Re: [squid-users] logfileHandleWrite: daemon:/var/logs/access.log: error writing ((32) Broken pipe)

2015-02-12 Thread Priya Agarwal
These are the output: root@t4240qds:~# /usr/sbin/squid ls -al /var/logs/access.log 2015/02/13 04:38:18| http_port_port: missing Port: l FATAL: Bungled (null) line 0: Squid Cache (Version 3.4.7): Terminated abnormally. CPU Usage: 0.006 seconds = 0.003 user + 0.003 sys Maximum Resident Size: 11056 K

Re: [squid-users] squid authentication to remote sql server

2015-02-12 Thread snakeeyes
Hi Amos , I had changed the table name but still no luck : I connected to mysql server from remote other sql tool and it worked , I used squid/squid user/pwd in the tool and no problem So im sure the issue is in squid side , I did as u told me , I changed the password table to ==>squid tab

Re: [squid-users] when/who login in to proxy?

2015-02-12 Thread Amos Jeffries
On 13/02/2015 10:27 a.m., Alan Boba wrote: > I've been able to set up digest file authentication on the Squid proxy by > adding the following to squid3.conf. > auth_param digest program /usr/lib/squid3/digest_file_auth -c > /etc/squid3/passwordsauth_param digest realm proxyacl authenticated > pr

Re: [squid-users] 2.7.9 to 3.5 CentOS No-Cache

2015-02-12 Thread Amos Jeffries
On 13/02/2015 1:24 p.m., Tory M Blue wrote: > Greetings all, been a bit. > > So I'm working on a new server config and loaded the latest 3.5 and have > tweaked my 2.7 configs a bit. Things are working but I've got one that I > can't figure out. > > I have a test that insures that objects with an

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/02/2015 8:54 a.m., Yuri Voinov wrote: > So simple. > > I want to see only one additional parameter. > > idle_timeout. > > When I specify it to 0 - by default - all started rewriter > processess remains after user requests, > > but! it I speci

[squid-users] 2.7.9 to 3.5 CentOS No-Cache

2015-02-12 Thread Tory M Blue
Greetings all, been a bit. So I'm working on a new server config and loaded the latest 3.5 and have tweaked my 2.7 configs a bit. Things are working but I've got one that I can't figure out. I have a test that insures that objects with an explicit " Cache-Control: no-cache" header are NOT cached

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/02/2015 8:19 a.m., Yuri Voinov wrote: > BTW, > > the expected behavior of a directive - > > url_rewrite_children 100 startup=0 idle=1 concurrency=0 > > Starts with 0 initial processes, > > then starts when requests up to 100, > > and after s

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/02/2015 9:25 a.m., Yuri Voinov wrote: > BTW, > > now I have average 300-400 Mb total memory consumption over all > working instances of squidGuard. And see only one problem - idle > processes never dies after peak hours, and therefore idle= >

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/02/2015 8:05 a.m., Yuri Voinov wrote: > I want to say: > > A system with low consumpted memory will starts processes more > quickly against system with low free memory and overloaded cheduler > and more sleep processes in most cases. > > So, IM

Re: [squid-users] light weight ICAP server that isn't dead :o)

2015-02-12 Thread Alex Rousskov
On 02/09/2015 04:40 PM, Amos Jeffries wrote: > You might also look into eCAP. The design intention is that you build an > eCAP module which can plug into either the c-icap engine for access over > ICAP I did not realize c-icap added eCAP support. Christos, is that true? We are adding eCAP suppor

[squid-users] when/who login in to proxy?

2015-02-12 Thread Alan Boba
I've been able to set up digest file authentication on the Squid proxy by adding the following to squid3.conf. auth_param digest program /usr/lib/squid3/digest_file_auth -c /etc/squid3/passwordsauth_param digest realm proxyacl authenticated proxy_auth REQUIREDhttp_access allow authenticated I h

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Marcus Kool
On 02/12/2015 06:11 PM, Yuri Voinov wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I talking not about another redirector. But about smart Squid behaviour with redirector's children. If I wanted to change redirector - I would have already done it. I am aware of the existence of ufdvGuar

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 BTW, now I have average 300-400 Mb total memory consumption over all working instances of squidGuard. And see only one problem - idle processes never dies after peak hours, and therefore idle= parameter is meaningless. 13.02.15 2:06, Marcus Kool пише

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am quite satisfied with the existing configuration and just want more flexibility in the management of redirectors. ;) 13.02.15 2:06, Marcus Kool пишет: > Yuri, > > I suggest to consider using ufdbGuard instead of squidGuard. > Besides being faste

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I talking not about another redirector. But about smart Squid behaviour with redirector's children. If I wanted to change redirector - I would have already done it. I am aware of the existence of ufdvGuard. Moreover - I've tried to build it on my syst

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Marcus Kool
Yuri, I suggest to consider using ufdbGuard instead of squidGuard. Besides being faster is has a different structure: the redirector that squid starts is a small lightweight process that forwards requests to ufdbguardd, a multithreaded daemon which has the URL database in memory. The database is

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 So simple. I want to see only one additional parameter. idle_timeout. When I specify it to 0 - by default - all started rewriter processess remains after user requests, but! it I specify it over 0 in seconds - all idle rewriters after timeout must

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 BTW, the expected behavior of a directive - url_rewrite_children 100 startup=0 idle=1 concurrency=0 Starts with 0 initial processes, then starts when requests up to 100, and after some idle timeout (and be better to specify this timeout to accompl

Re: [squid-users] Portal Splash Pages example on squid 3.3.13

2015-02-12 Thread Amos Jeffries
On 13/02/2015 7:14 a.m., amitinfo2k wrote: > Thanks I have rearranged the rules and now after the session is expired > I am seeing the page with following content : > - > Internal Error: Missing Template /etc/squid/splash.html > --

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I want to say: A system with low consumpted memory will starts processes more quickly against system with low free memory and overloaded cheduler and more sleep processes in most cases. So, IMHO better solution is possibility to shutdown idle childre

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 13.02.15 0:49, Amos Jeffries пишет: > On 13/02/2015 7:01 a.m., Yuri Voinov wrote: >> Hi gents, > >> subj. > >> And, of course - question. How to do that? I've don't seen this, >> if it exists. > >> For example, for this config stub: > >> url_rewr

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/02/2015 7:01 a.m., Yuri Voinov wrote: > Hi gents, > > subj. > > And, of course - question. How to do that? I've don't seen this, if > it exists. > > For example, for this config stub: > > url_rewrite_program /usr/local/bin/squidGuard -c > /u

Re: [squid-users] Portal Splash Pages example on squid 3.3.13

2015-02-12 Thread amitinfo2k
Thanks I have rearranged the rules and now after the session is expired I am seeing the page with following content : - Internal Error: Missing Template /etc/squid/splash.html - It's like it is n

[squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi gents, subj. And, of course - question. How to do that? I've don't seen this, if it exists. For example, for this config stub: url_rewrite_program /usr/local/bin/squidGuard -c /usr/local/squidGuard/squidGuard.conf url_rewrite_children 100 startu

Re: [squid-users] benefits of usingext_kerberos_ldap_group_aclinstead of ext_ldap_group_acl

2015-02-12 Thread Amos Jeffries
On 13/02/2015 5:41 a.m., Simon Stäheli wrote: > > hmh, HAVE_KRB5 seems not to be set in include/autoconf.h > > What is the correct way to provide squid the path to the kerberos header > files? > > ./configure —help doesn’t show a useful option as --with-krb5-config= seems > not to be the right

Re: [squid-users] benefits of usingext_kerberos_ldap_group_aclinstead of ext_ldap_group_acl

2015-02-12 Thread Simon Stäheli
> > > From: "Markus Moeller" > Subject: Re: [squid-users] benefits of > usingext_kerberos_ldap_group_aclinstead of ext_ldap_group_acl > Date: 11. Februar 2015 22:32:11 MEZ > To: squid-us...@squid-cache.org > > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> On 20/01

Re: [squid-users] Portal Splash Pages example on squid 3.3.13

2015-02-12 Thread Amos Jeffries
On 13/02/2015 3:12 a.m., amitinfo2k wrote: > Splash is just a static HTML page as folllows: > -- > /etc/squid/splash.html > -- > > > splash screen example > > >

Re: [squid-users] A little help with squid and e-cap

2015-02-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Squid loads ecap service only one time. When starts. 12.02.15 20:40, Luis Miguel Silva пишет: > Thanks Amos! > > I understand it loads a library (probably only once) but, what > about the actual ecap service object? Does it load once per page > reque

Re: [squid-users] A little help with squid and e-cap

2015-02-12 Thread Luis Miguel Silva
Thanks Amos! I understand it loads a library (probably only once) but, what about the actual ecap service object? Does it load once per page request? Or does it pre-load it every time? The reason why I'm asking this is that I would like to create a ecap modifier service that reads a big list from

Re: [squid-users] Squid 3.5.1 intercept / Forwarding loop detected for

2015-02-12 Thread Luis Miguel Silva
I bumped into this same "forwarding loop" problem yesterday! In my case, it was because I had two transparent proxies in the same network and was basically redirecting traffic twice: [internet] <-> [appliance 1] <-> [appliance 2] <-> [client computer] I mistakenly added iptables redirect rules in

Re: [squid-users] Portal Splash Pages example on squid 3.3.13

2015-02-12 Thread amitinfo2k
Splash is just a static HTML page as folllows: -- /etc/squid/splash.html -- splash screen example This is splash screen

Re: [squid-users] Portal Splash Pages example on squid 3.3.13

2015-02-12 Thread Amos Jeffries
On 13/02/2015 1:21 a.m., amitinfo2k wrote: > Thanks I changed the config now the service is up no errors in the logs but, > I don't see spash screen > any time. Following the configuration i did with default squid config > --

Re: [squid-users] Squid 3.5.1 intercept / Forwarding loop detected for

2015-02-12 Thread Eliezer Croitoru
Hey Naser, What OS does the squid server run upon and what OS is the router running? Also what rules have you used on each machine? and what are the exact network topology you have there? Eliezer On 12/02/2015 12:52, naser sonbaty wrote: Hi guys, I need your help with setting squid 3.5.1 wi

Re: [squid-users] Portal Splash Pages example on squid 3.3.13

2015-02-12 Thread amitinfo2k
Thanks I changed the config now the service is up no errors in the logs but, I don't see spash screen any time. Following the configuration i did with default squid config # Set up the session hel

Re: [squid-users] logfileHandleWrite: daemon:/var/logs/access.log: error writing ((32) Broken pipe)

2015-02-12 Thread Amos Jeffries
On 13/02/2015 12:08 a.m., Antony Stone wrote: > On Thursday 12 Feb 2015 at 11:01, Priya Agarwal wrote: > >> My permissions are set correct. > > Please show us the output of: > > ls -al /var/logs/access.log ... and squid -v > >> 2015/02/12 11:44:06| Logfile: opening log daemon:/var/logs/acces

Re: [squid-users] Squid 3.5.1 intercept / Forwarding loop detected for

2015-02-12 Thread Amos Jeffries
On 13/02/2015 12:40 a.m., Antony Stone wrote: > On Thursday 12 Feb 2015 at 11:26, naser sonbaty wrote: > >> Hi, >> >> Internet is connected to Router PC >> >> Only trafic to port 80 is send to squid. > > Yes, I know that, but traffic *from* where? > > Please answer the question below. Even bett

Re: [squid-users] Squid 3.5.1 intercept / Forwarding loop detected for

2015-02-12 Thread Antony Stone
On Thursday 12 Feb 2015 at 11:26, naser sonbaty wrote: > Hi, > > Internet is connected to Router PC > > Only trafic to port 80 is send to squid. Yes, I know that, but traffic *from* where? Please answer the question below. Even better, show us the redirect rule you're using on the router to

Re: [squid-users] Squid 3.5.1 intercept / Forwarding loop detected for

2015-02-12 Thread naser sonbaty
Hi, Internet is connected to Router PC Only trafic to port 80 is send to squid. thx On Thu, Feb 12, 2015 at 11:58 AM, Antony Stone < antony.st...@squid.open.source.it> wrote: > On Thursday 12 Feb 2015 at 10:52, naser sonbaty wrote: > > > Hi guys, > > > > I need your help with setting squid 3.5

Re: [squid-users] logfileHandleWrite: daemon:/var/logs/access.log: error writing ((32) Broken pipe)

2015-02-12 Thread Antony Stone
On Thursday 12 Feb 2015 at 11:01, Priya Agarwal wrote: > My permissions are set correct. Please show us the output of: ls -al /var/logs/access.log > 2015/02/12 11:44:06| Logfile: opening log daemon:/var/logs/access.log > 2015/02/12 11:44:06| Logfile Daemon: opening log /var/logs/access.log > 20

[squid-users] logfileHandleWrite: daemon:/var/logs/access.log: error writing ((32) Broken pipe)

2015-02-12 Thread Priya Agarwal
Hi, I know this must be a very common error. But I am unable to remove it. My permissions are set correct. Network connection is also fine. Here is my log: root@t4240qds:~# /usr/sbin/squid -NCd1 2015/02/12 11:44:06| Set Current Directory to /var/cache/squid 2015/02/12 11:44:06| Starting Squid Cac

Re: [squid-users] Squid 3.5.1 intercept / Forwarding loop detected for

2015-02-12 Thread Antony Stone
On Thursday 12 Feb 2015 at 10:52, naser sonbaty wrote: > Hi guys, > > I need your help with setting squid 3.5.1 with intercept. > My topolgy Clients PC <--> Router PC <--> SquidPC Where is the Internet connection in the above diagram? > Router: > Send trafic from 80 to squid 192.168.15.2:3129

[squid-users] Squid 3.5.1 intercept / Forwarding loop detected for

2015-02-12 Thread naser sonbaty
Hi guys, I need your help with setting squid 3.5.1 with intercept. My topolgy Clients PC <--> Router PC <--> SquidPC Router: Send trafic from 80 to squid 192.168.15.2:3129 my config: acl localnet src 10.0.0.0/8 # RFC1918 possible internal network acl localnet src 172.16.0.0/12 # RFC1918 pos

Re: [squid-users] Squid Memory Leak with certain FTP requests?

2015-02-12 Thread Amos Jeffries
On 12/02/2015 9:03 p.m., Silamael Darkomen wrote: > > I will file a proper bug report with debug output and such when I'm back > at work next monday. > Any idea what's wrong here? For me it seems that the index.html Squid is > generating for FTP requests with just an directory is not freed internal

Re: [squid-users] Squid 3.5.1 NTLM and LDAP

2015-02-12 Thread Amos Jeffries
On 12/02/2015 1:35 a.m., Rich549 wrote: > *Ok, I've made all of the advised changes and it still didn't work. > > I've just tried pasting my helper command into command prompt and it just > seems to hang. I tried the following:* > The helper takes -b string as the base DN and appends the dynam

Re: [squid-users] A little help with squid and e-cap

2015-02-12 Thread Amos Jeffries
On 12/02/2015 6:54 p.m., Luis Miguel Silva wrote: > Dear all, > > This might not be the ideal place to ask questions about e-cap but, since > e-cap's mailing list is not working, I decided to ask my question here. > > So, here goes: > - *My ecap service only seems to work on some pages*... > -- I

Re: [squid-users] Problems with squid 3.5.1

2015-02-12 Thread FredB
> remove the files. If your cache is on a separate file system then it > may be quicker and simpler just to unmount the file system and > reinitialise it. > Yes I agree, cache in a separate partition is a good advice, like that you can easily format (just a few seconds) Regards, Fred

Re: [squid-users] A little help with squid and e-cap

2015-02-12 Thread Yuri Voinov
Start from here: http://wiki.squid-cache.org/ConfigExamples#Content_Adaptation_features 12.02.15 11:54, Luis Miguel Silva пишет: Dear all, This might not be the ideal place to ask questions about e-cap but, since e-cap's mailing list is not working, I decided to ask my question here. So, h

Re: [squid-users] Squid Memory Leak with certain FTP requests?

2015-02-12 Thread Silamael Darkomen
On 11.02.2015 21:05, Amos Jeffries wrote: >>> Some FTP files pointless to cache. >> >> Sure, maybe some FTP files are not to be cached. >> >>> >>> If it need just once. For what cache it? >> >> I do not want to cache any. And I think a 'cache deny all' does that. > > Correct. > >> Nevertheles