Re: [squid-users] Web Usage Statistics by Client IP
Here is also something about SARG. http://techspalace.blogspot.com/2007/12/sarg-squid-analysis-report-generator.html On Thu, Jun 12, 2008 at 10:02 AM, Indunil Jayasooriya <[EMAIL PROTECTED]> wrote: > Hi Richard, > > Pls try sarg. > > here is HOW to . > > http://www.squid-cache.org/mail-archive/squid-users/200805/0172.html > > > On Wed, Jun 11, 2008 at 6:38 PM, Richard Chapman > <[EMAIL PROTECTED]> wrote: >> Hi >> >> I am new to Squid - but found it very easy to get going. I am running Squid >> 2.6 on Centos 5.1 Linux. and it workd brilliantly. >> >> I was hoping to be able to track down the Bandwidth Usage Stats for >> individual client machines - to try to find out where all our bandwidth is >> going. I have found the Cache Manager Statistics Reports - but haven't found >> one with this info broken down by Client. >> Is it there somewhere in one of the report - or do I need some additional >> reporting tool? >> >> Thanks for the help. >> >> Richard. >> >> >> >> > > > > -- > Thank you > Indunil Jayasooriya >
Re: [squid-users] Need help
Hi, you can use mrtg to monitor snmp from squid. Heres a detail to it: http://techspalace.blogspot.com/2007/12/mrtg-for-squid.html On 3/5/08, Ben Hollingsworth <[EMAIL PROTECTED]> wrote: > piyush joshi wrote: > > Dear All, > > Can anyone suggest me any free software to monitor squid > > which will show all information like CPU usage, Memory Usage, No of > > hite, IP address where from request is coming top users, Top sites, > > Top Bandwith . Please reply to me i will be grateful to you .. > > > > We use a combination of calamaris and cacti/SNMP to get all those stats. >
Re: [squid-users] https: filtering
Unfortunately there are many proxy from where users can still browse. Blocking all is impossible as when you are blocking one two other emerges. Fortunately there are sites like opendns.com from where you can block porn sites or proxy sites like the-cloak.com with a single click. Here is a small tutorial on it http://techspalace.blogspot.com/2008/01/blocing-pornography.html On Jan 27, 2008 2:39 AM, Marcus Kool <[EMAIL PROTECTED]> wrote: > Bob, > > blocking proxies is challenging... > the-cloak.com can easily be blocked by the free ufdbGuard (it > is a Squid redirector) because it has an invalid SSL certificate > and ufdbGuard has an option to block that. > But there are many more HTTP-based proxy sites and to block those > you need a URL database. > You can try a free or a commercial URL database (you can use either > one with ufdbGuard). > > I represent a commercial URL database vendor (http://www.urlfilterdb.com). > For the sake of comparison with free URL databases: > URLfilterDB has today 29230 domains, 31796 urls and 18 regular expressions > for the URL category "proxies". > > Marcus > > > > Bob Morrison wrote: > > Does anyone have any suggestions on how I can use squid to prevent > > our students from by passing content filtering by using > > an anonymous https: proxy server such as "the-cloak.com"? > > > > I've tried a few techniques things with IPTables but they are becoming hard > > to manage. > > > > Any ideas are welcome > > > > > > Thanks in advance for any suggestions > > > > > > Bob Morrison, CNE, MCSE > > > > > > >
Re: [squid-users] small req for gru,s
Hi, I would recommend you to put some monitoring system on your squid box to compare the true difference between the servers. Mrtg for squid http://techspalace.blogspot.com/2007/12/mrtg-for-squid.html SARG http://techspalace.blogspot.com/2007/12/sarg-squid-analysis-report-generator.html On 1/2/08, squid learner <[EMAIL PROTECTED]> wrote: > Thanks dear > please help if U can > just i am in problem of speed > > many times i check direct proxy of isp work faster > then via squid cache > > here my squid.conf > #your proxy from isp > cache_peer proxy-dsl.nesma.net.sa parent 8080 3130 > weight=2 no-query round-robin > cache_peer 212.162.158.52 parent 8080 0 weight=1 > no-query round-robin > acl all src 0.0.0.0/0.0.0.0 > never_direct allow all > #prefer_direct allow > > cache_mem 32 MB > cache_dir diskd /usr/local/squid/var/cache 3 16 > 256 Q1=72 Q2=64 > cache_store_log none > acl manager proto cache_object > acl localhost src 127.0.0.1/255.255.255.255 > #===adition for ip statics > hierarchy_stoplist cgi-bin ? > acl QUERY urlpath_regex cgi-bin \? > no_cache deny QUERY > #forwarded_for of > logfile_rotate 10 > #=== up to here > #here your network > acl lan src 192.168.2.0/24 > acl mylan src 0.0.0.0/24 > acl SSL_ports port 443 563 > acl Safe_ports port 80 21 443 563 70 210 1025-65535 > acl Safe_ports port 280 > acl Safe_ports port 488 > acl Safe_ports port 591 > acl Safe_ports port 777 > acl CONNECT method CONNECT > acl GET method GET > acl POST method POST > # If nothing else matches, use this rule > > refresh_pattern . 480 50% > 9 > > negative_ttl 0 minutes > positive_dns_ttl 24 hours > negative_dns_ttl 1 minutes > range_offset_limit 0 KB > connect_timeout 120 minutes > peer_connect_timeout 30 seconds > read_timeout 15 minutes > request_timeout 60 seconds > client_lifetime 1 day > pconn_timeout 120 seconds > > > shutdown_lifetime 30 seconds > http_access allow manager localhost > http_access deny manager > http_access deny !Safe_ports > http_access deny CONNECT !SSL_ports > http_access allow lan > http_access allow mylan > http_access deny all > icp_access allow all > miss_access allow all > cache_mgr [EMAIL PROTECTED] > visible_hostname fastcache > unique_hostname fastcache > cache_effective_user squid > cache_effective_group squid > #httpd_accel_host vertual > #httpd_accel_port 80 > #httpd_accel_with_proxy on > #httpd_accel_uses_host_header on > http_port 8080 > http_port 8586 > http_port 3128 > > > > --- Tek Bahadur Limbu <[EMAIL PROTECTED]> wrote: > > > Hi learner, > > > > squid learner wrote: > > > sir > > > i am using squid in my lan > > 192.168.1.0/255.255.255.0 > > > with onle one lan card > > > the squid server ip is 192.168.1.200:8080 > > > so all clients proxy setting is 192.168.1.200:8080 > > > did changing the cachi box with two lan cards > > make > > > deffrence i mean speed difference > > > > I am not sure if I understand your question! > > > > I don't think that you will see any speed difference > > just by adding an > > extra LAN card. > > There is no relation between the number of network > > cards and Squid. > > > > Of course, by adding the extra network card, you can > > do many useful > > things like making this Squid cache box the gateway > > for your network. > > > > What this means is that you can now locally > > intercept your clients web > > requests. No manual proxy configuration in your > > client's browsers or > > router redirection needed. > > > > Then you can also make this Squid box to act as a > > firewall for your > > internal network. > > > > Finally, but not the last, you can make this Squid > > box a bandwidth > > shaper too. > > > > Thanking you... > > > > > > > > > thank you > > > > > > > > > > > > > > > Be a better friend, newshound, and > > > know-it-all with Yahoo! Mobile. Try it now. > > > http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ > > > > > > > > > > > > > > > > > > > > -- > > > > With best regards and good wishes, > > > > Yours sincerely, > > > > Tek Bahadur Limbu > > > > System Administrator > > > > (TAG/TDG Group) > > Jwl Systems Department > > > > Worldlink Communications Pvt. Ltd. > > > > Jawalakhel, Nepal > > > > http://www.wlink.com.np > > > > http://teklimbu.wordpress.com > > > > > > > > Never miss a thing. Make Yahoo your home page. > http://www.yahoo.com/r/hs >
[squid-users] load ad from cache
Hi, Hi, we know that there are google adsense and many other advertising sites. If the url contains (ad|ads|pagead2|yieldmanager) I want those pages to load from the cache and always. so I tried something like this. refresh_pattern -i (ad|ads|pagead2|yieldmanager) 43200 90% 129600 override-expire but it didn't worked. Can you please correct me. Regards, Rishav
[squid-users] process load
Hello, I am new to squid. Under the following scenario please throw some lights. I have a small ISP. I have around 50 clients that are basically offices. Each clients shares internet in around 10 computers. Some offices doesn't requires windows update while some offices doesn't requires anti-virus updates. Similarly some offices don't want their staff to browse sites like youtube.com. Instead of telling them how to turn off windows update or Anitvirus update I want to control that in server level. I thought of making different ACL in my squid server. Like deny if clients=xyz and site= windows update deny if clients=abc and site= youtube.com and so on But my senior told me that making many ACL will hampers squid process. So I want to know how many ACL is suitable in a single squid server. How many ACL is safe enough so as not to hamper squid's process. Please help. Thanks in advance Regards Rishav Upadhaya
