> On Wed, 7 Apr 2004, Muthukumar wrote:
>
> > A setup as online-server which gives dynamic content to the
> > squid-accelerator.Squid seves the requests to multiple clients.
>
> Ok.
>
> > By defualt squid won't cache the dynamic content.
>
> Depends on why it is not cacheable and what your ref
On Thu, 8 Apr 2004, Luis Eduardo Cortes wrote:
> ¿ Is this the path in the source tree to access the source code of this
> module ?
This path is in the Squid-2.5 source tree.
> ¿ Are you saying to me that I must compile this module ?
It is just a perl script so there is not much to compile.. bu
On Wed, 7 Apr 2004, Nielsen, Steve wrote:
> 2.5.STABLE5 with no extra patches.
Ok.
Please follow this guide on how to report Squid bugs:
Squid FAQ 11.19 Sending in Squid bug reports
http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.19>
your problem classifies as a "crashes and core dumps" ty
¿ Is this the path in the source tree to access the source code of this
module ?
¿ Are you saying to me that I must compile this module ?
¿ Can I compile this module alone without compile everything in squid ?
Thanks again.
>> ¿ Is wbinfo_group for Samba 3.0.2 ? If so, this file doesn't exist. ¿
2.5.STABLE5 with no extra patches.
Steve
-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 07, 2004 12:54 PM
To: Nielsen, Steve
Cc: Elsen Marc; [EMAIL PROTECTED]
Subject: RE: [squid-users] squid crashing with error message
On Wed, 7 Apr 2004, Nie
On Wed, 7 Apr 2004, Michael Gale wrote:
> Has any got to point where to many acl list have slowed down internet
> access ?
Not that I know of. But many has got to the point that large and wrongly
used regex based acl lists do slow down internet access.
Squid has many acl types, and rarely ever
On Wed, 7 Apr 2004, Ed Rodgers wrote:
> I think it has something to do with the fact that the site it is
> accessing is an IIS site that allows no anonymous access, and
> uses "integrated windows authentication" as it's only
> authentication.
Then the site must be using https:// to be accessib
On Thu, 8 Apr 2004, Gillian Bennett wrote:
> I have just migrated onto Fedora core 1.0, and tried compiling
> squidGuard with db-3.2.2 following the checklist. I am having no luck
> with this, and using the old db, I get a domainlist empty error. the
> error I get when I compile is:
>
> /usr/loca
On Wed, 7 Apr 2004, Francisco Lopez wrote:
> I don't agree with this point. Since:
> A) there are (on the top users test) 150 simultaneous users
> B) squid doesn't put in memory objects not received from the network
Still you only have 500k data. This absolutely for sure fits in memory on
any se
Francisco Lopez wrote:
> There are 3000 requests, however only 10 different pages. So the total
> size of objects in memory should be 500k. Anyway, this is not important.
Actually, this is important. See below.
> I think that on high load AUFS should perform better and 150
> users sending reques
Hi,
I know this is the wrong list, but I am hoping that Rick Matthews here
is the same guy who on the MARC squidGuard mailing list submitted the
checklist for compiling squidGuard with db 3.2.2. ;)
I have been using squidGuard for some time using the older db-2.7.7
without any problems, on rh 8 a
Thanks Henrik for your response. See my comments below:
> On Wed, 7 Apr 2004, Francisco Lopez wrote:
>
> > Tests are performed using Jmeter 2.0 from 3 different pc's
> (to avoid
> > client stress). Each test run is a constant number of
> requests (3000)
> > varying the number of simultaneou
On Wed, 7 Apr 2004, Jason Williams wrote:
> >How many page views per second do you expect your users to do?
>
> This is something that I would need to figure out in order to give a answer.
> The trick is, figuring out how to gather this information. :)
Estimate how many users you have browsing a
On Wed, 7 Apr 2004, Francisco Lopez wrote:
> Tests are performed using Jmeter 2.0 from 3 different pc's (to avoid
> client stress).
> Each test run is a constant number of requests (3000) varying the number
> of simultaneous users (3, 6, 15, 30, 60, 150). The objects requests are
> chosen on each
On Wed, 7 Apr 2004, Ed Rodgers wrote:
> Also, is there a way to have squid bypass using the proxy for this
> connection, or does it all have to be done on the client machines
> in the exclusion lists?
This is not up to Squid. It is only the client who can bypass the use of
the proxy. Once the c
On Wed, 7 Apr 2004, Ian Clancy wrote:
> 2004/04/07 10:04:44| assertion failed: helper.c:323: "srv->flags.reserved"
http://www.squid-cache.org/Versions/v2/2.5/bugs/
Regards
Henrik
On Wed, 7 Apr 2004, Luis Eduardo Cortes wrote:
> ¿ Is wb_group for Samba 2.x.x ?
Yes
> ¿ Is wbinfo_group for Samba 3.0.2 ? If so, this file doesn't exist. ¿ Must
> I have to compile Squid ? ¿ Wich option must I use ?
The wbinfo_group helper is in helpers/external/wbinfo_group/
Regards
Henrik
On Wed, 7 Apr 2004, Montervino, Mariano wrote:
> Thanks for your point but we are using cache heirarchy. Our configuration is
> like this
>
> Squid -> Dansguardian -> Squid
The answer is still valid.
What you need to do is to allow messenger access without requiring
authentication. This is don
On Wed, 7 Apr 2004 [EMAIL PROTECTED] wrote:
> ./configure --enable-ipf-transparent --prefix=/usr/local/squid
>
> Below is the part of config.log file that shows the configure failing with
> enable ipf transparent:
>
> configure:3849: ip_compat.h: No such file or directory
> configure:3849: ip_
-- Original Message --
From: Adam Aube <[EMAIL PROTECTED]>
>
>> It's our internal site on our other network that requires a 3 tier
>> network login.
>
>Since it's an internal site, just configure the browsers to
bypass Squid for
>this site. Make sure any in
Hi:
First of all, sorry for this long posting and I hope to have
explained everything clear. I'm looking for some insight or suggestions
that help me understand what is happening.
I'm running some performance experiments to analyze the impact of
different factors (processor speed, number of pr
Ed Rodgers wrote:
> I got Squid 2.5 STABLE5 up and running... and it runs well...
> except I have problems when trying to access 1 site that is
> business critical.
> I think it has something to do with the fact that the site it is
> accessing is an IIS site that allows no anonymous access, and
>
Dide the make distclean, and also started from a fresh new squid source
tree. Below is the part in the config.log file that is showing the errors
for ip_compat.h, and ip_fil_compat.h. I don't have a ip_fil_compat.h
file, does anyone know if ip filter 4.1.1 include this. I copied
ip_compat.h
I got Squid 2.5 STABLE5 up and running... and it runs well...
except I have problems when trying to access 1 site that is
business critical.
I think it has something to do with the fact that the site it is
accessing is an IIS site that allows no anonymous access, and
uses "integrated windows
Hello Squid Users,
I've been successfully running squid2.5 stable3 on RH9 for about 9 months.
However, last week i patched to stable5 and rebuilt squid. At first
everything seemed to be working fine but then i noticed a lot of activity in
the cache.log file. Squid is stoping and starting every hour
I have already configured Winbind and Squid for NTLM and basic authentication.
Now, I want to add external ACLs, but I'm not sure, ¿ what helper must I
use ?
¿ Is wb_group for Samba 2.x.x ?
¿ Is wbinfo_group for Samba 3.0.2 ? If so, this file doesn't exist. ¿ Must
I have to compile Squid ? ¿ Wich
Hello,
Has any got to point where to many acl list have slowed down internet access ?
--
Michael Gale
Network Administrator
Utilitran Corporation
Is this all your users is doing all the time?
Well, we do have a lot of web interfaces that our vendors use. Mix that in
with that these users surf as well. However, a big part of what I want to
implement will restrict where users can and cannot go.
Lets try to reformulate the problem to someth
Montervino, Mariano wrote:
> Thanks for your point but we are using cache heirarchy. Our configuration
> is like this
> Squid -> Dansguardian -> Squid
Ok, that's fine - just put the yahoo line in http_access like I showed, and
not in always_direct like you had it.
Adam
Thanks for your point but we are using cache heirarchy. Our configuration is
like this
Squid -> Dansguardian -> Squid
Cheers
-Mensaje original-
De: Adam Aube [mailto:[EMAIL PROTECTED]
Enviado el: Miércoles, 07 de Abril de 2004 16:13
Para: [EMAIL PROTECTED]
Asunto: [squid-users] RE: Re: H
On Wed, 7 Apr 2004, [iso-8859-2] Hegedüs Ervin wrote:
> program about like here:
> $ php program.php
php also understands the traditional hashbang interpreter specification
method used for pretty much any form of scripts in UNIX..
Regards
Henrik
Montervino, Mariano wrote:
> I try your suggestion but the problem persist.
> Bellow is acl extract of the squid.conf
[snipped]
Unless you are using a cache heirarchy, you have no need of always_direct
and never_direct.
What I said to do was something like this:
acl yahoo dstdomain .msg.yahoo
Adam, first of all thanks for your replay...
I try your suggestion but the problem persist.
Bellow is acl extract of the squid.conf
#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl yahoo dstdomain .msg.y
hello,
> auth_param basic program /etc/squid/mysql_auth.php
two simple things:
- i think you can't use any mysql-based auth module in NTLM
scheme - but i'm not sure
- the chances are that Squid can't execute any php program,
'cause php needs an interpreter; so, you can execute any php
progr
HAHHAAHA -- every one ask "how do we block this" and you are asking how to allow
it.
Anyways I believe NTLM is a Microsoft standard, either way yahoo messenger must
support NTLM authentication in order to use the web.
I believe MSN messenger supports NTLM.
Michael.
On Wed, 7 Apr 2004 14:34:32
Henrik Nordstrom wrote:
> Was a report some days ago indicating there is some kind of difference is
> one enables/disables "Use HTTP/1.1 via proxies" option.. apparenly in one
> mode IE worked, on the other messenger.. (or something like that, but
> maybe it was MSN messenger..)
That was the orig
At 15.08 07/04/2004, Bernard PRE wrote:
Hi,
I have try this :
auth_param ntlm program /etc/squid/mysql_auth.php
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 20 minutes
But if I launh two times IE, I always be asked for Username and Pass
Does anybody knows why the following erorr happens:
While trying to retrieve the URL: http://64.246.24.58:81/
The following error was encountered:
* Access Denied.*
I am trying to make Apache listen on port 81 and make Squid listen on port 80, so that it will cache common objects such as dow
On Wed, 7 Apr 2004 [EMAIL PROTECTED] wrote:
> From browser when i open https://reverse.parmalat.com, the SSL tunnel
> work fine, but after the Domino authentication the content from the
> back-end server is received from the browser over normal http session
> (not https).
This is because your Dom
On Wed, 7 Apr 2004, Adam Aube wrote:
> I can understand your frustration - we had the same problem at a site I
> worked at. Never could figure out how to get Yahoo! messenger working, but
> also didn't invest an enormous amount of time into it, as Yahoo! messenger
> was personal use, not business-
On Wed, 7 Apr 2004, Serban Teodorescu wrote:
> I bothered you 3 years ago about how can i disable logging for *.exe file
> requests (at that time i recall it was a nimda problem, so squid died because
> of 100% disk usage - 1.6 GB in 30 min).
>
> You said then that _maybe_ you'll consider the s
On Wed, 7 Apr 2004 [EMAIL PROTECTED] wrote:
> Newbie here, I have trying to install squid 2,5 in transparent proxy mode
> on a Solaris 9 box. I have installed ipfilter 4.1.1 already. My problem
> right now is the configure part of squid with the option of
> --enable-ipf-transparent. I am get
On Wed, 7 Apr 2004, Serban Teodorescu wrote:
> Hi there.
>
> I have a 2.5 STABLE 3.
>
> It seeems to stuck when access.log reaches 2GB.
>
> Any suggestions?
Rotate your log files before the magic 2GB file size limitation is
reached.
Regards
Henrik
On Wed, 7 Apr 2004, Priya Patil wrote:
> Does Squid forward the data to destination in a separate thread?
No. Squid runs as a single thread servicing many clients.
> How is data forwarding done in Squid.
By a basic non-blocking I/O loop.
Regards
Henrik
On Wed, 7 Apr 2004, Muthukumar wrote:
> A setup as online-server which gives dynamic content to the squid-accelerator.Squid
> seves the requests to multiple clients.
Ok.
> By defualt squid won't cache the dynamic content.
Depends on why it is not cacheable and what your refresh_pattern say.
On Wed, 7 Apr 2004, Nielsen, Steve wrote:
> I am using redhat 7.3 fully patches (through fedora legacy project) and squid
> 2.5.STABLE5.
With or without the official Squid patches?
Regards
Henrik
On Wed, 7 Apr 2004, Clemson, Chris wrote:
> can someone tell me the point of the --enable-icmp configure option?
I have not found many valid reasons why to enable this..
> is it for client use or just for squid to find out of the server is up and
> running or not?
It is only of interest if you
On Wed, 7 Apr 2004, Bernard PRE wrote:
> auth_param basic program /etc/squid/mysql_auth.php
Does this helper work from the command line?
What do you http_access rules look like?
Regards
Henrik
Hi
I've configured Squid (Version 2.5.STABLE4) as accelerator with support to SSL
(openSSL) and backend Lotus Domino Server.
This is the Squid.conf line:
http_port 80
https_port 443 cert=/etc/ssl/reverse.parmalat.com.crt
key=/etc/ssl/reverse.parmalat.com.key
httpd_accel_host reverse.parmal
Montervino, Mariano wrote:
> I´m using squid Version 2.5.STABLE5 and Samba 3.0.2a in a windows network.
> If i configure IE to use "use http 1.1" plus "use http 1.1 through proxy
> connection" options i couldn´t access somes site using ssl. The access.log
> show that for thats sites the user does
We validate our squid users using ntlm schema and internet browse work fine,
but we couldn´t login to Y! messenger service. The Y! program was
configurated to go through proxies connection.
This is a piece of access.log squid file.
1081357847.950 1 xxx.xxx.xxx.xxx TCP_DENIED/407 1678 POST
ht
Hi
I've configured Squid (Version 2.5.STABLE4) as accelerator with support to SSL
(openSSL) and backend Lotus Domino Server.
This is the Squid.conf line:
http_port 80
https_port 443 cert=/etc/ssl/reverse.parmalat.com.crt
key=/etc/ssl/reverse.parmalat.com.key
httpd_accel_host reverse.parmal
Hi.
I bothered you 3 years ago about how can i disable logging for *.exe file
requests (at that time i recall it was a nimda problem, so squid died because
of 100% disk usage - 1.6 GB in 30 min).
You said then that _maybe_ you'll consider the suggestion if there are more
requests of that type.
Hello everyone,
Newbie here, I have trying to install squid 2,5 in transparent proxy mode
on a Solaris 9 box. I have installed ipfilter 4.1.1 already. My problem
right now is the configure part of squid with the option of
--enable-ipf-transparent. I am getting the usual error,
WARNING: Can
On 07.04 13:28, Clemson, Chris wrote:
> can someone tell me the point of the --enable-icmp configure option?
> is it for client use or just for squid to find out of the server is up and
> running or not?
>
> i've tried looking at the manual at squid.visolve.com, but the pages keep
> reloading in m
Priya Patil wrote:
> Does the proxy use a separate thread to transfer data between the client
> and remote server?
Obviously you didn't mean "connection"...
Squid is not multi-threaded, so the answer is no. The same process handles
both client <-> proxy and proxy <-> remote server connections.
Does the proxy use a separate thread to transfer data between the client
and remote server?
> Priya Patil wrote:
>
>> Does Squid forward the data to destination in a separate thread?
>
> You mean separate TCP/IP connection, right?
>
> With proxies, there are two distinct TCP/IP connections - one
Thank you very much Marc for your time.
I use sarg to see the weekly quota (MB) of each LDAP authenticated user.
The only way i use it was by now to delete the reports from the cuurent week
and then based on the actual log to recreate them.
Can anybody suggests a suitable report program which c
> Hi there.
>
> I have a 2.5 STABLE 3.
>
> It seeems to stuck when access.log reaches 2GB.
>
> (filesystem is ext3, kernel is 2.4.xx so thereÅ no filesystem
> problem).
>
I think there is. 2Gb remains the limit in this case.
Rotate your log(s) in a timely manner.
M.
Hi there.
I have a 2.5 STABLE 3.
It seeems to stuck when access.log reaches 2GB.
(filesystem is ext3, kernel is 2.4.xx so thereÅ no filesystem problem).
Any suggestions?
Thank you very much.
--
Serban Teodorescu,
head of IT&C dept,
sys&net eng
>
> Well, i got 'm up and running,
> but i downloaded a log analyzer from olaf schubert
> a i was supprised to see that only 0,1 persent of the
> web pages were from the cache, and the rest from the internet..
>
> even if i reloaded, or restared my web browser, squid was
> getting the data fro
Well, i got 'm up and running,
but i downloaded a log analyzer from olaf schubert
a i was supprised to see that only 0,1 persent of the
web pages were from the cache, and the rest from the internet..
even if i reloaded, or restared my web browser, squid was
getting the data from the web..
i use a
Priya Patil wrote:
> Does Squid forward the data to destination in a separate thread?
You mean separate TCP/IP connection, right?
With proxies, there are two distinct TCP/IP connections - one between the
client and the proxy, and one between the proxy and the remote server. The
client and the re
Thankyou Henrik for the suggestion.
Still testing the setup with multiple subnets, preliminary results are good.
Again Thanks,
Rikunj
- Original Message -
From: "Henrik Nordstrom" <[EMAIL PROTECTED]>
To: "Rikunj" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, April 07, 200
Bernard PRE wrote:
> auth_param ntlm program /etc/squid/mysql_auth.php
> auth_param ntlm children 5
> auth_param ntlm max_challenge_reuses 0
> auth_param ntlm max_challenge_lifetime 20 minutes
>
> But if I launh two times IE, I always be asked for Username and Password
> (each times)
>
> ==> I h
Hi,
Does Squid forward the data to destination in a separate thread?
How is data forwarding done in Squid.
Thanks,
Priya
Hi,
I have try this :
auth_param ntlm program /etc/squid/mysql_auth.php
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 20 minutes
But if I launh two times IE, I always be asked for Username and Password
(each times)
==> I have try to set
Hello All,
A setup as online-server which gives dynamic content to the
squid-accelerator.Squid seves the requests to multiple clients.
By defualt squid won't cache the dynamic content.
Is there a way to cache this by using the "vary_ignore_expire on" setting and
changing
I am using redhat 7.3 fully patches (through fedora legacy project) and squid
2.5.STABLE5.
Thanks,
Steve
-Original Message-
From: Elsen Marc [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 07, 2004 7:45 AM
To: Nielsen, Steve; [EMAIL PROTECTED]
Subject: RE: [squid-users] squid crashing w
>
> I get this message often (see below). Squid will then
> abruptly exist causing the cache to be dirty. Once squid
> restarts it works on cleaning the cache. This causes large
> performance decreases (avg mean time for a response goes from
> 200 ms to 2000 ms. Does anyone know what might
I get this message often (see below). Squid will then abruptly exist causing the cache
to be dirty. Once squid restarts it works on cleaning the cache. This causes large
performance decreases (avg mean time for a response goes from 200 ms to 2000 ms. Does
anyone know what might be causing this e
can someone tell me the point of the --enable-icmp configure option?
is it for client use or just for squid to find out of the server is up and
running or not?
i've tried looking at the manual at squid.visolve.com, but the pages keep
reloading in mozilla so i can't read anything!
thank you,
chri
I think this is correct. You are using the basic authentication schema, this
mean each time you launch the browser is going to prompt you the
user/password. Is you are in a windows network and want to avoid the popup
authentication use ntlm schema.
cheers.
-Mensaje original-
De: Bernard
On Wed, 7 Apr 2004, M.E. Koch wrote:
> acl urpath_regex NOCAHEHOSThttp://host1.com http://host2.com
> no_cache deny NOCACHEHOST
>
> Is this right?
This is not at all the correct ACL type for what you are doing
See the dstdomain ACL for a much better match.
> Do I get problems with t
On Wed, 7 Apr 2004, Joel CARNAT wrote:
> OK, I tried getting STABLE5 tarball but the patch doesn't seem to be
> included :/
Correct.
> I didn't see it in the patch list... Is there an URL ?
devel.squid-cache.org
> Or should I CVS the whole sources ? from ssl-20021206 ? from
> Z-ssl-20021206_me
Hi,
I have this parameters in my squid.conf :
auth_param basic program /etc/squid/mysql_auth.php
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
but each time the same client launch IE, He is asked for Username and
Password
Hello can somebody please verify this:
want to block a host and some vhosts from caching
with squid 2.5 stable 6, running as an accelerator.
I would write:
acl urpath_regex NOCAHEHOSThttp://host1.com http://host2.com
no_cache deny NOCACHEHOST
Is this right?
Do I get problems with t
OK, I tried getting STABLE5 tarball but the patch doesn't seem to be
included :/
I didn't see it in the patch list... Is there an URL ?
Or should I CVS the whole sources ? from ssl-20021206 ? from
Z-ssl-20021206_merge_HEAD-20021206 ?
I would like to keep as close as STABLEx as possible
thanks for
On Wed, 7 Apr 2004, Elsen Marc wrote:
> I see this more as an issue with the L4 box, then with Squid.
> Just keep the thing forwarding, else, throw it away.
Yes and no. Many L4 boxes have built in service monitors backing off from
the server when it stops responding properly to improve system
r
On Tue, 6 Apr 2004, "Xavier Báez C." wrote:
> While trying to retrieve the URL: http://64.246.24.58:81/
>
> The following error was encountered:
>
> * Access Denied.*
See your http_access rules.
Note: YOU ABSULUTELY DO NOT WANT "http_access allow all".
Regards
Henrik
On Tue, 6 Apr 2004, Francisco Lopes wrote:
> Hello everyone,
>
> I'm trying to install Squid on my server for my personal use, that
> means, only I will use the proxy. After reading some tutorials I came
> up with this configuration:
>
> http_access deny !Safe_ports
> http_access deny CONNECT !S
On Tue, 6 Apr 2004, Michael Gale wrote:
> I am not sure I would use IDE drives, depending on your cache size the
> IDE will have a slower read write time. If you have the budget go with
> SCSI.
A single reasonably modern IDE drive is usually fine for up to ca 40-50
requests/s.
> If not, we use a
On Tue, 6 Apr 2004, Jason Williams wrote:
>
> >Pretty small numbers, unless these users are very heavily surfing with
> >high speed connectivity.
>
> Well, we do a lot of connecting to vendor web sites that have web
> interfaces that we use.
Is this all your users is doing all the time?
Lets
83 matches
Mail list logo
