Re: [squid-users] Squidalyzer or comparable?

2003-11-07 Thread Tan Jun Min
Try awstats http://awstats.sourceforge.net/ On Friday 07 November 2003 02:42 pm, Li Wei wrote: > Sarg may be a good choice for your No.2 purpose. > > - Original Message - > From: <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, November 07, 2003 8:49 AM > Subject: [squid-users

[squid-users] Squid FD_SETSIZE

2003-11-07 Thread jeff . richards
I re-compiled Squid (2.4.STABLE7 on Solaris 8) with system file descriptors set to 4096 and Squid now confirms that it is using 4096 on startup. But during the configure, I noticed a message that said "checking Default FD_SETSIZE value 1024". Is this going to limit Squid to using only 1024 fds? Wh

RE: [squid-users] RE: Sample squid.conf

2003-11-07 Thread Milind Nanal
Henrik, WCCPv2 GRE support is activated in OS kernel. One redirection rule is applied for the packets coming on port 80 to be redirected on port 3128. But I am not aware about the hash assignment. Is there any extra parameters required to define in squid.conf file? , if so let me know. Also t

RE: [squid-users] RE: Sample squid.conf

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Milind Nanal wrote: > Is there any extra parameters required to define in squid.conf file? , if so > let me know. >From what I can remember not besides the wccpv2 router address, and the normal parameters required for interception caching. Regards Henrik

Re: [squid-users] Can i bypass authentication for an application running on a pc

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Matthew Richards wrote: > Can anyone please tell me if it is possible to have a user challenged to > authenticate by squid but > have an application on the same computer access the Internet without being > challenged? Yes. If your application sends a identifiable User-Agen

Re: [squid-users] Squid + Radius Auth

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Joel Andersson wrote: > Can I setup Squid to be a reverse proxy that requires login with RADIUS challenge.? The basic HTTP authentication scheme in Squid only supports static or semi-static passwords, and does not support challenging the user with a sever challenge. > Is it

Re: [squid-users] ncsa password expiry

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, melvin melvin wrote: > Is there a way to set a password expiration date for users and force them to > change their passwords after a specified time? I have already set up a > change password utility but the problem is users will not change their > passwords if they are not t

Re: [squid-users] Squid FD_SETSIZE

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003 [EMAIL PROTECTED] wrote: > I re-compiled Squid (2.4.STABLE7 on Solaris 8) with system file descriptors > set to 4096 and Squid now confirms that it is using 4096 on startup. But > during the configure, I noticed a message that said "checking Default > FD_SETSIZE value 1024". >

[squid-users] Need to change my squid access log dir

2003-11-07 Thread Taiwo Akinosho
Hello, Somethime back, i wrote about squid eatin up my hard drive space. i got a reply from Henrik on changing the path of my access log. i did try that but squid starts and stops shortly after. i suspect a permission problem but i don't know where to start. can someone help me with a step by st

RE: [squid-users] RE: Sample squid.conf

2003-11-07 Thread Milind Nanal
Does the router show that there is hash assignment to the cache server? But I am not aware about the hash assignment. Regards, Milind -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2003 1:10 PM To: Milind Nanal Cc: Henrik Nordstrom; [EMA

RE: [squid-users] RE: Sample squid.conf

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Milind Nanal wrote: > Does the router show that there is hash assignment to the cache server? > > But I am not aware about the hash assignment. To see the hash assignment you need to query your router on the status of WCCPv2. This status display shows what WCCPv2 cache serve

Re: [squid-users] Need to change my squid access log dir

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Taiwo Akinosho wrote: > i did try that but squid starts and stops shortly after. > i suspect a permission problem but i don't know > where to start. See cache.log. > can someone help me with a step by step > process on creating the new location and enable squid > to write to

Re: [squid-users] NTLM Problem with Squid2.5 Stable 4

2003-11-07 Thread Serassio Guido
Hi John, At 00.12 07/11/2003, macross292 wrote: We are currently running Squid 2.5 Stable 4 on Windows 2000, and have a problem with NTLM authentication. During busy times the squid service stops authenticating people and we need to restart the service to get it working again. This has been

Re: [squid-users] Access http server

2003-11-07 Thread Eicke
I trying to telnet port 80 and result is following: HTTP/1.0 400 Bad Request Server: Squid/2.4.STABLE7 Mime-Version: 1.0 Date: Fri, 07 Nov 2003 11:54:55 GMT Content-Type: text/html Content-Length: 841 Expires: Fri, 07 Nov 2003 11:54:55 GMT X-Squid-Error: ERR_INVALID_REQ 0 X-Cache: MISS from 192.

Re: [squid-users] Access http server

2003-11-07 Thread Henrik Nordstrom
Then you are hitting your Squid server, not the web server you are looking for. Squid will not accept talking to itself as this would generates a recursive loop with no positive result (squid talks to itself, which will then connect again to itself, which will then again connect to itself, which

[squid-users] no_cache help

2003-11-07 Thread Adaíl Oliveira
Hi, I have a squid running in a machine but i don´t want make cache of one WebServer that i have in Intranet. I put the Tag: acl webserver dst mywebserver.pt no_cache deny webserver But when i visit the website this don´t work. And are create very files in Temporary Internet Fi

Re: [squid-users] no_cache help

2003-11-07 Thread Marc Elsen
"Adaíl Oliveira" wrote: > > Hi, > I have a squid running in a machine but i don´t want make cache of one > WebServer that i have in Intranet. > I put the Tag: acl webserver dst mywebserver.pt > no_cache deny webserver > > But when i visit the website this don´t work. And are cr

RE: [squid-users] no_cache help

2003-11-07 Thread Adam Aube
> I have a squid running in a machine but i don´t want make > cache of one WebServer that i have in Intranet. > I put the Tag: acl webserver dst mywebserver.pt > no_cache deny webserver It looks like you are using the hostname of your webserver. The dst acl type uses the IP addre

[squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread Souchon Yann
Hello, I would like to know if Squid (stable or devel) can help me for this architecture : CLIENTS <-1-> PROXY SQUID <-2-> WEB SERVER Protocol on 1 : HTTPS Protocol on 2 : HTTP Apache with mod_proxy can make this very simply. But I have a problem, that Apache can't help me. The links on the H

[squid-users] TAG: no_cache help

2003-11-07 Thread Adaíl Oliveira
Hi, I have a squid running in a machine but i don´t want make cache of one WebServer that i have in Intranet. I put the Tag: acl webserver dst mywebserver.pt no_cache deny webserver But when i visit the website this don´t work. And are create very files in Temporary Internet F

RE: [squid-users] Squidalyzer or comparable?

2003-11-07 Thread Mike McCall
I've modified the squid2common PERL script, and currently I'm using it to break up access.log into a comma-delimited text file. With a little work I've been able to create another file using the squidGuard blacklists to categorize the domains. My output file contains Date, Time, IP, Requested URL

Re: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread claus
From: "Souchon Yann" <[EMAIL PROTECTED]> > I would like to know if Squid (stable or devel) can help me for this > architecture : > > CLIENTS <-1-> PROXY SQUID <-2-> WEB SERVER > > Protocol on 1 : HTTPS > Protocol on 2 : HTTP Is there only 1 WebServer ? Do the clients use PROXY SQUID also for oth

RE: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread Souchon Yann
> From: "Souchon Yann" <[EMAIL PROTECTED]> > > I would like to know if Squid (stable or devel) can help me for this > > architecture : > > > > CLIENTS <-1-> PROXY SQUID <-2-> WEB SERVER > > > > Protocol on 1 : HTTPS > > Protocol on 2 : HTTP > > Is there only 1 WebServer ? Yes, I have only 1 WE

Re: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread claus
And unfortunately internal-server.domain.com does _not_ translate to external-server.domain.com in public DNS ??? Regards, Claus - Original Message - > The PROXY SQUID should be rewrite all HTML contents from > http://internal-server.domain.com to https://external-server

RE: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread Souchon Yann
> And unfortunately internal-server.domain.com does _not_ > translate to external-server.domain.com in public DNS ??? The internal-server isn't not reacheable from internet, and SQUID PROXY is in a DMZ. Nobody can access to the internal network from internet. For security, I would like to use

Re: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread claus
I did not ask for the addresses ... :-) But if fortunately the _name_ internal-server.domain.com would translate to the same address (not the internal one) as the _name_ external-server.domain.com on public DNS ... your problem would only be a matter of mapping http to https and that co

[squid-users] Enabling SSLGateway

2003-11-07 Thread Richard Barrett
I am using squid-2.5.STABLE4-20031107 with the ssl-2.5.patch applied. All has built and works at a basic level. My objective is to use Squid as an https reverse proxy front ending an Apache server. Squid is happily terminating incoming https connections from the browser and making http

Re: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Souchon Yann wrote: > Apache with mod_proxy can make this very simply. So can Squid-2.5 and later. > But I have a problem, that Apache can't help me. > > The links on the HTML pages (WEB SERVER) are not relatives, but full. Ouch.. for this (without touching the application

Re: [squid-users] Enabling SSLGateway

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Richard Barrett wrote: > My objective is to use Squid as an https reverse proxy front ending an > Apache server. Squid is happily terminating incoming https connections > from the browser and making http requests to the Apache server. But I > want the requests from Squid to

Re: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread Merton Campbell Crockett
On Fri, 7 Nov 2003, Henrik Nordstrom wrote: > On Fri, 7 Nov 2003, Souchon Yann wrote: > > > Apache with mod_proxy can make this very simply. > > So can Squid-2.5 and later. > > > But I have a problem, that Apache can't help me. > > > > The links on the HTML pages (WEB SERVER) are not relatives, bu

[squid-users] Web servers in different ports

2003-11-07 Thread Eicke
Hi folks, I use ipfw to foward all http(port 80) requests to squid server. I would like that all http and https requests independent of port will be foward to squid. I changed the ipfw rule to: ipfw add 1 fwd 127.0.0.1,3128 tcp from 192.168.5.0/27 to any 80,443,8180,8080,8000 via xl0 I am tr

[squid-users] Traffic Accounting per user

2003-11-07 Thread zottmann
Hi! I think that they are not exactly what you want, but you may take a look at squid2mysql and squid´s delaypools. Squid2mysql (http://evc.fromru.com/squid2mysql/features.html) allows you to define download limits per user based on a period (daily, monthly, etc...) DelayPools is a Squid na

[squid-users] Traffic Accounting per user

2003-11-07 Thread zottmann
Hi! I think that they are not exactly what you want, but you may take a look at squid2mysql and squid´s delaypools. Squid2mysql (http://evc.fromru.com/squid2mysql/features.html) allows you to define download limits per user based on a period (daily, monthly, etc...) DelayPools is a Squid na

Re: [squid-users] Web servers in different ports

2003-11-07 Thread Antony Stone
On Friday 07 November 2003 4:39 pm, Eicke wrote: > Hi folks, > > I use ipfw to foward all http(port 80) requests to squid server. > I would like that all http and https requests independent of port will be > foward to squid. > I changed the ipfw rule to: > > ipfw add 1 fwd 127.0.0.1,3128 tcp f

[squid-users] Experience of big squid setups?

2003-11-07 Thread Antony Stone
Hi. Does anyone here have experience of setting up a (multi-)squid install to handle tens/hundreds of million HTTP requests per day? I guess I'm talking ISP-level network sizes here, but I'm sure squid can do it (given the right hardware and the right amount of bandwidth) but can anyone point

Re: [squid-users] Experience of big squid setups?

2003-11-07 Thread Kinkie
Antony Stone <[EMAIL PROTECTED]> writes: > Hi. > > Does anyone here have experience of setting up a (multi-)squid install to > handle tens/hundreds of million HTTP requests per day? I guess I'm talking > ISP-level network sizes here, but I'm sure squid can do it (given the right > hardware an

Fw: [squid-users] no_cache help

2003-11-07 Thread Adaíl Oliveira
Why when i put in browser do not use proxy server for addresses de address of mywebserver.pt nothing is tranfer to Temporary Internet Files? A.O > > - Original Message - > From: "Marc Elsen" <[EMAIL PROTECTED]> > To: "Adaíl Oliveira" <[EMAIL PROTECTED]> > Cc: <[EMAIL PROTECTED]> > Sen

Re: [squid-users] Experience of big squid setups?

2003-11-07 Thread Joel Jaeggli
On Fri, 7 Nov 2003, Kinkie wrote: > Antony Stone <[EMAIL PROTECTED]> writes: > > > Hi. > > > > Does anyone here have experience of setting up a (multi-)squid install to > > handle tens/hundreds of million HTTP requests per day? I guess I'm talking > > ISP-level network sizes here, but I'm sur

[squid-users] Processing of squid?

2003-11-07 Thread Kusuma Samorthong
I found processing of squid in web site. Processing of squid following: 1. Squid Initialization – opens connection (socket) for http and ICP traffic. 2. Client starts connection on http port, connection is established and new client fd is assigned. 3. Client sends request, SQUID receives the req

Re: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Merton Campbell Crockett wrote: > Apache using mod_rewrite would be the answer. The > would need to have a redirect to 443. The problem will be the annoying > notices about leaving or entering a protected site. I don't see how this can be the answer. Sure, it makes things

Re: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Henrik Nordstrom wrote: > On Fri, 7 Nov 2003, Merton Campbell Crockett wrote: > > > Apache using mod_rewrite would be the answer. The > > would need to have a redirect to 443. The problem will be the annoying > > notices about leaving or entering a protected site. > > I do

RE: [squid-users] no_cache help

2003-11-07 Thread Adam Aube
> Why when i put in browser do not use proxy server for > addresses de address of mywebserver.pt nothing is > tranfer to Temporary Internet Files? Any decision about what is and is not put in Temporary Internet Files is made by IE, not Squid. If you want to know why IE does or does not do somethin

[squid-users] ip_wccp problems

2003-11-07 Thread Scott Baker
I compiled my own kernel (2.4.22) and the ip_wccp module on my RedHat 9 system as follows gcc -D__KERNEL__ -I/usr/src/linux-2.4.22/include -Wall -Wstrict-prototypes -Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=i686 -nostdin

Re: [squid-users] no_cache help

2003-11-07 Thread Adaíl Oliveira
Why when i put in browser do not use proxy server for addresses de address of mywebserver.pt nothing is tranfer to Temporary Internet Files? A.O - Original Message - From: "Marc Elsen" <[EMAIL PROTECTED]> To: "Adaíl Oliveira" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, Novem

Re: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread Merton Campbell Crockett
On Fri, 7 Nov 2003, Henrik Nordstrom wrote: > On Fri, 7 Nov 2003, Merton Campbell Crockett wrote: > > > Apache using mod_rewrite would be the answer. The > > would need to have a redirect to 443. The problem will be the annoying > > notices about leaving or entering a protected site. > > I don'

Re: [squid-users] Processing of squid?

2003-11-07 Thread Henrik Nordstrom
On Sat, 8 Nov 2003, Kusuma Samorthong wrote: > I want to know that is it really processing of squid according? It is one way of describing the basic operations of Squid, but there are many different aspects depending on what you are looking at. The processing of Squid is best described as a lar

Re: [squid-users] ip_wccp problems

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Scott Baker wrote: > [EMAIL PROTECTED] linux]# modprobe ip_wccp > /lib/modules/2.4.22/kernel/net/ipv4/ip_wccp.o: couldn't find the kernel > version the module was compiled for Hmm.. what version of ip_wccp.c is this? the version and changelog is shown at the top of the file.

Re: [squid-users] HTTPS Reverse proxy with HTML contents rewrite

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Merton Campbell Crockett wrote: > It's only sent accross the Internet to the client in encrypted form. Now, > that doesn't mean in won't be slow as each http request will be redirected > to the https port. But the content won't be retrieved from the internal > server except w

RE: [squid-users] ip_wccp problems

2003-11-07 Thread Steve Fischer
Try putting it in /lib/modules/2.4.22 /kernel/net/ipv4 That's where my ip_wccp modules ended up when I compiled it during kernel compilation... The ip_wccp-2_4_18.patch this is available from http://squid.visolve.com/developments/wccpv2.htm can be applied to the kernel, and it makes this much,

[squid-users] TCP_HIT with Surrogate-Control?

2003-11-07 Thread Y Jones
No matter what number I set max-age to for Surrogate-Control, I get TCP_REFRESH_HIT. I have to unset the Surrogate-Control header to get a TCP_HIT. Can someone tell me how to set the headers to get a TCP_HIT with Surrogate-Control? These are my apache headers that result in TCP_REFRESH_HIT: HT

[squid-users] TCP_MISS/000

2003-11-07 Thread Alfredo Aguirre
Hi guys, i've got this problem, whenever the machines inside my network try to reach this site got an connection time out and on my squid log i see this, i dont know what this could mean TCP_MISS/000 0 GET http://www.ibope.com.mx/ - NONE/- - im using squid 2.5 STABLE4 thanks in advance; alfre

Re: [squid-users] TCP_MISS/000

2003-11-07 Thread Antony Stone
On Friday 07 November 2003 7:34 pm, Alfredo Aguirre wrote: > Hi guys, > > i've got this problem, whenever the machines inside my network try to reach > this site got an connection time out and on my squid log i see this, i dont > know what this could mean > > TCP_MISS/000 0 GET http://www.ibope.co

Re: [squid-users] TCP_MISS/000

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Alfredo Aguirre wrote: > i've got this problem, whenever the machines inside my network try to reach > this site got an connection time out and on my squid log i see this, i dont > know what this could mean > > TCP_MISS/000 0 GET http://www.ibope.com.mx/ - NONE/- - This most

[squid-users] Squid crashes right after start!

2003-11-07 Thread Thomas . Bauer
Hi there, finally I got samba 2.2.8a running. wbinfo -t -> secret is good wbinfo -g -> shows all groups wbinfo -u -> shows all users wbinfo -a -> succeeded with both messages! wb_auth -d -> returns OK! wb_group -d -> returns OK! But if I gonna start squid now, it crashes after about 10 sec (?).

RE: [squid-users] Squid crashes right after start!

2003-11-07 Thread Adam Aube
> finally I got samba 2.2.8a running. > But if I gonna start squid now, it crashes after about 10 sec Is there anything in cache.log? Adam

RE: [squid-users] TCP_MISS/000

2003-11-07 Thread Alfredo Aguirre
> Can you get to that website without using squid? yes i can see it with out using squid > The server is responding - I can get to it from here - although I simply get > a completely black page with nothing at all on it :( also i got the same problem on www.legatek.com.mx, and when i turn off s

Re: [squid-users] Squid crashes right after start!

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003 [EMAIL PROTECTED] wrote: > seconds later squid is dead! > But it doesn't show any error message. What did I do wrong? Any clues in cache.log and/or your systems messages file? Regards Henrik

RE: [squid-users] TCP_MISS/000

2003-11-07 Thread Henrik Nordstrom
On Fri, 7 Nov 2003, Alfredo Aguirre wrote: > > > Can you get to that website without using squid? > > yes i can see it with out using squid Maybe ECN? (see the Squid FAQ Linux section) Regards Henrik

[squid-users] memory hit ratio

2003-11-07 Thread squid
Could someone please give me an idea of what am I doing wrong on the squid.conf ?, I can't get more percentage on "Request Memory Hit Ratios": Average HTTP requests per minute since start: 1470.9 Average ICP messages per minute since start: 0.0 Select loop called: 68814496 times, 7.975 ms avg Cac

Re: [squid-users] memory hit ratio

2003-11-07 Thread Adam Aube
On Friday 07 November 2003 08:36 pm, [EMAIL PROTECTED] wrote: > Could someone please give me an idea of what am I doing wrong on the > squid.conf ?, I can't get more percentage on "Request Memory Hit Ratios": I wouldn't worry about Memory Hit Ratios - you're better off worrying about Request and