[squid-users] Squid performance for 600 users
Hi group I wonder if a debian box with 1Gb RAM could run squid to block child porn sites for 600 users aprox. Is possible? would be good? a checklist to know the requisites for squid? Thanks in advanced
[squid-users] Re: Is lame servers an issue?
Hi
great explanation!!
Thanks!!
2008/7/2 Michael Coumerilh [EMAIL PROTECTED]:
lame servers are sorta like the mail that you receive at your new home
that are addressed to the previous home owner. Someone somewhere out there
thinks that your address is the best way to get ahold of that person. When
in reality, you have no way to do such a thing. And in this case, some
computer (theirs specifically, or one in between you and them) is asking
yours for directions. Your computer is logging that, Hey, someone lame (pun
intended) just asked me about 1.2.3.4 thinking I was in charge of it. I just
thought you'd like to know
Mike
Warn those who are idle, encourage the timid, help the weak, be patient
with everyone. - Paul - (1 Thessalonians 5:14)
On Jul 2, 2008, at 3:49 PM, Carlos Alberto Bernat Orozco wrote:
Hi group
Thanks for the fast answer.
Yes, I put those lines and stop logging lame-servers.
But I have another question. Is this process decreasing performance on
my server? yes I stopped the logging but is totally necesary the lame
servers?
Thanks in advanced!
2008/7/2 Jeff Reasoner [EMAIL PROTECTED]:
Not an issue you can fix directly. Those domains are delegated to hosts
that are not properly configured nameservers, and named is logging that.
You could prevent them from being logged in bind 9.x.x with a logging
statement in named.conf:
logging {
channel null { null; };
category lame-servers { null; };
}
See the BIND ARM for all the gory logging details.
On Wed, 2008-07-02 at 10:42 -0500, Carlos Alberto Bernat Orozco wrote:
Hi group
Sorry for my question question. I'm newbie.
In my logs I see a lot of this messages
named[3028]: lame server resolving 'adon.co.kr' (in 'adon.co.kr'?):
211.234.93.201#53
named[3028]: lame server resolving 'core-distributions.com' (in
'core-distributions.com'?): 80.85.91.14#53
named[3028]: lame server resolving 'core-distributions.com' (in
'core-distributions.com'?): 80.85.91.15#53
named[3028]: lame server resolving 'eslcontractorshardware.com' (in
'eslcontractorshardware.com'?): 75.127.110.43#53
named[3028]: lame server resolving 'eslcontractorshardware.com' (in
'eslcontractorshardware.com'?): 75.127.110.2#53
named[3028]: lame server resolving 'web-display.com' (in
'web-display.com'?): 67.15.81.33#53
named[3028]: lame server resolving 'web-display.com' (in
'web-display.com'?): 67.15.80.3#53
named[3028]: lame server resolving 'core-distributions.com' (in
'core-distributions.com'?): 80.85.91.15#53
Is this an issue? can I block it? how can I block it?
Thanks in advanced
--
Jeff Reasoner
HCCA
513 728-7902 voice
[squid-users] Squid performance... RAM or CPU?
Hi group Thanks for the answer! I like those cases like yours. Any other cases? Another question. What is the most important component for squid? RAM or CPU? Why I'm making this question, because when I installed squid for 120 users, the ram went to the sky But your're mentioning more CPU than RAM as a primary component to look at Could you explain this? Thanks in advanced 2008/7/2 Jonathan Chretien [EMAIL PROTECTED]: http://www.deckle.co.za/squid-users-guide/Installing_Squid On my side, I run Squid on a HP VL420 P4 1.8 or 2.1ghz, 768meg of ram, 20gig Seagate IDE Hard Drive for approximatly 125 users. The maximum load, that I got, is .70 (1 minute). My CPU peak sometimes at 40% but most of the time, it's running most of the time at idle. I have a peak time at lunch time and break. My average CPU is approximatly at 5% and peak at 40%. I saw a 50-60% and a load at .90 at the beginning when I had some problem with my Apple computer and the NTLM Auth. (I still had this problem but I did a bypass for my apple computer) If I compare with my current setup, for an another 150 users, probably 1-1.5 gig of Ram is important and probably changing my Seagate IDE HardDrive for a SCSI 10k-15k rpm U160 or U320. Jonathan Date: Wed, 2 Jul 2008 15:52:16 -0500 From: [EMAIL PROTECTED] To: squid-users@squid-cache.org Subject: [squid-users] Squid performance for 600 users Hi group I wonder if a debian box with 1Gb RAM could run squid to block child porn sites for 600 users aprox. Is possible? would be good? a checklist to know the requisites for squid? Thanks in advanced _ Envoie un sourire, fais rire, amuse-toi! Employez-le maintenant! http://www.emoticonesgratuites.ca/?icid=EMFRCA120
[squid-users] Squid performance for an ISP
Hi I was wondering which is the best configuration for linux box and Squid to prevent pornographic child sites acting as a transparent proxy for 600 users. Could a 1Gb RAM machine do this? Another question is, what are the posible reasons for several TCP_MISS in the squid log? like a checklist or something Thanks in advanced!
Re: [squid-users] Squid performance for an ISP
Thanks for the answer! When I was playing with squid (first setup), I found many TCP_MISS running on my log, when the users surf many sites. I can say 90% of my entire squid log was TCP_MISS. And I didn't found many information about TCP_MISS in the web site like meaning and issues. The same for MEM_HIT and other parameters. Why these can be posible to have many of this? And, where can I get more info about? I don't know if can be more specific Thanks in advanced 2008/6/30 Henrik Nordstrom [EMAIL PROTECTED]: On mån, 2008-06-30 at 21:25 +0200, Carlos Alberto Bernat Orozco wrote: Another question is, what are the posible reasons for several TCP_MISS in the squid log? like a checklist or something Can you be a bit more specific? Several in what way? Regards Henrik
[squid-users] Blocking web sites
Hi Why is necessary an additional tool for squid to block web sites like SquidGuard or DansGuardian? is there an issue with performance? Thanks in advanced
Re: [squid-users] Blocking web sites
Thanks for your message. I wass totally mistaken. Thanks! 2008/6/7 Leonardo Rodrigues Magalhães [EMAIL PROTECTED]: Carlos Alberto Bernat Orozco escreveu: Hi Why is necessary an additional tool for squid to block web sites like SquidGuard or DansGuardian? is there an issue with performance? You're completly mistaken. DansGuardian and SquidGuard are OPTIONAL tools, they are not REQUIRED. Squid implements several Access List (ACL) types which can be used to apply SEVERAL different and probably complex browsing policies. It cannot be that easy to implement very complex policies, but it's completly possible without using any other optional tool, like SquidGuard, DansGuardian or others. Those tools, tough, can improve cpu usage on big and complex policies, and make things easier for implementing those complex policies. But ... they are NOT required as you're thinking. If you understand how squid ACL works, if you can place your policy in a logical way, then you can translate this to squid ACLS and implement them. -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email [EMAIL PROTECTED] My SPAMTRAP, do not email it
[squid-users] Squid hangs after some time
Hi I'm new to Squid, so please be patient. I've installed Squid 2.6 on a Debian Etch as a transparent proxy. I can go to many web sites but suddenly I can't surf the web. I realize the problem when I make ping to gmail.com and after 10 or 20 minutes gives me Request Time Out. I saw the link http://squidproxy.wordpress.com/2007/06/05/thinsg-to-look-at-if-websites-are-hanging/ (Things to look at if websites are hanging!) and I've applied those solutions but still have that problem. What other thing can I check? Please tell me if you need more info Thanks in advanced.
[squid-users] Squid hangs after a time
Hi group Thanks for your answer. I just checked the resolv.conf. It seems to me normal, with the nameservers list of my ISP. Could be another problem? Thanks in advanced 2008/6/6 Mario Salazar Ba=F1os [EMAIL PROTECTED]: Carlos Alberto Bernat Orozco escribi=F3: Hi I'm new to Squid, so please be patient. I've installed Squid 2.6 on a Debian Etch as a transparent proxy. I can go to many web sites but suddenly I can't surf the web. I realize the problem when I make ping to gmail.com and after 10 or 20 minutes gives me Request Time Out. I saw the link http://squidproxy.wordpress.com/2007/06/05/thinsg-to-look-at-if-websites= -are-hanging/ (Things to look at if websites are hanging!) and I've applied those solutions but still have that problem. What other thing can I check? Please tell me if you need more info Thanks in advanced. check your dns list (resolv.conf) -- --=_Part_8173_3861938.1212764861194 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Hi groupbrbrThanks for your answer. I just checked the resolv.conf. It = seems to me normal, with the nameservers list of my ISP.brbrCould be an= other problem?brbrThanks in advancedbrbrdiv class=3Dgmail_quote 2008/6/6 Mario Salazar Ba=F1os lt;a href=3Dmailto:[EMAIL PROTECTED] m.mx[EMAIL PROTECTED]/agt;:brblockquote class=3Dgmail_quo= te style=3Dborder-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt= 0.8ex; padding-left: 1ex; Carlos Alberto Bernat Orozco escribi=F3:divdiv/divdiv class=3DWj3C7= cbr blockquote class=3Dgmail_quote style=3Dborder-left: 1px solid rgb(204, = 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex; Hibr br I#39;m new to Squid, so please be patient. I#39;ve installed Squid 2.6 on= abr Debian Etch as a transparent proxy. I can go to many web sites butbr suddenly I can#39;t surf the web. I realize the problem when I make pingb= r to a href=3Dhttp://gmail.com; target=3D_blankgmail.com/a and after 1= 0 or 20 minutes gives me Request Time Out.br br I saw the linkbr br a href=3Dhttp://squidproxy.wordpress.com/2007/06/05/thinsg-to-look-at-if-= websites-are-hanging/ target=3D_blankhttp://squidproxy.wordpress.com/20= 07/06/05/thinsg-to-look-at-if-websites-are-hanging//abr br (Things to look at if websites are hanging!) and I#39;ve applied thosebr solutions but still have that problem. What other thing can I check?br br Please tell me if you need more infobr br Thanks in advanced.br br br nbsp;br /blockquote/div/div check your dns list (resolv.conf)brfont color=3D#88 br -- br /font/blockquote/divbr --=_Part_8173_3861938.1212764861194--
Re: [squid-users] Squid hangs after some time -testing-
Hi Thanks to all for the answers. I will tell you my confguration. I have a debian etch box with 2 network interfaces. One for WAN and the other LAN. I have an script with iptables to redirect traffic to the proxy as transparent proxy. When I started the Squid service, the ping after 10 or 15 minutes fails. When I stopped the service, ping works normally. So I believed something wrong with Squid. But I just change the order of the interfaces, the eth0 now is eth1 and eth1 is eth0 and everything works fine, for now. It seems an issue with the interfaces, exactly don't know. If someone have had this issue with this and has any explication, is welcome. Thanks. I will continue posting my results if someone needs. Have a nice day! 2008/6/6 Henrik Nordstrom [EMAIL PROTECTED]: On tor, 2008-06-05 at 23:15 -0500, Carlos Alberto Bernat Orozco wrote: I'm new to Squid, so please be patient. I've installed Squid 2.6 on a Debian Etch as a transparent proxy. I can go to many web sites but suddenly I can't surf the web. I realize the problem when I make ping to gmail.com and after 10 or 20 minutes gives me Request Time Out. If ping suddently fails but normally works then you have a network failure or some kind, completely outside of Squid. Regards Henrik
[squid-users] Squid hangs after some time
Hi I'm new to Squid, so please be patient. I've installed Squid 2.6 on a Debian Etch as a transparent proxy. I can go to many web sites but suddenly I can't surf the web. I realize the problem when I make ping to gmail.com and after 10 or 20 minutes gives me Request Time Out. I saw the link http://squidproxy.wordpress.com/2007/06/05/thinsg-to-look-at-if-websites-are-hanging/ (Things to look at if websites are hanging!) and I've applied those solutions but still have that problem. What other thing can I check? Please tell me if you need more info Thanks in advanced.
