Re: [squid-users] caching windows update
nothing wrong may b your clients not using windows update ;-) On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi I have recently started using refresh pattern in squid configuration. My objective is to cache windows update for long time. Below is my configuration. refresh_pattern http://.*\.windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://office\.microsoft\.com/4320 80% 43200 refresh_pattern http://windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w?xpsp[0-9]\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w2ksp[0-9]\.microsoft\.com/4320 80% 43200 refresh_pattern http://download\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://download\.macromedia\.com/ 4320 80% 43200 refresh_pattern ftp://ftp\.nai\.com/ 4320 80% 43200 But when I check access.log file, I don't see any TCP_HIT for windowsupdate. Is there anything wrong in this configuration. Thanks - LK Disclaimer The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com ** -- Syed Kashif Ali Bukhari Jr. Network Officer Beaconet
RE: [squid-users] caching windows update
Thanks My maximum_object_size value is only 8MB. Should I increase this to get more caching? Will it affect performance if I increase to 32MB. Is there any farmula to calculate these values? Thanks - Lokesh -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:18 AM To: Lokesh Khanna Cc: squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update nothing wrong may b your clients not using windows update ;-) On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi I have recently started using refresh pattern in squid configuration. My objective is to cache windows update for long time. Below is my configuration. refresh_pattern http://.*\.windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://office\.microsoft\.com/4320 80% 43200 refresh_pattern http://windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w?xpsp[0-9]\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w2ksp[0-9]\.microsoft\.com/4320 80% 43200 refresh_pattern http://download\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://download\.macromedia\.com/ 4320 80% 43200 refresh_pattern ftp://ftp\.nai\.com/ 4320 80% 43200 But when I check access.log file, I don't see any TCP_HIT for windowsupdate. Is there anything wrong in this configuration. Thanks - LK Disclaimer The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com ** -- Syed Kashif Ali Bukhari Jr. Network Officer Beaconet Disclaimer The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com **
Re: [squid-users] caching windows update
yeah u can increase it but it will directly effact on your cache size and memory size so first read about somf FAQs on it thanks On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Thanks My maximum_object_size value is only 8MB. Should I increase this to get more caching? Will it affect performance if I increase to 32MB. Is there any farmula to calculate these values? Thanks - Lokesh -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:18 AM To: Lokesh Khanna Cc: squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update nothing wrong may b your clients not using windows update ;-) On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi I have recently started using refresh pattern in squid configuration. My objective is to cache windows update for long time. Below is my configuration. refresh_pattern http://.*\.windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://office\.microsoft\.com/4320 80% 43200 refresh_pattern http://windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w?xpsp[0-9]\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w2ksp[0-9]\.microsoft\.com/4320 80% 43200 refresh_pattern http://download\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://download\.macromedia\.com/ 4320 80% 43200 refresh_pattern ftp://ftp\.nai\.com/ 4320 80% 43200 But when I check access.log file, I don't see any TCP_HIT for windowsupdate. Is there anything wrong in this configuration. Thanks - LK Disclaimer The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com ** -- Syed Kashif Ali Bukhari Jr. Network Officer Beaconet Disclaimer The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com ** -- Syed Kashif Ali Bukhari Jr. Network Officer Beaconet
RE: [squid-users] caching windows update
Hi Below is my current access.log. My users are accessing windowsupdate but I don't see any TCP_HIT. Am I giving correct regexp?? Thanks ### 1124941122.867 1467 10.18.24.227 TCP_MISS/206 6604 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/212.73.245.94 application/octet-stream 1124941122.928 2155 10.18.3.120 TCP_MISS/206 10789 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/206.24.172.62 application/octet-stream 1124941123.294 1974 10.18.10.174 TCP_MISS/206 5474 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- kb885835-x86-enu_7dc658ed670f17f0b3d24c9d152998153534d79a.psf - DIRECT/208.175.188.29 application/octet-stream 1124941123.328243 10.18.26.166 TCP_MISS/200 441 HEAD http://download.windowsupdate.com/v6/microsoftupdate/b/selfupdate/AU/x86 /XP/en/musetup.cab? - DIRECT/212.73.245.94 application/octet-stream 1124941124.052 1293 10.18.19.229 TCP_MISS/206 4516 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- kb896727-x86-enu_2473de55b2d8b55a2ad8ebe40a4908cc126c39f1.psf - DIRECT/212.73.245.94 application/octet-stream -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:18 AM To: Lokesh Khanna Cc: squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update nothing wrong may b your clients not using windows update ;-) On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi I have recently started using refresh pattern in squid configuration. My objective is to cache windows update for long time. Below is my configuration. refresh_pattern http://.*\.windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://office\.microsoft\.com/4320 80% 43200 refresh_pattern http://windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w?xpsp[0-9]\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w2ksp[0-9]\.microsoft\.com/4320 80% 43200 refresh_pattern http://download\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://download\.macromedia\.com/ 4320 80% 43200 refresh_pattern ftp://ftp\.nai\.com/ 4320 80% 43200 But when I check access.log file, I don't see any TCP_HIT for windowsupdate. Is there anything wrong in this configuration. Thanks - LK Disclaimer The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com ** -- Syed Kashif Ali Bukhari Jr. Network Officer Beaconet Disclaimer The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions,
Re: [squid-users] caching windows update
Yes mine access.log also shows same ...though i had configured refresh_pattern option for windows update.. What might be the reason ? Thanks, uglyjoe [EMAIL PROTECTED] wrote: Hi Below is my current access.log. My users are accessing windowsupdate but I don't see any TCP_HIT. Am I giving correct regexp?? Thanks ### 1124941122.867 1467 10.18.24.227 TCP_MISS/206 6604 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/212.73.245.94 application/octet-stream 1124941122.928 2155 10.18.3.120 TCP_MISS/206 10789 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/206.24.172.62 application/octet-stream 1124941123.294 1974 10.18.10.174 TCP_MISS/206 5474 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- kb885835-x86-enu_7dc658ed670f17f0b3d24c9d152998153534d79a.psf - DIRECT/208.175.188.29 application/octet-stream 1124941123.328243 10.18.26.166 TCP_MISS/200 441 HEAD http://download.windowsupdate.com/v6/microsoftupdate/b/selfupdate/AU/x86 /XP/en/musetup.cab? - DIRECT/212.73.245.94 application/octet-stream 1124941124.052 1293 10.18.19.229 TCP_MISS/206 4516 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- kb896727-x86-enu_2473de55b2d8b55a2ad8ebe40a4908cc126c39f1.psf - DIRECT/212.73.245.94 application/octet-stream -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:18 AM To: Lokesh Khanna Cc: squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update nothing wrong may b your clients not using windows update ;-) On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi I have recently started using refresh pattern in squid configuration. My objective is to cache windows update for long time. Below is my configuration. refresh_pattern http://.*\.windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://office\.microsoft\.com/4320 80% 43200 refresh_pattern http://windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w?xpsp[0-9]\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w2ksp[0-9]\.microsoft\.com/4320 80% 43200 refresh_pattern http://download\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://download\.macromedia\.com/ 4320 80% 43200 refresh_pattern ftp://ftp\.nai\.com/ 4320 80% 43200 But when I check access.log file, I don't see any TCP_HIT for windowsupdate. Is there anything wrong in this configuration. Thanks - LK Disclaimer The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com **
RE: [squid-users] caching windows update
I think regexp is not correct We need to put refresh_pattern http://au\.download\.windowsupdate\.com/ 4320 80% 43200 As per my understanding this should give us tcp_hit for http://au.download.windowsupdate.com/* Thanks -Original Message- From: Raj Kumar Gurung [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 9:32 AM To: Lokesh Khanna Cc: [EMAIL PROTECTED]; squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update Yes mine access.log also shows same ...though i had configured refresh_pattern option for windows update.. What might be the reason ? Thanks, uglyjoe [EMAIL PROTECTED] wrote: Hi Below is my current access.log. My users are accessing windowsupdate but I don't see any TCP_HIT. Am I giving correct regexp?? Thanks ### 1124941122.867 1467 10.18.24.227 TCP_MISS/206 6604 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/212.73.245.94 application/octet-stream 1124941122.928 2155 10.18.3.120 TCP_MISS/206 10789 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/206.24.172.62 application/octet-stream 1124941123.294 1974 10.18.10.174 TCP_MISS/206 5474 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - kb885835-x86-enu_7dc658ed670f17f0b3d24c9d152998153534d79a.psf - DIRECT/208.175.188.29 application/octet-stream 1124941123.328243 10.18.26.166 TCP_MISS/200 441 HEAD http://download.windowsupdate.com/v6/microsoftupdate/b/selfupdate/AU/x8 6 /XP/en/musetup.cab? - DIRECT/212.73.245.94 application/octet-stream 1124941124.052 1293 10.18.19.229 TCP_MISS/206 4516 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - kb896727-x86-enu_2473de55b2d8b55a2ad8ebe40a4908cc126c39f1.psf - DIRECT/212.73.245.94 application/octet-stream ### # -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:18 AM To: Lokesh Khanna Cc: squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update nothing wrong may b your clients not using windows update ;-) On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi I have recently started using refresh pattern in squid configuration. My objective is to cache windows update for long time. Below is my configuration. refresh_pattern http://.*\.windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://office\.microsoft\.com/4320 80% 43200 refresh_pattern http://windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w?xpsp[0-9]\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w2ksp[0-9]\.microsoft\.com/4320 80% 43200 refresh_pattern http://download\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://download\.macromedia\.com/ 4320 80% 43200 refresh_pattern ftp://ftp\.nai\.com/ 4320 80% 43200 But when I check access.log file, I don't see any TCP_HIT for windowsupdate. Is there anything wrong in this configuration. Thanks - LK Disclaimer *** * The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com *** * ** Disclaimer
Re: [squid-users] caching windows update
:-D hm i can see user are assecing cab files you should use refresh_pattern for .cab and .dll from windows update i am seding you this refresh_pattern windowsupdate.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims refresh_pattern download.microsoft.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims On 8/25/05, Raj Kumar Gurung [EMAIL PROTECTED] wrote: Yes mine access.log also shows same ...though i had configured refresh_pattern option for windows update.. What might be the reason ? Thanks, uglyjoe [EMAIL PROTECTED] wrote: Hi Below is my current access.log. My users are accessing windowsupdate but I don't see any TCP_HIT. Am I giving correct regexp?? Thanks ### 1124941122.867 1467 10.18.24.227 TCP_MISS/206 6604 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/212.73.245.94 application/octet-stream 1124941122.928 2155 10.18.3.120 TCP_MISS/206 10789 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/206.24.172.62 application/octet-stream 1124941123.294 1974 10.18.10.174 TCP_MISS/206 5474 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- kb885835-x86-enu_7dc658ed670f17f0b3d24c9d152998153534d79a.psf - DIRECT/208.175.188.29 application/octet-stream 1124941123.328243 10.18.26.166 TCP_MISS/200 441 HEAD http://download.windowsupdate.com/v6/microsoftupdate/b/selfupdate/AU/x86 /XP/en/musetup.cab? - DIRECT/212.73.245.94 application/octet-stream 1124941124.052 1293 10.18.19.229 TCP_MISS/206 4516 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp- kb896727-x86-enu_2473de55b2d8b55a2ad8ebe40a4908cc126c39f1.psf - DIRECT/212.73.245.94 application/octet-stream -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:18 AM To: Lokesh Khanna Cc: squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update nothing wrong may b your clients not using windows update ;-) On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi I have recently started using refresh pattern in squid configuration. My objective is to cache windows update for long time. Below is my configuration. refresh_pattern http://.*\.windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://office\.microsoft\.com/4320 80% 43200 refresh_pattern http://windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w?xpsp[0-9]\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w2ksp[0-9]\.microsoft\.com/4320 80% 43200 refresh_pattern http://download\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://download\.macromedia\.com/ 4320 80% 43200 refresh_pattern ftp://ftp\.nai\.com/ 4320 80% 43200 But when I check access.log file, I don't see any TCP_HIT for windowsupdate. Is there anything wrong in this configuration. Thanks - LK Disclaimer The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com ** -- Syed Kashif Ali Bukhari Jr. Network Officer Beaconet
RE: [squid-users] caching windows update
Thanks. Will this rule also match any cab/exe/dll file from http://au.download.windowsupdate.com Or do i need to use refresh_pattern http://*\windowsupdate\.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims Thanks -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 9:45 AM To: Raj Kumar Gurung Cc: Lokesh Khanna; squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update :-D hm i can see user are assecing cab files you should use refresh_pattern for .cab and .dll from windows update i am seding you this refresh_pattern windowsupdate.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims refresh_pattern download.microsoft.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims On 8/25/05, Raj Kumar Gurung [EMAIL PROTECTED] wrote: Yes mine access.log also shows same ...though i had configured refresh_pattern option for windows update.. What might be the reason ? Thanks, uglyjoe [EMAIL PROTECTED] wrote: Hi Below is my current access.log. My users are accessing windowsupdate but I don't see any TCP_HIT. Am I giving correct regexp?? Thanks ### 1124941122.867 1467 10.18.24.227 TCP_MISS/206 6604 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/212.73.245.94 application/octet-stream 1124941122.928 2155 10.18.3.120 TCP_MISS/206 10789 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/206.24.172.62 application/octet-stream 1124941123.294 1974 10.18.10.174 TCP_MISS/206 5474 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - kb885835-x86-enu_7dc658ed670f17f0b3d24c9d152998153534d79a.psf - DIRECT/208.175.188.29 application/octet-stream 1124941123.328243 10.18.26.166 TCP_MISS/200 441 HEAD http://download.windowsupdate.com/v6/microsoftupdate/b/selfupdate/AU/x8 6 /XP/en/musetup.cab? - DIRECT/212.73.245.94 application/octet-stream 1124941124.052 1293 10.18.19.229 TCP_MISS/206 4516 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - kb896727-x86-enu_2473de55b2d8b55a2ad8ebe40a4908cc126c39f1.psf - DIRECT/212.73.245.94 application/octet-stream ### # -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:18 AM To: Lokesh Khanna Cc: squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update nothing wrong may b your clients not using windows update ;-) On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi I have recently started using refresh pattern in squid configuration. My objective is to cache windows update for long time. Below is my configuration. refresh_pattern http://.*\.windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://office\.microsoft\.com/4320 80% 43200 refresh_pattern http://windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w?xpsp[0-9]\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w2ksp[0-9]\.microsoft\.com/4320 80% 43200 refresh_pattern http://download\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://download\.macromedia\.com/ 4320 80% 43200 refresh_pattern ftp://ftp\.nai\.com/ 4320 80% 43200 But when I check access.log file, I don't see any TCP_HIT for windowsupdate. Is there anything wrong in this configuration. Thanks - LK Disclaimer *** * The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made
Re: [squid-users] caching windows update
just use refresh_pattern http://*\windowsupdate\.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Thanks. Will this rule also match any cab/exe/dll file from http://au.download.windowsupdate.com Or do i need to use refresh_pattern http://*\windowsupdate\.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims Thanks -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 9:45 AM To: Raj Kumar Gurung Cc: Lokesh Khanna; squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update :-D hm i can see user are assecing cab files you should use refresh_pattern for .cab and .dll from windows update i am seding you this refresh_pattern windowsupdate.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims refresh_pattern download.microsoft.com/.*\.(cab|exe|dll) 4320 100% 43200 reload-into-ims On 8/25/05, Raj Kumar Gurung [EMAIL PROTECTED] wrote: Yes mine access.log also shows same ...though i had configured refresh_pattern option for windows update.. What might be the reason ? Thanks, uglyjoe [EMAIL PROTECTED] wrote: Hi Below is my current access.log. My users are accessing windowsupdate but I don't see any TCP_HIT. Am I giving correct regexp?? Thanks ### 1124941122.867 1467 10.18.24.227 TCP_MISS/206 6604 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/212.73.245.94 application/octet-stream 1124941122.928 2155 10.18.3.120 TCP_MISS/206 10789 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - sp2-x86fre-usa-2180_056b2b38baf5620be85ddd58141b073bc0b06a1d.psf - DIRECT/206.24.172.62 application/octet-stream 1124941123.294 1974 10.18.10.174 TCP_MISS/206 5474 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - kb885835-x86-enu_7dc658ed670f17f0b3d24c9d152998153534d79a.psf - DIRECT/208.175.188.29 application/octet-stream 1124941123.328243 10.18.26.166 TCP_MISS/200 441 HEAD http://download.windowsupdate.com/v6/microsoftupdate/b/selfupdate/AU/x8 6 /XP/en/musetup.cab? - DIRECT/212.73.245.94 application/octet-stream 1124941124.052 1293 10.18.19.229 TCP_MISS/206 4516 GET http://au.download.windowsupdate.com/msdownload/update/v5/psf/windowsxp - kb896727-x86-enu_2473de55b2d8b55a2ad8ebe40a4908cc126c39f1.psf - DIRECT/212.73.245.94 application/octet-stream ### # -Original Message- From: Kashif Ali Bukhari [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:18 AM To: Lokesh Khanna Cc: squid-users@squid-cache.org Subject: Re: [squid-users] caching windows update nothing wrong may b your clients not using windows update ;-) On 8/25/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi I have recently started using refresh pattern in squid configuration. My objective is to cache windows update for long time. Below is my configuration. refresh_pattern http://.*\.windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://office\.microsoft\.com/4320 80% 43200 refresh_pattern http://windowsupdate\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w?xpsp[0-9]\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://w2ksp[0-9]\.microsoft\.com/4320 80% 43200 refresh_pattern http://download\.microsoft\.com/ 4320 80% 43200 refresh_pattern http://download\.macromedia\.com/ 4320 80% 43200 refresh_pattern ftp://ftp\.nai\.com/ 4320 80% 43200 But when I check access.log file, I don't see any TCP_HIT for windowsupdate. Is there anything wrong in this configuration. Thanks - LK Disclaimer *** * The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise
Re: [squid-users] caching windows update
, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com *** * ** Disclaimer The information contained in this e-mail, any attached files, and response threads are confidential and may be legally privileged. It is intended solely for the use of individual(s) or entity to which it is addressed and others authorised to receive it. If you are not the intended recipient, kindly notify the sender by return mail and delete this message and any attachment(s) immediately. Save as expressly permitted by the author, any disclosure, copying, distribution or taking action in reliance on the contents of the information contained in this e-mail is strictly prohibited and may be unlawful. Unless otherwise clearly stated, and related to the official business of Accelon Nigeria Limited, opinions, conclusions, and views expressed in this message are solely personal to the author. Accelon Nigeria Limited accepts no liability whatsoever for any loss, be it direct, indirect or consequential, arising from information made available in this e-mail and actions resulting there from. For more information about Accelon Nigeria Limited, please see our website at http://www.accelonafrica.com ** __ NOD32 1.1201 (20050825) Information __ This message was checked by NOD32 Antivirus System. http://www.nod32.com
[squid-users] Re: Which deny rule was used?
Ken Ara said: I have seen this question asked before but I have been unable to find the answer. Using squid-2.5.STABLE9 as reverse proxy, I try to defend my server against assorted nasties using lots of 'src' and 'browser' acls. But in access.log, when a 403 is reported, there seems to be no way to detect which rule has been invoked to deny access. Link a unique error document to the acl, using deny_info. Joost
[squid-users] Changing the port on which Squid starts during compilation
Hello, I want the port on which Squid starts to be 8080. Default it's port 3128. But I can't seem to get Squid compiled with the start-port on 8080. What I did: - Set the environment variable CACHE_HTTP_PORT to 8080 - ./configure --with-lots-of-options - Checked include/autoconf.h, in it I see '#define CACHE_HTTP_PORT 8080' - Compiled squid and started it, and it listens on 3128?? So what else do I need to change to get the default start port to 8080? I know I can set it with http_port in the configuration, but things like squidclient still need the -p argument then, and I wanted to avoid that. Joost
[squid-users] Re: Changing the port on which Squid starts during compilation
I forgot to mention: - OS: Linux RHES (Taroon update 4) - Squid version: 2.5STABLE10 Joost
Re: [squid-users] Changing the port on which Squid starts during compilation
On Thu, 2005-08-25 at 11:36 +0200, Joost de Heer wrote: Hello, I want the port on which Squid starts to be 8080. Default it's port 3128. But I can't seem to get Squid compiled with the start-port on 8080. What I did: - Set the environment variable CACHE_HTTP_PORT to 8080 - ./configure --with-lots-of-options - Checked include/autoconf.h, in it I see '#define CACHE_HTTP_PORT 8080' - Compiled squid and started it, and it listens on 3128?? So what else do I need to change to get the default start port to 8080? I know I can set it with http_port in the configuration, but things like squidclient still need the -p argument then, and I wanted to avoid that. Joost The relevant configuration directive is http_port. Please check your squid.conf file. Kinkie
Re: [squid-users] Changing the port on which Squid starts during compilation
I want the port on which Squid starts to be 8080. Default it's port 3128. But I can't seem to get Squid compiled with the start-port on 8080. What I did: - Set the environment variable CACHE_HTTP_PORT to 8080 - ./configure --with-lots-of-options - Checked include/autoconf.h, in it I see '#define CACHE_HTTP_PORT 8080' - Compiled squid and started it, and it listens on 3128?? There is a c file called cache_cf.c which having default configuration for squid.conf. I hope you can change 3128 to 8080 and build them. Try it. == Best Regards, Squid Runner Support squidrunner_dev at yahoo dot com Web: http://geocities.com/squidrunner_dev/ Support: runnersupport at gmail dot com SquidRunner - An Automatic Squid Builder == __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Re: [squid-users] Re: Which deny rule was used?
Thanks for these answers. --- Christoph Haas [EMAIL PROTECTED] wrote: Set 'debug_options ALL,1 33,2' in your squid.conf and run 'squid -k reconfig'. The cache.log should then tell you why an access is denied. So, Googling for debug_options ALL,1 33,2 I see this is an FAQ.. According to my debug-sections.txt, section 33 is Client-side Routines while section 28 is for Access Control. I need more info on the granularity possible with debug_options. I'm also thinking that, as we send a lot of denials for just a few ACLs, this could become another huge log. --- Joost de Heer [EMAIL PROTECTED] wrote: Link a unique error document to the acl, using deny_info. I like to use these for some ACLs - it's made easy with Webmin. But for others we don't want to let the evildoers know why they've been denied. What would be neat would be a way to log certain errors to cache.log rather than send an error page. Ken I have seen this question asked before but I have been unable to find the answer. Using squid-2.5.STABLE9 as reverse proxy, I try to defend my server against assorted nasties using lots of 'src' and 'browser' acls. But in access.log, when a 403 is reported, there seems to be no way to detect which rule has been invoked to deny access. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Re: [squid-users] Squid Dead, yet again,
Move all the cache files and log files to a mount point with 20 gig, The Drive is not full and I turned debug on in squid.conf just recently, Waiting for it to fail again. When it does, I'll look for the debug file. __ | John R. Van Lanen, Manager of Network Operations Voice: (330) 264-6047| | Tri-County Computer Services Association (TCCSA) Fax: (330) 264-5703| | Do not meddle in the affairs of dragons, E-mail:[EMAIL PROTECTED]| | because you are crunchy and taste good with ketchup | -- Running Squid Stable 2.5 ver 3 that comes with the Redhat ES 3.0 The issue I have is that squid will stop dead, Do a squid status and it shows squid dead but pid file exists squid: ERROR Could not send signal 0 to process 5530: (3) No such process, Have seen this before, restart squid or rebooting solves the issue for awhile, but, under load it occurrs again. The 5530 process number changes. Cache.log shows nothing but normal stuff. Searching the net shows others with the same issues but can't find a solution. Start squid in debug mode as, ./squid -NCd10 what are you getting there? Is your cache directory getting FULL? Check the directory size. == Best Regards, Squid Runner Support squidrunner_dev at yahoo dot com Web: http://geocities.com/squidrunner_dev/ Support: runnersupport at gmail dot com SquidRunner - An Automatic Squid Builder == __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around
[squid-users] Ncsa_auth problem
I am using squid2.5stable9 and receiving the following error in the log: WARNING: Cannot run '/usr/lib/squid/ncsa_auth' process. I am able to run the ncsa_auth from the terminal without failure. Additionally, I created a user and made it part of the squid group and was able to run the ncsa_auth as that user from the terminal. I have stopped iptables to make sure a firewall is not blocking the connection. I am able to ping the loopback address without failure. Proxy works without problem when I allow access based on client IP address. Any other ideas? Thank you, Glenn --- [This E-mail scanned for viruses by Declude Virus]
Re: [squid-users] Reverse Proxy Multiple IP Addresses
You can easily do this by starting multiple squid instances on your 1 squid box. Start squid with the -f option to point to a unique squid.conf for each IP address. Make sure each squid.conf has the correct http_port tag which is the ip address squid is listening on and the correct httpd_accel_host and httpd_accel_port for where its passing the info (to the real server) What I've done is create a ./conf/squid.conf ./cache ./logs for each squid instance and make sure all the tags in my squid.conf point to the correct ./cache ./logs etc. This keeps the cache and logs separate for each instance. - Original Message - From: Brad Taylor [EMAIL PROTECTED] To: Squid Users squid-users@squid-cache.org Sent: Wednesday, August 24, 2005 11:05 AM Subject: [squid-users] Reverse Proxy Multiple IP Addresses I'd like to know how to reverse proxy multiple IP addresses or run multiple squids on one box to do this. They are not different domains so I can't use host headers. Basically I'd like Squid to accept http requests on 3 different IP addresses and proxy for 3 different IP addresses (3 real servers). The 3 real servers have the same content so I would like to not have to have 3 separate squid boxes. Can Squid do this, I'm not able to find it anywhere in the FAQ or the Squid book. Thanks your any help.
[squid-users] Cache Authentitifaction LDAP
Hy, I use squid_ldap_auth for the authentification. I would like to know if squid carries out a request LDAP in each consulted page ? My conf ? auth_param basic program /usr/lib/squid/squid_ldap_auth -f uid=%s -b ou=cicoa,o=cnamts,c=fr -h 55.7.4.62 -p 389 auth_param basic children 10 auth_param basic realm Proxy Squid - Authentification pour accès Internet auth_param basic credentialsttl 1 hours I would not like only squid overload directory LDAP with requests LDAP with each consultation of pages. Thank you in advance, Gil From France
[squid-users] RE: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject
Thanks Dan. This may work. But have a couples questions. You said Make sure each squid.conf has the correct http_port tag which is the ip address squid is listening on Did you mean Port or IP address? I need to make sure squid is listening on all IP addresses. If I want three instances of squid I would need to setup the squid box with three IP addresses on one of the NICs, correct? When I start up each squid instance how do I know what of the three IP addresses it is going to use? -Original Message- From: Dan DeLong [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:54 AM To: Squid Users Subject: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject You can easily do this by starting multiple squid instances on your 1 squid box. Start squid with the -f option to point to a unique squid.conf for each IP address. Make sure each squid.conf has the correct http_port tag which is the ip address squid is listening on and the correct httpd_accel_host and httpd_accel_port for where its passing the info (to the real server) What I've done is create a ./conf/squid.conf ./cache ./logs for each squid instance and make sure all the tags in my squid.conf point to the correct ./cache ./logs etc. This keeps the cache and logs separate for each instance. - Original Message - From: Brad Taylor [EMAIL PROTECTED] To: Squid Users squid-users@squid-cache.org Sent: Wednesday, August 24, 2005 11:05 AM Subject: [squid-users] Reverse Proxy Multiple IP Addresses I'd like to know how to reverse proxy multiple IP addresses or run multiple squids on one box to do this. They are not different domains so I can't use host headers. Basically I'd like Squid to accept http requests on 3 different IP addresses and proxy for 3 different IP addresses (3 real servers). The 3 real servers have the same content so I would like to not have to have 3 separate squid boxes. Can Squid do this, I'm not able to find it anywhere in the FAQ or the Squid book. Thanks your any help.
[squid-users] RE: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject
One more thing, can I share the cache directories? Each real server will contain the content and therefore each cache would be the same. -Original Message- From: Dan DeLong [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:54 AM To: Squid Users Subject: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject You can easily do this by starting multiple squid instances on your 1 squid box. Start squid with the -f option to point to a unique squid.conf for each IP address. Make sure each squid.conf has the correct http_port tag which is the ip address squid is listening on and the correct httpd_accel_host and httpd_accel_port for where its passing the info (to the real server) What I've done is create a ./conf/squid.conf ./cache ./logs for each squid instance and make sure all the tags in my squid.conf point to the correct ./cache ./logs etc. This keeps the cache and logs separate for each instance. - Original Message - From: Brad Taylor [EMAIL PROTECTED] To: Squid Users squid-users@squid-cache.org Sent: Wednesday, August 24, 2005 11:05 AM Subject: [squid-users] Reverse Proxy Multiple IP Addresses I'd like to know how to reverse proxy multiple IP addresses or run multiple squids on one box to do this. They are not different domains so I can't use host headers. Basically I'd like Squid to accept http requests on 3 different IP addresses and proxy for 3 different IP addresses (3 real servers). The 3 real servers have the same content so I would like to not have to have 3 separate squid boxes. Can Squid do this, I'm not able to find it anywhere in the FAQ or the Squid book. Thanks your any help.
[squid-users] What antivirus solution do u recommend?
I found two solutions that use squid but which one i cant decide to use. One is squid+ dansguardian+clmav and the other is squd+HAVP. I want to scan all traffic through squid. Any recommendations?
[squid-users] RE: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject
I do see now that http_port allows an IP address in addition to a port. Thanks for the help. -Original Message- From: Dan DeLong [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:54 AM To: Squid Users Subject: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject You can easily do this by starting multiple squid instances on your 1 squid box. Start squid with the -f option to point to a unique squid.conf for each IP address. Make sure each squid.conf has the correct http_port tag which is the ip address squid is listening on and the correct httpd_accel_host and httpd_accel_port for where its passing the info (to the real server) What I've done is create a ./conf/squid.conf ./cache ./logs for each squid instance and make sure all the tags in my squid.conf point to the correct ./cache ./logs etc. This keeps the cache and logs separate for each instance. - Original Message - From: Brad Taylor [EMAIL PROTECTED] To: Squid Users squid-users@squid-cache.org Sent: Wednesday, August 24, 2005 11:05 AM Subject: [squid-users] Reverse Proxy Multiple IP Addresses I'd like to know how to reverse proxy multiple IP addresses or run multiple squids on one box to do this. They are not different domains so I can't use host headers. Basically I'd like Squid to accept http requests on 3 different IP addresses and proxy for 3 different IP addresses (3 real servers). The 3 real servers have the same content so I would like to not have to have 3 separate squid boxes. Can Squid do this, I'm not able to find it anywhere in the FAQ or the Squid book. Thanks your any help.
Re: [squid-users] What antivirus solution do u recommend?
I recommend using ICAP (Ineternet Content Adaption Protocol), a lightweight protocl to pass http message to ICAP servers for modification or adaption. For more information refer to ICAP RFC. Today, It is the preferred approach in commercial products. However, open source implementations are in early stage and not completely stable. There are two ICAP server projects on soruceforge at following addresses and ICAP client is now part of squid development projects (http://devel.squid-cache.org/icap/). - http://icap-server.sourceforge.net/ - http://c-icap.sourceforge.net/ --- Pavel M. Ivanchev [EMAIL PROTECTED] wrote: I found two solutions that use squid but which one i cant decide to use. One is squid+ dansguardian+clmav and the other is squd+HAVP. I want to scan all traffic through squid. Any recommendations? Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs
[squid-users] squid firwall rules for windowsupdate validation?
Hi All A bit off topic, but I've had some users complain that they are having problems when going to windowsupdate and it tries to validate their copy of windows. It seems like a timeout issue. What are people who are running squid as a firewall allowing through to allow for windowsupdate? Matt Ashfield Network Analyst Integrated Technology Services University of New Brunswick (506) 447-3033 [EMAIL PROTECTED]
Re: [squid-users] Changing the port on which Squid starts during compilation
So what else do I need to change to get the default start port to 8080? I know I can set it with http_port in the configuration, but things like squidclient still need the -p argument then, and I wanted to avoid that. The relevant configuration directive is http_port. Please check your squid.conf file. I know that, as I wrote before. But I want it to be the absolute default (the port that is used if no http_port is in the config file). Things like squidclient still require a -p option if you set a non-default port as http_port. Joost
Re: [squid-users] 2 different types of proxy_auth
Hi, At 23.58 24/08/2005, Covington, Chris wrote: Hi all, Is it possible to configure 2.5-10 to allow NTLM for users connecting from certain networks (let's say 10.2.5.0), and Basic Auth for users connecting from other networks (let's say 10.2.6.0)? If so, how? You can't do this with Squid. Regards Guido - Guido Serassio Acme Consulting S.r.l. - Microsoft Certified Partner Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY Tel. : +39.011.9530135 Fax. : +39.011.9781115 Email: [EMAIL PROTECTED] WWW: http://www.acmeconsulting.it/
Re: [squid-users] Changing the port on which Squid starts during compilation
Hi, At 11.36 25/08/2005, Joost de Heer wrote: Hello, I want the port on which Squid starts to be 8080. Default it's port 3128. But I can't seem to get Squid compiled with the start-port on 8080. What I did: - Set the environment variable CACHE_HTTP_PORT to 8080 - ./configure --with-lots-of-options - Checked include/autoconf.h, in it I see '#define CACHE_HTTP_PORT 8080' - Compiled squid and started it, and it listens on 3128?? So what else do I need to change to get the default start port to 8080? I know I can set it with http_port in the configuration, but things like squidclient still need the -p argument then, and I wanted to avoid that. Squid configure scripts are not perfect: you must also edit cf.data.pre and change the DEFAULT_IF_NONE value of http_port directive before make. Regards Guido - Guido Serassio Acme Consulting S.r.l. - Microsoft Certified Partner Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY Tel. : +39.011.9530135 Fax. : +39.011.9781115 Email: [EMAIL PROTECTED] WWW: http://www.acmeconsulting.it/
Re: [squid-users] 2 different types of proxy_auth
Hi all, Is it possible to configure 2.5-10 to allow NTLM for users connecting from certain networks (let's say 10.2.5.0), and Basic Auth for users connecting from other networks (let's say 10.2.6.0)? If so, how? You can't do this with Squid. Could I perhaps run 2 instances of Squid, one using NTLM and the other using Basic? What needs to be duplicated when running multiple instances? thanks --- Chris Covington IT Plus One Health Management 75 Maiden Lane Suite 801 NY, NY 10038 646-312-6269 http://www.plusoneactive.com
Re: [squid-users] What antivirus solution do u recommend?
* On 25/08/05 18:09 +, Pavel M. Ivanchev wrote: I found two solutions that use squid but which one i cant decide to use. One is squid+ dansguardian+clmav and the other is squd+HAVP. I want to scan all traffic through squid. Any recommendations? Did you say all traffic, or all http traffic? -Wash http://www.netmeister.org/news/learn2quote.html -- +==+ |\ _,,,---,,_ | Odhiambo Washington[EMAIL PROTECTED] Zzz /,`.-'`'-. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922 '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121 +==+ Right now I'm having amnesia and deja vu at the same time. -- Steven Wright
RE: [squid-users] Cache Authentitifaction LDAP
-Original Message- From: ROUTIER Gilles [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 5:49 AM To: squid-users@squid-cache.org Subject: [squid-users] Cache Authentitifaction LDAP Hy, I use squid_ldap_auth for the authentification. I would like to know if squid carries out a request LDAP in each consulted page ? My conf ? auth_param basic program /usr/lib/squid/squid_ldap_auth -f uid=%s -b ou=cicoa,o=cnamts,c=fr -h 55.7.4.62 -p 389 auth_param basic children 10 auth_param basic realm Proxy Squid - Authentification pour accès Internet auth_param basic credentialsttl 1 hours You have specified credentials be cached for 1 hour. It goes something like this: * New user connects * Squid prompts for authentication * User provides authentication * Squid verifies data (LDAP Query) * Every subsiquent request for the next hour squid uses cached authentication data * After one hour if the same user attempts surfing squid sends new query to LDAP server I would not like only squid overload directory LDAP with requests LDAP with each consultation of pages. Thank you in advance, Gil From France Chris
Re: [squid-users] RE: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject
Brad, I think you're all set on the http_port tag (xx.xx.xx.xx:port) and yes you have to have multiple IP addresses on the box to handle the multiple squid instances. As far as sharing the cache directory, I don't know of any reason you can't. The best answer I can give you for why we have them separate is that we've always done it that way. Poor answer but the best I can give you. - Original Message - From: Brad Taylor [EMAIL PROTECTED] To: Dan DeLong [EMAIL PROTECTED]; Squid Users squid-users@squid-cache.org Sent: Thursday, August 25, 2005 11:15 AM Subject: [squid-users] RE: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject I do see now that http_port allows an IP address in addition to a port. Thanks for the help. -Original Message- From: Dan DeLong [mailto:[EMAIL PROTECTED] Sent: Thursday, August 25, 2005 8:54 AM To: Squid Users Subject: [SPAM] - Re: [squid-users] Reverse Proxy Multiple IP Addresses - Email found in subject You can easily do this by starting multiple squid instances on your 1 squid box. Start squid with the -f option to point to a unique squid.conf for each IP address. Make sure each squid.conf has the correct http_port tag which is the ip address squid is listening on and the correct httpd_accel_host and httpd_accel_port for where its passing the info (to the real server) What I've done is create a ./conf/squid.conf ./cache ./logs for each squid instance and make sure all the tags in my squid.conf point to the correct ./cache ./logs etc. This keeps the cache and logs separate for each instance. - Original Message - From: Brad Taylor [EMAIL PROTECTED] To: Squid Users squid-users@squid-cache.org Sent: Wednesday, August 24, 2005 11:05 AM Subject: [squid-users] Reverse Proxy Multiple IP Addresses I'd like to know how to reverse proxy multiple IP addresses or run multiple squids on one box to do this. They are not different domains so I can't use host headers. Basically I'd like Squid to accept http requests on 3 different IP addresses and proxy for 3 different IP addresses (3 real servers). The 3 real servers have the same content so I would like to not have to have 3 separate squid boxes. Can Squid do this, I'm not able to find it anywhere in the FAQ or the Squid book. Thanks your any help.
Re: [squid-users] squid firwall rules for windowsupdate validation?
Hi!! Windows Update really has problems authenticating to squid, so you need to use some rules in order to get it working. The rules that we are using are the following: acl WindowsUpdateSites dstdomain .windowsupdate.com .windowsupdate.microsoft.com .update.microsoft.com Then, before the http_access rule that requires user authentication, use this one http_access allow WindowsUpdateSites Regards, Carlos. 2005/8/25, Matt Ashfield [EMAIL PROTECTED]: Hi All A bit off topic, but I've had some users complain that they are having problems when going to windowsupdate and it tries to validate their copy of windows. It seems like a timeout issue. What are people who are running squid as a firewall allowing through to allow for windowsupdate? Matt Ashfield Network Analyst Integrated Technology Services University of New Brunswick (506) 447-3033 [EMAIL PROTECTED]
[squid-users] cache peering question
Hi list i have configured two squid servers running Redhat 9.My current configuration for cache_peer is as : CACHE 1: cache_peer cache2.xxx.comsibling3128 3130 proxy-only icp_port 3130 CACHE 2: cache_peer cache1.xxx.comsibling3128 3130 proxy-only icp_port 3130 Both have GRE tunnels with cisco router.And we could see that the cisco is behaving as it should with HASH ALLOTMENT of 50% share to each proxy server. But when i checked at the cachemgr.cgi menu, i could see large difference in the number of clients accessing the cache.Is it normal ? or do i need to tweak some configurations. Thanks in advance.
Re: [squid-users] caching windows update
At 02:32 AM 8/25/2005, Raj Kumar Gurung wrote: Yes mine access.log also shows same ...though i had configured refresh_pattern option for windows update.. What might be the reason ? Because the entire update is too big to cache and the client is trying to fetch it in small pieces. This can tie Squid in knots, as I've demonstrated in an earlier thread. --Brett Glass
