Re: [squid-users] The Squid Cache (version 2.5.STABLE3-20030709) died.

2003-08-19 Thread Marc Elsen
e wrote: > > Hi, > > After three or four days installed Squid 2.5.STABLE3, I've got following > message. but server was running OK. > Has any one had same experience? what is this all about? > > == > You've encountered a fatal error in the Squid Cache versio

Re: [squid-users] How to disable TCP dead detection?

2003-08-19 Thread Henrik Nordstrom
On Wednesday 20 August 2003 07.34, Vladimir wrote: > This is 2.4 Stable 7 Then you should consider upgrading. Regards Henrik

Re: [squid-users] How to disable TCP dead detection?

2003-08-19 Thread Vladimir
This is 2.4 Stable 7 I will try out what you suggest. Vladimir --- Henrik Nordstrom <[EMAIL PROTECTED]> wrote: > On Tuesday 19 August 2003 11.41, Vladimir wrote: > > Hi Henrik, > > > > Well, i notice something different behaviour. Here > is > > cache.log extract: > > > >

[squid-users] Problems getting delay pools to work with ident

2003-08-19 Thread John Nielsen
I am having trouble getting delay pools to work with ident... I am running Squid-2.5.STABLE3 on OpenBSD 3.3 Clients are running Windows 98 with Identd (from identd.sourceforge.net) I have the following in my squid.conf acl allowed_hosts src 10.0.0.0/24 acl good_guys ident_regex -i laerer acl ba

Re: [squid-users] Squid3: ftp gateway in accelerator mode

2003-08-19 Thread Robert Collins
On Wed, 2003-08-20 at 13:02, Jim Flowers wrote: > Thanks, that's very clear. I can do the rewriting OK. What I can't figure > out is what directive(s) I use to accomplish "forwarded using FTP to the FTP > server" as I thought that was the function of cache_peer originserver. How > do I tell s

Re: [squid-users] Squid3: ftp gateway in accelerator mode

2003-08-19 Thread Jim Flowers
Thanks, that's very clear. I can do the rewriting OK. What I can't figure out is what directive(s) I use to accomplish "forwarded using FTP to the FTP server" as I thought that was the function of cache_peer originserver. How do I tell squid where the ftp server is (not on the same host) and

Re: [squid-users] File Descriptors

2003-08-19 Thread Adam Aube
>Now I am having errors show up in my log saying I am running on of file >descriptors. Using ulimit (or its equivalent), set the hard and soft limits both before compiling and before running Squid. This has been recently discussed on the list (today, I think), and also several times in the arch

Re: [squid-users] Problems

2003-08-19 Thread Serge Paquin
Hello Jim, I tried debug. I found the lines where I get the 400 error but I don't see anything in the log from top to bottom that says anything about errors. Any ideas of something else I can try? Somethink that I might be looking for? Serge. - Original Message - From: To: "Serge Paqu

[squid-users] The Squid Cache (version 2.5.STABLE3-20030709) died.

2003-08-19 Thread e
Hi, After three or four days installed Squid 2.5.STABLE3, I've got following message. but server was running OK. Has any one had same experience? what is this all about? == You've encountered a fatal error in the Squid Cache version 2.5.STABLE3-20030709. If a

Re: [squid-users] acl question

2003-08-19 Thread cc
Henrik Nordstrom wrote: > On Tuesday 19 August 2003 12.30, cc wrote: > > >>acl noie browser -i MSIE >>deny_info ERR_NOIE noie >>http_access deny noie >> >>The above, when uncommented makes squid throw a >>segmentation fault. When I recomment the three >>lines, Squid works fine. > > > Probably

RE: [squid-users] NTLM but still got pop-ups /w IE ?

2003-08-19 Thread Arief Kurniawan
With wbinfo -a, did you see both a plain text and challenge response reply? Here's the exact result I from wbinfo -a and wbinfo -t # ./wbinfo -a mydomain\\myuser%mypass plaintext password authentication succeeded challenge/response password authentication succeeded #./wbinfo -t Secret is good Doe

[squid-users] AuthenticateNTLMFixErrorHeader

2003-08-19 Thread Simon Bryan
Hi all, Came in this morning to find my Squid shutdown and many references to the following in the logs, I have no idea what is causing this or even if they are related. We are using NTLM authentication and are not experiencing any problems that have been brought to my attention. Squid -v gives: S

[squid-users] Squid 2.5Stable3 cores

2003-08-19 Thread daniel . jarboe
Squid is coreing frequently now (every few minutes). This is a 2.5STABLE3 on RH 7.2 for s/390. This GDB was configured as "s390-redhat-linux"... (no debugging symbols found)... Core was generated by `(squid) -D'. Program terminated with signal 6, Aborted. Reading symbols from /lib/libcrypt.so.1..

[squid-users] File Descriptors

2003-08-19 Thread Paul . Fiero
I have finally managed to get WCCPv2 working on my box. Works great. Now I am having errors show up in my log saying I am running on of file descriptors. I have checked my /proc/sys/fs/file-max and /proc/sys/fs/inode-nr files and they both are set pretty high. When I check the cachemgr runtime

Re: [squid-users] Squid Peer´s problem.

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 21.57, Ampugnani, Fernando wrote: > Henrik, > which is the best way to restrict all sites that go to internet in > the second squid box except those I permit? By only allowing access in http_access to the sites you permit. > I must do they in first squid box or in

RE: [squid-users] Sonicwall and empty url

2003-08-19 Thread Alvaro Figueroa
You must use a few configuration parameters on squid.conf that tells squid it is suppposed to run in 'trasparent' mode. I am not very familiar myself with squid but I know these options are fairly well documented inside the squid.conf file. Regards, Alvaro Figueroa -Mensaje original- De

[squid-users] authenticateNTLMHandleReply: called with no result string

2003-08-19 Thread daniel . jarboe
We changed squid to start as squid so we could try to get a core for a different problem, but we've been seeing this one once or twice a day: In /var/log/messages I get: (squid): authenticateNTLMHandleReply: called with no result string squid[PID]: Squid Parent: child process PID exited due to si

Re: [squid-users] Squid Peer´s problem.

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 19.42, Ampugnani, Fernando wrote: > When I go for Internet through second squid box, first squid box > ask me user and password and don´t give access. See the cache_peer directive on the second Squid.. Regards Henrik -- Donations welcome if you consider my Free Squid

Re: [squid-users] Squid Report Issue

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 19.07, Jim_Brouse/[EMAIL PROTECTED] wrote: > Is it possible for some reason that squid split the acccess.log > file so now i need to cat them together? Squid never splits the access.log. What Squid may do is to rotate access.log into access.log.1, access.log.2, access

Re: [squid-users] Modify HTTP Headers in httpd-accelerator mode

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 17.06, Reuben Pearse wrote: > I was wondering if I could stick Squid in front of the Domino box > in httpd-accelerator mode, and use it to modify the HTTP Headers > and tell static content not to expire. There is no configuration support for this, but if you know a littl

Re: [squid-users] acl question

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 12.30, cc wrote: > acl noie browser -i MSIE > deny_info ERR_NOIE noie > http_access deny noie > > The above, when uncommented makes squid throw a > segmentation fault. When I recomment the three > lines, Squid works fine. Probably this: http://www.squid-cache.org/Versio

Re: [squid-users] squid ntlm/basic authentication

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 08.02, jonathan soong wrote: > I was wondering, in general, do proxies always support Basic, and > sometimes support NTLM? Basic is part of the HTTP standard and is usually supported by all HTTP related software. NTLM is a Microsoft invention, violating important aspec

Re: [squid-users] distributed http packets on transparent web cache

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 05.18, Nont Banditwong wrote: > I use squid-2.5.STABLE3 and WCCPv2 and ISO 12.0(25) > I've look into wccpv2.c it seem like WCCPv2 is not > fully implemented, right ? Probably right. It was not last time I looked and I have not heard of any WCCPv2 related development in

Re: [squid-users] Stopping windows update

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 03.00, Fajar Priyanto wrote: > Hello guys, > I'm sorry for putting this question on the list because it's > related to squidGuard more than squid I think. Or both. > > 1. Can windowsupdate.microsoft.com be denied rather than > redirected? Being a redirector squidGuard can

Re: [squid-users] NTLM but still got pop-ups /w IE ?

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 03.01, Arief Kurniawan wrote: > I did winbinfo -t and winbind -a domain\\username%password. It > seems okay. Still can't figure out what I've been missing here. Did wbinfo -t indicate that challenge/response was OK? > Is these steps still required before joining domain (

Re: [squid-users] Re: Access Network problem

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 18.50, Sergio Alonso wrote: > - My access.log doesn't log requests from other computers (only > from localhost) , also i always restart my computer after making > any changes to squid.conf. From red hat linux 9 installation i set > up firewall configuration to maximum,

[squid-users] Re: Squid + LDAP

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 16.21, Arias, Sebastian Alejandro - (Ext Arg) wrote: > Could you give me some help to use the squid_ldap_auth? ... -I > tried with this before but I didn't succeed, that's why I'm using > ldap_auth- > > CN=user name,OU=it,OU=sys,OU=user accounts,dc=ar,dc=domain,dc=com

[squid-users] axel + squid - security argument

2003-08-19 Thread Bob Arctor
sorry for trolling, but i also thought out about another argument, as squid would download one file via different mirrrors/gateways , thus via different connections, it would increase security of file transfers. it would be great if such solution would be possible also for https documents.

Re: [squid-users] How to disable TCP dead detection?

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 11.41, Vladimir wrote: > Hi Henrik, > > Well, i notice something different behaviour. Here is > cache.log extract: > > --- > 2003/08/19 17:16:54| TCP connection to 127.0.0.1/8000 > failed > 2003/08/19 17:16:54| Detected DEAD Pare

[squid-users] Squid Peer´s problem.

2003-08-19 Thread Ampugnani, Fernando
Hi all: I have two squid box the first for Internet (this use smb_auth) and the second for intranet (don´t use validation). I need redirect the traffic in the second squid box when this go for internet to first squid box. I put the following rules in the squid conf. file of second squid bo

[squid-users] Re: Squid/LDAP/eDirectory

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 07.03, [EMAIL PROTECTED] wrote: > I am looking to have Squid 2.5 authenticate connection requests > against a Novell eDirectory 8.62 server. A neat solution from my > point of view is to configure Squid to use the supplied LDAP > helper, across SSL. Which the supplied

Re: [squid-users] Problems

2003-08-19 Thread Jim_Brouse/PYT
Try this but be do not leave debug on too long just long enough to test why it is failing. debug is very verbose

RE: [squid-users] Re: Access Network problem

2003-08-19 Thread Adam Aube
> My access.log doesn't log requests from other computers Then the other computers aren't connecting to Squid. > From red hat linux 9 installation i set up firewall > configuration to maximum This config doesn't allow any outside connections to the machine. You need to set an exception for Squid

Re: [squid-users] Squid3: ftp gateway in accelerator mode

2003-08-19 Thread Henrik Nordstrom
On Tuesday 19 August 2003 02.04, Jim Flowers wrote: > Did I then misunderstand your earlier response, to wit: > > "What is possible is to set up http access to the content of the > FTP server via a redirector rewriting the accelerated URLs to > ftp://, but you can not connect to Squid using FTP." >

Re: [squid-users] Squid Report Issue

2003-08-19 Thread Jim_Brouse/PYT
I think I might have found part of the problem. I have a access.log file for that date that is 514 megs and I also have a bk.access.log file for that date that is only 150 megs. The two files are only separated by Is it possible for some reason that squid split the acccess.log file so now i nee

Re: [squid-users] Re: Access Network problem

2003-08-19 Thread Sergio Alonso
On Monday 18 August 2003 22.20, Sergio Alonso wrote: > Can't get my network users to access squid. My acl's configuration > looks like this: Configuration looks fine. What do you get in access.log? And have you restarted Squid after making the configuration changes? Regards Henrik - My access.lo

[squid-users] Problems

2003-08-19 Thread Serge Paquin
Hello, I am getting a bunch of messages like: clientReadRequest: FD 89 Invalid Request in my log file. Also I have people complaining that they cannot for example log into myEbay at .ebay.com. They get a 400 error from Squid. I am using WCCP and have squid running as a transparent proxy.

[squid-users] Re: Squid RedHat RPMS

2003-08-19 Thread Joe Cooper
[EMAIL PROTECTED] wrote: Joe Just a note, as requested at http://www.squid-cache.org/binaries.html, to thank you for providing the RedHat RPMs and a cc to the list to say thank-you to the project team for Squid. Really mean that. Brilliant software! I'm happy they have been useful for you

[squid-users] Abnormal Traffic Generation

2003-08-19 Thread Ahmad Khan
Dear All, I am having problem with my squid box since i updated my kernel to "2.4.20-19.8smp" , actually it is running as a squid cache on my network and serving 360 users at maximum , the specs are 80 Gb scsi storage dual intel PIII 1 GB ram but it behaves abnormally some times it tart generati

Re: [squid-users] no HIT ?

2003-08-19 Thread Marc Elsen
Rully Budisatya wrote: > > Hi, > > I probably did something wrong with my squid. > The proxy seems to have no 'HIT' whatsoever, it continues to give me only > MISSES. > Can somebody tell me what happened ? Depending on methodologies used (aka browser reload) ,this may leed to this unwanted (

[squid-users] Modify HTTP Headers in httpd-accelerator mode

2003-08-19 Thread Reuben Pearse
Hi all, Is it possible, using Squid, to modify the HTTP Headers of an object when in httpd-accelerator mode. We have a Domino Web server that tells clients browsers that GIFS, CSS, JS and other static files to "expire immediately", so that copies of these files are sent to the client over and over

RE: [squid-users] no HIT ?

2003-08-19 Thread Adam Aube
> The proxy seems to have no 'HIT' whatsoever, it continues > to give me only MISSES. Post your squid.conf (without blank lines or comments). Adam

[squid-users] no HIT ?

2003-08-19 Thread Rully Budisatya
Hi, I probably did something wrong with my squid. The proxy seems to have no 'HIT' whatsoever, it continues to give me only MISSES. Can somebody tell me what happened ? Thanks. ... Rully

RE: [squid-users] NTLM but still got pop-ups /w IE ?

2003-08-19 Thread Adam Aube
> I did winbinfo -t and winbind -a domain\\username%password. > It seems okay. Please don't say "it seems okay", because that doesn't tell us anything useful. You're much better off posting the exact comman line used and the exact output given. (Changing the username and password in the post is ok

RE: [squid-users] Network Unreachable Error - Presentation at the end of the day...help!

2003-08-19 Thread Adam Aube
> I am recieveing a Connection Failed: (101) Network Unreachable > error after i successfully authenticate vs AD Can you browse from a workstation if you don't use Squid? Have you tried using Squid's client program from the command line on the Squid server? Also, post your squid.conf (without an

[squid-users] Sonicwall and empty url

2003-08-19 Thread Vito Parisi
Hello, I am new to Squid and I'd like to use it as a simple cache proxy server for web browsing. We use a Sonicwall appliance for firewalling, and we'd like to use the "Proxy Web Server" option of Sonicwall. This option performs automatic proxy forwarding of all web requests coming from t

[squid-users] Network Unreachable Error - Presentation at the end of the day...help!

2003-08-19 Thread JOHNSON DAVID R
Ladies and Gents, I am recieveing a Connection Failed: (101) Network Unreachable error after i successfully authenticate vs AD. If i dig from the server to a website i recieve a positive response. If i ping a network IP i get a pisitive repsonse. I have bound Squid to eth1 and when i do a port

RE: [squid-users] All ntlmauthenticator processes are busy

2003-08-19 Thread Adam Aube
> If I'm going to implement for 500 Users , how many > ntlmauthenticator processes I should specify in > squid.conf Hard to say - each individual setup is different. The general rule of thumb is one NTLM auth helper for each user. At the same time, our network has over 20 concurrent users and we

RE: [squid-users] squid ntlm/basic authentication

2003-08-19 Thread Adam Aube
> I was wondering, in general, do proxies always support > Basic, and sometimes support NTLM? Squid supports both basic and NTLM authentication. This is the Squid mailing list, so information about other proxies will either be limited or non-existant. > Or can you get pure NTLM-only proxies? Squ

[squid-users]SQuid-3.0-PRE3 Compilation on Ia64

2003-08-19 Thread MUTHUKUMAR KANDASAMY
Hello Developers, I am new to this list.I am involving in the Epoll development in Squid-3.0 on Ia64 Platform.I have compiled the squid-3.0-pre3 with configure options: '--prefix=/usr/local/squidbug' '--enable-epoll' '--disable-poll' '--disable-select' '--disable-kqueue' '--enable-

[squid-users] acl question

2003-08-19 Thread cc
Hi, I'm new to this list. I'm using Squid 2.5STABLE3 on a Linux 2.4.21 system running Apache 2.x. As this is a test phase, I figured I'd test out the acl parameters. I've encountered a strange problem. Perhaps someone out there might be able to figure it out. acl noie browser -i MSIE deny_inf

[squid-users] Re: Squid on FreeBSD

2003-08-19 Thread Rohit Nepali
ODHIAMBO Washington wrote: * Rohit Nepali <[EMAIL PROTECTED]> [20030819 12:20]: wrote: Hi, We have set up transproxy in freebsd-4.8. using squid-2.4.STABLE7. We are using alteon switch to redirect webtraffic. We have other 5 squid transproxies running on Redhat 6.2. In the FreeBSD m

Re: [squid-users] How to disable TCP dead detection?

2003-08-19 Thread Vladimir
Hi Henrik, Well, i notice something different behaviour. Here is cache.log extract: --- 2003/08/19 17:16:54| TCP connection to 127.0.0.1/8000 failed 2003/08/19 17:16:54| Detected DEAD Parent: 127.0.0.1/8000/0 2003/08/19 17:17:27| Failed to select source

[squid-users] Squid on FreeBSD

2003-08-19 Thread Rohit Nepali
Hi, We have set up transproxy in freebsd-4.8. using squid-2.4.STABLE7. We are using alteon switch to redirect webtraffic. We have other 5 squid transproxies running on Redhat 6.2. In the FreeBSD machine I'm getting lots of TCP_CLIENT_REFRESH_MISS messages in access.log. However there isn't a

Re: Res: Re: Res: Re: [squid-users] --> wb_group cache time

2003-08-19 Thread Aleksandr Shcherbakov
Hi! I'm using wb_ntlm_auth and wb_group and all works fine with W2k AD Try to start winbindd -n to disable winbind caching and set ttl=5, but it's not necessary. - Original Message - From: "Henrik Nordstrom" <[EMAIL PROTECTED]> To: "Alex Carlos Braga Antão" <[EMAIL PROTECTED]>; <[EMAIL P

Fw: [squid-users] dont want to share the cache

2003-08-19 Thread Ehsan Lesani
Dear friends. Probobly it is one of the best ways that we block strange IP addresses bye using a firewall on the layer 3 of our stream. But bye doing this one then you can be sure that no one out of your LAN can use your cache server. And one thing else, when you are configuring squid it would be