wrote: Hello Folks, I checked in HTTPheader.c a

Re: [squid-users] header_replace: Can items be merged?

2010-11-03 Thread Amos Jeffries
On 04/11/10 03:32, Jenny Lee wrote: Hello folks, acl BADGUY dstdomain somewhere header_replace User-Agent Nutscrape/1.0 (CP/M; 8-bit) BADGUY Is there any way to do this? It is sucking in the whole line as UA (as expected). Quotation marks did not help. Any ideas? request_header_access User

Re: [squid-users] header_replace: Can items be merged?

2010-11-03 Thread Amos Jeffries
On 04/11/10 03:43, Jenny Lee wrote: Date: Thu, 4 Nov 2010 03:39:49 +1300 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] header_replace: Can items be merged? On 04/11/10 03:32, Jenny Lee wrote: Hello folks, acl

Re: [squid-users] squid_session

2010-11-03 Thread Amos Jeffries
On Wed, 3 Nov 2010 16:04:13 -0500, jon jon wrote: > Hello,< > > I have looked through the mail archive, and not found what I am > looking for. I have Squid 2.6 installed on my Slackware box. I am new > to Linux, so I apologize for the noob question. How do install > squid_session the external hel

Re: [squid-users] client_side_request.cc messages in cache.log

2010-11-04 Thread Amos Jeffries
On 05/11/10 05:23, donovan jeffrey j wrote: I On Nov 4, 2010, at 12:09 PM, Dean Weimer wrote: I just setup a new site through my reverse proxy running Squid 3.1.9, and though it's working fine, I am receiving the follow message every time an url on the new site is accessed. 010/11/04 10:39:3

Re: [squid-users] help with simple web cache configuration

2010-11-04 Thread Amos Jeffries
On 05/11/10 13:45, Nick Rathke wrote: Hi, I have been trying various configuration combination for days and reading the FAQ and the configuration documentation trying to get a basic web cache to work without much luck. I have a department web site that I need to cache on some local systems, I n

Re: [squid-users] Windows Messenger through Squid

2010-11-04 Thread Amos Jeffries
On 05/11/10 02:19, gsand...@aol.com wrote: Hi, I'm trying to setup a Squid server (Centos 5.5, Squid 2.6-STABLE21, x64) to help my users to connect to Windows Live (as well as to provide navigation). They _must_ use Windows Messenger (4.x, 5.x - the ones shipped by default with Windows XP). The

Re: [squid-users] client_side_request.cc messages in cache.log

2010-11-05 Thread Amos Jeffries
On 06/11/10 01:55, donovan jeffrey j wrote: On Nov 4, 2010, at 11:10 PM, Amos Jeffries wrote: On 05/11/10 05:23, donovan jeffrey j wrote: I On Nov 4, 2010, at 12:09 PM, Dean Weimer wrote: I just setup a new site through my reverse proxy running Squid 3.1.9, and though it's working fi

Re: [squid-users] squid error 22 during POST

2010-11-05 Thread Amos Jeffries
On 06/11/10 01:22, Colin Brace wrote: Hi all, I have squid running as a transparent proxy on my ADSL gateway/server box. For the most part it works fine and is indeed transparent to the LAN clients. This is not what "transparent proxy" means. That term means Squid is transparent to the web se

[squid-users] Re: Proxy & Authenication help

2010-11-05 Thread Amos Jeffries
On 04/11/10 21:13, Edmonds Namasenda wrote: If I were to add ACLs with some an I.P Addresses to access the internet without any restrictions, how can I go about that? By creating .. # "an ACL listing the IPs ..." acl foo src ... Are the below right ACL

Re: [squid-users] client_side_request.cc messages in cache.log

2010-11-05 Thread Amos Jeffries
On 06/11/10 03:20, donovan jeffrey j wrote: does this look right ? #redirect_program /usr/local/bin/squidGuard -c /usr/local/squidGuard/squidGuard.conf url_rewrite_program /usr/local/bin/squidGuard -c /usr/local/squidGuard/squidGuard.conf #redirect_children 100 url_rewrite_children

Re: [squid-users] client_side_request.cc messages in cache.log

2010-11-05 Thread Amos Jeffries
On 06/11/10 03:28, donovan jeffrey j wrote: On Nov 5, 2010, at 10:24 AM, Amos Jeffries wrote: On 06/11/10 03:20, donovan jeffrey j wrote: does this look right ? #redirect_program /usr/local/bin/squidGuard -c /usr/local/squidGuard/squidGuard.conf url_rewrite_program /usr/local

Re: [squid-users] Squid 3.2.0.2 HTTP/1.1

2010-11-05 Thread Amos Jeffries
On 06/11/10 09:23, gsand...@aol.com wrote: Hi everyone, Am I wrong if I say that Squid 3.2.0.2 support both requests and responses using HTTP/1.1 Thanks You are not wrong. It does indeed. Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.9 Beta testers wanted for 3.2.0.2

Re: [squid-users] Re: Re: Windows Messenger through Squid

2010-11-05 Thread Amos Jeffries
On 06/11/10 09:45, gsand...@aol.com wrote: I've been even trying using Squid 3.2.0.2, which I manually compiled. As you know, Squid 3.2.0.2 has better support for HTTP/1.1 (I thought it was something related with that, as Squid 2.6STABLE21 uses HTTP/1.0). Now, with the sniffer I see HTTP/1.1 res

Re: [squid-users] squid3 timeouts after bootup

2010-11-06 Thread Amos Jeffries
On 07/11/10 11:25, William Montgomery wrote: I am using squid3 (Version 3.0.STABLE8) on Debian Lenny, squid gets ERR_CONNECT_FAIL after the initial power up on my machine but if I do a restart (/etc/init.d/squid3 restart) then all is well. Excerpts from cache.log below: Probably one of the two

Re: [squid-users] possible bug on 2.7S9

2010-11-06 Thread Amos Jeffries
On 07/11/10 13:21, Leonardo Rodrigues wrote: Hi, i'll try to describe with the most details i can what i think is something like a forwarding-loop-detection bug on 2.7S9 i have squid 2.7S9 running on a CentOS 5.5 x64 box whici has 4 NICs. 3 NICs are for internal networks (192.168.x) and 1 NIC

Re: [squid-users] "This cache is currently building its digest."

2010-11-06 Thread Amos Jeffries
On 04/11/10 13:12, david robertson wrote: Hello, I'm having a cache-digest related issue that I'm hoping someone here can help me with. I've got a few frontend servers, which talk to a handful of backend servers. Everything is working swimmingly, with the exception of cache digests. The digest

Re: [squid-users] Unable to make Squid work as a transparent proxy (Squid 3.1.7, Linux Debian, WCCP2)

2010-11-06 Thread Amos Jeffries
On 06/11/10 04:50, Leonardo wrote: Hi all, I have compiled and installed Squid 3.1.7 on a Linux 2.6.26 (Debian 5.0.5), and successfully tested it as a non-transparent proxy (i.e. the proxy address:port is explicitly specified in the web browser). Now I need to use it to do transparent proxying.

Re: [squid-users] Squid 3.1.9 OSX client_side.cc okToAccept: WARNING! Your cache is running out of filedescriptors

2010-11-06 Thread Amos Jeffries
On 04/11/10 01:56, donovan jeffrey j wrote: greetings updated 2 transparent proxies last night. and both are spewing noise about filedescriptors. this is coming from the system. 2010/11/03 08:48:36| client_side.cc(2980) okToAccept: WARNING! Your cache is running out of filedescriptors 2010/11/

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-07 Thread Amos Jeffries
On 04/11/10 02:19, Martin Sperl wrote: To add to the confusion on the buffers used by squid: I have observed something that looks similar to this issue:squid is writing to the network with 4k buffers, even if it has got everything in its local buffers, so it could do a write of the whole buffe

Re: [squid-users] Re: Squid with Dansguardian => problems with URL in "?"

2010-11-07 Thread Amos Jeffries
On 08/11/10 18:28, Olivier CALVANO wrote: I don't see my message in the list, do you receive it ? We did receive it. No answer around here usually means nobody knows what to say. 2010/10/27 Olivier CALVANO: Hi anyone have a solution for this problems: When we use Squid with dansguardian,

Re: [squid-users] Auto Proxy Detection

2010-11-07 Thread Amos Jeffries
On 08/11/10 18:38, viswanathan wrote: Hi All, Auto Proxy Detection not working for me with following configuration "http://users.telenet.be/mydotcom/library/network/pac.htm"; Is anybody done "Auto Proxy Detection" successfully ? Yes. please share configuration That tutorial you linked

Re: [squid-users] http-returncode 417 and POST-request

2010-11-07 Thread Amos Jeffries
On 08/11/10 19:59, Tom Tux wrote: Hi I have servers, which needs to connect to microsoft.com with a POST-request: xx,xx.xx.xx NONE/417 4362 POST http://go.microsoft.com/fwlink/? - NONE/- text/html This POST-request will fail (417-error), until I configure "ignore_expect_100 on" in squid.conf (

Re: [squid-users] Zero Penalty Hit on Squid 3.1.x

2010-11-08 Thread Amos Jeffries
On 08/11/10 03:58, Fabiano Carlos Heringer wrote: Hey guys, in the squid the ZPH it´s already enabled by default or its necessary to enable something? I´ve installed the squid with --enable-zph-qos option, and put three good. options on my squid.conf to mark packets with diferente ToS, but i

Re: [squid-users] "This cache is currently building its digest."

2010-11-08 Thread Amos Jeffries
On Mon, 8 Nov 2010 09:02:37 -0500, david robertson wrote: >> What is your digest rebuild time set to? >> your cache_dir and cache_mem sizes? >> and your negative_ttl setting? > > digest_rebuild_period 60 minutes > negative_ttl 1 minute > backends use a cache_dir of 20gb (8mb cache_mem) > fronte

Re: [squid-users] Squid is caching the 404 Error Msg...

2010-11-08 Thread Amos Jeffries
On Mon, 08 Nov 2010 16:15:24 +0200, karj wrote: > Dear Expert, > > I'm using: > - Squid Cache: Version Squid Cache: Version 2.7.STABLE9 > > My Problem is. > > When i'm using > Cache-Control headers in the origin iis ( post-check=3600, > pre-check=43200 ) > > Squid is caching the 404 Error Ms

Re: [squid-users] unexplainable MISSes (squid 2.7stable9)

2010-11-08 Thread Amos Jeffries
On Mon, 08 Nov 2010 14:33:31 +0200, Adrian Dascalu wrote: > Hi, > > I'm out of ideeas trying to debug cache misses that I cannot explain. As a > last resort I'm sending this problem to the list with the hope that you > could come up with some explanation and/or cure for this. > > the setup is: s

Re: [squid-users] unexplainable MISSes (squid 2.7stable9)

2010-11-08 Thread Amos Jeffries
On Mon, 08 Nov 2010 18:33:37 +0200, Adrian Dascalu wrote: > Done some new tests and I found out that caching an URL that has a > different X-Username header will invalidate the other version of that > object. Aha, you can disregard my earlier reply. > > Is this the intended behaviour? Yes.

Re: [squid-users] Windows Updates, YouTube and WoW

2010-11-08 Thread Amos Jeffries
On Mon, 8 Nov 2010 18:32:52 -0500, Kevin Wilcox wrote: > Hi all. > > This is currently a test environment so making changes isn't an issue. > > Initially I had issues with hosts updating Windows> but solved that with the included squid.conf. I'm even > getting real cache hits on some of the Win

Re: [squid-users] Re: Access control problem

2010-11-08 Thread Amos Jeffries
On 09/11/10 05:30, mrmmm wrote: Thanks for your response. For example, I have the file with the following entries: .site1.com .site2.com 123.123.123.123 234.234.234.234 Type: Web Server Hostname And still I am able to browse all these sites from behind the proxy... Anything I might be missing

Re: [squid-users] Unable to make Squid work as a transparent proxy (Squid 3.1.7, Linux Debian, WCCP2)

2010-11-08 Thread Amos Jeffries
On 09/11/10 00:11, Leonardo wrote: Hi Amos, On Sun, Nov 7, 2010 at 5:12 AM, Amos Jeffries wrote: http_port 3128 intercept I have changed the config from "http_port 3128 transparent" to "http_port 3128 intercept", but I see no change in the behaviour. You will also need

Re: [squid-users] Problem with ACL (disabling download)

2010-11-08 Thread Amos Jeffries
On 03/11/10 09:57, Konrado Z wrote: But how to write properly sth like this 'http_access allow clients|managers|clients2 #Squid cannot start with that line' I want to replace 'http_access allow all' line with this given above. Best http://wiki.squid-cache.org/SquidFaq/SquidAcl#Common_Mistakes

Re: [squid-users] client_side_request.cc messages in cache.log

2010-11-08 Thread Amos Jeffries
On 09/11/10 03:08, donovan jeffrey j wrote: On Nov 5, 2010, at 7:37 PM, Amos Jeffries wrote: On 06/11/10 03:28, donovan jeffrey j wrote: On Nov 5, 2010, at 10:24 AM, Amos Jeffries wrote: On 06/11/10 03:20, donovan jeffrey j wrote: does this look right ? #redirect_program /usr

Re: [squid-users] icp peering multicast option

2010-11-08 Thread Amos Jeffries
On 04/11/10 02:27, My LinuxHAList wrote: Hi, I may run multiple instances of squid inside a box. Those instances may be serving out of the same eth0 or some bonded interface. I have a question on the icp multicast option. Is squid icp multicast called with "loopback" option on, so that wh

Re: [squid-users] Multisite ICP peering

2010-11-08 Thread Amos Jeffries
On 03/11/10 21:53, Chris Toft wrote: Thanks for the reply, I actually fixed it. Removed the multicast-responder option and just left multicast-sibling. Man this thing flies on 5 boxes with 64gb memory and 10x 50gb solid state drives for the cache :-) I will post working config tomorrow for an

Re: [squid-users] partial content clarification...

2010-11-09 Thread Amos Jeffries
On 09/11/10 23:37, John Doe wrote: Hi, In a reverse proxy situation with big videos. I read that 206 (partial content) is not cachable by squid. But I also read about range_offset_limit... Let's say there's a 100MB video and I use a range_offset_limit of 20971520. Does that mean that if the brow

Re: [squid-users] RE: filezilla with squid

2010-11-09 Thread Amos Jeffries
> -Original Message- > From: Philippe Dhont > > Hello, > > I am trying to use filezilla with squid. > Filezilla is latest version, squid is squid 3.0 stable 19. > > Connecting to a ftp site via squid is not working. > When I connect to that same ftp site with another internet connection

Re: [squid-users] cache_object://$host/info confusion

2010-11-09 Thread Amos Jeffries
On Tue, 9 Nov 2010 20:59:56 -0500, david robertson wrote: > I'm in the process of writing a script to give me some cache hit > statistics for my cluster. There's some confusion on the cache_object > info output, though. For example, this particular host only caches to > memory, however this is t

Re: [squid-users] unexplainable MISSes - found the problem

2010-11-09 Thread Amos Jeffries
On Tue, 09 Nov 2010 17:37:55 +0200, Adrian Dascalu wrote: > Ok, it's a bit late for me but for other people browsing this list I'm > sharing my findings: > > It looks like squid is really picky about the way Vary header text is > formed: the vary headers in my case where not "identical" due to

Re: [squid-users] cache_object://$host/info confusion

2010-11-09 Thread Amos Jeffries
> On Tue, Nov 9, 2010 at 9:27 PM, Amos Jeffries wrote: >> On Tue, 9 Nov 2010 20:59:56 -0500, david robertson wrote: >>> I'm in the process of writing a script to give me some cache hit >>> statistics for my cluster.  There's some confusion on the cache_object

Re: [squid-users] cache_object://$host/info confusion

2010-11-10 Thread Amos Jeffries
-only caches. I'm not sure why the basic hit stats are not either non-zero or equal to memory hits. Amos On Tue, Nov 9, 2010 at 10:06 PM, Amos Jeffries wrote: On Tue, Nov 9, 2010 at 9:27 PM, Amos Jeffries wrote: On Tue, 9 Nov 2010 20:59:56 -0500, david robertson wrote: I'm in

Re: [squid-users] Logging objets that are being downloading/refreshing.

2010-11-10 Thread Amos Jeffries
On 10/11/10 06:40, Rogelio Sevilla Fernandez wrote: Exist any form to know which files are being downloading/refreshing from squid process? squidclient mgr:active_requests Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.9 Beta testers wanted for 3.2.0.3

Re: Fwd: Re: [squid-users] Re: Bandwidth split?

2010-11-10 Thread Amos Jeffries
On 10/11/10 05:45, J Webster wrote: Thanks for the help. Does anyone know the difference between fill rate and reserve in how they are applied to restrciting proxy bandwidth? # 256 Kbit/s fill rate, 1024 Kbit/s reserve Firstly it is measured in BYTE/sec. So alter you numbers by 8 for squid.c

[squid-users] Re: ACLs Implementation help

2010-11-10 Thread Amos Jeffries
On 09/11/10 20:25, Edmonds Namasenda wrote: Dear all. Using openSuse 11.2 and Squid 3.0 Stable 18 Besides commenting out anything to do with 'localnet', below is all that I added or edited on squid.conf # Authentication Program auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_

Re: [squid-users] Multisite ICP peering

2010-11-10 Thread Amos Jeffries
On 10/11/10 17:54, Chris Toft wrote: And in the cache.log.. 2010/11/10 15:50:28| temporary disabling (Forbidden) digest from 172.xx.xx.xx -Original Message- From: Chris Toft [mailto:ct...@fairfaxdigital.com.au] Sent: Wednesday, 10 November 2010 1:51 PM To: Amos Jeffries; squid

Re: [squid-users] cache_object://$host/info confusion

2010-11-10 Thread Amos Jeffries
Harping way back... On Tue, 9 Nov 2010 20:59:56 -0500, david robertson wrote: I'm in the process of writing a script to give me some cache hit statistics for my cluster. There's some confusion on the cache_object info output, though. For example, this particular host only caches to memory, h

Re: Fwd: Re: [squid-users] Re: Bandwidth split?

2010-11-10 Thread Amos Jeffries
rs 2 32000/15 32000/12 > delay_access 2 allow ncsa_users magic_words2 > delay_access 2 deny all > delay_class 3 1 > # 512Kbit/s fill rate, 1024 Kbit/s reserve > delay_parameters 3 64000/128000 > delay_access 3 allow ncsa_users > delay_access 3 deny all > > ---

Re: [squid-users] Squid content filtering and redirection

2010-11-10 Thread Amos Jeffries
On 10 Nov 2010 17:40:00 +0100, "Helmut Hullen" wrote: > Hallo, Tóth, > > Du meintest am 10.11.10: >> It's possible, I just would like to know if this could be done within >> squid itself. Also a little bit of modification. >> I would like to look for "ABC" word only in the site name, not in >> i

RE: [squid-users] Squid content filtering and redirection

2010-11-10 Thread Amos Jeffries
On Wed, 10 Nov 2010 23:03:49 +0100, Tóth Tibor Péter wrote: > Thank you Helmut! > > It seems to be something that I've been looking for. > Two more additional questions: > > 1.) You deny access to everything in "verboten" and allow only "ausnahme". > In the Verboten acl you dont have to specify s

Re: Fwd: Re: [squid-users] Re: Bandwidth split?

2010-11-11 Thread Amos Jeffries
On 11/11/10 20:52, J Webster wrote: To start off simply and just get the limit working, can I use this: delay_pools 1 delay_class 1 2 delay_parameters 1 -1/-1 125000/125000 delay_access 1 allow all That should limit all connections to 1 Mbps. I have seen varying lines for the last one ranging fr

Re: [squid-users] Squid capabilities: several questions

2010-11-11 Thread Amos Jeffries
On 10/11/10 05:03, Jordi Espasa Clofent wrote: Hi, I have to design and implement a proxy in a complex production environment; I used Squid some time ago (3 years), so I'm thinking in using it again. First of all I need to know: Let's suppose that the squid box has 3 NICs. 2 external connected

Re: [squid-users] Re: Multiple NICs

2010-11-11 Thread Amos Jeffries
On 10/11/10 01:39, Nick Cairncross wrote: Hi! I wouldn't think you need multiple network cards to use squid, unless your internet connection is on or above 1GB/s. If your ISP provides you less, I would think a regular gigabit Nic would do the job. Your Hard Drives probably wont be fast enough t

Re: [squid-users] Re: Access control problem

2010-11-11 Thread Amos Jeffries
On 10/11/10 05:15, mrmmm wrote: Amos Jeffries-2 wrote: Your initial message said "among other stuff I have". The conclusion then has to be that somewhere in that other stuff is http_access rules which bypass the ones you mentioned here. Amos -- By "other stuff"

Re: [squid-users] ACLs Implementation help

2010-11-11 Thread Amos Jeffries
yay! :) On 11/11/10 23:39, Edmonds Namasenda wrote: Much appreciated for the previous help. Some more clarification on the in-line requests below. On Wed, Nov 10, 2010 at 2:38 PM, Amos Jeffries wrote: On 09/11/10 20:25, Edmonds Namasenda wrote: Dear all. Using openSuse 11.2 and Squid 3.0

Re: [squid-users] ACLs Implementation help

2010-11-11 Thread Amos Jeffries
On 12/11/10 01:22, Edmonds Namasenda wrote: Yeah, I guess I am getting there. Please look in-line... How do I enforce password authentication ONLY ONCE for users to What do you mean by "ONLY ONCE"? A user can be authenticated or not, there is no multiple about it. No continuous authenticat

Re: [squid-users] ACLs Implementation help

2010-11-11 Thread Amos Jeffries
On 12/11/10 04:08, Edmonds Namasenda wrote: Thank you all. On Thu, Nov 11, 2010 at 4:19 PM, Amos Jeffries wrote: On 12/11/10 01:22, Edmonds Namasenda wrote: No continuous authentication required with every URL accessed or re-directions once the first log-in is accepted. Understood. That

Re: [squid-users] Squid 3.2.0.2 installation - SUSE Enterprise 11.2

2010-11-11 Thread Amos Jeffries
On 12/11/10 05:50, viswanathan wrote: hi all while compile the squid 3.2.0.2 in SUSE Enterprise - following error occur * Please try 3.2.0.3 now. * Please send beta release issue to squid-dev. * The below looks like OpenSSL pieces are missing. 3.2.0.3 should pick this up and display a b

Re: [squid-users] ACL problem, can not get never_direct to work.

2010-11-11 Thread Amos Jeffries
On 12/11/10 06:04, Dean Weimer wrote: I think I am going nuts, because I can't see what I am doing wrong here, I am trying to send a group of domains through a parent proxy because the proxy forwarding them doesn't have direct access to the websites. These ACL list are before any others in th

Re: [squid-users] Squid compression in reverse mode

2010-11-11 Thread Amos Jeffries
On 12/11/10 10:39, Sébastien WENSKE wrote: Hi All, Below, is what I setup today: browser<--- HTTPS > reverse proxy (squid 3.1.9)< HTTP -> OWA 2010 All work fine, but I want be able to compress data "on the fly" (text, image...) between squid and browsers (internet clients): brow

Re: [squid-users] Any tips on analysing squid crashes?

2010-11-11 Thread Amos Jeffries
On 12/11/10 04:02, Declan White wrote: I have a squid that falls from the sky once a week. It is running with -C to provide coredumps, however, the coredumps contain only: Solaris 2.9 pstack output: core 'core.squid' of 14292: (squid) -YC -f /etc/squid3.conf 7dba8ddc _kill (ff

Re: [squid-users] Problems with hotmail and facebook

2010-11-11 Thread Amos Jeffries
On 12/11/10 15:11, Landy Landy wrote: Hello. Our network is experiencing problems loading or accessing facebook and hotmail inbox and others when I use squid. I am using: I use google's public dns and our local isp provider's. I tried to login to my hotmail account and got this: Squid Cache:

Re: [squid-users] Problems with hotmail and facebook

2010-11-11 Thread Amos Jeffries
On 12/11/10 16:22, Landy Landy wrote: --- On Thu, 11/11/10, Amos Jeffries wrote: From: Amos Jeffries On 12/11/10 15:11, Landy Landy wrote: Hello. Our network is experiencing problems loading or accessing facebook and hotmail inbox and others when I use squid. I am using: I use google&#

Re: [squid-users] Problems with hotmail and facebook

2010-11-11 Thread Amos Jeffries
On 12/11/10 17:30, Landy Landy wrote: --- On Thu, 11/11/10, Amos Jeffries wrote: From: Amos Jeffries Subject: Re: [squid-users] Problems with hotmail and facebook To: squid-users@squid-cache.org Date: Thursday, November 11, 2010, 11:16 PM On 12/11/10 16:22, Landy Landy wrote: --- On Thu

Re: [squid-users] Problems with hotmail and facebook

2010-11-11 Thread Amos Jeffries
On 12/11/10 15:44, Landy Landy wrote: Amos. Thanks for your quick reply. I haven't tried a newer version yet. The problem started two days ago and I've been using that version for over a year now and it worked well. --- On Thu, 11/11/10, Amos Jeffries wrote: From: Amos Jeffries O

Re: [squid-users] ACLs Implementation help

2010-11-11 Thread Amos Jeffries
On 12/11/10 18:18, Edmonds Namasenda wrote: Amos, thank you for the responses always. On Thu, Nov 11, 2010 at 6:56 PM, Amos Jeffries wrote: On 12/11/10 04:08, Edmonds Namasenda wrote: I believe I am a better squid administrator than when I joined. Throw me a bone! Switch "users&

<    5   6   7   8   9   10   11   12   13   14   >