[squid-users] Is there any Linux Wifi Hotspot Solution that can be used with squid .. ?

2011-07-21 Thread Mr Crack
Dear Friends,
I would like to know if there is any wifi hotspot solution software in
Linux ( free or commercial )
In Windows, that can be done with Antamedia Hotspot software.



Thanks in advance
MrCrack007


[squid-users] Can I log AD logon user name in squid log file .

2010-12-20 Thread Mr Crack
Dear Forks,
I want to log AD logon username in squid log file.
But I do not want to ask user to enter username/password when they
view web pages via squid proxy server.
Is it possible or not .. ?



Regards,
MrCrack 007


[squid-users] Which is the best softwaer to Load Balancing over Wiless + ADSL

2009-10-24 Thread Mr Crack
I would like to know which s/w is the best to load balance 2 or more
Internet Links with Squid
Normal load balancing (cache_peer . round-robin ... does not work well .. )
Also using load balancing router cannot solve because it distributes
loads to each Internet Links by 50%

Here is my current situation
I have two Internet Lines

1) 512 Kbps ADSL
- Offer stable speed
- Voice traffic is OK
- But often down by old exchange

2) 256 Kbps Wireless (WiMax)
- Cannot offer stable speed
- Cannot use well voice services .. e.g. Skype
- Less downtime

   / - ADSL  (512 Kbps/ stable/ often
down/ good for voice services )
LAN Squid Box /
 \
  \ --- WiMax (256 Kbps/ not stable
speed/ always good/ cannot offer well for voice services )


My question is
1) Is that possible to load balance with Squid .. ?
2) If possible, what addition s/w is needed ..
3) Is that possible to distributes laod by percent e.g. 30% of load to
WiMax and 70% of load to ADSL ... ?

Any suggestions are welcomed ..
Mr Crack 007


[squid-users] ADSL -- Linux -- Hub -- Windows .................. Slow response

2009-01-16 Thread Mr Crack
I have installed RHEL 5.1 and have the following result with the
following configurations.

Conf-A.  ADSL Modem---Windows // It offers fast response
when connecting any website
Conf-B.  ADSL Modem -- Linux-- Hub---Windows Client ... // Slow
response compared to Conf-A    when connecting any website
Conf-C.  ADSL Modem -- Router -- Linux --- Hub -- Windows Client
.. // Fast response and same as Conf-A.

Note:
1. All above configuration are test without squid (i.e with NAT only mode )
2. Selinux -- Permissive mode

Conf-A  Conf-C response time are fast and i think same...

Here is my questions... !!
Why it becomes slow response time with Conf-B style configurations... ?
If any one of you suspect, pls test by yourself.
I think ... we need to makes some tweaks... in Linux box...
But I dont know ...
May be MTU...Selinux.or sth else...

I believe any one can point out me how to fix Conf-B to get fast response.

Mr.Crack007


[squid-users] Delay_pools does not work

2008-11-29 Thread Mr Crack
Hi All,
I want to limit total download bandwidth to 30 kbps
and individual to 12 kbps
Here is my delay pools configuration and that does not work

acl download_time time 9:30-21:30
acl bfree url_regex -i 192.168.0.1
acl download url_regex -i /etc/all.txt

delay_pools 2

delay_class 1 2
delay_parameters 1  -1/-1  -1/-1
delay_access 1 allow bfree
delay_access 1 deny !bfree

delay_class 2 2
delay_parameters 2 3/7  12000/5
delay_access 2 allow all download_time download


[squid-users] Block video sites at specific time.....!

2008-09-22 Thread Mr Crack
I want to block video site during office hours because connetion is
slow when some users view video sites...
here is my configuration but does not work
I want to limit using metacafe like video sites... during office hours

acl all src 0.0.0.0/0.0.0.0
acl lan src 192.168.0.0/255.255.255.0
acl video dstdomain .metacafe.com
acl day97 time 09:00-17:00

http_access allow video !day95
http_access allow lan
http_access deny all


Any help is highly appriciated...


Re: [squid-users] how to force to refresh when at offline_mode is on

2008-08-21 Thread Mr Crack
I dont understand what you want
pls tell me exactly what you want...


On 8/21/08, Vikram Goyal [EMAIL PROTECTED] wrote:
 On Tue, Aug 19, 2008 at 03:04:48PM +0200, Matus UHLAR - fantomas wrote:
 On 18.08.08 23:10, Mr Crack wrote:
  Subject: [squid-users] how to force to refresh when at offline_mode is
  on
 
  when offline_mode is off, it becomes slow
  when offline_mode is on, old webpages comes out from cache
  how to fix this problem
  as for me offline_mode is also very essential because our internet
  connection is very slow

 you can't refresh in offline mode because offline mode means that no pages
 will be fetched at all.

 You probably need to tune your cache to effective cache everything
 possible
 - use large cache, use newest squid version and others

 Hello,

 I am new to squid. Could you guide exactly which settings should be
 tweaked and what values should be appropriate.

 I am using squid-3.0.STABLE7-1.fc9.i386

 Thanks!
 --



[squid-users] Problem when adding another hard disk.. squid cannot create any files or dir on another hard disk

2008-08-21 Thread Mr Crack
I add anohter disk for cache
here is what i have done

1. mkfs.ext3 /dev/sda1
2. add the following line to /etc/fstab
   /dev/sda1   /mnt/cache2 ext3defaults1 2
3. add the following to /etc/squid/squid.conf
   cache_dir ufs /mnt/cache2  27 16 256
4. squid -z
   #dir /mnt/cache2
Lost+found
No files are created
5. service squid start
init_cache_dir /mnt/cache2... Starting squid: /etc/init.d/squid: line
53:  2766 Aborted $SQUID $SQUID_OPTS
/var/log/squid/squid.out 21
   [FAILED]
6. To trace what happened i tail /var/log/squid/squid.out
Here is squid.out error message

FATAL: Failed to make swap directory /mnt/cache2: (13) Permission denied
Squid Cache (Version 2.6.STABLE6): Terminated abnormally.
CPU Usage: 0.002 seconds = 0.000 user + 0.002 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0
FATAL: cache_dir /mnt/cache2: (13) Permission denied
Squid Cache (Version 2.6.STABLE6): Terminated abnormally.
CPU Usage: 0.006 seconds = 0.001 user + 0.005 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0

I think squid cannot create any files in /mnt/cache2
It is mount problem

My problem is i dont know how to mount /mnt/cache2 as squid user
If i can mount /mnt/cache2 as squid, the problem should be OK
My cache_effective_user is squid and cache_effective_group also squid



Mr. Crack007


Re: [squid-users] Problem when adding another hard disk.. squid cannot create any files or dir on another hard disk

2008-08-21 Thread Mr Crack
chown squid.squid /mnt/cache2
and
Disable Selinux works for me
Sorry i forget to tell I use RHEL 5


Thanks you for your reply

On Thu, Aug 21, 2008 at 4:25 AM, John Doe [EMAIL PROTECTED] wrote:
 My problem is i dont know how to mount /mnt/cache2 as squid user
 If i can mount /mnt/cache2 as squid, the problem should be OK
 My cache_effective_user is squid and cache_effective_group also squid

 Once /mnt/cache2 is mounted, do

  chown squid:squid /mnt/cache2

 JD







[squid-users] I enable offline_mode, after 3 days... access denied error occurs

2008-08-20 Thread Mr Crack
If offline_mode is disable, connection is slow but Ok
To speed up connection speed, I enable offline_mode and connection is fast.
But after 3 days, the following error occurs when accessing some sites...
These site are not banned from our ISP
If this error occurs, i refresh 3-5 times and works...
I do not set any time limit...


ERROR:  The requested URL could not be retrieved

While trying to retrieve the URL:
http://z.about.com/d/paranormal/1/0/C/T/mumified_mermaid.jpg
The following error was encountered:

Access Denied.
Access control configuration prevents your request from being allowed
at this time. Please contact your service provider if you feel this is
incorrect.
Your cache administrator is root.

Generated Wed, 20 Aug 2008 06:04:30 GMT by test.abc.net.mm (squid/2.6.STABLE6)



So I disable offline_mode again but this error still occurs...


Re: [squid-users] how to force to refresh when at offline_mode is on

2008-08-19 Thread Mr Crack
thanks you for your reply

On Tue, Aug 19, 2008 at 1:04 AM, Matus UHLAR - fantomas
[EMAIL PROTECTED] wrote:
 On 18.08.08 23:10, Mr Crack wrote:
 Subject: [squid-users] how to force to refresh when at offline_mode is on

 when offline_mode is off, it becomes slow
 when offline_mode is on, old webpages comes out from cache
 how to fix this problem
 as for me offline_mode is also very essential because our internet
 connection is very slow

 you can't refresh in offline mode because offline mode means that no pages
 will be fetched at all.

 You probably need to tune your cache to effective cache everything possible
 - use large cache, use newest squid version and others
 --
 Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
 Warning: I wish NOT to receive e-mail advertising to this address.
 Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
 The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95



[squid-users] how to force to refresh when at offline_mode is on

2008-08-18 Thread Mr Crack
when offline_mode is off, it becomes slow
when offline_mode is on, old webpages comes out from cache
how to fix this problem
as for me offline_mode is also very essential because our internet
connection is very slow

Mr.Crack 007


[squid-users] Is it possible to log chat ... (Gtalk, Mirc, AIM,...... )

2008-06-20 Thread Mr Crack
Dear Friends,
I would like to know whether it is possible to log chatting of office
users by squid.
If squid cannot, what s/w should i use to log chatting.


Your comments are warmly welcomed.

Mr Crack 007


[squid-users] how to cache certain files types... e.g. zip files

2008-06-08 Thread Mr Crack
I have setup to cache up to 100 Mb size download with maximum_object_size
I am using with transparent proxy
somestimes it cache download
but sometimes it does not cache...


Is there any way to cache certain files types e.g. zip, iso, doc, pdf
pls explain with example if u can


Mr. Crack 007


[squid-users] How to bypass banned sites

2008-06-07 Thread Mr Crack
My ISP banned most sites.
So, i make them use YourFreedom but it generates a lot of traffics. As
more users,
Traffice becomes large and very slow. When connetion becomes slow,
YourFreedom does not work.

Then I try to use Ultra Surf but not works when connection is slow or sometimes.

I googled ssh+putty can offer this also. So, I tried but i cannot ...
I think anyone of you can help me

Any comments are welcomed



Mr. Crack007


[squid-users] How to control download banwidth

2008-06-07 Thread Mr Crack
I setup squid at many Cyber cafe;
The performnace is normal.
but the following problem occurs.
If one of the users download large files with download manager e.g.
IDM, Free Download managers, . the whole Internet cafe speed
becomes very slow.
I have set download limit policies but it is not suitable all the time.
There are many situations user need to download more than download limit.

I can solve this problem if i can control download bandwidth so that
they cannot take the whole Internet bandwidth if they download with
IDM, FDM, Gozilla ...

Any can help me with example


Mr. Crack 007


[squid-users] Auto Proxy ISP Squid questions

2008-05-29 Thread Mr Crack
How can I use squid with auto-proxy ISP
Do I need to use cache_peer ?


Thanks and Advance
Mr Crack 007


[squid-users] how to bypass firewall for some sites

2008-03-24 Thread Mr Crack
Is there any way in squid to bypass some sites that are banned by firewall or
special tools as squid-plug in ...?
Because ISP banned some sites such as GMail
I dont want to use Windows software e.g. YourFreedom, UltraSurf
I want to install as server s/w with squid


Any help is appriciated

Mr. Crack 007


[squid-users] Bypass tools that works with squid

2008-03-24 Thread Mr Crack
Is there any way in squid to bypass some sites that are banned by firewall or
special tools as squid-plug in ...?
Because ISP banned some sites such as GMail
I dont want to use Windows software e.g. YourFreedom, UltraSurf
I want to install as server s/w with squid


Any help is appriciated

Mr. Crack 007


[squid-users] bypass tools that works with squid

2008-03-24 Thread Mr Crack
Is there any way in squid to bypass some sites that are banned by firewall or
special tools as squid-plug in ...?
Because ISP banned some sites such as GMail
I dont want to use Windows software e.g. YourFreedom, UltraSurf
I want to install as server s/w with squid


Any help is appriciated

Mr. Crack 007


[squid-users] bypass tools that works together with squid

2008-03-24 Thread Mr Crack
Is there any way in squid to bypass some sites that are banned by firewall or
special tools as squid-plug in ...?
Because ISP banned some sites such as GMail
I dont want to use Windows software e.g. YourFreedom, UltraSurf
I want to install as server s/w with squid


Any help is appriciated

Mr. Crack 007


[squid-users] firewall bypass tools that work squid

2008-03-24 Thread Mr Crack
I want to bypass ISP firewall for some sites.
Is is possible to configure in squid or have any special squid plug-ins ...?
I dont want to use Windows software e.g. YourFreedom, UltraSurf
I want to install as server s/w with squid


Any help is appriciated

Mr. Crack 007


Re: [squid-users] Outlook Express unable to download mail (POP3)

2008-03-24 Thread Mr Crack
I enable NAT on squid box and set squid-box default gateway by DHCP
use iptables

On Thu, Mar 20, 2008 at 10:38 PM, Matus UHLAR - fantomas
[EMAIL PROTECTED] wrote:

 On 20.03.08 20:14, [EMAIL PROTECTED] wrote:
   i am new for squid, i am using squid version 2.6 STABLE 8.
  
   i able to setup the proxy server with squid, my user able to use IE to
   surf net by using my proxy server. BUT my problem is when i wan to use
   Outlook Express to download my mail, the Outlook popup a msg said that
   unable to find the host. example, my email domain is mail.domain.com, and
   it is hosted in somewhere hosting company.
  
   i didnt set any rule yet and allow all user to access internet. Any
   configuration setting i need to look into?

  I am sorry, this is mailing lists of SQUID users. SQUID is an HTTP proxy, it
  can't proxy other protocol. POP3 is not HTTP.

  It's useless to proxy POP3 protocol, unless you want to intercept and/or
  filter it. Squid won't do either.
  --
  Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
  Warning: I wish NOT to receive e-mail advertising to this address.
  Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
  Christian Science Programming: Let God Debug It!.



[squid-users] How to split web traffic and voice with two ADSL

2008-03-24 Thread Mr Crack
I am running Cybercafe with two ADSL.
I want to use one ADSL for web surfing. says its ip  X.X.X.A
And another ADSL for voice e.g. gtalk, pfingo, VZO,  says its ip X.X.X.B

how can I redirect voice to X.X.X.B with squid



Mr. Crack 007


[squid-users] Slow switching to parent proxy

2008-01-23 Thread Mr Crack
I am using squid 2.6 STABLE-6 with RedHat Linux Enterprise 5.x
My ISP has 5 proxy servers.
But sometimes they down often
If the first proxy is down, I want squid to switch to second proxy etc 
I have configure squid as below

== squid.conf 
cache_peer 202.1.1.4   parent   8080  3130  no-query   no-digest
cache_peer 202.1.1.5  parent   8080  3130  no-query   no-digest
cache_peer 202.1.1.6   parent   8080  3130  no-query   no-digest
cache_peer 202.1.1.7   parent   8080  3130  no-query   no-digest

peer_connect_timeout  3 seconds
= end of squid.conf 

If first proxy down, it really try to detect next proxy server.
BUT  IT  TRY  FOR  ABOUT  TEN  TIMES.  Please see cache.log for details
BUT  I  WANT  TO  TRY  ABOUT 4  TIMES as maximum
HOW  CAN  I  DO  THAT.
Because of I have setup  cache_peer_timeout=3 seconds, it takes
30-seconds to try for a proxy.
If first 4 proxy down and the last server is active, it takes 2-minutes.
But my Internet Cafe users cannot wait up to 2-3 minutes and they go out.
Note:  If i set peer_connect_timeout less than 3 seconds, it does not work well

Any Suggestion are welcomed.

Mr. Crack 007
= Here is squid cache.log after
squid restart =
2008/01/24 04:54:41| WARNING: Very large maximum_object_size_in_memory
settings can have negative impact on performance
2008/01/24 04:54:41| Initialising SSL.
2008/01/24 04:54:41| User-Agent logging is disabled.
2008/01/24 04:54:41| Referer logging is disabled.
2008/01/24 04:54:41| DNS Socket created at 0.0.0.0, port 32773, FD 8
2008/01/24 04:54:41| Adding domain orbitnet.com.mm from /etc/resolv.conf
2008/01/24 04:54:41| Adding nameserver 202.1.1.1 from /etc/resolv.conf
2008/01/24 04:54:41| Adding nameserver 202.1.1.2 from /etc/resolv.conf
2008/01/24 04:54:41| Accepting proxy HTTP connections at 0.0.0.0, port
8080, FD 9.
2008/01/24 04:54:41| Accepting ICP messages at 0.0.0.0, port 3130, FD 12.
2008/01/24 04:54:41| WCCP Disabled.

 Here is my proxy list after restarting squid

2008/01/24 04:54:41| Configuring Parent 202.1.1.4/8080/3130
2008/01/24 04:54:41| Configuring Parent 202.1.1.5/8080/3130
2008/01/24 04:54:41| Configuring Parent 202.1.1.6/8080/3130
2008/01/24 04:54:41| Configuring Parent 202.1.1.7/8080/3130
2008/01/24 04:54:41| Configuring Parent 202.1.1.8/8080/3130

2008/01/24 04:54:41| Loaded Icons.
2008/01/24 04:54:41| Ready to serve requests.
2008/01/24 04:54:41| disabling (peer disappeared) digest from 203.81.71.88
2008/01/24 04:54:47| Reconfiguring Squid Cache (version 2.6.STABLE6)...
2008/01/24 04:54:47| FD 9 Closing HTTP connection
2008/01/24 04:54:47| FD 12 Closing ICP connection
2008/01/24 04:54:47| Cache dir '/var/spool/squid' size remains
unchanged at 2048 KB

 Here is the problem I suffers

2008/01/24 02:58:15| TCP connection to 202.1.1.4/8080 failed
2008/01/24 02:58:15| TCP connection to 202.1.1.4/8080 failed
2008/01/24 02:58:17| TCP connection to 202.1.1.4/8080 failed
2008/01/24 02:58:18| TCP connection to 202.1.1.4/8080 failed
2008/01/24 02:58:18| TCP connection to 202.1.1.4/8080 failed
2008/01/24 02:58:20| TCP connection to 202.1.1.4/8080 failed
2008/01/24 02:58:21| TCP connection to 202.1.1.4/8080 failed
2008/01/24 02:58:22| TCP connection to 202.1.1.4/8080 failed
2008/01/24 02:58:22| TCP connection to 202.1.1.4/8080 failed
2008/01/24 02:58:26| TCP connection to 202.1.1.4/8080 failed
2008/01/24 01:58:30| Detected DEAD Parent: 202.1.1.4

2008/01/24 02:58:41| TCP connection to 202.1.1.5/8080 failed
2008/01/24 02:58:43| TCP connection to 202.1.1.5/8080 failed
2008/01/24 02:58:43| TCP connection to 202.1.1.5/8080 failed
2008/01/24 02:58:44| TCP connection to 202.1.1.5/8080 failed
2008/01/24 02:58:49| TCP connection to 202.1.1.5/8080 failed
2008/01/24 02:58:54| TCP connection to 202.1.1.5/8080 failed
2008/01/24 02:58:56| TCP connection to 202.1.1.5/8080 failed
2008/01/24 02:59:23| TCP connection to 202.1.1.5/8080 failed
2008/01/24 02:59:32| TCP connection to 202.1.1.5/8080 failed
2008/01/24 02:59:54| parseHttpRequest: Unsupported method '  CONNECT'
2008/01/24 02:59:56| Detected DEAD Parent: 202.1.1.5

2008/01/24 02:59:57| TCP connection to 202.1.1.6/8080 failed
2008/01/24 02:59:59| TCP connection to 202.1.1.6/8080 failed
= End of squid cache.log
=


Re: [squid-users] limiting download size to 1 MB for movie/video files with overall download limit of 15 MB

2008-01-23 Thread Mr Crack
On Jan 23, 2008 5:28 PM, ankush grover [EMAIL PROTECTED] wrote:
 Hi friends,

 I am running a squid proxy server in transparent mode on FC7
 (squid-2.6.STABLE16-2). Currently 15 MB download limit is set in the
 squid but I want to restrict download of certain file types based on
 the size for ex if the size of .mp3/mpeg file is more than 1MB then
 don't allow the file to be downloaded but allow other file types to be
 downloaded with 15MB download limit. I tried the below settings in
 squid.conf file

 acl ankush src 172.16.4.0/24  (network range)
 acl ankush1 src 172.16.4.0/24
 http_access allow ankush

acl  ankush   src  172.16.4.1-100
acl  ankush1 src  172.16.4.101-200


 acl block_stream urlpath_regex
 \.(ra?m|mpeg|mov|m3u|pls|ivf|asf|asx|avi|wax|wma|wmv|wvx|wmp|wmx|m1v|mp2|mp3|mpa|mpe|mpv2|rm)($|\?)
 acl streaming rep_mime_type ^video/x-ms-asf ^video/x-ms-sf ^audio/mpeg
 ^audio/x-mpeg ^audio/x-pn-realaudio ^application/x-mms-framed
 ^application/vnd.ms.wms-hdr.asfv1 OPTIONS FOR X-Forwarded-For


  reply_body_max_size 1500 allow ankush(15 MB Limit for downloading)
  reply_body_max_size 100 allow ankush1 streaming block_stream
 (only allowing 1MB for movie/video files)

 But still I am able to download movies/video files greater than 1 MB.
 Any suggestions/comments are most welcome.



 Thanks  Regards

 Ankush



Re: [squid-users] cache_peer maximum limit quesion

2007-12-31 Thread Mr Crack
On Dec 31, 2007 7:33 AM, Henrik Nordstrom [EMAIL PROTECTED] wrote:
 On sön, 2007-12-30 at 23:41 +0700, Mr Crack wrote:

  So, I put all proxy server list in squid.conf with cache_peer
  But squid only find 3 parents and leave other parent without query.
  I wanna know, how to fix this. I want squid to detect all proxy in list

 How did you add them? I.e. what do your cache_peer line look like?

 is ICP used, or only HTTP? (actually answered by the above..)
I dont know whether I use ICP or not but my configuration is show bewlo

cache_peer x.x.x.1 8080 3130 no-query
cache_peer x.x.x.2 8080 3130 no-query
cache_peer x.x.x.3 8080 3130 no-query
cache_peer x.x.x.4 8080 3130 no-query
cache_peer x.x.x.5 8080 3130 no-query
cache_peer x.x.x.6 8080 3130 no-query
cache_peer x.x.x.7 8080 3130 no-query
cache_peer x.x.x.8 8080 3130 no-query

And how to view my ISP proxy use ICP or nor...


 How do you want Squid to use them? Randomly send requests around to the
 different peers, or more smartly prefer to use the same peers for
 session affinity?

 Regards
 Henrik




[squid-users] cache_peer maximum limit quesion

2007-12-30 Thread Mr Crack
Hi all,,
I am using squid-2.5-STABLE3
My ISP have more than 10 proxy server.
So, I put all proxy server list in squid.conf with cache_peer
But squid only find 3 parents and leave other parent without query.
I wanna know, how to fix this. I want squid to detect all proxy in list


Mr. Crack007


[squid-users] Proxy switch too slow

2007-12-21 Thread Mr Crack
Dear Squid Users,
I have setup squid proxy such as below so that it will switch to
another proxy parent if first proxy fail.
==
peer_connect_timeout=10
cache_peer   cache1   parent  8080  3130  no-query connect-timeout=5
cache_peer   cache2   parent  8080  3130  no-query connect-timeout=5
cache_peer   cache3   parent  8080  3130  no-query connect-timeout=5
cache_peer   cache4   parent  8080  3130  no-query connect-timeout=5
cache_peer   cache5   parent  8080  3130  no-query connect-timeout=5
===
but if first proxy fail, it takes about 3-5 minutes to switch to next
proxy parent 
I want to switch to next proxy as soon as first proxy fail .
Any suggestions,


Re: [squid-users] Redirect to specific parent depends on URL

2007-12-18 Thread Mr Crack
On 12/17/07, Amos Jeffries [EMAIL PROTECTED] wrote:
  Dear All,
  I have two ISPs and I'd to redirect to parent based on URL. See my
  situation below.
 
  /   ISPA (eth0) e.g. 1.1.1.1 (same
  proxies of ISPA) (ADSL 512 Kbps)
  LAN eth3---LinuxBox--|--  ISPA  (eth1) e.g. 1.2.1.1 (same proxies of
  ISPA) (ADSL 256 Kbps)
  \  ISPB (eth2)   e.g. 1.3.1.1
  (ADSL 512 Kbps but not stable)
  My cache configuration is as show below
  cache_peer ISPA_Proxy1   parent  8080 3130  no-query
  cache_peer ISPA_Proxy2   parent  8080 3130  no-query
  cache_peer ISPA_Proxy3   parent  8080 3130  no-query
  cache_peer ISPA_Proxy3   parent  8080 3130  no-query
 
  cache_peer ISPB_Proxy1   parent  8080 3130  no-query
  cache_peer ISPB_Proxy1   parent  8080 3130  no-query
 
  Here is what I want to do.
  1.  I want to balance load evenly to both ADSL connection to ISPA.
  They have same proxy parents.
   If it is not possible to balance evenly, I'd to set 512 Kbps
  connection as default and when it fill load, then redirect to 256 Kbps
  ADSL

 Depends on how your squid was built. You fail to say which version and
 release you are talking about.
 Look up the cache_peer options, several of them are for load balancing.
 You want one of the weighted algorithms, probably carp.

 http:/www.squid-cache.org/Versions/v2/2.6/cache_peer.html

  2.  Some sites are banned by ISPA but ISPB allow. And also some sites
  banned by ISPB is allow by ISPA.
  This is the reason why I use two ISP
  So, I want to redirect banned site of ISPA to ISPB. For e.g.
  Metacafe is banned by ISPB and I want to redirecto   ISPA

 cache_peer_access

 http:/www.squid-cache.org/Versions/v2/2.6/cache_peer_access.html

 I'm assuming you are one of the multitude on squid2.6 since you don't say.

 
  Any suggestion is highly appricated.?
 
  Mr. Crack007
 

 Amos



I am using RedHat Enterprise Linux Version 3 and below is my squid
version and compiled info

root# squid -v
Squid Cache: Version 2.5.STABLE3
configure options:  --host=i386-redhat-linux --build=i386-redhat-linux
--target=i386-redhat-linux-gnu --program-prefix= --prefix=/usr
--exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin
--sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include
--libdir=/usr/lib --libexecdir=/usr/libexec --localstatedir=/var
--sharedstatedir=/usr/com --mandir=/usr/share/man
--infodir=/usr/share/info --exec_prefix=/usr --bindir=/usr/sbin
--libexecdir=/usr/lib/squid --localstatedir=/var
--sysconfdir=/etc/squid --enable-poll --enable-snmp
--enable-removal-policies=heap,lru
--enable-storeio=aufs,coss,diskd,null,ufs --enable-ssl
--with-openssl=/usr/kerberos --enable-delay-pools
--enable-linux-netfilter --with-pthreads
--enable-basic-auth-helpers=LDAP,NCSA,PAM,SMB,SASL,MSNT,winbind
--enable-ntlm-auth-helpers=SMB,winbind,fakeauth
--enable-external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_group,winbind_group
--enable-auth=basic,ntlm --enable-useragent-log --enable-referer-log
==
I will also take a look at CARP

Mr. Crack007


Re: [squid-users] How to redirect http://gmail.com to https://gmail.com

2007-12-18 Thread Mr Crack
On Dec 17, 2007 5:50 PM, Amos Jeffries [EMAIL PROTECTED] wrote:
 Amos Jeffries wrote:
  Dear All,
  I would like to redirect http://gmail.com to https://gmail.com
  because http://gmail.com was banned by our ISP
  But they allow https://gmail.com
  User only know http://gmail.com but when they visit, it was banned.
  Almost the time, I have to go to user and say to use https://gmail.com ..
 
  Any suggestions is appirciated
 
 
  Two approaches:
 
  1) automatic teaching clue-by-4 stick for your users:
 
  acl badGmail dstdomain gmail.com
  acl HTTP proto HTTP
  deny_info http://yourhostname/gmail_is_broken.html badGmail
  http_access deny HTTP badGmail
 
 
  2) leave the peons ignorant and MAKE it work:
 
  acl badGmail dstdomain gmail.com
  acl HTTP proto HTTP
 
  cache_peer gmail.com 443 0 no-query originserver

 Sorry I forgot to add there may be ssl* options needed for SSL traffic
 between squid and the gmail HTTPS server.


  cache_peer_access gmail.com allow badGmail
  cache_peer_access gmail.com deny !badGmail
  never_direct deny HTTP badGmail
 

Thanks you very much Mr. Amos. It really work for me. Here is good
configuration

## GMail Redirection ##
acl bad_gmail dstdomain gmail.com
acl HTTP proto HTTP
cache_peer gmail.com parent  443 0 no-query
cache_peer_access gmail.com allow bad_gmail
cache_peer_access gmail.com deny !bad_gmail
never_direct deny HTTP bad_gmail
##

 Amos



[squid-users] Redirect to specific parent depends on URL

2007-12-16 Thread Mr Crack
Dear All,
I have two ISPs and I'd to redirect to parent based on URL. See my
situation below.

/   ISPA (eth0) e.g. 1.1.1.1 (same
proxies of ISPA) (ADSL 512 Kbps)
LAN eth3---LinuxBox--|--  ISPA  (eth1) e.g. 1.2.1.1 (same proxies of
ISPA) (ADSL 256 Kbps)
\  ISPB (eth2)   e.g. 1.3.1.1
(ADSL 512 Kbps but not stable)
My cache configuration is as show below
cache_peer ISPA_Proxy1   parent  8080 3130  no-query
cache_peer ISPA_Proxy2   parent  8080 3130  no-query
cache_peer ISPA_Proxy3   parent  8080 3130  no-query
cache_peer ISPA_Proxy3   parent  8080 3130  no-query

cache_peer ISPB_Proxy1   parent  8080 3130  no-query
cache_peer ISPB_Proxy1   parent  8080 3130  no-query

Here is what I want to do.
1.  I want to balance load evenly to both ADSL connection to ISPA.
They have same proxy parents.
 If it is not possible to balance evenly, I'd to set 512 Kbps
connection as default and when it fill load, then redirect to 256 Kbps
ADSL
2.  Some sites are banned by ISPA but ISPB allow. And also some sites
banned by ISPB is allow by ISPA.
This is the reason why I use two ISP
So, I want to redirect banned site of ISPA to ISPB. For e.g.
Metacafe is banned by ISPB and I want to redirecto   ISPA

Any suggestion is highly appricated.?

Mr. Crack007


[squid-users] How to redirect http://gmail.com to https://gmail.com

2007-12-15 Thread Mr Crack
Dear All,
I would like to redirect http://gmail.com to https://gmail.com
because http://gmail.com was banned by our ISP
But they allow https://gmail.com
User only know http://gmail.com but when they visit, it was banned.
Almost the time, I have to go to user and say to use https://gmail.com ..

Any suggestions is appirciated