[squid-users] Control squid VSZ and RSS from growing

2003-10-20 Thread Zand, Nooshin
Hi, How can I control squid VSZ and RSS from growing. Run squid2.5Stable4 on Redhat Linux 9. Here are the list of library in use. Is any known issue on using lpthread on linux? libcrypt.so.1 => /lib/libcrypt.so.1 (0x4001a000) libpthread.so.0 => /lib/tls/libpthread.so.0 (0x400470

Re: [squid-users] unix local users squid log tracking

2003-10-20 Thread Henrik Nordstrom
On Mon, 20 Oct 2003, Juan A Seuc wrote: > I have local users in my unix server that runs RedHat 7.3. LTSP. They use > thin clients and they browse the internet using conqueror. I started squid > in the server but the log only reports connections from the server ip > address. How can I track those

FW: [squid-users] download block !

2003-10-20 Thread Daniel Palmer
Adam Aube wrote: >> It's very simple: >>> acl MyDenyMIME urlpath_regex -i \.exe \.mov \.mpg \.mp? >> you also need $ after the extension > That is a good suggestion; though not essential, it does cut down on > the > false-positive rate. The other downside to a $ on the end means users can stick

[squid-users] Using pam_auth on Mac OS X 10.2 and 10.3

2003-10-20 Thread Terry Brady
Hi all, Here are a couple of changes I had to make to get pam_auth from squid 2.5 STABLE4 working on Mac OS X 10.3, should be the same for 10.2: In pam_auth.c, change "#include " to "#include " Create /etc/pam.d/squid as follows: authrequired/usr/lib/pam/pam_securityserver.

Re: [squid-users] download block !

2003-10-20 Thread Adam Aube
On Monday 20 October 2003 05:59 pm, S ý è d F ú r q à n wrote: > It's very simple: >> acl MyDenyMIME urlpath_regex -i \.exe \.mov \.mpg \.mp? > you also need $ after the extension That is a good suggestion; though not essential, it does cut down on the false-positive rate. > and it is not at al

Re: [squid-users] unix local users squid log tracking

2003-10-20 Thread Adam Aube
> I have local users in my unix server that runs RedHat 7.3. LTSP. They use > thin clients and they browse the internet using conqueror. I started squid > in the server but the log only reports connections from the server ip > address. How can I track those local users?. Is it any way to identify i

Re: [squid-users] IDE performance

2003-10-20 Thread Awie
Thanks Chris, Seems IDE is powerfull enough for my environment. Thx & Rgds, Awie - Original Message - From: "Chris Wilcox" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, October 19, 2003 10:34 PM Subject: Re: [squid-users] IDE performance > > > > >All, > > > >I just curios

[squid-users] Cache Log Error ?

2003-10-20 Thread Andrew Loughnan
Can anyone tell me what this error is "storeDiskUnlink: Out of queue space, sync unlink" and how I can fix it ? This is using RH8 squid-2.5.STABLE2 Thanks Andrew Loughnan Please Note: This email messag

Re: [squid-users] no_cache allow question.

2003-10-20 Thread Christian Purnomo
Thanks Henrik, You have answered all my questions. Many thanks Christian. Subject: Re: [squid-users] no_cache allow question. Date: Mon, Oct 20, 2003 at 09:13:24AM +0200 Quoting Henrik Nordstrom ([EMAIL PROTECTED]): : On Mon, 20 Oct 2003, Christian Purnomo wrote: : : > I then try modifying

RE: [squid-users] download block !

2003-10-20 Thread S ý è d     F ú r q à n
It's very simple: acl MyDenyMIME urlpath_regex -i \.exe \.mov \.mpg \.mp? you also need $ after the extension, and it is not at all related to MIME types, only file extensions in the requested URL.. acl MyDenyExtensions urlpath_regex -i \.exe$ \.mov$ \.mpg$ \.mp?$ acl deny MyDenyMIME http_access

RE: [squid-users] Squid Monitor

2003-10-20 Thread Mike McCall
Anyone else on this subject? I don't see why it can't be done in near realtime. I think this would be very useful for schools/businesses that use Squid for monitoring appropriate use, and could also help in diagnosing problems. SARG is pretty good, but can be very CPU intensive when processing l

[squid-users] unix local users squid log tracking

2003-10-20 Thread Juan A Seuc
Hi I have local users in my unix server that runs RedHat 7.3. LTSP. They use thin clients and they browse the internet using conqueror. I started squid in the server but the log only reports connections from the server ip address. How can I track those local users?. Is it any way to identify in th

Re: [squid-users] has anyone implemented SSL filtering in squid?

2003-10-20 Thread Henrik Nordstrom
On Mon, 20 Oct 2003, Raymond Jacob wrote: > Has anyone implemented SSL filtering in squid? Not yet, but I am available should you want to sponsor such project. Regards Henrik

[squid-users] has anyone implemented SSL filtering in squid?

2003-10-20 Thread Raymond Jacob
Has anyone implemented SSL filtering in squid? I recently read about SSL filtering in eweek and they mention: SSL has been broken by well-intentioned security vendors trying to provide requested capabilities to their customers. Both the vendors and at least some of their customers see SSL as a po

Re: [squid-users] cache removal procedure

2003-10-20 Thread Henrik Nordstrom
On Mon, 20 Oct 2003, Pat Lendon wrote: > Is it possible to set specific times to run cache removal (lru)? No. > Reason being, at random times the squid process cpu is a high 40% and > greater. Sometimes the squid process uses 99% cpu, but this is more rare. > Normally the squid process uses 10

Re: [squid-users] Blocking user access by username

2003-10-20 Thread Henrik Nordstrom
On Mon, 20 Oct 2003, Mohsin Khan wrote: > One thing to consider squid.conf, do not > prases spaces in username it will 'My Name' and My. If you need spaces in usernames then these can be placed in an included acl file. See the Squid-2.5.STABLE4 release notes. Regards Henrik

RE: [squid-users] squid and kswapd cpu problem

2003-10-20 Thread Henrik Nordstrom
On Mon, 20 Oct 2003, Anders Larsson wrote: > Should't this be relative to the amount of clients that connects to the > machine ? > The machine as im using serves 5k users > therefore i thought it should have a larger cache_mem. One may place a slight relation between cache_mem and number of con

[squid-users] Accelerating Outlook Web Access with SQUID/SSL

2003-10-20 Thread Don Pandori
Hi, I've gone through the archives and have my 3.0Pre3 compiled and configured to accelerate OWA. I'm using self-signed certs (for testing at this point) and when I fire squid up, it asks for the PEM passphrase, I enter it and then it dies without logging anything. I took out the https_port dire

[squid-users] cache removal procedure

2003-10-20 Thread Pat Lendon
Hi All, Is it possible to set specific times to run cache removal (lru)? Reason being, at random times the squid process cpu is a high 40% and greater. Sometimes the squid process uses 99% cpu, but this is more rare. Normally the squid process uses 10% or less of cpu. Is it possible that the

RE: [squid-users] TCP_CLIENT_REFRESH_MISS

2003-10-20 Thread Adam Aube
> Is there some kind way to ignore those "no-cache" > requests from the clients Use the ignore-reload option to a refresh_pattern directive. There is also a reload-into-ims option and a global reload_into_ims directive, which changes "no-cache" from the browser into If-Modified-Since (which woul

[squid-users] TCP_CLIENT_REFRESH_MISS

2003-10-20 Thread cadu
Hi folks, Is there some kind way to ignore those "no-cache" requests from the clients and force squid to use the cached objects instead refetch it? []'s Carlos E. D. Cardoso Desenvolvimento Programmer´s Informática +55 (19) 3242-8033 www.programmers.com.br

Re: [squid-users] Help with running 2 instances of squid

2003-10-20 Thread Chris Wilcox
Hello, I have three versions of squid running on the same machine, two in production and one for development. The best way that I found was to have three entirely separate compiles for each version where I actually change the names of the squid executables, config files, directory structures, pi

RE: [squid-users] SQUID and WCCP on CISCO router

2003-10-20 Thread Wilhelm Farrugia
10x for the info. Is it possible to have further detail on the kernel compilation for the version 2.4.22. The kernel was compiled sucessful however the ethernet was not working fine, receiving message: Oct 20 18:16:16 frodo kernel: NETDEV WATCHDOG: eth0: transmit timed out Oct 20 18:16:16 frodo

Re: [squid-users] Blocking user access by username

2003-10-20 Thread Mohsin Khan
Hi! One thing to consider squid.conf, do not prases spaces in username it will 'My Name' and My. --- Adam Aube <[EMAIL PROTECTED]> wrote: > On Sunday 19 October 2003 01:46 pm, Mark Maxey > wrote: > > Is it possible to block a user's access to the > proxy based on username. > > You could

FW: [squid-users] RE: Squid process dies constantly

2003-10-20 Thread Adam Aube
(I received this in private mail, and forwarded it to the list.) squid 2.4STABLE7-4 here are the last 200 lines, this is where i was trying to restart the service but it kept crashing: 2003/10/18 02:11:44| Adding nameserver 204.117.214.10 from /etc/resolv.conf 2003/10/18 02:11:44| Adding names

RE: [squid-users] Combining ACLs

2003-10-20 Thread Adam Aube
> I need to block access to a site but only on some machines > and only for certain times of day. Otherwise the site should > be accessible. > acl blocked_machines src 10.18.64.0/255.255.255.0 > acl bad_site dstdomain badsite.com > acl bad_time time 09:00-17:00 > http_access deny bad_site bad_t

[squid-users] Combining ACLs

2003-10-20 Thread Martin, Gary J
I need to block access to a site but only on some machines and only for certain times of day. Otherwise the site should be accessible. This seems to work: acl blocked_machines src 10.18.64.0/255.255.255.0 acl bad_site dstdomain badsite.com acl bad_time time 09:00-17:00 http_access deny bad_site

RE: [squid-users] download block !

2003-10-20 Thread Adam Aube
> I'm new to this list. And I hope someone can help me! > I have instaled squid 2.5.stable. It's work fne, but i > can't block downloading .mp3, .exe .. files You do realize that the setup you are using will slow down those downloads, not block them entirely, right? You may want to run squid -k p

RE: [squid-users] squid and kswapd cpu problem

2003-10-20 Thread Anders Larsson
Should't this be relative to the amount of clients that connects to the machine ? The machine as im using serves 5k users therefore i thought it should have a larger cache_mem. the Squid proccses at the moment RSS 64Mb ill check later and see it's get any higher. // Anders On Mon, 2003-10-20

RE: [squid-users] squid and kswapd cpu problem

2003-10-20 Thread Henrik Nordstrom
On Mon, 20 Oct 2003, Adam Aube wrote: > Additionally, I don't think Squid will have any way of knowing if the > memory allocated to it for cache_mem is swap and not RAM (perhaps > Henrik or Robert can comment on this). Correct. Regards Henrik

[squid-users] download block !

2003-10-20 Thread Cristian Tudose
Hi to all ... I'm new to this list. And I hope someone can help me! I have instaled squid 2.5.stable. It's work fne, but i can't block downloading .mp3, .exe .. files i have read the documentation but ... i have miss something. i'll paste there my config file. Please help me ! :) P.S.

RE: [squid-users] squid and kswapd cpu problem

2003-10-20 Thread Adam Aube
> But the machine has 4Gb ram so why not using 500MB ? > is it better to let squid increase if it's needed? Linux will aggressively use free RAM to cache files. If Linux does most of the caching, it benefits the entire system, not just Squid, and Linux will dynamically adjust the amount of memory

Re: [squid-users] RE: Squid process dies constantly

2003-10-20 Thread Marc Elsen
JOHNSON DAVID R wrote: > > J > > > > > Unfortunately the Squid process dies constanlty on us here a HU. > We > > > have around 3000 users that connect to Squid in order to use the > internet. > > > I am using the squid_ldap_auth module and it works great but for some > > > reason the squid

Re: [squid-users] squid and kswapd cpu problem

2003-10-20 Thread Marc Elsen
Anders Larsson wrote: > > Ok ill test that > > But the machine has 4Gb ram so why not using 500MB ? is it better to let > squid increase if it's needed? Ok, look at the process size versus in-memory-part, (RSS) to see whether squid 'fits' or not. I advise to try the low cache_mem setting,fo

Re: [squid-users] squid and kswapd cpu problem

2003-10-20 Thread Anders Larsson
Ok ill test that But the machine has 4Gb ram so why not using 500MB ? is it better to let squid increase if it's needed? // Anders On Mon, 2003-10-20 at 13:58, Marc Elsen wrote: > Anders Larsson wrote: > > > > Hi! > > > > We have a squid 2.4.STABLE7 l with kernel-2.4.22 > > Then problem is t

Re: [squid-users] RE: Squid process dies constantly

2003-10-20 Thread Marc Elsen
J > > > > Unfortunately the Squid process dies constanlty on us here a HU. We > > have around 3000 users that connect to Squid in order to use the internet. > > I am using the squid_ldap_auth module and it works great but for some > > reason the squid child processes seem to fail and the Sq

RE: [squid-users] RE: Squid process dies constantly

2003-10-20 Thread Adam Aube
> Unfortunately the Squid process dies constanlty on us > here a HU. We have around 3000 users What version of Squid are you using, and on what OS? > I am using the squid_ldap_auth module and it works great > but for some reason the squid child processes seem to > fail and the Squid module become

[squid-users] RE: Squid process dies constantly

2003-10-20 Thread JOHNSON DAVID R
David Johnson | Network Administrator | Hampton University | Hampton, VA | 23669 | office 757.728.6528 | fax 757.727.5438 mailto:[EMAIL PROTECTED] > -Original Message- > From: JOHNSON DAVID R > Sent: Monday, October 20, 2003 9:34 AM > To: '[EMAIL PROTECTED]' > Subject:

RE: [squid-users] Squid Setup

2003-10-20 Thread Adam Aube
> I'm in the process of implementing a squid proxy on > Windows 2000 based network on linux with authentication > via the win2k domain controller. > Also, is there a squid administration tool that would allow > me to block a user by username in a simple manner? What's wrong with the suggestion I

Re: [squid-users] squid and kswapd cpu problem

2003-10-20 Thread Joel
Cache_mem should be not be that high. Try cache_mem 64 cache_swap_low 85 cache_swap_high 90 Joel n.solanki - Original Message - From: "Anders Larsson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, October 20, 2003 5:02 PM Subject: [squid-users] squid and kswapd cpu problem

Re: [squid-users] squid and kswapd cpu problem

2003-10-20 Thread Marc Elsen
Anders Larsson wrote: > > Hi! > > We have a squid 2.4.STABLE7 l with kernel-2.4.22 > Then problem is that the machine get very high load and kswapd takes > about 100% of the cpu this happens when there are lots of new requests > to squid and when squid has taken around 800Mb ram.. the high loa

Re: [squid-users] SUPPORT ASSISTENCE

2003-10-20 Thread Lucas Brasilino
Hi Fred: I'm using Linux Conectiva 8 with Squid on it, when the access.log hits 1,5 GB, Squid just stop with non reson, somebody knows with exist a patch for that ! Thank u, Fred. Why don't you just rotate access.log ?? regards -- []'s Lucas Brasilino [EMAIL PROTECTED] http://www.recife.pe.gov.

[squid-users] squid and kswapd cpu problem

2003-10-20 Thread Anders Larsson
Hi! We have a squid 2.4.STABLE7 l with kernel-2.4.22 Then problem is that the machine get very high load and kswapd takes about 100% of the cpu this happens when there are lots of new requests to squid and when squid has taken around 800Mb ram.. the high load stays for aboun 30 min. any hints w

Re: [squid-users] squid + iptables

2003-10-20 Thread Joel
I have attached the file. Understand it and apply for you network. Joel n.solanki - Original Message - From: "Paulo" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, October 20, 2003 4:11 PM Subject: [squid-users] squid + iptables > A simple question from a Squid newbie: I have

Re: [squid-users] httpd-accelerator

2003-10-20 Thread Robert Collins
On Mon, 2003-10-20 at 19:12, Emilio Casbas wrote: > We have configured two reverse proxy accelerators with squid for our > web-servers with load-balancing (for a long time), all the traffic > incoming is for our web-servers, well, but in the squid logs we can to > see a few connections what isn

[squid-users] squid + iptables

2003-10-20 Thread Paulo
A simple question from a Squid newbie: I have a Squid running ok in a linux box and another box with iptables running ok too (my internet gateway). What i have to do do in my iptables to block port 80 and permit http connections through Squid ??? I am a little bit confused. hugs, Paulo

[squid-users] Squid Setup

2003-10-20 Thread Mark Maxey
I'm in the process of implementing a squid proxy on Windows 2000 based network on linux with authentication via the win2k domain controller. Also, is there a squid administration tool that would allow me to block a user by username in a simple manner? Also, is there a way to "include" a file in s

[squid-users] httpd-accelerator

2003-10-20 Thread Emilio Casbas
We have configured two reverse proxy accelerators with squid for our web-servers with load-balancing (for a long time), all the traffic incoming is for our web-servers, well, but in the squid logs we can to see a few connections what isn't for our webservers (likely inappropiate uso) In a rev

Re: [squid-users] SQUID and WCCP on CISCO router

2003-10-20 Thread Marc Elsen
Wilhelm Farrugia wrote: > > Hello, > > Can someone help me install and configure squid to work with wccp and a > cisco router running IOS 122-19. I am installing the latest stable squid > version on Linux Redhat 9. > > Thank you, > Regards, http://www.sublime.com.au/squid-wccp/ M. >

Re: [squid-users] no_cache allow question.

2003-10-20 Thread Henrik Nordstrom
On Mon, 20 Oct 2003, Christian Purnomo wrote: > I then try modifying it to be: > > acl QUERY urlpath_regex cgi-bin \? > acl IGNORE_CGI url_regex ^http:\/\/www.mysite.com\/cgi-bin\/ > no_cache allow IGNORE_CGI > no_cache deny QUERY Correct. > I have tried turning on 'lo