AAron, 

     Correct, and thanks for the advise.  I originally
used precompiled databases, however, it became too
difficult for my staff to administer.  The webmin
squidguard module makes it rather difficult to add or
remove entries from it if it is pre-compiled.  Instead
of dealing with un*x training, I opted to move back to
the simple text files.  The delay actually isn't that
bad it's about 60 seconds of spike, but the internet
access is not critical to our network operations so it
is tolerable.  We are not an ISP, luckily.  

Thanks again anyways, and I'll keep it in mind if the
delay becomes a problem.  
                        
                           Ryan Kather

--- Aaron Seelye <[EMAIL PROTECTED]> wrote:
> You'll find this time drops to next to nothing if
> you precompile the
> databases.  The reason that it takes so long is that
> for every squidguard
> process you generate, it in turn has to compile the
> database in memory,
> which means that if it takes X minutes to compile
> your databases using the
> -C switch, and you have Y child processes, it'll
> take X * Y minutes to begin
> transfering traffic through the proxy.  That sounds
> like a bit too much time
> to be sitting around waiting, especially if you have
> users waiting on you
> (or even worse, calling you).
> 
> Aaron
> 
> > -----Original Message-----
> > From: Ryan Kather [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, March 21, 2002 11:26 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: SquidGuard + Blacklist PORN
> Domains/Urls = Big 
> > usage of CPU
> > :(
> > 
> > 
> > Hello Christophe, 
> > 
> >      I do notice a similar problem only when the
> > squidguard processes are initializing while squid
> is
> > starting.  Squid queues web requests and waits for
> the
> > squidguard processes to settle before passing each
> > request to it.  If you have a large cache and a
> large
> > number of clients it can take quite awhile.  After
> it
> > catches up with it's requests however mine settles
> > right down.  We have about 250 connections
> accessing
> > per minute and it is run on a Pentium 200 Pro with
> 256
> > Mg of Ram.  I use 6 squidguard processes.  I block
> the
> > same rules 24/7 though so you might want to check
> > without time restrictions.  
> > 
> >                        Ryan Kather
> > 
> > p.s. Hope I was some help.
> > 
> > 
> > --- Christophe RIPPERt <[EMAIL PROTECTED]> wrote:
> > > Hi,
> > > 
> > > I have a little problem with SquidGuard (last
> > > version) and the
> > > Blacklists . I 've seen that if i put in
> > > squidGuard.conf :
> > > 
> > > dest bl_porn {
> > >   domainlist blacklist/porn/domains
> > >   urllist blacklist/porn/urls
> > >   log bl_porn.log
> > > }
> > > 
> > > acl {
> > >   privileged {
> > >           pass all
> > >   }
> > > 
> > >   default within tempslibre {
> > >           #pass all #not active now 
> > >           #} else {
> > >           pass !bl_warez !bl_violence !bl_porn !bl_proxy
> > > #the others
> > > Blacklists                redirect
> > > http://www.serveur.ici/error.html
> > >   }
> > > }
> > > 
> > > => i launch squid + squidGuard :
> > > service squid start (with a script in
> > > /etc/rc.d/init.d) :
> > > 
> > > => I take a look to the process cause my server
> lags
> > > so lot 
> > > ps aux
> > > USER       PID    %CPU  %MEM              
> > > proxy      10510  23.3  0.7   (squidGuard) 
> > > proxy      10511  23.3  0.7   (squidGuard) 
> > > proxy      10512  23.2  0.7   (squidGuard) 
> > > proxy        10513  23.2  0.7   (squidGuard) 
> > > 
> > > and after if i want to stop squid :
> > > service squid stop (or killall squid)
> > > squid stop but not squidGuard !
> > > 
> > > I've seen inside the domains and urls of PORN
> > > blacklist files... they
> > > are really big...
> > > 
> > > Can you tell me if for you it's the same problem
> : a
> > > big lag for your
> > > server if you active theses Blacklists ? (Ps : i
> > > have a Celeron 433 with
> > > 256 Mo Ram) 
> > > 
> > > Thank you for your help and for all supports you
> > > give to SquidGuard
> > > users.
> > > 
> > > christophe RIPPERT.
> > > 
> > > 
> > 
> > 
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! Movies - coverage of the 74th Academy
> Awards�
> > http://movies.yahoo.com/
> > 


__________________________________________________
Do You Yahoo!?
Yahoo! Movies - coverage of the 74th Academy Awards�
http://movies.yahoo.com/

Reply via email to