Re: [squid-users] Problems with Internet Explorer <-- end of the story
Hi guys, We recently have a strange problem with the server, it suddenly stopped connecting to the network. After a reconfiguration of the network card, it is working perfectly, with the 15 clients connected :-) AND we touched it a little with Webmin, and now the memory consumption is lower than before, consuming only 80 MB with Squid, Samba, Bind and OpenSSH working at the same time. This little Celeron 600Mhz still has much to offer :-) Thanks to all of you for your answers, especially Amos for his help. Regards. -- AlvLin > Usuario Linux #355233 > http://counter.li.org "los hombres nobles eluden un esfuerzo realizando otro mucho mayor. Por no cortar una rosa, construyen un palacio. Por no escuchar un reproche, ejercen la rectitud toda la vida. Por no bajarse del caballo, conquistan el Asia" -Alejandro Dolina, "Crónicas del Ángel Gris"
[squid-users] caching 500 responses?
Hi, I have a website that is occassionally under heavy load. It runs with squid and pound configuration occassionally pound does timeout and return a 500. It appears to me that when this happens squid is caching the 500 response, is there anyway that I can set squid to not cache 500 responses? Or is this already happening and it is being cached elsewhere? Regards, Kyle McCarthy
Re: [squid-users] caching 500 responses?
On mån, 2007-11-26 at 12:10 +1300, Kyle McCarthy wrote: > Hi, > > I have a website that is occassionally under heavy load. It runs with > squid and pound configuration occassionally pound does timeout and > return a 500. It appears to me that when this happens squid is > caching the 500 response, is there anyway that I can set squid to not > cache 500 responses? Or is this already happening and it is being > cached elsewhere? negative_ttl
[squid-users] Concurrent question
Hi all, I'm running squid 2.6 stable 16 on a Pentium III 500Mhz with 512MB RAM, IDE HDD, installed FreeBSD 6.3 with the following: --enable-storeio=ufs,diskd,null --enable-underscores --with-large- files --enable-large-cache-files --enable-delay-pools --disable-ident- lookups --enable-snmp --enable-removal-policies --enable-async-io -- enable-kqueue Added into the /boot/loader.conf: kern.ipc.nmbclusters: 32768 kern.maxfiles=65536 kern.maxfilesperproc=32768 net.inet.ip.portrange.last: 65535 Compiled kernel with these options: options SHMSEG=16 options SHMMNI=32 options SHMMAX=2097152 options SHMALL=4096 options MAXFILES=8192 I'm also running Dans Guardian on it too. My question is approximately how many users can I proxy for? Thanks BSD Networking, Microsoft Notworking
Re: [squid-users] Concurrent question
It depends on the usage pattern of your users. The best way to gauge how your system is performing is to graph statistics - graph SNMP statistics from Squid and system statistics via something like munin. Watch for memory, CPU and disk usage. You'll find you'll hit a limitation pretty quickly. Adrian On Sun, Nov 25, 2007, Monah Baki wrote: > Hi all, > > I'm running squid 2.6 stable 16 on a Pentium III 500Mhz with 512MB > RAM, IDE HDD, installed FreeBSD 6.3 with the following: > > --enable-storeio=ufs,diskd,null --enable-underscores --with-large- > files --enable-large-cache-files --enable-delay-pools --disable-ident- > lookups --enable-snmp --enable-removal-policies --enable-async-io -- > enable-kqueue > > Added into the /boot/loader.conf: > > kern.ipc.nmbclusters: 32768 > kern.maxfiles=65536 > kern.maxfilesperproc=32768 > net.inet.ip.portrange.last: 65535 > > > Compiled kernel with these options: > options SHMSEG=16 > options SHMMNI=32 > options SHMMAX=2097152 > options SHMALL=4096 > options MAXFILES=8192 > > > I'm also running Dans Guardian on it too. > > My question is approximately how many users can I proxy for? > > > Thanks > > > BSD Networking, Microsoft Notworking > > -- - Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support - - $25/pm entry-level VPSes w/ capped bandwidth charges available in WA -
[squid-users] Problem with squid_session helper
I'm having trouble with the squid_session helper I have the following line: deny_info http://www.SomeSiteURLHere.com/redir.php?url=%s session The php page does a print $url for the href link However, squid forwards the user to this url: http://www.SomeSiteURLHere.com/redir.php?url=http://www.SomeSiteURLHere.com/redir.php?url=http://www.SiteThatVisitorTypedIn.com So instead of linking to the requested page, the link points to it's own page.. Hope that makes sense. Any ideas? Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs
Re: [squid-users] blocking audio/video/radio streaming
Amos Jeffries wrote: Tarak Ranjan wrote: Hi, I want to block.online radio/audio/video streaming using squid . i have done this acl blockfiles urlpath_regex -i "/etc/squid/multimedia.files.acl" http_access deny blockfiles the content of the multimedia.files.acl \.[Aa][Vv][Ii]$ \.[Mm][Pp][Gg]$ \.[Mm][Pp][Ee][Gg]$ \.[Mm][Pp]3$ \.(afx|asf|asx|au|avi|divx|m3u|mov|mp2|mp3|mpeg|mp g|qt|ra|ram|rm|viv|vivo|vob|vqf|wav|wma|wmv|vbs|shs|pif)($|\?) but it's not working. Thanks- Tarak This will only work on streaming sites who don't care about data theft. Most websites protect their media content by serving it out of scripts instead of D/L'able files. That change the URI to anything they can imagine. What you want to do is block based on reply mime-type using rep_mime_type ACL and http_reply_access permissions. http://www.squid-cache.org/Versions/v2/2.6/acl.html http://www.squid-cache.org/Versions/v2/2.6/http_reply_access.html Amos acl audiovideo rep_mime_type ^video/x-ms-asf ^video/x-ms-sf ^audio/mpeg ^audio/x-mpeg ^audio/x-pn-realaudio ^application/x-mms framed ^application/vnd.ms.wms-hdr.asfv1 http_reply_access deny audiovideo not hitting the ACL, not blocking any other parameter for this to block Tarak Online Learning|Certifications|Learning Solutions : www.liqwidkrystal.com
Re: [squid-users] blocking audio/video/radio streaming
Tarak Ranjan wrote: Amos Jeffries wrote: Tarak Ranjan wrote: Hi, I want to block.online radio/audio/video streaming using squid . i have done this acl blockfiles urlpath_regex -i "/etc/squid/multimedia.files.acl" http_access deny blockfiles the content of the multimedia.files.acl \.[Aa][Vv][Ii]$ \.[Mm][Pp][Gg]$ \.[Mm][Pp][Ee][Gg]$ \.[Mm][Pp]3$ \.(afx|asf|asx|au|avi|divx|m3u|mov|mp2|mp3|mpeg|mp g|qt|ra|ram|rm|viv|vivo|vob|vqf|wav|wma|wmv|vbs|shs|pif)($|\?) but it's not working. Thanks- Tarak This will only work on streaming sites who don't care about data theft. Most websites protect their media content by serving it out of scripts instead of D/L'able files. That change the URI to anything they can imagine. What you want to do is block based on reply mime-type using rep_mime_type ACL and http_reply_access permissions. http://www.squid-cache.org/Versions/v2/2.6/acl.html http://www.squid-cache.org/Versions/v2/2.6/http_reply_access.html Amos acl audiovideo rep_mime_type ^video/x-ms-asf ^video/x-ms-sf ^audio/mpeg ^audio/x-mpeg ^audio/x-pn-realaudio ^application/x-mms framed ^application/vnd.ms.wms-hdr.asfv1 http_reply_access deny audiovideo not hitting the ACL, not blocking any other parameter for this to block Interesting. * Check that its placed in squid.conf above the default http_reply_access allow all * maybe adding -i to make it case-insensative. * use squidclient to pull down an object with one of those types and check the resulting headers. Amos
[squid-users] looking for testers: google maps/earth/youtube caching
I don't know if people understood my last email about the StoreUrlRewrite changes I've made to squid-2.HEAD, so I'll just be really clear this time around. I've implemented some changes to Squid-2.HEAD which will allow certain stuff to be cached which couldn't be in the past. The first two things I'm going to try and concrete the support for is google maps/earth (web only) and Youtube. So, I'm looking for testers who are willing to run squid-2.HEAD snapshots and work with me to evaluate and fine-tune my squid extensions to support this. Who is interested? Come on, after the amount of "How do you cache youtube?" questions from the mailing lists and search results hitting the squidproxy blog over the last few months -some- of you have to be interested. I'm saying right now that I'm willing to spend the time and effort to work with people for free to get this stuff tested and debugged. It doesn't benefit me - I'm not getting paid -at all- to do this. Adrian -- - Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -
Re: [squid-users] blocking audio/video/radio streaming
Amos Jeffries wrote: Tarak Ranjan wrote: Amos Jeffries wrote: Tarak Ranjan wrote: Hi, I want to block.online radio/audio/video streaming using squid . i have done this acl blockfiles urlpath_regex -i "/etc/squid/multimedia.files.acl" http_access deny blockfiles the content of the multimedia.files.acl \.[Aa][Vv][Ii]$ \.[Mm][Pp][Gg]$ \.[Mm][Pp][Ee][Gg]$ \.[Mm][Pp]3$ \.(afx|asf|asx|au|avi|divx|m3u|mov|mp2|mp3|mpeg|mp g|qt|ra|ram|rm|viv|vivo|vob|vqf|wav|wma|wmv|vbs|shs|pif)($|\?) but it's not working. Thanks- Tarak This will only work on streaming sites who don't care about data theft. Most websites protect their media content by serving it out of scripts instead of D/L'able files. That change the URI to anything they can imagine. What you want to do is block based on reply mime-type using rep_mime_type ACL and http_reply_access permissions. http://www.squid-cache.org/Versions/v2/2.6/acl.html http://www.squid-cache.org/Versions/v2/2.6/http_reply_access.html Amos acl audiovideo rep_mime_type ^video/x-ms-asf ^video/x-ms-sf ^audio/mpeg ^audio/x-mpeg ^audio/x-pn-realaudio ^application/x-mms framed ^application/vnd.ms.wms-hdr.asfv1 http_reply_access deny audiovideo not hitting the ACL, not blocking any other parameter for this to block Interesting. * Check that its placed in squid.conf above the default http_reply_access allow all * maybe adding -i to make it case-insensative. * use squidclient to pull down an object with one of those types and check the resulting headers. Amos i have checked , that acl has been placed above the http_reply_access allow all. -i option is also not clicking. Online Learning|Certifications|Learning Solutions : www.liqwidkrystal.com
