Squid Developer? (fwd)

2009-02-13 Thread Duane Wessels
Duane: I'm a second year student at the Harvard Business School. Prior to coming back to school for my MBA I was the co-founder of something called Project Honey Pot (www.projecthoneypot.org). Project Honey Pot tracks malicious behavior online. We work with law enforcement agencies worldwide and h

Re: [noc] translation toolkit

2008-08-08 Thread Duane Wessels
On Tue, 5 Aug 2008, Amos Jeffries said: Can someone with admin access to squid-cache.org please install the translation toolkit. done. textproc/translate-toolkit has been installed

some debug message cleanup in squid-2

2008-04-24 Thread Duane Wessels
FYI I'm planning to fix and commit all cases that I can find where debugging messages contain the wrong function name. For example: @@ -3959,8 +3959,8 @@ clientTryParseRequest(ConnStateData * co /* Limit the number of concurrent requests to 2 */ for (n = conn->reqs.head, nrequests = 0;

Re: SMP scalability goal

2008-04-24 Thread Duane Wessels
On Thu, 24 Apr 2008, Alex Rousskov wrote: I do not think it is realistic to expect nearly linear scale (close to 100% and 200% increase in performance), especially for the first implementation. As you know, disk is usually the bottleneck. So I think your goals and expectations should state

Re: Problem with CVS pserver?

2008-04-14 Thread Duane Wessels
On Wed, 9 Apr 2008, Benno Rice wrote: I've started getting this today: cvs -z9 -d :pserver:[EMAIL PROTECTED]:/squid co squid open /dev/null failed Operation not supported Has something broken on the CVS server? It was broken when I upgraded the OS from FreeBSD-5 to -6. Fixed now. DW

Re: ESI on Solaris

2007-11-15 Thread Duane Wessels
On Fri, 16 Nov 2007, Amos Jeffries wrote: Could you make that 'USE_ESI' instead? that seems to be a defacto standard within squid for enabling components. Easier to keep things consistent. I could make it USE_SQUID_ESI if you like. I'm still concerned that "USE_ESI" is too generic and like

ESI on Solaris

2007-11-15 Thread Duane Wessels
On Sat, 10 Nov 2007, Randall DuCharme wrote: Ok this is strange. It looks like it's trying to compile ESI specific support in yet I've not done --enable-esi. In autoconf.h "#define ESI 0" is present. I've removed the -Werror flag for now so the multiple inclusion warning shouldn't be stopp

Re: caching "dynamic" content

2007-11-14 Thread Duane Wessels
On Thu, 15 Nov 2007, Adrian Chadd wrote: I'd like to see something default in the next Squid release, so we can release it with a few interesting tag lines like "Can cache google maps!" I can support removing '?' from the default QUERY acl definition. I cannot support adding default 'rep_h

Re: caching "dynamic" content

2007-11-14 Thread Duane Wessels
On Thu, 15 Nov 2007, Adrian Chadd wrote: Ideally I'd like to cache cgi-bin / ? content if cache information is given (max-age, Expires, etc; henrik knows more about the options than right. I'm not sure my current refresh patterns handle this: refresh_pattern ^ftp: 144020%

Re: caching "dynamic" content

2007-11-14 Thread Duane Wessels
On Thu, 15 Nov 2007, Adrian Chadd wrote: What about default refresh_pattern to not cache cgi-bin and/or ? URLs? I assume you mean to always refresh (validate) cgi-bin and/or ? Because if you don't want them to be cached then the 'cache' access list is the place to do that. yes, I could su

Re: [squid-users] Solaris/OpenSSL/MD5 Issues

2007-11-13 Thread Duane Wessels
The patches to make "MD5" work on Solaris have broken things on FreeBSD (at least) which also has a sys/md5.h. Compile fails with "error: `MD5_DIGEST_LENGTH' was not declared in this scope" It seems to me that the original problem was just that Squid's own MD5 routines are using names that coll

Re: positive_dns_ttl

2007-10-10 Thread Duane Wessels
On Wed, 10 Oct 2007, Mark Nottingham wrote: From ipcache.c; if (ttl == 0 || ttl > Config.positiveDnsTtl) ttl = Config.positiveDnsTtl; if (ttl < Config.negativeDnsTtl) ttl = Config.negativeDnsTtl; i->expires = squid_curtime + ttl; As I read this, if the TTL from an

Re: RC1 time

2007-10-01 Thread Duane Wessels
On Sun, 30 Sep 2007, Duane Wessels wrote: Alex tells me that its time to release Squid-3 RC1. I plan to start the process tonight. If all goes well it should be done and announceable in 24-48 hours. squid-3.0.RC1 is now on the master web/ftp sites for download. Is now a good time to

RC1 time

2007-09-30 Thread Duane Wessels
Alex tells me that its time to release Squid-3 RC1. I plan to start the process tonight. If all goes well it should be done and announceable in 24-48 hours. DW

Re: cvs commit: www2/content/Download mirrors.dyn

2007-08-06 Thread Duane Wessels
On Sun, 5 Aug 2007, Amos Jeffries wrote: Don't know what the bug was (background-color?) Missing $ RCS file: /server/cvs-server/squid/www2/content/Download/mirrors.dyn,v retrieving revision 1.11 retrieving revision 1.12 diff -u -3 -p -r1.11 -r1.12 --- mirrors.dyn 4 Aug 2007 01:55:12 -

Re: Event order

2007-07-26 Thread Duane Wessels
On Thu, 26 Jul 2007, Alex Rousskov wrote: I am leaning towards (2) for now because it minimizes the modifications and risk. The attached patch implements that option. Your patch is simple enough that I do not find it offensive :-) My only suggestion is to add more comments, in particular ab

Re: tarball help

2007-07-15 Thread Duane Wessels
On Mon, 16 Jul 2007, [EMAIL PROTECTED] wrote: hey Guys, I'm thinking its about time I got around to making a source D/L tarball of the IPv6 branch. Am I correct is assuming that I can run bootstrap locally and bundle the results for people just to run configure and make themselves? or is the

Re: default user

2007-07-09 Thread Duane Wessels
On Tue, 10 Jul 2007, Amos Jeffries wrote: Hey guys, I find myself in need of a ./configure option to set the cache_effective_user other than 'nobody' on a per-dist basis, leaving the squid.conf setup as-is. Can someone please explain to me how the @HTTP_PORT@ etc get replaced in squid.co

Re: Squid 3 download page stuck

2007-05-14 Thread Duane Wessels
On Sun, 13 May 2007, Henrik Nordstrom wrote: s??n 2007-05-13 klockan 10:39 +0200 skrev Guido Serassio: The Squid 3 download page is stuck at 9 May, may be related to PRE6 release. Checking... yes. The -CVS part of the version tag should not be removed. It's removed automatically by the mk

Re: [squid-users] Question about authenticateNegotiateHandleReply

2007-05-09 Thread Duane Wessels
On Wed, 9 May 2007, Markus Moeller wrote: I have written a helper program for the negotiate protocol (only the Kerberos part of it). I can get it to determine the correct userid but somehow the reply doesn't get back to squid. I don't get any debug from authenticateNegotiateHandleReply. What

Re: auth_ntlm broken?

2007-05-07 Thread Duane Wessels
On Fri, 27 Apr 2007, Gernot Tenchio wrote: Hi developers, I've noticed that auth_ntlm does not work in current squid3-icap branch. As far as I remember squid crashed right after printing "AuthNTLMUserRequest::authenticate: authenticated user XYZ". I have a possible patch at http://www.squi

Re: cvs commit: squid3/lib xusleep.c Makefile.am

2007-04-24 Thread Duane Wessels
On Tue, 24 Apr 2007, Henrik Nordstrom wrote: Hmm.. it's fine (and probably preferred) for the external daemon to use select and fd_set. This restriction is just on code linked into the squid binary. external daemon does not use select. it is a very simple loop: while (fgets(buf, U

Re: Removed some uses of RefCount::getRaw() in DelayPool.cc

2007-04-22 Thread Duane Wessels
On Sun, 22 Apr 2007, Tsantilas Christos wrote: Hi Duane, I think there is an error in DelayPool.cc file and squid3 does not compiles if delay pools are enabled. Thanks, I committed your fix. Strange that it compiled okay for me with --enable-delay-pools on FreeBSD (gcc 3.4.2). DW

Re: squid3-largeobj and %lld

2007-04-19 Thread Duane Wessels
On Thu, 19 Apr 2007, Robert Collins wrote: On Wed, 2007-04-18 at 20:52 +0200, Guido Serassio wrote: I think that here should be used the standard ISO C99 macro PRId64 like in Squid 2.6. This allow the portability of the code: on Windows %lld is not available, when on some Unix 64 bit platfo

Re: cvs commit: squid3/src Store.h protos.h store.cc store_client.cc store_swapout.cc

2007-04-19 Thread Duane Wessels
On Wed, 18 Apr 2007, Tsantilas Christos wrote: Hi Duane, the StoreEntry::swapOut() does not compile when SIZEIF_OFF_T==4 I am using the following patch, but I am not sure if it is OK ... Thanks, I've applied the patch.

Re: cvs commit: squid3/src main.cc

2007-04-12 Thread Duane Wessels
On Thu, 12 Apr 2007, Alex Rousskov wrote: rousskov2007/04/12 08:51:10 MDT Modified files: src main.cc Log: This change should fix bug #1837: Segfault on configuration error When quitting on a fatal error, such as a configuration error, Squid may need to write cl

Re: some help with the website please

2007-04-12 Thread Duane Wessels
On Wed, 4 Apr 2007, Adrian Chadd wrote: I hate to ask for help when I said I'd do it, but I'm running very short on spare time at the moment and I'd appreciate some help in finishing off the new.squid-cache.org website so its ready to be made live. Someone with server access: help, please?

Re: cvs commit: squid/src stat.c tools.c

2006-11-03 Thread Duane Wessels
On Thu, 2 Nov 2006, Henrik Nordstrom wrote: ons 2006-11-01 klockan 13:58 -0700 skrev Duane Wessels: struct kb_t uses squid_off_t, which might be signed. That means that kb_t.kb could overflow and become negative in kb_incr(). If we detect that it is negative, add increasing powers

proposal to remove port 563 from default ACLs

2006-09-29 Thread Duane Wessels
Our default ACL configuration allows CONNECT requests to port 563, which is for NNTP over SSL. Assuming that nobody really uses NNTP over SSL, especially through an HTTP proxy, I suggest that we remove it from the defaults.

Re: font for the new artwork buttons?

2006-09-29 Thread Duane Wessels
On Wed, 27 Sep 2006, Robert Collins wrote: Duane, do you know what font was used in making the sample buttons for the new artwork ? It is called "Allspeed".I added the font package file to the website cvs under share/Fonts

Re: 3.0 branding - release plans - etc

2006-09-11 Thread Duane Wessels
On Sun, 10 Sep 2006, Robert Collins wrote: So, chatting with Adrian today, and some friends, I have some thoughts about what precisely 3.0 should be. I think 3.0 STABLE1 when release should be: * more functional than 2.6 STABLEX - there should be no regressions in functionality. * within 10-

Re: cvs commit: squid3/src http.cc

2006-06-13 Thread Duane Wessels
On Wed, 7 Jun 2006, [EMAIL PROTECTED] wrote: hno 2006/06/07 06:32:56 MDT Modified files: src http.cc Log: Correct Cache-Control header checks and simplify the associated overrides Revision ChangesPath 1.500 +15 -41squid3/src/http.cc When I com

Re: duplication of HttpHdrRange

2006-05-31 Thread Duane Wessels
Having two copies of this header, especially a cached copy which is read-write and frequently written to, seems like an open invitation to errors. Is there a good reason for this or can I refactor into something better? It could probably be cleaned up.

squid3: we're out of fds - deferring io

2006-05-26 Thread Duane Wessels
Hi, I spent some time tracking down (and finding) problems in squid-3 when Squid starts to run out of FDs. Problem #1: comm_accept_check_event() scheduled incorrectly. from fdc_t::acceptOne(): eventAdd("comm_accept_check_event", comm_accept_check_event, this, 1000.

Re: Current -cvs crashing when invalid hostname in client requested URL

2006-05-07 Thread Duane Wessels
On Sun, 7 May 2006, Reuben Farrelly wrote: Seems to be new breakage in the last few days, but if I try to surf to a URL which is invalid eg www.firfox.org, squid-3/CVS dies an ugly death: Looks like this was caused by one of my bugfixes yesterday. I backed it out and will look for anot

Re: Squid-3 errors and blank pages

2006-05-02 Thread Duane Wessels
On Tue, 2 May 2006, Reuben Farrelly wrote: Squid-3 cvs seems to be functioning for me now - it's usable again but I am seeing lots of errors like this logged on random pages: 2006/05/01 23:07:12| http.cc(1866) Transaction aborted while reading HTTP body This corresponds with this code in

Re: inline the ICAP Makefile ?

2006-05-02 Thread Duane Wessels
On Sun, 30 Apr 2006, Robert Collins wrote: Duane, how do you feel about me inlining the ICAP Makefile into the src Makefile ? It makes it easier for automake to track dependencies, particular when building individual files - less recursion etc. Um, I guess. I certainly don't have a strong

Re: HTTPMSGLOCK/UNLOCK

2006-05-02 Thread Duane Wessels
On Sat, 29 Apr 2006, Robert Collins wrote: I'm unclear why we have these macros rather than smart pointers... having these macros as a pattern means we'll need to learn LOCK/UNLOCK macros for every class that is in use. I tried and found it very difficult. Perhaps you can do better. Here

Re: BodyReader

2006-04-27 Thread Duane Wessels
On Fri, 28 Apr 2006, Henrik Nordstrom wrote: tor 2006-04-27 klockan 19:27 + skrev [EMAIL PROTECTED]: Replacing ClientBody class with BodyReader. Seems to be some issues there, maybe 64-bit related. BodyReader.cc: In member function "void BodyReader::read(void (*)(MemBuf&, void*), v

from IRC

2006-04-27 Thread Duane Wessels
(I don't get why xassert is disabled when PURIFY is set.. Duane?) I don't remember exactly any more. Maybe because assert() interferred with purify's ability to get a good stack trace. It can be removed as far as I'm concerned.

Re: refresh.cc - refreshIsCachable()

2006-04-27 Thread Duane Wessels
The return value of refreshIsCachable() can be calculated without making a call to refreshCheck(). I.e. you can remove the call to refreshCheck() from refreshIsCachable(), and refreshIsCachable() will still return the correct result. Sorry, still not following you. refreshIsCachable() uses t

Re: refresh.cc - refreshIsCachable()

2006-04-26 Thread Duane Wessels
On Tue, 25 Apr 2006, Doug Dixon wrote: It looks like the call to refreshCheck() is only used to short-circuit the function (if you can call it a short circuit, given the size of the callout) and to update some statistics. The main, and original, purpose of refreshCheck() is to check the re

squid3 commit heads up: ClientBody -> BodyReader

2006-04-26 Thread Duane Wessels
I'm about ready to commit some changes related to the way Squid handles request bodies. The ClientBody class didn't work very well with ICAP, which also needs to read message bodies. I've replaced it with a BodyReader class and made a number of related changes. DW

Re: so what is involved in calling squid-3.0 'stable'?

2006-04-24 Thread Duane Wessels
My own criteria: be able to deploy Squid3 with ESI as a reverse accelarator under real load without it falling over (I don't run Squid as a forward-cache at all). Can somebody point to a current "how to help with Squid3 development" document? E.g., I don't even know how to get a current checkou

Re: config.test fragments

2006-04-24 Thread Duane Wessels
On Sun, 23 Apr 2006, Guido Serassio wrote: Hi Robert, At 13.17 23/04/2006, Robert Collins wrote: seems to me that if we exported all the autoconf values during a config.test run, they would be more portable: see for instance Guido's recent commit to probe /usr/local as well: unless CPPFLAG

Re: wikis...

2006-04-24 Thread Duane Wessels
That's not how I remember it. From what I remember the objection from Duane wrt Kinkies wiki was more of a control and backup issue. docuwiki was selected by Duane as it's trivial to back up, and additionally the back-end content isn't hard to reuse for other purposes later on. I'm happy for Kin

Re: cvs commit: squid3/src/ICAP ICAPConfig.cc MsgPipeData.h

2006-03-03 Thread Duane Wessels
I started down that path and wasted about 4 days on it. Switching from normal pointers to ::Pointer is not pleasant for something that is used so pervasively. Not sure I see the problem. The typing overhead in the source should be the same as in the macro approach, except that it can be automat

Re: Logo

2006-02-24 Thread Duane Wessels
On Mon, 6 Feb 2006, Andrew Pantyukhin wrote: Some time ago I posted to the squid-users list, saying that the old logo looks great whith just a little shadow: Thanks! I've put your shaded logo in place.

Re: --disable-internal-dns

2006-02-24 Thread Duane Wessels
On Sat, 14 Jan 2006, Rafael Martinez Torres wrote: Hi: I need transiently to bypass squid3's own dns subsystem, so I compiled with ./configure --disable-internal-dns... Things use to go well, unless you get an alias address, i.e. http://www.google.es bash-2.04$ host www.google.es www.goog

Re: cvs commit: squid3/src/ICAP ICAPConfig.cc MsgPipeData.h

2006-02-24 Thread Duane Wessels
On Mon, 20 Feb 2006, Henrik Nordstrom wrote: On Fri, 17 Feb 2006 wessels wrote: Removed static requestLink() and requestUnlink() methods. Replaced them with HTTPMSGLOCK() and HTTPMSGUNLOCK() macros. Ugh.. why? Because I think its annoying to have to write if (foo) { foo->

Re: [squid2.5-icap] patch: X-Server-IP support

2005-12-22 Thread Duane Wessels
On Wed, 14 Dec 2005, olivier wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, I recently made a small patch to add the X-Server-IP feature in Squid2.5. Basically: send the origin server ip in the ICAP headers if it's available from the ip cache. I've been using it in (pre)prod

make distclean annoyance

2005-12-01 Thread Duane Wessels
Does anyone know how to make 'make distclean' work again for squid3? Making distclean in auth ... rm -rf basic/.deps digest/.deps negotiate/.deps ntlm/.deps ... Making distclean in . "Makefile", line 2358: Could not find auth/basic/.deps/basicScheme.Po "Makefile", line 2359: Could not find auth

Re: question about persistent connection between caches

2005-11-24 Thread Duane Wessels
On Thu, 24 Nov 2005, [EMAIL PROTECTED] wrote: when i read the two lines below(line 1098 in http.c),i have a question about persistent connection between caches else if (p->stats.n_keepalives_sent < 10) httpState->flags.keepalive = 1; else if ((double) p->stats.n_keepalives_recv / (

Re: cvs commit: squid3/src/ICAP ICAPModXact.cc

2005-11-23 Thread Duane Wessels
In squid 3 we should not need to use printf, which reduces the weight of 64 bit support a lot. find . -name '*.cc' | xargs grep -i printf | wc -l 1609

Adding ICAP to Squid-3

2005-11-11 Thread Duane Wessels
Some of you may know that Alex and myself have been working on adding ICAP to Squid-3. We have been committing the code to a branch on sourceforge, but we plan to bring the new code to squid-cache.org CVS soon. Our plan is to put the ICAP source code into a src/ICAP subdirectory. It will be comp

REPORT method?

2005-11-10 Thread Duane Wessels
Looks likes there is a new WebDAV method, named REPORT, that is used by subversion. Unless there are objections I'll add this method to squid-2 and -3. Duane W.

Re: .cvsignore files

2005-11-08 Thread Duane Wessels
On Tue, 8 Nov 2005, Serassio Guido wrote: Hi, What should be the standard content of a .cvsignore file ? As Alex said, basically any file that gets created by running 'make' on a clean tree. DW

Re: Google talk!

2005-11-08 Thread Duane Wessels
On Mon, 7 Nov 2005, Adrian Chadd wrote: Has anyone noticed that 'google talk' app, at least under macosx, is sending out the initial sign-in request with \005\001 before the CONNECT? Squid is failing and google talk then proceeds to log in with a CONNECT request that isn't prepended with the

Re: Summary of Squid-2.6 opinions

2005-11-02 Thread Duane Wessels
No answer yet: * Duane Wessels * Robert Collins I have mixed feelings about 2.6. On one hand I think "2.5" has lived too long and it looks bad that we have not incremented the stable branch number for years. But on the other hand I feel cheated because I remember being scolded

Re: cvs commit: squid3/src cf.data.pre dns_internal.cc structs.h

2005-09-27 Thread Duane Wessels
Since this patch I get compile errors on 'res_defnames': oops, looks like I was being stupid... I think there is no problem.

Re: cvs commit: squid3/src cf.data.pre dns_internal.cc structs.h

2005-09-27 Thread Duane Wessels
On Sun, 25 Sep 2005, [EMAIL PROTECTED] wrote: hno 2005/09/25 14:25:56 MDT Modified files: src cf.data.pre dns_internal.cc structs.h Log: Bug #1326: Use DNS search path from /etc/resolv.conf patch by Thien Vu with fixes by "Paul". Revision ChangesPath

Re: Squid-ICAP

2005-09-14 Thread Duane Wessels
On Tue, 13 Sep 2005, Ghislain Garcon wrote: Hello, I'm interrested in the ICAP patch for SQUID-Cache and I would like to know if the developpement for squid 3.x will start. What kind of help will be the more needed? Hi Ghislain, I am working on ICAP for Squid-3. The code is in the so

Re: LRU frequency

2005-07-18 Thread Duane Wessels
On Mon, 18 Jul 2005, Lucas Brasilino wrote: Hi! I looking around LRU informations to get into the code. I read a doc, I really don't remember where, that says LRU replacement policy runs every second. Is that correct ? So do heap LFUDA and GDSF ? It is true. This is the call in store.c:

Re: Dijjerizer redirector for squid

2005-07-15 Thread Duane Wessels
On Fri, 15 Jul 2005, daniele wrote: Hi! I don't know if that is the right place. Anyway, I wrote a simple redirect_program for Squid to redirect dijjerizable urls to a dijjer server. Maybe someone is interested: you can find the description and the code here: -> http://dijjer.org/wiki/Squ

Re: Need help with dns_query patch

2005-07-14 Thread Duane Wessels
On Wed, 13 Jul 2005, Luigi Gangitano wrote: Hi, I packaged an update squid 2.4.STABLE6 for Debian woody with the backported squid-2.5.STABLE9-dns_query from RedHat RHSA-2005-489, which is quite straight. With this patch squid fails[1] with rfc1035.c:410: rfc1035RRUnpack: Assertion `(*off)

Re: Time to merge squid3-ipv6 into HEAD ?

2005-07-12 Thread Duane Wessels
On Fri, 8 Jul 2005, Rafael Mart?nez Torres wrote: Try to get a global scope IPv6 address for your computer. If you are not provided native IPv6, try http://tunnelbroker.net... I'm trying to use tunnelbroker.net, but have not been successful yet. I guess my biggest concern about committing

Re: Time to merge squid3-ipv6 into HEAD ?

2005-07-07 Thread Duane Wessels
On Mon, 27 Jun 2005, Rafael Martinez Torres wrote: I think it's a good opportunity to merge now. Then, my merge wtih HEAd will became simpler. I am willing to attempt the merge and let you know how it goes... Duane W.

Squid-3 and gcc 2.95

2005-02-18 Thread Duane Wessels
I spent half a day trying to figure out why Squid-3-cvs was core dumping in the debugs() macro. Alex suggested that GCC 2.x may have bugs in its support for stringstream. With GCC 3.3 it no longer dumps core at that spot. Give this, shouldn't we be checking the GCC version in ./configure? DW

Job opportunity with The Measurement Factory

2005-01-18 Thread Duane Wessels
More info at http://www.measurement-factory.com/jobs.html Duane W.

Re: squid-2.5 / ICAP patch

2004-08-04 Thread Duane Wessels
I've finally committed your patch to the sourceforge CVS. They look good to me, but I have not tested them. Thanks a lot! Duane W.

Re: Write a filter with SQUID

2004-06-08 Thread Duane Wessels
On Mon, 7 Jun 2004, Manesh R wrote: > Hi, > > I have an infilter and outfilter modules that works with apache. I want to port the > same logic to squid also. Is some filtering modules are available for Squid? Should > I modify the Squid source, or can I write a modules that can be hooked to S

Re: Microsoft NTLM proxy authentication

2004-06-08 Thread Duane Wessels
On Mon, 7 Jun 2004, dilox wrote: > I'looking for Microsoft NTLM proxy authentication, but > http://devel.squid-cache.org/cgi-bin/diff2/ntlm?auth_rewrite says: > > Sorry, patch for ntlm branch of auth_rewrite in squid > is not yet available. Please try again in a few hours > If the problem persi

Re: Secure basic authentication. Is it possible?

2004-05-21 Thread Duane Wessels
On Fri, 21 May 2004, [koi8-r] "Slivarez ![koi8-r] " wrote: > Hi, ALL. > > I'm using squid-2.5.STABLE5+basic_auth(ncsa_auth). BUT simply > Sniffer can get USERID and PASSWORD from tcp packets. Is there any > possibility to make basic authentication more secure? Basic authentication is fundamen

Re: How does it work?

2004-05-21 Thread Duane Wessels
On Thu, 13 May 2004, Mati wrote: > > hi, > > I was wondering if there are some tools that you use to test squid? At my day job we have a functionality/compliance tool called Co-Advisor. We would be happy to give you access to the on-line version so you can test your features. In order to use

Re: Request

2004-03-31 Thread Duane Wessels
On Wed, 31 Mar 2004 [EMAIL PROTECTED] wrote: > My name is Tim Rainier. I'm running squid for the company I work for. We > have about 500 users, very small. > I'm interested in the security areas of squid. Quite a while back, I > requested that squid be fixed so that it can't possibly run as

Re: icap support in squid

2004-03-31 Thread Duane Wessels
On Wed, 31 Mar 2004, Peter V. Saveliev wrote: > ... > > I'm author of drweb-icapd server, and interested in ICAP support in > Squid proxy. It would be very nice, if somebody from developers has > agreed to help me on this topic. > > You can mail me: peet at drweb.com ('cause of moderated access

Re: Squid-2.5.STABLE5 still not ready

2004-02-11 Thread Duane Wessels
This change looks suspicious to me: @@ -199,11 +199,15 @@ static void ipcacheAddEntry(ipcache_entry * i) { -hash_link *e = hash_lookup(ip_table, i->hash.key); +ipcache_entry *e = (ipcache_entry *) hash_lookup(ip_table, i->hash.key); if (NULL != e) { - /* avoid colission */

Re: Squid-2.5.STABLE5 still not ready

2004-02-11 Thread Duane Wessels
> To make things even more strange this problem apparently is introduced > some time in November, but there has not been any ipcache or dlink related > changes from what I can see.. Really? src/ipcache.c had a minor change (+7 -3 lines) on Nov 28 and a very big change ( +89 -81 lines) on Dec 6.

Re: Squid logfile >2GB problem

2004-02-05 Thread Duane Wessels
On Wed, 4 Feb 2004, Luigi Gangitano wrote: > Hi, > I'm the Debian maintainer for squid and got a bugreport about the 3GB > limit on logfiles. I saw bug #319 and noticed that no solution was > implemented except the --enable-large-files option in HEAD. Is there any > way to backport that patch f

Re: new developer?

2004-01-13 Thread Duane Wessels
On Mon, 12 Jan 2004, Alex Ott wrote: > Hi all > > I'm developer from Jet Infosystems, Russia. We started development of own > ICAP-based content filtering system and I interested in use Squid as > ICAP-client, so i want to help in development of ICAP features of squid. I > have strong skills

Re: Why is no-cache ignored on pending objects?

2004-01-02 Thread Duane Wessels
On Sun, 21 Dec 2003, Henrik Nordstrom wrote: > There is a section in the clientProcessRequest2() on cache hit processing > relating to the no-cache flags on requests for STORE_PENDING objects which > I do not quite get what it is about, and the CVS log comment does not make > me any wiser.. wha

Re: permanently enabling some -DPURIFY features.

2003-09-03 Thread Duane Wessels
On Wed, 3 Sep 2003, Robert Collins wrote: > How do folk feel about us (post 3.0) permanently enabling the tidy > cleanup stuff currently enabled by -DPURIFY, leaving the assert() > changes and the mem pools disabling alone? > > I see no harm having squid behave well on shutdown, and it will hel

Re: squid-2.5 and coss

2003-08-27 Thread Duane Wessels
> Duane, would you be willing to forward port your squid-2.5 COSS work > to squid-3? I'm currently evaluating Squid-3 for a cache here and > I'd like to test both epoll and COSS out. Done. I've committed the code to squid-3. It compiles, but I haven't tested it. Thanks, Rob, for the SwapDir opt

Re: squid-2.5 and coss

2003-08-27 Thread Duane Wessels
> Here's a fun suggestion from our friend Robert - how about creating a > _directory_ instead of a file for the COSS cachedir? Then we can place > the store logfile in there, the coss storefile in there _and_ any other > metadata. It'd make life a whole lot easier and mean you won't get bitten > by

Re: Many wrong debug section in 2.5 and HEAD

2003-08-20 Thread Duane Wessels
On Sun, 17 Aug 2003, Serassio Guido wrote: > Hi, > > I have just found that there are many (more than 130) wrongly used > debug(50,x) section in both 2.5 and HEAD. The "debug(50,x)" crap is probably my fault. At one time I was using section 50 for system-level errors, where we would want to c

Re: squid-2.5 and coss

2003-08-20 Thread Duane Wessels
> Well, theoretically, I should be able to easily forwardport my COSS changes > to 3.0 once I know it works. Believe me, once its running I'm going to be > looking to move to 3.0. kqueue and epoll are my next thing to sell. :) Adrian, FYI, my coss changes have not been commited to squid-3 yet bec

Re: Squid-2.5 bugs to kill

2003-08-14 Thread Duane Wessels
On Sun, 10 Aug 2003, Henrik Nordstrom wrote: > There is now 4 bugs on the list of Squid-2.5 issues classified as > worth to fix during the 2.5 cycle, preferably soonish to have them > included in the upcoming 2.5.STABLE4 release. Not in your list is a relatively minor ICP timeout bug: #736: IC

MAGIC1 in src/fs/aufs/store_asyncufs.h

2003-08-04 Thread Duane Wessels
We have: #define NUMTHREADS (Config.cacheSwap.n_configured*16) #define MAGIC1 (NUMTHREADS*Config.cacheSwap.n_configured*5) which means: #define MAGIC1 (Config.cacheSwap.n_configured*16*Config.cacheSwap.n_configured*5) It seems wrong to me that MAGIC1 is proportional to the SQUARE o

Re: Puzzled about persistent connection reuse

2003-07-30 Thread Duane Wessels
On Wed, 30 Jul 2003, Kinkie wrote: > Kinkie <[EMAIL PROTECTED]> writes: > > > Duane Wessels <[EMAIL PROTECTED]> writes: > > Ok, got it. > > The setup is: > > > httpd_accel_host 1.2.3.4 > httpd_accel_port 81 > httpd_accel_single_host on >

Re: Puzzled about persistent connection reuse

2003-07-29 Thread Duane Wessels
You are missing arguments in these "printf" calls: > debug(17,3)("pconnPop: key is %s\n"); > debug(17,3)("pconnPop: hptr is %p\n");

Re: Making statCounter.syscalls.disk counters more consistent

2003-07-17 Thread Duane Wessels
On Thu, 18 Jul 2003, Robert Collins wrote: > This won't increment the counters: the statCounter used by cachemanager > is not the statCounter available to the external unlinkd process. yeah, my mistake, it belongs in the other part. > None of the above are safe. They are all potentially racey

Making statCounter.syscalls.disk counters more consistent

2003-07-17 Thread Duane Wessels
The following patch is intended to make Squid be more consistent with the statCounter.syscalls.disk counters. Currently they are incremented by UFS and Diskd, but not by AUFS and unlinkd. I'd like to hear from a pthreads expert that the changes are safe for AUFS. Index: src/unlinkd.c ==

of possible interest to ICAP developers

2003-06-19 Thread Duane Wessels
http://shweby.sourceforge.net/ I find their logo interesting, especially since the badmouth Squid in http://shweby.sourceforge.net/doc.php

http_reply_access and TCP_DENIED

2003-06-09 Thread Duane Wessels
Should requests that are denied due to http_reply_access be logged with TCP_DENIED, the HIT/MISS/etc code, or something altogether new? Index: client_side.c === RCS file: /squid/squid/src/client_side.c,v retrieving revision 1.561.2.3

Re: a tricky problem with using events

2003-06-09 Thread Duane Wessels
> I traced down the problem by measuring time consumed by each stage from > the beginning of the event till httpReadReply() gets called. I found that > there're two cases for these extremely slow events: > case 1 (total time is 400+ms) : > 2003/06/09 01:33:42| peoridcalFire: 0x8457ea8 at 1055136822

Re: a patch for coss

2003-05-30 Thread Duane Wessels
On Thu, 23 May 2003, Robert Collins wrote: > I've no objection - but would like to see the patch :}. Here is the patch with fixed (512 byte) blocksize. I can make it configurable. Index: src/fs/coss/async_io.c === RCS file: /sq

Re: Basic bourne shell-based authenticator module

2003-02-13 Thread Duane Wessels
> The only problem is that the authenicator module processes that squid > spawns don't get killed when squid is killed. It also seems to keep > opening many more authenicator module processes while it runs even > though I have limited it toi 5 children in squid.conf. > > Any suggestions? Your prog

Re: 2.5.STABLE2 around the corner

2003-02-12 Thread Duane Wessels
On Wed, 12 Feb 2003, Henrik Nordstrom wrote: > Does any of this in your opinion block a 2.5.STABLE2 release, or would > it be ok to fix these (if needed) after 2.5.STABLE2 is released? My motivation is to fix them so I don't have to make excuses or explain bugs in the book. Assuming that ther

Re: 2.5.STABLE2 around the corner

2003-02-12 Thread Duane Wessels
On Wed, 12 Feb 2003, Henrik Nordstrom wrote: > >From what I can tell everything is now in place for a 2.5.STABLE2 > release, and the current 2.5.STABLE1-20020212 snapshot is to be regarded > as a 2.5.STABLE2 release candidate. > > If you can please give this a try to make sure there is nothing

Re: 2.6 commits

2003-02-12 Thread Duane Wessels
On Mon, 11 Feb 2003, Robert Collins wrote: > Duane, > any chance Henrik and I can convince you to commit to the 3.0 tree, not > the 2.6 tree? okay, sorry I wasn't paying attention.

  1   2   >