> I have an issue where a certain app is talking on a
> port that appaprently doesn't like squid (State of
> Illinois app... so I won't say anything more about the
> app ;-)
>
>...
You probably mean, going-direct-from-the-browser.
This can´t be solved at the squid level, because once
a reques
I have an issue where a certain app is talking on a
port that appaprently doesn't like squid (State of
Illinois app... so I won't say anything more about the
app ;-)
I have the following in my squid.conf.. but it doesn't
seem to work. I have another one just like it.. and
it works fine??
Here is
On Fri, 13 Jan 2006, Dustin wrote:
acl de_urls dstdomain .fedex.com .ups.com
acl de_InetAllow external win_domain_group Web_access_dataentry
Members of "Full_InetAllow" have full internet access, and it is
working. Members of "de_InetAllow" do not have access to anything,
not even to the sit
> Any other http_access lines denying access BEFORE these ones?
>
Nope, no denies before. Here's the config again:
acl localnet proxy_auth REQUIRED
acl de_urls dstdomain .fedex.com .ups.com
acl de_InetAllow external win_domain_group Web_access_dataentry
http_access allow de_InetAllow de_urls
acl
On Fri, 13 Jan 2006, H wrote:
shm and msg sizes needs to be well within the requirements for diskd
spelled out in the FAQ.
nothing new but this thread is about the problem stated in the subject
Right.. the answer is almost..
The correct answer is to look into the q1/q2 parameers of your dis
On Fri, 13 Jan 2006, Dustin wrote:
The above rules only gives access, it does not restrict access. Only deny
lines restricts access..
But what I'm saying is, with the configuration above, de_InetAllow
cannot go anywhere (has no access). The group "Full_InetAllow" can
though. There's somethin
On Fri, 13 Jan 2006, Meyerovich Aleksandr EB_NY wrote:
Are there any debugging switches for squid_ldap_auth to get something
more descriptive than ERR?
-d gives you some details. But there isn't much it can give. Most
operations is of "works/fails" nature mainly depending on getting the
conf
> And does this affect anything,
- Squid will kind of do a check on the store dir. Purge duplicate objects
e.d. ,and other maintenance stuff which would not be needed if the SQUID Cache
was shutdown properly
> and how can I shutdown squid normaly?
>
% squid -k shutdown
Check furthe
On Fri, 13 Jan 2006, Gregori Parker wrote:
Thanks for the answers...I forgot to mention that this deployment of
squid will be used to accelerate back-end servers and geographically
extend our CDN. I was planning to use RAID5, am I hearing this is okay
for non-proxy implementations?
Yes.
Rega
On Fri, 13 Jan 2006, Richard Mittendorfer wrote:
Jepp, they are TCP_HIT.
What type of cache_dir are you using?
Squid version?
How much other traffic at the same time to this Squid?
Why I ask is because diskd is known to be somewhat slow on large cache
hits in certain situations UNLESS ther
On Fri, 13 Jan 2006, Meyerovich Aleksandr EB_NY wrote:
Anybody could help with squid_ldap_auth usage examples?
There is several in the man page.
Say, I'd like to athenticate users belogning to the group Internet in
DC=domain, DC=com, OU=Users (Microsoft AD)
Then you probably should combine
On Fri, 13 Jan 2006, Mark Foster wrote:
Just wanted to report back that we solved our
digest-auth-through-http-accelerator problem. The culprit was a mismatch
of the URI referenced in the Authorization: header. Everything starting
at the third slash in the URL must match up between proxy and bac
On Fri, 13 Jan 2006, H wrote:
configure:7448: gcc -o conftest -g -O2 -Wall -D_REENTRANT -g conftest.c
-lpthread -lm 1>&5
configure:7479: checking for aio_read in -lrt
configure:7498: gcc -o conftest -g -O2 -Wall -D_REENTRANT -g conftest.c -lrt
-lpthread -lm
1>&5
/usr/bin/ld: cannot find -lrt
> While squid starting it says " Rebuilding storage in
> /usr/local/squid/var/cache "
>
It means that the previous instance of SQUID, ended abnormally.
It´s the same as an OS crash that due to the event stream
doesn´t mark a file system as being unmounted
cleanly.
M.
Just wanted to report back that we solved our
digest-auth-through-http-accelerator problem. The culprit was a mismatch
of the URI referenced in the Authorization: header. Everything starting
at the third slash in the URL must match up between proxy and backend.
Thanks to ethereal and especially He
While squid starting it says " Rebuilding storage in
/usr/local/squid/var/cache "
What does this mean?
On Friday 13 January 2006 09:46, Henrik Nordstrom wrote:
> On Thu, 12 Jan 2006, H wrote:
> > anyway I think that aufs-pthread-aio in squid is confusing when talking
> > freeBSD and not so very well documented
>
> aufs does not use aio. It's only the coss driver which uses aio.
>
good, as I said th
On Friday 13 January 2006 09:48, Henrik Nordstrom wrote:
> On Thu, 12 Jan 2006, H wrote:
> > still some guess because only a day running this but it seems to be some
> > kind of SHM or MSGMNB problem where squid gets confused instead of
> > accusing busy msgqueue or out of shm like in squid-manager
> >> acl localnet proxy_auth REQUIRED
> >> acl de_urls dstdomain .fedex.com .ups.com
> >> acl de_InetAllow external win_domain_group Web_access_dataentry
> >> http_access allow de_InetAllow de_urls
> >> acl Full_InetAllow external win_domain_group Web_access_full
> >> http_access allow Full_InetAll
Hi Guys,
Are there any debugging switches for squid_ldap_auth to get something
more descriptive than ERR?
Facts:
- I can reach the MSAD LDAP server by short name as well as FQDN
- squid_ldap_auth compiled with no problems:
ldd squid_ldap_auth
libldap.so.2 => /usr/lib/libldap.so.2 (0x400
Hi,
I have just placed at Sourceforge new subversion - 0.41 - of Squeezer -
multi-dimensional Squid's performace analysis script. The change is now
only the view of report - it's now more readable and (I hope) more
understandable.
The script is available from here:
http://sourceforge.net/p
Thanks for the answers...I forgot to mention that this deployment of
squid will be used to accelerate back-end servers and geographically
extend our CDN. I was planning to use RAID5, am I hearing this is okay
for non-proxy implementations?
-Original Message-
From: Gregori Parker
Sent:
Mr. H, thanks for your help.
After re-compile squid without these options, everything is working fine.
Regards
Edinilson
-
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br
- Original Message -
Fr
> No, I still get the delay (that was Test #3 in my original message).
>
Checkout, using squid in your standard mode what the site return headers
are with :
http://web-sniffer.net/
M.
Also sprach Jason Healy <[EMAIL PROTECTED]> (Fri, 13 Jan 2006
08:57:39 -0500 (EST)):
> At 1137150799s since epoch (01/13/06 00:13:19 -0500 UTC), Richard
> Mittendorfer wrote:
> > Also sprach Jason Healy <[EMAIL PROTECTED]> (Thu, 12 Jan 2006
> > 22:37:58 -0500 (EST)):
> > > What are you using for yo
--- Henrik Nordstrom <[EMAIL PROTECTED]> wrote:
> You could in theory also do the authentication in
> http_reply_access,
> dropping the already received reply if
> authentication is required. Should
> give less overhead than the above external acl
> approach..
>
> But http_reply_access is not
I meant SQUID_LDAP_GROUP and not AUTH.
Thank you.
-Original Message-
From: Meyerovich Aleksandr EB_NY
Sent: Friday, January 13, 2006 9:19 AM
To: squid-users@squid-cache.org
Subject: SQUID_LDAP_AUTH
Hi All,
Anybody could help with squid_ldap_auth usage examples?
Say, I'd like to athe
Hi All,
Anybody could help with squid_ldap_auth usage examples?
Say, I'd like to athenticate users belogning to the group Internet in
DC=domain, DC=com, OU=Users (Microsoft AD)
Thanks a lot!
Alex
-
The information
On Fri, 13 Jan 2006, Adolfo Mussi wrote:
I want to make squid ask for authentication only for
certain content-type of the http response. For all
other content-type I don't want the browser to raise
authentication popup window.
authentication has to take place before the request is forwarded, a
At 1137150799s since epoch (01/13/06 00:13:19 -0500 UTC), Richard Mittendorfer
wrote:
> Also sprach Jason Healy <[EMAIL PROTECTED]> (Thu, 12 Jan 2006
> 22:37:58 -0500 (EST)):
> > What are you using for your speed tests? I'm using wget, so I know
> > there's no browser cache issue.
>
> Originally
Can be anything from your provider up to your hardware.Have you checked
all that?What happnes when you go to the internet minus squid?please
comeback if all fails.
We are always here
Ronny
***
PGP Fingerprint: 6695 794A B84E D922 8
I want to make squid ask for authentication only for
certain content-type of the http response. For all
other content-type I don't want the browser to raise
authentication popup window.
The solution I've in mind is to make an external acl
helper that retrieves only the http header of the url
and s
At 1137154743s since epoch (01/13/06 01:19:03 -0500 UTC), Mark Elsen wrote:
> Does it work , when the user , uses SQUID directly, through proxy
> settings in the browser ?
No, I still get the delay (that was Test #3 in my original message).
Jason
--
Jason Healy
http://www.logn.net/
On Thu, 12 Jan 2006, Christopher Fink wrote:
Hi,
I'm trying to build an expressionlist in order to block proxy servers by
keywords like proxy and anonymous.
However, it's not working.
Here's what I have (I'm not entirely positive with what to enter)
(^|[-\?+=/_])(proxy|anonymous)([-\?+=/_
On Thu, 12 Jan 2006, Gendel, David wrote:
What authentication schemes are available to use for web applications
running on the IIS?
- Basic
Yes.
- Forms Based
Yes.
- Digest
Yes, but needs to be enabled both in IIS and the ADS domain/account
policy if you want integration with the dom
On Fri, 13 Jan 2006, Fes wrote:
Hi2All!
I have some trouble with DNS-resolving in squid-2.5.STABLE11-3.FC3
With some sites theres no any problems.
But when I try to load
www.someserver.com/some_dir/somescript.php(*.cgi,*.pl, etc...)
theres an error "Unable to determine IP address from host nam
On Thu, 12 Jan 2006, Dustin wrote:
Yes, that is what I'd like to accomplish, limit the sites which this
group 'de_InetAllow' can access.
Then you need to make sure you do not allow them (de_InetAllow) access
anywhere else..
acl localnet proxy_auth REQUIRED
acl de_urls dstdomain .fedex.com
On Thu, 12 Jan 2006, H wrote:
still some guess because only a day running this but it seems to be some kind
of SHM or MSGMNB problem where squid gets confused instead of accusing busy
msgqueue or out of shm like in squid-manager busy or failed queues
when I reduce SHMMAX I can accelerate the ap
On Thu, 12 Jan 2006, H wrote:
anyway I think that aufs-pthread-aio in squid is confusing when talking
freeBSD and not so very well documented
aufs does not use aio. It's only the coss driver which uses aio.
BTW I believe pthreads are not so good on FreeBSD at all and work different as
on Lin
On Thu, 12 Jan 2006, Carlson, Justin wrote:
I am Justin Carlson working in a division of Amazon.com that routes
contacts to the different divisions, we have had two or so network
engineers look at the problem and they have not been able to figure out
the issue. I would like to post/request in
On Thu, 12 Jan 2006, Gregori Parker wrote:
I have read that RAID is a bad idea for squid caches
For Internet proxies yes, as they rotate their cache content quite
frequently, causing a lot of small writes which most RAID setups isn't
very happy about.
For accelerators where the content is
* On 13/01/06 15:09 +0530, Remy Almeida wrote:
> Hi All
>Slow to access internet how to troubleshoot
>result of top command
>
> PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
> 4646 squid16 0 23260 22M 2316S 4.0
> 1.1 7:07 0
Hi2All!
I have some trouble with DNS-resolving in squid-2.5.STABLE11-3.FC3
With some sites theres no any problems.
But when I try to load
www.someserver.com/some_dir/somescript.php(*.cgi,*.pl, etc...)
theres an error "Unable to determine IP address from host name for
..." appears.
BUT, when I try t
* On 13/01/06 15:00 +0530, Remy Almeida wrote:
> Hi All
>Few days back i had the problem of DNS which arised due to the upgrade
> from 2.5STABLE3-6 to 2.5STABLE12. so i uninstall and reinstall the default
> one that is 2.5STABLE3-6 my problem was solved.
> next day i downloaded squid-2.5.ST
Hi All
Slow to access internet how to troubleshoot
result of top command
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
4646 squid16 0 23260 22M 2316S 4.0
1.1 7:07 0squid
Thanks & Regards,
Remy Almeida
NIO System Admin
P
Hi All
Few days back i had the problem of DNS which arised due to the upgrade
from 2.5STABLE3-6 to 2.5STABLE12. so i uninstall and reinstall the default
one that is 2.5STABLE3-6 my problem was solved.
next day i downloaded squid-2.5.STABLE3-6.3E.src.rpm and applied
follow_xff-2.5.patch and
46 matches
Mail list logo
