AW: [squid-users] Finding out what word in acl list is blocked
Hi Henrik, in aclMatchRegex, add just before the return 1; line debug(28, 2) (aclMatchRegex: match '%s' found in '%s'\n, data-pattern, word); and enable debug section 28 level 2. why dont you insert this one line of code into the official squid source? I think many users would be very happy about this nice feature. Werner Rost
[squid-users] Ulimit and File-max value.
Hello all, I am using squid-2.5.STABLE12 in FC4 with kernel version 2.6. i have a 2GB of RAM in my machine. I frequently get error message saying running out of file Descriptors. So i am planning to recompile squid by increasing the file-max and setting ulimit. I am not clear what value should I set for them. I am planning to assign 32768. What are the drawbacks if I set it to very high value. Thanks -ogu
Re: [squid-users] Ulimit and File-max value.
ogu, I have almost the same setup and I have et ulimit to 16384 and it works well. the issue of Running out of FD is gone. Daniel On 3/23/06, Logu [EMAIL PROTECTED] wrote: Hello all, I am using squid-2.5.STABLE12 in FC4 with kernel version 2.6. i have a 2GB of RAM in my machine. I frequently get error message saying running out of file Descriptors. So i am planning to recompile squid by increasing the file-max and setting ulimit. I am not clear what value should I set for them. I am planning to assign 32768. What are the drawbacks if I set it to very high value. Thanks -ogu -- Much Regards, Daniel Epee Lea
[squid-users] external_acl_type + wbinfo_group.pl not working.. Please Help
Hi All, i was trying to configure proxy server, which will authenticate only for the users in group called internet that's in my Windows2003 ADS previously i configured my proxy server for all users in my domain and it was working well i think, i have some problem using external_acl_typel Please Help Following is my present squid configuration squid-2.5.STABLE6-3.4E.11 = auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 30 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes external_acl_type nt_group ttl=0 concurrency=5 %LOGIN /usr/lib/squid/wbinfo_group.pl acl unrestrictedusers external nt_group internet http_access allow unrestrictedusers == samba-3.0.21c-1 [global] workgroup = DNA server string = Samba Server log level = 3 log file = /var/log/samba/samba.log max log size = 1024 security = ads encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = no #=== Share Definitions ===# password server = 172.16.20.200 realm = DNA.COM idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 template shell = /bin/bash template homedir = /home/%D/%U allow trusted domains = no idmap backend = idmap_rid:DNA=16777216-33554431 winbind use default domain = yes = Operating System Red Hat Enterprise Linux ES (2.6.9-22.ELsmp) with this configuration its asking for authentication, but even if we provide correct username and password its not authenticating Thank You In Advance jerrynikky.
[squid-users] Squid+radio/satellite: How to deny updating a cached object until bandwidth increases?
Hi, I need to install Squid on a vessel that uses slow radio and satellite connections. Sometimes there is enough bandwidth, but usually it is below modem speeds. There are a few (dozen) very large files that need to be cached in a special way: Squid must ignore all attempts to fetch newer versions of these listed files from source unless... - the object is completely missing from cache OR - there is enough of bandwidth (or alternatively: the time is between xx:yy and zz:vv) The fact that these files might have changed does not play a role. The old version must be served from the cache untill the bandwidth is back again. How do I implement this? I could use some wget + scripting magic, if needed... Thanks.
Re: [squid-users] Squid - RTSP Tunnelinng issue
On 22.03.06 15:32, squid user wrote: Message-ID: [EMAIL PROTECTED] In-Reply-To: [EMAIL PROTECTED] From: squid user [EMAIL PROTECTED] To: squid-users@squid-cache.org Date: Wed, 22 Mar 2006 15:32:13 + Subject: [squid-users] Squid - RTSP Tunnelinng issue Hello, please, If you are writing a new post, send it as new mail and not as reply/followup on old mail. It makes problems in threading clients. Thank you. Would anyone please like to help me on the following issue? I have accessed http://kb.com/kbp/index.html and then trying to play the video through quicktime. If I am not trying through proxy server, where squid (STABLE 11) is running, video is getting played fine. However while I am trying through proxy, connection is not getting established. Using ethreal I have found following information: During connection initialization I am getting a HTTP message from kb.com, which contains Hypertext Transfer Protocol HTTP/1.0 200 OK\r\n Request Version: HTTP/1.0 Response Code: 200 Server: QTSS/5.5 (Build/489; Platform/MacOSX; Release/Final; )\r\n Connection: close\r\n Date: Thu, 19 Aug 1982 18:30:00 GMT\r\n Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Type: application/x-rtsp-tunnelled\r\n \r\n In acknowledgement flags should get set as below: Flags: 0x0002 (SYN) 0... = Congestion Window Reduced (CWR): Not set .0.. = ECN-Echo: Not set ..0. = Urgent: Not set ...0 = Acknowledgment: Not set 0... = Push: Not set .0.. = Reset: Not set ..1. = Syn: Set ...0 = Fin: Not set Window size: 65535 Checksum: 0xc5c6 [correct] Options: (12 bytes) Maximum segment size: 1460 bytes NOP Window scale: 2 (multiply by 4) NOP NOP SACK permitted However it is getting set as Flags: 0x0002 (SYN) 0... = Congestion Window Reduced (CWR): Not set .0.. = ECN-Echo: Not set ..0. = Urgent: Not set ...1 = Acknowledgment: Set 0... = Push: Not set .0.. = Reset: Not set ..0. = Syn: Not Set ...0 = Fin: Not set Window size: 6432 Checksum: 0xc864 [correct] SEQ/ACK analysis This is an ACK to the segment in frame 1557 The RTT to ACK the segment was: 0.25000 seconds Now my query is: 1. Whether squid support RTSP tunneling or not? 2. If it supports then what setting requires to handle RTSP tunneling. With regards Suman Mukherjee _ The new MSN Search Toolbar now includes Desktop search! http://join.msn.com/toolbar/overview -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Silvester Stallone: Father of the RISC concept.
[squid-users] a
unsubscribe
