SV: [squid-users] SquidNT: How to run cachemgr.cgi on IIS6 (2003 server)
Thank you, Henrik You convinced me to check the acl's again - now it works fine ! By the way - is there a special FAQ (or other resources) for SquidNT. I have carefully read the book Squid, The Definitive Guide, but I am still missing some details regarding the interaction with Windows. Regards Kim C -Oprindelig meddelelse- Fra: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sendt: 6. november 2004 23:31 Til: Kim C Cc: [EMAIL PROTECTED] Emne: Re: [squid-users] SquidNT: How to run cachemgr.cgi on IIS6 (2003 server) On Sat, 6 Nov 2004, Kim C wrote: I am running SquidNT on 2003 server. It performs well, and the only problem is cachemgr.cgi. It runs normally with SquidClient, but with IIS6 I just get a message saying that cachemgr.cgi didn't produce any output. This happens both from localhost and from a remote location. It should work fine.. Is there any additional information in the IIS error logs? Are there any special configurations on IIS6 I should know about ? The cachemgr.cgi needs to be in a CGI directory, and the IIS needs to know to execute .cgi files. You can also try renamig it to cachemgr.exe Regards Henrik
Re: [squid-users] SquidNT: How to run cachemgr.cgi on IIS6 (2003 server)
Hi, At 23.30 06/11/2004, Henrik Nordstrom wrote: On Sat, 6 Nov 2004, Kim C wrote: I am running SquidNT on 2003 server. It performs well, and the only problem is cachemgr.cgi. It runs normally with SquidClient, but with IIS6 I just get a message saying that cachemgr.cgi didn't produce any output. This happens both from localhost and from a remote location. It should work fine.. Is there any additional information in the IIS error logs? Are there any special configurations on IIS6 I should know about ? The cachemgr.cgi needs to be in a CGI directory, and the IIS needs to know to execute .cgi files. You can also try renamig it to cachemgr.exe The problem is different: On IIS 6.0 all CGI extensions are denied by default for security reason. You should do the following steps: - Define the cgi-bin IIS Virtual Directory with read and CGI execute IIS permissions, ASP scripts are not needed, this automatically defines a cgi-bin IIS web application - Copy cachemgr.cgi into cgi-bin directory and look to file permissions: the IIS system account and SYSTEM must be able to read and execute the file - In IIS manager go to Web Service extensions and add a new Web Service Extension called Squid Cachemgr, add the cachemgr.cgi file and set the extension status to Allowed. Now it should work. Please note that IIS can execute CGI script with any file extension, so there is no need to rename a .cgi executable to .exe. Regards Guido - Guido Serassio Acme Consulting S.r.l. - Microsoft Certified Partner Via Gorizia, 69 10136 - Torino - ITALY Tel. : +39.011.3249426 Fax. : +39.011.3293665 Email: [EMAIL PROTECTED] WWW: http://www.acmeconsulting.it/
Re: [squid-users] Problems with proxy.pac
Sorry, but this has nothing to do with Squid.
can you tell me what isn't working with Mozilla? Maybe you just forget
the 'http://' before the autoconfig url...(this is required)
Bart
On Sat, 2004-11-06 at 19:23 +0530, Manoj Kumar Chitlangia wrote:
Hello,
My network has two proxy servers and i need to balance the traffic load
between these two. I used the following proxy.pac file.
function FindProxyForURL(url, host)
{
if (isPlainHostName(host) || dnsDomainIs(host, .iiita.ac.in) ||
dnsDomainIs(host, .local) || (host.substring(0,4) == 172.) || host ==
iiita.ac.in || host == 127.0.0.1)
return DIRECT;
if(myIpAddress.substring(0,6) == 172.19 || myIpAddress.substring(0,6)
== 172.24)
{
if (url.substring(0, 5) == http:) {
return PROXY 172.31.1.8:8080;
}
else if (url.substring(0, 4) == ftp:) {
return PROXY 172.31.1.8:8080;
}
else if (url.substring(0, 7) == gopher:) {
return PROXY 172.31.1.8:8080;
}
else if (url.substring(0, 6) == https: || url.substring(0, 6)
== snews:;) {
return PROXY 172.31.1.8:8080;
}
else {
return DIRECT;
}
}
if (url.substring(0, 5) == http:) {
return PROXY 172.31.1.1:8080;
}
else if (url.substring(0, 4) == ftp:) {
return PROXY 172.31.1.1:8080;
}
else if (url.substring(0, 7) == gopher:) {
return PROXY 172.31.1.1:8080;
}
else if (url.substring(0, 6) == https: || url.substring(0, 6) ==
snews:;) {
return PROXY 172.31.1.1:8080;
}
else {
return DIRECT;
}
}
The problem is that the above file works fine with Internet Explorer but
does not work with Mozilla, Opera and other browsers. Please suggest me
how to get rid of this problem and share the load of the netwok between
these two proxies.
NOTE: 172.19.X.X n 172.24.X.X are two VLANs on my network.
Manoj Chitlangia
[squid-users] HTTPD-ACCELERATOR OPTIONS
Hello, I have a http application server listening on two ports : 801080 Squid is located in front an configured as httpd accelerator http_port 80 http_port 1080 httpd_accel_host 172.16.0.201 httpd_accel_port 80 How can i redirect tcp80 incoming connexions on tcp80 and tcp1080 to tcp1080 Thanks, Lionel
Re[5]: [squid-users] squid3 pre3-20041102: WARNING: transparent proxying not supported (visolve not help)
Udv! HN Your Squid binary is not built with support for transparent proxying. Yeah, I realised as I've written in my previous letter. It wqas a mispelled compiler directive. -- Thomas Elias Title: System administrator, Programmer mailto: [EMAIL PROTECTED] Tel.: +3630/3299315 ICQ UIN: 206-714-459 Quote: A szmban a nyl, az teremben a vr! Vgzem a dolgomat, Te meg majd eldntd, hogy mennyit r! (TCS)
Re: [squid-users] HTTPD-ACCELERATOR OPTIONS
On Sun, 7 Nov 2004, Lionel Fairon wrote: I have a http application server listening on two ports : 801080 How can i redirect tcp80 incoming connexions on tcp80 and tcp1080 to tcp1080 httpd_accel_port 0 should work.. Regards Henrik
Re: [squid-users] HTTPD-ACCELERATOR OPTIONS
On Mon, 8 Nov 2004, Lionel Fairon wrote: Hello Henrik, Already tryed. (If you want virtual port support then specify the port as 0.) httpd_accel_port 0 interpreted as port=0 : Are you using httpd_accel_single_host? You can't with multiple servers.. In addition you need to use either httpd_accel_uses_host_header on or httpd_accel_host virtual for virtual port support to work in 2.5. This has all been cleaned up in the current Squid-3 development version (what will become Squid-3.0). Regards Henrik
Re: [squid-users] HTTPD-ACCELERATOR OPTIONS
On Mon, 8 Nov 2004, Henrik Nordstrom wrote: Are you using httpd_accel_single_host? You can't with multiple servers.. In addition you need to use either httpd_accel_uses_host_header on or httpd_accel_host virtual for virtual port support to work in 2.5. Actually, can you please file a bug report on this. You should not need to use either of the above host directives for virtual port support to work. http://www.squid-cache.org/bugs/ Regards Henrik
[squid-users] dnssserver and performance
briefly, the use of dnsserver, increase the performance really?
[squid-users] squid start process
How is the squid start process? I see that when it's running ps ax shows two squid process: 3558 ?Ss 0:00 /usr/sbin/squid -D -sYC 3560 ?S 0:00 (squid) -D -sYC What't is the first and second process? and what squid do when start (fork only one process?, i see in the code that squid calls fork() twice, but i can;t understand why)? Regards, diegows -- DiegoWS LANUX
[squid-users] WL-Proxy-SSL - telling weblogic about proxied ssl
Hi people I'm trying to set up squid as an http and ssl accelerator for WebCT Vista, which is an application running on BEA WebLogic. I want all connections between squid and weblogic to be plain text, on port 80. User connections will be a combination of SSL (https port 443) and plain http. Aparently, if I can get squid to add the following header to HTTPS requests, then things will be good: WL-Proxy-SSL: true My hope is that this will allow Weblogic to generate https urls when a user is using https, and http when they're using http. This is a non-trivial excercise when you're using squid as an accelerator, so you need some extra header to pass this info on to the backend appserver. How would I go about achieving this? Is it possible? Note that I've already written a perl redirector script but AFAIK there's no way to add extra headers with the redirector interface? Thank you Jesse -- ::: Jesse Reynolds +61 (0)414 669 790 ::: AIM - jessedreynolds ::: ::: Virtual Artists Pty Ltd, Adelaide ::: http://www.va.com.au :::
Re: [squid-users] Squid returning wrong content
Hi Henrik Nordstrom wrote: On Fri, 5 Nov 2004, Tobias Reckhard wrote: 30MB/min respectively) five minutes later, after which the proxy started answering requests for all sorts of pages (among them http://www.google.de) with the data of http://www.immowelt.de. Can you describe your environment in a little more detail, primarily if this is a single Squid with direct Internet connectivity or if there is any parent servers involved such as virus scanners or similar. Sure. This is one of a pair of Squids in a DMZ that is queried by three internal Squids. The machines also have a TrendMicro VirusWall installed and have its HTTP scanner configured as a parent type cache_peer. They are also siblings of one another. So it looks sort of like the following ASCII art: DMZ Squid #1 - VirusWall ---+ 3 internal ^| Squids -- | (sibling) +- Internet Squids V| DMZ Squid #2 - VirusWall ---+ Note that there are two machines running both DMZ Squid and VirusWall, with Squid as the front-end to the clients and the VirusWall fetching the content and scanning it for malware. Does that help? Why do you ask for virus scanners specifically? That makes it sound like you have a hunch of sorts. Regards, Tobias
RE: [squid-users] squid start process
How is the squid start process? I see that when it's running ps ax shows two squid process: 3558 ?Ss 0:00 /usr/sbin/squid -D -sYC 3560 ?S 0:00 (squid) -D -sYC What't is the first and second process? and what squid do when start (fork only one process?, i see in the code that squid calls fork() twice, but i can;t understand why)? Squid uses a parent child mechanism. The child process does the real thing. The parent watches the child, and takes action to restart it, if the child crashes for instances. M.
RE: [squid-users] dnssserver and performance
briefly, the use of dnsserver, increase the performance really? As extra processes are needed, I don't think so M.
