AW: [squid-users] Processes don`t start

2004-08-02 Thread Werner . Rost
Check your startup scripts.

In squid 2.5 squid executable has moved to .../squid/sbin directory.
Probably you actually start the 2.4 executable which is located in
.../squid/bin


Mit freundlichem Gruß/Yours sincerely
Werner Rost
GM-FIR - Netzwerk
 
ZF Boge Elastmetall GmbH
Friesdorfer Str. 175, 53175 Bonn, Deutschland/Germany
Telefon/Phone +49 228 3825 - 420, Telefax/Fax +49 228 3825 - 398
[EMAIL PROTECTED]
 



-Ursprüngliche Nachricht-
Von: Petri Välisuo [mailto:[EMAIL PROTECTED] 
Gesendet: Freitag, 30. Juli 2004 22:47
An: [EMAIL PROTECTED]
Betreff: Re: [squid-users] Processes don`t start


On Fri, 30 Jul 2004, Marcos Monteiro da Cruz wrote:

 After I upgraded squid 2.4 to 2.5 in a Debian Linux, everytime I try 
 to start the squid process it does start but it is automactily killed. 
 I tried your FAQ page and tried to find something about the problem in 
 the Debian page, but I couldn`t find anything of value. Also, I saw 
 that there is no debian pakage for installing squid 2.5; is it because 
 it just can`t run under Debian? Any kind of information would be very 
 valuable for me.

2.5 do run in Debian and so does squid 3. But I guess that the problem is
that you might have forgotten to do some final configurations before
starting squid.

Have you checked that the user that is executing squid have vrite access to
log directory and spool (cache) directory? Does those directories exist?
Have you initialized the cache with squid -z command? If you aren't sure
where the squid writes log files, where the spool directory is, and what is
the squid user please specify them explicitely in the squid.conf.

Regards
   -petri

-- 
Petri Välisuo [EMAIL PROTECTED] +358 44 767 7774
PGP: http://www.wasalab.com/~petri/gpg_public_key.txt
ICQ: 176287479


RE: [squid-users] Blocking language/script

2004-08-02 Thread Elsen Marc

 
 
 Is squid capable to block languages or scripts such as Java, 
 javascript,
 etc...
 
 I have some users using Internet Explorer who suddenly can not use the
 Yahoo Webmail... i.e... since Yahoo!mail upgrade mailbox for their
 users, some of our users can not suddenly delete their mailbox, reply
 a post from Internet Explorer.
 
 I also, tried myself, using Konqueror (well, I think it was Konqueror)
 , and got the same problem. When switching to Galeon, I can use Yahoo
 Webmail without blockage...
 
 Is it squid that blocks languages and scripts? How to block/unblock
 langueges/scripts from squid?
 

  Squid can't do that, as it would involve opening and-going-into objects
to alter content. That's not SQUID's business. Acl's can be mode to block
on extension , mime type e.d; but squid can't or doesn't go as far as you want.

M.


RE: [squid-users] redirect to a proxy

2004-08-02 Thread Elsen Marc

 
 Hello,
 
 I've got 2 proxies SQUID 2.5, a principal and a secondary.
 
 All the traffics go to the principal, but i want to use the 
 secondary if the
 principal has not connection to internet.
 
 For exemple : if the connection of the principal is down, a 
 script changes
 the squid.conf in order to redirect the request to the secondary.
 

That's kind of collisional what you formulate,since when squid is down,
it won't be able to redirect requests either.
We provide a master SQUID box and a backup box, using proxy configuration , in the
browser to provide the backup squid box , as a fallback proxy cache for web access.

M.
 


Re: [squid-users] Squid does not use cache dir(WAS: Squid problem regarding memory usages)

2004-08-02 Thread Henrik Nordstrom
On Sun, 1 Aug 2004, Diamond King wrote:

 It successfully changed to use 5120 file descriptors.
 Now, the question is squid did not use the assigned
 6GB  cache dir. Im not saying Squid didnt cache
 anything. Here's the excerpt of access.log file
 entries :-

Maybe this?

http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ufs_no_valid_dir

Regards
Henrik



Re: [squid-users] squid don't cache

2004-08-02 Thread Abdock
what version of squid are u using ?


-Original message-
From: nx13372 [EMAIL PROTECTED]
Date: Fri, 30 Jul 2004 15:52:19 +0300
To: [EMAIL PROTECTED]
Subject: [squid-users] squid don't cache

 Hi all,
 All i do, was:
 #/etc/init.d/squid stop
 #rm -fr /var/spool/squid
 #rm /var/log/squid
 #squid -z
 #/etc/init.d/squid restart
 Squid starts ok.
 Now squid works, but don't cache. The
 #du -sh /var/spool/squid is always 16452!
 Since i have 3 squid.conf.x in /etc/squid/ i already copy an older 
 configuration for squid.conf, but thas nothing wrong with my actual 
 squid.conf. It's working about 1 year. The owner and group of all 
 related squid files is proxy.
 I'm using Debian Sid and when i upgrade squid i always keep my 
 configuration file.
 It's a transparent proxy, and my rules in iptables are correct (are the 
 same!).
 
 thanks in advance
 
 The last lines in cache.log:
 2004/07/29 16:36:52|   store_swap_size = 0k
 2004/07/29 16:36:52| storeLateRelease: released 0 objects
 2004/07/30 08:54:41| Starting Squid Cache version 2.5.STABLE6 for 
 i386-debian-linux-gnu...
 2004/07/30 08:54:41| Process ID 20649
 2004/07/30 08:54:41| With 1024 file descriptors available
 2004/07/30 08:54:41| DNS Socket created at 0.0.0.0, port 33003, FD 5
 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf
 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf
 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf
 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf
 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf
 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf
 2004/07/30 08:54:41| User-Agent logging is disabled.
 2004/07/30 08:54:41| Referer logging is disabled.
 2004/07/30 08:54:41| Unlinkd pipe opened on FD 10
 2004/07/30 08:54:41| Swap maxSize 4096 KB, estimated 3150769 objects
 2004/07/30 08:54:41| Target number of buckets: 157538
 2004/07/30 08:54:41| Using 262144 Store buckets
 2004/07/30 08:54:41| Max Mem  size: 393216 KB
 2004/07/30 08:54:41| Max Swap size: 4096 KB
 2004/07/30 08:54:41| Local cache digest enabled; rebuild/rewrite every 
 3600/3600 sec
 2004/07/30 08:54:41| Rebuilding storage in /var/spool/squid (DIRTY)
 2004/07/30 08:54:41| Using Least Load store dir selection
 2004/07/30 08:54:41| Current Directory is /
 2004/07/30 08:54:41| Loaded Icons.
 2004/07/30 08:54:41| Accepting HTTP connections at 0.0.0.0, port 3128, 
 FD 11.
 2004/07/30 08:54:41| Accepting HTTP connections at 0.0.0.0, port 80, FD 12.
 2004/07/30 08:54:41| Accepting ICP messages at 0.0.0.0, port 3130, FD 13.
 2004/07/30 08:54:41| HTCP Disabled.
 2004/07/30 08:54:41| WCCP Disabled.
 2004/07/30 08:54:41| Ready to serve requests.
 2004/07/30 08:54:41| Done scanning /var/spool/squid swaplog (0 entries)
 2004/07/30 08:54:41| Finished rebuilding storage from disk.
 2004/07/30 08:54:41| 0 Entries scanned
 2004/07/30 08:54:41| 0 Invalid entries.
 2004/07/30 08:54:41| 0 With invalid flags.
 2004/07/30 08:54:41| 0 Objects loaded.
 2004/07/30 08:54:41| 0 Objects expired.
 2004/07/30 08:54:41| 0 Objects cancelled.
 2004/07/30 08:54:41| 0 Duplicate URLs purged.
 2004/07/30 08:54:41| 0 Swapfile clashes avoided.
 2004/07/30 08:54:41|   Took 0.3 seconds (   0.0 objects/sec).
 2004/07/30 08:54:41| Beginning Validation Procedure
 2004/07/30 08:54:41|   Completed Validation Procedure
 2004/07/30 08:54:41|   Validated 0 Entries
 2004/07/30 08:54:41|   store_swap_size = 0k
 2004/07/30 08:54:42| storeLateRelease: released 0 objects
 2004/07/30 10:13:21| Preparing for shutdown after 1742 requests
 2004/07/30 10:13:21| Waiting 30 seconds for active connections to finish
 2004/07/30 10:13:21| FD 11 Closing HTTP connection
 2004/07/30 10:13:21| FD 12 Closing HTTP connection
 2004/07/30 10:13:52| Shutting down...
 2004/07/30 10:13:52| FD 13 Closing ICP connection
 2004/07/30 10:13:52| Closing unlinkd pipe on FD 10
 2004/07/30 10:13:52| storeDirWriteCleanLogs: Starting...
 2004/07/30 10:13:52|   Finished.  Wrote 0 entries.
 2004/07/30 10:13:52|   Took 0.0 seconds (   0.0 entries/sec).
 CPU Usage: 6.010 seconds = 3.830 user + 2.180 sys
 Maximum Resident Size: 0 KB
 Page faults with physical i/o: 456
 Memory usage for squid via mallinfo():
total space in arena:   30544 KB
Ordinary blocks:27775 KB228 blks
Small blocks:   0 KB  0 blks
Holding blocks:  1220 KB  2 blks
Free Small blocks:  0 KB
Free Ordinary blocks:2769 KB
Total in use:   28995 KB 95%
Total free:  2769 KB 9%
 2004/07/30 10:13:52| Squid Cache (Version 2.5.STABLE6): Exiting normally.
 2004/07/30 10:13:53| Starting Squid Cache version 2.5.STABLE6 for 
 i386-debian-linux-gnu...
 2004/07/30 10:13:53| Process ID 21311
 2004/07/30 10:13:53| With 1024 file descriptors 

Re: [squid-users] squid don't cache

2004-08-02 Thread Abdock

try to use Squid2.5stable5

regards,

 2004/07/30 08:54:41| Starting Squid Cache version 2.5.STABLE6 for 




Re: [squid-users] Re: [squid-users] Fw: time´s quotas??????

2004-08-02 Thread bimal pandit
dear  zilinex,

i am also intrested in your project and would like to check/test/use it.
could you send it for me with all the details like installation
procedure etc..

regards,

bimal

On Sat, 2004-07-31 at 18:28, zilinex wrote:
 I wrote an authentication program based on ncsa that calculates
 total time of connections per mounth for each user from the
 squid access.log files. if you want i can post it for you! ...
 I'm going to develop this program to be more efficient.maybe i use
 mysql too! ...
 but the first version of this program is available!..but
 the session times of squid is not a meaningful data for accounting!
 also have a look at squid2mysql program.. 
 it limits the users with respect to amount of downloads (daily,weekly and monthly)
 kind regardS
 
 PS :Dear Henrik..
 what do you mean  in terms of HTTP resuest?
 - Original Message -
 From: Henrik Nordstrom [EMAIL PROTECTED]
 Date: Sat, 31 Jul 2004 01:17:55 +0200 (CEST)
 To: [zuiga] [EMAIL PROTECTED]
 Subject: Re: [squid-users] Fw: times quotas??
 
 Re: On Thu, 29 Jul 2004, [Windows-1252] [zuiga] wrote:
 Re: 
 Re:  I want to assign times quotas but not using acl time, I just want to give
 Re:  100 hours/month for every user.  Is it Possible?
 Re: 
 Re: Define 100 hours/month in terms of HTTP requests.
 Re: 
 Re: Regards
 Re: Henrik
 Re: 



RE: [squid-users] Re: [squid-users] Fw: times quotas??????

2004-08-02 Thread Gert Brits
Hi There

Please could I have the link as well, cause I am very interested in the program.


Regards

Gert Brits


-Original Message-
From: bimal pandit [mailto:[EMAIL PROTECTED]
Sent: Saturday, July 31, 2004 3:07 PM
To: zilinex; squid user list
Subject: Re: [squid-users] Re: [squid-users] Fw: times quotas??


dear  zilinex,

i am also intrested in your project and would like to check/test/use it.
could you send it for me with all the details like installation
procedure etc..

regards,

bimal

On Sat, 2004-07-31 at 18:28, zilinex wrote:
 I wrote an authentication program based on ncsa that calculates
 total time of connections per mounth for each user from the
 squid access.log files. if you want i can post it for you! ...
 I'm going to develop this program to be more efficient.maybe i use
 mysql too! ...
 but the first version of this program is available!..but
 the session times of squid is not a meaningful data for accounting!
 also have a look at squid2mysql program.. 
 it limits the users with respect to amount of downloads (daily,weekly and monthly)
 kind regardS
 
 PS :Dear Henrik..
 what do you mean  in terms of HTTP resuest?
 - Original Message -
 From: Henrik Nordstrom [EMAIL PROTECTED]
 Date: Sat, 31 Jul 2004 01:17:55 +0200 (CEST)
 To: [zuiga] [EMAIL PROTECTED]
 Subject: Re: [squid-users] Fw: times quotas??
 
 Re: On Thu, 29 Jul 2004, [Windows-1252] [zuiga] wrote:
 Re: 
 Re:  I want to assign times quotas but not using acl time, I just want to give
 Re:  100 hours/month for every user.  Is it Possible?
 Re: 
 Re: Define 100 hours/month in terms of HTTP requests.
 Re: 
 Re: Regards
 Re: Henrik
 Re: 




Re: [squid-users] squid don't cache

2004-08-02 Thread nx13372
Abdock wrote:
what version of squid are u using ?
 

Debian Sid package version 2.5.STABLE6


Re: [squid-users] squid don't cache

2004-08-02 Thread nx13372
Abdock wrote:
try to use Squid2.5stable5
regards,
 

2004/07/30 08:54:41| Starting Squid Cache version 2.5.STABLE6 for 
   


 

I'm also posting in the debian users list. This could be a Debian 
specific problem!?


[squid-users] Squid reverse proxy limit

2004-08-02 Thread Kerscaven Marc
Hello,

I'm using squid/2.5.STABLE5 for a reverse proxy with
URL switching with squidGuard.

This linux squid server will be front of 30 web
servers, for the moment it use 15Mbps, CPU is 50%
idle.

I monitore the client tcp connect established with
RRDtools :
/bin/netstat -vatn | /bin/grep localip:80 | /bin/grep
-c ESTABLISHED

Squid dont't use more than 800 tcp connections.

Is-it possible to increase this limit ?

Thanks for your help.

Marc






Vous manquez d’espace pour stocker vos mails ? 
Yahoo! Mail vous offre GRATUITEMENT 100 Mo !
Créez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/

Le nouveau Yahoo! Messenger est arrivé ! Découvrez toutes les nouveautés pour 
dialoguer instantanément avec vos amis. A télécharger gratuitement sur 
http://fr.messenger.yahoo.com


Re: [squid-users] squid don't cache

2004-08-02 Thread nx13372
nx13372 wrote:
Abdock wrote:
try to use Squid2.5stable5
regards,
 

2004/07/30 08:54:41| Starting Squid Cache version 2.5.STABLE6 for   


 

I'm also posting in the debian users list. This could be a Debian 
specific problem!?

ok. It's a package bug.
Bjoern Schmidt already post this as a bug: #262342
thanks to all.


[squid-users] load balancing

2004-08-02 Thread Jeff Donovan
greetings
I have a new squid server i want to put in parallel with my existing 
system. i read most of the Docs and Faq's but still have not come up 
with a good understanding for my scenario.

I'm running a transparent cache with squid guard. My problem seems to 
be How do I split my traffic ? or how do i create a failover if one 
squid server becomes to busy?
here is my topology

--[ L3 def route]---[ squid1]--
			---[squid2]--
right now i my problem is that I have only one default route option 
coming from my layer 3 device. therefore I cannot split my subnets and 
force 1/2 to one interface and the other half to another.

I do have multiple cards in each squid box.
DNS round robin won't work in this setup because i am forcing all 
unknown traffic to squid1. (correct me if I'm wrong)

any advice?
---
jeff donovan
basd network operations
(610) 807 5571 x41
AIM  xtdonovan


Re: [squid-users] load balancing

2004-08-02 Thread Henrik Nordstrom
On Mon, 2 Aug 2004, Jeff Donovan wrote:

 I'm running a transparent cache with squid guard. My problem seems to 
 be How do I split my traffic?

This you do in your router in case of transparently intercepting proxies.. 
If you are not using a TCP interception device capable of tracking 
individual connections then this is most easily done by splitting the 
destination IP address space among the caches. CARP does so automatically 
for you.

 or how do i create a failover if one squid server becomes to busy?

best done by an external load balancer. Linux Virtual Server is a good 
free one, highend routers  switches usually also have reasonable load 
balancing functions built in.

Regards
Henrik



Re: [squid-users] load balancing

2004-08-02 Thread Jeff Donovan
On Aug 2, 2004, at 9:25 AM, Henrik Nordstrom wrote:
On Mon, 2 Aug 2004, Jeff Donovan wrote:
I'm running a transparent cache with squid guard. My problem seems to
be How do I split my traffic?
This you do in your router in case of transparently intercepting 
proxies..
If you are not using a TCP interception device capable of tracking
individual connections then this is most easily done by splitting the
destination IP address space among the caches. CARP does so 
automatically
for you.

or how do i create a failover if one squid server becomes to busy?
best done by an external load balancer. Linux Virtual Server is a good
free one, highend routers  switches usually also have reasonable load
balancing functions built in.
would this be a placed on a linux server in front of the two cache's or 
does it run on the same device as squid?

Unfortunately my layer 3 switch does not allow for multiple default 
routes or even a policy route. Otherwise i would have just routed my 
traffic to the new interface.
-j
---
jeff donovan
basd network operations
(610) 807 5571 x41
AIM  xtdonovan



[squid-users] most critical commands to monitor about squid Box

2004-08-02 Thread unixware
Dear all 

i want monitor squid box performance here is commands
i guess most critical to watch . 

1) top ( look at squid is not taking too much CPU )

2) vmstat  ( make sure machine is not swaping too
much)

or 

2) free -m 

3) iostat -x (look for await , svctime

4) uptime (load average is not above 3 i guess ) 

5) use cache manager to cache hists and median service
time . 

if other wants to add other suggestions it will
helpful

i have question how can i login in cache manager on
command line using squidclient

Regards

UX










__
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
http://promotions.yahoo.com/new_mail 


[squid-users] squid on moderate scales

2004-08-02 Thread Payal Rathod
Hi,
A friend of mine, a lab teacher, at a college is going to install squid
on her college's Mandrake 10.0 official machine. She will use the default
squid-2.5 Stable4 rpm cos' she is very new to unix. The problem is that
there will be around 300 students using it as a proxy server plus
around 25 teachers. Students will get access to a few sites and teachers
to all. Now, my question is that will the default squid bundled in the
OS be able to handle all the load? The machine is big, PIV 2Ghz with 1Gb swap
and fast SCSI drives with 512Mb RAM (a gift from a leading computer
company). This is the first time they are using a free OS in the
college and I will be giving help from outside for squid.conf.
Can someone share her/his experience with this load? The server will
just have a caching dns and maybe a dhcp server with the same (not
sure).

Thanks a lot for the help in advance.
With warm regards,
-Payal


[squid-users] Weighted redundant proxy auto-config script.

2004-08-02 Thread Peter Smith
For those who are interested, I have crafted a dynamic 
Auto-Configuration script for use in Apache using Perl.  Based on a 
random number, it will provide a user with a listing of proxies which 
may be weighted to determine their allocation.

Please see http://www.squid-cache.org/Doc/FAQ/FAQ-5.html#ss5.4
My script consists, basically, of two files--proxy.pac.pl and proxy; 
the names are mostly arbitrary.

proxy.pac.pl:
#!/usr/bin/perl
if( $ENV{ SCRIPT_NAME } =~ /\.pac$/ ) {
print Content-type: application/x-ns-proxy-autoconfig\n;
} else {
print Content-type: text/html\n;
}
print \n;
my %proxy = (), $total = 0;
open A, proxy or die Can not access proxy list.\n;
while( A ) {
chomp;
/^(\S+)\s+(\S+)$/;
$proxy{ $1 } = $2;
}
foreach $p ( sort keys %proxy ) {
$total += $proxy{ $p };
}
$val = rand() * $total;
$last = 0;
foreach $p ( sort keys %proxy ) {
if( $val  ( $proxy{ $p } + $last )  $val =$last ) {
 $primary=$p;
 push @list, $p;
} elsif( $val  ( $proxy{ $p } + $last ) ) {
 push @list, $p;
} elsif( $val =$last ) {
 push @tail, $p;
}
$last += $proxy{ $p };
}
for( $i=0; $i=$#tail; $i++ ) {
push @list, $tail[ $i ];
}
print '
function FindProxyForURL(url, host)
   {
   if (isPlainHostName(host) ||
dnsDomainIs(host, .domain.com) 
!localHostOrDomainIs(host, www.domain.com))
   return DIRECT;
   else
';
print ' return ';
for( $i=0; $i=$#list; $i++ ) {
print PROXY .$list[ $i ].:3128; 
}
print '
DIRECT;
}
';
proxy:
proxy1.domain.com:8080 25
proxy2.domain.com:8081 75
The 'proxy' file simply contains proxy entries with a weight seperated 
by a space. The weight value is arbitrary, the weights are added 
together to determine the value to be randomized against.

I hope this proves useful to someone.  As has been mentioned before 
there are many other scripts for doing proxy selection.  Please see 
http://www.squid-cache.org/Doc/FAQ/FAQ-5.html#ss5.5

Peter


signature.asc
Description: OpenPGP digital signature


Re: [squid-users] most critical commands to monitor about squid Box

2004-08-02 Thread Hendrik Voigtländer

unixware wrote:
Dear all 

i want monitor squid box performance here is commands
i guess most critical to watch . 

1) top ( look at squid is not taking too much CPU )
2) vmstat  ( make sure machine is not swaping too
much)
or 

2) free -m 

3) iostat -x (look for await , svctime
4) uptime (load average is not above 3 i guess ) 

5) use cache manager to cache hists and median service
time . 

if other wants to add other suggestions it will
helpful
i have question how can i login in cache manager on
command line using squidclient
Regards
UX
How about snmp? You can monitor your OS and the squid this way...
Regards, Hendrik Voigtländer


Re: [squid-users] squid on moderate scales

2004-08-02 Thread Hendrik Voigtländer
Payal Rathod wrote:
Hi,
A friend of mine, a lab teacher, at a college is going to install squid
on her college's Mandrake 10.0 official machine. She will use the default
squid-2.5 Stable4 rpm cos' she is very new to unix. The problem is that
there will be around 300 students using it as a proxy server plus
around 25 teachers. Students will get access to a few sites and teachers
to all.
Not familiar with mandrake, but we use debian with the package from the 
stable distro (woody). IMHO there is no reason to build your own squid 
if you can live with the provided release.

  Now, my question is that will the default squid bundled in the
OS be able to handle all the load? The machine is big, PIV 2Ghz with 1Gb swap
and fast SCSI drives with 512Mb RAM (a gift from a leading computer
company). This is the first time they are using a free OS in the
college and I will be giving help from outside for squid.conf.
Can someone share her/his experience with this load? The server will
just have a caching dns and maybe a dhcp server with the same (not
sure).
Same machine here, but with no swap but 1GB RAM.
We have around 1000 clients. FD Usage is about 300, this way I guess 
that I have never more than 150 clients accessing the cache simultaneously.
Works fine with a 5MBit adsl line, the only problem are huge downloads 
which I am unable to block.
If you limit the site for most of the clients (i.e. the students) this 
will be no problem for your machine.
Keep an eye on memory usage, i.e. don't make the cache_dirs to large.
What is the uplink bandwith?

Regards, Hendrik Voigtländer


[squid-users] porn filter

2004-08-02 Thread listas
Hi i wish to setup a porn filter of squid and i wish to know if anyone can help.

Thanks a lot.





Re: [squid-users] porn filter

2004-08-02 Thread Jeff Donovan
go to http://www.squidguard.org
it's easy
--j
On Aug 2, 2004, at 2:13 PM, [EMAIL PROTECTED] wrote:
Hi i wish to setup a porn filter of squid and i wish to know if anyone 
can help.

Thanks a lot.


---
jeff donovan
basd network operations
(610) 807 5571 x41
AIM  xtdonovan


Re: [squid-users] porn filter

2004-08-02 Thread fire-eyes
Dans Guardian works quite well, I am aware of an ISP that uses it to
filter all content for all of their users. In three years I've only ever
heard two complaints about improperly blocked pages.

On Mon, 2004-08-02 at 14:13, [EMAIL PROTECTED] wrote:
 Hi i wish to setup a porn filter of squid and i wish to know if anyone can help.
 
 Thanks a lot.



[squid-users] Not using first listed cache-directory while multiple are configured

2004-08-02 Thread Dautzenberg, John
Hi, 

I'm running Squid2.5 stable6 on Debian Linux 3.0r2 on a Dell2650 and 
using 3 

cache-directories where each has it's own disk beneath. See this 'df' : 

proxy2:~# df 
Filesystem   1k-blocks  Used Available Use% Mounted on 
/dev/sda2 35518624269060  35249564   1% / 
/dev/sdb6 33032196432240  30921972   2% 
/usr/local/squid/var/logs 
/dev/sdc5 35001476 98692  33124796   1% 
/usr/local/squid/cache1 
/dev/sdd5 35001476   1865408  31358080   6% 
/usr/local/squid/cache2 
/dev/sde5 35001476   1859088  31364400   6% 
/usr/local/squid/cache3 

Using this squid-server cache1 seems not to be used to write data to. 
When I 

change the order of the caches in squid.conf then the first listed in 
the 
conf-file will be 'ignored' to be used to save data to. So, i.e. when 
cache2 

is listed first, then cache2 don't get data written to it. The 
filesystem-type in squid is UFS for all cache-dirs. 
I also have a proxy1 server that has been setup exactly the same and 
that 
server also shows the same issue. 

Any idea's ? 

Thanks in advance, 

John Dautzenberg 




[squid-users] Not using first listed cache-directory while multiple are configured

2004-08-02 Thread Dautzenberg, John
Hi, 

I'm running Squid2.5 stable6 on Debian Linux 3.0r2 on a Dell2650 and 
using 3 

cache-directories where each has it's own disk beneath. See this 'df' : 

proxy2:~# df 
Filesystem   1k-blocks  Used Available Use% Mounted on 
/dev/sda2 35518624269060  35249564   1% / 
/dev/sdb6 33032196432240  30921972   2% 
/usr/local/squid/var/logs 
/dev/sdc5 35001476 98692  33124796   1% 
/usr/local/squid/cache1 
/dev/sdd5 35001476   1865408  31358080   6% 
/usr/local/squid/cache2 
/dev/sde5 35001476   1859088  31364400   6% 
/usr/local/squid/cache3 

Using this squid-server cache1 seems not to be used to write data to. 
When I 

change the order of the caches in squid.conf then the first listed in 
the 
conf-file will be 'ignored' to be used to save data to. So, i.e. when 
cache2 

is listed first, then cache2 don't get data written to it. The 
filesystem-type in squid is UFS for all cache-dirs. 
I also have a proxy1 server that has been setup exactly the same and 
that 
server also shows the same issue. 

Any idea's ? 

Thanks in advance, 

John Dautzenberg 




[squid-users] Re: most critical commands to monitor about squid Box

2004-08-02 Thread Adam Aube
unixware wrote:

 i have question how can i login in cache manager on
 command line using squidclient

squidclient mgr:

This will bring up a list of the pages of information available. To get the
General Runtime Information page, use:

squidclient mgr:info

Adam



Re: [squid-users] load balancing

2004-08-02 Thread Henrik Nordstrom
On Mon, 2 Aug 2004, Jeff Donovan wrote:

 would this be a placed on a linux server in front of the two cache's or 
 does it run on the same device as squid?

Both possibilities existsm

Regards
Henrik



[squid-users] Need to replace squid with more appropriat diagnositc program

2004-08-02 Thread josh
A while back I had problems with running squid on a Cobalt RaQ
XTR. Then I realized it had to do with how swap was triggered. Since
squid actually has a setting that tells squid how much ram to swallow
on startup it is a very good basic tester of available ram and swap funtion.

I have been using squid like this but it is not perfect. For instance
the reports and log files are not those of a diagnostic program. Can
someone suggest a better alternative for testing ram and disk swapping.


-- 
Josh Kuperman   
[EMAIL PROTECTED]



Re: [squid-users] porn filter

2004-08-02 Thread Hendrik Voigtländer
fire-eyes wrote:
Dans Guardian works quite well, I am aware of an ISP that uses it to
filter all content for all of their users. In three years I've only ever
heard two complaints about improperly blocked pages.
Any recommendation where to get free blacklists?
Regards, Hendrik Voigtländer


Re: [squid-users] Not using first listed cache-directory while multiple are configured

2004-08-02 Thread Henrik Nordstrom
On Mon, 2 Aug 2004, Dautzenberg, John wrote:

 When I change the order of the caches in squid.conf then the first
 listed in the conf-file will be 'ignored' to be used to save data to.
 So, i.e. when cache2 is listed first, then cache2 don't get data written
 to it. The filesystem-type in squid is UFS for all cache-dirs.  I also
 have a proxy1 server that has been setup exactly the same and that
 server also shows the same issue.

This is almost certainly one faset of the known ufs bug in 2.5.STABLE6

http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ufs_no_valid_dir

Regards
Henrik



Re: [squid-users] Need to replace squid with more appropriat diagnositc program

2004-08-02 Thread Henrik Nordstrom
On Mon, 2 Aug 2004, josh wrote:

 A while back I had problems with running squid on a Cobalt RaQ
 XTR. Then I realized it had to do with how swap was triggered. Since
 squid actually has a setting that tells squid how much ram to swallow
 on startup it is a very good basic tester of available ram and swap funtion.

Not really...

 I have been using squid like this but it is not perfect. For instance
 the reports and log files are not those of a diagnostic program. Can
 someone suggest a better alternative for testing ram and disk swapping.

RAM Test: memtest86 (on X86 type hardware only)

Swap test: the attached silly program could be useful..


General system health: Repeated Linux kernel compiles, in parallell to 
stress VM system even more..

Regards
Henrik
#include stdlib.h

int main(int argc, char **argv)
{
  char *buf;
  int i;
  int size;

  size=atoi(argv[1]);

  buf=calloc(size * 1024,1);

  for(;;)
  for(i=0;isize;i++) {
buf[i*1024]=buf[(size-i)*1024-1];
  }
}


Re: [squid-users] porn filter

2004-08-02 Thread Bosse Klykken
On Mon, Aug 02, 2004 at 09:57:12PM +0200, Hendrik Voigtländer wrote:
 Any recommendation where to get free blacklists?

http://www.linugen.com/contentfilter/
http://www.squidguard.org/blacklist/

.../Bosse


[squid-users] cascading squid - non-squid proxy server.

2004-08-02 Thread Jayakumar Dwarakadas
Hi,

  I would like to cascade squid to another non-squid
proxy server. Can I do that? If so, How do I
configure?

Browser - Squid - Non-squid Proxy server -
Internet.

Thanks,
Jayakumar.






__
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
http://promotions.yahoo.com/new_mail 


[squid-users] Random dropping of requests

2004-08-02 Thread A. Sajjad Zaidi
Greetings,

I have just taken charge of a squid machine that has been showing some
strange behaviour for the last few weeks. For one thing, cpu usage on
average is above 80% which seems abnormally high, even taking into
account the high traffic (about 2000 hits per minute).

Secondly, all traffic randomly stops for anywhere between a few seconds
and 20 minutes. Restarting squid during this time brings it back up, but
this isn't feasable when we have to do it a few times a day. Even if I
don't restart manually, it becomes available again by itself, but the
downtime is too costly.

Now for some details. The hardware is as follows:

2.7GHz x 2 Xeon CPUs
2GB RAM
36GB x 2, 10,000 rpm SCSI drives

One drive is used for the OS (Fedora Core 2, default kernel) while the
other is used for cache (32GB cache size, reiserfs with notail and
notime options).

Next, until a few days ago, the machine was running Squid 2.5-STABLE6
(without patches). It was configured to use diskd and various options
which I don't have availabe right at this minute.

Quite a few OS settings recommended for Squid are present, such as port
range (1024-65000), file descriptors (32768), tcp_max_syn_backlog (8192)
etc.

I tried switching to 2.5-STABLE5 with the 3 major patches since we have
this setup on another proxy, but got the same results. This morning, I
upgraded to the latest 2.5-STABLE6 version with all the current patches
and set the cache type to aufs (simple 'squid -z', not a reformat of the
underlying filesystem), but it solved neither the CPU usage issue, nor
the random drops.

Nothing unusual shows up in cache_log, access_log or any of the system
logs. Our network monitor also confirms that this isn't a network issue
and that requests are going to the proxy during the outages.

Unless someone can identify the problem here, I'll consider installing
Slackware and a custom kernel to rule out that it's an OS issue.

Any help will be appreciated.

Thanks,
-- 
A. Sajjad Zaidi
GnuPG Key ID: 0xD7AD0E13



RE: [squid-users] Random dropping of requests

2004-08-02 Thread Scott Phalen
I have just taken charge of a squid machine that has been showing some
strange behaviour for the last few weeks. For one thing, cpu usage on
average is above 80% which seems abnormally high, even taking into
account the high traffic (about 2000 hits per minute).

Secondly, all traffic randomly stops for anywhere between a few seconds
and 20 minutes. Restarting squid during this time brings it back up, but
this isn't feasable when we have to do it a few times a day. Even if I
don't restart manually, it becomes available again by itself, but the
downtime is too costly.

Nothing unusual shows up in cache_log, access_log or any of the system
logs. Our network monitor also confirms that this isn't a network issue
and that requests are going to the proxy during the outages.

--

Last week I had this same issue with close to the same traffic as you.  I
tried installing a new OS, newer/older version of squid and still had the
same issue.  I took the squid.conf during the high CPU load and commented
out every ACL and basically allowed all to pass thru.  I then turned on each
ACL one at a time and found one of my ACLs was causing the CPU load.  Not
exactly sure why it caused the issue but all has been well for a week now.

Regards,
Scott



[squid-users] Authentication

2004-08-02 Thread vs 1984
Hello

i works for a company which recently shifted to
linux+squid, but we are getting a problem in the squid
configuration- is there any way of authentication of
squid proxy users without entering the username and
password while accesing internet.
   We have developed a client module which can be used
for authentication into server, i.e. the client module
will ask for a username and password to access any
services running by server, so can we do the proxy
authentication by this client module OR  can we
develop any script wich can be run from workstations
and can be used to authenticate the proxy users, the
proxy authentication programm is samba.

Please reply
Thanks in advance



__
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail


RE: [squid-users] Authentication

2004-08-02 Thread Elsen Marc

 
 
 Hello
 
 i works for a company which recently shifted to
 linux+squid, but we are getting a problem in the squid
 configuration- is there any way of authentication of
 squid proxy users without entering the username and
 password while accesing internet.
We have developed a client module which can be used
 for authentication into server, i.e. the client module
 will ask for a username and password to access any
 services running by server, so can we do the proxy
 authentication by this client module OR  can we
 develop any script wich can be run from workstations
 and can be used to authenticate the proxy users, the
 proxy authentication programm is samba.
 
 
  http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.14

  M.


Re: [squid-users] cascading squid - non-squid proxy server.

2004-08-02 Thread Kiran Maraju

hi jayakumar,

U can acieve it by  configuring squid.conf with the following :
cache_peer ur non squid proxy server parent ur non squid proxy-port 0
no-query default proxy-only login=PASS  

kiran 

---


Quoting Jayakumar Dwarakadas [EMAIL PROTECTED]:

 Hi,
 
   I would like to cascade squid to another non-squid
 proxy server. Can I do that? If so, How do I
 configure?
 
 Browser - Squid - Non-squid Proxy server -
 Internet.
 
 Thanks,
 Jayakumar.
 
 
 
 
 
   
 __
 Do you Yahoo!?
 New and Improved Yahoo! Mail - Send 10MB messages!
 http://promotions.yahoo.com/new_mail 
 
 



RE: [squid-users] cascading squid - non-squid proxy server.

2004-08-02 Thread Elsen Marc

 
 
 Hi,
 
   I would like to cascade squid to another non-squid
 proxy server. Can I do that? If so, How do I
 configure?
 
 Browser - Squid - Non-squid Proxy server -
 Internet.
 
 
 Check :

   cache_peer

 directive in squid.conf.detault and comments.
 Use option 'no-query' if the proxy doesn't understand ICP.
 
 M.


Re: [squid-users] load balancing

2004-08-02 Thread Mohsin Khan
LVS can be placed on the same server, but it is good
if you a new Linux Box for it, I am not sure but last
time I used it, I need to recompile the kernel. Please
do check with the latest Docs.

And why can not you do the Roundrobin. It is always a
good option. And yeah most convinient, you can use a
PAC file.
--- Jeff Donovan [EMAIL PROTECTED] wrote:

 
 On Aug 2, 2004, at 9:25 AM, Henrik Nordstrom wrote:
 
  On Mon, 2 Aug 2004, Jeff Donovan wrote:
 
  I'm running a transparent cache with squid guard.
 My problem seems to
  be How do I split my traffic?
 
  This you do in your router in case of
 transparently intercepting 
  proxies..
  If you are not using a TCP interception device
 capable of tracking
  individual connections then this is most easily
 done by splitting the
  destination IP address space among the caches.
 CARP does so 
  automatically
  for you.
 
  or how do i create a failover if one squid server
 becomes to busy?
 
  best done by an external load balancer. Linux
 Virtual Server is a good
  free one, highend routers  switches usually also
 have reasonable load
  balancing functions built in.
 
 
 would this be a placed on a linux server in front of
 the two cache's or 
 does it run on the same device as squid?
 
 Unfortunately my layer 3 switch does not allow for
 multiple default 
 routes or even a policy route. Otherwise i would
 have just routed my 
 traffic to the new interface.
 -j
 ---
 jeff donovan
 basd network operations
 (610) 807 5571 x41
 AIM  xtdonovan
 
 


=
Regards, 
Mohsin Khan 
CCNA ( Cisco Certified Network Associate 2.0 ) 
http://pk.aaghaz.net 

Happy is the one who can smile






__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com