Re: [squid-users] Squid tcp_outgoing_mark issue

2017-06-20 Thread Amos Jeffries
On 20/06/17 13:46, Sabu Thaliyath wrote: Hi, I was using the squid directive "tcp_outgoing_mark" in squid 3.3 and it was working for me. However, in 3.5 version, it is not marking the packets. I was using it as tcp_outgoing_mark 0x5 all I was compiling squid using following options for confi

Re: [squid-users] Squid authentication problem (Amos Jeffries)

2017-06-20 Thread Amos Jeffries
On 20/06/17 10:50, Sonya Roy wrote: Hi, Thanks for the links. So I tried what you suggested and for testing, I was using this simple config:- http_port 8080 auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwords auth_param basic realm proxy external_acl_type checkclient c

[squid-users] annotation and fast / slow acl

2017-06-20 Thread FUSTE Emmanuel
Hello, I need to select a cache peer based on the user group. As cache_peer_access need a fast acl to have predicable result, I tried to - annotate transactions with "note" - match the annotation with a fast acl - use the acl in the cache_peer_access directive But I still got warning about slow a

Re: [squid-users] annotation and fast / slow acl

2017-06-20 Thread FUSTE Emmanuel
Le 20/06/2017 à 12:55, FUSTE Emmanuel a écrit : > Hello, > > I need to select a cache peer based on the user group. > As cache_peer_access need a fast acl to have predicable result, I tried to > - annotate transactions with "note" > - match the annotation with a fast acl > - use the acl in the cach

Re: [squid-users] Squid authentication problem (Amos Jeffries)

2017-06-20 Thread Sonya Roy
Thanks for all the help. I just checked the /etc/squid/passwords file, turns out I mistakenly used htpasswd -c when saving the last username, password and all the previous ones got overwritten. After fixing that, the config file I wrote earlier worked fine. With regards, Sonya Roy On Tue, Jun 20

[squid-users] Reverse DNS Lookup for client IPs

2017-06-20 Thread Ralf Hildebrandt
I have to chime in on the "Reverse DNS Lookup for client IPs" thread back in Feb 2016. I tried redefining the logging format for url_rewrite_extras and store_id_extras in the config, but that wouldn't work. I had to change the file src/cf.data.pre and recompiled, after that the number of reverse l

Re: [squid-users] annotation and fast / slow acl

2017-06-20 Thread Amos Jeffries
On 20/06/17 22:55, FUSTE Emmanuel wrote: Hello, I need to select a cache peer based on the user group. As cache_peer_access need a fast acl to have predicable result, I tried to - annotate transactions with "note" - match the annotation with a fast acl - use the acl in the cache_peer_access dire

Re: [squid-users] annotation and fast / slow acl

2017-06-20 Thread FUSTE Emmanuel
Hello, Thank you, it help a lot and clarify things. Emmanuel. Le 20/06/2017 à 14:46, Amos Jeffries a écrit : > On 20/06/17 22:55, FUSTE Emmanuel wrote: >> Hello, >> >> I need to select a cache peer based on the user group. >> As cache_peer_access need a fast acl to have predicable result, I tr

[squid-users] FATAL error while using dstdomain directive

2017-06-20 Thread Eric C. Kom
Good day Folks, Please I tried to block websites like youtube.com and facebook.com using acl dstdomain directive without success. Squid replied the above error: erickom@proxy:/etc/squid3$ sudo squid3 -z 2017/06/20 15:37:37| ERROR: '.google.com' is a subdomain of 'google.com' 2017/06/20 15:37:37|

Re: [squid-users] FATAL error while using dstdomain directive

2017-06-20 Thread Ralf Hildebrandt
* Eric C. Kom : > Good day Folks, > Please I tried to block websites like youtube.com and facebook.com using > acl dstdomain directive without success. > > Squid replied the above error: > erickom@proxy:/etc/squid3$ sudo squid3 -z > 2017/06/20 15:37:37| ERROR: '.google.com' is a subdomain of 'goo

[squid-users] customize timeformat in error pages

2017-06-20 Thread Dieter Bloms
Hello, I want to customize the time format for %t in my error pages. For the logfiles it is in strftime format like %{%d.%m:%Y %H:%M:%S}tl, but when I put it in my error page templates like %{%d.%m:%Y %H:%M:%S}t, squid doesn't consider it. Is there any way to define the timeformat for %t in the er

Re: [squid-users] FATAL error while using dstdomain directive

2017-06-20 Thread Eric C. Kom
​Sorry for not seen​ On 20 June 2017 at 16:09, Ralf Hildebrandt wrote: > * Eric C. Kom : > > Good day Folks, > > Please I tried to block websites like youtube.com and facebook.com > using > > acl dstdomain directive without success. > > > > Squid replied the above error: > > erickom@proxy:/etc/s

Re: [squid-users] FATAL error while using dstdomain directive

2017-06-20 Thread Eric C. Kom
Sorry for not seen it. Running fine now: erickom@proxy:/etc/squid3$ sudo squid3 -z 2017/06/20 16:30:15| Squid is already running! Process ID 1584 But still the block websites are still accessible. On 20 June 2017 at 16:24, Eric C. Kom wrote: > ​Sorry for not seen​ > > On 20 June 2017 at 16:0

Re: [squid-users] FATAL error while using dstdomain directive

2017-06-20 Thread Antony Stone
On Tuesday 20 June 2017 at 16:25:47, Eric C. Kom wrote: > Sorry for not seen it. > Running fine now: > erickom@proxy:/etc/squid3$ sudo squid3 -z > 2017/06/20 16:30:15| Squid is already running! Process ID 1584 > > But still the block websites are still accessible. Please, either: 1. show us an

Re: [squid-users] FATAL error while using dstdomain directive

2017-06-20 Thread Matus UHLAR - fantomas
On 20.06.17 15:47, Eric C. Kom wrote: Squid replied the above error: erickom@proxy:/etc/squid3$ sudo squid3 -z 2017/06/20 15:37:37| ERROR: '.google.com' is a subdomain of 'google.com' 2017/06/20 15:37:37| ERROR: You need to remove '.google.com' from the ACL named 'ban_list' FATAL: Bungled /etc/sq

Re: [squid-users] customize timeformat in error pages

2017-06-20 Thread Amos Jeffries
On 21/06/17 02:13, Dieter Bloms wrote: Hello, I want to customize the time format for %t in my error pages. For the logfiles it is in strftime format like %{%d.%m:%Y %H:%M:%S}tl, but when I put it in my error page templates like %{%d.%m:%Y %H:%M:%S}t, squid doesn't consider it. Is there any way