Re: [squid-users] squid in load balanced wccpv2 configuration

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 07:03:59 -0700 (PDT), Jiffy wrote: > --- On Sun, 5/9/10, Amos Jeffries wrote: > >> From: Amos Jeffries >> Subject: Re: [squid-users] squid in load balanced wccpv2 configuration >> To: squid-users@squid-cache.org >> Date: Sunday, May 9, 2010, 6:55 AM >> Jiffy wrote:

Re: [squid-users] squid non-accel default website

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 23:02:08 +0200, Nils Hügelmann wrote: > Hi Henrik, > > thanks for the answer, a fallback feature for direct requests would be > great :-) > > regards > nils > > Am 12.05.2010 22:38, schrieb Henrik Nordström: >> tis 2010-05-11 klockan 17:04 +0200 skrev Nils Hügelmann: >> >>

Re: [squid-users] cache-control headers

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 08:45:27 -0700 (PDT), Jonathan Lunn wrote: > Hello squid-users, > > > I'm successfully using Squid (3.0.STABLE25) with ESI enabled but, I can't > seem to cache anything that has a cache-control: max-age less than 60 > seconds. At present I'm having to set cache-control: max-a

Re: [squid-users] kernel support 2.6.33 for tproxy

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 21:50:55 +0200, Henrik Nordström wrote: > ons 2010-05-12 klockan 19:44 +0530 skrev senthilkumaar2021: > >> Did any one tried the tproxy with latest kernel > > I have not tried 2.6.33 or running in bridge mode. > > but seems to work fine in routing mode in 2.6.32.11 (Fedora 1

Re: [squid-users] ACL in SQUID

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 02:53:02 -0700 (PDT), squidACL wrote: > Hi > > I have squid and squidGuard installed and working very well , but now I > need > to creat groups ( I use the Active Directory user) > > you know how can I create the ACL groups ? > > Many Thanks http://wiki.squid-cache.org/Feat

Re: [squid-users] sslbump and cache_peer

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 22:17:43 +0200, Henrik Nordström wrote: > ons 2010-05-12 klockan 12:32 +0200 skrev Benjamin Fleckenstein: > >> As soon as I activate sslbump, my proxy sends out the requests to the >> parent proxy in the form: >> >> GET https://www.destination.com > > Indeed. Internal wrappi

Re: [squid-users] Report of visited sites? (No filterin g, just reporting)

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 11:24:34 +0200, lieven wrote: > did you try sarg? It checks the squid logs and creates overviews of the > visited sites per ip. > > Marcello Romani wrote: >> Charles Bray ha scritto: >>> Hello, >>> >>> I am sure this must be a common question... please excuse. >>> >>> Does th

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Nyamul Hassan
Every iteration of stable release has some fixes for known problems, and might also inadvertently introduce a new problem, which has to be fixed after a bug report is done. That is why it is suggested to use the latest version, so that the developers can work on the latest code.  As you can unders

Re: [squid-users] Modifying MAX_URL

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 16:51:15 -0400, S H wrote: > I'm looking at using Squid 3.1.3 as a reverse proxy on FreeBSD 8 x64, > but I need to allow URLs up to 16kb. Aside from upping MAX_URL to > 16384 in defines.h, are there any other settings I need to modify? Any > metrics to watch to ensure I'm not c

Re: [squid-users] squid non-accel default website

2010-05-12 Thread Nils Hügelmann
Hi Henrik, thanks for the answer, a fallback feature for direct requests would be great :-) regards nils Am 12.05.2010 22:38, schrieb Henrik Nordström: > tis 2010-05-11 klockan 17:04 +0200 skrev Nils Hügelmann: > > >> At the current state, it shows an "invalid URL" ... "while trying to >> ret

[squid-users] Modifying MAX_URL

2010-05-12 Thread S H
I'm looking at using Squid 3.1.3 as a reverse proxy on FreeBSD 8 x64, but I need to allow URLs up to 16kb. Aside from upping MAX_URL to 16384 in defines.h, are there any other settings I need to modify? Any metrics to watch to ensure I'm not causing issues on my server? -SH

Re: [squid-users] squid 64bit compile

2010-05-12 Thread Henrik Nordström
> On Tue, May 11, 2010 at 1:35 PM, senthilkumaar2021 > wrote: > > part of kernal panic message:this message was obtained in kernal 2.6.28.5 > > > > ] bnx2_poll_work+0xea0/0xfb9 [bnx2] > > [] enqueue_task+0x50/0x5b > > [] getnstimeofday+0x53/0xb2 > > [] bnx2_poll+0xd1/0x1ae [bnx2] > > [] net_rx_ac

Re: [squid-users] squid non-accel default website

2010-05-12 Thread Henrik Nordström
tis 2010-05-11 klockan 17:04 +0200 skrev Nils Hügelmann: > At the current state, it shows an "invalid URL" ... "while trying to > retrieve the URL: /" error on direct access, which prevents using url > rewriters(and deny_info too?!) so how to do this?... You can't. The reason is because Squid re

Re: [squid-users] ident authentication and follow_x_forwarded_for

2010-05-12 Thread Henrik Nordström
tis 2010-05-11 klockan 16:35 -0500 skrev Ben Miller: > Client --> Proxy:8080 (Dansguardian) --> 127.0.0.1:3128 (Squid running > on Proxy) --> Edge firewall You can't do ident lookups in a proxy chain. This have to be done by the first proxy in the chain. This because to perform the ident lookup t

Re: [squid-users] Squid stops due to signal 6

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 12:32 +0530 skrev Sagar: > May 06 09:37:29 (squid server hostname) (squid): ipcache_init: DNS > name lookup tests failed. > For some reason your host lost it's DNS name servers. Regards Henrik

Re: [squid-users] a keepalive problem about NTLM authentication pass through

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 18:54 +0900 skrev Mikio Kishi: > > http.c:HttpStateData::sendRequest() > > > > 1998 /* > > 1999 * Is keep-alive okay for all request methods? > > 2000 */ > > 2001 if (orig_request->flags.must_keepalive) > > 2002 flags.keepalive = 1; > >

Re: [squid-users] sslbump and cache_peer

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 12:32 +0200 skrev Benjamin Fleckenstein: > As soon as I activate sslbump, my proxy sends out the requests to the parent > proxy in the form: > > GET https://www.destination.com Indeed. Internal wrapping of the request into an CONNECT + SSL wrapper has not yet been impleme

Re: [squid-users] user authentication using multiple LDAP servers.

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 16:18 +0530 skrev Sagar: > Is squid able to authenticate users from 2 different LDAP servers for > company A & Company B. (ldap.companyA.com, ldap.companyB.com) Yes, with a little simple glue. This is best done if you can identify which company the user belongs to based on

Re: [squid-users] RE: Anacron log entries

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 14:40 +0200 skrev Simon Brereton: > /etc/cron.daily/logrotate: > 2010/05/05 07:35:20.152| aclParseUserList: parsing user list > 2010/05/05 07:35:20.152| aclParseUserList: parsing user list Looks like debug output. What is your debug_options directive set to? Regards Henrik

Re: [squid-users] how .htaccess gets cached and works with Last-Modified

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 15:48 +0300 skrev Reverse Squid: > Hello List, > > We have an .htaccess in a certain directory in our origin server which > redirects requests upon USER-AGENT. > How does Squid treat that .htaccess? Depends on what the HTTP response looks like. > If it were to cache it, as

Re: [squid-users] cache-control headers

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 08:45 -0700 skrev Jonathan Lunn: > I'm successfully using Squid (3.0.STABLE25) with ESI enabled but, I can't > seem to cache anything that has a cache-control: max-age less than 60 > seconds. At present I'm having to set cache-control: max-age header at 61 > seconds in or

Re: [squid-users] squid 3.1 strange upload behavior

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 17:20 +0200 skrev Daemen, Martin: > after upgrading squid from 2.7 to 3.1 there is an strange upload behavior. > Right now, the progress bar during the upload seem to show the upload in > realtime. So if we upload 15MB through our proxy to an webserver at the > internet,

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Emmanuel Lesouef
Le Wed, 12 May 2010 08:38:31 -0800, James Zuelow a écrit : > Backports has 2.7STABLE7 which is newer than the Lenny version, if > not quite up to date. 2.7STABLE9 has been in Squeeze for a couple of > weeks (since April 28) so might be in the backports pipe now. > > That might be a simpler upgr

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 17:20 +0200 skrev Emmanuel Lesouef: > Le Wed, 12 May 2010 23:10:00 +0800, > Jeff Pang a écrit : > > > > > How about upgrading squid to the latest version (2.7 or 3.1)? > > > > Ouch... This is Debian Stable. And the server is part of a critical > cluster... > > To summar

RE: [squid-users] Increasing File Descriptors - Fixed!!

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 10:17 -0400 skrev Bradley, Stephen W. Mr.: > I went ahead and updated /etc/sysctl.conf to allow for 1024-64000 ports open > for connections. > > That should help; I just wish I could test it before August. :-( Reminds me that we should implement some smart address

Re: [squid-users] kernel support 2.6.33 for tproxy

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 19:44 +0530 skrev senthilkumaar2021: > Did any one tried the tproxy with latest kernel I have not tried 2.6.33 or running in bridge mode. but seems to work fine in routing mode in 2.6.32.11 (Fedora 12). Regards Henrik

RE: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread James Zuelow
> -Original Message- > From: Emmanuel Lesouef [mailto:e.leso...@crbn.fr] > Sent: Wednesday, 12 May, 2010 07:20 > To: squid-users@squid-cache.org > Subject: Re: [squid-users] File with zero size when using squid proxy > > Le Wed, 12 May 2010 23:10:00 +0800, > Jeff Pang a écrit : > > >

[squid-users] cache-control headers

2010-05-12 Thread Jonathan Lunn
Hello squid-users, I'm successfully using Squid (3.0.STABLE25) with ESI enabled but, I can't seem to cache anything that has a cache-control: max-age less than 60 seconds. At present I'm having to set cache-control: max-age header at 61 seconds in order to cache. e.g; Am I missing somethi

Re: [squid-users] user authentication using multiple LDAP servers.

2010-05-12 Thread Diego Woitasen
2010/5/12 Sagar > > Hi All, > > We are two sister concern companies using one single infrastructure. > > We have 1 LDAP server (ldap.company.com) which is used for > authentication on squid proxy server. > > However we have 2 different user groups already in place for the two > companies. > > Goi

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Emmanuel Lesouef
Le Wed, 12 May 2010 23:10:00 +0800, Jeff Pang a écrit : > > How about upgrading squid to the latest version (2.7 or 3.1)? > Ouch... This is Debian Stable. And the server is part of a critical cluster... To summarize, it is not possible to upgrade to v3.1... -- Emmanuel Lesouef

[squid-users] squid 3.1 strange upload behavior

2010-05-12 Thread Daemen, Martin
Hello, after upgrading squid from 2.7 to 3.1 there is an strange upload behavior. Right now, the progress bar during the upload seem to show the upload in realtime. So if we upload 15MB through our proxy to an webserver at the internet, we using an 2M/bit SDSL line, the bar grows as far as th

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Jeff Pang
2010/5/12 Emmanuel Lesouef : > Le Wed, 12 May 2010 22:52:02 +0800, > Jeff Pang a écrit : > >> 2010/5/12 Emmanuel Lesouef : >> > Hello, >> > >> > I'm facing a strange issue with our Squid proxy. >> > >> > The situation is that one of our users reports us that when he tries >> > to get a small file

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Emmanuel Lesouef
Le Wed, 12 May 2010 22:52:02 +0800, Jeff Pang a écrit : > 2010/5/12 Emmanuel Lesouef : > > Hello, > > > > I'm facing a strange issue with our Squid proxy. > > > > The situation is that one of our users reports us that when he tries > > to get a small file (under 2kb it seems), his browser leave h

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Jeff Pang
2010/5/12 Emmanuel Lesouef : > Hello, > > I'm facing a strange issue with our Squid proxy. > > The situation is that one of our users reports us that when he tries > to get a small file (under 2kb it seems), his browser leave him with a > zero size text file. > It sounds squid has cached that file

[squid-users] File with zero size when using squid proxy

2010-05-12 Thread Emmanuel Lesouef
Hello, I'm facing a strange issue with our Squid proxy. The situation is that one of our users reports us that when he tries to get a small file (under 2kb it seems), his browser leave him with a zero size text file. If we test with a direct access to the internet, the file is well sized (453 by

RE: [squid-users] Increasing File Descriptors - Fixed!!

2010-05-12 Thread Bradley, Stephen W. Mr.
I went ahead and updated /etc/sysctl.conf to allow for 1024-64000 ports open for connections. That should help; I just wish I could test it before August. :-( steve -Original Message- From: Jose Ildefonso Camargo Tolosa [mailto:ildefonso.cama...@gmail.com] Sent: Monday, May 10

[squid-users] kernel support 2.6.3 for tproxy

2010-05-12 Thread senthilkumaar2021
Hi. I am using squid 2.7stable 6 as tproxy in bridge mode with the help of tpxoxy 4 patch It was working fine with kernel 2.6.30 and i upgraded kernel to 2.6.33 I found that ebtables and iptables not redirecting request to the squid I have compiled kernel with tproxy support Did any one tri

Re: [squid-users] squid in load balanced wccpv2 configuration

2010-05-12 Thread Jiffy 1111
--- On Sun, 5/9/10, Amos Jeffries wrote: > From: Amos Jeffries > Subject: Re: [squid-users] squid in load balanced wccpv2 configuration > To: squid-users@squid-cache.org > Date: Sunday, May 9, 2010, 6:55 AM > Jiffy wrote: > > Hi, all, > > > > In a nutshell, I am trying to install squid a

[squid-users] how .htaccess gets cached and works with Last-Modified

2010-05-12 Thread Reverse Squid
Hello List, We have an .htaccess in a certain directory in our origin server which redirects requests upon USER-AGENT. How does Squid treat that .htaccess? If it were to cache it, as it itself does not change, all requests will follow the first USER-AGENT, ie, if I come with Firefox 2.0 I get redi

[squid-users] RE: Anacron log entries

2010-05-12 Thread Simon Brereton
No suggestions? Google seems to suggest I'm almost unique.. http://markmail.org/message/lbins37z2p4jgnux#query:ACL%3A%3APrototype%3A%3A~Prototype%3A%20TODO%3A%20unregister%20me+page:1+mid:yd466psa5migptrk+state:results These lines definitely relate to squid (which has nothing in the logs about i

RE: [squid-users] Increasing File Descriptors - Fixed!!

2010-05-12 Thread Bradley, Stephen W. Mr.
I may try that, thanks steve -Original Message- From: Jose Ildefonso Camargo Tolosa [mailto:ildefonso.cama...@gmail.com] Sent: Monday, May 10, 2010 5:39 PM To: Bradley, Stephen W. Mr. Cc: mnhas...@usa.net; Squid Users Subject: Re: [squid-users] Increasing File Descriptors - Fixed!! Hi!

[squid-users] user authentication using multiple LDAP servers.

2010-05-12 Thread Sagar
Hi All, We are two sister concern companies using one single infrastructure. We have 1 LDAP server (ldap.company.com) which is used for authentication on squid proxy server. However we have 2 different user groups already in place for the two companies. Going ahead we want to split the LDAP ser

[squid-users] sslbump and cache_peer

2010-05-12 Thread Benjamin Fleckenstein
Hi, I'm trying to setup sslbump in combination with a parent proxy. Here a short drawing: Client my proxy (with sslbump) parent proxy internet Unfortunately the parent proxy isn't able to handle the requests from my proxy and returns a "bad request" error message. As soon a

[squid-users] a keepalive problem about NTLM authentication pass through

2010-05-12 Thread Mikio Kishi
Hi, There may be a situation which we can't pass through HTTP with NTLM authentication bacause of lack of keepalive. cache_peer XXX.XXX.XXX.XXX parent 8080 0 no-query connection-auth=on always_direct allow all In above case, squid does not output "Proxy-Connection: keep-alive" to cache peer ho

[squid-users] ACL in SQUID

2010-05-12 Thread squidACL
Hi I have squid and squidGuard installed and working very well , but now I need to creat groups ( I use the Active Directory user) you know how can I create the ACL groups ? Many Thanks -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/ACL-in-SQUID-tp2195830

Re: [squid-users] Squid stops due to signal 6

2010-05-12 Thread Jakob Curdes
Sagar schrieb: Dear All, I have enough space in /usr/local/squid/var/logs . access.log, store.log & cache.log are well under 0.5 G Even then i've got this message when the SQUID stopped abruptly .

Re: [squid-users] Report of visited sites? (No filtering, just reporting)

2010-05-12 Thread lieven
did you try sarg? It checks the squid logs and creates overviews of the visited sites per ip. Marcello Romani wrote: Charles Bray ha scritto: Hello, I am sure this must be a common question... please excuse. Does there exist a tool or example configuration that will enable me to log, and di

Re: [squid-users] Re: Re: squid_kerb_auth received type 1 NTLM token

2010-05-12 Thread lieven
Dear Markus, You have to be recommended for your patience!! Turns out that my keytab file was wrong all along due to a stupid mistake from my side. (as to be expected :-/) I did have the principal for the realm but not for the proxy server itself. Thus the HTTP-keytab was recreated with the msk

[squid-users] Squid stops due to signal 6

2010-05-12 Thread Sagar
Dear All, I have enough space in /usr/local/squid/var/logs . access.log, store.log & cache.log are well under 0.5 G Even then i've got this message when the SQUID stopped abruptly . =