Re: [squid-users] My Squid Hardware -- Any Tips/Advice Before It's Commissioned

2004-04-01 Thread Mark Tinka
--- Graham Nicholls <[EMAIL PROTECTED]> wrote: > On Wednesday 31 March 2004 15:08, Peter Albrecht > I have to say this looks like a blatant commercial > for the more expensive > SLES, where the cheaper product (I'd use 9.0) is > fine. i agree. I have corporate > servers running every releas

Re: [squid-users] Cache Size Limitation

2004-04-01 Thread Matus UHLAR - fantomas
On 31.03 09:42, [EMAIL PROTECTED] wrote: > Well, the cache_mem thing sounds interesting. I'm going to try 512MB to > start with. > My filesystem isn't close to 90% full. Only about 6 gigs being using in > total (including the cache). > > I appreciate all your suggestions. for now that should b

Re: [squid-users] My Squid Hardware -- Any Tips/Advice Before It's Commissioned

2004-04-01 Thread Mark Tinka
--- Chris Wilcox <[EMAIL PROTECTED]> wrote: > > > If this box will run Squid and Squid only... yes, this box will run squid and squid only.. >...then I'd > be looking into one of > the more minimal distributions such as Debian. You > don't need most of the > 'junk' that distro's like Suse wi

Re: [squid-users] Squid caching SSI pages?

2004-04-01 Thread Matus UHLAR - fantomas
On 31.03 16:48, Greg Swallow wrote: > Assuming documentation at > http://www.bowiesnyder.com/writings/caching_shtml.htm is true, my > squid-based reverse proxies shouldn't be caching HTML documents that are > server parsed. However, it appears that the four reverse proxies I have > sitting in fron

Re: [squid-users] My Squid Hardware -- Any Tips/Advice Before It's Commissioned

2004-04-01 Thread Mark Tinka
--- [EMAIL PROTECTED] wrote: > I've been running SuSE 7.3 for 4 years now. I've, > not once, had to > contact SuSE for support on their operating system. > There's so much > support and documentation in other places (web, > usenet, irc) I haven't > bothered with support from SuSE. i agree..

[squid-users] purge from cache

2004-04-01 Thread Henrik Steffen
hello all, after having started with a clean cache on February, 14th my cache-folder has meanwhile increased to a size of 68 GB, which makes 96 % of the available space on that partition. I am using squid as an accelerating proxy. All cached objects should expire after 24 hours at the latest. H

[squid-users] referer_log question

2004-04-01 Thread Henrik Steffen
Hello, is there a way to pipe the referer_log directly to a script or save it to a database? apache for instance has this nice feature for its CustomLogs etc. CustomLog |/foo/bar.pl custom -- Mit freundlichem Gruß Henrik Steffen Geschäftsführer top concepts Internetmarketing GmbH Am Stein

Re: [squid-users] My Squid Hardware -- Any Tips/Advice Before It's Commissioned

2004-04-01 Thread Mark Tinka
--- Peter Lustig <[EMAIL PROTECTED]> wrote: > If you don't need the support, I would also suggest > to take a stable and > heavily tested Debian Woody. With this one, you can > always be sure to > get security updates even in the not so close > future. With SuSE you can > not be sure to get upd

[squid-users] Squid: Disks question

2004-04-01 Thread Alexandros C. Couloumbis
Greetings Squid community, I am building a 2x 2.8GHz P4, no HT, 4Gig RAM squid engine on a Linux 2.6 with reiser4 and wccp (Gentoo - everything from source) no auth this is a production group of 1000 concurent users. the pipe to the Internet is 20Mbit 1st question: Should I go with Squid 2.5 or 3.

RE: [squid-users] Multiple Authentication Programs

2004-04-01 Thread Keppner, Christoph
Hi! i googled a bit, and found a Mailthread (http://www.squid-cache.org/mail-archive/squid-dev/200104/0208.html), where this syntax is used: auth_param ntlm authdomainaclname1 program /foo/bar auth_param ntlm authdomainaclname2 program /foo/bar I need the same thing for ldap, but ldap is basic

Re: [squid-users] Squid can't access FTP servers [ODD]

2004-04-01 Thread Henrik Nordstrom
On Wed, 31 Mar 2004, Douglas Lane wrote: > Now on a client machine, running IE6 with no updates, can’t access an FTP > site like ftp.is.co.za – You just get a time-out error. However, take the ip > address of that server and it does go through. Try fiddling with the "folder view for FTP" option i

Re: [squid-users] Re: Authenntication with a Transparent Proxy

2004-04-01 Thread Henrik Nordstrom
On Wed, 31 Mar 2004, Adam Aube wrote: > However, I have heard of an open source project that does exactly this - > provide controlled access for public wireless service. The site for the > project is: It is not possible do do HTTP proxy authentication in a transparent proxy. What is possible is

Re: [squid-users] make error in squid-3.0-PRE3-20040331

2004-04-01 Thread Henrik Nordstrom
Please file a bug report via http://www.squid-cache.org/bugs/ Regards Henrik On Wed, 31 Mar 2004, Himanshu Soni wrote: > Hi > > I am trying to compile squid-3.0-PRE3-20040331 with SSL support on the > following platform: > > uname -a > SunOS ctech 5.6 Generic_105181-23 sun4u sparc SUNW,Ultra-5

Re: [squid-users] Messages of WCCP or IPTABLES?

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004, Awie wrote: > Mar 29 13:52:29 Proxy kernel: skb: pf=2 (unowned) dev=eth0 len=48 No ideawhat this is. > Mar 29 13:52:29 Proxy kernel: PROTO=6 202.136.64.10:1691 202.143.97.229:80 > L=48 S=0x00 I=60702 F=0x4000 T=126 This is iptables LOG target.. > Mar 29 13:52:29 Proxy kerne

Re: [squid-users] referer_log question

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004, Henrik Steffen wrote: > is there a way to pipe the referer_log directly to a script > or save it to a database? Not yet. What you can do is to have a tail running on the log file and piping the results to a script. The perl File::Tail module is optimal for this purpose. Re

Re: [squid-users] Squid caching SSI pages?

2004-04-01 Thread Henrik Nordstrom
On Wed, 31 Mar 2004, Greg Swallow wrote: > Assuming documentation at > http://www.bowiesnyder.com/writings/caching_shtml.htm is true, my > squid-based reverse proxies shouldn't be caching HTML documents that are > server parsed. However, it appears that the four reverse proxies I have > sitti

Re: [squid-users] Squid caching SSI pages?

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004, Matus UHLAR - fantomas wrote: > > Also according to this documentation, I should be able to test whether > > or not Apache is responding to IMS requests by checking for HTTP 304 > > shouldn't that be 306? No. If you see 306 responses then you are in serious trouble... 10.3

Re: [squid-users] Squid: Disks question

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004, Alexandros C. Couloumbis wrote: > I am building a 2x 2.8GHz P4, no HT, 4Gig RAM squid engine on > a Linux 2.6 with reiser4 and wccp (Gentoo - everything from > source) no auth There has not yet been any significant benchmarking of how Squid behaves on Linux 2.6. I have hoeve

Re: [squid-users] HTTP to HTTPs

2004-04-01 Thread Henrik Nordstrom
On Wed, 31 Mar 2004, Schuster, Dan (TLR Corp) wrote: > Can you connect up to squid with HTTP requests and have squid make HTTPS requests? > > I would like to connect up to squid and make a "GET https://www.sslwebsite.com > HTTP/1.0" and have squid terminate the SSL connection out to the remote

RE: [squid-users] Multiple Authentication Programs

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004, Keppner, Christoph wrote: > Hi! > > i googled a bit, and found a Mailthread > (http://www.squid-cache.org/mail-archive/squid-dev/200104/0208.html), where > this syntax is used: > > auth_param ntlm authdomainaclname1 program /foo/bar > auth_param ntlm authdomainaclname2 progr

Re: [squid-users] problem with squid_ldap_group

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004 [EMAIL PROTECTED] wrote: > auth_param basic program /PATH/proxy/libexec/squid_ldap_auth -b > ou=Person,dc=company,dc=com -f(uid=%s) -h ldapserver > > external_acl_type ldap_group %LOGIN /PATH/DEV/proxy/libexec/squid_ldap_auth - > b "ou=Applications,dc=company,dc=com" -B "ou=P

RE: [squid-users] purge from cache

2004-04-01 Thread Raphael Maseko
What value do you have for cache_dir? This should help set how big your cache should grow. Ralph -Original Message- From: Henrik Steffen [mailto:[EMAIL PROTECTED] Sent: Thursday, April 01, 2004 10:31 AM To: [EMAIL PROTECTED] Subject: [squid-users] purge from cache hello all, after ha

Re: [squid-users] Multiple Authentication Programs

2004-04-01 Thread Henrik Nordstrom
On Wed, 31 Mar 2004, Keppner, Christoph wrote: > My Squid runs on a firewall with 3 interfaces, 1st interface is the > connection to my provider, 2nd interface is connected to "localnet". Now i > want to add a new ip-network on the 3rd interface. Within this network, a > new Windows 2000 Domain (D

Re: [squid-users] purge from cache

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004, Henrik Steffen wrote: > after having started with a clean cache on February, 14th > my cache-folder has meanwhile increased to a size of > 68 GB, which makes 96 % of the available space on that > partition. How large is your cache_dir? > However, there are still objects as e.

Re: [squid-users] Setting up Squid as a Child Proxy

2004-04-01 Thread Henrik Nordstrom
On Wed, 31 Mar 2004, Sarky wrote: > Hello All, > > I have Mikrotik running as a parent Proxy and at the same time i want to run > Squid as a child proxy. > > I think it is something to do with ACL but i dont know where to start. What problem do you see? If you are inside a firewall and must us

RE: [squid-users] Cache Size Limitation

2004-04-01 Thread Hermann Strassner
> 32-bit Architecture. What would you suggest cache_mem to be > on a system with 1 gig of ram? 8 MB > What would you suggest as a maximum_object_size ?? As you think, 1024 MB does not make problems here. > The filesystem is 40gig. The cache_dir should be a maximum of 75% of the free space on

RE: [squid-users] Cache Size Limitation

2004-04-01 Thread Hermann Strassner
> cache_mem 4048 MB This is not the size of the cache in total, it is only the size of the cache in memory. Do you have enough memory to allow for 4048 MB cache mem, and the mem for the OS, and the mem for the squid process and the mem for the index of the cache files on disk? I have not seen any

[squid-users] Performance

2004-04-01 Thread VRavi
Hi, It seems that there is a lot of performance degradation if I introduce squid in my network. If I connect to a site without squid directly through my firewall, the response is quick and fast. If I connect the same workstation though the squid proxy which is directly connected to internet the re

AW: [squid-users] purge from cache

2004-04-01 Thread Henrik Steffen
arg, that was it... the cache_dir was set to 10 but there is only 70 GB available. thanks for your help! -- Mit freundlichem Gruß Henrik Steffen Geschäftsführer top concepts Internetmarketing GmbH Am Steinkamp 7 - D-21684 Stade - Germany --

RE: [squid-users] Performance

2004-04-01 Thread Elsen Marc
> Hi, > > It seems that there is a lot of performance degradation if I introduce > squid in my network. If I connect to a site without squid > directly through > my firewall, the response is quick and fast. If I connect the same > workstation though the squid proxy which is directly > connect

[squid-users] URL redircet

2004-04-01 Thread Rakesh Kumar
How can I direct request http://myurl.com to https://myurl.com. Is it possible through squid... Rakesh # DISCLAIMER Any non-official business related views, opinions and other information presented in this elect

RE: [squid-users] URL redircet

2004-04-01 Thread Elsen Marc
ect: [squid-users] URL redircet > > > How can I direct request http://myurl.com to https://myurl.com. Is it > possible through squid... > Yes, by writing a small redirector programs and using the 'redirect_program' directive in squid.conf. Check also : http://www.squid-cache.org/Doc/FAQ

Re: [squid-users] problem with squid_ldap_group

2004-04-01 Thread apmailist
Selon Henrik Nordstrom <[EMAIL PROTECTED]>: > On Thu, 1 Apr 2004 [EMAIL PROTECTED] wrote: > > > auth_param basic program /PATH/proxy/libexec/squid_ldap_auth -b > > ou=Person,dc=company,dc=com -f(uid=%s) -h ldapserver > > > > external_acl_type ldap_group %LOGIN /PATH/DEV/proxy/libexec/squid

Re: [squid-users] problem with squid_ldap_group

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004 [EMAIL PROTECTED] wrote: > The group shows up like this upon ldapsearch : > > # Internet, Applications, company.com > dn: cn=Internet,ou=Applications,dc=company,dc=com > objectClass: top > objectClass: groupofuniquenames > cn: Internet > uniqueMember: uid=test,ou=Person,dc=comp

Re: [squid-users] Messages of WCCP or IPTABLES?

2004-04-01 Thread Awie
> > Which ip_wccp module are you using? The ip_wccp.c linked from the FAQ is > > recommended. > > > > Regards > > Henrik > > I'm using the patch below (my kernel is 2.4.25). I will try to use the > ip_wccp.c from the FAQ and compile it manually. > > Thx & Rgds, > > Awie > > SNIP > > diff

Re: [squid-users] problem with squid_ldap_group

2004-04-01 Thread apmailist
Selon Henrik Nordstrom <[EMAIL PROTECTED]>: > On Thu, 1 Apr 2004 [EMAIL PROTECTED] wrote: > > > The group shows up like this upon ldapsearch : > > > > # Internet, Applications, company.com > > dn: cn=Internet,ou=Applications,dc=company,dc=com > > objectClass: top > > objectClass: groupofuniquena

[squid-users] Re: Re: Authenntication with a Transparent Proxy

2004-04-01 Thread Adam Aube
Henrik Nordstrom wrote: > On Wed, 31 Mar 2004, Adam Aube wrote: > >> However, I have heard of an open source project that does exactly this - >> provide controlled access for public wireless service. > It is not possible do do HTTP proxy authentication in a transparent proxy. Yes, I know. I've

[squid-users] question about squid array setup

2004-04-01 Thread Nielsen, Steve
I have this squid configuration: LVS vip front end to squid | ++ | ||| | |

Re: [squid-users] Squid caching SSI pages?

2004-04-01 Thread Greg Swallow
Henrik Nordstrom wrote: On Wed, 31 Mar 2004, Greg Swallow wrote: Assuming documentation at http://www.bowiesnyder.com/writings/caching_shtml.htm is true, my squid-based reverse proxies shouldn't be caching HTML documents that are server parsed. However, it appears that the four reverse proxie

Re: [squid-users] problem with squid_ldap_group

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004 [EMAIL PROTECTED] wrote: > FYI : > I had 2 times 5 ldap_auth processes starting. After logging in, and exact. 60 > seconds Squid would coredump after several messages such as : > 2004/04/01 16:25:43| WARNING: ldap_group #1 (FD 11) exited > 2004/04/01 16:25:43| WARNING: ldap_gro

[squid-users] Problem with Squid 2.5

2004-04-01 Thread Mike Riella
I have been running Squid as my companies intranet/internet proxy. It has done great. I use squidGuard for a redirector. Lately after upgrading to squid 2.5.5 I keep getting an error in cache.org when people try to connect to sites like webmail.aol.com, yahoo/hotmail/msn webmails. Here is the e

[squid-users] folding@home and squid

2004-04-01 Thread xavier
Hi, I'm using [EMAIL PROTECTED] and squid in transparent proxy mode (i'm not telling fah that there is a proxy) I had to change the body_max_size to let folding at home submit his result : (in squid.conf) -# request_body_max_size 1 MB +# bumped from 1mb to 2 mb for folding at home +request_bo

[squid-users] Trouble With Website

2004-04-01 Thread Matt
I am running squid/2.5.STABLE4 release. I cannot get the following website to come up correctly. Can someone verify whether it works for them or not? I think its running MSII whatever and its supposed to have all the patches. http://mail2.wenger.com/ Thanks Matt

[squid-users] CPU usage

2004-04-01 Thread Gaetano Mendola
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is not too much this CPU usage ? Connection information for squid: Number of clients accessing cache: 1241 Number of HTTP requests received: 2993205 Number of ICP messages received:0 Number of ICP mess

[squid-users] Can Squid Acc. accelerate WindowsUpdate ?!

2004-04-01 Thread Sampei
I need accelerating WindowsUpdate procedure in my network, where I'm actually using Squid 2.5 to go out to the public network; Windows clients must be often updating because there is no remote system to admin. There are acl to permit navigation to some users and in this case their browser have th

RE: [squid-users] Cache Size Limitation

2004-04-01 Thread Joel Jaeggli
On Thu, 1 Apr 2004, Hermann Strassner wrote: > > cache_mem 4048 MB > > This is not the size of the cache in total, it is only the size of the > cache in memory. Do you have enough memory to allow for 4048 MB cache > mem, and the mem for the OS, and the mem for the squid process and the > mem for

Re: [squid-users] squid and ldap and active directory

2004-04-01 Thread Jim_Brouse/PYT
Since winbind uses ``base64'' encoding is it possible for squid and winbind to only look at the username being presented and not ask for the password therefore the password would not be transmitted in clear text? Jim

Re: [squid-users] squid and ldap and active directory

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004 Jim_Brouse/[EMAIL PROTECTED] wrote: > Since winbind uses ``base64'' encoding is it possible for squid and winbind > to only look at the username being presented and not ask for the password > therefore the password would not be transmitted in clear text? Basic authenticat

Re: [squid-users] Problem with Squid 2.5

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004, Mike Riella wrote: > I have been running Squid as my companies intranet/internet proxy. It > has done great. I use squidGuard for a redirector. Lately after > upgrading to squid 2.5.5 I keep getting an error in cache.org when > people try to connect to sites like webmail.aol

Re: [squid-users] folding@home and squid

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004, xavier wrote: > I'm using [EMAIL PROTECTED] and squid in transparent proxy mode > (i'm not telling fah that there is a proxy) > I had to change the body_max_size to let folding at home > submit his result : (in squid.conf) > > > -# request_body_max_size 1 MB > +# bumped from

Re: [squid-users] Trouble With Website

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004, Matt wrote: > I am running squid/2.5.STABLE4 release. I cannot get the following website > to come up correctly. Can someone verify whether it works for them or not? > I think its running MSII whatever and its supposed to have all the patches. > > http://mail2.wenger.com/ T

Re: [squid-users] Can Squid Acc. accelerate WindowsUpdate ?!

2004-04-01 Thread Henrik Nordstrom
See the guide on how to mirror Windows Update locally, available on the net (see ML archives). Regards Henrik On Thu, 1 Apr 2004, Sampei wrote: > I need accelerating WindowsUpdate procedure in my network, where I'm > actually using Squid 2.5 to go out to the public network; Windows clients > m

RE: [squid-users] Problem with Squid 2.5

2004-04-01 Thread Mike Riella
Access.log says: 1080858499.517320 192.20.20.100 TCP_MISS/302 775 GET http://webmail.aol.com/ - DIRECT/205.188.139.152 text/html 1080858499.748 24 192.20.20.100 TCP_MISS/503 1475 GET http://%95j/_cqr/login/login.psp? - NONE/- text/html Does this with and without squidGuard running. Mike R

RE: [squid-users] Problem with Squid 2.5

2004-04-01 Thread Henrik Nordstrom
On Thu, 1 Apr 2004, Mike Riella wrote: > Access.log says: > 1080858499.517320 192.20.20.100 TCP_MISS/302 775 GET > http://webmail.aol.com/ - DIRECT/205.188.139.152 text/html > 1080858499.748 24 192.20.20.100 TCP_MISS/503 1475 GET > http://%95j/_cqr/login/login.psp? - NONE/- text/html > >

[squid-users] RE: File uploaded

2004-04-01 Thread Mike Riella
Hrmph.. if IE6 doesn't get a workaround any time soon then I'll just deploy Mozilla. I always had faith in IE6 but this nonsense just makes me want to drop it. Thanks for the help Henrik. I appreciate it. Mike Riella ( [EMAIL PROTECTED] ) Pacific Groservices Inc Network Administrator -

[squid-users] Squid 2.4 OpenLDAP single logon with IE

2004-04-01 Thread Ben Aung
I have installed Squid 2.4 STABLE 7 and configured authentication with OpenLDAP. It is working fine but I have to enter username and password for every IE instance. Is there any way that I only enter one time and Squid cache the credential for any given time? Thus I do not need to enter username a

Re: [squid-users] Trouble With Website

2004-04-01 Thread Matt
> > I am running squid/2.5.STABLE4 release. I cannot get the following website > > to come up correctly. Can someone verify whether it works for them or not? > > I think its running MSII whatever and its supposed to have all the patches. > > > > http://mail2.wenger.com/ > > This server uses NTLM

[squid-users] Cant install software from the Internet via SquidNT

2004-04-01 Thread Marcus-Hong Yu
Hello all, I'm using 2 SquidNT proxies to do the Internet access, which means the internet access request will go thru 2 proxies as one is the child and the other is the parent. PC>SquidNT proxy1>SquidNT proxy2->Internet Here im encountering an problem...when a user tried to install a

Re: [squid-users] URL redircet

2004-04-01 Thread Matus UHLAR - fantomas
On 01.04 14:22, Rakesh Kumar wrote: > How can I direct request http://myurl.com to https://myurl.com. Is it > possible through squid... That's http servers' business. It is teoretically possible by squid byt it probably will never support such feature... -- Matus UHLAR - fantomas, [EMAIL PROTECTE

Re: [squid-users] Cant install software from the Internet via SquidNT

2004-04-01 Thread Denis Vlasenko
On Friday 02 April 2004 07:07, Marcus-Hong Yu wrote: > Hello all, > I'm using 2 SquidNT proxies to do the Internet access, which means the > internet access request will go thru 2 proxies as one is the child and the > other is the parent. > PC>SquidNT proxy1>SquidNT proxy2->Internet > H

[squid-users] Squidalyser and others

2004-04-01 Thread Matthew Tanase
Trying to get Squidalyser working and having problems w/ the GD perl modules. It looks to be a common problem w/out an easy fix. Are there any other per user log file analysis programs out there like Squidalyser? I've seen Calamaris recommended, but it looks different than Squidalyser to me. Bas

[squid-users] FATAL: Received Segment Violation...dying.

2004-04-01 Thread unixware
Dear all Squid stops suddenly with FATAL: Received Segment Violation...dying. i have 4 squid boxes running squid-2.5Stable4 most them of dying with same problem since yesterday . i aslo upgraded to squid-2.5-Stable5 but same problem Other thing i have notice squid is taking too much CPU like 9

Re: [squid-users] FATAL: Received Segment Violation...dying.

2004-04-01 Thread Muthukumar
> Squid stops suddenly with FATAL: Received Segment > Violation...dying. i have 4 squid boxes running > squid-2.5Stable4 most them of dying with same problem > since yesterday . i aslo upgraded to squid-2.5-Stable5 > but same problem Anyother messages on the cache.log. what is the configuration?