RE: [squid-users] Squid stops ...MSNT auth

2003-06-12 Thread David Gameau
> From: E.Subrahmanya Srinivas [mailto:[EMAIL PROTECTED]
>
> Jun 13 12:00:17 trishul msnt_auth[21340]: ProcessLine: 'server' missing
domain parameter.
>
> Whereas my msntauth.conf has the following entries :
> server   krishnawipsys
>
As the error message indicates, you need to specify 2 domain controllers, and
their associated domain in the config file.

eg. server PDC BDC DOMAIN

David.
__

David Gameau
ISTS - Unix Team
University of South Australia

email:  [EMAIL PROTECTED]
phone:  +61 8 302 3533
fax:+61 8 302 5800

Disclaimer: "His brain sometimes stops working." - Chiyo, Azumanga Daioh


[squid-users] Squid stops ...MSNT auth

2003-06-12 Thread E.Subrahmanya Srinivas

Hi  
  Request someone to help me...
  
  I am getting the following error while setting up MSNT authentication
when running Squid :

Jun 13 12:00:17 trishul msnt_auth[21340]: ProcessLine: 'server' missing
domain parameter.
Jun 13 12:00:17 trishul msnt_auth[21340]: OpenConfigFile: No servers set
in /usr/local/squid/etc/msntauth.conf. At least one is needed.

Whereas my msntauth.conf has the following entries :

server   krishnawipsys
denyusers /usr/local/squid/etc/denyusers
allowusers /usr/local/squid/etc/allowusers



Thanks in Advance
Srinivas



























**Disclaimer

Information contained in this E-MAIL being proprietary to Wipro Limited is 
'privileged' and 'confidential' and intended for use only by the individual
 or entity to which it is addressed. You are notified that any use, copying 
or dissemination of the information contained in the E-MAIL in any manner 
whatsoever is strictly prohibited.

***


[squid-users] FW: HTTPS reverse proxying

2003-06-12 Thread Saxelin, Tommi
> Hi,
> 
> Can this be configured to work?:
> 
> client browser -[https]-> Squid proxy -[https]-> web
> server
> 
> I know it works with http between Squid and the server, but can https be
> used there, as well? In other words, can Squid act as a ssl client?
> 
> Thanks!
> 
> -tommi saxelin-
> 


This message contains information that may be privileged or confidential and is the 
property of the Cap Gemini Ernst & Young Group. It is intended only for the person to 
whom it is addressed. If you are not the intended recipient, you are not authorized to 
read, print, retain, copy, disseminate, distribute, or use this message or any part 
thereof. If you receive this message in error, please notify the sender immediately 
and delete all copies of this message.



[squid-users] Re: Squid stops when log fills up (was: Nessus vulnerability scancrashes squid)

2003-06-12 Thread Bernhard Erdmann
 The problem was the 2G filesize limit.  The cache.log was filling up and
causing Squid to stop responding or even die entirely.  The logrotate
Hi,

the problem is: Squid stops working when it can't write logs. This has 
bitten me too. Maximum filesize reached or filesystem full is just the 
same for Squid.

Regards
Bernie


Re: [squid-users] how can I tell squid not to muck with X-Forwarded_For header.

2003-06-12 Thread Henrik Nordstrom
On Friday 13 June 2003 01.07, Jigar Rasalawala wrote:
> Hi, guys
>
> I am running Squid-2.5.STABLE2 on RedHat 7.3 OS. I found
>
>
> 1. If I add "anonymize_header deny X-Forwarded-For" in squid.conf,
> squid removes this header from outgoing request. 2. If I do not add
> "anonymize_header deny X-Forwarded-For, squid adds IP address of
> the squid server. 3. If I add "forwarded_for off", squid adds
> 'X-Forwarded-For: unknown".
>
> How Can I tell squid, do not muck with "X-Forwarded-For" header ?

You can't without modifying the code.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]


[squid-users] how can I tell squid not to muck with X-Forwarded_For header.

2003-06-12 Thread Jigar Rasalawala
Hi, guys

I am running Squid-2.5.STABLE2 on RedHat 7.3 OS. I found 


1. If I add "anonymize_header deny X-Forwarded-For" in squid.conf, squid removes this 
header from outgoing request.
2. If I do not add "anonymize_header deny X-Forwarded-For, squid adds IP address of 
the squid server.
3. If I add "forwarded_for off", squid adds 'X-Forwarded-For: unknown".

How Can I tell squid, do not muck with "X-Forwarded-For" header ? 

Client is pointing to proxy server and squid is configured as upstream proxy cache to 
proxy server. So when I see outgoing
request from squid, I see "X-Forward-For: , 
".

I want to send only  not proxy address. 


I hope understood my Q. How can tell squid not to muck with "X-Forwarded-For" header. ?


Any help or suggestion are appriciated.

Thanks
Jigar



Re: [squid-users] Not cache same URL.

2003-06-12 Thread Henrik Nordstrom
On Thursday 12 June 2003 21.45, Ampugnani, Fernando wrote:

>>> acl nocache url_regex ^http://www.mcdonalds.com.ar
>>> no_cache deny nocache
>
> 1055446561.167194 207.169.88.182 TCP_MISS/200 38291 GET
> http://www.mcdonalds.com.ar/ - DIRECT/200.61.51.196 text/html
> 1055446562.966  5 207.169.88.182 TCP_IMS_HIT/304 210 GET
> http://www.mcdonalds.com.ar/i/m1a.gif - NONE/- image/gif
>
> This is the output I get, but I know I should be seeing TCP_MISS
> isn't it.?

You should get TCP_MISS if you use a supported version of Squid (i.e. 
Squid-2.5).. which Squid version are you using? 

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]


Re: [squid-users] Performance with DeLL/XEON

2003-06-12 Thread macaco
Hello Henrik...

First of all thank you very much for beeing so helpful and giving me so 
much information. I waited a week to test the new configuration using 
some information you and the community gave me.
I disabled the HyperThreading feature of my XEON 1.6 and recompiled my 
kernel without SMP. I did recompile my squid too. 

Now I'm getting 90 req/s before my CPU is 100% filled. I lowed my 
mem_cache to 32MB too.

The box is not running any other services, just squid, it has 32  child 
processes and I'm still using aufs.

As you said in your other email, I judged it was stable, in fact it is, 
it's not halting anymore and I'm not getting these 'queue congestion' 
messages (thanks to your help), but my CPU is always 90%-100% when I get 
close to 100 req/s and 1500+ file descriptors. By your experience, is this 
normal?

Please, if you prefer to point me some readings, ressources that talk 
about these issues, I'll thank you very much.

Sorry again for my poor English, friend.



I'm using this processor + 1GB of RAM to

On Sun, 8 Jun 2003, Henrik Nordstrom wrote:

> On Sat, 7 Jun 2003 [EMAIL PROTECTED] wrote:
> 
> > The hardware we use exclusively for proxy-cache is:
> > DeLL Power Edge 1400 XEON 1.6 (Hyper Threading, so the kernel is compiled 
> > SMP)
> 
> Squid generally have little or no use of SMP..
> 
> > Seagate 10K rpm . 30 GB with reiserfs (notail and noatime) for the cache
> > 1 GB . RAM
> 
> Squid really puts a high load on the drives seek times, and you want more 
> than one drive for a good Squid performance.
> 
> > I compiled SQUID-2.5-STABLE3 using:
> > ./configure --enable-linux-netfilter --disable-ident-lookups 
> > --enable-removal-policies=heap,lru --enable-delay-pools 
> > --enable-cache-digests --enable-pool --enable-truncate 
> 
> What is --enable-pool?
> 
> > --enable-stacktraces
> 
> does not hurt.
> 
> > --enable-xmalloc-statistics
> 
> this should not be used in production.
> 
> > --enable-underscores 
> > -with-pthreads --enable-storeio=aufs --enable-async-io=128 
> 
> 128 threads is a definite overkill and will make your Squid fall over when 
> there is too much I/O pending due to the lack of seek kapacity in your 
> harddrive..
> 
> > --enable-kill-parent-hack --enable-time-hack 
> 
> Are you absolutely sure you want these?? I would not...
> 
> > --enable-default-err-language=Portuguese --with-aufs-threads=10
> 
> Hmm.. You specify the number of threads twice.. how many do you actually 
> want?
> 
> > cache_access_log /var/squid/logs/access.log
> > cache_log none
> 
> You want cache.log. Disabling this is just silly unless you are 
> configuring a Squid with no disks at all..
> 
> > cache_dir aufs /squid/cache1 1 25 256
> > cache_dir aufs /squid/cache2 1 25 256
> > cache_dir aufs /squid/cache3 1 25 256
> 
> I assume these are jsut partitions on the same drive. For Squid you should 
> use one partition per drive, and more than one drive.
> 
> > buffered_logs on
> 
> does not make a noticeable difference.
> 
> Regards
> Henrik
> 
> 



Re: [squid-users] Not cache same URL.

2003-06-12 Thread Henrik Nordstrom
On Thursday 12 June 2003 19.23, Ampugnani, Fernando wrote:

>   Anybody knows how I can tell squid that no cache same url. For
> example www.macdonalds.com.ar , but I put this rules and don´t
> work. acl nocache url_regex ^http://www.mcdonalds.com.ar
> no_cache deny nocache

Should work, except that url_regex is not a very good acl type to use, 
and the pattern you have given is not a regex pattern (but still 
works acceptable for your use).

What do you get in access.log?

Try this instead

acl nocache_sites dstdomain .mcdolands.com.ar
no_cache deny nocache_sites

Regards
Henrik


-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]


Re: [squid-users] ACL List help.

2003-06-12 Thread Henrik Nordstrom
On Thursday 12 June 2003 18.28, Coreix Systems - UNIX Developers 
wrote:
> Hi everyone,
>
> I have a client that need's (wants) to deny all of their staff
> client machines access to the internet except some specific sites
> required to do their work, but on the other hand allow the
> managements clients machines access to the entire internet.
>
> How do i achieve this?

1. allow the management machines access

2. allow the staff machines access to allowed sites

3. deny all else

in this order in squid.conf.

> i want to have the acl's in the /etc/ dir as i don't want their
> sysadmin to edit the squid.conf file.

Then place them there, or where you want to have them.

If you want this path to be compiled into the Squid binary then edit 
src/Makefile to provide the proper DEFAULT_CONFIG_FILE path (can also 
be given as argument to make when you build Squid).

Regards
Henrik


-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]


[squid-users] Re: Réf. : Re: [squid-users] Proxy Chaining

2003-06-12 Thread Henrik Nordstrom
On Thursday 12 June 2003 15.15, Matthieu BOUCHINET wrote:

> The Windows 2000 server is a Citrix MetaFrame XP.This machine
> deliver various applications.
>
> My users try to access to this server with PDA and Orange Portal
> Access which use a Squid Proxy.
> Orange has decided to use this type of process :
>   PDA->Mobile->Orange Proxy->Proxy on site->Server MetaFrame on
> site I don't want to use this proxy. In this case, my MetaFrame
> server must understand the Orange's Squid proxy requests. Is it
> possible ?

I am not aware of Citrix sessions being proxyable by HTTP proxies... 
but maybe they have added CONNECT support in the client allowing the 
client to abuse HTTP proxies.. This is not what HTTP proxies are 
intended to be used for, but some find it a good idea for some 
reason..

Is there any valid reason to Orange not supporting NAT or direct 
access for non-HTTP protocols such as Citrix or other application 
protocols? Or is the problem in how Internet clients should be able 
to reach your Citrix server inside the proxy? If the latter then it 
should be possible to solve this by providing a public NAT address or 
port forwarder the Citrix clients can connect to from the Internet

Note: The HTTP proxy should be used for downloading the access 
applet/setup if you are using the web version, but then the client 
should talk directly to the Citrix server.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]


Re: [squid-users] Nessus vulnerability scan crashes squid

2003-06-12 Thread Greg Redder

 Apparently nobody else has ever seen this problems, so I'll answer it
myself :-)

 The problem was the 2G filesize limit.  The cache.log was filling up and
causing Squid to stop responding or even die entirely.  The logrotate
command was used to fix the problem.  The only reason nessus triggered the
problem was that it sends out large number of http requests that are
susbsequently cached by Squid leading to the log file filling up even
faster!

--Greg Redder
  Network Analyst
  Colorado State University


 On Mon, 9 Jun 2003, Greg Redder
wrote:

> Date: Mon, 9 Jun 2003 11:26:28 -0600 (MDT)
> From: Greg Redder <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: [squid-users] Nessus vulnerability scan crashes squid
> 
> 
> I'm running Squid 2.5 Stable1 on Redhat Linux 9.0, kernel 2.4.20-18.
> 
> Our cache is running fine until we use a vulnerability scanner (Nessus).
> Nessus has many vulnerability scans, but one set of the scans check for
> httpd vulnerabilities.  When we start the scan of another network, the
> router (via WCCP) intercepts the http requests and forwards them to the
> squid box.  Eventually (somewhere between 1 minute and 30 minutes), the
> squid box stops forwarding back out requests and the clients don't get
> their web requests fulfilled and then the screaming starts ;-)
> 
> A couple of notes:
> 
> o We are not scanning the squid box directly.  We are scanning machines
>   elsewhere on the network and the http requests (that are part of
>   some of the vulnerability scans) get redirected to the web cache.
> 
> o Thinking that the squid box would lock up because of something in
>   the scans themselves, we scanned the squid box directly and it
>   kept humming along just fine.
> 
> o We use WCCP version 1 off a Cisco 6500 running 12.1.13.  We do not
>   configure the clients to use a proxy.  
> 
> o It all works fine until the scans start and it seems to ride them
>   out for a little while.  We can easily (unfortunately) recreate
>   the problem.
> 
> o The box is not overwhelmed - the nessus scanner only sends out an
>   http request as part of its scan every second or so.  
> 
> o No errors are reported in the squid logs that I can find that
>   would indicate a problem.
> 
> o WCCP continues to work because the router thinks it has a good cache
>   engine and sends it request, but the squid box just "eats" them.
> 
> o We have temporarily solved this by putting an access list on the router
>   telling the router not to redirect http packets from the nessus 
>   machines to the squid cache.  However, this is not a feasible long
>   term solution as others on our campus of 25,000 may do a nessus scan
>   from somewhere and then our cache engine will die.
> 
> Has anyone else witnessed this problem?   I have searched the archives for
> related issues and found none :-(
> 
> Thank you
> --Greg Redder
>   Network Analyst
>   Colorado State University
> 
> ===
> Greg Redder Academic Computing & Networking Services 
> Colorado State University, ACNS Phone:(970)491-7222  FAX:  (970)491-1958
> 601 S. Howes, Room 625  E-mail: [EMAIL PROTECTED]  
> Fort Collins, CO 80523   PGP Fprint:299F83B58A72BE7428E064E801749C69FFA537C6
> ===
> 
> 
> 
> 

===
Greg Redder Academic Computing & Networking Services 
Colorado State University, ACNS Phone:(970)491-7222  FAX:  (970)491-1958
601 S. Howes, Room 625  E-mail: [EMAIL PROTECTED]  
Fort Collins, CO 80523   PGP Fprint:299F83B58A72BE7428E064E801749C69FFA537C6
===




[squid-users] Not cache same URL.

2003-06-12 Thread Ampugnani, Fernando
Hi all,
Anybody knows how I can tell squid that no cache same url. For
example www.macdonalds.com.ar , but I put this rules and don´t work.
acl nocache url_regex ^http://www.mcdonalds.com.ar
no_cache deny nocache

Thanks in advance.

Fernando Ampugnani




[squid-users] ACL List help.

2003-06-12 Thread Coreix Systems - UNIX Developers

Hi everyone,

I have a client that need's (wants) to deny all of their staff client machines
access to the internet except some specific sites required to do their work, but
on the other hand allow the managements clients machines access to the entire
internet.

How do i achieve this?

i want to have the acl's in the /etc/ dir as i don't want their sysadmin to edit
the squid.conf file.

so basically i want "squid-management.acl"
192.168.1.45/255.255.255.0
192.168.1.50/255.255.255.0
etc, etc
# all management PC - IP_ADDRESSES ALLOWED 
INTERNET ACCESS

then:

"squid-staff.acl"
192.168.1.100/255.255.255.0
192.168.1.101/255.255.255.0
192.168.1.102/255.255.255.0
192.168.1.103/255.255.255.0
192.168.1.104/255.255.255.0
# All Staff IP_ADDRESSES.

and finally:

"squid-staff-urls.acl"
work-site1.com
work-site2.com
work-site3.com
# All sites Address's in the [squid-staff.acl] 
are allowed to access
# everything else is denied

Regards,

Craig.


I have tried a few thing, but had no success, can someone add some advise.
Thanks in advance








[squid-users] WCCPv2 hash allotment

2003-06-12 Thread Mark . H . Price

Hi group.  I have recently setup 2 squid proxies with WCCPv2.  I used the
patches
from http://squid.visolve.com/developments/wccpv2.htm with squid 2.5 stable3
and
Linux 2.4.20.  My 2 squid caches successfully talk to my Cisco 2600 router.

A "show ip wccp web-cache view" shows both cache engines listed as visible.
The
"show ip wccp web-cache detail" lists both caches as usable, but only one
cache has
100% of the hash allotment.  The other cache has 0% of the hash allotment.
All http
requests from behind the router are sent to the cache with 100% of the hash
allotment.

I would like for the two caches to be able to share the load they receive
which I presume
would be done by each of them having 50% of the hash allotment.  Does anyone
know
how the hash allotment works?

I have tried searching on google and Cisco's website but haven't found any
real info
about how the hash allotment is supposed to work.

Has anyone else used more than one squid cache with a router in a WCCP
configuration?

thanks for any help or advice.

Mark


Re: [squid-users] Re: Disk space over limit

2003-06-12 Thread Henrik Nordstrom
tor 2003-06-12 klockan 10.55 skrev IKEDA Shigeru:
> -JhAzEr- <[EMAIL PROTECTED]> writes:
> 
> | 2003/06/12 15:36:37| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
> | 2003/06/12 15:36:48| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
> | 2003/06/12 15:36:59| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
> | 2003/06/12 15:37:10| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
> | 
> | what does this mean? i thought it automatically flushes old cache to make room 
> | for the new ones.
> I get same messages almost every time I stop & start squid.
> I'm using squid-2.5.STABLE3 on OpenBSD-3.2/i386.  I got same warning 
> with STABLE2 as well.

This may be seen if swap.state has been corrupted. Such corruption can
occur on unexpected system shutdowns (power failure, kernel panic etc).

Try the following:

1. Shut down squid.

2. Remove the swap.state files from your cache directories.

3. Start Squid again. It will slowly rebuild swap.state from the cache
files.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

Please consult the Squid FAQ and other available documentation before
asking Squid questions, and use the squid-users mailing-list when no
answer can be found. Private support questions is only answered
for a fee or as part of a commercial Squid support contract.

If you need commercial Squid support or cost effective Squid and
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]



Re: [squid-users] Disk space over limit

2003-06-12 Thread Dieter Bloms
Hi,

On Thu, Jun 12, -JhAzEr- wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> 2003/06/12 15:36:37| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
> 2003/06/12 15:36:48| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
> 2003/06/12 15:36:59| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
> 2003/06/12 15:37:10| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
> 
> what does this mean? i thought it automatically flushes old cache to make room 
> for the new ones.

I had the same problems with the diskd. After a switch to ufs (without
diskd) the cache flushes the old cache data and the messages were gone.


-- 
Gruß

  Dieter

--
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
From field.


pgp0.pgp
Description: PGP signature


Re: [squid-users] External ACL with Ident

2003-06-12 Thread Henrik Nordstrom
On Thursday 12 June 2003 07.44, [EMAIL PROTECTED] wrote:

> external_acl_type ausaid %IDENT /usr/local/squid/bin/ident_acis
> acl all src 0.0.0.0/0.0.0.0
> ident_lookup_access allow all
> acl all ident REQUIRED
> acl ident_auth external ausaid REQUIRED
> acl ldap_auth proxy_auth REQUIRED
> http_access allow ident_auth
> http_access allow ldap_auth
> http_access deny all
>
> First of all, in this configuration squid does not seem to wait for
> the ident reply and I am getting the username/password box. If I
> ignore it and keep hitting refresh, eventually it gets a response
> and caches the info (allowing me to the internet from then on).

Please register a bug for the external_acl not waiting for ident 
issue.

Note: You are trying to redefine the "all" acl above.. only the first 
definition will be used by Squid (see "squid -k parse"). the "all" 
acl should be defined like your first definition.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]


Re: [squid-users] 2 different Proxy Authentication

2003-06-12 Thread Henrik Nordstrom
On Thursday 12 June 2003 05.12, Wildy Candra wrote:

> So the squid server is act as client to Microsoft Proxy
> Server 2.0, but it also serve as proxy server for the rest
> 10 client that has no access  on Microsoft Proxy Server
> 2.0
>
> Is the scenario possible to implement? What configuration
> should I change in the Squid.conf?

Yes.

You need to enable support for Basic HTTP authenitcation (plain text) 
in the MS Proxy, then use the login= cache_peer option to specify the 
dummy user to Squid.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]


Re: [squid-users] Problem restarting all redirectors

2003-06-12 Thread Henrik Nordstrom
On Thursday 12 June 2003 02.30, Lightfoot.Michael wrote:
> I am sometimes getting the following in cache.log when either a log
> rotation or a reconfigure takes place.  It is a symptom of not all
> my redirectors  (Ad Zapper) being restarted:
>
> 2003/06/12 09:30:14| ipcCreate: fork: (12) Not enough space
> 2003/06/12 09:30:14| WARNING: Cannot run
> '/usr/local/squid/sbin/squid_redirect' process.

See the Squid FAQ and squid.conf... (sleep_after_fork).

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]


Re: [squid-users] Disk space over limit

2003-06-12 Thread -JhAzEr-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thursday 12 June 2003 15:51, Lightfoot.Michael wrote:
> > 2003/06/12 15:36:37| WARNING: Disk space over limit: -7816424
> > KB > 2048000 KB
> > 2003/06/12 15:36:48| WARNING: Disk space over limit: -7816424
> > KB > 2048000 KB
> > 2003/06/12 15:36:59| WARNING: Disk space over limit: -7816424
> > KB > 2048000 KB
> > 2003/06/12 15:37:10| WARNING: Disk space over limit: -7816424
> > KB > 2048000 KB
> >
> > what does this mean? i thought it automatically flushes old
> > cache to make room
> > for the new ones.
>
> It normally means that there was more data in the cache directory than
> the cache_dir tag specified.  In your case the negative number may
> indicate a problem with 2GB limits on filesystems.
>
> So why don't you post your cache_dir tag(s) from your squid.conf.  You
> should also see if you have specified soemthing large than 2GB on a
> filesystem that can't exceed 2GB.

here is my cache_dir tag:

cache_dir aufs /var/proxy 2000 16 256

running 'df -h' shows me that i still have 8GB of available disk space on my 
/var partition. and i'm using reiserfs on it. anything i can do to fix it? 
thanx for your time.

- -- 
- -JhAzEr-

 "I use slackware at home with X and WindowMaker to play music (xmms), watch 
vcd's (xine), learn typing (tuxtype), play shooting (oilwar) on a 545MB 
Hardisk..."
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+6DaphHbHnwBB+SkRAsOyAJ9QFbTsZA9cbbT7reBh/NU1gTVpXACfetux
pElWmYfD9KGGTAG52rWU4Ts=
=Ds8p
-END PGP SIGNATURE-



RE: [squid-users] Disk space over limit

2003-06-12 Thread Lightfoot.Michael
> 
> 2003/06/12 15:36:37| WARNING: Disk space over limit: -7816424 
> KB > 2048000 KB
> 2003/06/12 15:36:48| WARNING: Disk space over limit: -7816424 
> KB > 2048000 KB
> 2003/06/12 15:36:59| WARNING: Disk space over limit: -7816424 
> KB > 2048000 KB
> 2003/06/12 15:37:10| WARNING: Disk space over limit: -7816424 
> KB > 2048000 KB
> 
> what does this mean? i thought it automatically flushes old 
> cache to make room 
> for the new ones.
> 
It normally means that there was more data in the cache directory than
the cache_dir tag specified.  In your case the negative number may
indicate a problem with 2GB limits on filesystems.

So why don't you post your cache_dir tag(s) from your squid.conf.  You
should also see if you have specified soemthing large than 2GB on a
filesystem that can't exceed 2GB.




Michael Lightfoot
Unix Consultant
ISG Host Systems
Comcare
+61 2 62750680
Apologies for the rubbish that follows...

NOTICE: This e-mail message and attachments may contain confidential 
information. If you are not the intended recipient you should not use or 
disclose any information in the message or attachments. If received in 
error, please notify the sender by return email immediately.  Comcare 
does not waive any confidentiality or privilege.




[squid-users] Disk space over limit

2003-06-12 Thread -JhAzEr-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

2003/06/12 15:36:37| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
2003/06/12 15:36:48| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
2003/06/12 15:36:59| WARNING: Disk space over limit: -7816424 KB > 2048000 KB
2003/06/12 15:37:10| WARNING: Disk space over limit: -7816424 KB > 2048000 KB

what does this mean? i thought it automatically flushes old cache to make room 
for the new ones.


- -- 
- -JhAzEr-

 "I use slackware at home with X and WindowMaker to play music (xmms), watch 
vcd's (xine), learn typing (tuxtype), play shooting (oilwar) on a 545MB 
Hardisk..."
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+6DEohHbHnwBB+SkRAmjjAKCQBSLmUJ4Q03h/g+Es2XZJlVr99gCglYLk
jFIT7686ubDUY339kkECrSk=
=/pOc
-END PGP SIGNATURE-