[squid-users] The requested URL could not be retrieved TCP_MISS/502

2010-03-23 Thread Umesh Bodalina
Hi Squid I'm getting the following error when I try to access the following site through Squid: 1269337729.147 61931 146.141.77.4 TCP_MISS/502 1411 GET http://www.bitlifesciences.com/wcvi2010 - DIRECT/121.199.32.113 text/html Using: Squid Cache: Version 2.7.STABLE7 configure options:

Re: [squid-users] The requested URL could not be retrieved TCP_MISS/502

2010-03-23 Thread Ralf Hildebrandt
* Umesh Bodalina u.bodal...@gmail.com: Hi Squid I'm getting the following error when I try to access the following site through Squid: Works for me with: Squid 2.7.STABLE8-1 from Debian Squid Cache: Version 2.7.STABLE8 configure options: '--prefix=/usr' '--exec_prefix=/usr'

[squid-users] squid 3.0.19 + transparent + sslbump

2010-03-23 Thread Stefan Reible
Hi, I want to use https with the viralator (http ist working). I'm prerouting Port 80 to Port 3128 for http. Is there an option like https_port in my version? Now I want to set following option in squid.conf: http_port 3128 sslBump cert=/etc/squid/ssl_cert/proxy.testdomain.deCert.pem

AW: [squid-users] The requested URL could not be retrieved TCP_MISS/502

2010-03-23 Thread Zeller, Jan
hmm seems not to work properly : behind proxy : $ httping -g http://www.bitlifesciences.com/wcvi2010 -c 3 mysquidproxy:80 PING www.bitlifesciences.com:80 (http://www.bitlifesciences.com/wcvi2010): timeout connecting to host timeout connecting to host timeout connecting to host ---

[squid-users] Squid Kerb Auth Issue

2010-03-23 Thread Nick Cairncross
Hi, I'm concerned by a problem with my HTTP.keytab 'expiring'. My test base have reported a problem to me that they are prompted repeatedly for an unsatisfiable username and password. When I checked cache.log I noticed that there was a KVNO mismatch being reported. I regenerated my keytab and

Re: [squid-users] reverse proxy question

2010-03-23 Thread Jeff Peng
On Tue, Mar 23, 2010 at 3:33 AM, Al - Image Hosting Services az...@zickswebventures.com wrote: Hi, I have a reverse proxy setup. It has worked well except now the apache server is getting overloaded. I would like to change my load balancing so that I send all the dynamic content to one server

[squid-users] Heath Check HTTP Request to Squid

2010-03-23 Thread Baird, Josh
I need to configure a pair of load balancers in front of Squid to send periodic health HTTP requests to my Squid servers to make sure they are up and functioning properly. How should I structure this HTTP request? A GET / results in an invalid-request. What type of request can I use that will

Re: [squid-users] reverse proxy question

2010-03-23 Thread Rick Chisholm
Jeff Peng wrote: Also, could someone recommend a light weight server for static content? Apache is good enough IMO. a stripped down Apache would server static content just fine, but a couple other options would be Lighttpd and Nginx. -- Rick Chisholm System Administrator

RE: [squid-users] Heath Check HTTP Request to Squid

2010-03-23 Thread Baird, Josh
What I have done is configured the load balancers to do a GET on a bogus URL: GET http://health.check/please/ignore Then, to ignore these requests to prevent log spam: acl healthcheck dstdomain health.check log_access deny healthcheck Thanks, Josh -Original Message- From: Baird,

Re: [squid-users] FileDescriptor Issues

2010-03-23 Thread a...@gmail
Hi All I have recompiled squid with 6400 FDS I tried with 65535 and I got a warning that 65535 is not a multiple of 64 and it may cause some problems on some systems. so I changed it to 6400 I completed the installation started Squid now it's showing 6400 although the system is set to 65535 I

Re: [squid-users] clients -- SSL SQUID -- NON SSL webserver

2010-03-23 Thread Guido Marino Lorenzutti
Amos Jeffries squ...@treenet.co.nz escribió: Luis Daniel Lucio Quiroz wrote: Le Lundi 22 Mars 2010 21:47:05, Guido Marino Lorenzutti a écrit : Hi people: Im trying to give my clients access to my non ssl webservers thru my reverse proxies adding ssl support on them. Like the subject tries to

Re: [squid-users] FileDescriptor Issues

2010-03-23 Thread a...@gmail
Hi, Which OS are you using? my start up script is located here /usr/local/squid/sbin/squid The packaged one I had before, the startup script was located in /etc/init.d/squid3 But not the compiled version Thank you Regards Adam - Original Message - From: Bradley, Stephen W. Mr.

RE: [squid-users] Disable user accounts

2010-03-23 Thread David Parks
I created my own authentication module, and tried setting nonce_max_duration to 1 minutes (I also tried 1 minute, and 2 minutes to make sure there wasn't something funky with the word minutes). My authentication module logs every time it is called. But when I sit there and hit refresh on the

Re: [squid-users] squid 3.0.19 + transparent + sslbump

2010-03-23 Thread Amos Jeffries
Stefan Reible wrote: Hi, I want to use https with the viralator (http ist working). I'm prerouting Port 80 to Port 3128 for http. Is there an option like https_port in my version? Now I want to set following option in squid.conf: http_port 3128 sslBump

[squid-users] Peering squid multiple instances.

2010-03-23 Thread GIGO .
I have successfully setup running of multiple instances of squid for the sake of surviving a Cache directory failure. However I still have few confusions regarding peering multiple instances of squid. Please guide me in this respect. In my setup i percept that my second instance is doing

Re: [squid-users] Peering squid multiple instances.

2010-03-23 Thread Amos Jeffries
GIGO . wrote: I have successfully setup running of multiple instances of squid for the sake of surviving a Cache directory failure. However I still have few confusions regarding peering multiple instances of squid. Please guide me in this respect. In my setup i percept that my second

Re: [squid-users] TPROXY and DansGuardian

2010-03-23 Thread Amos Jeffries
Jason Healy wrote: We've used a few different Squid setups over the years, from a vanilla setup to a transparent interception proxy, to a fully transparent tproxy. We're now using DansGuardian to keep tabs on our users (we don't block; we just monitor). This is good, but unfortunately it

Re: [squid-users] Sending on Group names after Kerb LDAP look-up

2010-03-23 Thread Amos Jeffries
Nick Cairncross wrote: Hi All, Things seem to be going well with my Squid project so far; a combined Mac/Windows AD environment using Kerberos authentication with fall back of NTLM. I (hopefully) seem to be getting the hang of it! I've been trying out the Kerberos LDAP look up tool and have a