Re: [squid-users] Bug 3463 help wanted
I think I can try it (if it works on virtualbox). Been doing solaris for a while. Openindiana can't be different. Downloading iso. El 12/04/2012 0:30, Amos Jeffries escribió: http://bugs.squid-cache.org/show_bug.cgi?id=3463 Requires OpenIndiana with build tools. Tasks: 1) Using ./configure --disable-internal-dns verify if the error occurs on 3.2 latest daily package. if no, please close the bug as FIXED with target milestone 3.2. 2) Locate and supply details requested in comment #1 of the bug report. Any takers? Thanks in advance Amos
Re: [squid-users] Allow normal user to run squid reconfigure command
On 3/6/2012 11:11 AM, Maqsood Ahmad wrote: Hi All, Can some body please help , i want to allow a normal user to change a single file in /usr/local/squid/etc/timebaseallow and then run squid -k recon and squid -k parse. How can i do this. currently my squid process is running as root. Merrymax Hello Maqsood You should use sudo with some custom groups; other option that comes to my head is to allow them use cachemgr.cgi to reconfigure squid. Regards Sebastian.
Re: [squid-users] squid stops working several times a day
On 2/28/2012 2:54 PM, karj wrote: Hi All, I have a problem with my squid's. Squid stops working several times a day. The only thing that warns me that something is wrong in cache.log is the Detected DEAD Sibling: xxx.xx.xxx.xxx message. After a few seconds everything goes back to normal. We are using 5 squids version (2.7.Stable 9) in Accelerator Mode which are sibling to each other. So we have 5 sibling squid in front of our web farms. Serving almost 7000/request per second at peak time, and an average of 4500/request per second. The problem occurs randomly in all servers... Are you able to reach (telnet or ping or anything) the sibling during the times that squid stops working? What can you tell about the sibling logs? Specially the cache.log Regards Sebastian
Re: [squid-users] Re: problem compiling squid 3.2.0.15 + openssl 0.9.8 with llvm-gcc-4.2.1
On 2/29/2012 3:17 AM, YJZ wrote: So my question now is: Which option would squid go with, in order to compile with --enable-ssl on Mac OS X? Hello! Looks like a trap, I would go with Openssl Just download, ./configure --prefix someplace and when compiling squid tell ./configure where to find ssl Compiling against proprietary software is _always_ a pain and bad business in the end. Regards Sebastian
Re: [squid-users] Squid server on Amazon EC2
On 2/22/2012 10:23 AM, Ananthnag Bonthala. R. wrote:
Dear Squid users,
I want your experts solution for having squid proxy server configured in the
cloud.
What I am planning to do is :
---[LAN]-[local_squid_proxy]{internet cloud}-[squid proxy in
cloud Amazon EC2 ]
what I want to setup is configure my local squid proxy with cache_peer
pointing to my squid proxy server in Amazon EC2 cloud.
cache_peer proxy.amazonec2.com parent 3128 3130 default
so that all my http request are forwarded from my local squid_proxy to the
proxyserver in the cloud.
Can anyone suggest me if above situation workable.
Thank you in advance.
Hello Bonthala:
Please do not reuse other emails changing subject; people that use
threads will have their email broken. And if you do, the least is to
remove the other people text.
It looks your setup is correct. You might want to add some ACLs if you
have local lan content to be accessed instead of using the remote proxy.
Regards
Sebastian
Re: [squid-users] squid + dansguardina https response on blocked url page
It looks as if squid doesn't know who to ask for the https url. Notice error: ERR_CONNECT_FAIL 111 I haven't used dansguardian for a long time, so this might be a wrong interpretation Can you post your squid configuration? Regards Sebastian El 19/02/2012 10:37, Matteo Cazzador escribió: Example: http://www.facebook.com - users get a correct page feed back https://www.facebook.com - users get a page error But dansguardiano blocked correctly http and https. with https i obtain an proxy error like : read into buffer; bufflen: 1024 HTTP/1.0 503 Service Unavailable Server: squid/3.1.16 Mime-Version: 1.0 Date: Thu, 16 Feb 2012 20:27:38 GMT Content-Type: text/html Content-Length: 1246 X-Squid-Error: ERR_CONNECT_FAIL 111 Someone can help me please? thank's a lot
[squid-users] Learn which refresh pattern matchs
Hello I been adding some refresh patterns to my squid 2.7 setup in order to save bandwidth. Since I have a lot of patterns, I am having trouble understanding with matches when. Is there any way to see given an url which one matches other than manualy searching the pattern on the file? Thanks Sebastian
Re: [squid-users] Learn which refresh pattern matchs
El 18/02/2012 13:33, Amos Jeffries escribió: On 18/02/2012 9:05 p.m., sebastian muniz wrote: Is there any way to see given an url which one matches other than manualy searching the pattern on the file? Configure: debug_options 22,3 warning: this can produce a big log. Amos THanks! Will try that.
Re: [squid-users] cachemgr.cfi General Runtime Information shows negative memory values
On 2/16/2012 6:52 PM, Amos Jeffries wrote: It is weir for me that the General Runtime Information shows negative values! mallinfo() suffers from 32-bit wrap problems. Negative numbers are normal there on 64-bit systems. Good to know! Memory accounted for is generated from the mem_pools accounting. Did you disable mem_pools? Just the opposite. Just recompiled to enable it. Thanks in advance! Sebastian
Re: [squid-users] Re: Squid Cache Directory - Webmin
On 2/15/2012 3:07 PM, berry guru wrote: I thought I had it, I found something in Chp5 of the Squid Definitive book talking about initializing cache directories. I ran the squid -z command and got back the following details after is took: aclParseAccessLine: squid.conf line 846: http_access permit all aclParseAccessLine: expecting 'allow' or 'deny', got 'permit'. Create Swap Directories Hello Berry, If you have manually modified the squid.conf file I would suggest to reset to defaults and start again. My experience with webmin is that you use it OR (exclusive OR) you do it manually. Manually modifying conf files tends to confuse webmin. In this case the error is correct, you are missing allow or deny in the line Check http://www.squid-cache.org/Doc/config/http_access/ Regards. Sebastian
[squid-users] cachemgr.cfi General Runtime Information shows negative memory values
Hello all. I am trying to understand how Squid allocates resources. It is weir for me that the General Runtime Information shows negative values! You can check it here: http://pastebin.com/EyVPB3Qu It is a bug or a problem in my installation? Thanks Sebastian
Re: [squid-users] WARNING: file cache.log squid
Weird... register exists: seba@sin:~$ dig cs.websl.blackberry.com ;; QUESTION SECTION: ;cs.websl.blackberry.com. IN A ;; ANSWER SECTION: cs.websl.blackberry.com. 426IN CNAME cs.websl.dyn.blackberry.net. cs.websl.dyn.blackberry.net. 30 IN A 206.53.146.25 Maybe CNAME is confusing squid? Regards Sebastian On 2/6/2012 4:42 PM, João Paulo Ferreira wrote: Hello, Today I noticed something strange in my squid log file: / var / log / squid / cache.log 06/02/2012 17:33:19 | ipcacheParse: No Address records in response to 'cs.websl.blackberry.com' Fished in the network and found that my squid can not resolve name for the address. This is a problem?
Re: [squid-users] Improved error pack?
On 2/2/2012 2:49 PM, mailing list subscriber wrote: A good starting point can be a walkthrough the five popular browsers' error messages (some of them are particularly notorios for hijacking the server error responses): Opera, Safari, IE, Firefox, Chrome - Is this a good enough suggestion? :) Just a thought: I don't really like the error errors web browsers show. There is a whole set of structured http errors and all of them are for a reason. Replacing them with a cool message saying: We feel awfully sorry for the inconvenience bla bla bla it is a problem more than a help. If somebody is unable to understand what a 302 status message means, I don't think squid should do anything about that. Just my two cents. Sebastian
Re: [squid-users] Improved error pack?
On 2/2/2012 10:26 PM, Amos Jeffries wrote: Right. These errors do make it into the view of people without any technical knowledge though. So each of our pages has those technical details and should have a simplified this means description for people who can't understand the technical bits. The non-technical wording could stil do with clarification in a lot of cases, just need to find which ones are confusing and fix them. Amos Right, You have a point there. Both contents can be available at the same page. I think most of the users are concerned with knowing if the problem is something they can fix, it is external or is related to the site they are visiting. Sebastian
Re: [squid-users] Changes related to /etc/resolv.conf and squid
Hello Just loosely related, but I would like to know for sure. When issues squid -k reconfigure Does squid looses the in memory cache? I have a 10 Gybtes RAM cache, and I would hate to loose it. Thanks in advance. Sebastian. I use incron from Lukas Aiken, http://inotify.aiken.cz with the file /etc/incron.d/squid with the contents /etc/resolv.conf IN_MODIFY squid -k reconfigure
[squid-users] Running squid out of the router/gateway
Hello * I work at a small ISP. We give non routeable IPs 172.16/12 IPs to most of our customers, and some of them buys publics IPs from us. We have a squid box in the public segment of our network Until now we were NATing at mikrotiks outgoing tcp/80 connections to the squid public ip ( 200.45.94.2 ). This worked quite good, but lately we have an issue with forwarding loops such as: at cache.log 2011/11/20 15:15:09| WARNING: Forwarding loop detected for: POST /versioncheck.asp HTTP/1.1 Content-Type: application/x-www-form-urlencoded Pragma: no-cache Content-Length: 75 Via: 1.0 powerweb.iaconecta.com (squid/3.1.12) X-Forwarded-For: 200.45.94.7 Host: 200.45.94.2:31280 Cache-Control: max-age=259200 Connection: keep-alive And at access.log 1324811063.537 4 200.45.94.2 TCP_MISS/400 69381 POST http://200.45.94.2:31280/versioncheck.asp - DIRECT/200.45.94.2 text/html 1324811063.538 6 200.45.94.2 TCP_MISS/400 69467 POST http://200.45.94.2:31280/versioncheck.asp - DIRECT/200.45.94.2 text/html [] Reading at squid site, looks like NATting outgoing connections to a squid running on an other box is not a good idea. Questions: What is the suggested way to implement this scenario? How can I get rid of the loop? THanks in advance.
