[squid-users] Cache directories

2005-10-08 Thread Tony Spencer
Hi all

I have squid running but was wondering what happens when the cache dirs get
full or reach the limit set in the squid.conf.
Will squid clear out the oldest entries or do I have to clear them out
myself?

Thanks
Tony








Re: [squid-users] Cache directories

2005-10-08 Thread Askar

Tony Spencer wrote:


Hi all

I have squid running but was wondering what happens when the cache dirs get
full or reach the limit set in the squid.conf.
Will squid clear out the oldest entries or do I have to clear them out
myself?

Thanks
Tony








 

read about cache_swap_low and cache_swap_high in squid.conf perhaps 
squid-cache.org kinda cool.


secondly you don't have to worry about doing some sorta cleaning ;)

regards




Re: [squid-users] Which the best OS for Squid?

2005-10-08 Thread Tino Reichardt
* Odhiambo Washington [EMAIL PROTECTED] wrote:
 * On 06/10/05 23:25 +1300, D  E Radel wrote:
  
  - Original Message - 
  From: Askar [EMAIL PROTECTED]
  To: Bonnici Daniel [EMAIL PROTECTED]
  Cc: squid-users@squid-cache.org
  Sent: Thursday, October 06, 2005 11:09 PM
  Subject: Re: [squid-users] Which the best OS for Squid?
  
  
  Bonnici Daniel wrote:
  
  Hi, which is the best linux OS for security and to run squid??
  
  cheers
  
  Daniel
  
  
  
   
  
  www.slackware.com
  
  coz it follows KISS (Keep It Simple Stupid) ;)
  
  Debian, apt-get install squid. :-)
 
 
 FreeBSD, portinstall squid. :-)))
Arch Linux pacman -S squid :-()


-- 
regards, TR


[squid-users] Internet Sharing using squid for 2000 users

2005-10-08 Thread sridhar s
Hai,

I have 2000 users in my LAN.Now I am planning to share
internet access to all my users with authentication.

For this setup I am planning to install a Server with
Redhat EnterPrise Level-4(RHEL4) with squid and 
provide authentication using ldap for squid.

Then regarding hardware what configuration will be
suitable.I have read in articles that if we want more
caching we should have more RAM.
I think of installing squid in two P1V machines one as
main other as secondary.I am planning to have scsi
hardisk in two machines.

Is these configurations will be correc.Else please
mail me what all things I had to inbuilt for good
internet sharing .

NOw I have 2MBPS Internet leased line.Is this will
support for my usuage.

Thanks for any mail

Regards
Sridhar




___ 
To help you stay safe and secure online, we've developed the all new Yahoo! 
Security Centre. http://uk.security.yahoo.com


Re: [squid-users] Cache directories

2005-10-08 Thread Daniel Navarro
Hi tony,

The answer to your question, yes it clears old entries
and replace less used ones.

you can read more about it here

http://www.squid-cache.org/Doc/FAQ/FAQ-12.html#ss12.25

Regards, Daniel Navarro
 Maracay, Venezuela.


 --- Tony Spencer [EMAIL PROTECTED] escribió:

 Hi all
 
 I have squid running but was wondering what happens
 when the cache dirs get
 full or reach the limit set in the squid.conf.
 Will squid clear out the oldest entries or do I have
 to clear them out
 myself?
 
 Thanks
 Tony
 
 
 
 
 
 
 


__
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ¡gratis! 
Regístrate ya - http://correo.espanol.yahoo.com/ 


Re: [squid-users] Which the best OS for Squid?

2005-10-08 Thread Daniel Navarro
Well I see there is a big discussion with few
arguments about best linux for squid. More anwers are
not sustained but demostrate love for our distros.

Well here I go.

Redhat, because is the world Open Source leader and a
good balanced distro with big support on any branch, I
mean Redhat 9, RHEL, Fedora or the alternative CentOS,
wich I use.

Fast, realiable, secure with Selinux feature.

Regards, Daniel Navarro
 Maracay, Venezuela.

Ps: After all, linux is all linux.


 --- Tino Reichardt [EMAIL PROTECTED]
escribió:

 * Odhiambo Washington [EMAIL PROTECTED] wrote:
  * On 06/10/05 23:25 +1300, D  E Radel wrote:
   
   - Original Message - 
   From: Askar [EMAIL PROTECTED]
   To: Bonnici Daniel [EMAIL PROTECTED]
   Cc: squid-users@squid-cache.org
   Sent: Thursday, October 06, 2005 11:09 PM
   Subject: Re: [squid-users] Which the best OS for
 Squid?
   
   
   Bonnici Daniel wrote:
   
   Hi, which is the best linux OS for security
 and to run squid??
   
   cheers
   
   Daniel
   
   
   

   
   www.slackware.com
   
   coz it follows KISS (Keep It Simple Stupid) ;)
   
   Debian, apt-get install squid. :-)
  
  
  FreeBSD, portinstall squid. :-)))
 Arch Linux pacman -S squid :-()
 
 
 -- 
 regards, TR
 


__
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ¡gratis! 
Regístrate ya - http://correo.espanol.yahoo.com/ 


[squid-users] Performance tweaks

2005-10-08 Thread Terry
Next week i need to set-up a squid server for a small company of about 
18 users.
I have set-up a test system at home on a machine of similar spec ( 2ghz 
512 ram and an ide disk )

I have the default config file with about half a dozen acl's.
At times browsing is really fast but now and again for no apparent 
reason it gets sluggish. Is there any config tweaks i can apply that may 
help?


Terry.


Re: [squid-users] Internet Sharing using squid for 2000 users

2005-10-08 Thread Sushil Deore

hi,

In a long term a dual CPU with server grade motherboard not
to very high end(Intel/AMD) and 2GB RAM will suit to your need.
You can choose any os you want. SCSI disk will be a good option but
normal IDE and SATA will also do.

My present setup runs on a simple Intel P-4 desktop system with 2 GB RAM
and IDE HDD with seperate caching proxy servers and my user database is
much higher than yours. I am also migrating from my present setup to the
server grade config due to the increasing number of users and the amount
of CPU consumption. So you can peacefully have the said h/w config.

-- Sushil.



On Sat, 8 Oct 2005, sridhar s wrote:

 Hai,

 I have 2000 users in my LAN.Now I am planning to share
 internet access to all my users with authentication.

 For this setup I am planning to install a Server with
 Redhat EnterPrise Level-4(RHEL4) with squid and
 provide authentication using ldap for squid.

 Then regarding hardware what configuration will be
 suitable.I have read in articles that if we want more
 caching we should have more RAM.
 I think of installing squid in two P1V machines one as
 main other as secondary.I am planning to have scsi
 hardisk in two machines.

 Is these configurations will be correc.Else please
 mail me what all things I had to inbuilt for good
 internet sharing .

 NOw I have 2MBPS Internet leased line.Is this will
 support for my usuage.

 Thanks for any mail

 Regards
 Sridhar




 ___
 To help you stay safe and secure online, we've developed the all new Yahoo! 
 Security Centre. http://uk.security.yahoo.com




Re: [squid-users] squid https login error

2005-10-08 Thread Ben Sagal
The https port is not related to https proxying and should probably be
removed.  To proxy https, in your browser, set the https proxy port to
3128 (or whatever you have set the standard http port to).

Ben

On 07/10/05, Ibrahim Calisir [EMAIL PROTECTED] wrote:
 thank you, for your quick reply..

 However there is no line that relate to https connection that I write,
 except the default acl rules as:

 acl Safe_ports port 443 563 # https, snews
 http_access deny !Safe_ports

 acl SSL_ports port 443 563
 http_access deny CONNECT !SSL_ports

 I do not have a firewall rule yet, and I can connect https site from
 proxy machine with firefox.

 I check with Mozilla, Netscape and IE and all of them lost their
 connection with web sites as I addressed https port of my proxy.

 not: I assigned 443 as https port of proxy, and nothing changed.

 Yours,
 Ibrahim Calisir
 METU

 Jakob Curdes wrote:
  Ibrahim Calisir schrieb:
 
  Hi
 
  I am not very good in squid. I configured squid-2.5.STABLE11 with LDAP
  and SSL enabled. Connecitons to https port had page cannot be
  displayed error message in IE6, however connections to http port had no
  problem and asks username and password. I did not understad why https
  port connections give such error.
 
  not: configuration string:
  ./configure --enable-ssl --with-openssl
  --enable-digest-auth-helpers=password --enable-basic-auth-helpers=LDAP
 
  The error message from IE 6 does not really help. You will have to find
  out why you get the error.
  How are  your acl ant http_access configuration lines ? Can you browse
  https sites from the proxy machine itself without using a proxy, i.e.
  are you sure your firewall permits https connections out ?
 
  Yours,
  Jakob Curdes




[squid-users] pass mac address to external acl

2005-10-08 Thread Ben Sagal
Is the a way to pass the mac address of the client to an external acl.

Ben


[squid-users] squid and dansguardian, and the X-Forward-For patch failing against 2.5-STABLE11

2005-10-08 Thread [EMAIL PROTECTED]
I recently got dansguardian installed and running on port 8080, DG
redirects output to squid on 3197 or whatever squids default port is (I
dont remember now)

everything works, but not like I would like it to.

I think I need the X-Forward-For patch since I would like to be able to
use the client IP address for squid ACLS inspite of the fact that its a
localhost packet from DG.

I installed DG from source on a Slackware 10.2 box and it went fine.

I installed squid from a slackware package available on the internet.

Ive downloaded the 2.5-STABLE11 code tarball and had a look at the
./configure options (my arent there a lot of them).  My problem is that
the X-Forwarded-For patch on the squid page at sourceforge doesnt patch
against the STABLE11 codebase (I mean that there are a large number of
hunk failures, not that the patch didnt run at all).  I tried looking
at the patch file, but I'm not comfortable with rewriting patches in a
programming language I dont know well.  Especially not one that does
what this one does.

I looked at the date of the patch and then downloaded the four most
current STABLE sets prior to the patch date and the patch doesnt patch
against any of those tarballs either.

Im reasonably sure that someone on this list has had to cross this
bridge one before. Does anyone have a rewritten patch to squid
2.5.STABLE11 that will add the X-Forward-For functionality?

Thanks