[squid-users] kernel 2.6.1 and async-io

[unixware]

Dear all

i am having problem with squid i have the following
software installed

OS Redhat 9
kernel 2.6.1
squid-2.5-Stable4

asyn-io is not working i can see only 2 processes even
machine on heavy load

Kindly help 

aslo geting this error in cache.log
 ctx: exit level  0
 ctx: enter level  0:
'http://www.focalclick.com/cgi-bin/focalimage.exe?179277&10016'
 httpProcessReplyHeader: Impossible keep-alive header
from 'http://www.focalclick.com/cgi-
79277&10016'
 ctx: exit level  0
 ctx: enter level  0:
'http://greatlakescycling.com/site/intro.cfm'
 httpProcessReplyHeader: Impossible keep-alive header
from 'http://greatlakescycling.com/s

 ctx: exit level  0
 ctx: enter level  0:
'http://by1fd.bay1.hotmail.msn.com/cgi-bin/dasp/EN/rte___90807001.js

 httpProcessReplyHeader: Impossible keep-alive header
from 'http://by1fd.bay1.hotmail.msn.
rte___90807001.js'
 ctx: exit level  0
 ctx: enter level  0:
'http://www.hotmail.msn.com/cgi-bin/sbox?did=1&t=5xtVCD3WTDTxPJYCWoc
KSp!DItoen3DG1aq!i3B5Bmk1s5FjSQV41c0U0Ow7vhqLATzQ$$&p=5p6eybW3pFz2aGV0UzqXwy9vLGfxJMYk*hY3
NVbn7iHZ12X6OcOPAlHZdmvje0IpMtCBNEjnHrpWzrMdqyUq3fKpC5HfTtb*Pgfryq937Q7IV4p!WqeYIdbEjECSlZ
eeCIa7wyHHx9!KS1QQ$$&lc=1033&js=yes&rru=/cgi-bin/HoTMaiL'
 httpProcessReplyHeader: Impossible keep-alive header
from 'http://www.hotmail.msn.com/cgi
tVCD3WTDTxPJYCWocAI0e5SMZHV5eYDLIOt1OKSp!DItoen3DG1aq!i3B5Bmk1s5FjSQV41c0U0Ow7vhqLATzQ$$&p
Xwy9vLGfxJMYk*hY3HawVnBOV1FJvjatzgzyBNVbn7iHZ12X6OcOPAlHZdmvje0IpMtCBNEjnHrpWzrMdqyUq3fKpC
4p!WqeYIdbEjECSlZlAlbBEgL98!ZzopFcwv6eeCIa7wyHHx9!KS1QQ$$&lc=1033&js=yes&rru=/cgi-bin/HoTM







__
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus

Re: [squid-users] Authentication

[Henrik Nordstrom]

On Fri, 16 Jan 2004 [EMAIL PROTECTED] wrote:

> Would the smb/winbind helper be able to do what I'm asking?

No.

> Or.  Could you give me a little guidance on "writing a small helper that 
> tells squid the password is expired".
> I don't have much of an idea on what that means.  ;-)

See the external_acl_type directive for information on what Suqid expects.

You need a program that when queried on a username returns OK/ERR 
indicating if this user is allowed or not.

How this program determines if the user is allowed or not is up to you, 
but in this case it should check if the account have expired. If not 
expired the result should be OK, else ERR.

Regards
Henrik

Re: [squid-users] Squid, FlashFXP, and SSL-FTP Servers

[Henrik Nordstrom]

On Fri, 16 Jan 2004 [EMAIL PROTECTED] wrote:

> Now I want to repeat the second scenario, but one of the FTP Servers is an SSL 
> FTP server and it is NOT working.

There is no URL scheme for FTP over SSL, and this protocol is unknown to 
Squid.

If such URL scheme is defined then extending Squid-3 or Squid-2.5+SSL 
update should with support for this URL scheme of FTP over SSL should not 
be very hard, but some coding is required.

Regards
Henrik

RE: [squid-users] URLS with double question mark don't work

[Henrik Nordstrom]

On Fri, 16 Jan 2004, Derek Winkler wrote:

> I've now retrieved these jpeg images with wget both with and without squid.
> 
> When squid returns them to wget, it has a \r \n added on to the beginning.
> 
> Sounds like a squid bug to me.

Can you please send 

   tcpdump -i any -s 1600 -w dump.out \
'(' host the.web.server.ip and port 80 ')' \
or '(' host your.squid.server.ip and port 3128 ')'

for

a) a wget request not using Squid.

b) from the Squid proxy when using wget via Squid.

(replace 3128 by your proxy port if different).

and please make sure the object is not cached.

Regards
Henrik

Re: [squid-users] caching wihtout proxing

[Henrik Nordstrom]

On Thu, 15 Jan 2004, Adrian Costescu wrote:

> This is what i'm looking for...for some time...but i don't know how to assign 
> each client one of these private IP addresses via tcp_outgoing_address. 

Set up the required private IP addresses on your Squid server OS.

Configure your NAT device to NAT these private IP addresses to the
corresponding client IP addresses.

Test that the NAT works with netcat, squidclient or another TCP client
allowing specifying the source (local) IP address.

Make one Squid ACL per client.

Then add one tcp_outgoing_address line per client speficying which private 
IP address this client should be mapped to.


Squid-2.5 or later required.

Regards
Henrik

RE: [squid-users] Squid/WCCP/Cisco Problem

[Henrik Nordstrom]

On Fri, 16 Jan 2004, Wallace, Brian S. wrote:

> Is the WCCPv2 patch the wccp.c file, or are you referring to a patch for
> 2.5 Stable 4?  I don't seem any WCCPv2 patch files on the web site.

See http://devel.squid-cache.org/ for information on the WCCPv2 patch.

Regards
Henrik

RE: [squid-users] URLS with double question mark don't work

[Duane Wessels]

On Fri, 16 Jan 2004, Derek Winkler wrote:

> I've now retrieved these jpeg images with wget both with and without squid.
>
> When squid returns them to wget, it has a \r \n added on to the beginning.
>
> Sounds like a squid bug to me.

So have you decided that the problem is not related to question marks, but
is instead an extra CRNL pair?

Duane W.

Re: [squid-users] Only caching sometimes

[Duane Wessels]

On Wed, 14 Jan 2004, Ken wrote:

> Hi all,
>
> Caching is not happening the way I expected.
>
> I am using Squid to cache the 'expensive' output of a Zope server.
>Due to increased traffic on the site, I am getting many server
>errors (database conflict), so it is urgent that objects be cached.
>I instructed Zope to insert a Cache-Control header with 'max-age=7776000'.
>The object should be cached even if refreshment would result in
>changes.
>
> All pages are made from the same script which I have tested with
>the Cacheability Engine. The response is, 'This object will be fresh
>for 12 weeks 6 days. The object had changed when validation was
>attempted'.
>
> If I understand correctly from the log extracts below (access.log,
>store.log and Zope's Z2.log), the object has been dropped and
>re-entered into the cache. Why? How can I prevent this?
>
> Thanks in advance!
>
> Ken
>
> --
>
> 202.202.202.202 - - [14/Jan/2004:01:47:45 +0100] "GET 
> http://mysite.com:81/pathto/object_xyz HTTP/1.1" 500 2462 TCP_MISS:DIRECT
> 61.61.61.61 - - [14/Jan/2004:03:10:00 +0100] "GET 
> http://mysite.com:81/pathto/object_xyz HTTP/1.0" 200 22366 TCP_MISS:DIRECT
> 64.64.64.64 - - [14/Jan/2004:03:15:06 +0100] "GET 
> http://mysite.com:81/pathto/object_xyz HTTP/1.0" 200 22370 TCP_HIT:NONE
> 202.202.202.202 - - [14/Jan/2004:09:08:12 +0100] "GET 
> http://mysite.com:81/pathto/object_xyz HTTP/1.1" 200 21699 TCP_MISS:DIRECT
> 206.168.0.6 - - [14/Jan/2004:09:27:07 +0100] "GET 
> http://mysite.com:81/pathto/object_xyz HTTP/1.0" 200 21694 
> TCP_CLIENT_REFRESH_MISS:DIRECT
>
> 1074046198.938 RELEASE -1  C927B08545BF24772B34082FC7B5AC2A  500 1074041265  
>   -1 1081817265 text/html 1865/1865 GET http://mysite.com:81/pathto/object_xyz
> 1074046199.623 SWAPOUT 00 2075 C927B08545BF24772B34082FC7B5AC2A  200 1074046199  
>   -1 1081822199 text/html 22053/22053 GET http://mysite.com:81/pathto/object_xyz
> 1074067689.816 SWAPOUT 00 3591 C927B08545BF24772B34082FC7B5AC2A  200 1074067689  
>   -1 1081843689 text/html 21386/21386 GET http://mysite.com:81/pathto/object_xyz
> 1074068826.935 SWAPOUT 00 3662 C927B08545BF24772B34082FC7B5AC2A  200 1074068826  
>   -1 1081844826 text/html 21386/21386 GET http://mysite.com:81/pathto/object_xyz
>
> 123.45.678.90 - Anonymous [14/Jan/2004:01:47:45 +0200] "GET /pathto/object_xyz 
> HTTP/1.0" 200 2421 "" ""
> 123.45.678.90 - Anonymous [14/Jan/2004:03:09:59 +0200] "GET /pathto/object_xyz 
> HTTP/1.0" 200 22325 "" ""
> 123.45.678.90 - Anonymous [14/Jan/2004:09:08:09 +0200] "GET /pathto/object_xyz 
> HTTP/1.0" 200 21658 "" ""
> 123.45.678.90 - Anonymous [14/Jan/2004:09:27:06 +0200] "GET /pathto/object_xyz 
> HTTP/1.0" 200 21658 "" "CacheabilityEngine/1.30 "
>

>From your access log, you got

  (1) an error
  (2) a miss
  (3) a hit
  (4) a miss
  (5) a miss

The (4) miss is hard to explain without seeing all the HTTP headers.
It might have something to do with content-negotiation (Vary header).
For one thing, notice that (4) has HTTP/1.1 while the previous two
have HTTP/1.0.

(5) is a miss because the client hit 'Reload' or included a
'cache-control: no-cache' header.  Since you are using Squid has
an http accelerator, you probably want to ignore those reloads by
making a 'refresh_pattern' rule that uses the 'ignore-reload' option.

Duane W.

Re: [squid-users] caching wihtout proxing

[Adrian Costescu]

On Friday 09 January 2004 10:51, Henrik Nordstrom wrote:
> On Fri, 9 Jan 2004 [EMAIL PROTECTED] wrote:
> > Yes.
> >

This is what i'm looking for...for some time...but i don't know how to assign 
each client one of these private IP addresses via tcp_outgoing_address. 
 


> > I need to put a transparent cache before bandwidht manager.
>
> Ok, so your question is if it is possible to proxy and have the proxy use
> the same IP address as the client.
>
> Yes this is possible, provided ALL return traffic to the clients is routed
> via the proxy server. What you do is that you set up as many IP aliases as
> you have clients on the proxy server using private IP addresses, then NAT
> these back to the client IP addresses and create tcp_outgoing_address
> rules assigning each client one of these private IP aliases.
>
> Regards
> Henrik

RE: [squid-users] URLS with double question mark don't work

[Derek Winkler]

I've now retrieved these jpeg images with wget both with and without squid.

When squid returns them to wget, it has a \r \n added on to the beginning.

Sounds like a squid bug to me.

Any workarounds?

-Original Message-
From: Derek Winkler [mailto:[EMAIL PROTECTED]
Sent: Friday, January 16, 2004 1:39 PM
To: [EMAIL PROTECTED]
Subject: RE: [squid-users] URLS with double question mark don't work


Here's the web server logs in case you're interested...

2004-01-16 18:26:51 xx.x.x.x - W3SVC1 GET /WebID/sdiis.dll 200 6657 443
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) -
2004-01-16 18:26:54 xx.x.x.x - W3SVC1 GET /WebID/sdiis.dll 200 9408 443
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
https://torxm.algorithmics.com/exchange
2004-01-16 18:26:54 xx.x.x.x - W3SVC1 GET /WebID/sdiis.dll 200 6574 443
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
https://torxm.algorithmics.com/exchange

First entry fetches the pages, the next two fetch graphics for the page by
specifying the below URLs. The one that specifies the sdiis.dll by itself
works and displays the pages, the ones that try to fetch the graphics for
that page don't work. The ?GetPic?image= doesn't seem to work.

Any workarounds appreciated.

Thanks,

Derek

-Original Message-
From: Derek Winkler [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 5:16 PM
To: [EMAIL PROTECTED]
Subject: [squid-users] URLS with double question mark don't work


I'm using squid as a reverse proxy.

The software on the server uses URLs with two question marks in them and
they don't work.

Not sure if the question marks cause the problem.

Here's the URL...

https://x.algorithmics.com/WebID/sdiis.dll?GetPic?image=logo_purple

Can anyone tell me if these are a problem?

access.log entry for this URL...

1074204887.219 88 10.1.10.103 TCP_MISS/200 9413 GET
https://x.algorithmics.com/WebID/sdiis.dll? -
FIRST_UP_PARENT/x.algorithmics.com image/jpeg

Thanks,

Derek

RE: [squid-users] Squid/WCCP/Cisco Problem

[Wallace, Brian S.]

Henrik:

Is the WCCPv2 patch the wccp.c file, or are you referring to a patch for
2.5 Stable 4?  I don't seem any WCCPv2 patch files on the web site.

Thanks,

Brian

-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] 
Sent: Friday, January 16, 2004 2:20 PM
To: Wallace, Brian S.
Cc: [EMAIL PROTECTED]
Subject: Re: [squid-users] Squid/WCCP/Cisco Problem

On Fri, 16 Jan 2004, Wallace, Brian S. wrote:

> Our networking group has configured our Cisco router to do WCCP V2
with
> L2 redirection.  Due to the lack of a Solaris GRE module and for
> performance reasons, we want to use L2 redirection at the router.

Then you need to use WCCPv2 and modify the Squid WCCPv2 patch slightly
to 
indicate L2 redirection rather than WCCP/GRE redirection. See the WCCPv2

internet-draft available from http://www.wrec.org/

Regards
Henrik

Re: [squid-users] Authentication

[trainier]

Would the smb/winbind helper be able to do what I'm asking?

Or.  Could you give me a little guidance on "writing a small helper that 
tells squid the password is expired".
I don't have much of an idea on what that means.  ;-)

TimR






Henrik Nordstrom <[EMAIL PROTECTED]>
01/15/2004 01:24 PM

 
To: [EMAIL PROTECTED]
cc: [EMAIL PROTECTED]
Subject:Re: [squid-users] Authentication


On Thu, 15 Jan 2004 [EMAIL PROTECTED] wrote:

> Is there a way for me to redirect to a specific URL if the user's 
password 
> is "blank" ??
>
> You suggested using an external ACL to block users with an expired 
> password.   Here's how I'm expiring passwords, since I'm using the NCSA 
> helper:
> 
> When I create a user, it dumps a username, a 'tab' and an expiration 
date 
> to a file called "expired".
> I have an agent that runs on a regular basis that watches the expired 
> file.  The agent checks the file by grepping for today via a pre 
formatted 
> date.
> If anything returns from the grep expression, it removes the password 
from 
> the user's entry in the password file.  A null password is assumed 
> expired.

What I would suggest is to change this slightly. Instead of using that 
agent which removes users from the password file, keep the users there and 

instead write a small helper to Squid to verify that the user account have 

not expired. Then redirect users failing this check to the change password 

page.

This gives you the mechanism that when a usier logs in with an expired 
account he is redirected to the change password page.

See the "external_acl_type", "acl external" and "deny_info" directives.

Regards
Henrik

[squid-users] Squid, FlashFXP, and SSL-FTP Servers

[devios]

Hello All,

I've got a Squid server running that has successfully proxied ssl connections to 
web pages via a browser.

Client -> PAT or NAT Firewall -> Squid -> SSL Website

It has also acted as allowed me to successfully establish FTP control 
connections via FlashFXP to two FTP servers and FXP data between the two 
systems.

Client (FlashFXP) -> PAT or NAT Firewall -> Squid -> FTP Server
 |   |
 |   |
 \-> PAT or NAT Firewall -> Squid -> FTP Server

Both of the above scenarios worked.

Now I want to repeat the second scenario, but one of the FTP Servers is an SSL 
FTP server and it is NOT working.

Client (FlashFXP) -> PAT or NAT Firewall -> Squid -> SSL FTP Server

 ||
 ||
 \-> PAT or NAT Firewall -> Squid -> FTP Server

Does anyone know if this is possible?

If so, would you please offer some insight as to how to accomplish the above 
third scenario?

ATdHvAaNnKcSe

Re: [squid-users] Squid/WCCP/Cisco Problem

[Henrik Nordstrom]

On Fri, 16 Jan 2004, Wallace, Brian S. wrote:

> Our networking group has configured our Cisco router to do WCCP V2 with
> L2 redirection.  Due to the lack of a Solaris GRE module and for
> performance reasons, we want to use L2 redirection at the router.

Then you need to use WCCPv2 and modify the Squid WCCPv2 patch slightly to 
indicate L2 redirection rather than WCCP/GRE redirection. See the WCCPv2 
internet-draft available from http://www.wrec.org/

Regards
Henrik

RE: [squid-users] URLS with double question mark don't work

[Derek Winkler]

Here's the web server logs in case you're interested...

2004-01-16 18:26:51 xx.x.x.x - W3SVC1 GET /WebID/sdiis.dll 200 6657 443
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) -
2004-01-16 18:26:54 xx.x.x.x - W3SVC1 GET /WebID/sdiis.dll 200 9408 443
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
https://torxm.algorithmics.com/exchange
2004-01-16 18:26:54 xx.x.x.x - W3SVC1 GET /WebID/sdiis.dll 200 6574 443
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
https://torxm.algorithmics.com/exchange

First entry fetches the pages, the next two fetch graphics for the page by
specifying the below URLs. The one that specifies the sdiis.dll by itself
works and displays the pages, the ones that try to fetch the graphics for
that page don't work. The ?GetPic?image= doesn't seem to work.

Any workarounds appreciated.

Thanks,

Derek

-Original Message-
From: Derek Winkler [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 5:16 PM
To: [EMAIL PROTECTED]
Subject: [squid-users] URLS with double question mark don't work


I'm using squid as a reverse proxy.

The software on the server uses URLs with two question marks in them and
they don't work.

Not sure if the question marks cause the problem.

Here's the URL...

https://x.algorithmics.com/WebID/sdiis.dll?GetPic?image=logo_purple

Can anyone tell me if these are a problem?

access.log entry for this URL...

1074204887.219 88 10.1.10.103 TCP_MISS/200 9413 GET
https://x.algorithmics.com/WebID/sdiis.dll? -
FIRST_UP_PARENT/x.algorithmics.com image/jpeg

Thanks,

Derek

[squid-users] Squid/WCCP/Cisco Problem

[Wallace, Brian S.]

Hi:

We have the following setup:

Solaris 8
Squid 2.5 Stable 4
IP Filter 3.4.33 pre 2

IP filter is installed with the following ipnat.conf configuration:

rdr ge0 0.0.0.0/0 port 80 -> 160.91.210.20 port 3128

Squid was configured with:

--enable-ipf-transparent --enable-wccp

The related squid.conf entries are:

# httpd_accel_port 80 (Default)
httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

wccp_router 160.91.210.1
wccp_version 2

Our networking group has configured our Cisco router to do WCCP V2 with
L2 redirection.  Due to the lack of a Solaris GRE module and for
performance reasons, we want to use L2 redirection at the router.

I have tested IP Filter without WCCP, and it works as expected with
Squid.  When we turned on WCCP, the router does not acknowledge the
Squid server.  Our network people have turned on debugging on the router
and got this information:

Jan 15 07:11:16: WCCP-EVNT:???: Unknown msg_type 7
on Vlan14 from 160.91.210.20

They then put a sniffer on the network and they see the following packet
coming from the Squid server every 10 seconds:

00 00 00 07  00 00 00 02 00 00 00 00 ... 00 00 00 00

They say that the 07 should be a 10 for the "Here I Am" message.  Is
this correct?  Also, they think the "00 00 00 02" should probably be "00
00 02 00", if that's suppose to be WCCP V2.

If we can get the handshaking going, I believe we have WCCP working with
L2 redirection.  I don't know if this is a Squid configuration issue or
a protocol problem.  Can anyone help us with this?

Thanks for your help,

Brian S. Wallace

Oak Ridge National Laboratory
P. O. Box 2008, MS 6025
Oak Ridge, Tennessee  37831-6025

Voice (865) 576-3193
Fax   (865) 241-4000

Re: [squid-users] Redirect logfiles to SQL-Server?

[Henrik Nordstrom]

On Fri, 16 Jan 2004 [EMAIL PROTECTED] wrote:

> is there a way to let squid write the logfiles directly to an
> MS-SQL-Server-Database?

Write a small perl program using File::Tail and the appropriate ODBC 
module for MS-SQL and dump the access logs into the database..

Regards
Henrik

Re: [squid-users] ACL req_mime_type not working

[Henrik Nordstrom]

On Fri, 16 Jan 2004, Nilesh wrote:

> Im very frusted here my user still can download mp3
> and avi files im not able to block i have switched to
> 2.4 to 2.5 but bad luck for me 
> the rep_mime_type ACL not working i have read the all
> docs search on google not found sloution 

> acl download req_mime_type -i ^mp3/avi/wma$

1. What you want is rep_mime_type, not req_mime_type.

2. The above is not a valid mime type. I think you are confusing mime
types and file extensions. MIME types define the type of the returned
content and is often (but not neccesarily) derived from the file
extension.

The mime type of the response is logged in access.log in the mime type 
column.

In addition, the above is not a valid regex unless your intention is to 
match the literal string "mp3/avi/wma" (which I doubt).


One example catching some of what you are looking for is

acl download rep_mime_type ^video/ ^audio/ 

Regards
Henrik

Re: [squid-users] Forward special URL to other proxy?

[Henrik Nordstrom]

On Fri, 16 Jan 2004 [EMAIL PROTECTED] wrote:

> I need to forward one special URL to one special proxyserver in an other
> location.

See cache_peer_access and never_direct directives.

Regards
Henrik

[squid-users] Off-Topic: Squidalyser dot100K.gif file missing

[Craig Sharp]

I realize that this is somewhat off topic but I need the dot100k.gif
file for Squidalyser.

If you have it please send it to me.

Thanks,

Craig

[squid-users] Redirect logfiles to SQL-Server?

[Stefan . Vogel]

Hello,

is there a way to let squid write the logfiles directly to an
MS-SQL-Server-Database?

Kind regards
Stefan

[squid-users] session problem

[Emilio Casbas]

Hi.

Our configuration is a squid proxys hierarchy of 3 levels, with switches 
balancing load in each level, it takes working more of a year without 
problems but now, we have a problem with an application done in 
Javascript that testing we have verified that it only works if it goes 
only through  a proxy or without balancing load (sticky option in 
switches), is some solution with squid for this?
Must be a problem of application that maintains the session but when it 
detects that it goes by a different proxy is cut.
we have proven the always_direct option for the domain in the first 
level, but it has not solved it.



Thanks in advance.
Emilio C.


smime.p7s
Description: S/MIME Cryptographic Signature

Re: [squid-users] IP to names in Access.log

[fire-eyes]

Ackim Chisha wrote:
Hello people,

Is it possible to have squid access.log show me the names in the hosts 
file rather than the IP addresses?

Rgds,
A.C
Yep. Look for log_fqdn in your config, and set it to on.

Note that if you want IP's on the local lan to reverse to hostnames, 
you'll need to have a dns server with a reverse zone for those ip's. 
Otherwise you will still get only the ip's, and at the same time, time 
will be wasted on every lookup.

Re: [squid-users] Squid redirect problem

[Kinkie]

Deepa D <[EMAIL PROTECTED]> writes:

> Hi,
>Squid is not closing the redirect children when it 
> is shutdown.Why is it so? Do I have to incorporate
> some code in the redirector program for this?

[...]

The redirectors should suicide when they receive EOF on stdin.

In PERL code:

#!/usr/bin/perl
&init();
while (<>) {
  &do_work($_);
}
exit(0);


-- 
kinkie (kinkie-squid [at] kinkie [dot] it)
Random fortune, unrelated to the message:
Why are you doing this to me?
Because knowledge is torture, and there must be awareness before
there is change.
-- Jim Starlin, "Captain Marvel", #29

[squid-users] IP to names in Access.log

[Ackim Chisha]

Hello people,

Is it possible to have squid access.log show me the names in the hosts 
file rather than the IP addresses?

Rgds,
A.C

RE: [squid-users] IE authentication problem

[Elsen Marc]

  
> 
> Hello all,
> 
> This problem may have already been discused later, bu I can't find any
> answer which works.
> 
> I have a Squid with radius auth.
> My clients are Internet Explorers 5.0 and 6.0 .
> 
> Sometimes, I don't know why and when, when clients start IE, the are
> prompted to authenticate themselves. If they have a correct
> login/password, then IE shows an error page. The user Then 
> has to click
> on refresh in order to access the page he asked.
> 
> I know that this problem is well known. But does anybody knows how to
> fix it ? And does anybody could tell me why and when this 
> problem occurs ?
> 
 http://www.squid-cache.org/Doc/FAQ/FAQ-5.html#ss5.13

 M.

 

[squid-users] IE authentication problem

[Stephane DESMET]

Hello all,

This problem may have already been discused later, bu I can't find any
answer which works.

I have a Squid with radius auth.
My clients are Internet Explorers 5.0 and 6.0 .

Sometimes, I don't know why and when, when clients start IE, the are
prompted to authenticate themselves. If they have a correct
login/password, then IE shows an error page. The user Then has to click
on refresh in order to access the page he asked.

I know that this problem is well known. But does anybody knows how to
fix it ? And does anybody could tell me why and when this problem occurs ?

Thx a lot for any help.

Regards,

-- 
Stephane DESMET
Responsable produits de sécurité
All Computing SAS
17, rue du Colisée - 75008 Paris
France
(+33)1 49 53 90 36
(+33)6 88 82 55 87
internet: www.allcomputing.fr

[squid-users] Squid redirect problem

[Deepa D]

Hi,
   Squid is not closing the redirect children when it 
is shutdown.Why is it so? Do I have to incorporate
some code in the redirector program for this?

   Regards and TIA,
   Deepa


Yahoo! India Mobile: Download the latest polyphonic ringtones.
Go to http://in.mobile.yahoo.com

[squid-users] Forward special URL to other proxy?

[Stefan . Vogel]

Hello,

I need to forward one special URL to one special proxyserver in an other
location.
This is because the targetadress only accepts connection from this one
proxy.

All other proxy should go through my squid box.

Can I configure something like this in squid.conf?

The only thing I know about to do this is a setting in our PROXY.PAC, what
I don't want to do if I don't really have to.


Kind regards
Stefan

[squid-users] ACL req_mime_type not working

[Nilesh]

Dear Sir,

Im very frusted here my user still can download mp3
and avi files im not able to block i have switched to
2.4 to 2.5 but bad luck for me 
the rep_mime_type ACL not working i have read the all
docs search on google not found sloution 
i can stop download only through URL urlpath_regex but
not trough req_mime_type
the pattern for req_mime_type 
acl aclname req_mime_type pattern 
but this didnt work 
can you tell me exact syntax
check my acls 

==
acl ourlan src 192.168.0.0/24
acl porn dstdom_regex "/home/squid/porn1"
#acl mp3 urlpath_regex -i \.mp3$ \.wma$ \.mpeg \.dat
\.avi
acl download req_mime_type -i ^mp3/avi/wma$


http_access allow ourlan !porn 
http_access deny porn
#http_access deny mp3
http_access deny all
http_reply_access deny download




__
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus

[squid-users] Some questions about Squid, NTLM and AD

[Rodrigo Royo, Diego]

Hi,

We are testing Squid proxy, we use NTLM authentication ( by Samba 3.0. ) in our AD. It 
work fine but we have some issues for resolving.

1) We use internet explorer 6.0 SP1 and randomly an authentication pop-up appears, the 
user have just to cancel it and it works but we want to avoid it appearing.

2) We use Websense for content web filtering. It works fine to, but we don't obtain 
user information in reports. The Websense support team said that we have to pass the 
user to websense in a \ , not in a \ format. Is it 
possible?
Thanks,
Diego

RE: [squid-users] Status of the squid ?

[Henrik Nordstrom]

On Fri, 16 Jan 2004, Elsen Marc wrote:

> Use cachemgr.cgi for this

Or SNMP if you prefer.

Regards
Henrik

RE: [squid-users] Status of the squid ?

[Elsen Marc]

> 
> Hi all,
> 
> How to see the status of the squid ? For example: how many request per
> second, how many hits ... ?

  Use cachemgr.cgi for this

  M.

 

RE: [squid-users] How to upgrade to Version 2.5.STABLE4

[Elsen Marc]

  
> Hi all,
> 
> I'm using Squid Cache: Version 2.5.STABLE3. I know that there 
> is a newer
> version, STABLE4 but dont know how to upgrade it. Is there a 
> way to upgrade
> it or I have to rebuilt it ?
> 
  Basically you have to rebuild it , but you can use your existing
  squid.conf and cache dir(s)

  M. 

[squid-users] Status of the squid ?

[aiggno]

Hi all,

How to see the status of the squid ? For example: how many request per
second, how many hits ... ?

Please help.
Regards,
Aiggno

[squid-users] How to upgrade to Version 2.5.STABLE4

[aiggno]

Hi all,

I'm using Squid Cache: Version 2.5.STABLE3. I know that there is a newer
version, STABLE4 but dont know how to upgrade it. Is there a way to upgrade
it or I have to rebuilt it ?

Thanks,
Regards,
Aiggno

Re: [squid-users] listening to more than 1 interface

[Henrik Nordstrom]

On Fri, 16 Jan 2004, Payal Rathod wrote:

> Yes I have already read that. But I am looking for exact syntax.

The exact syntax is documented there.

> "You may specify multiple socket addresses on multiple lines."

Yes. And this is what you do.

> I want the exact syntax to make squid listen on say 127.0.0.1,
> 192.168.10.10, 192.168.10.100

http_port 127.0.0.1:3128
http_port 192.168.10.10:3128
http_port 192.168.10.100:3128

Regards
Henrik

RE: [squid-users] 99 % cpu usage squid

[Elsen Marc]

  
> 
> Hi
> I am using squid 2.5 stable 3 on red hat 7.3 dual processor 
> machine. In my top listing squid is reporting 99% cpu usage. 
> Any idea wats wrong ?
> Babar
 
   - Check mem. usage versus part in-the-swap for squid.
 i.e. :  has your squid enough mem. for the configured
 cache dir (sizes) ? Check the squid FAQ on this  issue

   - Any special/strange info in cache.log ?

   M.

[squid-users] 99 % cpu usage squid

[babar haq]

Hi
I am using squid 2.5 stable 3 on red hat 7.3 dual processor machine. In my top listing 
squid is reporting 99% cpu usage. Any idea wats wrong ?
Babar
-- 
___
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm