Re: [squid-users] delay after service load
Is starting at bootime with centos 4.1 --- Henrik Nordstrom [EMAIL PROTECTED] escribió: On Fri, 7 Oct 2005, Daniel Navarro wrote: After booting and squid start it lasts about 4-5 minutes until we can start browsing through it. How are you starting Squid? If you are using the -F command line option then don't... Regards Henrik __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] how to speed up squid
Hi all I agree with kinkie, clients will always complain. Since I own a cibercafe I always trace browsing speed. A good tool for it is bwm-ng you can google for it. Since some pages/sites can be slowly for reasons out of your responsability I just care about my ISP speed using their speed test tool page and watching bwm-ng shows full speed. In my case 1526Kbps internet plan show 168Kb/s speed on eth0. Hope it helps, Daniel Navarro, Venezuela --- Tharanga [EMAIL PROTECTED] escribió: Greetings! I have installed a squid 2.5 and but my clients are always complaing that the internet access speed is very slow. iam using 1 GB RAM and i incresed cache siz to 340 MB. (approx 1/3 of physical memory.) is there any other parametes to increasse the speed of my proxy server ?? please help me to solve this matter.. thxs in advance Tharanga __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] Squid statistics
Hi, Kinkie said right to you, I would agree SARG, the most extensive statistics I have come from it. Yours, Daniel Navarro, Venezuela. --- John Poltorak [EMAIL PROTECTED] escribió: What is the recommended way of producing statistics about Squid usage? -- John __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] Cache directories
Hi tony, The answer to your question, yes it clears old entries and replace less used ones. you can read more about it here http://www.squid-cache.org/Doc/FAQ/FAQ-12.html#ss12.25 Regards, Daniel Navarro Maracay, Venezuela. --- Tony Spencer [EMAIL PROTECTED] escribió: Hi all I have squid running but was wondering what happens when the cache dirs get full or reach the limit set in the squid.conf. Will squid clear out the oldest entries or do I have to clear them out myself? Thanks Tony __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] Which the best OS for Squid?
Well I see there is a big discussion with few arguments about best linux for squid. More anwers are not sustained but demostrate love for our distros. Well here I go. Redhat, because is the world Open Source leader and a good balanced distro with big support on any branch, I mean Redhat 9, RHEL, Fedora or the alternative CentOS, wich I use. Fast, realiable, secure with Selinux feature. Regards, Daniel Navarro Maracay, Venezuela. Ps: After all, linux is all linux. --- Tino Reichardt [EMAIL PROTECTED] escribió: * Odhiambo Washington [EMAIL PROTECTED] wrote: * On 06/10/05 23:25 +1300, D E Radel wrote: - Original Message - From: Askar [EMAIL PROTECTED] To: Bonnici Daniel [EMAIL PROTECTED] Cc: squid-users@squid-cache.org Sent: Thursday, October 06, 2005 11:09 PM Subject: Re: [squid-users] Which the best OS for Squid? Bonnici Daniel wrote: Hi, which is the best linux OS for security and to run squid?? cheers Daniel www.slackware.com coz it follows KISS (Keep It Simple Stupid) ;) Debian, apt-get install squid. :-) FreeBSD, portinstall squid. :-))) Arch Linux pacman -S squid :-() -- regards, TR __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] Re: bad squid - Daniel Navarro - xstrdup
Hi Joost,
Thank you for the only answer in desperate times :)
I´ve found the problem, one memory bank is wrong so
everything was wrong there.
Selinux couldn´t be because was working fine before
problems started
Regards, Daniel Navarro
--- Joost de Heer [EMAIL PROTECTED] escribió:
So I change to Fedora 4 with stable 12 and has
hangs
again but now same message. just receiving this
continously
Oct 6 09:39:50 ngproxy kernel:
audit(1128605990.095:2): avc: denied { name_co
nnect } for pid=2195 comm=squid dest=8001
scontext=system_u:system_r:squid_t
tcontext=system_u:object_r:port_t
tclass=tcp_socket
Sounds like SElinux is forbidding things.
Joost
__
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ¡gratis!
Regístrate ya - http://correo.espanol.yahoo.com/
[squid-users] delay after service load
Hi all, After booting and squid start it lasts about 4-5 minutes until we can start browsing through it. Why? How can I solve? Thank you in advance. Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
[squid-users] bad squid - Daniel Navarro - xstrdup
Hi all
Have had really bad time with squid on centos 4.1
after several days of good behaviour.
Several box hangs daily, I found this FATAL: xstrdup:
tried to dup a NULL pointer message so found it as a
bug for squid stable6.
So I change to Fedora 4 with stable 12 and has hangs
again but now same message. just receiving this
continously
Oct 6 09:39:50 ngproxy kernel:
audit(1128605990.095:2): avc: denied { name_co
nnect } for pid=2195 comm=squid dest=8001
scontext=system_u:system_r:squid_t
tcontext=system_u:object_r:port_t tclass=tcp_socket
Oct 6 09:39:50 ngproxy kernel:
audit(1128605990.095:3): avc: denied { name_co
nnect } for pid=2195 comm=squid dest=8001
scontext=system_u:system_r:squid_t
tcontext=system_u:object_r:port_t tclass=tcp_socket
Oct 6 09:39:50 ngproxy kernel:
audit(1128605990.207:4): avc: denied { name_co
nnect } for pid=2195 comm=squid dest=8001
scontext=system_u:system_r:squid_t
tcontext=system_u:object_r:port_t tclass=tcp_socket
Oct 6 09:41:50 ngproxy kernel:
audit(1128606110.586:5): avc: denied { name_co
nnect } for pid=2195 comm=squid dest=8001
scontext=system_u:system_r:squid_t
tcontext=system_u:object_r:port_t tclass=tcp_socket
Oct 6 09:41:50 ngproxy kernel:
audit(1128606110.690:6): avc: denied { name_co
nnect } for pid=2195 comm=squid dest=8001
scontext=system_u:system_r:squid_t
tcontext=system_u:object_r:port_t tclass=tcp_socket
Oct 6 09:41:50 ngproxy kernel:
audit(1128606110.718:7): avc: denied { name_co
nnect } for pid=2195 comm=squid dest=8001
scontext=system_u:system_r:squid_t
tcontext=system_u:object_r:port_t tclass=tcp_socket
Oct 6 09:55:25 ngproxy kernel: ip_tables: (C)
2000-2002 Netfilter core team
Oct 6 09:55:25 ngproxy kernel: ip_conntrack version
2.1 (8192 buckets, 65536 ma
x) - 248 bytes per conntrack
Oct 6 09:59:02 ngproxy kernel:
audit(1128607142.975:8): avc: denied { name_co
nnect } for pid=2195 comm=squid dest=2082
scontext=system_u:system_r:squid_t
tcontext=system_u:object_r:port_t tclass=tcp_socket
Oct 6 09:59:03 ngproxy kernel:
audit(1128607143.031:9): avc: denied { name_co
nnect } for pid=2195 comm=squid dest=2082
scontext=system_u:system_r:squid_t
tcontext=system_u:object_r:port_t tclass=tcp_socket
Oct 6 09:59:03 ngproxy kernel:
audit(1128607143.095:10): avc: denied { name_c
onnect } for pid=2195 comm=squid dest=2082
scontext=system_u:system_r:squid_t
tcontext=system_u:object_r:port_t tclass=tcp_socket
Oct 6 10:01:01 ngproxy crond(pam_unix)[2704]: session
opened for user root by (
uid=0)
Oct 6 10:01:01 ngproxy crond(pam_unix)[2704]: session
closed for user root
so don´t have any clue what to do now.
Any idea?
__
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ¡gratis!
Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] What means squid: [60G ???
Ok, service squid start from command line, is centos 4.1 And starts fine. --- Squid [EMAIL PROTECTED] escribió: When you start the squid manually, how are you starting it, i.e., using startup script(/etc/init.d/squid) or by executing the squid binaly directly. Did you get any errors when starting squid using the startup script ? if possible could you please attach the startup script ? Why cache.log? squid is not starting and I see those lines on boot.log. --- Squid [EMAIL PROTECTED] escribió: Cou you please attach the cache.log output? --- [EMAIL PROTECTED] escribió: How are you attempting to start squid? Tim Rainier Information Services, Kalsec, INC Daniel Navarro [EMAIL PROTECTED] 09/16/2005 11:29 AM To Squid Cache squid-users@squid-cache.org cc Subject [squid-users] What means squid: [60G??? Hi all fellows, My squid is not starting at bootime, and yes is chkconfig for that al leves 3, 4 and 5. Manually starts fine. I see this lines on boot.log Sep 13 15:48:21 ngproxy squid: Starting squid: Sep 13 15:48:22 ngproxy squid: . Sep 13 15:48:22 ngproxy squid: [60G Sep 13 15:48:22 ngproxy squid: Sep 13 15:48:22 ngproxy rc: Starting squid: succeeded what is going on? and how can I solve? Regards in advance, from Venezuela, Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/ __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
[squid-users] What means squid: [60G ???
Hi all fellows, My squid is not starting at bootime, and yes is chkconfig for that al leves 3, 4 and 5. Manually starts fine. I see this lines on boot.log Sep 13 15:48:21 ngproxy squid: Starting squid: Sep 13 15:48:22 ngproxy squid: . Sep 13 15:48:22 ngproxy squid: [60G Sep 13 15:48:22 ngproxy squid: Sep 13 15:48:22 ngproxy rc: Starting squid: succeeded what is going on? and how can I solve? Regards in advance, from Venezuela, Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] What means squid: [60G ???
--- [EMAIL PROTECTED] escribió: How are you attempting to start squid? Tim Rainier Information Services, Kalsec, INC Daniel Navarro [EMAIL PROTECTED] 09/16/2005 11:29 AM To Squid Cache squid-users@squid-cache.org cc Subject [squid-users] What means squid: [60G??? Hi all fellows, My squid is not starting at bootime, and yes is chkconfig for that al leves 3, 4 and 5. Manually starts fine. I see this lines on boot.log Sep 13 15:48:21 ngproxy squid: Starting squid: Sep 13 15:48:22 ngproxy squid: . Sep 13 15:48:22 ngproxy squid: [60G Sep 13 15:48:22 ngproxy squid: Sep 13 15:48:22 ngproxy rc: Starting squid: succeeded what is going on? and how can I solve? Regards in advance, from Venezuela, Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/ __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
[squid-users] Extrange Squid - solved
Hi all fellows, Remember I couldn´t figure why my squid just stopped working even with service running? Hope so. I am sorry to know just received 2 answers, none of them worked. Well I´ve found my msn messenger clients were out of date , updated them all and squid just worked fine since. So I think msn was doing something nasty. Maybe. Hope this can help somebody out there. See you, regards :) Daniel Navarro Maracay, Venezuela __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] strange squid
already did same result. Even system restart doesn´t solve anything. It solves by itself after a while. Regards hopping you have solutions or ideas :) --- Jose-external [EMAIL PROTECTED] escribió: you can try to clear all cache ,and restart. - Original Message - From: Daniel Navarro [EMAIL PROTECTED] To: Squid Cache squid-users@squid-cache.org Sent: Friday, September 09, 2005 8:18 AM Subject: [squid-users] strange squid Hi all, Squid is driving me crazy. Suddenly, from friday 2 squid began stopping browsing. without stopping service or error message anywhere. Just clients can´t browse through proxy but can directly to the internet. Squid restarting doesn´t solve anything. and don´t have any related warning in squid.log. It can happen even 3 times in a morning. so Any idea? Yours from Venezuela. Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/ __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] strange squid
is it possible an old version of msn messenger crashed my squid? Regards... --- Jose-external [EMAIL PROTECTED] escribió: you can try to clear all cache ,and restart. - Original Message - From: Daniel Navarro [EMAIL PROTECTED] To: Squid Cache squid-users@squid-cache.org Sent: Friday, September 09, 2005 8:18 AM Subject: [squid-users] strange squid Hi all, Squid is driving me crazy. Suddenly, from friday 2 squid began stopping browsing. without stopping service or error message anywhere. Just clients can´t browse through proxy but can directly to the internet. Squid restarting doesn´t solve anything. and don´t have any related warning in squid.log. It can happen even 3 times in a morning. so Any idea? Yours from Venezuela. Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/ __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] strange squid
Ok, looking by its time I get 3 issues. 1. Excess data from... 2. likely proxy abuse 3. url too large. and clients got timeout after a long time. I see there are some patches but not seem to go to the main problem. I am on centos 4.1 and can't find any update. Hope you can help. Daniel Navarro. --- nima sadeghian [EMAIL PROTECTED] escribió: which message clients get while they are browsing. can they detect squid port? ... On 9/10/05, Daniel Navarro [EMAIL PROTECTED] wrote: is it possible an old version of msn messenger crashed my squid? Regards... --- Jose-external [EMAIL PROTECTED] escribió: you can try to clear all cache ,and restart. - Original Message - From: Daniel Navarro [EMAIL PROTECTED] To: Squid Cache squid-users@squid-cache.org Sent: Friday, September 09, 2005 8:18 AM Subject: [squid-users] strange squid Hi all, Squid is driving me crazy. Suddenly, from friday 2 squid began stopping browsing. without stopping service or error message anywhere. Just clients can´t browse through proxy but can directly to the internet. Squid restarting doesn´t solve anything. and don´t have any related warning in squid.log. It can happen even 3 times in a morning. so Any idea? Yours from Venezuela. Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/ __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/ -- Best Regards NIMA SADEGHIAN __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
[squid-users] strange squid
Hi all, Squid is driving me crazy. Suddenly, from friday 2 squid began stopping browsing. without stopping service or error message anywhere. Just clients can´t browse through proxy but can directly to the internet. Squid restarting doesn´t solve anything. and don´t have any related warning in squid.log. It can happen even 3 times in a morning. so Any idea? Yours from Venezuela. Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] squid refresh rate
Wenie, Ok, I think more than enough material is here http://www.squid-cache.org/Doc/FAQ/FAQ-12.html and specially your concern here http://www.squid-cache.org/Doc/FAQ/FAQ.html#toc12.20 More so, remember if you press refresh, objects are always refreshed, cache only works when other computer in a network loads objects. Regards, from Venezuela. --- Wennie V. Lagmay [EMAIL PROTECTED] escribió: Thanks Daniel, I realy need to know how squid do its refresh. - Original Message - From: Daniel Navarro [EMAIL PROTECTED] To: Wennie V. Lagmay [EMAIL PROTECTED]; squid-users@squid-cache.org Sent: Thursday, August 04, 2005 5:42 PM Subject: Re: [squid-users] squid refresh rate Hi Wennie, I think squid already doesn´t update automatically. You should read squid funtioning and cache´s work. I´ll give you the url as soon as I see it. Regards, hoping to help, Daniel N. --- Wennie V. Lagmay [EMAIL PROTECTED] escribió: Hi all, Is there a way to setup my squid to never update webpages automatically from internet? This is the scenario, if the page is already on the cache this page will be given to the succeeding request even though the said page is one week old, unless one client will refresh the page this is the only time that the squid proxy should go to the net to get an update. Thank you very much Wennie __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/ __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] MSN only for certain hours
Hi, you know what, webmin is a really suitable tool to make it easy. I hope you test it because will be there for further chances. Regards, --- Brent Clark [EMAIL PROTECTED] escribió: Hi all I have my squid conf file as so: ## Block AOL YAHOO ## acl aol_yahoo dstdomain login.oscar.aol.com acl aol_yahoo dstdomain pager.yahoo.com acl aol_yahoo dstdomain shhtp.msg.yahoo.com acl aol_yahoo dstdomain update.messenger.yahoo.com acl aol_yahoo dstdomain update.pager.yahoo.com acl aol_yahoo dstdomain companion.yahoo.com acl aol_yahoo dstdomain us.update.companion.yahoo.com http_access deny aol_yahoo ## Mime Blocking ## BLOCKING requested mime types acl mimeblockq req_mime_type ^application/x-icq$ acl mimeblockq req_mime_type ^application/x-comet-log$ acl mimeblockq req_mime_type ^application/x-pncmd$ acl mimeblockq req_mime_type ^application/x-hotbar-xip20$ acl mimeblockq req_mime_type ^application/x-msn-messenger$ acl mimeblockq req_mime_type ^.*AIM.* acl mimeblockp rep_mime_type ^application/x-icq$ acl mimeblockp rep_mime_type ^.*AIM.* acl mimeblockp rep_mime_type ^.*AIM/HTTP acl mimeblockp rep_mime_type ^application/x-comet-log$ acl mimeblockp rep_mime_type ^application/x-pncmd$ acl mimeblockp rep_mime_type ^application/x-chaincast$ acl mimeblockp rep_mime_type ^application/x-hotbar-xip20$ acl mimeblockp rep_mime_type ^application/x-msn-messenger$ http_access deny mimeblockq http_reply_access deny mimeblockp acl staff src /etc/SQUID/staff.txt acl workdays time M T W H F A 07:00-19:30 #http_access allow staff workdays http_access allow staff Would it be possible to get squid to allow MSN access only for these time between 12 noon and 13H00 And 18h00 to 08H00 If anyone can assist, it would be most appreciated. Kind Regards Brent Clark __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] url failures
I may be wrong, but sometimes your rules are working fine, just bad set and that confuses a lot. Regards, --- Joe Acquisto [EMAIL PROTECTED] escribió: I cannot connect to some sites that have valid url. Also, have instituted some ACL's, which don't appear to work. To attempt to determine why, I set squid.conf to debug_options ALL,1 38,2 and did an rcsquid restart, then tried to access the site. I did not see additional debug info in the log. Tried rcsquid stop then rcsquid start. Still no joy. Changed to debug_options ALL,1 38,2 28,9 and did restart. Still no additional info. SUSe 8, v2.4STABLE7-93 What am I doing wrong? joea __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] How to configure transparent squid
Please delete those preroutings, you don´t need to send internet into squid, squid will browse by itself. Regards --- Muhammad Aurangzeb [EMAIL PROTECTED] escribió: i m running redhat linux enterprize edition and i configured squid and internet was running on client's PC. but when i was going to configure the transparents squid then it causes problem and now internet is not running on client's PC. i also want to know, what i did wronge that causes that now internet is not running. now i want to tell my scenario i have two PCs one on which squid server is running and second is the client's PC. i ve two thernet cards eth0 (internet provider connection) and eth1( attacjhed to the client's PC). To make the squid server as transparent i run this command iptables-t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128 .iptables-t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128 unfortunately i run above command on both interfaces and now internet is not running. what is wronge in that. __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Re: [squid-users] squid -IE connection problem
Hi, That is exactly the configuration I have. Fedora Server for 20 clients, firewall, chache. Internal static, external dinamic. I think you really changed a lot on squid.conf, should begin with standard configuration and change one thing at time. I won´t use macaddress as a parameter, in fact I use internal ip´s. Regards. --- Kumara Jayaweera [EMAIL PROTECTED] escribió: Greetings! to all, Please, look into my problem and help me. I am quite a newbie squidish. 1. my squid server is ready for serve requests. 2. it is on a firewall too. 3.WAN connection (DSL) from eth0 is with DHCP. but my LAN connection is (eth1) with static IP. 4.client's access is given by MAC address, no other authentication is required. 5. almost all the settings as per the default values in squid.conf. (pls, somebody figure me out what is unnecessary for me in my squid.conf file which I don't understand). 6. I want Firewall+proxy+caching for my LAN of 20 PCs. 7. My problem is I can not connect IE clients to the Squid server with my settings (pls see, given below squid.conf file). 8. Since I am a newbie, I hope your generous assistance. 9. Pls, see below for my squid.conf file and squid -NCd1 command. [EMAIL PROTECTED] ~]# /usr/local/squid/sbin/squid -NCd1 2005/07/30 17:56:57| Starting Squid Cache version 2.5.STABLE10 for i686-pc-linux -gnu... 2005/07/30 17:56:57| Process ID 3901 2005/07/30 17:56:57| With 1024 file descriptors available 2005/07/30 17:56:57| Performing DNS Tests... 2005/07/30 17:56:57| Successful DNS name lookup tests... 2005/07/30 17:56:57| DNS Socket created at 0.0.0.0, port 32769, FD 4 2005/07/30 17:56:57| Adding nameserver 62.149.114.7 from /etc/resolv.conf 2005/07/30 17:56:57| Adding nameserver 212.118.133.101 from /etc/resolv.conf 2005/07/30 17:56:57| Unlinkd pipe opened on FD 9 2005/07/30 17:56:57| Swap maxSize 102400 KB, estimated 7876 objects 2005/07/30 17:56:57| Target number of buckets: 393 2005/07/30 17:56:57| Using 8192 Store buckets 2005/07/30 17:56:57| Max Mem size: 32768 KB 2005/07/30 17:56:57| Max Swap size: 102400 KB 2005/07/30 17:56:57| Rebuilding storage in /usr/local/squid/var/cache (CLEAN) 2005/07/30 17:56:57| Using Least Load store dir selection 2005/07/30 17:56:57| Set Current Directory to /usr/local/squid/var/cache 2005/07/30 17:56:57| Loaded Icons. 2005/07/30 17:56:57| Accepting HTTP connections at 0.0.0.0, port 3128, FD 11. 2005/07/30 17:56:57| Accepting ICP messages at 0.0.0.0, port 3130, FD 12. 2005/07/30 17:56:57| WCCP Disabled. 2005/07/30 17:56:57| Ready to serve requests. 2005/07/30 17:56:58| Done reading /usr/local/squid/var/cache swaplog (0 entries) 2005/07/30 17:56:58| Finished rebuilding storage from disk. 2005/07/30 17:56:58| 0 Entries scanned 2005/07/30 17:56:58| 0 Invalid entries. 2005/07/30 17:56:58| 0 With invalid flags. 2005/07/30 17:56:58| 0 Objects loaded. 2005/07/30 17:56:58| 0 Objects expired. 2005/07/30 17:56:58| 0 Objects cancelled. 2005/07/30 17:56:58| 0 Duplicate URLs purged. 2005/07/30 17:56:58| 0 Swapfile clashes avoided. 2005/07/30 17:56:58| Took 0.8 seconds ( 0.0 objects/sec). 2005/07/30 17:56:58| Beginning Validation Procedure 2005/07/30 17:56:58| Completed Validation Procedure 2005/07/30 17:56:58| Validated 0 Entries 2005/07/30 17:56:58| store_swap_size = 0k 2005/07/30 17:56:58| storeLateRelease: released 0 objects *** and my squid conf. file. *** http_port 3128 icp_port 3130 udp_incoming_address 0.0.0.0 udp_outgoing_address 255.255.255.255 icp_query_timeout 0 maximum_icp_query_timeout 2000 mcast_icp_query_timeout 3000 dead_peer_timeout 10 seconds hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY cache_mem 32 MB cache_swap_low 90 cache_swap_high 95 maximum_object_size 320010 KB minimum_object_size 0 KB maximum_object_size_in_memory 16 KB ipcache_size 2048 ipcache_low 90 ipcache_high 95 fqdncache_size 1024 cache_replacement_policy lru memory_replacement_policy lru cache_dir ufs /usr/local/squid/var/cache 100 16 256 cache_access_log /usr/local/squid/var/logs/access.log cache_log /usr/local/squid/var/logs/cache.log cache_store_log /usr/local/squid/var/logs/store.log emulate_httpd_log off log_ip_on_direct on mime_table /usr/local/squid/etc/mime.conf log_mime_hdrs off pid_filename /usr/local/squid/var/logs/squid.pid debug_options ALL,1 log_fqdn on client_netmask 255.255.255.0 ftp_list_width 32 ftp_passive on ftp_sanitycheck on #ftp_telnet_protocol on dns_retransmit_interval 5 seconds dns_timeout 2 minutes #defnames off hosts_file /etc/hosts diskd_program /usr/local/squid/libexec/diskd unlinkd_program /usr/local/squid/libexec/unlinkd redirect_children 5 redirect_rewrites_host_header on authenticate_cache_garbage_interval 1 hour authenticate_ttl 1 hour authenticate_ip_ttl 200
[squid-users] 2 questions in 1. diskd - software raid
Hi all, How can I benchmark if diskd behaves better than aufs on my fc3 squid server? the idea is to choose the better of course. How good could it be to make software raid? and what other improve add to it? for example I wonder if I do software raid 1 I could double object size to add more and bigger objects and make browsing speed look faster. When is faster to grab objects from the internet than from hd? Regards in advance, Daniel Navarro Venezuela __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
[squid-users] Webalizer squid reports stopped - Daniel Navarro
Hi all In the beginning webalizer worked, then it stopped working and I have this results. Generate Report Running Webalizer to generate report from /var/log/squid/access.log .. Warning: Truncating oversized request field Skipping bad record (2506) Warning: Truncating oversized request field Skipping bad record (2509) Warning: Truncating oversized request field Skipping bad record (2510) Warning: Truncating oversized request field Skipping bad record (3454) . . . . Warning: Truncating oversized request field Skipping bad record (369434) Warning: Truncating oversized request field Skipping bad record (373241) Warning: Truncating oversized request field Skipping bad record (373244) .. Webalizer finished, but no report was generated. See the output above for details. How can I have webalizer reports back againg? Regards in advance, Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
Rv: Re: [squid-users] upgrade
In fact I prefer yum update squid updates because that way I am sure I am having the more actual stable version for my redhat box. Regards Nota: Se adjuntó el mensaje reenviado. __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/ ---BeginMessage--- On Thu, 2 Jun 2005, Matus UHLAR - fantomas wrote: On 02.06 08:55, azeem ahmad wrote: infact i wanted to know that will i lose my stored cache if i upgrade my squid?? no. and upgrade to stable10. source RPMs for RedHat and Fedora is available from http://marasystems.com/download/squid/ to make this easier. Regards Henrik ---End Message---
[squid-users] Squid gateway iptables security - Daniel Navarro
Hi all long time away. Tried to secure my squid gateway server with a iptables -P INPUT DROP policie but it blocked all clients browsing. Does anyone have the whole configuration to restrict unneeded connections? Want to make it safe and cut bandwidth consumer connections Thanks, Daniel Navarro __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.espanol.yahoo.com/
[squid-users] driver needed...
I gues somebody have a Asound lan card driver for 8139 model. Is not realtek model, check at www.asound.net. Really need it, specially for windows 2000. Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] Extra help - www.csaragua.com/ecodiver
I know this is no central theme and Henrik will no be glad, but I wonder if anyone can provide me a model or example to collect data with a form and send myself a mail using php mail() command in that page: www.csaragua.com/ecodiver. That server is a postfix mail server too. Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] squid dead. plz help
I am afraid I would be looking for easy solutions as in windows. Please try restarting your box in order to eliminate pid info. Maybe fsck through touch /forcefsck is a good idea. and service squid restart Hope I help, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Shiraz Gul Khan [EMAIL PROTECTED] escribió: dear list, hello, today my squid is stop. i don't know why. when i typed #/etc/rc.d/init.d/squid stop stoping squid [FAILED] when i typed #/etc/rc.d/init.d/squid status squid dead but pid file exists squid: ERROR: could not send signal 0 to process 1365: (3) no such process and my clients can't access internet from my squid server. please help me what to do know and why this problem appear and what is the solution of this problem. please help me as soon as possible. thankyou and best regards. Gul Khan _ Express yourself with cool new emoticons http://www.msn.co.uk/specials/myemo _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] domain issues - www.csaragua.com/ecodiver
Hi all, I guess this squid mailing list has many domain experts. This is my desperate case. Since I changed my server from windows to linux gateway, with squid and dns I can´t add clients to my domain. Windows server used to make squid, gateway, domain, firewall and dns jobs. Now just administrative work and domain. Sorry for bad english, is there is more information needed tell me please. Waiting big help, Daniel Navarro Maracay, Venezuela. www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] Help..
--- Askar [EMAIL PROTECTED] escribió: Chris Robertson wrote: -Original Message- From: Ahmad Arif [mailto:[EMAIL PROTECTED] Sent: Friday, February 04, 2005 1:46 AM To: squid-users@squid-cache.org Subject: [squid-users] Help.. DEar Squid Master, I need your help, I plan to install 2 version of squid in the same machine Redhat 9. is it possible ? Many thanks for your help.. AArif It is possible. You just need a separate squid.conf file for each instance of Squid. Each conf file has to specify a different listening port, different cache directories, and different log files (or none at all). You can use the same squid binary (of you don't want to use different versions of squid) and just point each instance at a different conf file like: /sbin/squid -f /etc/squid1.conf /sbin/squid -f /etc/squid2.conf Chris any benefit of running two instances of squid on a single machine? No benefit at all _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] Reading SARG Reports
Hi all fellows, SARG report refers son in-cache-out percentages. What are they? what does they mean? Is there any way to detect who is eating your broadband, I mean, what client and what page or protocol, on time? Yours, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] cache_dir becoming small
Hi all fellows, I have had cache_dir size is becoming smaller day by day. why? how can I fix it? thanks, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] trying to read squid reports
Hi, what does the hit percentage mean in calamaris report? Thanks, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] protecting my network from known viruses.
May I create rules in squid to protect my network from known viruses blocking for example .jpg.vbs files of .htm.exe files? how will the lines be? how can it affect squid performance? Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
RE: [squid-users] trying to read squid reports
Thanks, Is there any parameters telling me how much of browsing is took directly from squid cache? Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Chris Robertson [EMAIL PROTECTED] escribió: It's the percentage of requests that resulted in one of the following: item was not modified since last request (IMS_HIT) item was cached on disk (TCP_HIT) or item was still in memory (TCP_MEM_HIT) In the above list item refers to any web object requested by a browser (html page, gif image, ccs sheet, etc.). (I think that covers it, but it might also include items found on sibling/parent caches...) Chris -Original Message- From: Daniel Navarro [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 01, 2005 3:12 PM To: Squid Cache Subject: [squid-users] trying to read squid reports Hi, what does the hit percentage mean in calamaris report? Thanks, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] is not refreshing...
thank you for answering, It seems a date mismatch created the problem, my machine was also 2 years ago since I lost bios setup, so every file already stored is 2 years new, jeje. 1. I cut cache_dir from 2 to 1 I think it is faster. am I right? 2. I use squid on Fedora Club 3. Some says it is better on CENtos since it is more stable. I am thinking on slackware since it is more of the basic. What is the best OS to work squid on? Regards, Daniel Navarro Maracay, Venezuela. www.csaragua.com/ecodiver --- Henrik Nordstrom [EMAIL PROTECTED] escribió: On Fri, 28 Jan 2005, Daniel Navarro wrote: Since I cut cache_dir from 2 to 1 news pages as www.elnacional.com and news.bbc. I don't remember the rest are not refreshing info even with manual refresh. Are you using transparent proxying? If so configure your browser touse the proxy. Have you set any odd refresh_pattern settings in squid.conf? If so don't unless you understand the impacts. And make sure reload_into_ims is off (the default). Regards Henrik _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] is not refreshing...
will be sincere, I don´t understand yet what transparent proxy is and what is not transparent proxy. I use squid as basic config says and every of my 34 client are directed to proxy port 8080. HELP, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Henrik Nordstrom [EMAIL PROTECTED] escribió: On Fri, 28 Jan 2005, Daniel Navarro wrote: Since I cut cache_dir from 2 to 1 news pages as www.elnacional.com and news.bbc. I don't remember the rest are not refreshing info even with manual refresh. Are you using transparent proxying? If so configure your browser touse the proxy. Have you set any odd refresh_pattern settings in squid.conf? If so don't unless you understand the impacts. And make sure reload_into_ims is off (the default). Regards Henrik _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] is not refreshing...
Hi all, Since I cut cache_dir from 2 to 1 news pages as www.elnacional.com and news.bbc. I don't remember the rest are not refreshing info even with manual refresh. What is going on? what can I do? Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
RE: [squid-users] diskd
So I won´t worry anymore, will keep aufs. :) Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Elsen Marc [EMAIL PROTECTED] escribió: I am using the squid originally installed with my Fedora Club 3. So I don't know if diskd is active. I am interested on it since I read squid FAQ's recomending it. Use cachemgr - Current Squid Configuration. Check the store method used for the define cache dirs. On Linux aufs behaves better then diskd. M. _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] Printing problem
Since I migrated from windows to linux gateway with squid sometimes clients can´t print, have to reboot clients in order to fix it. why? How to solve? What is the printing network port? Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
RE: [squid-users] diskd
--- Elsen Marc [EMAIL PROTECTED] escribió: How can I implement and test diskd? I am using the squid integrated into Fedora Club 3. - Use the appropriate configure option to select this store method - Select this method when configuring cache_dirs in squid.conf. Check squid.conf.default for explanations and comments. M. Thanks for replying back. I am using the squid originally installed with my Fedora Club 3. So I don't know if diskd is active. I am interested on it since I read squid FAQ's recomending it. Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] How to improve speed to access foreign sites/ Squid Access cache mechanism
As I know some pages avoid cache programs to make cache on it, so you can't improve speed. If you reload a page, also you squid cache program reload that page, you can get cache effect just loading on one client first and other later. Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Seewo Chen [EMAIL PROTECTED] escribió: Hi, everybody At first I must tell you my location which is in china. I installed squid2.5 Stable7 based on Redhat9.0 in recently day. But I meet some troubles: The cache effect is very visible when I surf internal site or foreign sites that the response time is quick throught squid proxy server , but it is very slow when I access oracle.com or hp.com. even if I access oracle.com twice/three times at sequential time. The following is relative test data, I add the site response speed from http://www.linkwan.com/gb/broadmeter/speed/responsespeedtest.htm: Remark: Response time (sec) is the time I access the home page of relative sites, from I commit request to the status bar display Done. Web Sites Time Site response Speed (sec) Response time (sec) oracle.com 1st 3.57 68 2nd 9.52 30 3rd 6.21 30 dell.com 1st 0.79 5 2nd 0.45 3 3rd 0.41 3 www.sohu.com 1st 1.65 5 2nd 0.15 2 3rd 0.17 2 Now, any idea about squid access cache mechanism? what will do before squid put page to client IE browse? May squid check cache at first and then put the page to IE browse and then check the original web sites? Thanks, Seewo _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
RE: [squid-users] squid performance
Maybe I don't know how to make the correct question. I already have webalizer, SARG, Squid Logbuchauswertung and calamaris. What are the important parameters to measure and what does they mean? What tells me how many pages or files are taking from cache instead of internet? What tells me how much bandwidth is being saved? Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Elsen Marc [EMAIL PROTECTED] escribió: what is the squid performance parameter that shows me how much efficient it is? Define efficient. what is the squid parameter that shows me how much bandwidth have saved? http://www.squid-cache.org/Scripts/ M. _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] 3 questions...
Hi all, 1. I've found my squid port 8080 is listed as a safe port and denied. I do use 8080 port. is it wrong? How should it be configured. 2. How do I know is my squid server is using DDISK? How can I activate it? 3. Since I use ssh and webmin should I state 22 and 1 ports as safe? Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] log filtering
webalizer and sarg are good analizers You webmin let´s you filter some log parameters. I haven´t used it but calamaris is well mentioned. Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- [EMAIL PROTECTED] [EMAIL PROTECTED] escribió: I've got squid running and am asked to produce a report showing requests by the USER not the WEBPAGE. i.e. only the URLS entered or clicked by the user, filtering out all the extra info about the supporting files that the webpage requested (GIFS, popups, banners, etc). I've not found any appropriate logfile analyzers for this, and access.log doesn't seem to differentiate between urls requested by the USER or the WEBPAGE. Can anyone suggest the best logfile analyzer for this, or squid configuration options that will make access.log more appropriate for this? __ Do you Yahoo!? Read only the mail you want - Yahoo! Mail SpamGuard. http://promotions.yahoo.com/new_mail _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] squid - dns server
is squid a dns server by itself? So can I turn dnsmasq off? Regards, Daniel Navarro Maracay, Venezuela. www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] squid performance
what is the squid performance parameter that shows me how much efficient it is? what is the squid parameter that shows me how much bandwidth have saved? I refer to calamaris reports. Yours, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
[squid-users] diskd
Hi all How can I implement and test diskd? I am using the squid integrated into Fedora Club 3. Cheers, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] is my cache working
If any client is browsing through your proxy it is working. Otherwise internet browsers can´t navigate. Them I will provide the few moments proxies works. Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Siew Wing Loon [EMAIL PROTECTED] escribió: Hi, How can I confirm that my squid's cache is working fine? Any log files can verify it? Regards, Siew __ Do you Yahoo!? Yahoo! Mail - You care about security. So do we. http://promotions.yahoo.com/new_mail _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] How to detmine how many web pages have been visited in a month
WebAlizer also does interesting analisis of squid work. Includes statistical analisis and graphics. Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Ricardo López Urrutia [EMAIL PROTECTED] escribió: Jim, why on't you try SARG (Squid Analysis Report Generator? http://sarg.sourceforge.net/ Regards! Ricardo At 09:53 a.m. 14/01/2005 -0700, Jim_Brouse/[EMAIL PROTECTED] wrote: I have my access.log files and there is one for each day of the month what is the best way to determine how many web pages were viewed for the month? Jim -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.6.11 - Release Date: 12/01/2005 -- I walk alone, not because I'm lost, but because I want to... -- __o _`\,_ (-)/ (-) Ricardo López Urrutia WCSP Benology Tel: 5395 4246 Ext. 112 http://www.serpro.net.mx http://www.benology.com.mx e-mail: [EMAIL PROTECTED] *** ESTE MENSAJE CONTIENE INFORMACIÓN CONFIDENCIAL QUE ÚNICAMENTE PUEDE SER UTILIZADA POR EL DESTINATARIO DECLARADO EN EL ENCABEZADO DEL DOCUMENTO. DICHA INFORMACIÓN ES ENVIADA A SOLICITUD DEL DESTINATARIO Y NO NO PODRÁ SER REENVIADA A NINGUNA PERSONA SIN AUTORIZACIÓN EXPRESA DEL AUTOR. SU REENVIO, COPIA, O REUTILIZACIÓN CAUSA RESPONSABILIDAD LEGAL NOTA: CUALQUIER MENSAJE QUE CONTENGA ARCHIVOS ADJUNTOS Y QUE NO ESTEN EXPRESAMENTE DECLARADOS CON NOMBRE, TIPO Y/O CONTENIDO DEBERÁ DE SER DESTRUIDO INMEDIATAMENTE. *** -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.6.11 - Release Date: 12/01/2005 _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] Squid limits and hardware spec
Hi all, Also concerned about my performance I think you could consider bandwidth limits, I found a good bandwidth monitorin utility for linux I use on Fedora Club 3. bwm-ng cheers, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Martin Marji Cermak [EMAIL PROTECTED] escribió: Hello Ow at Neuromancer :-) and all Squid guys, I promised to post here my Squid results. I am trying to find out what a single Squid box can do - I have 3200 unique IPs and 240 HTTP requests per second during peek time. I hande this load with one box, using WCCP to get the traffic to Squid (so it is a transparet proxy - the evil thing :-). My goal is to achive maximum BYTE hit ratio. USED HARDWARE: server:IBM x305 Processor: P4 2.8GHz Memory:4 GB (you can switch the swap off) Hardisk: 2 x 36GB 10 RPM, 2 x 73 15 RPM scsi disks Controler: IBM 71P8594 Kendall Card Option Adaptec 29320LP Ultra320 SCSI adapter Hardisk for logs: IDE 7200, DMA Ethernet card: Broadcom TG3 OS: Linux Debian/woody, kernel 2.4.25, tproxy, wccp Unfortunately, I do not have enough clients to reach the box limits. But I can see that my median HIT time triples during peak time, which probably means a disk bottleneck. But it will be the log disk, because I use an IDE disk for log (with log_mime_header on, so I get an 500 MB acccess.log per hour). And also the DNS server (see below) - DNS responses are longer during peak time. I know it is not good to combine different disk (15 rpm and 10 rpm), but I had no choice. Maximum performance I have achived (MRTG stats gaind by SNMP from squid): Client HTTP Requests per second: 220 Server Requests per second: 210 Server In 1600 kBytes/s (amount of traffic read from origin WWW servers) System load: 3, occasionally rises to 10 and I don't know why HTTP Out: 2000 kBytes/s (amount of traffic written to clients) HTTP Hits per second: 110 Squid generated Error Pages: 2 errors per second Total accounted memory in GRI: 830 MB Storage disk size: 164 GB Storage Mem Size: 200 MB HTTP I/O Number of Reads: 300 reads/sec Number of Clients Accessing Cache: 3200 (unique IPs since Squid started) HTTP all service time: 150 ms HTTP miss service time: 490 ms HTTP Near Miss Service Time: 8 ms HTTP hit service time: 30 ms (average is 10 ms) Byte Hit Ratio: 20% (heap LFUDA) Request Hit Ratio: 64% (49% average) Disks: 800 writes per second Log disk (IDE - the bottleneck): 500 writes per sec DNS service time: 70 ms (bottleneck) Configuration (squid.conf) maximum_object_size 200 MB cache_mem 200 MB cache_replacement_policy heap LFUDA log_mime_hdrs on store_avg_object_size 22 KB store_dir_select_algorithm round-robin (if least-load, it does not distribute the load properly) cache_dir aufs /squidcache/cache1 28000 60 256 cache_dir aufs /squidcache/cache2 56000 60 256 cache_dir aufs /squidcache/cache3 28000 60 256 cache_dir aufs /squidcache/cache4 56000 60 256 Please notice that I encoutered a DNS issue. Squid generated more requests per second (500?) than the DNS server was able to accept (200?). My coleague administrator had to recompile it and icrease the number. From this point, the squid performance has been better in peak time. The HIT service time does not tripple, but double only during peak time. Another important think: I had to renice all standard linux maintenance programs, e.g. in /etc/crontab: /usr/bin/nice -n 19 run-parts --report /etc/cron.daily these tasks had negative impact to Squid. Especially: /etc/cron.daily/standard and /etc/cron.daily/find (see /etc/checksecurity.conf and /etc/updatedb.conf - don't let find crawl through cache dirs) Some stats from my cachemgr page follow. I did not take them in the real peak time, unfortunately, but it was close to :-) I am happy to post more details if someone is interested in. Best regards, have a nice weekend, Marji Connection information for squid: Number of clients accessing cache: 2925 Number of HTTP requests received: 13830996 Number of ICP messages received:0 Number of ICP messages sent:0 Number of queued ICP replies: 0 Request failure ratio: 0.00 Average HTTP requests per minute since start: 5128.4 Average ICP messages per minute since start:0.0 Select loop called: 38791775 times, 4.171 ms avg Cache information for squid: Request Hit Ratios: 5min: 54.0%, 60min: 52.2% Byte Hit Ratios:5min: 23.5%, 60min: 24.7% Request Memory Hit Ratios: 5min: 4.9%, 60min: 6.5% Request Disk Hit Ratios:5min: 25.2%, 60min: 26.2% Storage Swap size: 161338652 KB Storage Mem size: 204820 KB Mean Object Size: 22.54 KB Requests given to unlinkd
[squid-users] Video caching
Hi all fellows, Since squid is running fine I set 10Gigas of cache size that store aproximately 12 days of browsing from the 20 clients with 712 Mb cache_mem. Now. How can I set video players cache? I mean. Windows media player. QuickTime RTSP RealPlayer PNA RTSP Windows Media Player MMS Regards, Daniel Navarro Maracay, Venezuela. www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] blocking some IP to some sites
keep on --- Henrik Nordstrom [EMAIL PROTECTED] escribió: Please keep discussion on the mailinglist. Thanks Henrik On Mon, 10 Jan 2005, Daniel Navarro wrote: Got the idea, so, what do you recomend to avoid internal user to visit pornos and dirty pages as datemanager.com and kazaa.com? I try to optimize my squid con fedora core 3, I am wondering what is a good cache_dir size. I see over 5 Gigas can take long to look for info. I have 20 internet clients plus 10 game clients in a CiberCafe. Regards, Daniel Navarro --- Henrik Nordstrom [EMAIL PROTECTED] escribió: On Sun, 9 Jan 2005, Daniel Navarro wrote: is working, I just wonder how many lines can support because the big file is not supported. How big acl lists are supported is very much dependent on the type of the acl, and how you specify the data. Common mistakes you should stay away from: 1. Very large regex based lists (url_regex, urlpath_regex etc). These are quite expensive, foremost in CPU usage which is linear to the number of entries in the list but also in memory usage which is rather high per entry. In addition regex patters are very hard to get correct in most real-life situations. 2. Specifying IP based ACLs by name (src, dst). If you specify IP addresses by name then Squid will need to make a DNS lookup on each name while parsing the configuration and this will take quite some time if the list is large, probably longer than anyone are willing to wait. The main acl types in Squid can support very many entries efficiently: src (client IP) dst (server IP) dstdomain (server hostname / domain) proxy_auth (username) For these the memory usage is approximately 4 times the size of the list, and parsing speed on a P3 450 MHz is approximately 20K entries per second. Runtime lookup time is not very dependent on the size of the list. For the other ACL types the runtime lookup time is linear to the size of the list which makes them unsuitable to be used with very large lists. The memory usage and parsing speed is about the same as above, except for the regex based acls where both memory usage and parsing time is significantly higher. While talking about large acls it is also worth mentioning the external acl interface of Squid. This allows you to instruct Squid to automatically query a backend database of your choice to perform large scale acl lookups in an dynamic and reasonably efficient manner. Regards Henrik _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] Error-page
Interesting, that explain a lot of things. And make more people to change into FireFox at www.mozilla.org Cheers, Daniel Navarro Maracay, Venezuela. www.csaragua.com/ecodiver --- Henrik Nordstrom [EMAIL PROTECTED] escribió: On Mon, 10 Jan 2005, Mustafa ERGUC wrote: but when somebody tries https like client https://www.tspakb.org.tr:8445 server prints only some lines of the ERR_ACCESS_DENIED page I could not find the reason if sb knows mail me This is a bug in MSIE, where it fails to properly show the proxy error message in response to rejected CONNECT requests. Regards Henrik _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] squid authentication per IPs
I think there is a tutorial on this at squid-cache.org FAQ´s Even to allow only authenticated users browse special sites. Regards. --- Mike Pascual [EMAIL PROTECTED] escribió: I would like to implement squid authentication on some IP address on our network. I would like IPs x.x.x.1 to x.x.x.10 to have squid authentication before browsing the internet and the rest of the IPs has no authentication. How can I do this? Is this possible? Please advsie. Thanks. Mike _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] blocking some IP to some sites
How many lines can a src file support. I added 45.000 porn sites and squid is no able to restart. Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com www.csaragua.com/ecodiver --- Mike Pascual [EMAIL PROTECTED] escribió: Try this... acl banned src /location/of/txt/containingIPs/you/want/to/block/IP.txt http access deny banned hope this will help On Thu, 6 Jan 2005 19:46:47 +0500, BusyBoy [EMAIL PROTECTED] wrote: Hello, Can we use squid to block some IP's from accessing some sites let's say I am using 172.16.0.0 in my internal network and I want to block these ip's 172.16.20.12 172.16.20.14 172.16.20.23 172.16.20.120 172.16.20.45 172.16.20.67 172.16.20.89 from accessing mail.yahoo.com ,hotmail.com (May be regex required for *.mail.yahoo.* , *.hotmail.* , and *.messenger.msn.com ) and MSN Messenger.. How should I proceed with this setup so that only these users are effected and rest of all are allowed to brows any website on Internet cloud. Regards, -- Nasir Mahmood Systems Administrator. _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
Re: [squid-users] blocking some IP to some sites
is working, I just wonder how many lines can support because the big file is not supported. Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com www.csaragua.com/ecodiver --- Henrik Nordstrom [EMAIL PROTECTED] escribió: On Sun, 9 Jan 2005, Daniel Navarro wrote: How many lines can a src file support. I added 45.000 porn sites and squid is no able to restart. A src type ACL matches client IP addresses. I doubt you can block porn sites by the users IP adresses. Regards Henrik _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com
