Re: [squid-users] Why is squid caching local intranet domains??

2012-06-06 Thread Eliezer Croitoru
, and squid functions. On Wed, 06 Jun 2012 18:51:02 +0300 Eliezer Croitoruelie...@ngtech.co.il wrote: SNIP -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] Youtube\dynamic content caching with squid 3.2 |DONE|

2012-06-08 Thread Eliezer Croitoru
updates. Filehippo linux distros repos. (need to make a change in the db\key structure\match rules) if you have more features that can be good i will be happy to try. (there is a access.log file with some nice data) Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il

Re: [squid-users] Youtube\dynamic content caching with squid 3.2 |DONE|

2012-06-09 Thread Eliezer Croitoru
Croitoru wrote: SNIP -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] error in opening google.com in firefox

2012-06-10 Thread Eliezer Croitoru
listening port. Client-proxy traffic in HTTP has a very different syntax to client-server traffic. The way Squid identifies how to handle the traffic is by the traffic mode flag you set on the http_port. Amos -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations

[squid-users] i'm getting a lot of output in my cache.log about status_code acl

2012-06-10 Thread Eliezer Croitoru
http_status 200-206 i'm not sure if im right but i want to deny cache on 302 code responses. i understand that http_status acl is a fast one but i'm trying to use it on the cache deny REDIRECT cache allow all any comments will be gladly be welcome. Thanks, Eliezer -- Eliezer Croitoru https://www1

Re: [squid-users] i'm getting a lot of output in my cache.log about status_code acl

2012-06-10 Thread Eliezer Croitoru
On 11/06/2012 03:40, Amos Jeffries wrote: On 11.06.2012 12:12, Eliezer Croitoru wrote: 2012/06/11 03:07:58| ACL::checklistMatches WARNING: 'OK' ACL is used but there is no HTTP reply -- not matching. 2012/06/11 03:07:58| ACL::checklistMatches WARNING: 'REDIRECT' ACL is used but there is no HTTP

Re: [squid-users] ACL to determine forward or intercept request?

2012-06-11 Thread Eliezer Croitoru
port so only intercepted traffic will get to squid on this port... this is about it. Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] https traffic via cache peer with SSL termination enabled on downstream proxy

2012-06-11 Thread Eliezer Croitoru
on the downstream proxy ? Any help is greatly appreciated. Regards, Nipun Talukdar Bangalore India -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] i'm getting a lot of output in my cache.log about status_code acl

2012-06-11 Thread Eliezer Croitoru
code response ? Thanks, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] i'm getting a lot of output in my cache.log about status_code acl

2012-06-11 Thread Eliezer Croitoru
On 12/06/2012 04:21, Amos Jeffries wrote: On 12.06.2012 11:19, Eliezer Croitoru wrote: On 11/06/2012 08:56, Amos Jeffries wrote: You have your debug options set to display important messages, not just critical ones. It is important to be aware your cache deny REDIRECT is not working as you

Re: [squid-users] i'm getting a lot of output in my cache.log about status_code acl

2012-06-11 Thread Eliezer Croitoru
rewriting on squid to make the whole thing more perfect and to even work without icap. Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] New open-source ICAP server mod for url rewriting and headers manipulation.

2012-06-13 Thread Eliezer Croitoru
amount of output on a production environment so it's recommended to not use it at all if you dont need it. -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] getting the full list of objects in the cache _dir

2012-06-14 Thread Eliezer Croitoru
at once and to parse it into a memory db or analyze it on the fly. maybe some external log daemon for the cache_store logs can do the trick? Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] New open-source ICAP server mod for url rewriting and headers manipulation.

2012-06-14 Thread Eliezer Croitoru
i will be happy. Eliezer On 14/06/2012 22:44, johan firdianto wrote: why you don't play with ecap ?. it should faster than icap. greasySpoon based on java, i'm not surprised consume much memory. with i/e-cap you could also cache post request by using respmod vector. SNIP -- Eliezer Croitoru

Re: [squid-users] getting the full list of objects in the cache _dir

2012-06-14 Thread Eliezer Croitoru
On 15/06/2012 04:59, Amos Jeffries wrote: On 15/06/2012 7:31 a.m., Eliezer Croitoru wrote: i'm looking for the best way to get the full list of current cached objects in cache_dir cache. i can use the purge software to lookup objects and purge them but i would like better to know somehow

Re: [squid-users] Big issue on all Squid that we have (2.5 and 3.0) on a web site with IE8/IE9

2012-06-21 Thread Eliezer Croitoru
less informations under Internet Explorer than under Firefox. No errors in log. a Idea of the problems ? Just ask the maker of the side (but contact doesn't work ...). Viele Gruesse! Helmut -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer

Re: [squid-users] Big issue on all Squid that we have (2.5 and 3.0) on a web site with IE8/IE9

2012-06-21 Thread Eliezer Croitoru
, Jose-Marcio Martins da Cruz wrote: Trying to see this page... With seamonkey (not IE), both in direct (without proxy) or passing through a squid 3.1... I can just see a blue and empty page... the same than you. So it doesn't seem to me that this is a squid problem. Eliezer Croitoru wrote

[squid-users] How can i prioritize Icap services?

2012-06-25 Thread Eliezer Croitoru
/reqmod?smpfilter adaptation_access service_filter allow all #end config i want all urls to be checked by the filtering system and if so the url is rewritten and i dont want any other icap service to match it. so what squid logic about icap? Thanks, Eliezer -- Eliezer Croitoru https://www1

Re: [squid-users] Is Squid Multi-Tenant?

2012-06-26 Thread Eliezer Croitoru
entirely on what you mean. Can you describe what multi-tenant means to you? -Rob -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Cannot run '/usr/lib/squid3/squid_session' process

2012-06-26 Thread Eliezer Croitoru
could be the problem? Stefanie -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Can't play youtube while logged in

2012-06-26 Thread Eliezer Croitoru
on offline_mode off pipeline_prefetch on # Add any of your own refresh_pattern entries above these. #include /etc/squid/refresh.extended.conf refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A00 20% 4320 -- Eliezer Croitoru https://www1.ngtech.co.il

Re: [squid-users] transparent (intercepting?) without wccp, options?

2012-07-01 Thread Eliezer Croitoru
you have there. i will be happy to talk with you about it. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] yahoo mail problem with tproxy (squid 3.1.19, kernel 3.2.21)

2012-07-02 Thread Eliezer Croitoru
. on the same time i had a linux client on the setup that worked without any problem. if you are having the same symptom i think it's a windows problem. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-03 Thread Eliezer Croitoru
On 7/3/2012 5:05 AM, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: hey there Ezequiel, the Cisco RV042 is a nice product but.. 100 users on this device might not be the problem. i think that the main problem is the wan connections them-self

Re: [squid-users] acl to allow sites on SQL or LDAP

2012-07-04 Thread Eliezer Croitoru
some other technique to load it from DB into memory and only when the DB changed to update the regex into memory. regex is a very slow acl and basically should be used wisely. talk with me Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-04 Thread Eliezer Croitoru
On 7/5/2012 4:48 AM, Ezequiel Birman wrote: Amos == Amos Jeffries squ...@treenet.co.nz writes: On 04.07.2012 15:54, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: snip http://wiki.squid-cache.org/ConfigExamples/Intercept

Re: [squid-users] acl to allow sites on SQL or LDAP

2012-07-05 Thread Eliezer Croitoru
On 7/5/2012 3:10 PM, Marcio Merlone wrote: Em 04-07-2012 22:19, Eliezer Croitoru escreveu: SNIP the other options are: URL_REWRITE,ICAP,EXTERNAL_ACL. Didn't know about ICAP. Sounds the way to go. SNIP if you are willing to do the testings with me and built some skeleton for it to fit

Re: [squid-users] acl to allow sites on SQL or LDAP

2012-07-05 Thread Eliezer Croitoru
request urls and ldap external_acl to match the group and the access to specific namespace and for each one of the groups maintain separate block acl table. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-06 Thread Eliezer Croitoru
On 7/6/2012 5:16 AM, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: On 7/5/2012 4:48 AM, Ezequiel Birman wrote: SNIP dont worry! i dont know anyone that masters linux and got it all from books he didnt bout :) XD I meant, of course

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-06 Thread Eliezer Croitoru
the server every couple minutes. #i have used a router so i needed to flush the routes cache ip -s route flush cache #end ELiezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] Question about ICAP.

2012-07-06 Thread Eliezer Croitoru
X-Frame-Options: SAMEORIGIN dd HTMLHEADmeta http-equiv=content-type content=text/html;charset=utf-8 TITLE302 Moved/TITLE/HEADBODY H1302 Moved/H1 The document has moved A HREF=http://www.google.co.il/;here/A. /BODY/HTML 0 -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting

Re: [squid-users] Question about ICAP.

2012-07-07 Thread Eliezer Croitoru
-control header. Squid being a shared proxy private and no-store are handled the same. So all this does is prevent the browser caching the 304 on the users machine. well this was just an example which was used for testing sometime ago. Amos -- Eliezer Croitoru https://www1.ngtech.co.il

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-09 Thread Eliezer Croitoru
, but somehow squid is not able to see it. i do know that it different on Ubuntu and other distros for unknown reason. if it works with 0 then let it be... i think that debian comes with 0 as default. Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations

Re: [squid-users] Uploads not working behind squid proxy

2012-07-11 Thread Eliezer Croitoru
/services/messagebroker/amf? - DIRECT/64.152.208.202 text/html Any suggestions about getting the rest of the web up running through our local squid would be most appreciated. Cheers, Ben -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer

Re: [squid-users] Uploads not working behind squid proxy

2012-07-11 Thread Eliezer Croitoru
allow all never_direct allow all ## this will allow and will force all traffic through the upstream proxy server. Good luck, Eliezer SNIP -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] i'm having a little performance trouble with squid + ICAP server.

2012-07-12 Thread Eliezer Croitoru
, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Using ACLs with ICAP/SquidClamAV

2012-07-12 Thread Eliezer Croitoru
of 192.168.0.1 use the machie ip acl my_machine src 192.168.0.1 icap_service service_av reqmod_precache bypass=0 icap://clamavserver:1344/reqmod adaptation_access service_av deny my_machine adaptation_access service_av allow all ##end That is all Best Regards, Elieze -- Eliezer Croitoru https

[squid-users] squid 3.2.0.16+ not honoring hierarchy proxy settings on intercept and tproxy mode

2012-07-12 Thread Eliezer Croitoru
' '--enable-auth' '--disable-translation' '--disable-auto-locale' '--with-large-files' Thanks, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] i'm having a little performance trouble with squid + ICAP server.

2012-07-12 Thread Eliezer Croitoru
-- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] Posted in the wiki my nice caching method using a coordinator\ICAP

2012-07-12 Thread Eliezer Croitoru
as a Cache Peer Summery of the ICAP solution Implementing ICAP solution Alternative To ICAP server Using url_rewrite Best Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] WCCP2+tproxy and Cisco LNS

2012-07-14 Thread Eliezer Croitoru
and bridge two vlans but it's pretty nasty to do so. Regards, Eliezer Thanks for reading Wayne -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] WCCP2+tproxy and Cisco LNS

2012-07-14 Thread Eliezer Croitoru
and not as a BRIDGE. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] I have stumbled into a very curios problem\issue with icap request passed from squid.

2012-07-15 Thread Eliezer Croitoru
the command: curl -X http://127.0.0.1:3128/ http://www.domain.com/ and the squid 3.1.20 send ICAP encapsulated request as http://127.0.0.1:3128 http://url/uri HTTP/1.1 i hope something can be done about it. Thanks, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit

Re: [squid-users] NTLM auth to remote server fails through squid

2012-07-16 Thread Eliezer Croitoru
and server. Eliezer Thanks! -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] tproxy configuration

2012-07-16 Thread Eliezer Croitoru
or it's not possible. what do you want to achieve? everything that can be achieved using WCCP can be achieved in other way with tproxy. Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] I have stumbled into a very curios problem\issue with icap request passed from squid.

2012-07-16 Thread Eliezer Croitoru
On 7/16/2012 3:36 AM, Eliezer Croitoru wrote: so i sat on it a bit more: on the 3.1.10 proxy in the logs i am getting this while using curl and proxy: 1342399298.935680 127.0.0.1 TCP_MISS/200 9590 http://127.0.0.1:3128 http://www.xxx.com/ - DIRECT/67.23.112.226 text/html and this using

Re: [squid-users] tproxy configuration

2012-07-16 Thread Eliezer Croitoru
-users/200906/0602.html http://www.mail-archive.com/squid-users@squid-cache.org/msg65056.html i will write it in the wiki all together back in Plain English that will explain all the things you need to take in account when implementing it and what can go wrong with it. ELiezer -- Eliezer

Re: [squid-users] My PreDefined DownLoad

2012-07-17 Thread Eliezer Croitoru
] + end else puts end end end STDOUT.sync = true main ##end Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] tproxy configuration

2012-07-17 Thread Eliezer Croitoru
192.168.10.201 end ##cisco config end -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] sslproxy_cafile and CA certificats

2012-07-17 Thread Eliezer Croitoru
sslproxy_cafile Thanks for any info there is a package in almost any linux distribution that called firefox something and you can find more info on that here: http://packages.debian.org/sid/ca-certificates you can extract it all from this package. Eliezer -- Eliezer Croitoru https://www1

Re: [squid-users] i'm having a little performance trouble with squid + ICAP server.

2012-07-18 Thread Eliezer Croitoru
test you better plan it and by doing so know the results and consequences. Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] yahoo mail problem with tproxy (squid 3.1.19, kernel 3.2.21)

2012-07-18 Thread Eliezer Croitoru
://mail.yahoo.com/ this is a 302 HTTP/1.0 302 Moved Temporarily reply so it might be something with the size of the reply. try to run curl -v http://mail.yahoo.com/ to see if you get any output while not using squid. Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit

Re: [squid-users] yahoo mail problem with tproxy (squid 3.1.19, kernel 3.2.21)

2012-07-19 Thread Eliezer Croitoru
-- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] tproxy configuration

2012-07-19 Thread Eliezer Croitoru
to help you. for me squid works with wither tproxy\dnat\redirect + wccp or with basic routing rules. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] tproxy configuration

2012-07-19 Thread Eliezer Croitoru
On 7/20/2012 12:35 AM, Wayne Lee wrote: Sent from my iPad On 19 Jul 2012, at 19:58, Eliezer Croitoru elie...@ngtech.co.il wrote: On 7/17/2012 6:01 PM, Wayne Lee wrote: SNIP if the packets are not diverted into squid there is something wrong with your setup. if you will post your squid

Re: [squid-users] Non-browser applications using NTLM+Squid?

2012-07-19 Thread Eliezer Croitoru
acls such as in: acl updates dstdomain .windowsupdates.microsoft.com .antivirusupdates.org acl updates1 dst 192.168.0.1/32 http_access allow localnet updates http_access allow localnet updates1 http_access allow localnet ntlm_auth_helper http_access deny all Regards, Eliezer -- Eliezer Croitoru

Re: [squid-users] negative ACL

2012-07-19 Thread Eliezer Croitoru
, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] yahoo mail problem with tproxy (squid 3.1.19, kernel 3.2.21)

2012-07-20 Thread Eliezer Croitoru
. it seems like the wiki is indeed missing some explanation on bridge and tproxy. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid + Cisco 4500 + WCCP2

2012-07-20 Thread Eliezer Croitoru
you in advance John -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Optimising squid cache for USB flash drives

2012-07-20 Thread Eliezer Croitoru
appreciated. Thanks in advance -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Optimising-squid-cache-for-USB-flash-drives-tp4655892.html Sent from the Squid - Users mailing list archive at Nabble.com. -- Eliezer Croitoru https://www1.ngtech.co.il

Re: [squid-users] yahoo mail problem with tproxy (squid 3.1.19, kernel 3.2.21)

2012-07-20 Thread Eliezer Croitoru
On 7/21/2012 6:01 AM, Ming-Ching Tiew wrote: - Original Message - From: Eliezer Croitoru elie...@ngtech.co.il so what you just need for ebtables is two rules: all packets the are destined to the web om port 80.. route them into the machine... later will be intercepted by tproxy so

Re: [squid-users] Squid AD login problem

2012-07-24 Thread Eliezer Croitoru
is the content of the WPAD script? the access to the sharepoint and other internal server are through the squid server at all? do you see anything logged in the access.log file when you are trying to access the sharepoint page? Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting

Re: [squid-users] I need a help!

2012-07-27 Thread Eliezer Croitoru
% 99 override-expire override-lastmod ignore-reload ignore-no-store ignore-no-cache ignore-private reload-into-ims ##end but it seems like i'm having some problems with my clients.. -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] I need a help!

2012-07-27 Thread Eliezer Croitoru
On 07/27/2012 06:53 PM, Mihamina Rakotomandimby wrote: On 07/27/2012 06:50 PM, Eliezer Croitoru wrote: 99 9% 99 override-expire override-lastmod ignore-reload ignore-no-store ignore-no-cache ignore-private You love ignoring... ;-) i ignore that much that i'm

Re: [squid-users] tproxy can't connect to target url after url rewrite program to different host

2012-07-27 Thread Eliezer Croitoru
On 07/28/2012 02:55 AM, Ming-Ching Tiew wrote: Tested this with Squid Version 3.1.20-20120710-r10457, After a simple url_rewrite_program changing from url to a different host, the communication will not succeed ( using linux bridge with ebtables/iptables for this tproxy communication ). The

Re: [squid-users] tproxy can't connect to target url after url rewrite program to different host

2012-07-28 Thread Eliezer Croitoru
On 7/28/2012 11:54 PM, Ming-Ching Tiew wrote: From: Eliezer Croitoru elie...@ngtech.co.il To: squid-users@squid-cache.org Cc: Sent: Saturday, July 28, 2012 10:53 AM Subject: Re: [squid-users] tproxy can't connect to target url after url rewrite program to different host On 07/28/2012 02:55 AM

Re: [squid-users] tproxy can't connect to target url after url rewrite program to different host

2012-07-28 Thread Eliezer Croitoru
On 7/29/2012 2:21 AM, Ming-Ching Tiew wrote: From: Eliezer Croitoru elie...@ngtech.co.il To: squid-users@squid-cache.org now that you remind me. i have seen this kind of problem!!! it was nasty on squid 3.1. you can see in iptables connection tracking that squid is opening the socket

Re: [squid-users] How to trick splay trees?

2012-07-31 Thread Eliezer Croitoru
. NOTE: you canot send a request via *both* using TCP unicast links, just one. Amos -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Re: I need a help!

2012-07-31 Thread Eliezer Croitoru
they retired after i did't fit a floppy? -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Re: Re: Re: Re: Re: Re: squid_ldap_group against nested groups/Ous

2012-08-03 Thread Eliezer Croitoru
of the acls will may be slow on the first acl hit but on the next it will be much faster. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid memory usage

2012-08-03 Thread Eliezer Croitoru
? -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid 3.2.0.19 beta is available

2012-08-08 Thread Eliezer Croitoru
for DIRECT traffic. I want to verify because i'm a bit confused. can a intercepted request be forwarded to a cache_peer in any way? Thanks, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid memory usage

2012-08-08 Thread Eliezer Croitoru
excessive memory usage is seen? Amos -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-08 Thread Eliezer Croitoru
(ORIGINAL_DST) is non-contactable by the proxy. BUT, ... checking your config file there is a bigger problem, and a relatively large amount of useless ACL checks ... and let say i want to loosen it a bit more? Thanks, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-10 Thread Eliezer Croitoru
On 8/9/2012 4:47 AM, Amos Jeffries wrote: On 09.08.2012 12:32, Eliezer Croitoru wrote: On 8/9/2012 2:16 AM, Amos Jeffries wrote: Releases 3.2.0.14-3.2.0.18 have a standing block preventing requests with conflicting destination IP and destination domain name being passed to peers. Release

Re: [squid-users] squidguard not blocking

2012-08-10 Thread Eliezer Croitoru
of the conf file at the moment: url_rewrite_program /usr/bin/squidGuard -c /etc/squid/squidguard.conf it should be enough and by the load change the url rewrite child process numbers. you must have the squid user access to the binary file and the db. Regards, Eliezer -- Eliezer Croitoru https://www1

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-10 Thread Eliezer Croitoru
On 8/10/2012 2:32 PM, Amos Jeffries wrote: On 10/08/2012 10:54 p.m., Eliezer Croitoru wrote: On 8/9/2012 4:47 AM, Amos Jeffries wrote: On 09.08.2012 12:32, Eliezer Croitoru wrote: On 8/9/2012 2:16 AM, Amos Jeffries wrote: Releases 3.2.0.14-3.2.0.18 have a standing block preventing requests

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Eliezer Croitoru
the vpn as gateway to the whole word but only to the VPN connection. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Eliezer Croitoru
dedicated IP for each certificate\client. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] squidguard spyware log

2012-08-11 Thread Eliezer Croitoru
Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Eliezer Croitoru
sophisticated you can use reverse dns to name the static ip's into user ids so any logs software such as calamaris can show you the used id. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-12 Thread Eliezer Croitoru
in routing while using squid as intercept proxy is just on the outgoing traffic but for most squid boxes\routers the routing table will be the same that used for NAT or local software such as squid\proxy. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting

Re: [squid-users] Linux build, libcap, and enable-linux-netfilter

2012-08-14 Thread Eliezer Croitoru
Proxy support WILL NOT be enabled do you need TPROXY or INTERCEPT? intercpet will work just fine. TPROXY is another story... Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Linux build, libcap, and enable-linux-netfilter

2012-08-14 Thread Eliezer Croitoru
the right package because on all redhat flavor linux i have used with squid you can get a package of libcap and libcap2. if you have specific redhat version it will be much more simple to find a package. Regards, Eliezer Thanks, David On Tue, Aug 14, 2012 at 3:01 PM, Eliezer Croitoru elie

Re: [squid-users] Squid 3.2.1 is available

2012-08-15 Thread Eliezer Croitoru
Jeffries -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid 3.2.1 is available

2012-08-15 Thread Eliezer Croitoru
it still validates the same host\domain so what is the problem? Thanks, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] upgrade but leave earlier version running?

2012-08-17 Thread Eliezer Croitoru
and rollover plan to be safe. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid 3.2.1 is available

2012-08-18 Thread Eliezer Croitoru
will most likely will manage the proxy acls to match the local security policy else then the firewall. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Transparent Proxy

2012-08-19 Thread Eliezer Croitoru
Thanks in advance what os? what kernel? ver? Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Transparent Proxy

2012-08-19 Thread Eliezer Croitoru
On 8/19/2012 10:18 PM, Roman Gelfand wrote: debian/2.6.26-2-686 Thanks for your help Then ip|ipfwipf in not of your concern. you need linux-netfilter. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] I want to verify why squid wont cache a specific object.

2012-08-19 Thread Eliezer Croitoru
for an object to be a type ? Thanks, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] I want to verify why squid wont cache a specific object.

2012-08-19 Thread Eliezer Croitoru
then 60 minutes of caching. Thanks, Eliezer -- Eliezer Croitoru https://proxy IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] I want to verify why squid wont cache a specific object.

2012-08-19 Thread Eliezer Croitoru
On 8/20/2012 2:37 AM, Eliezer Croitoru wrote: On 8/20/2012 1:38 AM, Amos Jeffries wrote: The is the file number/name where it is being stored. Since this is an erased operation that is always the magic F value. It is not 1-to-1 related to the object being cacheable. It just means

Re: [squid-users] I want to verify why squid wont cache a specific object.

2012-08-19 Thread Eliezer Croitoru
-- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] I want to verify why squid wont cache a specific object.

2012-08-19 Thread Eliezer Croitoru
they are static. And it's funny that you can see all over amazon cloudfront cdn headers that it is being cached already... for the first 10 request amazon cdn showed a cache miss and then hits one after the other. Thanks, Eliezer Amos -- Eliezer Croitoru https://www1.ngtech.co.il

Re: [squid-users] squid on redhat6 crash

2012-08-20 Thread Eliezer Croitoru
)? squid -v output? squid.conf ? transparent proxy? ulimit -Sa output? ulimit -Ha output? the more data you will provide us we can pinpoint the reason for the problem. Regards, Eliezer Thanks in advance Julie -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit

Re: [squid-users] squid on redhat6 crash

2012-08-21 Thread Eliezer Croitoru
-- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] Error on RPM build of squid 3.2.1 on Fedora 17

2012-08-21 Thread Eliezer Croitoru
is causing the problem? is it squid code or unneeded flags? Thanks, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] squid on redhat6 crash.. rpm for squid 3.2.1

2012-08-21 Thread Eliezer Croitoru
it with the same configure options as in the older rpms of fedora 17. if you upgrade a system remember to backup all old settings Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Compile error Squid 3.2.1

2012-08-27 Thread Eliezer Croitoru
On 08/27/2012 09:25 PM, Jeff Gerard wrote: I am looking for help in determining why my compile will not work. I have been running into the following errors during compile: SNIP I am running this on Fedora Core 6 (have been running 3.1.20 with no issue) and gcc version is 4.1.2 6 ? you mean

<    1   2   3   4   5   6   7   8   9   10   >