[squid-users] Squid serving a static website image
Hello. I'm trying to configure a Squid as an static cache. The idea is configure squid, crawl completelly a website (making squid cache all pages) and then use it to server all website statically, showing all contents through squid (even when the real website it's not accesible). ¿is there any simple way to make it using some squid configuration parameters? Thanks a lot.
Re: [squid-users] How to limit download manager session?
Hello Rahmanian, We can limit the number of connections using acl aclname maxconn number This will be matched when the client's IP address has more than number HTTP connections established. Thanks, Visolve Squid team www.visolve.com/squid/ Kadoos wrote: His name Hi dears How to limit download manager session with squid? I want redius it to 2 concurrent connection. Pliz help me. - Best Regards Rahmanian
[squid-users] Re: Re[squid-users] verse proxy to Sharepoint
Chris, Thanks for the information! Everything I read says use 2.6 or ANY build above that. ATB Andrew Chris Robertson-2 wrote: afstcklnd wrote: We have a working infrastructure using Windows 2003, AD Sharepoint for Project Web Access. In order to allow branch office access, we wanted to put in place a reverse proxy solution and looked at Squid. After a lot of reading, it became clear the Squid 2.6 or above was the best option in order to get working NTLM authentication. So We've installed a Fedora Core 9 box with Squid 3.0, attached it to the domain and set up all the kerberos, ldap authentication etc. However, it's not quite behaving correctly. Last I saw, (http://www.squid-cache.org/mail-archive/squid-users/200803/0523.html) you'll need to use 2.6 or 2.7 to proxy NTLM authentication. The connection pinning required to support it has not been added to the released Squid 3 code base. Testing kerberos, ldap etc. seems all OK and the ntlm helpers are running OK. Connect to the proxy with IE of Firefox and the request for a password is presented but regardless of what is entered authentication. Obviously I need to provide more information but can you guide me as to where and what I need to provide? Thanks Chris -- View this message in context: http://www.nabble.com/Reverse-proxy-to-Sharepoint-tp17909397p18064761.html Sent from the Squid - Users mailing list archive at Nabble.com.
Re: [squid-users] Squid serving a static website image
On 23.06.08 09:12, [EMAIL PROTECTED] wrote: Hello. I'm trying to configure a Squid as an static cache. The idea is configure squid, crawl completelly a website (making squid cache all pages) and then use it to server all website statically, showing all contents through squid (even when the real website it's not accesible). ¿is there any simple way to make it using some squid configuration parameters? Thanks a lot. what _exactly_ do you want to achieve? Have offline cache when the web server is offline? Or use squid as webserver that is going to be turned off? (In any way you will have to use external program for crawling the site.) -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Fucking windows! Bring Bill Gates! (Southpark the movie)
[squid-users] Setting a whitelist for ONE IP-Adress
Hello there, I tried all the weekend setting up a whitelist for one IP Adress. We have a network with an MS AD but all users log in with the same user. Thats why I have to work with the IP Adresses. We just want one PC to use the Squid with a whitelist...I'am using the SquidNT 2.7 stable! - Service is running I tried the following config lines: # Define the pc/ip, which has to squid later acl pc101 src 192.168.100.101/255.255.255.255 # define the whitelist acl whitelist dstdomain /squid/etc/whitelist.allow # define the pc to use the whitelist http_access pc101 whitelist Is my procedure right? Or what did I wrong? The problem is, that the whitelist does not work and all sites were blocked, also the ones who are listet in the whitelist! All the three lines are above the default line http_access deny all Can somebody help me making the right config or send me a squid.conf which will work? Thanks a lot!
[squid-users] How to force resources expired when squid starts
Hello, I have a question. My http server sends the objects with max-age of 48 hours. This is perfect for me, because squid during 48 hours doesn't send to server the packet to check if the object is modified. I saw that is possible delete all the cached objects with squidclient, or with refresh_pattern put some objects expired when a time elapsed or when the resources are % old. Is there any way to put all the cached objects expired manually?
Re: [squid-users] Squid serving a static website image
Use squid as webserver that is going to be turned off I got a program to crawl all website through squid working out of the box, only need the specific parameter in squid to make it server al cached contents even when the website is completely down. Thanks. On 23.06.08 09:12, [EMAIL PROTECTED] wrote: Hello. I'm trying to configure a Squid as an static cache. The idea is configure squid, crawl completelly a website (making squid cache all pages) and then use it to server all website statically, showing all contents through squid (even when the real website it's not accesible). ¿is there any simple way to make it using some squid configuration parameters? Thanks a lot. what _exactly_ do you want to achieve? Have offline cache when the web server is offline? Or use squid as webserver that is going to be turned off? (In any way you will have to use external program for crawling the site.) -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Fucking windows! Bring Bill Gates! (Southpark the movie)
Re: [squid-users] Setting a whitelist for ONE IP-Adress
I tried the following config lines: # Define the pc/ip, which has to squid later acl pc101 src 192.168.100.101/255.255.255.255 # define the whitelist acl whitelist dstdomain /squid/etc/whitelist.allow # define the pc to use the whitelist http_access pc101 whitelist Pls add the word allow as follows http_access allow pc101 whitelist Happy squiding -- Thank you Indunil Jayasooriya
[squid-users] Going into hit-only-mode for 5 minutes....
We am using squid 2.6 stable version in fedora core 6. Some times we receiving this error message in our cache.log file. when this error comes, we not able to browse for some time through squid proxy. We want to know the meaning of this error and why its occurred. ERROR SNAP Failure Ratio at 1.01 2008/06/23 11:54:16| Going into hit-only-mode for 5 minutes... ERROR SNAP Any solution?. -- View this message in context: http://www.nabble.com/Going-into-hit-only-mode-for-5-minutes-tp18066869p18066869.html Sent from the Squid - Users mailing list archive at Nabble.com.
Fwd: [squid-users] Setting a whitelist for ONE IP-Adress
Can you post me a default config with my three lines in it, so that the IP-Adress is using the whitelist defined and any other IPs can reach any site? Try below lines # Define the pc/ip, which has to squid later acl pc101 src 192.168.100.101/255.255.255.255 # define the whitelist acl whitelist url_regex -i /squid/etc/whitelist.allow http_access deny pc101 !whitelist then, create below file. touch /squid/etc/whitelist.allow and add below domains to that file. .allowedsites1.com .allowedsites2.com .allowedsites3.com #the rest has FULL ACCESS acl mynet 192.168.100.0/24 http_access allow mynet restart squid Happy Squiding -- Thank you Indunil Jayasooriya
Re: [squid-users] How to force resources expired when squid starts
Donoso Gabilondo, Daniel wrote: Hello, I have a question. My http server sends the objects with max-age of 48 hours. This is perfect for me, because squid during 48 hours doesn't send to server the packet to check if the object is modified. I saw that is possible delete all the cached objects with squidclient, one by one only. or with refresh_pattern put some objects expired when a time elapsed or when the resources are % old. refresh_pattern does same thing as max-age. But applies when no max-age is given. Is there any way to put all the cached objects expired manually? No. You can only purge them one by one. Why are you needing this? Amos -- Please use Squid 2.7.STABLE3 or 3.0.STABLE7
Re: [squid-users] Going into hit-only-mode for 5 minutes....
Rajasekar wrote: We am using squid 2.6 stable version in fedora core 6. Some times we receiving this error message in our cache.log file. when this error comes, we not able to browse for some time through squid proxy. We want to know the meaning of this error and why its occurred. ERROR SNAP Failure Ratio at 1.01 2008/06/23 11:54:16| Going into hit-only-mode for 5 minutes... ERROR SNAP Any solution?. You appear to have major network connectivity problems. Squid apparently has a sub-mode which is shifts to so you can get to already-cached content even when the network underneath it is down or falling apart. The code in squid which says that is documented: * This function is designed to serve a fairly specific purpose. * Occasionally our vBNS-connected caches can talk to each other, but not * the rest of the world. Here we try to detect frequent failures which * make the cache unusable (e.g. DNS lookup and connect() failures). If * the failure:success ratio goes above 1.0 then we go into hit only * mode where we only return UDP_HIT or UDP_MISS_NOFETCH. Neighbors * will only fetch HITs from us if they are using the ICP protocol. We * stay in this mode for 5 minutes. * * Duane W., Sept 16, 1996 Amos -- Please use Squid 2.7.STABLE3 or 3.0.STABLE7
RE: [squid-users] How to force resources expired when squid starts
refresh_pattern does same thing as max-age. But applies when no max-age is given. I was wrong. Thanks for the explanation. No. You can only purge them one by one. Why are you needing this? Because if a lot of objects are modified during the max-age time, putting all the objects expired, squid would ask for them again, and only get the modified objects. I know that is possible to decrease the max-age or put max-age to 0 (ask always if the object is modified) but this generate a lot of network traffic when a lot of objects are asked. Thanks for your help. Daniel -Mensaje original- De: Amos Jeffries [mailto:[EMAIL PROTECTED] Enviado el: lunes, 23 de junio de 2008 14:46 Para: Donoso Gabilondo, Daniel CC: squid-users@squid-cache.org Asunto: Re: [squid-users] How to force resources expired when squid starts Donoso Gabilondo, Daniel wrote: Hello, I have a question. My http server sends the objects with max-age of 48 hours. This is perfect for me, because squid during 48 hours doesn't send to server the packet to check if the object is modified. I saw that is possible delete all the cached objects with squidclient, one by one only. or with refresh_pattern put some objects expired when a time elapsed or when the resources are % old. refresh_pattern does same thing as max-age. But applies when no max-age is given. Is there any way to put all the cached objects expired manually? No. You can only purge them one by one. Why are you needing this? Amos -- Please use Squid 2.7.STABLE3 or 3.0.STABLE7
[squid-users] Reverse Proxy and SSL...
Is there any requirement to configure Squid to forward SSL requests apart from configuring the appropriate port (typically 443)? Thanks.
[squid-users] Squid and Cacti problem
Hello! I used to have Squid 2.6.x monitored without any problem on cacti. But now on Squid 3.0.x, i get very gigant values in the range of Gigabits (In the traffic in / out / saved section), that i dont think that are real values. What might be the problem?
[squid-users] Squid with two networks ...
Hi !!! I've installed a Squid box transparent mode (3STABLE7) with two network cards and I must to implement this scenario: - The network cards are connected at two diferents internal Class C network with public IP. - If the http requeriment asking about an object that is in the cache, the Squid give the object throught the same interface that the original requermients comes (I tink that this is not a problem, because de origin IP is in the same network that the squid have). - If the http requeriment asking about an object that isn't in the cache, the Squid go direct to public network trought the same interface that the original requermients comes (This is the problem). Are some configurations of squid.conf that allow me to do that? I think resolve te problem, externally form Squid (with iptables, for example) Thanks a lot !!! Regards !! Ramiro
Re: [squid-users] Reverse Proxy and SSL...
On 23.06.08 10:44, Gary Tai wrote: Is there any requirement to configure Squid to forward SSL requests apart from configuring the appropriate port (typically 443)? if it can already forward non-SSL requests (proper ACLs), none. -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. - Have you got anything without Spam in it? - Well, there's Spam egg sausage and Spam, that's not got much Spam in it.
[squid-users] Failed to select source for ...assert failure...
I am using Squid as HTTP accelerator, occasally my Squid3 (stable6) will have error in cache.log, e.g. Failed to select source for http://www.example.com But I am sure that the URL is reachable in backend web server, and sometimes it will immediately followed by an assert failure and restart, e.g. assertion failed: comm.cc:1997: !fd_table[fd].flags.closing Also, sometimes I did observe an error in cache.log, e.g. client_side.cc(2723) okToAccept: WARNING! Your cache is running out of filedescriptors Any suggestions? Thanks.
Re: [squid-users] Failed to select source for ...assert failure...
Try increasing the size of file descriptor Roy M. wrote: I am using Squid as HTTP accelerator, occasally my Squid3 (stable6) will have error in cache.log, e.g. Failed to select source for http://www.example.com But I am sure that the URL is reachable in backend web server, and sometimes it will immediately followed by an assert failure and restart, e.g. assertion failed: comm.cc:1997: !fd_table[fd].flags.closing Also, sometimes I did observe an error in cache.log, e.g. client_side.cc(2723) okToAccept: WARNING! Your cache is running out of filedescriptors Any suggestions? Thanks.
Re: [squid-users] Failed to select source for ...assert failure...
Hi, On 6/24/08, Pritam [EMAIL PROTECTED] wrote: Try increasing the size of file descriptor Are there any reference links? Thanks.
RE: [squid-users] Failed to select source for ...assert failure...
Check out this http://www.onlamp.com/pub/a/onlamp/2004/02/12/squid.html Amir -Original Message- From: Roy M. [mailto:[EMAIL PROTECTED] Sent: Monday, June 23, 2008 10:26 PM To: Pritam Cc: squid-users Subject: Re: [squid-users] Failed to select source for ...assert failure... Hi, On 6/24/08, Pritam [EMAIL PROTECTED] wrote: Try increasing the size of file descriptor Are there any reference links? Thanks. __ NOD32 3209 (20080623) Information __ This message was checked by NOD32 antivirus system. http://www.eset.com
Re: [squid-users] Failed to select source for ...assert failure...
Roy M. wrote: Hi, On 6/24/08, Pritam [EMAIL PROTECTED] wrote: Try increasing the size of file descriptor Are there any reference links? Thanks. If squid binary is install from source then following steps should work. ~ Stop the squid process. ~ Use ulimit to increase the file descriptor size. # ulimit –HSn 8192 (where 8192 is the FD size ) ~ Start the squid process. See cache.log to confirm the change FD. else this link should help you further. ~ http://www.cyberciti.biz/faq/squid-proxy-server-running-out-filedescriptors/ Regards
Re: [squid-users] How to add a banner to all (unauthenticated) pages?
Did you get this working? -- View this message in context: http://www.nabble.com/How-to-add-a-banner-to-all-%28unauthenticated%29-pages--tp17738628p18074084.html Sent from the Squid - Users mailing list archive at Nabble.com.
Re: [squid-users] Squid with two networks ...
You could probably use a set of static routes made by route command, where you can specify static gateway for each network. Defining as gateway each of yours public IP. --- On Mon, 6/23/08, Ramiro Sabastta [EMAIL PROTECTED] wrote: From: Ramiro Sabastta [EMAIL PROTECTED] Subject: [squid-users] Squid with two networks ... To: squid-users@squid-cache.org Date: Monday, June 23, 2008, 8:20 AM Hi !!! I've installed a Squid box transparent mode (3STABLE7) with two network cards and I must to implement this scenario: - The network cards are connected at two diferents internal Class C network with public IP. - If the http requeriment asking about an object that is in the cache, the Squid give the object throught the same interface that the original requermients comes (I tink that this is not a problem, because de origin IP is in the same network that the squid have). - If the http requeriment asking about an object that isn't in the cache, the Squid go direct to public network trought the same interface that the original requermients comes (This is the problem). Are some configurations of squid.conf that allow me to do that? I think resolve te problem, externally form Squid (with iptables, for example) Thanks a lot !!! Regards !! Ramiro
Re: [squid-users] Reverse Proxy and SSL...
On mån, 2008-06-23 at 10:44 -0400, Gary Tai wrote: Is there any requirement to configure Squid to forward SSL requests apart from configuring the appropriate port (typically 443)? You also need a matching ssl enabled cache_peer if forwarding to port 443 on the web server. TYpically a setup looks like the following: acl http protocol http acl https protocol https http_port public.ip:80 accel defaultsite=your.main.sitename vhost acl servergroup_domains dstdomain your.main.sitename other.sitename ... cache_peer ip.of.web.server parent 80 0 no-query originserver name=servername_http cache_peer_access servername_http http servergroup_domains https_port public.ip:443 accel defaultsite=your.main.sitename sslcert=/path/to/main.sitename.pem cache_peer ip.of.web.server parent 443 0 no-query originserver ssl name=servername_https cache_peer_access servername_https https servergroup_domains If you have multiple servers with the same content then the same acl is used for them all.. (hence the severgroup_ notation above..) Regards Henrik signature.asc Description: This is a digitally signed message part
Re: [squid-users] Squid with two networks ...
julian julian wrote: You could probably use a set of static routes made by route command, where you can specify static gateway for each network. Defining as gateway each of yours public IP. --- On Mon, 6/23/08, Ramiro Sabastta [EMAIL PROTECTED] wrote: From: Ramiro Sabastta [EMAIL PROTECTED] Subject: [squid-users] Squid with two networks ... To: squid-users@squid-cache.org Date: Monday, June 23, 2008, 8:20 AM Hi !!! I've installed a Squid box transparent mode (3STABLE7) with two network cards and I must to implement this scenario: - The network cards are connected at two diferents internal Class C network with public IP. Could you illustrate more about your network. I mean the connected to the squid box..? - If the http requeriment asking about an object that is in the cache, the Squid give the object throught the same interface that the original requermients comes (I tink that this is not a problem, because de origin IP is in the same network that the squid have). - If the http requeriment asking about an object that isn't in the cache, the Squid go direct to public network trought the same interface that the original requermients comes (This is the problem). Are some configurations of squid.conf that allow me to do that? I think resolve te problem, externally form Squid (with iptables, for example) Thanks a lot !!! Regards !! Ramiro
[squid-users] Squid CPU utilization
Hello! Can SQUID3 utilize more than one cpu with one instance? Because i see on with `top` that my squid goes to %CPU - 101% Thank you!
Re: [squid-users] Failed to select source for ...assert failure...
Hi Roy, Roy M. wrote: I am using Squid as HTTP accelerator, occasally my Squid3 (stable6) will have error in cache.log, e.g. Failed to select source for http://www.example.com But I am sure that the URL is reachable in backend web server, and sometimes it will immediately followed by an assert failure and restart, e.g. assertion failed: comm.cc:1997: !fd_table[fd].flags.closing Are you sure you are running the squid3-stable6 and not squid3-HEAD? It looks like the bug #2381 and bug #2253 (and both are squid3-HEAD bugs ...) Regards, Christos
[squid-users] Re: Re[squid-users] verse proxy to Sharepoint
Hi, OK, have built a new Squid 2.7 Stable 2 version and it's up and running. wbinfo reports authentication OK, but I get the following when the users try and authenticate authenticateNTLMHandleReply: Error validating user via NTLM. Error returned 'BH NT_STATUS_ACCESS_DENIED' This would suggest a Samba problem but in isolation, Samba seems fine. Any ideas??? All the best Andrew Chris Robertson-2 wrote: afstcklnd wrote: We have a working infrastructure using Windows 2003, AD Sharepoint for Project Web Access. In order to allow branch office access, we wanted to put in place a reverse proxy solution and looked at Squid. After a lot of reading, it became clear the Squid 2.6 or above was the best option in order to get working NTLM authentication. So We've installed a Fedora Core 9 box with Squid 3.0, attached it to the domain and set up all the kerberos, ldap authentication etc. However, it's not quite behaving correctly. Last I saw, (http://www.squid-cache.org/mail-archive/squid-users/200803/0523.html) you'll need to use 2.6 or 2.7 to proxy NTLM authentication. The connection pinning required to support it has not been added to the released Squid 3 code base. Testing kerberos, ldap etc. seems all OK and the ntlm helpers are running OK. Connect to the proxy with IE of Firefox and the request for a password is presented but regardless of what is entered authentication. Obviously I need to provide more information but can you guide me as to where and what I need to provide? Thanks Chris -- View this message in context: http://www.nabble.com/Reverse-proxy-to-Sharepoint-tp17909397p18079891.html Sent from the Squid - Users mailing list archive at Nabble.com.
Re: [squid-users] Squid and Cacti problem
Hello! I used to have Squid 2.6.x monitored without any problem on cacti. But now on Squid 3.0.x, i get very gigant values in the range of Gigabits (In the traffic in / out / saved section), that i dont think that are real values. What might be the problem? I've seen this in -3 also, but I run HEAD, so put most of my errors down to bad readings when Squid was being reset after it hit a bug and crashed. Are you sure the MIB has the same field at that OID location in both versions? Amos
Re: [squid-users] Squid with two networks ...
Hi !!! I've installed a Squid box transparent mode (3STABLE7) with two network cards and I must to implement this scenario: - The network cards are connected at two diferents internal Class C network with public IP. - If the http requeriment asking about an object that is in the cache, the Squid give the object throught the same interface that the original requermients comes (I tink that this is not a problem, because de origin IP is in the same network that the squid have). - If the http requeriment asking about an object that isn't in the cache, the Squid go direct to public network trought the same interface that the original requermients comes (This is the problem). Are some configurations of squid.conf that allow me to do that? tcp_outgoing_address # configure an ACL to match which src network range the request comes from. acl netA src 192.168.20.0/24 acl netB src 192.168.12.0/24 # specify which IP squid uses to send requests from tcp_outgoing_address 192.168.20.1 allow netA tcp_outgoing_address 192.168.20.1 deny !netA tcp_outgoing_address 192.168.12.1 allow netB tcp_outgoing_address 192.168.12.1 deny !netB The above will make squid change its own Src-IP based on your ACL. Amos
Re: [squid-users] Squid CPU utilization
Hello! Can SQUID3 utilize more than one cpu with one instance? Because i see on with `top` that my squid goes to %CPU - 101% Sort of. It's slightly muddled by the fact that squid runs a set of helpers. The Squid binaries themselves cannot individually use more than one CPU as yet. But each of them and any helpers may be shoved by the system onto other CPU. Likewise Squid may be run on a full CPU by itself, and the OS etc on another. Up to 120% is probably expected. Amos
Re: [squid-users] Failed to select source for ...assert failure...
On mån, 2008-06-23 at 23:26 +0800, Roy M. wrote: I am using Squid as HTTP accelerator, occasally my Squid3 (stable6) will have error in cache.log, e.g. Failed to select source for http://www.example.com But I am sure that the URL is reachable in backend web server Anything else relevant before this in cache.log? and sometimes it will immediately followed by an assert failure and restart, e.g. assertion failed: comm.cc:1997: !fd_table[fd].flags.closing File a bug on that.. http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-7067fc0034ce967e67911becaabb8c95a34d576d Also, sometimes I did observe an error in cache.log, e.g. client_side.cc(2723) okToAccept: WARNING! Your cache is running out of filedescriptors http://www.squid-cache.org/Versions/v2/2.7/cfgman/max_filedescriptors.html http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-eb3240fe8e61368056af86138a2b5dcbc9781a54 Regards Henrik signature.asc Description: This is a digitally signed message part
Re: [squid-users] Failed to select source for ...assert failure...
Hi, On 6/24/08, Henrik Nordstrom [EMAIL PROTECTED] wrote: http://www.squid-cache.org/Versions/v2/2.7/cfgman/max_filedescriptors.html http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-eb3240fe8e61368056af86138a2b5dcbc9781a54 But I am using 3.0, seems no this directive... Also tried : http://www.onlamp.com/pub/a/onlamp/2004/02/12/squid.html But I can't find the string __FD_SETSIZE in the file: /usr/include/bits/types.h Howard
Re: [squid-users] Failed to select source for ...assert failure...
Roy M. wrote: Hi, On 6/24/08, Henrik Nordstrom [EMAIL PROTECTED] wrote: http://www.squid-cache.org/Versions/v2/2.7/cfgman/max_filedescriptors.html http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-eb3240fe8e61368056af86138a2b5dcbc9781a54 But I am using 3.0, seems no this directive... Also tried : http://www.onlamp.com/pub/a/onlamp/2004/02/12/squid.html But I can't find the string __FD_SETSIZE in the file: /usr/include/bits/types.h If you are compiling there is the ./configure --with-filedescriptors=NUMBER option in 3.0 for this. Amos -- Please use Squid 2.7.STABLE3 or 3.0.STABLE7
Re: [squid-users] Failed to select source for ...assert failure...
On tis, 2008-06-24 at 12:46 +0800, Roy M. wrote: Hi, On 6/24/08, Henrik Nordstrom [EMAIL PROTECTED] wrote: http://www.squid-cache.org/Versions/v2/2.7/cfgman/max_filedescriptors.html http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-eb3240fe8e61368056af86138a2b5dcbc9781a54 But I am using 3.0, seems no this directive... See also the FAQ link.. Regards Henrik signature.asc Description: This is a digitally signed message part