Re: [squid-users] TPROXY Squid
Adnan Shahzad, on 03/13/2008 04:54 PM [GMT+500], wrote : what and how TPROXY works Have a look at http://wiki.squid-cache.org/ConfigExamples/FullyTransparentWithTPROXY .
Re: [squid-users] Fatal: Bungled squid.conf
Dave Coventry, on 02/07/2008 03:16 PM [GMT+500], wrote : Hi, I'm having a problem with my squid.conf. I have specified cache_dir /usr/local/squid/var/cache 100 16 256 as per the directions under QUICKSTART. you forget to specify type eg aufs cache_dir aufs /usr/local/squid/var/cache 100 16 256 regards,
Re: [squid-users] Fatal: Bungled squid.conf
Dave Coventry, on 02/07/2008 05:00 PM [GMT+500], wrote : Yes. I took the arguments directly from the QUICKSTART document that accompanied the source. ;) True not your fault ;) someone please correct the line cache_dir /usr/local/squid/var/cache 100 16 256 in QUICKSTART :) regards,
Re: [squid-users] Squid startup scripts.
Dave Coventry, on 02/06/2008 06:55 PM [GMT+500], wrote :
Hi,
Still battling to get Squid up and running...
I have installed Squid3.0 from source into /usr/local/squid.
However, there is no startup script to place into /etc/init.d/
Surely it's not simply a case of placing the following into a file
called squid, making it executable, update-rc, etc?
#!/bin/sh
start () {
/usr/local/squid/sbin/squid
}
check the other scripts in /etc/init.d/ and make one for squid by
copying it.
for startup placing 'squid -D' in rc.local will do the job however if
you are looking for more features 'start/stop/reload/' etc then you have
to code one or search the archive.
regards.
Re: [squid-users] Keep the access log
J. Peng, on 01/21/2008 04:53 PM [GMT+500], wrote : config squid to rotate logs and write a script to put the logs into remote host with large disks,ie, a store device. On Jan 21, 2008 6:32 PM, Netmail [EMAIL PROTECTED] wrote: Hi I want to keep the access log of my squid for 5 years ; how to for set this option ? Thanks ! we are keeping 6 months of logs on remote host. 1. enable log rotation for squid (keeping 1 is fine) 2. setup ssh key authentication between backup and squid hosts. 3. create a script to compress and SCP log file to bkp-host with somthing like rm -f /logbakup/* tar -czvf /logbakup/access.log_`date +%Y%m%d%H%M`.tar.gz /var/log/squid/access.log.0 scp /logbakup/*.tar.gz [EMAIL PROTECTED]:/squid-backups/ regards.
Re: [squid-users] ReiserFS
Tony Dodd, on 11/28/2007 01:02 AM [GMT+500], wrote : [EMAIL PROTECTED] wrote: I have read that reiserFS would give better performance as compared to ext3 and xfs. With what is going on with the developer of this FS is it still a good idea to use this FS? What are you talking about? It's not like he killed his wife or something.. oh...wait. That's why they call it Killer File System. :-s On a more serious note, ReiserFS security updates and bug fixes will still be released, but namesys is putting its development time into Reiser4 now. See http://www.namesys.com for more details. Well here we still use reiserfs and its great for caches, waiting when kernel folks will honor reiser4 into the mainline (looks very hard after the killing thing). Regards.
Re: [squid-users] time
Polenyik Tibor, on 11/08/2007 04:07 PM [GMT+500], wrote : Hi, I'd like to measure the time how many time a machine (ip address) use the internet, web browsing. yes parse the access.log awk egrep wc is your friend :P Or use some log analysis tool for squid may be sarg? Regards
Re: [squid-users] Bandwidth savings?
Nick Duda, on 11/02/2007 10:24 PM [GMT+500], wrote : Funny you bring that upbecause we did that unintensional some time back... Basically, we have 4 T1's in a brach office, bonded as a multilink (6mb). Based on this one office bandwidth going out is on average 4.5mb used with Squid in place. One day we had to make some changes and stopped serving from the cache...we flatlined at 6mb and the office came to a scretching halt. It was at that point I said, hey I can tell you that the proxy is saving you at a min. 1.5mb of bandwidth LOL. I then went with the cacti templates and I get on average 4-5mb saved, some days up to 8mb! Also look into 'vnstat' a very nice console application is a network traffic monitor for Linux that keeps a log of daily network traffic for the selected interface(s) http://humdi.net/vnstat/ Regards
Re: [squid-users] spontaneous machine reboots
rihad, on 11/01/2007 04:38 PM [GMT+500], wrote : Machine running Squid 2.6 with kqueue+aufs on FreeBSD 6.2 reboots spontaneously every 2-3 days. We've practically ruled out hardware problems by replacing the box and having the same problems. So you thinks its squid causing these reboots? Regards.
Re: [squid-users] Startup problems
Sean O'Reilly, on 10/02/2007 07:27 PM [GMT+500], wrote : I have upgraded squid from squid-2.5STABLE10 to squid-2.6STABLE16. When trying to start squid using the original squid.conf I am getting the 'no port defined' error I do not have an http_port defined in the configuration file. My question is why would this work in 2.5 but not in 2.6 ? Need to have a look at http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE16-RELEASENOTES.html#s1 Regards.
Re: [squid-users] resolve gcc prob in source code based squid
Javed, on 09/01/2007 05:08 PM [GMT+500], wrote : Thanx for ur reply. I downloaded squid-2.6.STABLE15 gcc-3.4.6-8.src.rpm from rpmfind.net (ftp://rpmfind.net/linux/redhat/updates/enterprise/4AS/en/os/SRPMS/gcc-3.4.6-8.src.rpm). when i tried to install it using rpm -ivh gcc-3.4.6-8.src.rpm; i get a bunch of the following error/warning messages: warning: group brewbuilder does not exist - using root warning: user brewbuilder does not exist - using root warning: group brewbuilder does not exist - using root warning: user brewbuilder does not exist - using root now what should i do? plz explain in detail as i am a newbie in RHEL 4.0. By the way echo $PATH gives the following output: /usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/root/bin Why you are installing package using third party ? better to use your distro package management system to install packages. Regards.
Re: [squid-users] resolve gcc prob in source code based squid
Javed, on 09/01/2007 05:08 PM [GMT+500], wrote : Thanx for ur reply. I downloaded squid-2.6.STABLE15 gcc-3.4.6-8.src.rpm from rpmfind.net (ftp://rpmfind.net/linux/redhat/updates/enterprise/4AS/en/os/SRPMS/gcc-3.4.6-8.src.rpm). when i tried to install it using rpm -ivh gcc-3.4.6-8.src.rpm; i get a bunch of the following error/warning messages: warning: group brewbuilder does not exist - using root warning: user brewbuilder does not exist - using root warning: group brewbuilder does not exist - using root warning: user brewbuilder does not exist - using root IMO you can ignore these warnings. now what should i do? plz explain in detail as i am a newbie in RHEL 4.0. By the way echo $PATH gives the As you are using RHEL you can also knock at Redhat support. Regards.
Re: [squid-users] resolve gcc prob in source code based squid
Slacker, on 09/01/2007 07:05 PM [GMT+500], wrote : Javed, on 09/01/2007 05:08 PM [GMT+500], wrote : Thanx for ur reply. I downloaded squid-2.6.STABLE15 gcc-3.4.6-8.src.rpm from rpmfind.net (ftp://rpmfind.net/linux/redhat/updates/enterprise/4AS/en/os/SRPMS/gcc-3.4.6-8.src.rpm). when i tried to install it using rpm -ivh gcc-3.4.6-8.src.rpm; i get a bunch of the following error/warning messages: Why on earth you downloading source package of gcc you want to hack into gcc code? Before posting to mailing lists better do some reading, RHEL documentation worth reading. Regards.
Re: [squid-users] No nameserver and Forward loop detected.
Suhaib Ahmad, on 06/07/2007 08:37 PM [GMT+500], wrote : And any idea why the WARNING: Forwarding loop detected for:. Is this anything todo with dns settings. check visible_hostname directive you may be sharing same names for two proxies within same network? Regards.
Re: [squid-users] Default ssl config?
Jason Hitt, on 06/06/2007 08:40 PM [GMT+500], wrote : Can someone post one, think I'm going to start fresh. Post what ... hack? Regards.
Re: [squid-users] cachemgr.conf
Munawar Zeeshan, on 06/01/2007 05:09 PM [GMT+500], wrote : In /usr/local/squid/etc i finds a file i.e. cachemgr.conf. Whats is the purpose of this file and how can i use it ?? Thanks http://wiki.squid-cache.org/SquidFaq/CacheManager Regards,
Re: [squid-users] Anonymous LDAP binding with LDAP AUTH ?
Henrik Nordstrom, on 05/15/2007 05:55 PM [GMT+500], wrote : Sure, just don't specify the bind DN (-D option, and it's related -w option). Thanks, squidLDAP wiki has also been updated with this.
Re: [squid-users] Memory Issue
Sekar, on 05/02/2007 04:19 PM [GMT+500], wrote : Hi, I have 4GB memory in my machine . The machine is four Intel(R) Xeon(R) CPU - 1.60GHz processors box. The bios correctly shows 4GB memory. Initially the machine had Redhat Enterprise Linux 3 on it and the machine showed all 4GB memory . Now I have reinstalled the OS to FC6 . But now machine shows *only 3 GB memory*. Pretty much off topic for squid-user, better to post in fedora mailing list :PTry to boot your machine with some livecd and see if its show you all available ram? Or Try some decent linux distro :) Thanks.
Re: [squid-users] Time stamp in access.log
jeff donovan, on 05/01/2007 08:14 PM [GMT+500], wrote : greetings how can i get an accurate time stamp in my access.log right now it looks like this: 1178025553.639175 192.207.19.129 TCP_MISS/200 11249 GET http:blah blah how can decode that stamp? or can i change it to something human :) -jeff Its already in squid FAQs see .. http://wiki.squid-cache.org/SquidFaq/SquidLogs#head-de34519356ecd6791303987f0ee79b043199374b and also look into logformat directive in squid.conf Thanks.
Re: [squid-users] Squid installation
Ganesh Balasubramanian, on 04/17/2007 06:37 PM [GMT+500], wrote : Hi, Is the squid 2.6 version download available? If so can you point me where i can get the latest stable build of that version. Thanks in advance --Ganesh.b You can download the latest stable version of squid from here. http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE12.tar.bz2 Or you can use your distro package management tool to get it apt-get install squid yum install squid Thanks. Askar
Re: [squid-users] How Can I Change Time Zone and/or Time Format
I am using 2.5-STABLE12, is this supported in this version, or must I upgrade? You must upgrade to be able to control the log format. However, it's very easy to translate the timestamp into human readable form. See the FAQ. Regards Henrik There is one very nice script on Christoph Haas site http://workaround.org/squid/squidlogreader to read squid access.log Thanks.
Re: [squid-users] squid server crash
Emilio Casbas, on 02/23/2007 03:11 PM [GMT+500], wrote : Hi We have two squid servers as reverse proxys in front of our web servers (squid-2.5Stable10). Both have working right for some months, but today We have found the two servers at the same time down, with a kernel panic error on the screen. The last access.log time in the two servers it was at similar hour, and We didn't found any revelance string in access.log. This is the last line before the crash, but We don't think it's related to. cache.log 2007/02/22 22:41:47| parseHttpRequest: Unsupported method 'oors;c=ES;g=a;a=4;s=1;!category=nrm;dcopt=ist;sz=728x90;ptile=1;ord=300386615346895800?' 2007/02/22 22:41:47| clientReadRequest: FD 840 Invalid Request We have looking for strange patterns in the logs machine too, but We didn't found anything. Check the sizes of squid logs files if they are 2 G then rotate them with squid -k rotate Thanks.
Re: [squid-users] squid server crash
Neil A. Hillard, on 02/23/2007 03:34 PM [GMT+500], wrote : The op stated that both boxes had kernel panics which tends to point the finger at the OS and not Squid. If squid can make the OS kernel panic then the OS needs fixing. Fully agreed. Askar
Re: [squid-users] squid server crash
Emilio Casbas, on 02/23/2007 04:25 PM [GMT+500], wrote : The last line on messages log before the crash: Feb 22 22:41:47 servercrash squid[21624]: parseHttpRequest: Unsupported method 'oors;c=ES;g=a;a=4;s=1;!category=nrm;dcopt=ist;sz=728x90;pt ile=1;ord=300386615346895800?' Feb 22 22:41:47 servercrash squid[21624]: clientReadRequest: FD 840 Invalid Request These errors in cache.log will never crash your OS, we are getting hundreds these type of messages in cache.log for method which squid don't understand. Anyhow you can safely ignore these messages IMO. Check your OS logs may be there you find any hint why OS crashed, btw after reboot your servers working fine? Thanks
Re: [squid-users] Access Log Size on Linux
Manish Kathuria, on 02/15/2007 03:15 PM [GMT+500], wrote : Why does squid stop running as soon as the access log size hits 2 GB on linux when we can have much larger files on ext3 filesystem and 2.6 kernels ? Thanks, Rebuild with large file support, you're hitting an imposed limit within squid itself --with-large-files Enable support for large files (logs etc). limitation of 32bit processor machines that run programs without special workarounds set when compiling Thanks.
Re: [squid-users] Squid problem
Munawar Zeeshan, on 02/13/2007 12:03 PM [GMT+500], wrote : I have a very sticky problem. My squid machine is between LAN and my DSL modem.Eth0 is is connected to LAN switch while Eth1 is connected with the DSL modem.I have following in my rc.local for tranparent proxy and masquerading. /usr/local/squid/sbin/squid echo 1 /proc/sys/net/ipv4/ip_forward iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128 Hash the below line, you don't need this while doing interception for UDP. iptables -t nat -A PREROUTING -i eth0 -p udp --dport 80 -j REDIRECT --to-port 3128 iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE Are my above lines ok ?? Yes Looks fine. My /etc/hosts file is..while my machine name is linuxgateway.ecda.gov.pk 127.0.0.1 localhost.localdomain localhost 192.168.3.1 linuxgateway.ecda.gov.pk linuxgateway and in resolve.conf nameserver 192.168.3.81 I will suggest you to run, cache only DNS on your linux machine, it will give you performance by caching dns queries, and then modify your resolve.conf nameserver 127.0.0.1 Thanks
Re: [squid-users] Squid problem
Munawar Zeeshan, on 02/13/2007 04:18 PM [GMT+500], wrote : thanks a lot slacker I am away from office and will try it tomorrow. I also suspects the problem is with DNS server.One more thing i tell you that as i was using transparent proxy but if i give the IP of squid in Browser Proxy settings or if i give the ip of ISP DNS in my DNS settings it starts browsing. I hope your advice will solve the problem. I will tell you back Right, and please while replying do bottom-posting instead of top-posting, google for bottom-posting. And don't cc to me. Thanks.
Re: [squid-users] VI
kashif Mazhar, on 12/18/2006 11:17 AM [GMT+500], wrote : Hey, I want to write a script to VI squid.conf from anypath in my linux box, right now i need to go to /etc/squid, then i can open squid.conf. but i want to open it from anywhere , i know there is a script but i lost it, please help me out. Regards, omg, what a question :) Thanks.
Re: [squid-users] VI
Stefan Palme, on 12/20/2006 06:19 PM [GMT+500], wrote : write a script called i_want_to_open_squid_conf_from_anywhere.sh with the following content (dont include the dashes) and put it into /usr/bin or /usr/local/bin: --- #!/bin/sh vi /etc/squid/squid.conf --- Now you can easily open squid.conf from anywhere by simply calling i_want_to_open_squid_conf_from_anywhere.sh Best regards -stefan- :) you forget to tell him 'chmod +x script called i_want_to_open_squid_conf_from_anywhere.sh' :D On Mon, 2006-12-18 at 16:20 +0500, Slacker wrote: kashif Mazhar, on 12/18/2006 11:17 AM [GMT+500], wrote : Hey, I want to write a script to VI squid.conf from anypath in my linux box, right now i need to go to /etc/squid, then i can open squid.conf. but i want to open it from anywhere , i know there is a script but i lost it, please help me out. Regards, omg, what a question :) Thanks.
Re: [squid-users] cache machine specs
hi Kevin Thanks for your reply On 5/12/05, Kevin [EMAIL PROTECTED] wrote: On 5/10/05, Slacker Ali [EMAIL PROTECTED] wrote: we are going to order new machine for cache/proxy server squid we are already running cache servers all on Intel plateform Given your limited performance needs, I would suggest sticking with Intel processors, putting your money towards more RAM, faster disks, or building two identical load-balanced caches. Agreed This time we want to give a try to AMD processor, what you ppl things which processor would be benfiical 1) Athlon 32bit or 64bit? 2) opetron ? I far i can understand, I don't think 64 bit will significantly improve performance for cache/proxy servers. I would tend to agree, but it'd be an interesting benchmark to try if you have the time and hardware to spare. heh tough budget for hardware ;) users to support 250 pipe to internet : 2 mbit users are dynamic not a corporate users, but dialup users. Given these limitations on the maximum total and per-user throughput, you could almost certainly get away with building on an old (circa 1998) 200Mhz Celeron desktop PC with IDE. The limiting factor is going to the dialup modem hop to the end user. In this sort of case, you might want to consider deploying an optimizing proxy, akin to Juno's SpeedBand(tm) and similar buzzword-compliant offerings. I will appreciate if someone using AMD gimme suggestions which... processor to select + ram (3 gb would be enough?) Yes, 3GB should be more than sufficient, even for ten times your userbase and bandwidth. right, + 3 x 36 gb (sata)? One drive dedicated to the OS, a second drive for cache_dir, a third for squid logs? Or a hardware RAID array? actaully to achieve good through put ;) one for OS , and two for cache_dir + mobo Your choice of motherboard is going to be strongly dependent on the one factor you don't mention in this message- the OS. my first choice would be ofcourse nothing but slackware Are you running Squid on OpenBSD? Solaris? FreeeBSD? second choice freebsd Some other Unix-like operating system?;) For example, if you are going to run a Dual AMD64 machine under OpenBSD 3.7 (due out May 19, 2005), then you would want to ask about motherboards on an OpenBSD mailing list. If you were to choose Solaris, your only supported choices would be motherboards listed on Sun's official supported hardware list. Kevin Kadow regards
[squid-users] cache machine specs
hi list sorry i'm going to ask a very dump question however I need you gurus suggestions :) we are going to order new machine for cache/proxy server squid we are already running cache servers all on Intel plateform This time we want to give a try to AMD processor, what you ppl things which processor would be benfiical 1) Athlon 32bit or 64bit? 2) opetron ? I far i can understand, I don't think 64 bit will significantly improve performance for cache/proxy servers. 64 bit is worth it only for computationally intensive tasks, imho. At least with ordinary working set sizes. users to support 250 pipe to internet : 2 mbit users are dynamic not a corporate users, but dialup users. I will appreciate if someone using AMD gimme suggestions which... processor to select + mobo + ram (3 gb would be enough?) + 3 x 36 gb (sata)? Thanks and regards
