Re: [squid-users] squid cache too little
Matus UHLAR - fantomas schrieb: > Do you mean that only 10% of disk space is used on the partition you have cache_dir on? right. do you use it as proxy for outgoing requests, reverse proxy for incoming requests or both. If only the second, how much of data there are on backend servers? just for outgoing requests cache_peer 127.0.0.1 parent 8080 0 no-query no-delay proxy-only default what do you mean with this setup? hm, i thought thats the redirect to the dansguardian content filter. it works fine, yet. cache_dir ufs /cache 5 100 256 this means your squid should use max 50GB... how big the disk is? the partition is about 50 GB. Axel Böhme
[squid-users] all misses, no hits
Hi all, i am running the current version of Squid on Fedora 4. it has no direct internet access, and has to go via a parent proxy, and it's been running fine for weeks... until recently. the provider upgraded their proxy to one with content scanning (mcafee i think), but ever since, the Squid hasn't had a single cache hit (seriously, not one). the logs are full of TCP_MISS/200 and TCP_MISS/304 messages. there were no local config changes leading to this situation, only the change to the parent, so i'm presuming the parent is setting some kind of 'no cache' flag. can anyone suggest a way around this ? Thanks :) John.
[squid-users] digest auth IE problem accessing protected content
Hi all, New to squid, and am having a problem with IE6 accessing password protected content. I've searched the FAQ and the archives but not found an answer. Squid is configured to use digest authentication, which is working fine, however when visiting a site that itself requires basic authentication there are problems; IE prompts the user to enter the username/password to access the content, which is correct, but then it asks for the squid authentication details again, repeatedly for every page accessed. I'm guessing IE is mixing up the passwords etc.? It all works fine in Firefox and Opera, but sadly I have to get it to work with IE! Anyone have a workaround? Many thanks, Bryan
[squid-users] Re: bad squid - Daniel Navarro - xstrdup
> So I change to Fedora 4 with stable 12 and has hangs
> again but now same message. just receiving this
> continously
>
> Oct 6 09:39:50 ngproxy kernel:
> audit(1128605990.095:2): avc: denied { name_co
> nnect } for pid=2195 comm="squid" dest=8001
> scontext=system_u:system_r:squid_t
> tcontext=system_u:object_r:port_t tclass=tcp_socket
Sounds like SElinux is forbidding things.
Joost
Re(2): [squid-users] Which the best OS for Squid?
What is FC?? Sushil Deore (06/10/2005 19:04): > > >I found FC as the most convenient for squid as I am running it from a long >time and so far no cribs... :) > >I've tried squid on all the FC's i.e. FC-1,FC-2 & the latest is on FC-3 >which works fine. > >-- Sushil. >
Re: Re(2): [squid-users] Which the best OS for Squid?
FC - Fedora Core -- Sushil. On 7 Oct 2005, Bonnici Daniel wrote: > What is FC?? > > > > Sushil Deore (06/10/2005 19:04): > > > > > >I found FC as the most convenient for squid as I am running it from a long > >time and so far no cribs... :) > > > >I've tried squid on all the FC's i.e. FC-1,FC-2 & the latest is on FC-3 > >which works fine. > > > >-- Sushil. > > > > >
Re: Re(2): [squid-users] Which the best OS for Squid?
On Fri, 7 Oct 2005, Bonnici Daniel wrote: > What is FC?? Fedora Core. http://fedora.redhat.com Maccy
AW: Re(2): [squid-users] Which the best OS for Squid?
> > >What is FC?? > FC is a german football club: FC Köln (cologne).
Re: [squid-users] Re: bad squid - Daniel Navarro - xstrdup
Hi Joost,
Thank you for the only answer in desperate times :)
I´ve found the problem, one memory bank is wrong so
everything was wrong there.
Selinux couldn´t be because was working fine before
problems started
Regards, Daniel Navarro
--- Joost de Heer <[EMAIL PROTECTED]> escribió:
> > So I change to Fedora 4 with stable 12 and has
> hangs
> > again but now same message. just receiving this
> > continously
> >
> > Oct 6 09:39:50 ngproxy kernel:
> > audit(1128605990.095:2): avc: denied { name_co
> > nnect } for pid=2195 comm="squid" dest=8001
> > scontext=system_u:system_r:squid_t
> > tcontext=system_u:object_r:port_t
> tclass=tcp_socket
>
> Sounds like SElinux is forbidding things.
>
> Joost
>
>
__
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ¡gratis!
Regístrate ya - http://correo.espanol.yahoo.com/
[squid-users] squid https login error
Hi I am not very good in squid. I configured squid-2.5.STABLE11 with LDAP and SSL enabled. Connecitons to https port had "page cannot be displayed" error message in IE6, however connections to http port had no problem and asks username and password. I did not understad why https port connections give such error. not: configuration string: ./configure --enable-ssl --with-openssl --enable-digest-auth-helpers=password --enable-basic-auth-helpers=LDAP Ibrahim Calisir METU
Re: [squid-users] squid https login error
Ibrahim Calisir schrieb: Hi I am not very good in squid. I configured squid-2.5.STABLE11 with LDAP and SSL enabled. Connecitons to https port had "page cannot be displayed" error message in IE6, however connections to http port had no problem and asks username and password. I did not understad why https port connections give such error. not: configuration string: ./configure --enable-ssl --with-openssl --enable-digest-auth-helpers=password --enable-basic-auth-helpers=LDAP The error message from IE 6 does not really help. You will have to find out why you get the error. How are your acl ant http_access configuration lines ? Can you browse https sites from the proxy machine itself without using a proxy, i.e. are you sure your firewall permits https connections out ? Yours, Jakob Curdes
[squid-users] Purge cache enties
I'm looking to purge some cache entries, instead of purging the entire cache. I did follow the FAQ I entered this into my squid.conf acl PURGE method PURGE acl localhost src 127.0.0.1 http_access allow PURGE localhost http_access deny PURGE Then I try to use squidclient -m PURGE http://mywebsite and it returns HTTP/1.0 404 Not Found Server: squid/2.5.STABLE7 Mime-Version: 1.0 Date: Fri, 07 Oct 2005 16:46:07 GMT Content-Length: 0 I know that the site is in the cache, cause I have updated it and the new updates don't show. I have also tried purging commonly used pages like google and cnn, and I receive the same output. System is mac os x 10.4.2 Thanks for any help Derrick Seymour Administrative Services Northeastern Regional Information Center Capital Region BOCES
Re: [squid-users] all misses, no hits
> > Hi all, > > i am running the current version of Squid on Fedora 4. it has no direct > internet access, and has to go via a parent proxy, and it's been running > fine for weeks... > > until recently. the provider upgraded their proxy to one with content > scanning (mcafee i think), but ever since, the Squid hasn't had a single > cache hit (seriously, not one). > > the logs are full of TCP_MISS/200 and TCP_MISS/304 messages. > > there were no local config changes leading to this situation, only the > change to the parent, so i'm presuming the parent is setting some kind of > 'no cache' flag. > > can anyone suggest a way around thi? > Verify first whether the assumption is true, by examining the headers returned by the parent cache. M.
[squid-users] Squid reverse proxy - URL change in the response
hi, A question related to the URL a client receives as a response to its request. If a client sends the following request http://www.somename.com/... Squid in reverse proxy mode with the following configuration httpd_accel_host myhost.domain.com httpd_accel_port 8080 httpd_accel_single_host on httpd_accel_uses_host_header off returns the following URL in the response http://myhost.domain.com:8080/ ... which is wrong. Is there any way I can tell Squid to return back to the user the original URL? Right now I am resorting to the following solution which I consider temporary in /etc/hosts file add the following line IP_of_myhost.domain.com www.somename.com and Squid configuration changes to httpd_accel_host www.somename.com httpd_accel_port 80 httpd_accel_single_host on httpd_accel_uses_host_header off Thanks, Dimitar
Re: [squid-users] squid https login error
thank you, for your quick reply.. However there is no line that relate to https connection that I write, except the default acl rules as: acl Safe_ports port 443 563 # https, snews http_access deny !Safe_ports acl SSL_ports port 443 563 http_access deny CONNECT !SSL_ports I do not have a firewall rule yet, and I can connect https site from proxy machine with firefox. I check with Mozilla, Netscape and IE and all of them lost their connection with web sites as I addressed https port of my proxy. not: I assigned 443 as https port of proxy, and nothing changed. Yours, Ibrahim Calisir METU Jakob Curdes wrote: Ibrahim Calisir schrieb: Hi I am not very good in squid. I configured squid-2.5.STABLE11 with LDAP and SSL enabled. Connecitons to https port had "page cannot be displayed" error message in IE6, however connections to http port had no problem and asks username and password. I did not understad why https port connections give such error. not: configuration string: ./configure --enable-ssl --with-openssl --enable-digest-auth-helpers=password --enable-basic-auth-helpers=LDAP The error message from IE 6 does not really help. You will have to find out why you get the error. How are your acl ant http_access configuration lines ? Can you browse https sites from the proxy machine itself without using a proxy, i.e. are you sure your firewall permits https connections out ? Yours, Jakob Curdes
[squid-users] delay after service load
Hi all, After booting and squid start it lasts about 4-5 minutes until we can start browsing through it. Why? How can I solve? Thank you in advance. Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
[squid-users] Cache directories
Hi all I have squid running but was wondering what happens when the cache dirs get full or reach the limit set in the squid.conf. Will squid clear out the oldest entries or do I have to clear them out myself? Thanks Tony
