[squid-users] userID tag

[Aqil]

Hi

Concerning deny_info...

Does squid have a tag to get user's ID ?
Is it possible to use shell variables while editing
error messages?

thanks and regards,
aqil

___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com

Re: [squid-users] Winbind problem

[Henrik Nordstrom]

On Tuesday 22 July 2003 04.24, Tony Melia (DMS) wrote:

> If squid could be changed to give 'mydomain+goodie ProxyUsers'
> instead, this would solve my problem.  Does squid 'look' at the
> winbind seperator in smb.conf?  As I think this may be where it
> stems from, since if it knew what seperator was being used, it
> would use it and not just use a slash.

In case of Basic Squid just sends what the users sent.

In case of NTLM it always uses backslash I think.

Which version of wb_group are you using?

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]

Re: [squid-users] Efficient ACL to restrict to user's own IP Address

[Henrik Nordstrom]

On Tuesday 22 July 2003 05.05, Aqil wrote:
> Hi,
>
> Since user_max_ip still doesn't work :(, I decide to
> restrict every user to log into squid only from their
> own IP Address.

The user_ip external acl helper comes to mind here.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]

[squid-users] load balancing rproxy?

[Henk-Jan \(squid\)]

I am a very happy user of the rproxy function of squid for about 2 years
now.

I was wondering:

What if I place the rproxy somewhere at a central co-location,
I have about 3 internet connections in the firm (with different ISP's)
If I make my host available using all these lines, can I make squid to do
the load balancing over these lines? Of make it somehowe  now that if one
line (ip address) fails it has to use the other?

Re: [squid-users] IE under mac OS9

[Henrik Nordstrom]

On Tuesday 22 July 2003 05.31, Jason Parlevliet wrote:

> While trying to retrieve the URL: /

Are you running with any kind of rules for transparent interception of 
port 80?

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]

Re: [squid-users] How to configure the squid-cache to working with webshield appliance (E500)?

[Henrik Nordstrom]

On Tuesday 22 July 2003 04.55, Niti Lohwithee wrote:

> For this reason, we configure the linux's gateway to point to the
> webshield appliance but doesn't configure in squid-cache.

This requires the webshield appliance to run as a router with 
transparent interception of the traffic to be scanned. If it does 
then this should work, assuming you have got the networking parts 
correct.

If the webshield appliance actually is a proxy and prefers to be used 
as such then see the Squid FAQ on how to forward all requests to 
another proxy.

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]

Re: [squid-users] userID tag

[Henrik Nordstrom]

On Tuesday 22 July 2003 09.21, Aqil wrote:

> Does squid have a tag to get user's ID ?

>From your next question I assume you ask if there is any error page 
tag to get user's ID?

Does not seem to be the case. Should not be hard to add I guess. See 
where cache.authuser is assigned in client_side.c and errorConvert in 
errorpage.c.

> Is it possible to use shell variables while editing
> error messages?

Not without coding the feature.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]

Re: [squid-users] 301 Response Rewrites

[Henrik Nordstrom]

On Tuesday 22 July 2003 05.39, jonathan soong wrote:

> Sometimes the internal webserver sends 301/302 responses saying:
> "redirect to localmachine.localdomain".
> Is it possible to have Squid intercept the 301/302 responses and
> rewrite them?

There is some old code lurking around for doing this in the rproxy 
branch of Squid. Unfortunately it is not in a very good shape at the 
moment.

> The localmachine.localdomain is on our local network and can't be
> seen from the Internet.

My preferred method is to make the server aware of it's external name 
and not use a redirector helper in Squid for accelerator setup. This 
is most easily done by

 1. Adding the domain to the web server configuration.

 2. Add the domain to /etc/hosts on the Squid server with the IP 
address of the backend web server.

 3. Configure squid.conf with

 httpd_accel_host your.main.accelerated.domain
 httpd_accel_uses_host_header on  [if more than one domain]
 acl my_servers src ip.of.accelerated.server ...[if more than one]
 acl http protocol http
 acl port80 port 80
 http_access allow http port80 my_servers
 http_access deny all

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]

Re: [squid-users] Efficient ACL to restrict to user's own IP Address

[Li Wei]

Dear Henrik

Do you mean the external_acl_type?
And can you explain how to use the external_acl_type further?

THX in advance.

- Original Message - 
From: "Henrik Nordstrom" <[EMAIL PROTECTED]>
To: "Aqil" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, July 22, 2003 3:46 PM
Subject: Re: [squid-users] Efficient ACL to restrict to user's own IP Address


> On Tuesday 22 July 2003 05.05, Aqil wrote:
> > Hi,
> >
> > Since user_max_ip still doesn't work :(, I decide to
> > restrict every user to log into squid only from their
> > own IP Address.
> 
> The user_ip external acl helper comes to mind here.
> 
> Regards
> Henrik
> 
> -- 
> Donations welcome if you consider my Free Squid support helpful.
> https://www.paypal.com/xclick/business=hno%40squid-cache.org
> 
> If you need commercial Squid support or cost effective Squid or
> firewall appliances please refer to MARA Systems AB, Sweden
> http://www.marasystems.com/, [EMAIL PROTECTED]

[squid-users] How can I allow hosts to access web through squid without restarting?

[Riaz Uddin]

Dear,

I'm using squid as my proxy server in my network and allowing hosts to
access web by setting my proxy server in browser. Without the setting people
aren't allowed to access web. I'm very beginner in using squid. To allow
host to access web I do two steps and steps are:
1. Write lines in squid.conf:
acl usr1 src 172.16.0.5
http_access allow usr1

2. After writing the above lines, I restart the squid service.

My problem is, when I restart the squid service all other users using the
web are disconnected for few seconds, which may interrupt their downloading.
But whenever I do need to allow a host or disallow a host to access web,
I've to rewrite squid.conf and have to restart the squid service.
In this regard, I want solution so that I can browse through squid proxy
without interruption.
If someone has any solution, please help me out.
One point is, I've to use proxy server in my network.
Bye
Thanks in advance
Riaz Uddin
_
Add photos to your messages with MSN 8. Get 2 months FREE*. 
http://join.msn.com/?page=features/featuredemail

Re: [squid-users] How can I allow hosts to access web through squid without restarting?

[Lieven Marchand]

"Riaz Uddin" <[EMAIL PROTECTED]> writes:

> Dear,
> 
> I'm using squid as my proxy server in my network and allowing hosts to
> access web by setting my proxy server in browser. Without the setting people
> aren't allowed to access web. I'm very beginner in using squid. To allow
> host to access web I do two steps and steps are:
> 
> 1. Write lines in squid.conf:
> acl usr1 src 172.16.0.5
> http_access allow usr1
> 
> 
> 2. After writing the above lines, I restart the squid service.

No need to restart squid.

Use squid -k parse to check your squid.conf for errors and when this
works use squid -k reconfigure to start using it. Connections in
progress will not be disturbed by this.

-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing on usenet and in e-mail?

Re: [squid-users] 301 Response Rewrites

[Brett Lymn]

On Tue, Jul 22, 2003 at 10:02:34AM +0200, Henrik Nordstrom wrote:
> 
> There is some old code lurking around for doing this in the rproxy 
> branch of Squid. Unfortunately it is not in a very good shape at the 
> moment.
>

Oh dear, you mean to say the reverse proxy code is not well?  I was
planning to use that to keep a M$ server our of our DMZ.
 
-- 
Brett Lymn

[squid-users] Squid auto-dial

[Creamer, Mark]

I have a new Squid 2.5 installation running on a Red Hat 9.0 box in a small LAN. The 
connection to the
Internet is dial-up. I would like to configure Squid to automatically dial-up as 
needed so the client
PCs don't have to do anything except open their browsers. I would also like Squid to 
disconnect after
x minutes. I can't find documentation on this. Can someone point me in  the right 
direction? Thanks!

Mark Creamer

Re: [squid-users] Squid auto-dial

[Dieter Bloms]

Hi Mark,

On Tue, Jul 22, Creamer, Mark wrote:

> I have a new Squid 2.5 installation running on a Red Hat 9.0 box in a small LAN. The 
> connection to the
> Internet is dial-up. I would like to configure Squid to automatically dial-up as 
> needed so the client
> PCs don't have to do anything except open their browsers. I would also like Squid to 
> disconnect after
> x minutes. I can't find documentation on this. Can someone point me in  the right 
> direction? Thanks!

for analog modems you have to use the diald daemon.
For isdn you can use ipppd.

These daemons trigger the dial to your provider and hang up the
connection after a configureable timeout.

Keep in eye the dialups, because the dnsserver triggers many dialup
connections, if it is not configured correctly.


-- 
Gruß

  Dieter

--
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
From field.


pgp0.pgp
Description: PGP signature

[squid-users] Re: IE under mac OS9

[JOHN HUMPHREY]

Jason,
We do no do LDAP authenticating, however had similar intermittent issue
with IE 5.16 and Mac OS 9 that was solved by turining on
is_refresh on
in squid.conf.
Hope this info helps!
 

 John Humphrey
CNA
Senior Network Support
Southwest Allen County Schools
CMT Center
5120 Homestead Rd
Ft Wayne, IN 46814
[EMAIL PROTECTED]
260.431.2300


>>> Jason Parlevliet <[EMAIL PROTECTED]> 07/21/03 10:31PM >>>
Hi There

I have two probs, but I'll seperate them into seperate emails

I have Squid authenticating against the Novell tree via LDAP.  Problem

I'm having is that IE users under Mac OS9 are asked to authenticate as

normal, and that works fine, but then they get this message :

While trying to retrieve the URL: /

The following error was encountered

 - Invalid URL

Some aspect of the requested URL is incorrect. Possible Problems :

- MIssing or incorrect access protocol (should be http:// or
similar)
- Missing hostname
- Illegal double-escape in the URL-Path
- Illegal character in hostname; underscores are not allowed

This happens regardless of the URL - eg http://www.rmit.edu.au or 
http://www.cnn.com 

If you put a path in there eg http://www.rmit.edu.au/adc/helpdesk you 
get the same problem but it says
While trying to retrieve the URL: /adc/helpdesk

It's like IE is only asking for the path and not the domain name.  
Anyone seen this before?
Jase
--
Jason Parlevliet - Technical Services Coordinator
Faculty of Art Design and Communication
RMIT University
Ph: 9925 3808
Ave! Bossa nova, similis bossa seneca!

[squid-users] Hardware specs

[glen hyland]

since the faq specs are from 98, it seems a little
outdated. So I am unsure if this is alright. Would
these specs be good for a squid box. Pent 4 2.3GB, 1GB
memory, 2 100GB IDE drives(in a raid config), 3
NICs(will also be running a firewall on the same box
with a DMZ). The box will have to handle 200+ users in
a corporate environment. 

Does this sound like it will handle the traffic?

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

[squid-users] Predictive caching?

[Chris Wilcox]

Hi all,

Just had a suggestion about a project I'm working on: can we provide 
predictive caching?  I know it's possible to use cron and wget to schedule 
downloads of pages to keep them in the cache, but is there any way I can get 
squid to follow links on pages it downloads so they load even quicker when 
requested by users?  There's nothing in the docs so I'm presuming this is a 
no?  In which case, is anyone aware of ways I can get this type of behaviour 
to work?

Regards,

nry

_
Use MSN Messenger to send music and pics to your friends 
http://www.msn.co.uk/messenger

RE: [squid-users] Predictive caching?

[David Brodbeck]

> -Original Message-
> From: Chris Wilcox [mailto:[EMAIL PROTECTED]

> Just had a suggestion about a project I'm working on: can we provide 
> predictive caching?  I know it's possible to use cron and 
> wget to schedule 
> downloads of pages to keep them in the cache, but is there 
> any way I can get 
> squid to follow links on pages it downloads so they load even 
> quicker when 
> requested by users?

I don't think so, but it seems like this is the sort of thing you could
easily tinker with as a seperate program.  Here's my thought:  Write your
own very basic proxy, maybe in Perl or some other interpreted language for
the proof-of-concept version so it's easy to tweak.  Point your browser at
this proxy, and point your proxy at Squid.  Then your experimental proxy can
follow the links in the page, after passing it on to the web browser, and
Squid will automatically cache whatever it retrieves.  Make sense?

If you decide to play with this, keep us posted.  I find the idea pretty
interesting.

RE: [squid-users] Predictive caching?

[Chris Wilcox]

> -Original Message-
> From: Chris Wilcox [mailto:[EMAIL PROTECTED]
> Just had a suggestion about a project I'm working on: can we provide
> predictive caching?  I know it's possible to use cron and
> wget to schedule
> downloads of pages to keep them in the cache, but is there
> any way I can get
> squid to follow links on pages it downloads so they load even
> quicker when
> requested by users?
I don't think so, but it seems like this is the sort of thing you could
easily tinker with as a seperate program.  Here's my thought:  Write your
own very basic proxy, maybe in Perl or some other interpreted language for
the proof-of-concept version so it's easy to tweak.  Point your browser at
this proxy, and point your proxy at Squid.  Then your experimental proxy 
can
follow the links in the page, after passing it on to the web browser, and
Squid will automatically cache whatever it retrieves.  Make sense?

If you decide to play with this, keep us posted.  I find the idea pretty
interesting.
hehe, I wasn't thinking along the lines of writing my own proxy or software. 
 Reading into it, I don't think it would actually have the overwhelming 
impact on speed which it may appear it has when it was first mentioned to 
me.

Thanks for the reply though,

Regards,

nry

_
Sign-up for a FREE BT Broadband connection today! 
http://www.msn.co.uk/specials/btbroadband

Re: [squid-users] Predictive caching?

[Robert Collins]

On Wed, 2003-07-23 at 01:45, Chris Wilcox wrote:
> Hi all,
> 
> Just had a suggestion about a project I'm working on: can we provide 
> predictive caching?  I know it's possible to use cron and wget to schedule 
> downloads of pages to keep them in the cache, but is there any way I can get 
> squid to follow links on pages it downloads so they load even quicker when 
> requested by users?  There's nothing in the docs so I'm presuming this is a 
> no?  In which case, is anyone aware of ways I can get this type of behaviour 
> to work?

Nothing within squid today, and unlikely unless someone contributes or
sponsors it.

if you research into this, be sure to accomodate:
handling /large/ objects that the user never requests.
handling the meta-data headers to ensure the pre-fetched object is
compatible with the Vary: instructions issued by the server.
handling the link saturation that will likely be caused.
dealing with synthetic URL's (such as created by javascript).

Cheers,
Rob
-- 
GPG key available at: .


signature.asc
Description: This is a digitally signed message part

[squid-users] Question for the users....

[Paul . Fiero]

I am in the process of trying to put together a list of current squid users
that I could present to my management to convince them that other "people"
are using it.  If any would care to respond to me off list I would
appreciate it.  I would be interested in a) a list of user that anyone knows
of, or b) a response telling me if you use it or know of anyone using it.

My e-mail address is [EMAIL PROTECTED]



Paul Fiero
Information Security Analyst
City of Austin Communications and Technology Management
(512) 974-3559
[EMAIL PROTECTED]

CONFIDENTIALITY NOTICE: 

The information contained in this ELECTRONIC MAIL transmission is
confidential. It may also be privileged work product or proprietary
information. This information is intended for the exclusive use of the
addressee(s). If you are not the intended recipient, you are hereby notified
that any use, disclosure, dissemination, distribution [other than to the
addressee(s)], copying or taking of any action because of this information
is strictly prohibited.




Vampireware /n/, a project, capable of sucking the lifeblood out of anyone
unfortunate enough to be assigned to it, which never actually sees the light
of day, but nonetheless refuses to die.

Re: [squid-users] Question for the users....

[Antony Stone]

On Tuesday 22 July 2003 7:00 pm, [EMAIL PROTECTED] wrote:

> I am in the process of trying to put together a list of current squid users
> that I could present to my management to convince them that other "people"
> are using it.

I think this would be a good piece of information to collect and place on the 
project website - along the same lines as http://www.mailscanner.info

I think any list of "who uses this Open Source software" is good for such 
projects, because otherwise it's difficult to convince some management types 
that it's a serious thing to consider.

Just my 2p

Antony.

-- 

There are two possible outcomes.

If the result confirms the hypothesis, then you've made a measurement.
If the result is contrary to the hypothesis, then you've made a discovery.

 - Enrico Fermi

[squid-users] Squid 2.5.STABLE3 and Windows update Server?

[Joseph M Siegmann]

Anyone out there know how to get or know what could be wrong with Squid
and Windows Update Server (SUS Server) through a squid server?

I am having issues with the squid server not passing authentication to
the SUS server.

I'm using NTLM authentication (wb_group), and winbind. 

Thanks in advance.

Joseph M Siegmann
CISSP, CCNA, CCDA, MCSE, MCT

RE: [squid-users] Winbind problem

[Tony Melia (DMS)]

Using the wb_group from squid-2.5 Stable3.  Any suggestions?

-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 22 July 2003 05:46
To: Tony Melia (DMS); ''[EMAIL PROTECTED]' '
Subject: Re: [squid-users] Winbind problem


On Tuesday 22 July 2003 04.24, Tony Melia (DMS) wrote:

> If squid could be changed to give 'mydomain+goodie ProxyUsers' 
> instead, this would solve my problem.  Does squid 'look' at the 
> winbind seperator in smb.conf?  As I think this may be where it stems 
> from, since if it knew what seperator was being used, it would use it 
> and not just use a slash.

In case of Basic Squid just sends what the users sent.

In case of NTLM it always uses backslash I think.

Which version of wb_group are you using?

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org

If you need commercial Squid support or cost effective Squid or firewall
appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [EMAIL PROTECTED]


Downs MicroSystems Pty Ltd
145 Margaret Street
Toowoomba Qld 4350
Ph. (07) 4639 3344 Fax (07) 4639 3820

Important Disclaimer and Warning

Downs MicroSystems does not represent or warrant that any attached files are
free from computer viruses or other defects. The attached files are
provided, and may only be used, on the basis that the user assumes all
responsibility for any loss, damage or consequences resulting directly or
indirectly from use of the attached files. The liability of Downs
MicroSystems in any event is limited to either the resupply of the attached
files or the cost of having the attached files resupplied.

NOTE: The views expressed by the individual in this message do not
necessarily reflect those of the organisation.

Downs MicroSystems is committed to protecting the privacy of individuals,
and is bound by the principles of the Commonwealth Privacy Act (1988).
Should you wish to view our Privacy Policy, please visit
www.downsmicro.com.au.

The information contained in this message is confidential and may be legally
privileged. The message is intended solely for the addressee(s). If you are
not the intended recipient, you are hereby notified that any use,
dissemination, or reproduction is strictly prohibited and may be unlawful.
If you are not the intended recipient, please contact the sender by return
e-mail and destroy all copies of the original message.

RE: [squid-users] Predictive caching?

[John Cougar]

On Tue, 22 Jul 2003, Chris Wilcox wrote:

> > > -Original Message-
> > > From: Chris Wilcox [mailto:[EMAIL PROTECTED]
> >
> > > Just had a suggestion about a project I'm working on: can we provide
> > > predictive caching?  I know it's possible to use cron and
> > > wget to schedule
> > > downloads of pages to keep them in the cache, but is there
> > > any way I can get
> > > squid to follow links on pages it downloads so they load even
> > > quicker when
> > > requested by users?
> >
> 
> hehe, I wasn't thinking along the lines of writing my own proxy or software. 
>   Reading into it, I don't think it would actually have the overwhelming 
> impact on speed which it may appear it has when it was first mentioned to 
> me.

Aah, the old Oracular cache that does the thinking for you?

This is not a new concept, fellas. At least one vendor (and several whose
names I've forgotten - lost in the debris from the .com crash) springs to
mind who attempted to do this kinda stuff.

 Cacheflow - active prefetching, settable according to policies

 Inktomi - I'm sure these guys had prefetch strategies ...or one of their
partners, who developed on their API

 Network Appliance - has switches to complete downloads even when client
aborts; now they also have "confill", which allows you to prefetch
objects into the cache, setting expiry policies or even pinning the
objects in the cache indefinitely

 ( and about a dozen others ... )

The upshot of this was that the link (talking Cacheflow here) was kept
saturated most of the time, and an awful lot of wasted traffic was
generated on objects with relatively low TTLs.

These days with Gigabit pipes, the prefetch argument is almost a mute
point: once upon a time the notion to download sites during quiet times
for prepositioning for the next busy days' request profiles, but how can
you predict user behaviour? You can argue that the bulk of browsers will
hit www.microsoft.com when they first start up, but then you have to
consider whether the site(s) is/are cacheable and for how long ... blah,
blah.

It is of interest to note that the prefetching plots apparently gave birth
to a lot of the CDN technology (this is my perception) that is being
applied to Content Devilry today.

;-)
 ___
+--  -++
| John V Cougar __|   Voice: +61 2 6208 1683   |
| Cache Manager/ / /\ ++
| Telstra Internet \/_/  \ Direct | E-Mail: [EMAIL PROTECTED] |
+/ ---++

Re: [squid-users] Range Requests handled in Squid v2.5s1

[Snowy]

Hi, Henrik,

Got any idea about the Range requests and the negative byte hit ratio below?

Thanks.

Snowy



> I just used the default value, which is 0KB.
>
> I have seen a lot of HTTP responses with code=206 in my cache access.log
> file. Amony them, many of URLs refer to the same downloaded file but from
> different clients. I wonder if Squid will count the object sizes many
times
> in this case for server side traffic? Could this cause my cache's byte hit
> ratio negative most of time?
>
> Thanks.
>
> Snowy

>
> > On Monday 21 July 2003 11.37, Snowy wrote:
> > > Hi, all,
> > >
> > > I am using Squid 2.5.STABLE1 now. I am wondering how range requests
> > > are handled in this version of Squid. How does range_offset_limit
> > > work in squid.conf?
> >
> > What have you set it to?
> >
> > Regards
> > Henrik
> >
> > -- 
> > Donations welcome if you consider my Free Squid support helpful.
> > https://www.paypal.com/xclick/business=hno%40squid-cache.org
> >
> > If you need commercial Squid support or cost effective Squid or
> > firewall appliances please refer to MARA Systems AB, Sweden
> > http://www.marasystems.com/, [EMAIL PROTECTED]
> >
> >
>
>
>
>

Re: [squid-users] Hardware specs

[Jason Parlevliet]

On Wednesday, Jul 23, 2003, at 01:56 Australia/Melbourne, glen hyland 
wrote:

since the faq specs are from 98, it seems a little
outdated. So I am unsure if this is alright. Would
these specs be good for a squid box. Pent 4 2.3GB, 1GB
memory, 2 100GB IDE drives(in a raid config), 3
NICs(will also be running a firewall on the same box
with a DMZ). The box will have to handle 200+ users in
a corporate environment.
IIRC Squid prefers non raided drives - if you just have two drives it 
handles the many read/write ops better.

Does this sound like it will handle the traffic?
Oh yeah.  Our old proxy is a P166 w/256M, and 3x4gig drives, no raid, 
single 100Mb network.  This is servicing a couple hundred staff, as 
well as about 800 student lab machines.  No auth or complicated rules, 
but it is running Squidguard.  The poor thing thrashes and doesn't run 
superefficiently, but it's quite bearable and did the job as a live 
proof of concept - noticably slower than direct connection, but not 
painfully slow.

HTH
Jase
--
Jason Parlevliet - Technical Services Coordinator
Faculty of Art Design and Communication
RMIT University
Ph: 9925 3808
Ave! Bossa nova, similis bossa seneca!

Re: [squid-users] Efficient ACL to restrict to user's own IP Address

[Aqil]

 --- Henrik Nordstrom <[EMAIL PROTECTED]> a écrit :
> On Tuesday 22 July 2003 05.05, Aqil wrote:
> to
> > restrict every user to log into squid only from
> their
> > own IP Address.
> 
> The user_ip external acl helper comes to mind here.

Where can I find a good doc concerning
external_acl_type ? I've already read its doc in
squid.conf, but I think I need more info :)

What is the main idea how to use external_acl_type ?

Btw,
I am thinking to append an additional field for each
user's IP address in my database. Then my database
will look like this :

user1:encryptedpassword:IP_address_of_user1

Is it possible to adapt the ncsa authentication scheme
(or to combine it with other directive e.g.
external_acl_type?, or with simple scripts) to take
into account the additional IP address field ?

> Regards
> Henrik

Thanks in advanece

regards,
aqil

___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com

Re: [squid-users] Predictive caching?

[Bob Arctor]

squid could just CONNECT with all links available on the page.
then it could check for available bandwitch and crawl thru site searching all 
html pages (and caching them), not entering those which are dynamically 
created. there also should be ablity to tune bandwidth used by crawler, and 
an option to fetch also files of certain types and sizes.
recrusion depth should be also regulated...

IMO only CONNECT with all links on page feautre should be implemented in 
squid, rest could be done by wget-forking proxy.



On Tuesday 22 July 2003 18:26, Robert Collins wrote:
> On Wed, 2003-07-23 at 01:45, Chris Wilcox wrote:
> > Hi all,
> >
> > Just had a suggestion about a project I'm working on: can we provide
> > predictive caching?  I know it's possible to use cron and wget to
> > schedule downloads of pages to keep them in the cache, but is there any
> > way I can get squid to follow links on pages it downloads so they load
> > even quicker when requested by users?  There's nothing in the docs so
> > I'm presuming this is a no?  In which case, is anyone aware of ways I
> > can get this type of behaviour to work?
>
> Nothing within squid today, and unlikely unless someone contributes or
> sponsors it.
>
> if you research into this, be sure to accomodate:
> handling /large/ objects that the user never requests.
> handling the meta-data headers to ensure the pre-fetched object is
> compatible with the Vary: instructions issued by the server.
> handling the link saturation that will likely be caused.
> dealing with synthetic URL's (such as created by javascript).
>
> Cheers,
> Rob

-- 
-- 

[squid-users] How to compile Rodrigo Campos' IP/user authentication module ?

[Aqil]

Hi,

I just downloaded Rodrigo's script i.e
ip_user-1.0.tar.gz, and after decompressing I got
these files:

dict.c  
example.conf  
example-deny_all_but.conf  
ip_user.h  
license  
main.c  
Makefile  
match.c  
README

Could anyone tell me how to compile the script ? :)

TIA

regards,
aqil

___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com

[squid-users] Solved Re: [squid-users] How to compile Rodrigo Campos' IP/user authentication module ?

[Aqil]

Sorry for having bothered you

 --- Aqil <[EMAIL PROTECTED]> a écrit :

___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com

[squid-users] Re: Squid but propably off topic?

[Schelstraete Bart]

Hello,

Just FYI:
This problem was caused by the caching itself.
When I disable caching for all intranet hosts, the speed is like it 
should be..(+/- local lan speed)
So it seems the my Squid disk performance is not like it should be.

rgrds,

  Bart

Schelstraete Bart wrote:

Hello,

I 'm facing a problem with my Squid proxy server, and I hope maybe of 
you can help me. (the problem is maybe not squid related)
I installed Squid 2.5 on a Linux server which is currently live (RH 
8.0). This machine is a 2 CPU machine, with 1 GIG RAM, 2 x 100 NIC. 
(in fact this are 1G bit cards, but it's currently connected on a 
100Mb switch).
And I also installed Squid 2.5 on a HP-UX machine , which I'm testing 
now. (HP-UX 11i). This machine has 3 CPU's, and 1x100 NIC. (also 1Gbit 
card)
(completely the same Squid configuration)

Everything works fine, and Squid itselfs works quite fast. Because we 
have a lot of servers in our lan, which doesn't need to use the 
'cache_peer', I configured Squid that he goes directly to those 
machine, so without the cache_peer.

Now yesterday I did some tests, and I downloaded a file via ftp 
through the proxy. (proxy will bypass cache_peer for lan, and I 
configured Squid).
If I used the Linux Squid proxy , I got a download speed of +/- 300 
Kb/s. But If I'm using the HP-UX Squid proxy I get a download speed of 
1000 / 1200 Kb/s..

I double check the configuration, and I checked the access.log file, 
and Squid not using the cache_peer for that download.
So I don't really understand why the Linux machine is that slow 
comparing with the HP-UX.
Does somebody has a clue what  I can do to improve this kind of 
connections?



   Bart

[squid-users] How to have squid communicate with external acl

[Aqil]

Hi again,

As all of you already know, ip_user_check returns OK
if the IP address and the userID of a user match with
a line in the file ip_and_userID, otherwise, it
returns ERR.

How to have squid read these outputs (OK or ERR) ?

After being able to read OK or ERR, squid also (still)
have to authenticate the user with their password..

Here is what i am trying, but it seems not work.

acl myusers proxy_auth REQUIRED

external_acl_type ip_auth %SRC %LOGIN
/path/ip_user_check -f /path/ip_and_userID

acl ip_auth_acl  external ip_auth ip_auth_acl

http_access allow ip_auth_acl myusers

Any help ?

TIA & regards,
aqil




___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com

[squid-users] Monitoring users activite & log analyzer ?

[Aqil]

Hi

Here I am again :)

In MS-Proxy, we can monitor in real time all users
connected to the server ? How to do it in squid ?

Does squid log analyzer exist ? Where to find ?

Imagine one day reports (about duration, visited
sites, time, etc) have to be generated, what tool do I
need to ?

TIA and regards,
aqil

___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com

[squid-users] Stable4

[Schelstraete Bart]

Hello,

A few days ago Hernik talked about Squid 2.5 Stable4.
Somebody knows when it will be available?
Is it a matter of weeks or months?

(because I want to update, but if stable 4 arrives very soon, I'll wait for that
version)


rgrds,
  Bart

--
Schelstraete Bart
[EMAIL PROTECTED] - http://www.schelstraete.org
  http://langmixer.mozdev.org