Re: [squid-users] Whatismyip response behind squid

2011-08-18 Thread Helmut Hullen
Hallo, a,

Du meintest am 18.08.11:

 I have several squid boxes running. There is one which when i set it
 on the proxy configuration on my client PCs browser then open
 www.whatismyip.com , It not only bring its real NAT IP , but also
 below information too. What makes the site gets these information and
 how can prevent or change this banner?

Then try another server/service, p.e.

myip.it
myip.nl

And then you need a script for extractiing the IP address ...

Viele Gruesse!
Helmut


Re: [squid-users] Squid 3.2.0.10 beta is available

2011-07-28 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 25.07.11:

 The Squid HTTP Proxy team is very pleased to announce the
 availability of the Squid-3.2.0.10 beta release!

I've just compiled it with the slackbuild script for slackware: it  
runs!

Viele Gruesse!
Helmut


Re: [squid-users] SARG: The date range passed as argument is not formatted as dd/mm/yyyy-dd/mm/yyyy

2011-07-19 Thread Helmut Hullen
Hallo, chinner999,

Du meintest am 18.07.11:

 /usr/sbin/sarg-daily-report

 TODAY=$(date +%/%m/%d)
 YESTERDAY=$(date -date 1 day ago +%/%m/%d)

   --date

Viele Gruesse!
Helmut


Re: [squid-users] Squid terminates when my network goes down

2011-07-12 Thread Helmut Hullen
Hallo, Peter,

Du meintest am 12.07.11:

 How can you expect *machineS* to get a response from squid if
 network is down?

 Proxy server. Squid accepts clients on inside interface and
 connects to internet servers on outside interface.
 Outside interface goes down with inside interface still alive.

That was the option/switch

offline mode on
or
offline mode off

New versions of squid don't need this option; if the WAN interface is  
down the clients get their pages from the cache (or they get nothing if  
the wanted page is not yet cached).

Viele Gruesse!
Helmut


Re: [squid-users] I need to deny navegation in Squid using ip address.

2011-07-11 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 12.07.11:

 I need that my Squid 3.0 deny all connections from clients by ip
 like http://x.x.x.x/.

 In short, I want to permit the navegation only by hostnames.

  There is a pattern to match IP addresses at:
  http://wiki.squid-cache.org/ConfigExamples/Chat/Skype

But does that block hostnames whose IP address is in the blocked range?

Viele Gruesse!
Helmut


Re: [squid-users] Squid terminates when my network goes down

2011-07-10 Thread Helmut Hullen
Hallo, January,

Du meintest am 08.07.11:

 I would like assistance in configuring squid 2.7 for Windows 7.

 When my Internet connection goes down (my ethernet cable or my modem
 gets disconnected), Squid terminates by itself.

[...]

 2011/07/07 11:32:55| With 2048 CRT stdio descriptors available
 2011/07/07 11:32:55| Windows sockets initialized
 2011/07/07 11:32:55| Using select for the IO loop
 2011/07/07 11:32:55| Performing DNS Tests...
 2011/07/07 11:32:55| Leaving Squid service
 FATAL: ipcache_init: DNS name lookup tests failed.
 Squid Cache (Version 2.7.STABLE8): Terminated abnormally.

That's strange - I run several versions of squid on many linux machines  
since years, they are disconnected for many hours in the early morning:  
I've never seen such an error message.

Should it be a special windows problem?

Viele Gruesse!
Helmut


Re: [squid-users] Squid 3.1.14 is available

2011-07-05 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 04.07.11:

 The Squid HTTP Proxy team is very pleased to announce the
 availability of the Squid-3.1.14 release!


And it works under Slackware 13.37:

  http://helmut.hullen.de/filebox/Linux/slackware/n/squid-3.1.14-i486-1hln.txz

Viele Gruesse!
Helmut


Re: [squid-users] Squid not caching

2011-06-22 Thread Helmut Hullen
Hallo, Fabiano,

Du meintest am 21.06.11:

 My squid is not caching any content, all request is TCP_MISS/200,

 minimum_object_size 512 KB
 maximum_object_size 200 bytes

That may be the reason. at least 512000 Bytes and max. 200 Byte   
seems to be twisted.

Viele Gruesse!
Helmut


Re: [squid-users] A way/hack to force squid to die?

2011-06-10 Thread Helmut Hullen
Hallo, Tom,

Du meintest am 10.06.11:

 From squid.conf.documented:
 -+- SNIP ---
 #  TAG: cache_mgr
 #   Email-address of local cache manager who will receive
 #   mail if the cache dies.  The default is webmaster.

if the cache dies

That's another thing than a dying squid.

Viele Gruesse!
Helmut


Re: [squid-users] A way/hack to force squid to die?

2011-06-09 Thread Helmut Hullen
Hallo, jeffrey,

Du meintest am 09.06.11:


 I need to verify, if I get a mail when squid dies (I put a correct
 mailaddress in cache_mgr-directive). Is there a way/hack to force
 squid to die? I tried several things like revoking permissions on
 the the cache-dir, moving cache.log away... - but squid is still
 alive.

 ps -ax | grep squid
 kill -9 squid.pid

No good idea - sorry.

Warning: bad ps syntax, perhaps a bogus '-'? See http://procps.sf.net/ 
faq.html
 3978 ?Ss 0:00 /usr/sbin/squid -s
 3980 ?Sl 0:19 (squid) -s
24289 pts/0S+ 0:00 grep squid

-

Viele Gruesse!
Helmut


Re: [squid-users] A way/hack to force squid to die?

2011-06-09 Thread Helmut Hullen
Hallo, Tom,

Du meintest am 09.06.11:


 I need to verify, if I get a mail when squid dies (I put a correct
 mailaddress in cache_mgr-directive). Is there a way/hack to force
 squid to die?

Yes - this daemon is started from a script p.e. with the command

/etc/init.d/squid start

(the command depends on your distribution).

And stopping squid is nearly the same command.

Brute force (under a linux distribution):

killall squid

(if you are curious: repeat the command)

Viele Gruesse!
Helmut


Re: [squid-users] A way/hack to force squid to die?

2011-06-09 Thread Helmut Hullen
Hallo, Tom,

Du meintest am 09.06.11:

 Brute force (under a linux distribution):

        killall squid

 (if you are curious: repeat the command)

[Toppost and fullquote reordered]

 killall (without any parameter) sends a sigterm (kill -15) to the
 squid-processes. This command kill's indeed all sqBut this does not
 bring squid to die and then send the mail. This command does just
 kill the processes.

Please: what is the difference between kill all squid-processes and  
bring squid to die?

Sending a mail is another problem.

Viele Gruesse!
Helmut


Re: [squid-users] A way/hack to force squid to die?

2011-06-09 Thread Helmut Hullen
Hallo, david,

Du meintest am 09.06.11:

 Brute force (under a linux distribution):

killall squid

 (if you are curious: repeat the command)

 actually, you do need to repeat the command. Squid doesn't stop
 immediatly when it gets the standard kill signal (15), it does some
 sort of graceful shutdown that can take a significant amount of time
 to actually take place.

[...]

 what I do is to do killall squid in a loop until the killall command
 returns an error that there is no process to kill.

Ok - I've seen this behaviour too but haven't yet studied it deeply.  
Thank you!

Viele Gruesse!
Helmut


Re: [squid-users] Sharing ACL Lists between different squids

2011-05-27 Thread Helmut Hullen
Hallo, Stefan,

Du meintest am 26.05.11:

 i like to ask, if it is possible to share ACL Lists between squids
 on different locations? Centralized ACL-List, if you will.

 With all our squid boxes have its own DSL connection and our ACL's
 are changing fast, I have to touch every box on every change.

 Can squid pull the ACL's from a remote database (i.e: mysql)?

Amos has mentioned include - may work as expected.
But you'll still have to touch every box with squid -k reconfigure on  
every change.

Viele Gruesse!
Helmut


Re: [squid-users] apt-get update issue on Client machine in LAN

2011-05-11 Thread Helmut Hullen
Hallo, Kaushal,

Du meintest am 12.05.11:

 I have a issue wherein when i list lynx
 http://archive.ubuntu.com/ubuntu and then browse the directories, I
 do not get further listing on the client machine in LAN

What happens if you don't use lynx as a client browser but (p.e.)  
firefox or seamonkey?

What happens with other text browsers (links and/or w3m)?

Viele Gruesse!
Helmut


Re: [squid-users] Common log file format conversion??

2011-04-30 Thread Helmut Hullen
Hallo, michel,

Du meintest am 29.04.11:

 I use CentOS, and my version of squid is squid-2.6.STABLE21-6.el5

 I configured my squid to generate logs in native mode to Mysar could
 generate the reports. as I mentioned in my previous email to the
 list.

[...]

 But I need to import some old logs that are common formats:

Squid (at least version 3.1.x) allows to write both formats  
simultaneously:

access_log /var/log/proxy/access.log common
access_log /var/log/proxy/access-s.log squid

or however your path is defined.


Viele Gruesse!
Helmut


Re: [squid-users] building 3.1.12

2011-04-20 Thread Helmut Hullen
Hallo, cc,

Du meintest am 20.04.11:

 (Anyone in Slackware land that knows of where these
 headers are found? i.e. which package?)

  .../d/kernel-headers...

  .../testing/packages/kernel-headers...

In the testing path you also find the header packet for kernel  
2.6.38.3

And you should update to gcc-4.5.2 and gcc-g++-4.5.2

Viele Gruesse!
Helmut


Re: [squid-users] ACL::~ACL:

2011-04-19 Thread Helmut Hullen
Hallo, cc,

Du meintest am 19.04.11:

 I'm using Squid v3.0.Stable24.

 Whenever I do a squid -k reconfigure, I get the following
 lines appearing:

 2011/04/19 17:08:57.266| ACL::~ACL: '
 2011/04/19 17:08:57.266| ACL::~ACL: '

[...]

 I have no idea what this is and can't seem to find any
 hints when googling.

Just try a newer squid version.

On my machine runs squid 3.1.11 under slackware-current - no such  
messages. Some older squid versions had produced them.

Viele Gruesse!
Helmut


Re: [squid-users] building 3.1.12

2011-04-19 Thread Helmut Hullen
Hallo, cc,

Du meintest am 19.04.11:

 Icmp4.cc:116: error: invalid use of undefined type `struct icmphdr'
 Icmp4.cc:96: error: forward declaration of `struct icmphdr'

 snip many repetitions on the problem

 Am I missing something?

 Some required header is not being found.

 during ./configure wouldn't it tell me what header is missing and
 not let me continue?

No - no such message.

Viele Gruesse!
Helmut


Re: [squid-users] building 3.1.12

2011-04-19 Thread Helmut Hullen
Hallo, cc,

Du meintest am 19.04.11:

 I tried building 3.1.12 today and came across the following
 errors:

[...]

Perhaps you try (for slackware)

http://helmut.hullen.de/filebox/Linux/slackware/n/squid-3.1.12-i486-1hln.txz


Viele Gruesse!
Helmut


Re: [squid-users] building 3.1.12

2011-04-19 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 19.04.11:

 Icmp4.cc:116: error: invalid use of undefined type `struct
 icmphdr' Icmp4.cc:96: error: forward declaration of `struct
 icmphdr'

 struct icmphdr should be defined in one of the netinet/ files. We
 need to start with figuring out which.

[...]

 Ohh, Just noticed you said the compiler was GCC 3.3.5.

Maybe that's a compiler version problem. cc used gcc-3.3.5, I used  
(successfully) gcc-4.5.2

Viele Gruesse!
Helmut


Re: [squid-users] Squid 3.2.0.7 beta is available

2011-04-19 Thread Helmut Hullen
Hallo, Ralf,

Du meintest am 19.04.11:

 The Squid HTTP Proxy team is very pleased to announce the
 availability of the Squid-3.2.0.7 beta release!

 It doesn't build; I'm getting:

 Making install in wrapper
 make[3]: Entering directory
 /usr/src/squid-3.2.0.7/helpers/negotiate_auth/wrapper'
 g++ -DHAVE_CONFIG_H  -I../../.. -I../../../include -I../../../lib
 -I../../../src -I../../../include -I/usr/include -Wall
 -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT
 -m32 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -g -O2 -c -o
 negotiate_wrapper.o negotiate_wrapper.cc
 cc1plus: warnings being treated as errors

[...]

not reproduceable.

gcc, cc, cpp Version 4.5.2
No cc1plus

configure options:
./configure \
  --prefix=/usr \
  --libdir=/usr/lib${LIBDIRSUFFIX} \
  --sysconfdir=/etc/squid \
  --localstatedir=/var/log/squid \
  --datadir=/usr/share/squid \
  --mandir=/usr/man \
  --with-pidfile=/var/run/squid \
  --with-logdir=/var/log/squid \
  --with-filedescriptors=65536 \
  --with-large-files \
  --enable-snmp \
  --enable-storeio=aufs,ufs,diskd \
  --enable-wccp \
  --enable-arp-acl --enable-ssl --enable-esi \
  --enable-external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_group \
  --enable-removal-policies=lru,heap \
  --enable-icmp \
  --enable-delay-pools\
  
--enable-basic-auth-helpers=NCSA,YP,MSNT-multi-domain,MSNT,SMB,getpwnam,LDAP,POP3,RADIUS
 \
  --enable-digest-auth-helpers=LDAP,file \
  --enable-ntlm-auth-helpers=smb_lm \
  --enable-negotiate-auth-helpers=kerberos \
  --enable-linux-netfilter \
  --enable-async-io=8 \
  --enable-inline \
  --disable-loadable-modules --disable-translation \
  --build=$ARCH-slackware-linux

#  --enable-auth=basic,digest,ntlm,negotiate \


# disable loadable modules wegen libltdl

# ---

Perhaps I have to modify some options (I have copied them from 3.1.x),  
but I first only tried wether compiling works. And it works.

The result:
  
http://helmut.hullen.de/filebox/Linux/slackware/n/squid-3.2.0.7-i486-1hln.txz

Viele Gruesse!
Helmut


Re: [squid-users] logging skype

2011-04-15 Thread Helmut Hullen
Hallo, Marcus,

Du meintest am 14.04.11:

 ufdbGuard is a URL filter which can be configured to allow/block
 Skype.

Thank you - I'll take a try.

Viele Gruesse!
Helmut


Re: [squid-users] compile squid with large files option

2011-04-15 Thread Helmut Hullen
Hallo, Tóth,

Du meintest am 15.04.11:

 What is the option when I compile squid to cache files over 2GB ?

--with-large-files

 How can I see what are the default compile options for an apt-get
 based debian installation?


squid -v

Viele Gruesse!
Helmut


[squid-users] logging skype

2011-04-14 Thread Helmut Hullen
Hallo, squid-users,

can I log skype transfer from clients in a LAN to the wide world?

My server installation:

iptables:

  $IPTABLES_BIN -t filter -A INPUT -p tcp --dport 80 -j ACCEPT
  $IPTABLES_BIN -t filter -A INPUT -p tcp --dport 443 -j ACCEPT

  $IPTABLES_BIN -t filter -A FORWARD -p tcp --dport 80 -j reject_fkt
  $IPTABLES_BIN -t filter -A FORWARD -p tcp --dport 3128 -j reject_fkt
  $IPTABLES_BIN -t filter -A FORWARD -p tcp --dport 8080 -j reject_fkt

squid.conf (no transparant squid):

  http_port 8080
  icp_port 3130

For a kind of traffic shaping with squish I'd need skype entries in  
squid's access.log

Viele Gruesse!
Helmut


Re: [squid-users] Block Facebook message page

2011-04-14 Thread Helmut Hullen
Hallo, Mohammad,

Du meintest am 14.04.11:


 I want to block message page within facebook. Any body can help me?

 Is there any way to block some pages inside a certaine sites?

I presume that's an end user problem, no squid problem (for all users).  
With firefox I use adblock+ for such problems.

Viele Gruesse!
Helmut


Re: [squid-users] How to Hide Proxy detected at whatismyip.com

2011-04-12 Thread Helmut Hullen
Hallo, AZHAR,

Du meintest am 12.04.11:

 We have successfully installed Squid 3.1.10 with Tproxy, iptables at
 Fedora 14 which working perfected under PBR of router.
 (following instructions of http://wiki.squid-cache.org/Features/Tprox
 y4) We can see clients pcs inside the network browsing with tcp_hit,
 tcp_miss records. But when any client PC browse to whatismyip.com
 that time, the site shows client's fixed IP address along with
 detection of cache server mentioning hostname of squid server.

Do other websites react in the same way?

http://myip.at
http://checkip.dyndns.org

Viele Gruesse!
Helmut


Re: [squid-users] Squid Icons screw-up

2011-04-11 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 11.04.11:

 I am deeply sorry for this mixup and hope that this has not caused
 too much trouble.

Baah - don't worry.
Symlinks are a fine remedy.

Viele Gruesse!
Helmut


Re: [squid-users] 3.2.0.6 problems

2011-04-05 Thread Helmut Hullen
Hallo, Ralf,

Du meintest am 05.04.11:

 1) squid won't start, since it complains about a missing
 /usr/share/squid3/iconsdirectory

 2) Once I mkdir'ed that directory, squid will start, but it keeps
 crashing:

 2011/04/05 11:56:50| mimeLoadIconFile:
 /usr/share/squid3/icons/anthony-image.gif: (2) No such file or
 directory

The path has changed.
squid3 sounds like a version which is corrected from a distribution  
- which distribution do you use?

Have you changed /etc/squid/mime.conf too?

(I had similar problems some weeks ago, and Amos had told something  
about changed pathes ...)

Viele Gruesse!
Helmut


Re: [squid-users] Mark log entries for redirected sites

2011-04-01 Thread Helmut Hullen
Hallo, Thomas,

Du meintest am 01.04.11:

[...]

 Well, I didn't see a 301/302/307 in the logs though I did
 get the blocked redirect page handed out by squidGuard.

[...]

 Actually I want to do it a bit differently: If f.e. someone blocked
 facebook.com during main business hours, they still show up in the
 access_log and in the reports created from it. As more and more sites
 include Like this on facebook buttons which refer to facebook.com,
 it looks like users are accessing facebook.com even though they
 aren't.

But that's a squidGuard problem, no squid problem. Perhaps it's a  
problem of your special reporting program.

For reporting I use SARG and squish. For squish it might be very  
simple excluding facebook entries; the program gets its date via a  
simple cat command.

Viele Gruesse!
Helmut


[squid-users] 2 parallel access.log files

2011-03-16 Thread Helmut Hullen
Hallo, squid-users,

can I use 2 parallel access.log files?

I have some applications who want squid style (p.e. squish), and I  
have some other applications who want common style.

Or can I download somewhere a converter which changes the one style to  
the other?

Viele Gruesse!
Helmut


Re: [squid-users] 2 parallel access.log files

2011-03-16 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 17.03.11:

 can I use 2 parallel access.log files?

 Yes. Just enter two access_log directives.

 The only restriction is that if using a log daemon then only one
 daemon helper may be used in the current Squid releases. Though it
 may still be used to write several logs.

In my special case: no such problem. Works as described - fine!
Thank you!

Viele Gruesse!
Helmut


Re: [squid-users] 2 parallel access.log files

2011-03-16 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 17.03.11:

 I have some applications who want squid style (p.e. squish), and
 I have some other applications who want common style.

 Or can I download somewhere a converter which changes the one style
 to the other?

 And yes. Perl scripts are available around the 'Net to convert squid
 to common.

I've just found squid2common.pl as part of pwebstats:

http://martin.gleeson.com/pwebstats/installation.html

Viele Gruesse!
Helmut


[squid-users] download quota

2011-03-11 Thread Helmut Hullen
Hallo, squid-users,

is there a simple ACL for setting a download quota for users or for MAC  
addresses?

squid 3.1.11 and/or 3.2.0.5

squidquota seems to be dead, squid quota manager (sqm) too. dealay  
pools doesn't work per user.

Viele Gruesse!
Helmut


Re: [squid-users] download quota

2011-03-11 Thread Helmut Hullen
Hallo, Leonardo,

Du meintest am 11.03.11:

 is there a simple ACL for setting a download quota for users or for
 MAC addresses?

 squid 3.1.11 and/or 3.2.0.5

 squidquota seems to be dead, squid quota manager (sqm) too.
 dealay pools doesn't work per user.

  no, there's no easy way or 'squid-only' way to provide that. It
 can be acchieved using external_acls and probably some coding.

  Please check the mailing list archives, as this subject has been
 discussed several times.


Thank you - there I've only found squish (don't know if it's still  
maintained ...). I'll take a try.

Viele Gruesse!
Helmut


Re: [squid-users] download quota

2011-03-11 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 12.03.11:

 is there a simple ACL for setting a download quota for users or
 for MAC addresses?

[...]

 Thank you - there I've only found squish (don't know if it's still
 maintained ...). I'll take a try.

 Squid does not do Quotas.

 If delay pools (bandwidth speed cap) is suitable there is
 client_delay_pools now in 3.2 and QoS features in all.

Last year I've played some time with delay pools - hasn't pleased me.
If I've understood this option correct it manages the actual transfer  
rate but not (p.e.) a monthly quota per user or per client.

But squish doesn't work as described - it examines the lines in  
access.log, and on my machine it doesn't find client IP or user login  
name.
I should examine a long perl script, and I don't like perl ...

Viele Gruesse!
Helmut


Re: [squid-users] Squid 3.2.0.5 beta is available

2011-03-05 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 13.02.11:

 The Squid HTTP Proxy team is very pleased to announce the
 availability of the Squid-3.2.0.5 beta release!

I've just compiled it; seems to run as expected.

Some nasty error:

The icons (p.e. anthony-unknown.gif) are in /usr/share/squid/icons,  
but 3.2.0.5 searches them in /var/log/squid/www/squid/icons.

Configured with

Squid Cache: Version 3.2.0.5
configure options:  '--prefix=/usr' '--libdir=/usr/lib' '--sysconfdir=/ 
etc/squid' '--localstatedir=/var/log/squid' '--datadir=/usr/share/squid'  
'--mandir=/usr/man' '--with-pidfile=/var/run/squid' '--with-logdir=/var/ 
log/squid' '--with-filedescriptors=65536' '--with-large-files' '-- 
enable-snmp' '--enable-storeio=aufs,ufs,diskd' '--enable-wccp' '-- 
enable-arp-acl' '--enable-ssl' '--enable-esi' '--enable-external-acl- 
helpers=ip_user,ldap_group,unix_group,wbinfo_group' '--enable-removal- 
policies=lru,heap' '--enable-icmp' '--enable-delay-pools' '--enable- 
basic-auth-helpers=NCSA,YP,MSNT-multi- 
domain,MSNT,SMB,getpwnam,LDAP,POP3,RADIUS' '--enable-digest-auth- 
helpers=LDAP,file' '--enable-ntlm-auth-helpers=smb_lm' '--enable- 
negotiate-auth-helpers=kerberos' '--enable-linux-netfilter' '--enable- 
async-io=8' '--enable-inline' '--disable-loadable-modules' '--disable- 
translation' '--build=i486-slackware-linux' 'build_alias=i486-slackware- 
linux' 'CFLAGS=-O2 -march=i486 -mtune=i686' 'CXXFLAGS=-O2 -march=i486 - 
mtune=i686'

--

Where's the mis-configuration?

It's nearly the same configuration as for 3.1.11 - there the icons are  
searched and found under /usr/share/squid/icons.

Viele Gruesse!
Helmut


Re: [squid-users] Squid 3.2.0.5 beta is available

2011-03-05 Thread Helmut Hullen
Hallo,

I wrote am 05.03.11 zum Thema Re: Squid 3.2.0.5 beta is available:

 The Squid HTTP Proxy team is very pleased to announce the
 availability of the Squid-3.2.0.5 beta release!

 I've just compiled it; seems to run as expected.

 Some nasty error:

 The icons (p.e. anthony-unknown.gif) are in
 /usr/share/squid/icons, but 3.2.0.5 searches them in
 /var/log/squid/www/squid/icons.

Additionally: that seems to be (mis-)configured at least in  
squid.conf.documented; icon_directory.

Viele Gruesse!
Helmut


Re: [squid-users] Pausing the transfer of data during a browsing session

2011-03-05 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 05.03.11:

 3.2 is needed for client bandwidth limits.
 http://wiki.squid-cache.org/Features/ClientBandwidthLimit

Seems I'll need this option; delay_pool doesn't please me.

But the Wiki only tells that this option exists; how can I use it, with  
which parameters?

Viele Gruesse!
Helmut


Re: [squid-users] Squid 3.2.0.5 beta is available

2011-03-05 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 06.03.11:

 The icons (p.e. anthony-unknown.gif) are in
 /usr/share/squid/icons, but 3.2.0.5 searches them in
 /var/log/squid/www/squid/icons.

 Where's the mis-configuration?

 --localstatedir=/var/log/squid  appears to be the problem.

 Ok - some more symlinks ...

 Why do you have all state configured to be installed below /var/log
 anyway? That is a location reserved for log files.

I've taken the Build script from 3.1.11 - most parts work well.

 Distribution packages are supposed to set --localstatedir=/var there.
 User-built packages are supposed to set /usr/var or some such local
 equivalent.

Ok - I'll update the script.

 What about the old icons, p.e. anthony-unknown.gif?

 squid mourned that it couldn't find them, and they seem to be no
 part of 3.2.0.5

 Mar  5 11:02:59 ElNath squid[14639]: Starting Squid Cache version
 3.2.0.5 for i486-slackware-linux-gnu...
 Mar  5 11:02:59 ElNath squid[14639]: mimeLoadIconFile:
 /var/log/squid/www/squid/icons/anthony-image.gif: (2) No such file
 or directory Mar  5 11:02:59 ElNath squid[14639]: mimeLoadIconFile:
 /var/log/squid/www/squid/icons/anthony-text.gif: (2) No such file or
 directory Mar  5 11:02:59 ElNath squid[14639]: mimeLoadIconFile:
 /var/log/squid/www/squid/icons/anthony-dirup.gif: (2) No such file
 or directory [...]

 When I linked (or declared) the icon_directory to the 3.1.11 icon
 directory all worked fine.

 There is a file mime.conf installed with Squid which should have been
 updated to link the new icons. Perhaps it has not been updated.


It hasn't ... thank you!

---

By the way: in errorpage.css the background calls a picture  
(SN.png) via the net. That's no good idea for a machine which is  
sometimes offline.

Viele Gruesse!
Helmut


Re: [squid-users] Auth popup not shown on website

2011-03-02 Thread Helmut Hullen
Hallo, Xavier,

Du meintest am 02.03.11:

 The url is : http://reporting.generix.biz/QlikView/index.htm

 I tried with squid-3.0.STABLE7-4, squid-2.5.STABLE10-10 ...

 Dunno what is the type of auth that pops up, I'm not the owner of the
 website, I just want to use it.

Here (squid 3.1.10-20110131, Firefox 3.6.3) I'm asked for login and  
password.

Viele Gruesse!
Helmut


Re: [squid-users] squid crashes periodically without logging error message, signal 8, Arithmetic exception

2011-02-25 Thread Helmut Hullen
Hallo, Marc,

Du meintest am 25.02.11:

 our squid crashes from time to time without logging error
 messages. I started gdb on the core file - disclaimer: gdb
 is totally new for me - and here is what gdb says:

[...]

 Version: Squid 2.6.STABLE18 on Ubuntu 08.04 LTS

What about updating to an actual version, p.e. 2.7STABLE9 or 3.1.11?

Viele Gruesse!
Helmut


Re: [squid-users] squid crashes periodically without logging error message, signal 8, Arithmetic exception

2011-02-25 Thread Helmut Hullen
Hallo, Marc,

Du meintest am 25.02.11:

 our squid crashes from time to time without logging error
 messages. I started gdb on the core file - disclaimer: gdb
 is totally new for me - and here is what gdb says:

 [...]

 Version: Squid 2.6.STABLE18 on Ubuntu 08.04 LTS

 What about updating to an actual version, p.e. 2.7STABLE9 or 3.1.11?

[...]

 I just want to rule out that a likely cause for this issue are
 Hardware failures, defect RAM or something like that, that cannot be
 fixed by installing a new version.

May be a colleague some hours away has a similar problem (with squid- 
2.6STABLE16, the system is about 3 years old); next week I'll watch that  
system.

Simple changing to a newer version (slackware based) doesn't work; at  
least libexpat is missing ...

Viele Gruesse!
Helmut


Re: [squid-users] Bypass ICAP somehow?

2011-02-09 Thread Helmut Hullen
Hallo, Kinkie,

Du meintest am 09.02.11:

 Can I selectively bypass the use of ICAP (we're using c-icap) for
 certain * client IPs
 * destination URLs
 * destination IPs

 You can check http://www.squid-cache.org/Doc/config/icap_access/ out.

   This option is deprecated. Please use adaptation_access,

http://www.squid-cache.org/Versions/v3/3.2/cfgman/adaptation_access.html

Viele Gruesse!
Helmut


[squid-users] documentation link for smb_auth

2011-02-01 Thread Helmut Hullen
Hallo, squid-users,

I'm just trying squid-3.1.10-20110110, especially the smb  
authentification.

The error with the hard coded samba directory seems to be cured, but the  
is still another bug; I'm investigating.

By searching I found

a)

 path_to_source/helpers/basic_auth/SMB/README

and in that file a link to

 http://www.hacom.nl/~richard/software/smb_auth.html

That link seems to be dead.

b)
in /usr/libexec/smb_auth.sh the path to nmblookup seems to be hard  
coded; on my installation (slackware) I had to set a symlink.

c) smb_auth.pl and smb_auth.sh seem to be added for testing; which  
parameters do they need? It's a nasty job reengineering them ...

Viele Gruesse!
Helmut


[squid-users] picture address unreachable

2011-02-01 Thread Helmut Hullen
Hallo, squid-users,

I'm testing squid-3.1.0-20110131.

I'm trying authentification. When authentification (ncsa or smb) fails  
then errors/errorpage.css (/etc/squid/errorage.css) seems to be  
invoked.
And in this *.css the address of the background picture (SN.png) leads  
to the www.squid-cache.org site. But because authentification has  
failed this site is unreachable.

The proposed picture (SN.png) should be copied to /usr/share/squid/ 
icons, and the proposed *.css link should set to this local address.

Viele Gruesse!
Helmut


Re: [squid-users] Squid for personal use...

2011-01-09 Thread Helmut Hullen
Hallo, John,

Du meintest am 09.01.11:

 Is there any advantage of using squid on a personal computer?  I can
 see that in a household, running squid on a central server could be
 beneficial.  What if there was only one machine in the home?

It's a kind of big cache, too. You can choose which program caches - the  
browser(s) or squid.

Viele Gruesse!
Helmut


Re: [squid-users] size of squid binary

2010-12-27 Thread Helmut Hullen
Hallo, Orestes,

Du meintest am 27.12.10:

 I've built squid 3.1.10 on openbsd4.6 sucessfuly
 but my squid binary it's 40M of size, then I do a:

 strip --strip-unneeded squid

 to low this to 2M and all ok.

 it's this size by default normal?
 squid gets a debug build by default?

Slackware, LZO-packed: about 1 MByte

  http://arktur.shuttle.de/CD/5.4/slack/n1/squid-3.1.10-i486-1hln.tgz

My pure binary /usr/bin/squid is about 2 MByte big.

Viele Gruesse!
Helmut


Re: [squid-users] POP3 authentification

2010-11-27 Thread Helmut Hullen
Hallo,

I wrote am 26.11.10:

 I've tried the POP3 authentification with the script pop3.pl in
 helpers/basic_auth/POP3 (written by Henrik Nordstrom) - it didn't
 work.

 Many error messages in /var/log/warn, telling

 Nov 26 09:14:58 Arktur squid[2157]: Starting Squid Cache version
 3.1.8 for i486-slackware-linux-gnu...
 Nov 26 09:15:06 Arktur squid[2157]: WARNING: basicauthenticator #1
 (FD 9) exited Nov 26 09:15:06 Arktur squid[2157]: WARNING:
 basicauthenticator #2 (FD 11) exited

Sorry - it was my fault. pop3.pl needs the address of the POP3 server  
as a parameter, popauth.py has this address hard coded.

# POP3/IMAP
# auth_param basic program /usr/libexec/popauth.py
# auth_param basic program /usr/libexec/imapauth.py
auth_param basic program /usr/libexec/pop3.pl localhost



Viele Gruesse!
Helmut


Re: [squid-users] POP3 authentification

2010-11-27 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 27.11.10:

 Sorry - it was my fault. pop3.pl needs the address of the POP3
 server as a parameter, popauth.py has this address hard coded.

 # POP3/IMAP
 # auth_param basic program /usr/libexec/popauth.py
 # auth_param basic program /usr/libexec/imapauth.py
 auth_param basic program /usr/libexec/pop3.pl localhost

 Since you have both going now are you able to provide any info on
 which of the perl or python versions is fastest regarding these
 important details?
   * helper startup time
   * request execution time

I'll try ...

On my installation here at home there is only 1 user. But I can watch  
some other machines.

In cache.log (and debug level 1) I only find something like

2010/11/27 09:26:11| helperOpenServers: Starting 40/40 'pop3.pl'  
processes
2010/11/27 09:26:13| Accepting  HTTP connections at [::]:8080, FD 95.

Where/how can I find the execution time(s)?

-

Studying log files sucks ...

popauth.py and imapauth.py send error messages, but they work.

Viele Gruesse!
Helmut


[squid-users] SAMBAPREFIX

2010-11-26 Thread Helmut Hullen
Hallo, squid-users,

it would be nice if SAMBAPREFIX is not hard coded in helpers/ 
basic_auth/SMB/Makefile.in but can be defined as a configure option.


Viele Gruesse!
Helmut


Re: [squid-users] SAMBAPREFIX

2010-11-26 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 27.11.10:

 it would be nice if SAMBAPREFIX is not hard coded in helpers/
 basic_auth/SMB/Makefile.in but can be defined as a configure
 option.


 You will probably be wanting to tell this to the developers
 (squid-dev mailing list) rather than fellow admin.
 http://bugs.squid-cache.org/show_bug.cgi?id=2959

Reported:   2010-06-18 04:35 MDT by Helmut Hullen

Viele Gruesse!
Helmut


[squid-users] POP3 authentification

2010-11-26 Thread Helmut Hullen
Hallo, squid-users,

I've tried the POP3 authentification with the script pop3.pl in  
helpers/basic_auth/POP3 (written by Henrik Nordstrom) - it didn't  
work.

Many error messages in /var/log/warn, telling

Nov 26 09:14:58 Arktur squid[2157]: Starting Squid Cache version 3.1.8  
for i486-slackware-linux-gnu...
Nov 26 09:15:06 Arktur squid[2157]: WARNING: basicauthenticator #1 (FD 9) exited
Nov 26 09:15:06 Arktur squid[2157]: WARNING: basicauthenticator #2 (FD 11) 
exited

[...]

Nov 26 09:15:07 Arktur squid[2157]: WARNING: basicauthenticator #20 (FD 47) 
exited
Nov 26 09:15:07 Arktur squid[2157]: WARNING: basicauthenticator #21 (FD 49) 
exited
Nov 26 09:15:07 Arktur squid[2157]: Too few basicauthenticator processes are 
running
Nov 26 09:15:07 Arktur squid[2157]: The basicauthenticator helpers are crashing 
too rapidly, need help!
Nov 26 09:15:07 Arktur squid[1928]: Exiting due to repeated, frequent failures


Changing to

squidauth.py (by POP3)
or
squidauth.py (by IMAP)

(see http://lateral.netmanagers.com.ar/stories/6.html;)

solved the problem.

Maybe you should add the Python scripts in helpers/basic_auth/POP3.

Viele Gruesse!
Helmut


Re: Fwd: [squid-users] URL redirection in offline mode

2010-11-24 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 23.11.10:

 - /etc/squid/conf.d/schlafen.conf --

 acl Schlafzeit time 00:00-05:59
 http_access allow !Schlafzeit

 This is an allow line. It make the decision between ALLOW or
 CONTINUE.

 What you need is a deny line. To make the decision between DENY or
 CONTINUE.

 Use:
   http_access deny Schlafzeit

Bingo - it works!
Thank you!

Viele Gruesse!
Helmut


Re: Fwd: [squid-users] URL redirection in offline mode

2010-11-23 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 22.11.10:

 Turn of offline_mode if you have it set in squid.conf. Despite
 the name, it only causes aggressive caching to be done.

 But what shall I do with a squid installation in a boarding school
 (Internat, many pupils have their own computer(s)) where the
 connection into the internet is cut from midnight to 6:00?

 squid mourns on and on that the DNS is unreachable (and that's
 right ...).


 Make yourself a custom error page template explaining the situation.
 Then use a deny_info line to supply it when a time-based ACL at the
 top of the http_access list matches your offline times. No DNS or
 external network connection involved.

May be I do something wrong - but my ACL doesn't help.

 part of squid.conf ---

http_access allow manager localhost
http_access deny manager
# nach Buch

http_access deny CONNECT !SSL_ports
http_access deny Dangerous_ports

# nur LAN erlaubt (ist das doppelt gemoppelt?)
http_access deny !localnet

include /etc/squid/conf.d/schlafen.conf

# 

-- end squid.conf -

with

- /etc/squid/conf.d/schlafen.conf --

acl Schlafzeit time 00:00-05:59
http_access allow !Schlafzeit
#

-- end schlafen.conf 

Early in the morning I get the following messages in /var/log/ 
messages:

- /var/log/messages --

Nov 22 04:13:23 Arktur squid[3238]: Failure Ratio at 1.088
Nov 22 04:13:23 Arktur squid[3238]: Going into hit-only-mode for 5 minutes...
Nov 22 04:18:23 Arktur squid[3238]: Failure Ratio at 1.401
Nov 22 04:18:23 Arktur squid[3238]: Going into hit-only-mode for 5 minutes...
Nov 22 04:23:42 Arktur squid[3238]: Failure Ratio at 1.245
Nov 22 04:23:42 Arktur squid[3238]: Going into hit-only-mode for 5 minutes...
Nov 22 04:28:42 Arktur squid[3238]: Failure Ratio at 1.092
Nov 22 04:28:42 Arktur squid[3238]: Going into hit-only-mode for 5 minutes...
Nov 22 04:33:42 Arktur squid[3238]: Failure Ratio at 1.440
Nov 22 04:33:42 Arktur squid[3238]: Going into hit-only-mode for 5 minutes...
Nov 22 04:39:33 Arktur squid[3238]: Failure Ratio at 1.008
Nov 22 04:39:33 Arktur squid[3238]: Going into hit-only-mode for 5 minutes...

--- end messages --

My squid version:

Squid Cache: Version 3.1.8
configure options:  '--prefix=/usr' '--libdir=/usr/lib' 
'--sysconfdir=/etc/squid' '--localstatedir=/var/log/squid' 
'--datadir=/usr/share/squid' '--with-pidfile=/var/run/squid' 
'--mandir=/usr/man' '--with-logdir=/var/log/squid' '--enable-snmp' 
'--enable-storeio=aufs,ufs,diskd' '--enable-wccp' '--enable-arp-acl' 
'--enable-ssl' '--enable-removal-policies=lru,heap' '--enable-icmp' 
'--enable-delay-pools' '--enable-auth=basic' 
'--enable-basic-auth-helpers=NCSA,YP,multi-domain-NTLM,MSNT,SMB,getpwnam' 
'--enable-linux-netfilter' '--enable-async-io' '--disable-loadable-modules' 
'--build=i486-slackware-linux' 'build_alias=i486-slackware-linux' 'CFLAGS=-O2 
-march=i486 -mtune=i686' 'CXXFLAGS=-O2 -march=i486 -mtune=i686' 
--with-squid=/tmp/SBo/squid-3.1.8 --enable-ltdl-convenience


Viele Gruesse!
Helmut


Re: Fwd: [squid-users] URL redirection in offline mode

2010-11-21 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 19.10.10:

 Turn of offline_mode if you have it set in squid.conf. Despite the
 name, it only causes aggressive caching to be done.


But what shall I do with a squid installation in a boarding school  
(Internat, many pupils have their own computer(s)) where the  
connection into the internet is cut from midnight to 6:00?

squid mourns on and on that the DNS is unreachable (and that's right  
...).

Viele Gruesse!
Helmut


Re: [squid-users] squid 3 squidguard

2010-11-15 Thread Helmut Hullen
Hallo, Marco,

Du meintest am 15.11.10:

 With squid3, how i have to enable squidGuard ?

Which distribution? squid3 sounds like a very special distribution.

 Redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf
 Or
 url_rewrite_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf

 the Squid Page refer from redirect_program to url_rewrite_programe,
 but with both it does not work for me

Here (self compiled on slackware base): no problem.

squid-3.1.8
squidguard-1.4

Viele Gruesse!
Helmut


Re: [squid-users] Squid content filtering and redirection

2010-11-10 Thread Helmut Hullen
Hallo, Tóth,

Du meintest am 10.11.10:


 Is there a way to deny access to sites containing certain words?
 I'm thinking aoubt a wordlist or something?

Perhaps you are searching something like squidGuard.

Viele Gruesse!
Helmut


Re: [squid-users] Squid content filtering and redirection

2010-11-10 Thread Helmut Hullen
Hallo, Tóth,

Du meintest am 10.11.10:

 Is there a way to deny access to sites containing certain words?
 I'm thinking aoubt a wordlist or something?

 Perhaps you are searching something like squidGuard.

 It's possible, I just would like to know if this could be done within
 squid itself. Also a little bit of modification.
 I would like to look for ABC word only in the site name, not in
 it's content. Like deny access to www.this-is-my-abc.com but dont
 filter a site containg some paragraphs about ABC-s.

 Could it be done?

[please don't top post, please don't fullquote - thank you]

One possible way:

In squid.conf

  # Schmuddelfilter
  include /etc/squid/conf.d/schmuddel.conf


with the file /etc/squid/conf.d/schmuddel.conf

  # Schmuddelfilter
  acl verboten url_regex /etc/squid/schmuddel
  acl ausnahme url_regex /etc/squid/whitelist
  http_access allow ausnahme
  http_access deny verboten

and the wordlist files /etc/squid/schmuddel and /etc/squid/verboten,  
one entry per line.

As far as I know squid can't check the contents but only can check  
URLs etc.

Viele Gruesse!
Helmut


Re: [squid-users] squid cuts download at 2 GByte

2010-10-17 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 17.10.10:

 seems that squid cuts downloads of big files (esp. *.iso) at 2
 GByte. Tested with squid 2.6STABLE12 and squid 3.1.8

 Check that your squid is either 64-bit build or has the
 --with-large-files.

Bingo!
You may change the description of this option in the configure --help  
text: it's not only good for log files.

Viele Gruesse!
Helmut


[squid-users] squid cuts download at 2 GByte

2010-10-16 Thread Helmut Hullen
Hallo, squid-users,

seems that squid cuts downloads of big files (esp. *.iso) at 2 GByte.  
Tested with squid 2.6STABLE12 and squid 3.1.8

Is it possible that squid is the bad guy?

Downloading a big file via http in the LAN (which doesn't use squid)  
works as expected, downloading it via WAN stops at 2048 MByte. Tested  
with several providers, with several browsers, under Linux and Windows.  
It's no problem related to the target filesystem (ext2/ext3).

I have added

reply_body_max_size 5 GB

in /etc/squid/squid.conf - no change.


Viele Gruesse!
Helmut


Re: [squid-users] squid cuts download at 2 GByte

2010-10-16 Thread Helmut Hullen
Hallo, Nyamul,

Du meintest am 17.10.10:

 seems that squid cuts downloads of big files (esp. *.iso) at 2
 GByte. Tested with squid 2.6STABLE12 and squid 3.1.8

 Is it possible that squid is the bad guy?

 Downloading a big file via http in the LAN (which doesn't use squid)
 works as expected, downloading it via WAN stops at 2048 MByte.
 Tested with several providers, with several browsers, under Linux
 and Windows. It's no problem related to the target filesystem
 (ext2/ext3).

 I have added

        reply_body_max_size 5 GB

 in /etc/squid/squid.conf - no change.

 OS limits?  What's your installed OS?  Is it on i386 or x86_64?


i386, Slackware-current. Without squid in the download chain I can  
download 4 GByte and more.

Viele Gruesse!
Helmut


Re: [squid-users] Change EXTERNAL IP address with Squid 3.1.8

2010-10-06 Thread Helmut Hullen
Hallo, Daniel,

Du meintest am 06.10.10:

 I know this can be done, because at work I went to www.whatismyip.com
 and it came up with MY machines IP address, and I did confirm that it
 was my machines ip address at the time. and then I tried it again a
 few weeks later, and all of a sudden after asking the technicians of
 why this was happening, the site then showed the INTERNAL IP address
 of the squid machine. So I am curious to how to set this up please.

Try some other websites:

   http://arktur.de/Wiki/Zusatzprogramme:ipput#Abfrage-Dienste

My actual favorite for scripts is checkip.dyndns.org, for manual input  
I prefer myip.at.

Viele Gruesse!
Helmut


Re: [squid-users] Redirect certain sites through parent proxy?

2010-10-06 Thread Helmut Hullen
Hallo, Daniel,

Du meintest am 07.10.10:

 Thank you to all who have helped me in the past. Helmut Hullen and
 Giles Coochey. but one more thing, I would like to redirect the
 website www.whatismyip.com through another proxy, for testing
 purposes.

 the parent proxy server is 206.225.95.146:58258

 I have got this: cache_peer 172.16.x.x(IP of another Server) parent
 3128(SQUID PORT) 3130(ICP_PORT) cache_peer_domain example.com

whatismyip.com seems to have problems with a router, it tells the  
address in the LAN. Try one of the other services, p.e.

checkip.dyndns.org
myip.at

Viele Gruesse!
Helmut


Re: [squid-users] Squid Start service chkconfig error....!

2010-09-30 Thread Helmut Hullen
Hallo, Ashgar,

Du meintest am 29.09.10:

 I have complie squid from latest stable version File
 squid-3.1.8.tar.gz.


[...]

 But when I try to manually start with   service squid start
 [r...@proxysrv ~]# service squid start
 squid: unrecognized service

Which distribution do you use?
service is a command which may work in different ways with different  
distributions, and there are distributions (not yours) which don't use  
such a command for starting daemons etc.

Viele Gruesse!
Helmut



Re: [squid-users] proper way to restart squid on Ubuntu 10.04

2010-09-30 Thread Helmut Hullen
Hallo, Jordon,

Du meintest am 29.09.10:

 squid -k reconfigure will only work on legacy squid, if you are using
 the new squid from the repo (squid3) then the command is: squid3 -k
 reconfigure or distro specific service squid3 reload (which will send
 a SIG1 with start-stop-daemon and log messages).

Just for curiosity: what tells

squid -v

for such an overbranded packet? Is squid a symlink to squid3?

Viele Gruesse!
Helmut


Re: [squid-users] proper way to restart squid on Ubuntu 10.04

2010-09-29 Thread Helmut Hullen
Hallo, Jordon,

Du meintest am 29.09.10:

  squid -k reconfigure

 does the job. Perhaps under Ubuntu

  sudo squid -k reconfigure

 service squid restart
 That is how you restart squid on Ubuntu.

May be.
If you only change the whitelist then it's not necessary to restart  
squid. Neither under Ubuntu nor under any other Linux distribution. For  
only  re-reading the configuration squid needs only

squid -k reconfigure

Viele Gruesse!
Helmut


Re: [squid-users] proper way to restart squid on Ubuntu 10.04

2010-09-29 Thread Helmut Hullen
Hallo, Jordon,

Du meintest am 29.09.10:

 Right, so it shall be, you are wrong too, because you should be
 using start-stop-daemon which is more graceful on a Debian system.
 Not that you would know that since you are too busy telling people
 they are wrong, also the easy way to reload on Debian: sudo service
 squid3 reload.  Go read an init file, k thnxbai.

 Sorry, small correction, I should have said Debian based since
 Debian still relies on invoke-rc.d not upstart.  Either way,
 substitute service with: service, /etc/init.d/ and invoke-rc.d which
 ever you so choose.

And the simple way is

squid -k reconfigure

Why learning those distribution specific (proprietary) additional ways?

squid --help

works in every distribution.

Viele Gruesse!
Helmut


Re: [squid-users] proper way to restart squid on Ubuntu 10.04

2010-09-29 Thread Helmut Hullen
Hallo, GravyFace,

Du meintest am 29.09.10:

 The issue is that squid does not seem to be restarting gracefully,
 regardless of whether I use /etc/init.d/squid restart or service
 squid restart: it failed with (something like) unknown process which
 to me implies that squid wasn't running, even though I knew it was as
 I was using the proxy through a browser several moments before
 editing the whitelist (and why I asked if editing the whitelist file
 would've stopped the process, unlikely as that would be).

Then try

squid -X -k debug

Viele Gruesse!
Helmut


Re: [squid-users] proper way to restart squid on Ubuntu 10.04

2010-09-29 Thread Helmut Hullen
Hallo, Jordon,

Du meintest am 29.09.10:

 Then try

  squid -X -k debug


 While I don't agree that he should have squid send a SIG1 or HUP
 directly I need to ask, which version of squid are you using?

HUP doesn't work as expected - just believe it (my gerlish isn't good  
enough to explain the problems).

 squid -k reconfigure will only work on legacy squid, if you are using
 the new squid from the repo (squid3) then the command is: squid3 -k
 reconfigure or distro specific service squid3 reload (which will send
 a SIG1 with start-stop-daemon and log messages).

That sounds like a debianism or an ubuntism.

3 weeks ago I have compiled the (theretimes) actual squid version  
(3.1.8) - it didn't produce any squid3 file.

Viele Gruesse!
Helmut


[squid-users] squid 3.1.6 won't compile

2010-08-25 Thread Helmut Hullen
Hallo,


I'm trying to compile Squid 3.1.6 with the SBo script

http://slackbuilds.org/repository/13.1/network/squid/
   http://slackbuilds.org/slackbuilds/13.1/network/squid/squid.SlackBuild

- it fails with

/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../
libpthread.a(pthread_create.o): In function `pthread_create':
(.text+0x10a9): undefined reference to `_dl_stack_flags'
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(pthread_create.o):
In function `pthread_create':
(.text+0x1bd6): undefined reference to `_dl_stack_flags'
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(ptw-write.o): In
function `__write_nocancel':
(.text+0x26): undefined reference to `__syscall_error'
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(ptw-write.o): In
function `__write_nocancel':
(.text+0x56): undefined reference to `__syscall_error'
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(ptw-read.o): In
function `__read_nocancel':
(.text+0x26): undefined reference to `__syscall_error'
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(ptw-read.o): In
function `__read_nocancel':
(.text+0x56): undefined reference to `__syscall_error'
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(ptw-close.o): In
function `__close_nocancel':
(.text+0x20): undefined reference to `__syscall_error'
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(ptw-close.o):(.
text+0x4b): more undefined references to `__syscall_error' follow
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(sigaction.o): In
function `__libc_sigaction':
(.text+0x4e): undefined reference to `_dl_sysinfo_dso'
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(nptl-init.o): In
function `__pthread_initialize_minimal':
(.text+0x1c): undefined reference to `__libc_setup_tls'
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(nptl-init.o): In
function `__pthread_initialize_minimal':
(.text+0x269): undefined reference to `_dl_init_static_tls'
/usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(nptl-init.o): In
function `__pthread_initialize_minimal':
(.text+0x273): undefined reference to `_dl_wait_lookup_done'
collect2: ld returned 1 exit status
make[3]: *** [squid] Fehler 1
make[2]: *** [all-recursive] Fehler 1
make[1]: *** [all] Fehler 2
make: *** [all-recursive] Fehler 1

# -

/usr/lib/libpthread.a exists, it's part of glibc-2.11.1

Compiling other packages works well.

Is that error related to squid or to glibc?


---

I had compiled some earlier squid versions with the appropriate  
SlackBuild scripts - all worked fine.

p.e.

  
http://helmut.hullen.de/filebox/Linux/slackware/n/squid-3.0.STABLE16-i486-1hln_slack11.0.tgz
  http://arktur.shuttle.de/CD/5.2/slack/n1/squid-3.1.3-i486-1hln.tgz

Viele Gruesse!
Helmut


Re: [squid-users] squid 3.1.6 won't compile

2010-08-25 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 25.08.10:

 I'm trying to compile Squid 3.1.6 with the SBo script

 http://slackbuilds.org/repository/13.1/network/squid/
http://slackbuilds.org/slackbuilds/13.1/network/squid/squid.Slac
kBuild

 - it fails with

 /usr/lib/gcc/i486-slackware-linux/4.4.4/../../../
 libpthread.a(pthread_create.o): In function `pthread_create':
 (.text+0x10a9): undefined reference to `_dl_stack_flags'
 /usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(pthrea
 d_create.o):
 snip
 # --
 ---

 /usr/lib/libpthread.a exists, it's part of glibc-2.11.1

 Compiling other packages works well.

 Is that error related to squid or to glibc?


 Bit hard to say from just the libc messages. Possibly bits we expect
 are missing from the library, or a system header include has gone
 wrong.  Do you have the lines above the error which indicate exactly
 what was building when it occured?

Famous last words:

depbase=`echo string_arrays.o | sed 's|[^/]*$|.deps/|;s|\.o$||'`;\
i486-slackware-linux-gcc -DHAVE_CONFIG_H 
-DDEFAULT_CONFIG_FILE=\/etc/squid/squid.conf\ 
-DDEFAULT_SQUID_DATA_DIR=\/usr/share/squid\ 
-DDEFAULT_SQUID_CONFIG_DIR=\/etc/squid\  -I.. -I../include -I../src 
-I../include  -I../src   -Wall -Wpointer-arith -Wwrite-strings 
-Wmissing-prototypes -Wmissing-declarations -Wcomments -Werror -D_REENTRANT -O2 
-march=i486 -mtune=i686 -MT string_arrays.o -MD -MP -MF $depbase.Tpo -c -o 
string_arrays.o string_arrays.c \
mv -f $depbase.Tpo $depbase.Po
/bin/sh ../libtool --tag=CXX   --mode=link i486-slackware-linux-g++ -Wall 
-Wpointer-arith -Wwrite-strings -Wcomments -Werror  -D_REENTRANT -O2 
-march=i486 -mtune=i686 -export-dynamic -dlopen force -g -o squid AclRegs.o 
AuthReg.o access_log.o AsyncEngine.o cache_cf.o ProtoPort.o CacheDigest.o 
cache_manager.o carp.o cbdata.o ChunkedCodingParser.o client_db.o client_side.o 
client_side_reply.o client_side_request.o BodyPipe.o clientStream.o 
CompletionDispatcher.o comm_select.o comm_select_win32.o comm_poll.o 
comm_epoll.o comm_kqueue.o ConfigOption.o ConfigParser.o debug.o delay_pools.o 
DelayId.o DelayBucket.o DelayConfig.o DelayPool.o DelaySpec.o DelayTagged.o 
DelayUser.o DelayVector.o NullDelayId.o disk.o DiskIO/DiskIOModule.o 
DiskIO/ReadRequest.o DiskIO/WriteRequest.o dlink.o dns_internal.o 
DnsLookupDetails.o errorpage.o ETag.o event.o EventLoop.o external_acl.o 
ExternalACLEntry.o fd.o fde.o filemap.o forward.o fqdncache.o ftp.o gopher.o 
helper.o htcp.o http.o HttpStatusLine.o HttpHdrCc.o HttpHdrRange.o HttpHdrSc.o 
HttpHdrScTarget.o HttpHdrContRange.o HttpHeader.o HttpHeaderTools.o HttpBody.o 
HttpMsg.o HttpReply.o HttpRequest.o HttpRequestMethod.o icp_v2.o icp_v3.o int.o 
internal.o ipc.o ipcache.o  list.o logfile.o main.o mem.o mem_node.o MemBuf.o 
MemObject.o mime.o mime_header.o multicast.o neighbors.o Packer.o Parsing.o  
pconn.o peer_digest.o peer_select.o peer_sourcehash.o peer_userhash.o 
redirect.o referer.o refresh.o RemovalPolicy.o send-announce.o snmp_core.o 
snmp_agent.o SquidMath.o SquidNew.o ssl_support.o stat.o StatHist.o String.o 
stmem.o store.o StoreFileSystem.o store_io.o StoreIOState.o store_client.o 
store_digest.o store_dir.o store_key_md5.o store_log.o store_rebuild.o 
store_swapin.o store_swapmeta.o store_swapout.o StoreMeta.o StoreMetaMD5.o 
StoreMetaSTD.o StoreMetaSTDLFS.o StoreMetaUnpacker.o StoreMetaURL.o 
StoreMetaVary.o StoreSwapLogData.o Server.o SwapDir.o time.o tools.o tunnel.o 
unlinkd.o url.o URLScheme.o urn.o useragent.o wccp.o wccp2.o whois.o wordlist.o 
  LoadableModule.o LoadableModules.o DiskIO/DiskIOModules_gen.o repl_modules.o 
globals.o string_arrays.o base/libbase.la libsquid.la auth/libacls.la 
ident/libident.la acl/libacls.la acl/libstate.la auth/libauth.la acl/libapi.la 
ip/libip.la fs/libfs.la icmp/libicmp.la icmp/libicmp-core.la 
../compat/libcompat.la -L../lib  DiskIO/AIO/AIODiskIOModule.o 
DiskIO/Blocking/BlockingDiskIOModule.o 
DiskIO/DiskDaemon/DiskDaemonDiskIOModule.o 
DiskIO/DiskThreads/DiskThreadsDiskIOModule.o repl/liblru.a repl/libheap.a 
libAIO.a libBlocking.a libDiskDaemon.a libDiskThreads.a -lrt -lpthread -lcrypt  
../snmplib/libsnmp.a   -lssl -lcrypto -lmiscutil   -lm -lnsl -lcap -ldl -ldl 
-lltdl
libtool: link: rm -f .libs/squid.nm .libs/squid.nmS .libs/squid.nmT
libtool: link: (cd .libs  i486-slackware-linux-gcc -O2 -march=i486 
-mtune=i686 -c -fno-builtin squidS.c)
libtool: link: rm -f .libs/squidS.c .libs/squid.nm .libs/squid.nmS 
.libs/squid.nmT
libtool: link: i486-slackware-linux-g++ -Wall -Wpointer-arith -Wwrite-strings 
-Wcomments -Werror -D_REENTRANT -O2 -march=i486 -mtune=i686 .libs/squidS.o -g 
-o squid AclRegs.o AuthReg.o access_log.o AsyncEngine.o cache_cf.o ProtoPort.o 
CacheDigest.o cache_manager.o carp.o cbdata.o ChunkedCodingParser.o client_db.o 
client_side.o client_side_reply.o client_side_request.o BodyPipe.o 
clientStream.o CompletionDispatcher.o comm_select.o comm_select_win32.o 

[squid-users] Re: squid 3.1.6 also won't compile

2010-08-25 Thread Helmut Hullen
Hallo, Tóth,

Du meintest am 25.08.10:

 I'm getting this problem:

 === configuring in lib/libTrie (/root/squid-3.1.6/lib/libTrie)
 configure: running /bin/sh ./configure --disable-option-checking
 '--prefix=/usr/local/squid'  '--with-squid=/root/squid-3.1.6'
 '--enable-ltdl-convenience' --cache-file=/dev/null --srcdir=.

Do you really need ltdl-convenience? With the alternative option -- 
disable-loadable-modules compiling works on my machines.

Viele Gruesse!
Helmut


Re: [squid-users] squid 3.1.6 won't compile

2010-08-25 Thread Helmut Hullen
Hallo, Amos,

Du meintest am 25.08.10:

 I'm trying to compile Squid 3.1.6 with the SBo script

 http://slackbuilds.org/repository/13.1/network/squid/
http://slackbuilds.org/slackbuilds/13.1/network/squid/squid.Slac
kBuild

 - it fails with

 /usr/lib/gcc/i486-slackware-linux/4.4.4/../../../
 libpthread.a(pthread_create.o): In function `pthread_create':
 (.text+0x10a9): undefined reference to `_dl_stack_flags'
 /usr/lib/gcc/i486-slackware-linux/4.4.4/../../../libpthread.a(pthrea
 d_create.o):
 snip

[...]

 PS: 3.1.6 has a few problems which you should avoid now if possible.
 Can you try with the 3.1.7 sources underneath the scripts?

With the additional option --disable-loadable-modules compiling works  
fine (and runs very quick). On my two machines, with old and new gcc and  
glibc.

Temporary download address (just for testing the next few days,  
Slackware packet)

 http://arktur.shuttle.de/CD/Testpakete/squid-3.1.7-20100825-i486-1_SBo.tgz

Viele Gruesse!
Helmut


<    1   2