[squid-users] Using squidclient

2010-05-21 Thread Ryan McCain
I'm trying to use squidclient to get some information on the performance of one 
of our squid boxes.  The version is 2.7x.

See below..

--

dss-cs99lv02-a:/usr/local/squid/bin # nmap localhost

Starting Nmap 4.00 ( http://www.insecure.org/nmap/ ) at 2010-05-21 14:16 CDT
Interesting ports on localhost (127.0.0.1):
(The 1665 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
22/tcp   open  ssh
25/tcp   open  smtp
111/tcp  open  rpcbind
427/tcp  open  svrloc
2033/tcp open  glogger
2034/tcp open  scoremgr
8080/tcp open  http-proxy

Nmap finished: 1 IP address (1 host up) scanned in 0.146 seconds
dss-cs99lv02-a:/usr/local/squid/bin # ./squidclient -p8080 mgr:5_min
HTTP/1.0 404 Not Found
Server: squid/2.7.STABLE6
Date: Fri, 21 May 2010 19:17:01 GMT
Content-Type: text/html
Content-Length: 1229
X-Squid-Error: ERR_INVALID_URL 0
X-Cache: MISS from dss-cs99lv02-a
Via: 1.0 dss-cs99lv02-a:8080 (squid/2.7.STABLE6)
Connection: close

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN 
http://www.w3.org/TR/html4/loose.dtd;
HTMLHEADMETA HTTP-EQUIV=Content-Type CONTENT=text/html; 
charset=iso-8859-1
TITLEERROR: The requested URL could not be retrieved/TITLE
STYLE 
type=text/css!--BODY{background-color:#ff;font-family:verdana,sans-serif}PRE{font-family:sans-serif}--/STYLE
/HEADBODY
H1ERROR/H1
H2The requested URL could not be retrieved/H2
HR noshade size=1px
P
While trying to retrieve the URL:
A 
HREF=cache_object://localhost.dss.state.la.us/5_mincache_object://localhost.dss.state.la.us/5_min/A
P
The following error was encountered:
UL
LI
STRONG
Invalid URL
/STRONG
/UL

P
Some aspect of the requested URL is incorrect.  Possible problems:
UL
LIMissing or incorrect access protocol (should be `http://'' or similar)
LIMissing hostname
LIIllegal double-escape in the URL-Path
LIIllegal character in hostname; underscores are not allowed
/UL
PYour cache administrator is A HREF=mailto:webmaster;webmaster/A.

BR clear=all
HR noshade size=1px
ADDRESS
Generated Fri, 21 May 2010 19:17:01 GMT by dss-cs99lv02-a (squid/2.7.STABLE6)
/ADDRESS
/BODY/HTML
dss-cs99lv02-a:/usr/local/squid/bin #



as you can see, Squid is running on port 8080 of the local box, however, 
when I run squidclient it appears to display the HTML rather than displaying 
the metric I am looking for.  Any ideas?



RE: [squid-users] Testing website I have set not to cache.

2010-05-20 Thread Ryan McCain
2010/5/20 Henrik Nordström hen...@henriknordstrom.net:
 ons 2010-05-19 klockan 14:03 -0500 skrev Ryan McCain:
 I have this set in my Squid 2.7 conf file..


 #5/19/10 - Added to bypass Webex caching
 acl webex dstdomain .webex.com

 #5/19/20 - Added to not cache webex
 cache deny webex

 ...How can I verify Squid isn't caching anything going to Webex.com?

 Monitor cache.log and look for requests with TCP_HIT in their status
 code.


Should that be access.log? :)


So, if I see this then these requests ARE being cached?

1274366775.203 54 10.120.100.235 TCP_MISS/200 39 CONNECT 
dssla.webex.com:443 - DIRECT/64.68.104.194 -
1274366775.708554 10.120.100.235 TCP_MISS/200 6147 CONNECT 
dssla.webex.com:443 - DIRECT/64.68.104.194 -
1274366775.898164 10.120.100.235 TCP_MISS/200 3419 CONNECT 
dssla.webex.com:443 - DIRECT/64.68.104.194 -
1274366779.316   3394 10.120.100.235 TCP_MISS/200 7296 CONNECT 
dssla.webex.com:443 - DIRECT/64.68.104.194 -
1274366779.936170 10.120.100.235 TCP_MISS/200 2607 CONNECT 
dssla.webex.com:443 - DIRECT/64.68.104.194 -
1274366780.042703 10.120.100.235 TCP_MISS/200 30638 CONNECT 
dssla.webex.com:443 - DIRECT/64.68.104.194 -
1274366780.195425 10.120.100.235 TCP_MISS/200 11939 CONNECT 
dssla.webex.com:443 - DIRECT/64.68.104.194 -
1274366780.322214 10.120.100.235 TCP_MISS/200 3399 CONNECT 
dssla.webex.com:443 - DIRECT/64.68.104.194 -
1274366782.305  62237 10.120.100.235 TCP_MISS/200 3275 CONNECT 
dssla.webex.com:443 - DIRECT/64.68.104.194 -


..If so, what is wrong w/ the config that I posted?

-- 
Tech support agency in China
http://duxieweb.com/


[squid-users] Testing website I have set not to cache.

2010-05-19 Thread Ryan McCain
I have this set in my Squid 2.7 conf file.. 


#5/19/10 - Added to bypass Webex caching
acl webex dstdomain .webex.com

#5/19/20 - Added to not cache webex
cache deny webex

...How can I verify Squid isn't caching anything going to Webex.com?

Thanks..


RE: [squid-users] Tiered Squid proxy issue (Microsoft JET Database Engine error '80040e57'

2010-02-18 Thread Ryan McCain
Thanks for the response.  According to Websense, they only suppor 2.5x. :(

Also, I will contact the site owner now and ask about this issue.

Here are the headers using the Firefox Live Headers plugin. I'm not sure what 
it means, but I have the POST setting set to ACCURATE.

This is when it doesn't work (going through a POP proxy v2.5 then up through 
our top level proxy v2.7):
---

http://site463.mysite4now.net/mrengmal/gm/forum/login.asp

POST http://site463.mysite4now.net/mrengmal/gm/forum/login.asp HTTP/1.1
Host: site463.mysite4now.net
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.11) 
Gecko/2009060200 SUSE/3.0.11-0.1.1 Firefox/3.0.11
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Proxy-Connection: keep-alive
Referer: 
http://site463.mysite4now.net/mrengmal/gm/forum/login.asp?target=default.asp
Cookie: Snitz00User=; ASPSESSIONIDQCASABDC=KHNDCKLCEEENIEDJCADGOLAD; 
ASPSESSIONIDQCBTBBCC=FDFFFLLCCDKFBDLJOOPELEMD; 
ASPSESSIONIDSABQCACC=GKKNJOLCAMCFDIELLEDGIHLB; 
ASPSESSIONIDQABSCCAC=PMAPIPLCFECHCPDDNEBCPDAH; 
ASPSESSIONIDSCBSCDBC=JKIDMAMCKODFGGNAMIOKAHDK
Content-Type: application/x-www-form-urlencoded
Content-Length: 101
target=default.aspName=studentsubmit1.x=33submit1.y=5submit1=LoginPassword=sswSavePassWord=true
HTTP/1.0 500 Internal Server Error
Date: Thu, 18 Feb 2010 18:08:15 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 5339
Content-Type: text/html
Set-Cookie: 
Snitz00User=Pword=80fef94b3945d30bd0adf30fa9915276881765b719c14f7ffa29f1128f11c1f9Name=student;
 expires=Sat, 20-Mar-2010 20:08:14 GMT; path=/
Cache-Control: private
X-Cache: MISS from dss-cs99lv03-a, MISS from proxy-mon.dss.la.gov
Via: 1.1 dss-cs99lv03-a:8080 (squid/2.7.STABLE6)
X-Cache-Lookup: MISS from proxy-mon.dss.la.gov:8080
Proxy-Connection: close
--

-

This is when it does work going directly through a top level proxy (v2.7)
---
http://site463.mysite4now.net/mrengmal/gm/forum/login.asp

POST http://site463.mysite4now.net/mrengmal/gm/forum/login.asp HTTP/1.1
Host: site463.mysite4now.net
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.11) 
Gecko/2009060200 SUSE/3.0.11-0.1.1 Firefox/3.0.11
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Proxy-Connection: keep-alive
Referer:
http://site463.mysite4now.net/mrengmal/gm/forum/login.asp?target=default.asp
Cookie: Snitz00User=; ASPSESSIONIDQCASABDC=KHNDCKLCEEENIEDJCADGOLAD;
ASPSESSIONIDQCBTBBCC=FDFFFLLCCDKFBDLJOOPELEMD;
ASPSESSIONIDSABQCACC=GKKNJOLCAMCFDIELLEDGIHLB;
ASPSESSIONIDQABSCCAC=PMAPIPLCFECHCPDDNEBCPDAH;
ASPSESSIONIDSCBSCDBC=JKIDMAMCKODFGGNAMIOKAHDK
Content-Type: application/x-www-form-urlencoded
Content-Length: 101
target=default.aspName=studentsubmit1.x=20submit1.y=8submit1=LoginPassword=sswSavePassWord=true
HTTP/1.0 200 OK
Date: Thu, 18 Feb 2010 18:10:48 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 6646
Content-Type: text/html
Set-Cookie:
Snitz00User=Pword=80fef94b3945d30bd0adf30fa9915276881765b719c14f7ffa29f1128f11c1f9Name=student;
expires=Sat, 20-Mar-2010 20:10:46 GMT; path=/
Cache-Control: private
X-Cache: MISS from dss-cs99lv02-a
Via: 1.1 dss-cs99lv02-a:8080 (squid/2.7.STABLE6)
Connection: keep-alive
Proxy-Connection: keep-alive
--
http://site463.mysite4now.net/mrengmal/gm/forum/default.asp

GET http://site463.mysite4now.net/mrengmal/gm/forum/default.asp HTTP/1.1
Host: site463.mysite4now.net
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.11) 
Gecko/2009060200 SUSE/3.0.11-0.1.1 Firefox/3.0.11
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Proxy-Connection: keep-alive
Cookie:
Snitz00User=Pword=80fef94b3945d30bd0adf30fa9915276881765b719c14f7ffa29f1128f11c1f9Name=student;
ASPSESSIONIDQCASABDC=KHNDCKLCEEENIEDJCADGOLAD;
ASPSESSIONIDQCBTBBCC=FDFFFLLCCDKFBDLJOOPELEMD;
ASPSESSIONIDSABQCACC=GKKNJOLCAMCFDIELLEDGIHLB;
ASPSESSIONIDQABSCCAC=PMAPIPLCFECHCPDDNEBCPDAH;
ASPSESSIONIDSCBSCDBC=JKIDMAMCKODFGGNAMIOKAHDK

HTTP/1.0 200 OK
Date: Thu, 18 Feb 2010 18:10:50 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 17878
Content-Type: text/html
Cache-Control: private
X-Cache: MISS from dss-cs99lv02-a
Via: 1.1 dss-cs99lv02-a:8080 (squid/2.7.STABLE6)
Connection: keep-alive
Proxy-Connection: keep-alive
--


Does anything stick out?


Ryan McCain
Northrop Grumman Corporation
Email: ryan.mcc...@la.gov
Phone: 225.505.3832

Registered Linux User #364609

-Original Message-
From

RE: [squid-users] Tiered Squid proxy issue (Microsoft JET Database Engine error '80040e57'

2010-02-18 Thread Ryan McCain
BTW, Websense does support Squid 2.6.  Would upgrading from 2.5 to 2.6 possibly 
help? 


Ryan McCain
Northrop Grumman Corporation
Email: ryan.mcc...@la.gov
Phone: 225.505.3832

Registered Linux User #364609

-Original Message-
From: Henrik Nordström [mailto:hen...@henriknordstrom.net] 
Sent: Thursday, February 18, 2010 4:37 AM
To: Ryan McCain
Cc: 'squid-users@squid-cache.org'
Subject: Re: [squid-users] Tiered Squid proxy issue (Microsoft JET Database 
Engine error '80040e57'

tor 2010-02-11 klockan 11:22 -0600 skrev Ryan McCain:

 We are using Squid 2.5 on SLES for compatibility reasons with a redirector we 
 use at the POP level , Websense.  Websebse doesn't support 2.7 or 3.x.

Any external helpers (url rewriters, auth etc) which works with 2.5 also works 
in later releases.

 Anyways, if you go to http://www.garymallon.com -- COURSES -- DISCUSSION 
 BOARD then login with:
 User: student
 Pw: ssw
 
 I get the following error:
 
 Microsoft JET Database Engine error '80040e57' 
 
 The field is too small to accept the amount of data you attempted to add. Try 
 inserting or pasting less data. 
 
 /mrengmal/gm/forum/inc_func_common.asp, line 585

This is difficult to answer without knowing the web server application.

Have you tried talking to the maintainers of that forum?

A guess is that they are storing the X-Forwarded-For header in their database 
for tracking purposes and have assigned to small field with for storing that..

Regards
Henrik



RE: [squid-users] Tiered Squid proxy issue (Microsoft JET Database Engine error '80040e57'

2010-02-18 Thread Ryan McCain
I tried upgrading to 2.6 on one of the nodes of a POP cluster and it didn't 
work.  To further troubleshoot this, I'm going to attempt to upgrade to 2.7 on 
one of the POP cluster nodes. 


Ryan McCain
Northrop Grumman Corporation
Email: ryan.mcc...@la.gov
Phone: 225.505.3832

Registered Linux User #364609

-Original Message-
From: Ryan McCain [mailto:ryan.mcc...@la.gov] 
Sent: Thursday, February 18, 2010 12:21 PM
To: 'Henrik Nordström'
Cc: 'squid-users@squid-cache.org'
Subject: RE: [squid-users] Tiered Squid proxy issue (Microsoft JET Database 
Engine error '80040e57'

BTW, Websense does support Squid 2.6.  Would upgrading from 2.5 to 2.6 possibly 
help? 


Ryan McCain
Northrop Grumman Corporation
Email: ryan.mcc...@la.gov
Phone: 225.505.3832

Registered Linux User #364609

-Original Message-
From: Henrik Nordström [mailto:hen...@henriknordstrom.net]
Sent: Thursday, February 18, 2010 4:37 AM
To: Ryan McCain
Cc: 'squid-users@squid-cache.org'
Subject: Re: [squid-users] Tiered Squid proxy issue (Microsoft JET Database 
Engine error '80040e57'

tor 2010-02-11 klockan 11:22 -0600 skrev Ryan McCain:

 We are using Squid 2.5 on SLES for compatibility reasons with a redirector we 
 use at the POP level , Websense.  Websebse doesn't support 2.7 or 3.x.

Any external helpers (url rewriters, auth etc) which works with 2.5 also works 
in later releases.

 Anyways, if you go to http://www.garymallon.com -- COURSES -- DISCUSSION 
 BOARD then login with:
 User: student
 Pw: ssw
 
 I get the following error:
 
 Microsoft JET Database Engine error '80040e57' 
 
 The field is too small to accept the amount of data you attempted to add. Try 
 inserting or pasting less data. 
 
 /mrengmal/gm/forum/inc_func_common.asp, line 585

This is difficult to answer without knowing the web server application.

Have you tried talking to the maintainers of that forum?

A guess is that they are storing the X-Forwarded-For header in their database 
for tracking purposes and have assigned to small field with for storing that..

Regards
Henrik



RE: [squid-users] Tiered Squid proxy issue (Microsoft JET Database Engine error '80040e57'

2010-02-18 Thread Ryan McCain
According to this: 
http://www.squid-cache.org/Versions/v2/2.6/cfgman/header_access.html

2.6 uses header_access

Hoping it was the same for 2.5x, I entered this into squid.conf

header_access X-Forwarded-For deny all

...and it worked like a charm.  How did you know it was the X-Forwarded-For 
header?



-Original Message-
From: Henrik Nordström [mailto:hen...@henriknordstrom.net] 
Sent: Thursday, February 18, 2010 12:35 PM
To: Ryan McCain
Cc: 'squid-users@squid-cache.org'
Subject: RE: [squid-users] Tiered Squid proxy issue (Microsoft JET Database 
Engine error '80040e57'

tor 2010-02-18 klockan 12:21 -0600 skrev Ryan McCain:
 BTW, Websense does support Squid 2.6.  Would upgrading from 2.5 to 2.6 
 possibly help?

Most likely not as the error seems to be on the web server and not Squid.

What you can try is to filter out the X-Forwarded-For header to see if that 
makes any difference.

request_header_access X-Forwarded-For deny all

[not sure the above syntax works in 2.5.. may be it's header_access, or mabe 
even older directives, memory of 2.5 and even 2.6 have faded]

Regards
Henrik



[squid-users] Tiered Squid proxy issue (Microsoft JET Database Engine error '80040e57'

2010-02-11 Thread Ryan McCain
This is a strange one.  We have a 2 tiered Squid environment here.   We have 
Squid at the POP region level each of those 5 POPs go to 2 top level Squid 
servers which go to the internet.

We are using Squid 2.5 on SLES for compatibility reasons with a redirector we 
use at the POP level , Websense.  Websebse doesn't support 2.7 or 3.x.

Anyways, if you go to http://www.garymallon.com -- COURSES -- DISCUSSION 
BOARD then login with:
User: student
Pw: ssw

I get the following error:

Microsoft JET Database Engine error '80040e57' 

The field is too small to accept the amount of data you attempted to add. Try 
inserting or pasting less data. 

/mrengmal/gm/forum/inc_func_common.asp, line 585 

---

When I turn off Websense at the POP level, I get the same error so Websense 
isn't the issue.  I have worked with Websene technical support to confirm this. 
 If I go directly through one of our 2 top level Squid servers I am able to 
access the forums fine.  If I try it from home, I am able to access the forums 
fine.  

It appears to be an issue with our tiered setup.  Any ideas?






RE: [squid-users] WARNING: got unused STORE_META type 10

2010-02-08 Thread Ryan McCain
 
-Original Message-
From: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Sent: Friday, February 05, 2010 4:33 PM
To: Ryan McCain
Subject: Re: [squid-users] WARNING: got unused STORE_META type 10

Ryan McCain wrote:
 Squid-2.7 uses more advanced storage formats for objects.
 Squid-2.5 is unable to cope with those and is probably discarding things.
 
 Please, why did you down grade all the way to 2.5?
 
 Amos,
 
 We use a Websense plugin that only supports 2.5 and 2.6.  Why is it trying to 
 use this storage format since I removed 2.7 before installing 2.5?  Is there 
 something I can do to get rid of these errors?
 
 Thanks..
 

You need to erase the cache directory content and rebuild it with squid -z 
again.

Amos
--
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE23
   Current Beta Squid 3.1.0.16

===

Thank you. That did the trick.


RE: [squid-users] WARNING: got unused STORE_META type 10

2010-02-05 Thread Ryan McCain
 


 Squid-2.7 uses more advanced storage formats for objects.
 Squid-2.5 is unable to cope with those and is probably discarding things.

 Please, why did you down grade all the way to 2.5?

Amos,

We use a Websense plugin that only supports 2.5 and 2.6.  Why is it trying to 
use this storage format since I removed 2.7 before installing 2.5?  Is there 
something I can do to get rid of these errors?

Thanks..



[squid-users] WARNING: got unused STORE_META type 10

2010-02-04 Thread Ryan McCain
 
After downgrading from Squid 2.7 to Squid 2.5, I get this error multiple times 
per second in /var/log/messages.  What does it mean?  Can I supress it?

Feb  4 16:38:10 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:10 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:10 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:11 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:12 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:12 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:12 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:12 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:12 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:12 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:12 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:13 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:13 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10
Feb  4 16:38:13 dss-so92la03 squid[28227]: WARNING: got unused STORE_META type 
10


[squid-users] Consider increasing the number of url_rewriter processes / All url_rewriter processes are busy

2009-12-28 Thread Ryan McCain
Hello,

A squid box we recently upgraded to use Websense 7.1 has intermitent issues.  
See the log below..
SNIP

Dec 28 10:03:00 dss-so92la05 squid[26940]: Starting Squid Cache version 
2.7.STABLE6 for i686-pc-linux-gnu...
Dec 28 10:03:00 dss-so92la05 squid[26940]: Process ID 26940
Dec 28 10:03:00 dss-so92la05 squid[26940]: With 4096 file descriptors available
Dec 28 10:03:00 dss-so92la05 squid[26940]: Using epoll for the IO loop
Dec 28 10:03:00 dss-so92la05 squid[26940]: DNS Socket created at 0.0.0.0, port 
33381, FD 6
Dec 28 10:03:00 dss-so92la05 squid[26940]: Adding nameserver 10.120.11.85 from 
/etc/resolv.conf
Dec 28 10:03:00 dss-so92la05 squid[26940]: Adding nameserver 10.120.11.107 from 
/etc/resolv.conf
Dec 28 10:03:00 dss-so92la05 squid[26940]: Adding domain dss.la.gov from 
/etc/resolv.conf
Dec 28 10:03:00 dss-so92la05 squid[26940]: helperOpenServers: Starting 30 
'WsRedtor' processes
Dec 28 10:03:00 dss-so92la05 squid[26940]: logfileOpen: opening log 
/var/log/squid/access.log
Dec 28 10:03:01 dss-so92la05 squid[26940]: Unlinkd pipe opened on FD 41
Dec 28 10:03:01 dss-so92la05 squid[26940]: Swap maxSize 16384000 + 262144 KB, 
estimated 0 objects
Dec 28 10:03:01 dss-so92la05 squid[26940]: Target number of buckets: 64023
Dec 28 10:03:01 dss-so92la05 squid[26940]: Using 65536 Store buckets
Dec 28 10:03:01 dss-so92la05 squid[26940]: Max Mem  size: 262144 KB
Dec 28 10:03:01 dss-so92la05 squid[26940]: Max Swap size: 16384000 KB
Dec 28 10:03:01 dss-so92la05 squid[26940]: Store logging disabled
Dec 28 10:03:01 dss-so92la05 squid[26940]: Rebuilding storage in 
/apps/squid/cache1 (CLEAN)
Dec 28 10:03:01 dss-so92la05 squid[26940]: Rebuilding storage in 
/apps/squid/cache2 (CLEAN)
Dec 28 10:03:01 dss-so92la05 squid[26940]: Rebuilding storage in 
/apps/squid/cache3 (CLEAN)
Dec 28 10:03:01 dss-so92la05 squid[26940]: Rebuilding storage in 
/apps/squid/cache4 (CLEAN)
Dec 28 10:03:01 dss-so92la05 squid[26940]: Using Least Load store dir selection
Dec 28 10:03:01 dss-so92la05 squid[26940]: Current Directory is /
Dec 28 10:03:01 dss-so92la05 squid[26940]: Loaded Icons.
Dec 28 10:03:01 dss-so92la05 squid[26940]: Accepting proxy HTTP connections at 
10.120.100.205, port 8080, FD 48.
Dec 28 10:03:01 dss-so92la05 squid[26940]: Accepting ICP messages at 0.0.0.0, 
port 3130, FD 49.
Dec 28 10:03:01 dss-so92la05 squid[26940]: WCCP Disabled.
Dec 28 10:03:01 dss-so92la05 squid[26940]: Configuring 10.120.9.80 Parent 
10.120.9.80/8080/3130
Dec 28 10:03:01 dss-so92la05 squid[26940]: Configuring 10.120.9.100 Parent 
10.120.9.100/8080/3130
Dec 28 10:03:01 dss-so92la05 squid[26940]: Ready to serve requests.
Dec 28 10:03:01 dss-so92la05 squid[26940]: Store rebuilding is 27.8% complete
Dec 28 10:03:01 dss-so92la05 squid[26940]: Done reading /apps/squid/cache4 
swaplog (13075 entries)
Dec 28 10:03:01 dss-so92la05 squid[26940]: Done reading /apps/squid/cache1 
swaplog (14731 entries)
Dec 28 10:03:01 dss-so92la05 squid[26940]: Done reading /apps/squid/cache3 
swaplog (14779 entries)
Dec 28 10:03:01 dss-so92la05 squid[26940]: Done reading /apps/squid/cache2 
swaplog (15337 entries)
Dec 28 10:03:01 dss-so92la05 squid[26940]: Finished rebuilding storage from 
disk.
Dec 28 10:03:01 dss-so92la05 squid[26940]: 57922 Entries scanned
Dec 28 10:03:01 dss-so92la05 squid[26940]: 0 Invalid entries.
Dec 28 10:03:01 dss-so92la05 squid[26940]: 0 With invalid flags.
Dec 28 10:03:01 dss-so92la05 squid[26940]: 57922 Objects loaded.
Dec 28 10:03:01 dss-so92la05 squid[26940]: 0 Objects expired.
Dec 28 10:03:01 dss-so92la05 squid[26940]: 0 Objects cancelled.
Dec 28 10:03:01 dss-so92la05 squid[26940]: 0 Duplicate URLs purged.
Dec 28 10:03:01 dss-so92la05 squid[26940]: 0 Swapfile clashes avoided.
Dec 28 10:03:01 dss-so92la05 squid[26940]:   Took 0.5 seconds (121961.6 
objects/sec).
Dec 28 10:03:01 dss-so92la05 squid[26940]: Beginning Validation Procedure
Dec 28 10:03:01 dss-so92la05 squid[26940]:   Completed Validation Procedure
Dec 28 10:03:01 dss-so92la05 squid[26940]:   Validated 57922 Entries
Dec 28 10:03:01 dss-so92la05 squid[26940]:   store_swap_size = 929412k
Dec 28 10:03:01 dss-so92la05 squid[26940]: WARNING: All url_rewriter processes 
are busy.
Dec 28 10:03:01 dss-so92la05 squid[26940]: WARNING: up to 30 pending requests 
queued
Dec 28 10:03:01 dss-so92la05 squid[26940]: storeLateRelease: released 0 objects
Dec 28 10:03:31 dss-so92la05 squid[26940]: WARNING: All url_rewriter processes 
are busy.
Dec 28 10:03:31 dss-so92la05 squid[26940]: WARNING: up to 154 pending requests 
queued
Dec 28 10:03:31 dss-so92la05 squid[26940]: storeDirWriteCleanLogs: Starting...
Dec 28 10:03:31 dss-so92la05 squid[26940]: WARNING: Closing open FD   48
Dec 28 10:03:31 dss-so92la05 squid[26940]: commSetEvents: 
epoll_ctl(EPOLL_CTL_DEL): failed on fd=48: (1) Operation not permitted
Dec 28 10:03:31 dss-so92la05 squid[26940]: WARNING: Closing open FD   49
Dec 28 10:03:31 dss-so92la05 squid[26940]: commSetEvents: 

[squid-users] client: ERROR: Cannot connect to localhost:3128: Connection refused

2009-07-07 Thread Ryan McCain
I'm trying to issue this command:

squidclient -m PURGE http://www.yahoo.com


and get the following error:
client: ERROR: Cannot connect to localhost:3128: Connection refused 

I'm using squid-2.7.STABLE6-1 on SLES 10.  I'm not even sure what is supposed 
to be running on port 3128.  I've tried running this w/ the software firewall 
turned off and always get the error.

Any ideas?





Re: [squid-users] client: ERROR: Cannot connect to localhost:3128:Connection refused

2009-07-07 Thread Ryan McCain
A.  Thanks!

 On Tue, Jul 7, 2009 at  4:07 PM, in message 4a53b8f8.4050...@gci.net, 
 Chris
Robertson crobert...@gci.net wrote: 
 Ryan McCain wrote:
 I'm trying to issue this command:

 squidclient -m PURGE http://www.yahoo.com


 and get the following error:
 client: ERROR: Cannot connect to localhost:3128: Connection refused 

 I'm using squid-2.7.STABLE6-1 on SLES 10.  I'm not even sure what is 
 supposed 
 to be running on port 3128.  I've tried running this w/ the software firewall 
 turned off and always get the error.

 Any ideas?
   
 
 Use...
 
 squidclient -p ${Port-Squid-Listens-On} -m PURGE http://www.yahoo.com/
 
 ...if you don't have Squid listening on (the default) port 3128.
 
 Chris




[squid-users] What 3rd party tools do you guys use?

2009-06-05 Thread Ryan McCain
For trend analysis, alerting, log parsing, configuration, etc. etc.?

The only 3rd party tool we currently use is SARG.

Ryan
 



Re: [squid-users] Squid and NTLM Authentication

2009-03-05 Thread Ryan McCain


 On Wed, Mar 4, 2009 at  5:22 PM, in message
eb2a55e07ade8fe1700dc079b76b687c.squir...@webmail.treenet.co.nz, Amos
Jeffries squ...@treenet.co.nz wrote: 
 
 Ah SLES. They have actually managed to be slower than RedHat on updating
 their software.

 Okay, from what I can tell you're pretty much screwed. Unless you are a
 guru with package building and installing on SLES, or willing to change
 OS.
 The faster solution may be to check and change the authentication type
 required by IIS.

 For the record, yes the latest 2.6 and 2.7 support pass-thru for NTLM
 and kerberos negotiation, one of which I believe is causing your
 problem.

 Amos

 I was able to install Squid 3.x and the result is still the same.. Any
 ideas?

 
 Which 3.x? 3.0 is based on 2.5 and does not support it either. Try the 2.7
 for stable version, or 3.1 for beta release.
 
 Amos

Will do .. Thanks for the heads up.

Ryan





Re: [squid-users] Squid and NTLM Authentication

2009-03-05 Thread Ryan McCain
 I was able to install Squid 3.x and the result is still the same.. Any
 ideas?

 
 Which 3.x? 3.0 is based on 2.5 and does not support it either. Try the 2.7
 for stable version, or 3.1 for beta release.
 
 Amos

Amos,

2.7 worked like a charm. Any idea what version will ship with SLES 11?

Thanks..



Re: [squid-users] Squid and NTLM Authentication

2009-03-04 Thread Ryan McCain
 
 Ah SLES. They have actually managed to be slower than RedHat on updating 
 their software.
 
 Okay, from what I can tell you're pretty much screwed. Unless you are a 
 guru with package building and installing on SLES, or willing to change OS.
 The faster solution may be to check and change the authentication type 
 required by IIS.
 
 For the record, yes the latest 2.6 and 2.7 support pass-thru for NTLM 
 and kerberos negotiation, one of which I believe is causing your problem.
 
 Amos

I was able to install Squid 3.x and the result is still the same.. Any ideas?





Re: [squid-users] Squid and NTLM Authentication

2009-03-03 Thread Ryan McCain
 On Mon, Mar 2, 2009 at  5:36 PM, in message
dbbdfe40eac962f012c18cc3b7582856.squir...@webmail.treenet.co.nz, Amos
Jeffries squ...@treenet.co.nz wrote: 
  We are using squid-2.5.STABLE12-18.12

 
 Please use a newer more capable Squid.  There have been MANY improvements
 since 2.5 was made obsolete.
 
 Amos


The only reason we are using  that version is because it's the latest version 
supported w/ SLES 10.   Does this version or a newer version support the 
scenario I described?

Thanks..






[squid-users] Squid and NTLM Authentication

2009-03-02 Thread Ryan McCain
We are using squid-2.5.STABLE12-18.12

When trying to access this web page from home it prompts me for NTLM 
Authentication credentials:

http://www.allianceenterprises.com/AWAREInfo


---

When I do it from work (behind Squid), I get this error:

You are not authorized to view this page
You do not have permission to view this directory or page due to the access 
control list (ACL) that is configured for this resource on the Web server.

Please try the following:

* Contact the Web site administrator if you believe you should be able to 
view this directory or page.
* Click the Refresh button to try again with different credentials.

HTTP Error 401.3 - Unauthorized: Access is denied due to an ACL set on the 
requested resource.
Internet Information Services (IIS)

Technical Information (for support personnel)

* Go to Microsoft Product Support Services and perform a title search for 
the words HTTP and 401.
* Open IIS Help, which is accessible in IIS Manager (inetmgr), and search 
for topics titled About Security, Access Control, and About Custom Error 
Messages.



I'm thinking that Squid doesn't know how to handle NTLM authentication?  Any 
ideas?









[squid-users] Having to login multiple times??

2006-07-27 Thread Ryan McCain
hello, we are just starting with squid. when a user opens a web browser
it will ask them to login if they go to yahoo.com, or whatever. if they
open a new browser session and go to another site, it will ask them
again for their user credentials.

is it possible to have the login credentials to the squid server
somehow cached so the users won't  have to login everytime the  open a
new instance of IE or firefox.

we are running squid v2.5x on SLES 9. any help or pointers to
documentation would be helpful.