Re: [squid-users] Problem publishing on Facebook via Squid 3.1.2

2012-11-27 Thread Eliezer Croitoru
of the problem. After all the above data will be gathered you will have a more solid ground towards the Solution. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Problem publishing on Facebook via Squid 3.1.2

2012-11-27 Thread Eliezer Croitoru
on the NAT issue? Most of our users are indeed in private networks and the Squid box is performing also NAT for them. My next step is to compile Squid 3.2.3 and give it a try, even though I would have preferred to stay with the packages offered in this distro. -- Eliezer Croitoru https://www1

Re: [squid-users] Upgrade of SQUID from 3.1 to 3.2 on Freebsd 8.3

2012-11-27 Thread Eliezer Croitoru
fine. I compiled squid with basic ./configure --enable-pf-transparent nothing more. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Problem publishing on Facebook via Squid 3.1.2

2012-11-27 Thread Eliezer Croitoru
time (seconds, -t) unlimited max user processes (-u) 62844 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations

Re: [squid-users] Tproxy without spoofed source address

2012-11-29 Thread Eliezer Croitoru
, it needs to see it in the other. My suggestion: Bypass TPROXY for LAN traffic. +1 simple iptables rules. Eliezer Nick -- Nick Fennell n...@tbfh.org -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Re: NULL characters in Header - how to get which sites generate this?

2012-11-30 Thread Eliezer Croitoru
the Squid - Users mailing list archive at Nabble.com. -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid3 extremely slow for some website cnn.com

2012-12-04 Thread Eliezer Croitoru
however this issue didn't happen in squid2.6 with the same configuration and accessing the same websites some guys suggested dns resolving issue but it's not, the problem is squid send (FIN,ACK) message to the website in the middle of loading and h -- Eliezer Croitoru https://www1

Re: [squid-users] Squid3 extremely slow for some website cnn.com

2012-12-04 Thread Eliezer Croitoru
thing. Eliezer On 12/4/2012 2:14 PM, Muhammed Shehata wrote: Dear Eliezer, do you mean disable x-forwader-for as i need it for dansguardian and squid visibility -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer

Re: AW: [squid-users] essential ICAP service is suspended

2012-12-04 Thread Eliezer Croitoru
CONNECT adaptation_access service_req allow all icap_service service_resp respmod_precache bypass=0 icap://127.0.0.1:1344/squidclamav adaptation_access service_resp deny CONNECT adaptation_access service_resp allow all Sean -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info

Re: AW: [squid-users] essential ICAP service is suspended

2012-12-04 Thread Eliezer Croitoru
bypass=1 to ensure squid continue if it cannot talk to icap? icap_service service_req reqmod_precache bypass=1 icap://127.0.0.1:1344/squidclamav icap_service service_resp respmod_precache bypass=1 icap://127.0.0.1:1344/squidclamav Thanks, Sean -- Eliezer Croitoru https://www1.ngtech.co.il

Re: AW: [squid-users] essential ICAP service is suspended

2012-12-04 Thread Eliezer Croitoru
wrote: Ah, I had presumes that squid would just retry on the next request. You dont use bypass for either reqmod_precache or respmod_precache? Sean -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: AW: AW: [squid-users] essential ICAP service is suspended

2012-12-04 Thread Eliezer Croitoru
http://bugs.squid-cache.org/show_bug.cgi?id=3688 Eliezer On 12/4/2012 6:03 PM, Knop, Uwe wrote: Hi, which was the bug id? thx UK -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] WARNING: accept_filter not supported on your OS

2012-12-05 Thread Eliezer Croitoru
NO 500 MISS in the access log. Moreover, the speed when access new links faster (not cached) than version 3.2.3. Best Regards, Trung Kien -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] tcp_miss_aborted with squidguard

2012-12-05 Thread Eliezer Croitoru
this : TCP_MISS_ABORTED/000 0 GET http://www.redtube.com/bid/00012244/index.php? - HIER_DIRECT/62.212.83.1- This happend with : squid-3.3.0.2 , squid-3.2.4 and squid-3.2.3 Is working ok with same conf in : squid-3.1.22 Regards -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting

Re: [squid-users] Squid3 extremely slow for some website cnn.com

2012-12-05 Thread Eliezer Croitoru
Cairo - Alex Desert Road, 6th October, 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net On 12/04/2012 02:08 PM, Eliezer Croitoru wrote: For me it works fine on both 3.2.1-3 and others. Try to check the headers that is being sent from you proxy

Re: [squid-users] After upgrade from 3.1 to 3.2.3 our parent virusscanner is busy

2012-12-05 Thread Eliezer Croitoru
about connections to a parent proxy from 3.1 to 3.2 series. The releasenote doesn't mentioned ianything about this (or I can't find it). -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Storeurl program,what's wrong with it ?

2012-12-05 Thread Eliezer Croitoru
192.168.108.14/- - GET - myip=192.168.137.20 myport=3128 But there is no object http://www.youku.com/030002050050BCAFBB490B03BAF2B1A20A79FD-0282-DEA6-350C-E810E14BAA19.flv in store.log Thanks for your help! Best wishes! -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info

Re: [squid-users] After upgrade from 3.1 to 3.2.3 our parent virusscanner is busy

2012-12-05 Thread Eliezer Croitoru
there is no problem with communication or proxy basic function but from the AV side. Try the ss tool to see the open connections\FD between squid and the AV and the clients. Regards, Eliezer On 12/5/2012 3:47 PM, Dieter Bloms wrote: Hi Eliezer, On Wed, Dec 05, Eliezer Croitoru wrote: We will need more

Re: [squid-users] Problem to access to a specific url (correo-gto.com.mx) with squid 2.7

2012-12-05 Thread Eliezer Croitoru
# Underscore characters is not strictly allowed in Internet hostnames @@ -4888,6 +4907,7 @@ coredump_dir /var/spool/squid # #Default: # balance_on_multiple_ip on +balance_on_multiple_ip off # TAG: pipeline_prefetch # To boost the performance of pipelined requests to closer -- Eliezer

Re: [squid-users] Problem to access to a specific url (correo-gto.com.mx) with squid 2.7

2012-12-05 Thread Eliezer Croitoru
a way clear for me, I do not know if I just make a remove and install will be enogth. Thanks and great day. -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] tcp_outgoing_mark + https

2012-12-11 Thread Eliezer Croitoru
requests. Does someone know how to achieve this? Many Thanks. Sebastien -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid3 extremely slow for some website cnn.com

2012-12-11 Thread Eliezer Croitoru
Desert Road, 28 Km 6th of October 12577, Egypt T: +20 (2) 33 32 0700 | Ext: 1532 F: +20 (2) 33 32 0800 | M: E: m.sheh...@tedata.net www.tedata.net -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] Re: RE : [squid-users] tcp_outgoing_mark + https

2012-12-11 Thread Eliezer Croitoru
and is directly connected to internet. Now, I want to mark packets with squid regarding dstdomain ACLs in order to route them on the 100Mb/s link. It works as expected with http but not for https (CONNECT) Best Regard, Sebastien De : Eliezer Croitoru [elie

Re: [squid-users] Squid3 extremely slow for some website cnn.com

2012-12-11 Thread Eliezer Croitoru
and same network devices before and after them the only difference is th squid version one is squid2.6stable20 and other is squid3.2.4 which result the aborted of some urls contains java script M Shehata IT NS From: Eliezer Croitoru [elie

Re: [squid-users] tcp_outgoing_mark + https

2012-12-12 Thread Eliezer Croitoru
On 12/12/2012 09:44 AM, Sébastien WENSKE wrote: Eliezer, I'm running Debian 6 with a 3.6.9 kernel, Shorewall is v4.5.9.3 and Squid 3.2.3 (I had some troubles to compile 3.2.4) Indeed, just these to 100Mbit connection is what I need:) Hey Sébastien, It seems like a bug to me but just to make

Re: [squid-users] Squid3 extremely slow for some website cnn.com

2012-12-12 Thread Eliezer Croitoru
5.2 final 2. squid3.2.4 with centos 6.3 final Mshehata IT NS -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid3 extremely slow for some website cnn.com

2012-12-13 Thread Eliezer Croitoru
and requested the same URL which was delivered successfully. The log lines were incomplete, so we don't know anything about timing and interrelations. Amos -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Request header too large ip_conntrack

2012-12-17 Thread Eliezer Croitoru
Shawnigan Lake School -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Request header too large ip_conntrack

2012-12-17 Thread Eliezer Croitoru
Please direct requests for support to helpd...@shawnigan.ca - Original Message - From: Eliezer Croitoru elie...@ngtech.co.il To: squid-users@squid-cache.org Sent: Monday, 17 December, 2012 7:19:33 AM Subject: Re: [squid-users] Request header too large ip_conntrack Hey there, Take

Re: [squid-users] Request header too large ip_conntrack

2012-12-17 Thread Eliezer Croitoru
for support to helpd...@shawnigan.ca Shawn Wright Manager of Information Technology Shawnigan Lake School Please direct requests for support to helpd...@shawnigan.ca - Original Message - From: Eliezer Croitoru elie...@ngtech.co.il To: squid-users@squid-cache.org Sent: Monday, 17 December

Re: [squid-users] Squid 3.2.2 is available

2012-12-17 Thread Eliezer Croitoru
Hildebrandt wrote: * Ralf Hildebrandtralf.hildebra...@charite.de: But why? Are there known performance issues with 3.2? Turns out that it was this: ICAP server connection leaks have been resolved. which had been resolved in 3.2.7 - YAY! -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt

Re: [squid-users] Help with Squid HTTPS proxy

2012-12-17 Thread Eliezer Croitoru
and it's that you dont have a basic proxy socket with no tproxy/intercept. add a line http_port 127.0.0.1:3127 or any other port just to make this one. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer

Re: [squid-users] Squid 3.1.10 CentOS : cache_swap_log (13) Permission Denied

2012-12-18 Thread Eliezer Croitoru
On 12/18/2012 03:09 PM, Christophe Marchand wrote: Hi, I have the following problem : when I do not declare a cache dir, my squid starts correctly and runs perfectly. When I uncomment the cache_dir line, it fails with this message : 2012/12/18 11:31:18| /var/cache/squid/.00: (13)

Re: [squid-users] Squid 3.1.10 CentOS : cache_swap_log (13) Permission Denied

2012-12-18 Thread Eliezer Croitoru
I am not sure how you manage your rights on the server and also the locations in it but, Squid cache dir should be fully accessible using the effective_user of squid. It's the same for squid logs. Make sure the whole directory tree is accessible using the squid user. I just noticed that

Re: [squid-users] Access denied on transparent after upgrade 3.1.x to 3.3

2012-12-19 Thread Eliezer Croitoru
the upgrade even the http_port for transparent always returns denied. Please advice. Regards -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid 3.1.10 CentOS : cache_swap_log (13) Permission Denied

2012-12-19 Thread Eliezer Croitoru
(squid) groupes=23(squid) It seems that root:squid try to write-access to squid_cache... or I misunderstand... -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Squid 3.2.5 wants to use IPv6 address?

2012-12-19 Thread Eliezer Croitoru
On 12/19/2012 2:33 PM, Dmitry Melekhov wrote: 19.12.2012 16:29, Ralf Hildebrandt пишет: * Dmitry Melekhov d...@belkam.com: 19.12.2012 16:19, Ralf Hildebrandt пишет: When trying to access http://www.vkontakte.ru/, I'm getting an error: Connection to 2a00:bdc0:3:103:1:0:403:900 failed. (101)

Re: [squid-users] Blocking teamviewer

2012-12-20 Thread Eliezer Croitoru
traffic i tried it with ips but also like to make any restriction possible on squid. By the time the program versions changes this kind of configuration changes so id like to post this current mail for your help. Regards -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info

Re: [squid-users] Citrix Secure Gateway

2012-12-20 Thread Eliezer Croitoru
is the source of the problem, but I think this is likely a hey, they are using a proxy lets blame that response. -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

[squid-users] Re: Help on squid

2012-12-20 Thread Eliezer Croitoru
Hey there, Squid is a http\https proxy and is not suited for Mysql and other software which is not compatible with CONNECT method. Try to search for Mysql Proxy which I think available on mysql db site and others as well. Regards, Eliezer On 12/20/2012 2:55 PM, wrote: Hello, I have taken

Re: [squid-users] Access denied on transparent after upgrade 3.1.x to 3.3

2012-12-20 Thread Eliezer Croitoru
% 10080 refresh_pattern ^gopher:14400% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 #debug_options ALL,3 Regards On Wed, Dec 19, 2012 at 9:45 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: egards, Eliezer -- Eliezer

Re: [squid-users] squid -z hangs and does not work

2012-12-24 Thread Eliezer Croitoru
to your suggestion. But squid still hangs at the log kid1| Creating Swap Directories. And it seems that nothing happened after I press enter. Best regards, Jackie -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] squid -z hangs and does not work

2012-12-24 Thread Eliezer Croitoru
On Mon, Dec 24, 2012 at 10:39 AM, Eliezer Croitoru elie...@ngtech.co.il wrote: I think it worth to have a more accurate log such as: no cache_dir or any other more informative msg. But the basics of squid is that it wont create if none exists in settings and will show some data when trying

Re: [squid-users] squid -z hangs and does not work

2012-12-24 Thread Eliezer Croitoru
the directory instead of saying creating swap directory without doing anything. T On Mon, Dec 24, 2012 at 1:05 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: Hey Tianyin, These patches are better to be sent the squid-dev. I would choose to not remove this specific debug section and to change

Re: [squid-users] 3.2.5 comm_open: socket failure: (24) Too many open files

2012-12-29 Thread Eliezer Croitoru
on-disk objects -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] 3.2.5 comm_open: socket failure: (24) Too many open files

2012-12-29 Thread Eliezer Croitoru
is configured to use 16384 fd, it couldn't because limit is 1024? That's kind of confusing, I tried to use ulimit -n 16384 as root to raise FD limit now, will report back. Maybe squid can probe at start and warn about mis-matching fd limits? -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt

Re: [squid-users] 3.2.5 comm_open: socket failure: (24) Too many open files

2012-12-29 Thread Eliezer Croitoru
is 1024? That's kind of confusing, I tried to use ulimit -n 16384 as root to raise FD limit now, will report back. Maybe squid can probe at start and warn about mis-matching fd limits? On Sat, Dec 29, 2012 at 12:16 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: Hey, It's probably the linux

Re: [squid-users] 3.2.5 comm_open: socket failure: (24) Too many open files

2012-12-29 Thread Eliezer Croitoru
:24, 叶雨飞 wrote: Is this a new patch or is it in 3.2.5? I've never seen anything less than 16384 in the log file, even though I've run into the issue in 3.2.5 On Sat, Dec 29, 2012 at 1:19 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: I made sure and squid logs the current available FD from

Re: [squid-users] 3.2.5 comm_open: socket failure: (24) Too many open files

2012-12-29 Thread Eliezer Croitoru
Great! Nice to know that. On 30/12/2012 00:02, 叶雨飞 wrote: ubuntu 10.04 . and appearently /etc/security/limits.conf is not working on it because it doesn;t configure with pam_session. I just added ulimit -n 65535 in my launch script -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt

Re: [squid-users] 3.2.5 comm_open: socket failure: (24) Too many open files

2012-12-29 Thread Eliezer Croitoru
solve all these kind of problems. T On Sat, Dec 29, 2012 at 3:27 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: Great! Nice to know that. On 30/12/2012 00:02, 叶雨飞 wrote: ubuntu 10.04 . and appearently /etc/security/limits.conf is not working on it because it doesn;t configure

Re: [squid-users] 3.2.5 comm_open: socket failure: (24) Too many open files

2012-12-30 Thread Eliezer Croitoru
of fds? I think that would solve all these kind of problems. T On Sat, Dec 29, 2012 at 3:27 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: Great! Nice to know that. On 30/12/2012 00:02, 叶雨飞 wrote: ubuntu 10.04 . and appearently /etc/security/limits.conf is not working on it because

Re: [squid-users] Implementing SslBump using Bump-Server-First in Transparent mode using squid-3.HEAD-20121231-r12554

2012-12-31 Thread Eliezer Croitoru
Hey, From this basic snippet of the email I can tell you: 1. using DNAT is wrong anyway for intercept proxy. 2. specifically for SSL-BUMP it's ^^^ the cause of most of your problems. Since SSL-BUMP tries to to bump server first it should be able to knwo what server to bump while using DNAT you

Re: [squid-users] Implementing SslBump using Bump-Server-First in Transparent mode using squid-3.HEAD-20121231-r12554

2012-12-31 Thread Eliezer Croitoru
Sorry my bad, If it's on the same machine then it should be fine. if on other it's another story. on what machine is it? these rules? Thanks, Eliezer On 1/1/2013 7:14 AM, Amos Jeffries wrote: No. DNAT and REDIRECT do the same thing and both are valid for Squid with NAT intercept. REDIRECT

Re: [squid-users] helpers die all at the same time without any reason

2013-01-03 Thread Eliezer Croitoru
. Thanks -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Transparent Mode and WCCP

2013-01-03 Thread Eliezer Croitoru
Based on what you configured you cisco router? what did you configured on your cisco router? What cisco device are you using? did you had the chance to look at: http://wiki.squid-cache.org/ConfigExamples/UbuntuTproxy4Wccp2 please try to share more information on the infrastructure and the

Re: [squid-users] Transparent Squid on OpenVZ container?

2013-01-03 Thread Eliezer Croitoru
Tproxy or intercept\transparent? Eliezer On 1/1/2013 11:28 AM, Tim Bates wrote: On 1/01/2013 4:18 PM, Amos Jeffries wrote: On 30/12/2012 10:55 p.m., Tim Bates wrote: Has anyone had experiences with running Squid *transparently* on an OpenVZ container in combination with a Cisco router? Can

Re: [squid-users] Transparent Mode and WCCP

2013-01-03 Thread Eliezer Croitoru
. I do have catalyst router which supports wccp2. Should I use that instead of the fortigate? How does using tproxy instead of transparent proxy improves wccp routing? Thanks again On Wed, Jan 2, 2013 at 4:39 AM, Eliezer Croitoru elie...@ngtech.co.il wrote: Based on what you configured you

Re: [squid-users] Squid3 extremely slow for some website cnn.com

2013-01-06 Thread Eliezer Croitoru
Hey muhammed, Since it's not squid issue but another network level thing I was wondering if you have tried to test something about MSS\MTU? Some ISP use hardware that can cause there kind of issues and can make it very difficult to find. Hope it will help you. Regards, Eliezer On

Re: [squid-users] Squid crash on OpenBSD 5.2

2013-01-07 Thread Eliezer Croitoru
I didn't had much time to look at the back-trace. Also I dont know what is your knowledge is about assert or other things. I dont know about this specific one but.. in most cases it's there for a reason. It's there to make an assessment about the state of the code. Maybe the server is not

Re: [squid-users] calculating hardware for 900 users for SQUID cache server

2013-01-10 Thread Eliezer Croitoru
Hey Joseph, You meant SAS? yes? To decide about hardware specs you will want to try and measure the requests per second rather then the amount of users. Another thing to take in account, is it a regular forward proxy or intercept\trpoxy? Do you want to keep logs on local disc? Do you have

Re: [squid-users] Squid 3.2.6 is available | Also in centos repo

2013-01-10 Thread Eliezer Croitoru
CentOS RPM BUILDS here: http://repo.ngtech.co.il/rpm/centos/6/x86_64/ I changed the repo a bit so it can be used with yum to get updates. Add the following to a repo file: ##squid.repo [squid] name=Squid repo for CentOS Linux 6 - $basearch baseurl=http://repo.ngtech.co.il/rpm/centos/6/$basearch

Re: [squid-users] Squid as transparent proxy show squid error pages in browser

2013-01-10 Thread Eliezer Croitoru
Hey Frantisek, This is no squid problem. since it's intercept proxy the client tries to do a dns lookup for the www.example.com but since it dosn't have any way to get the dns result for this domain it shows the client the problem it has. Firefox dont know to what IP send the requests. In

Re: [squid-users] Squid as transparent proxy show squid error pages in browser

2013-01-10 Thread Eliezer Croitoru
In any case it wont be a conservative solution but it depends on what you want to do in this situation? Do you have 1 wan connection etc.. If you have two wan connections that one is down use a basic round robin load balancing as a base and a script to remove the faulty route in a case it's

Re: [squid-users] websites not responding

2013-01-10 Thread Eliezer Croitoru
On 1/10/2013 5:35 PM, Simon Matthews wrote: Thanks. That solved the problem. I still have a problem with linkedin, but it is rather different. Some pages (including the home page) load with only a subset of what should be on the page. I don't know if this is an issue with squid or my browser.

Re: [squid-users] RE: Your cache is running out of filedescriptors

2013-01-14 Thread Eliezer Croitoru
Or use the proper limits\security settings for squid process instead of hacking the start-up script. Eliezer On 1/14/2013 4:10 AM, Alfred Ding wrote: Now is ok, you need add ulimit -n 65536' in you squid startup script. Thanks.

Re: [squid-users] Upgrade of SQUID from 3.1 to 3.2 on Freebsd 8.3

2013-01-14 Thread Eliezer Croitoru
On 1/14/2013 1:48 PM, Leslie Jensen wrote: I've now upgraded squid to 3.2 and rewritten the firewall rule that resulted in a forwarding loop. Unfortunately I've got no access now and I can't see where I've made the error. The browser says squid is rejecting the requests: Access control

Re: [squid-users] Back to Youtube Caching or any stream cache feature request/discuss

2013-01-17 Thread Eliezer Croitoru
On 1/16/2013 3:31 PM, David Touzeau wrote: Dear I would like to know if there is currently tips on Squid 3.2.x in order to cache Youtube or other stream flows. Probably not... google is your friend just add the site:squid-cache.org to the search to filter some garbage. If there any plan on

Re: [squid-users] How to fix a Zero Sized Reply error

2013-01-17 Thread Eliezer Croitoru
: gzip, deflate Proxy-Connection: keep-alive Amos -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt...@sip2sip.info IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Back to Youtube Caching or any stream cache feature request/discuss

2013-01-19 Thread Eliezer Croitoru
On 1/20/2013 1:30 AM, David Touzeau wrote: So no chances to get it with the 3.2x ? No. The reason is very simple: There is a big difference in the code parts which are critical for the feature to work. If you are willing to try learning a lot of code and porting it from 3.3\3.HEAD many

Re: [squid-users] How to modify the process owner name in syslog

2013-01-21 Thread Eliezer Croitoru
Hey Bill, Since squid 2.7 is not maintained anymore I doubt you will get much support about it but if you have the relevant settings you have used maybe someone can help you. Regards, Eliezer On 1/21/2013 12:09 PM, Bill Yuan wrote: Hi all, I just finished the configuration on my squid 2.7,

Re: [squid-users] Squid as reverse proxy and PCI Tests

2013-01-21 Thread Eliezer Croitoru
On 1/21/2013 6:11 PM, Sébastien WENSKE wrote: Hope this can help :) http://www.sw-servers.net/how-to-pass-pci-tests-with-squid/ Best Regards, Sebastien WENSKE Just wondering how it helps in these tests? Since not everybody knows the reason you should explain the cause and the result of the

Re: [squid-users] Squid is crashing

2013-01-21 Thread Eliezer Croitoru
On 1/21/2013 5:19 PM, Farooq Bhatti wrote: Thanks for the prompt response. Actually I am newbie to debugging I have never used any debugging tool before so no idea of the error I am getting any how I have googled for the last error and be able to install the glibc debuginfo packages but now

Re: [squid-users] Squid 3.2.6 - blocking hosts by regexp?

2013-01-23 Thread Eliezer Croitoru
On 1/23/2013 3:32 PM, Ralf Hildebrandt wrote: 1358927965.305 90252 141.42.xxx.69 TCP_MISS/200 2711 CONNECT download.teamviewer.com:443 - HIER_DIRECT/46.163.100.220 - 1358928992.439 74 141.42.xxx.115 TCP_MISS/200 9 CONNECT ping3.teamviewer.com:443 - HIER_DIRECT/95.211.37.197 - Idea: acl

Re: [squid-users] access-lists from mysql ?

2013-01-23 Thread Eliezer Croitoru
On 1/24/2013 12:13 AM, Ali Jawad wrote: Hi Is it possible to load access-lists from a database ? I.e. I want to read all the allowed src IPs from a database, all the examples I could fine are around user authentication and not IP access-lists. If it is possible can you please show me a few

Re: [squid-users] Access Denied with transparent mode on FreeBSD

2013-01-24 Thread Eliezer Croitoru
-strict-aliasing' 'CPP=cpp' 'PKG_CONFIG=pkgconf' --enable-ltdl-convenience *** END *** This is basically a working 2.7 installation config that has been moved onto a 3.2 box with some minor tweaks in the new config. Any help appreciated. Iain. -- Eliezer Croitoru https://www1.ngtech.co.il sip:ngt

Re: [squid-users] Why squid instance' cpu load so high, can rebuild so frequency ?

2013-01-28 Thread Eliezer Croitoru
Hey, What exact version of 3.2+ are you using? What distro? squid.conf.. Self compiled or from a Repo? squid build options from squid -v There is a problem but it's not enough basic data to even look at it. Squid 3.2+ was patched couple times and it might have been fixed in one of these

Re: [squid-users] Why squid instance' cpu load so high, can rebuild so frequency ?

2013-01-29 Thread Eliezer Croitoru
Q1=100 Q2=128 cache_dir diskd /cache3/aufs-32k 8000 32 256 max-size=32768 Q1=100 Q2=128 cache_dir diskd /cache4/aufs-512k 32000 16 256 min-size=32769 max-size=524288 Q1=100 Q2=128 在 2013-1-29,上午11:34,Eliezer Croitoru elie...@ngtech.co.il 写道: Hey, What exact version of 3.2+ are you using

Re: [squid-users] Windows Updates on 3.2.6

2013-01-31 Thread Eliezer Croitoru
Squid access logs? What is the exact problem? you can't download at all or there is a problem? Please share your squid.conf and squid -v output. Where did you got your RPM? from my repo? Please share more info and if you can get tcpdump output this can really help to find your problem. Note

Re: [squid-users] Windows Updates on 3.2.6

2013-01-31 Thread Eliezer Croitoru
to not fetch objects and when fails tries to use SSL which I dont know if it can or cannot use. Eliezer Thanks, Dave -Original Message- From: Dave Burkholder Sent: Thursday, January 31, 2013 10:29 AM To: Eliezer Croitoru; squid-users@squid-cache.org Subject: RE: [squid-users] Windows

Re: [squid-users] Reverse cache for HLS streaming

2013-01-31 Thread Eliezer Croitoru
-Modified: Thu, 31 Jan 2013 18:11:04 GMT ETag: 800182-181de4-4d4998cd170d4 Accept-Ranges: bytes Content-Length: 1580516 Content-Type: video/MP2T X-Cache: MISS from hls2.domain.tv X-Cache-Lookup: MISS from hls2.domain.tv:80 Via: 1.1 hls2.domain.tv (squid/3.2.5) Connection: keep-alive -- Eliezer

Re: [squid-users] Problem with squid and rp-pppoe serverver

2013-02-01 Thread Eliezer Croitoru
Hey Georgi, It seems like an OS level problem rather then any squid business. You can try to contact the OS\DISTRO mailing list or forums to get some more help about that. Eliezer On 2/1/2013 4:18 PM, Georgi Maleshkov wrote: Hi, i have some problem with implementing squid3 like transparent

Re: [squid-users] Re: Splitting objects by size into different cache_dir not working for me

2013-02-01 Thread Eliezer Croitoru
series bug that blocks squid from caching objects and it should be tested deeper to make sure of it. Anyone want to test it? -- Eliezer Croitoru

Re: [squid-users] Re: Splitting objects by size into different cache_dir not working for me

2013-02-01 Thread Eliezer Croitoru
to ask me anything. I am also in squid IRC channel here and there. -- Eliezer Croitoru

Re: [squid-users] Re: Splitting objects by size into different cache_dir not working for me

2013-02-01 Thread Eliezer Croitoru
problem after that file a bug at the bugzilla and also refer to this mail as part of the process. http://bugs.squid-cache.org/ -- Eliezer Croitoru http://www1.ngtech.co.il

Re: [squid-users] Re: Splitting objects by size into different cache_dir not working for me

2013-02-02 Thread Eliezer Croitoru
-e 's/#.*//g' $SQUID_CONF | \ grep ^cache_dir rock| awk '{ print $3 }'` And later check a dir or file existence by the store. This helps the init script to prevent false identification of cache_dir but not preventing the very wrong squid -z action. Regards, -- Eliezer Croitoru http

Re: [squid-users] a log check script for Squid

2013-02-02 Thread Eliezer Croitoru
. This is just to keep the oranges away from the tomatoes:, unless you like tormagetoes. hope this is useful to someone -j -- Eliezer Croitoru http://www1.ngtech.co.il

Re: [squid-users] access-lists from mysql ?

2013-02-02 Thread Eliezer Croitoru
Hey Matthew, I wrote a more complex solution like that in ruby with MYSQL, TOKYOCABINET, REDIS and some others. I have just seen couple days ago another a very nice interface with a very nice api called moneta for ruby. It uses one interface for couple DB such as mentioned above. Until now

Re: [squid-users] access-lists from mysql ?

2013-02-03 Thread Eliezer Croitoru
On 02/03/2013 08:02 AM, Matthew Goff wrote: Ah...But is it floating on the web to be found by Google?;) I searched off and on a little for a way to easily tie Squid to MySQL and I found lots of people asking but very little practical examples beyond user authentication using the supplied demo

Re: [squid-users] what should squid -z do

2013-02-03 Thread Eliezer Croitoru
is something dirty 3 there is not store present 4 DB corrected. I just think loudly since the subject was opened. -- Eliezer Croitoru http://www1.ngtech.co.il

Re: [squid-users] UDP_HIT/000 after TCP_MISS/504

2013-02-10 Thread Eliezer Croitoru
, e vos será feito. João 15:7 -- Eliezer Croitoru http://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: AW: [squid-users] Re: dns_v4_first on ignored?

2013-02-11 Thread Eliezer Croitoru
mailing list archive at Nabble.com. -- Eliezer Croitoru http://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: AW: AW: [squid-users] Re: dns_v4_first on ignored?

2013-02-11 Thread Eliezer Croitoru
shared dns server to the clients. On 2/11/2013 2:06 PM, Sandrini Christian (xsnd) wrote: Centos 6.3 Source: http://repo.ngtech.co.il/rpm/centos/6/x86_64/ -- Eliezer Croitoru http://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: AW: AW: AW: [squid-users] Re: dns_v4_first on ignored?

2013-02-11 Thread Eliezer Croitoru
remove them and try restarting squid service to see what is going on. Regards, -- Eliezer Croitoru http://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: AW: AW: AW: [squid-users] Re: dns_v4_first on ignored?

2013-02-12 Thread Eliezer Croitoru
in the cases which 4to6 tunnel is not being used. Regards, -- Eliezer Croitoru http://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: AW: AW: AW: AW: AW: [squid-users] Re: dns_v4_first on ignored?

2013-02-12 Thread Eliezer Croitoru
a lot. Not sure if there is any alternatives? I thought that squid 3.2 is doing parallel lookups to and A records? -- Eliezer Croitoru http://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: AW: AW: AW: AW: [squid-users] Re: dns_v4_first on ignored?

2013-02-12 Thread Eliezer Croitoru
but it does the trick for me. Kind regards, /petter -- Eliezer Croitoru http://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Caching URLs with a ? in them?

2013-02-13 Thread Eliezer Croitoru
On 2/13/2013 5:59 PM, Scott Baker wrote: The URL ONLY changes for logging purposes. The content being served is static. The serial number is ONLY preset so I can comb the logs and find who/when picked up a resource. Still the url is constantly changing and the proxy cannot know about any of the

Re: [squid-users] query about --with-filedescriptors and ulimit

2013-02-14 Thread Eliezer Croitoru
at the startup script: ulimit 16384 (or another limit) It works fine so feel free to use it unless you prefer to do it in the ways Fedora\linux structure offers the admin. Regards, Eliezer Thanks Amm. -- Eliezer Croitoru http://www1.ngtech.co.il IT consulting for Nonprofit organizations

[squid-users] StoreID helper example at the wiki.

2013-02-17 Thread Eliezer Croitoru
- bash - java - erlang - lisp Also Benchmarks for helpers are welcomed. -- Eliezer Croitoru http://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

Re: [squid-users] Re: Caching netflix by Mime headers

2013-02-17 Thread Eliezer Croitoru
] files, the ? payload will be clashed or will diferenciate a?b, and a?c for example I hope to be clear LD -- Eliezer Croitoru http://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer at ngtech.co.il

<    1   2   3   4   5   6   7   8   9   10   >