Re: [squid-users] URL Filtering for Squid

2008-11-10 Thread Marcus Kool
I am the author of ufdbGuard which is based on squidGuard. ufdbGuard is free and can be used with both free and commercial databases. -Marcus a bv wrote: Hi, What is /are the popular /commanly used open source (and maybe also the other free ones) URL/content filtering solution/software. And

RE: [squid-users] URL Filtering for Squid

2008-11-10 Thread Alex Huxham
Yet another yes from me, used within our school, and works perfectly for 900+ students and 200+ staff. Easy to configure, documented well and there are plenty of resources on a google search to get you going perfectly. Alex -Original Message- From: Marcus Kool [mailto:[EMAIL PROTECTED]

[squid-users] how to configure wccp load balancing with squid.

2008-11-10 Thread Gregory Machin
Hi I'm looking for a howto or some docs to show how to do load balancing . I have a single cisco router and would like to have two or more squid caches. in a load balanced configuration .. Any suggestions ? Thanks

[squid-users] Re: Partition suggestions for Squid using a 500Gb drive?

2008-11-10 Thread Ed Flecko
Thanks Chuck. Unfortunately, this little 1U server does not have room for more than 1 hard drive. :-( Do you have any specific config options in mind about how to best use the memory? Thank You, Ed On Sun, Nov 9, 2008 at 6:12 PM, Chuck Kollars [EMAIL PROTECTED] wrote: ... It's my

RE: [squid-users] URL Filtering for Squid

2008-11-10 Thread Thomas Raef
ufdbGuard is the best. You can get it from www.urlfilterdb.com I like it because it's fast, updated frequently, easy to use and customize. And the guy running it is extremely helpful. No I am not related. I've used others in the past and when I finally upon this one, I felt such a relief. The

Re: [squid-users] Unable to forward this request at this time.

2008-11-10 Thread Amos Jeffries
Henrik Nordstrom wrote: From the error it sounds like it has declared the peer down. But why? I'm thinking forwarding loops. On mån, 2008-11-10 at 11:35 +0700, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: here is my squid .conf === http_port 2210 transparent icp_port 3130 snmp_port 3401

Re: [squid-users] how to configure wccp load balancing with squid.

2008-11-10 Thread Egi Konomi
Hello Gregory, While setting up a squid+wccp solution i found this information really helpful: http://www.reub.net/node/3 Best Regards! Egi Gregory Machin wrote: Hi I'm looking for a howto or some docs to show how to do load balancing . I have a single cisco router and would like to have

Re: [squid-users] squid and loadbalancing option

2008-11-10 Thread Amos Jeffries
Martin Mulder wrote: Hi, I have (maybee a stupid) question. I have an apache server as reverse proxy, squid as caching server and Zope/Plone as backend servers. Senario: 1) Apache gets a request for my.domain.com 2) Apache does a ProxyPass to my balancer 3) I have 2 sticky vhosts in apache

RE: [squid-users] URL Filtering for Squid

2008-11-10 Thread Alex Huxham
Ubuntu - apt-get install ufdbGuard worked here, may have to locate the correct repository for it though. Not sure on any other formats Alex -Original Message- From: a bv [mailto:[EMAIL PROTECTED] Sent: 10 November 2008 14:27 To: Alex Huxham Subject: Re: [squid-users] URL Filtering for

Re: [squid-users] Unable to forward this request at this time.

2008-11-10 Thread Henrik Nordstrom
On tis, 2008-11-11 at 03:14 +1300, Amos Jeffries wrote: Henrik Nordstrom wrote: From the error it sounds like it has declared the peer down. But why? I'm thinking forwarding loops. Forwarding loops is logged very aggressively in cache.log as such, and don't result in an error to the user.

[squid-users] squid and loadbalancing option

2008-11-10 Thread Martin Mulder
Hi, I have (maybee a stupid) question. I have an apache server as reverse proxy, squid as caching server and Zope/Plone as backend servers. Senario: 1) Apache gets a request for my.domain.com 2) Apache does a ProxyPass to my balancer 3) I have 2 sticky vhosts in apache which are the balancer

Re: [squid-users] Squid memory usage

2008-11-10 Thread nitesh naik
Henrik, I read FAQ and implemented almost most of the suggestion to reduce memory usage. I am not much concern about memory usage as there plenty of available memory but the issue is CPU usage goes high up to 100% and slows down squid response once squid grows beyond allocated cache_mem size .

Re: [squid-users] Unable to forward this request at this time.

2008-11-10 Thread Henrik Nordstrom
From the error it sounds like it has declared the peer down. On mån, 2008-11-10 at 11:35 +0700, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: here is my squid .conf === http_port 2210 transparent icp_port 3130 snmp_port 3401 cache_mgr admin emulate_httpd_log off cache_replacement_policy heap

[squid-users] URL Filtering for Squid

2008-11-10 Thread Alex Huxham
-Original Message- From: Alex Huxham Sent: 10 November 2008 09:52 To: 'a bv' Subject: RE: [squid-users] URL Filtering for Squid Yes and no, there are free ones, however http://urlblacklist.com allows you a FREE copy, only ONCE though, your first download of the blacklist is free, its

[squid-users] URL Filtering for Squid

2008-11-10 Thread a bv
Hi, What is /are the popular /commanly used open source (and maybe also the other free ones) URL/content filtering solution/software. And who are maintaining url databases? Regards

Re: [squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection refused

2008-11-10 Thread Kinkie
On Mon, Nov 10, 2008 at 11:11 AM, zhang yikai [EMAIL PROTECTED] wrote: hi all, I installed squid and it work properly, then I run dansguardian, connect to squid port 3128 ok, but when I using dansguardian port 8080 as a proxy, I got the error message (111) Connection refused, I don't

[squid-users] squid 3.1 is stable enough for production / testing?

2008-11-10 Thread John Mok
Hi, I would like to setup squid proxy server for NTLM proxying (i.e. connection pinning) + ICAP (clamav). I hope someone could advise if there is any catch I need to pay attention with. Thanks a lot. John Mok

[squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection refused

2008-11-10 Thread zhang yikai
hi all, I installed squid and it work properly, then I run dansguardian, connect to squid port 3128 ok, but when I using dansguardian port 8080 as a proxy, I got the error message (111) Connection refused, I don't know what is the problem? thank you.

Re: [squid-users] No password to internal addresses

2008-11-10 Thread Henrik Nordstrom
On mån, 2008-11-10 at 09:50 +0100, yagh mur wrote: http_access allow to_mynetwork users1 http_access allow password users1 http_access allow mynetwork http_access deny all I think the above should be http_access allow mynetwork to_mynetwork http_access allow mynetwork users1 http_access

[squid-users] No password to internal addresses

2008-11-10 Thread yagh mur
Hi all, I've to configure Squid2 in order to ask for a password if a user go to an external address and no password have to be asked if the destination address is internal I've this rules: acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl

Re: [squid-users] squid 3.1 is stable enough for production / testing?

2008-11-10 Thread Henrik Nordstrom
3.1 is certainly ready for testing. That's why we started making beta releases (3.1.0.X). Please give it a try and report back your findings. I don't think this is a setup that is commonly tested so it's very good if you can test this now while the release is actively being tested. Regards

Re: [squid-users] About squid ICAP implementation

2008-11-10 Thread Henrik Nordstrom
On sön, 2008-11-09 at 16:11 +0900, Mikio Kishi wrote: Hi, would you tell me the ICAP implementation on squid. - Question.1 If there is no icap_access setting, The default icap access control is allow or deny ? It looks allow... Should be deny.. icap_access selects which icap class to

Re: [squid-users] squid 3.1 is stable enough for production / testing?

2008-11-10 Thread Amos Jeffries
3.1 is certainly ready for testing. That's why we started making beta releases (3.1.0.X). Please give it a try and report back your findings. I don't think this is a setup that is commonly tested so it's very good if you can test this now while the release is actively being tested. Regards

[squid-users] parseHTTPRequest problem with SQUID3

2008-11-10 Thread Gregori Parker
I've just rolled back a failed Squid migration from 2.6 to 3.0, and I'm looking for reasons why it failed. I have been successfully using the latest Squid 2.6 to http-accel a pool of backend web servers, with a load-balancer in front to direct traffic. The load-balancer hits the squid server

Re: [squid-users] Unable to forward this request at this time.

2008-11-10 Thread ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
all : it's works now but from Internal from External ( internet ) it's look like Domain without any space hosting i remove : http_port 80 accel defaultsite=monitor.gpi-g.com cache_peer 202.169.51.118 parent 80 0 no-query originserver name=myAccel acl our_sites dstdomain monitor.gpi-g.com

Re: [squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection refused

2008-11-10 Thread zhang yikai
thanks for your help, I run wget [EMAIL PROTECTED] logs]# wget www.google.com --09:19:40-- http://www.google.com/ = `index.html' Connecting to 10.0.2.110:9090... connected. Proxy request sent, awaiting response... 403 Forbidden 09:19:41 ERROR 403: Forbidden. this is the info from

RE: [squid-users] parseHTTPRequest problem with SQUID3

2008-11-10 Thread Gregori Parker
Thanks for your response That message means there was no HTTP/1.0 tag on the request line. Squid begins assuming HTTP/0.9 traffic. Squid 2.6 handled these fine, and my configuration hasnt changed, so was there something introduced in Squid3 that demands a hostname? no. Something has to

RE: [squid-users] parseHTTPRequest problem with SQUID3

2008-11-10 Thread Amos Jeffries
Thanks for your response That message means there was no HTTP/1.0 tag on the request line. Squid begins assuming HTTP/0.9 traffic. Squid 2.6 handled these fine, and my configuration hasnt changed, so was there something introduced in Squid3 that demands a hostname? no. Something has

Re: [squid-users] Unable to forward this request at this time.

2008-11-10 Thread Amos Jeffries
all : it's works now but from Internal from External ( internet ) it's look like Domain without any space hosting i remove : http_port 80 accel defaultsite=monitor.gpi-g.com cache_peer 202.169.51.118 parent 80 0 no-query originserver name=myAccel acl our_sites dstdomain monitor.gpi-g.com

Re: [squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection refused

2008-11-10 Thread Amos Jeffries
thanks for your help, I run wget [EMAIL PROTECTED] logs]# wget www.google.com --09:19:40-- http://www.google.com/ = `index.html' Connecting to 10.0.2.110:9090... connected. Proxy request sent, awaiting response... 403 Forbidden 09:19:41 ERROR 403: Forbidden. this is the info

Re: [squid-users] Unable to forward this request at this time.

2008-11-10 Thread ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
On Tue, Nov 11, 2008 at 9:31 AM, Amos Jeffries [EMAIL PROTECTED] wrote: Ahh okay. cache_peer 202.169.51.118 should be the web server IP as seen from Squid (internal IP if squid is internal, external IP if squid is external, localhost maybe if squid is on same machine). Amos so i should to

Re: [squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection refused

2008-11-10 Thread zhang yikai
- Original Message - From: Amos Jeffries [EMAIL PROTECTED] To: zhang yikai [EMAIL PROTECTED] Cc: Kinkie [EMAIL PROTECTED]; squid-users@squid-cache.org Sent: Tuesday, November 11, 2008 10:38 AM Subject: Re: [squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection

Re: [squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection refused

2008-11-10 Thread zhang yikai
Now I found when run squid and dansguardian in different machine it will be ok, but can't work in one, what is the problem? Thanks for your help - Original Message - From: Kinkie [EMAIL PROTECTED] To: zhang yikai [EMAIL PROTECTED] Cc: squid-users@squid-cache.org Sent: Monday,

[squid-users] How to interrupt ongoing transfer

2008-11-10 Thread kaustav_deybiswas
Hi, I am a squid newbie. I am trying to set up daily download quotas for NCSA authorized users. I have a daemon running which checks the log files, and whnever the download limit is reached (for a particular user), it blocks that user in the config and reconfigures squid (squid -k reconfigure)

RE: [squid-users] parseHTTPRequest problem with SQUID3

2008-11-10 Thread Henrik Nordstrom
On tis, 2008-11-11 at 15:24 +1300, Amos Jeffries wrote: Not fully 1.1, but from (0.9 + 1.0) to fully 1.0 + partial 1.1. Which is weird because 2.6 went almost fully 1.0 as well quite a while back. From this discussion it seems Squid-3 no longer accepts the obsolete HTTP/0.9 style requests.

Re: [squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection refused

2008-11-10 Thread Henrik Nordstrom
On tis, 2008-11-11 at 11:36 +0800, zhang yikai wrote: - DIRECT/10.0.2.110 text/html 1226418445.662137 127.0.0.1 TCP_MISS/503 1883 GET http://www.google.com/ - DIRECT/10.0.2.110 text/html Why does your Squid server resolve www.google.com to 10.0.2.110? Regards Henrik signature.asc

Re: [squid-users] Run squid2.5.6 and dansguardian got error message: (111) Connection refused

2008-11-10 Thread zhang yikai
10.0.2.110 is the machine run squid and dansguardian, thank you for your reply. - Original Message - From: Henrik Nordstrom [EMAIL PROTECTED] To: zhang yikai [EMAIL PROTECTED] Cc: Amos Jeffries [EMAIL PROTECTED]; Kinkie [EMAIL PROTECTED]; squid-users@squid-cache.org Sent: Tuesday,