Re: [squid-users] Squid Version 2.5.STABLE10 and mail.ru web mail

2005-07-31 Thread Denis Vlasenko
On Monday 01 August 2005 08:06, Peter Khanin wrote:
> Hello!
> 
> I have installed Squid Version 2.5.STABLE10 with typical squid.conf from 
> squid 
> bundle. Everything works fine except mail.ru web mail... In 50% times shown 
> pages from mail.ru are incorrect, sometimes its just one gif from site, i.e. 
> from wheather prognosis instead new email page :( I have installed Mozilla 
> Firefox to mail.ru users computers instead IE (There are no such troubles 
> with this one), but usesrs wants to use IE... Please help me!

You need to spy on IE user's traffic with tcpdump to find out what a hell is 
going on.
--
vda



[squid-users] Squid Version 2.5.STABLE10 and mail.ru web mail

2005-07-31 Thread Peter Khanin
Hello!

I have installed Squid Version 2.5.STABLE10 with typical squid.conf from squid 
bundle. Everything works fine except mail.ru web mail... In 50% times shown 
pages from mail.ru are incorrect, sometimes its just one gif from site, i.e. 
from wheather prognosis instead new email page :( I have installed Mozilla 
Firefox to mail.ru users computers instead IE (There are no such troubles 
with this one), but usesrs wants to use IE... Please help me!

Peter


Re: [squid-users] url failures

2005-07-31 Thread Joe Acquisto
I don't get what you mean, please explain.  Do you mean their placement in the
squid.conf?  

By looking at the cache.log, I can see the rules being evaluated, or so it 
seems,
but in the end it says, for instance,  "the request GET  'blah' was ALLOWED 
because it matched 'localhost'"

What I am trying to do is limit certain PC's by IP address, to certain times of 
the day.  Certain times
on MWF and other times on TH and SA.

These are the lines I created, placed where the config.conf comments seemed to 
suggest:

acl DENYME src 192.168.0.10

acl DENYPC1 time MWF 13:00-15:00 
acl DENYPC2 time TH 15:00-17:00 
acl DENYPC3 time SA 13:00-17:00 

http access allow DENYME DENYPC1
http access allow DENYME DENYPC1
http access allow DENYME DENYPC1
http access deny DENYME

My other issue, with URL's was due to certain ports being not allowed.  Fixed 
that by allowing them
and doing a restart.

joea

>>> Daniel Navarro<[EMAIL PROTECTED]> 7/31/05 4:52:38 PM >>>
I may be wrong, but sometimes your rules are working
fine, just bad set and that confuses a lot.

Regards,




 --- Joe Acquisto <[EMAIL PROTECTED]> escribió:

> I cannot connect to some sites that have valid url. 
> Also, have instituted some ACL's, which don't appear
> to work.  
> 
> To attempt to determine why, I set squid.conf to
> "debug_options ALL,1 38,2" and did an "rcsquid
> restart", then tried to access the site.  I did not
> see additional debug info in the log.  Tried rcsquid
> stop then rcsquid start.  Still no joy.  Changed to
> "debug_options ALL,1 38,2 28,9" and did restart. 
> Still no additional info.
> 
> SUSe 8, v2.4STABLE7-93
> 
> What am I doing wrong?
> 
> joea
> 


__
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ¡gratis! 
Regístrate ya - http://correo.espanol.yahoo.com/ 


Re: [squid-users] url failures

2005-07-31 Thread Daniel Navarro
I may be wrong, but sometimes your rules are working
fine, just bad set and that confuses a lot.

Regards,




 --- Joe Acquisto <[EMAIL PROTECTED]> escribió:

> I cannot connect to some sites that have valid url. 
> Also, have instituted some ACL's, which don't appear
> to work.  
> 
> To attempt to determine why, I set squid.conf to
> "debug_options ALL,1 38,2" and did an "rcsquid
> restart", then tried to access the site.  I did not
> see additional debug info in the log.  Tried rcsquid
> stop then rcsquid start.  Still no joy.  Changed to
> "debug_options ALL,1 38,2 28,9" and did restart. 
> Still no additional info.
> 
> SUSe 8, v2.4STABLE7-93
> 
> What am I doing wrong?
> 
> joea
> 


__
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ¡gratis! 
Regístrate ya - http://correo.espanol.yahoo.com/ 


[squid-users] url failures

2005-07-31 Thread Joe Acquisto
I cannot connect to some sites that have valid url.  Also, have instituted some 
ACL's, which don't appear to work.  

To attempt to determine why, I set squid.conf to "debug_options ALL,1 38,2" and 
did an "rcsquid restart", then tried to access the site.  I did not see 
additional debug info in the log.  Tried rcsquid stop then rcsquid start.  
Still no joy.  Changed to "debug_options ALL,1 38,2 28,9" and did restart.  
Still no additional info.

SUSe 8, v2.4STABLE7-93

What am I doing wrong?

joea


[squid-users] squid -IE connection problem

2005-07-31 Thread Kumara Jayaweera
This is the same thing I sent to the list yesterday and got one reply. any
one have any suggestions still?
if any one replied me before please resend me the same since my systems
administer deletes my mails time to time from our internal server. sorry for
the repeat posts.
Kumara

Greetings! to all,
Please, look into my problem and help me. I am quite a newbie squidish.
1. my squid server is ready for serve requests.
2. it is on a firewall too.
3.WAN connection (DSL) from eth0 is with DHCP. but my LAN connection is
(eth1) with static IP.
4.client's access is given by MAC address, no other authentication is
required.
5. almost all the settings as per the default values in squid.conf. (pls,
somebody figure me out what is unnecessary for me in my squid.conf file
which I don't understand).
6. I want Firewall+proxy+caching for my LAN of 20 PCs.
7. My problem is I can not connect IE clients to the Squid server with my
settings (pls see, given below squid.conf file).
8. Since I am a newbie, I hope your generous assistance.
9. Pls, see below for my squid.conf file and squid -NCd1 command.

[EMAIL PROTECTED] ~]# /usr/local/squid/sbin/squid -NCd1
2005/07/30 17:56:57| Starting Squid Cache version 2.5.STABLE10 for
i686-pc-linux -gnu...
2005/07/30 17:56:57| Process ID 3901
2005/07/30 17:56:57| With 1024 file descriptors available
2005/07/30 17:56:57| Performing DNS Tests...
2005/07/30 17:56:57| Successful DNS name lookup tests...
2005/07/30 17:56:57| DNS Socket created at 0.0.0.0, port 32769, FD 4
2005/07/30 17:56:57| Adding nameserver 62.149.114.7 from /etc/resolv.conf
2005/07/30 17:56:57| Adding nameserver 212.118.133.101 from /etc/resolv.conf
2005/07/30 17:56:57| Unlinkd pipe opened on FD 9
2005/07/30 17:56:57| Swap maxSize 102400 KB, estimated 7876 objects
2005/07/30 17:56:57| Target number of buckets: 393
2005/07/30 17:56:57| Using 8192 Store buckets
2005/07/30 17:56:57| Max Mem  size: 32768 KB
2005/07/30 17:56:57| Max Swap size: 102400 KB
2005/07/30 17:56:57| Rebuilding storage in /usr/local/squid/var/cache
(CLEAN)
2005/07/30 17:56:57| Using Least Load store dir selection
2005/07/30 17:56:57| Set Current Directory to /usr/local/squid/var/cache
2005/07/30 17:56:57| Loaded Icons.
2005/07/30 17:56:57| Accepting HTTP connections at 0.0.0.0, port 3128, FD
11.
2005/07/30 17:56:57| Accepting ICP messages at 0.0.0.0, port 3130, FD 12.
2005/07/30 17:56:57| WCCP Disabled.
2005/07/30 17:56:57| Ready to serve requests.
2005/07/30 17:56:58| Done reading /usr/local/squid/var/cache swaplog (0
entries)
2005/07/30 17:56:58| Finished rebuilding storage from disk.
2005/07/30 17:56:58| 0 Entries scanned
2005/07/30 17:56:58| 0 Invalid entries.
2005/07/30 17:56:58| 0 With invalid flags.
2005/07/30 17:56:58| 0 Objects loaded.
2005/07/30 17:56:58| 0 Objects expired.
2005/07/30 17:56:58| 0 Objects cancelled.
2005/07/30 17:56:58| 0 Duplicate URLs purged.
2005/07/30 17:56:58| 0 Swapfile clashes avoided.
2005/07/30 17:56:58|   Took 0.8 seconds (   0.0 objects/sec).
2005/07/30 17:56:58| Beginning Validation Procedure
2005/07/30 17:56:58|   Completed Validation Procedure
2005/07/30 17:56:58|   Validated 0 Entries
2005/07/30 17:56:58|   store_swap_size = 0k
2005/07/30 17:56:58| storeLateRelease: released 0 objects

***
and my squid conf. file.
***
http_port 3128
icp_port 3130
udp_incoming_address 0.0.0.0
udp_outgoing_address 255.255.255.255
icp_query_timeout 0
maximum_icp_query_timeout 2000
mcast_icp_query_timeout 3000
dead_peer_timeout 10 seconds
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 32 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 320010 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 16 KB
ipcache_size 2048
ipcache_low 90
ipcache_high 95
fqdncache_size 1024
cache_replacement_policy lru
memory_replacement_policy lru
cache_dir ufs /usr/local/squid/var/cache 100 16 256
cache_access_log /usr/local/squid/var/logs/access.log
cache_log /usr/local/squid/var/logs/cache.log
cache_store_log /usr/local/squid/var/logs/store.log
emulate_httpd_log off
log_ip_on_direct on
mime_table /usr/local/squid/etc/mime.conf
log_mime_hdrs off
pid_filename /usr/local/squid/var/logs/squid.pid
debug_options ALL,1
log_fqdn on
client_netmask 255.255.255.0
ftp_list_width 32
ftp_passive on
ftp_sanitycheck on
#ftp_telnet_protocol on
dns_retransmit_interval 5 seconds
dns_timeout 2 minutes
#defnames off
hosts_file /etc/hosts
diskd_program /usr/local/squid/libexec/diskd
unlinkd_program /usr/local/squid/libexec/unlinkd
redirect_children 5
redirect_rewrites_host_header on
authenticate_cache_garbage_interval 1 hour
authenticate_ttl 1 hour
authenticate_ip_ttl 200 seconds
request_header_max_size 20 KB
request_body_max_size 0 KB
refresh_pattern ^ftp:  1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern .  0 20% 4320
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
negative_

[squid-users] Hotmail Login problem with Freebsd + wccpv1 + squid 2.5-stable10

2005-07-31 Thread Manoj Rajkarnikar
Hi all

I've been looking at this problem and going through the lists for 2 days 
now and still haven't managed to find a solution.

I've setup Squid 2.5-stable10 with Tos_Hit.patch from 
http://www.it-academy.bg/zph/ It compiled fine from port. Everything works 
fine except loging in to the hotmail, opening mailbox in yahoomail and 
loging in to mail.com. Using direct proxy in browser works fine.

I've used acl to deny caching of the hotmail domains too.

configs:

http_port 3128
acl hotmail_domains dstdomain .hotmail.msn.com
httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
header_access Accept-Encoding deny hotmail_domains

bal WCCP information:
 Router information:
 Router Identifier:   10.20.30.40
 Protocol Version:1.0

 Service Identifier: web-cache
 Number of Cache Engines: 1
 Number of routers:   1
 Total Packets Redirected:152593
 Redirect access-list:my-cache
 Total Packets Denied Redirect:   23662496
 Total Packets Unassigned:33
 Group access-list:   -none-
 Total Messages Denied to Group:  0
 Total Authentication failures:   0

There is no firewall between the cache and the internet. Please help.

Thanks 
Manoj Rajkarnikar