RE: [squid-users] Delay pools can't work with accelerator??

2004-04-21 Thread Robert Collins
On Thu, 2004-04-22 at 16:32, Robert Collins wrote: > On Wed, 2004-04-21 at 20:17, Herman (ISTD) wrote: > > Yes, this is a real problem ? For your information, my users here are > > used to utilize DAP or Flashget for download. As long as I know, when we > > are using Flashget, for downloading one b

RE: [squid-users] Delay pools can't work with accelerator??

2004-04-21 Thread Robert Collins
On Wed, 2004-04-21 at 20:17, Herman (ISTD) wrote: > Yes, this is a real problem ? For your information, my users here are > used to utilize DAP or Flashget for download. As long as I know, when we > are using Flashget, for downloading one big file the Flashget would > initiate several threads in do

Re: [squid-users] Why is squid passing garbage

2004-04-21 Thread Robert Collins
On Thu, 2004-04-22 at 06:15, Prashant Kumar wrote: > Hello peeps > > I've an external basic authenticator written in perl but squid is > sometimes passing garbage as user to my script. Any ideas why.. > > My custom authenticator logs show > Wed Apr 21 20:01:16 2004 - User ÃÃâ > >

Re: [squid-users] Security bug in squid LDAP authentication

2004-04-21 Thread ashish . uchil
Windbind/NTLM -- Will it work with WIN 2k ADS ? Just read about it interfacing with Win NT domains .. Thanks and regret if it was a silly question ? Rgds, Ashish > > > I am using squid with LDAP modules to authenticate to various Win 2k ADS . > > Each user gets a pop up dialogue box to authen

[squid-users] mail.yahoo.com

2004-04-21 Thread Winston . Tan
hi all I cant seems to block this particular address. No problems for others. I m using squidGuard. Pls help Thks Winston This message is intended solely for the addressee. It is confidential and may be legally privileged. Access to this message by anyone else is unauthorised. Unauthorised us

Re: [squid-users] Another TCP_SWAPFAIL_MISS question.

2004-04-21 Thread Hwee Khoon, Neo
Hi, so it it right to say that a TCP_SWAPFAIL_MISS = TCP_MISS, just that we cannot see it as anoter entry inside the access.log file. Also, we will not know the corresponding error HTTP status code (e.g. TCP_MISS/403..). Rgds - Original Message - From: "Henrik Nordstrom" <[EMAIL PR

Re: [squid-users] SNMP Agent Issue

2004-04-21 Thread Jay W. Reffner
I realize that the Squid SNMP agent is intended as an application SNMP agent and thus it doesn't report the MIB II tree. But by definition of the RFC's it should have, in my humble opinion, been implemented as an SNMP subagent (i.e. sagt), not a stand alone agent. Running two agents creates pr

Re: [squid-users] ACL based on User Groups

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Valdir Henrique Dias Leite wrote: > I need to create acls based on windows nt groups for each > authenticated user. Ok. This is most easily done via Samba winbind. > I was wondering in read all groups on which the user is and > use that information to check my ACLs on squidG

Re: [squid-users] Why is squid passing garbage

2004-04-21 Thread Henrik Nordstrom
On 21 Apr 2004, Prashant Kumar wrote: > I've an external basic authenticator written in perl but squid is > sometimes passing garbage as user to my script. Any ideas why.. Maybe the user is typing garbage in the login box? Regards Henrik

Re: [squid-users] SNMP Agent Issue

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Jay W. Reffner wrote: > I am having some issues with the supplied Squid 2.5 SNMP agent. I was > wondering if it is capable of talking as a subagent to a native OS > agent? Only if your native OS agent can proxy the Squid subtree to the Squid SNMP agent. Many OS agents hav

Re: [squid-users] Does Squid process IP packets or this's kernel jobs?

2004-04-21 Thread Henrik Nordstrom
On Thu, 22 Apr 2004, Viet Hai wrote: > If that's true, it's mean that the kernel receives request (TCP packet) from > client, then depack these packet and give it to Squid. Correct. > So, I wonder how the way Squid can set access control list on the IP address > of source or destination WHILE it

Re: [squid-users] Re: delay pools starvation

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Bar wrote: > Parameter maxconn is matched against all connections from ip irrespective of > delay pool number > used or request not going through delay pool. Yes, but there is no problem using the same list of acls as you use in delay_access to limit the number of connection

Re: [squid-users] Re: Squid 3.0?

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Adam Aube wrote: > There have been 3 RC releases thus far, though it's been some time since > the last one. This is because the conditions for release has not been fulfilled for a long time with many new bugs being discovered both in Squid-3 and 2.5 and it takes time to have

[squid-users] ACL based on User Groups

2004-04-21 Thread Valdir Henrique Dias Leite
Hi ALL! I need to create acls based on windows nt groups for each authenticated user. I was wondering in read all groups on which the user is and use that information to check my ACLs on squidGuard (or even inside squid). But I´m not sure it will work and will run quickly ... There´s a way to d

[squid-users] Why is squid passing garbage

2004-04-21 Thread Prashant Kumar
Hello peeps I've an external basic authenticator written in perl but squid is sometimes passing garbage as user to my script. Any ideas why.. My custom authenticator logs show Wed Apr 21 20:01:16 2004 - User ÃÃâ 08 does not exist

[squid-users] SNMP Agent Issue

2004-04-21 Thread Jay W. Reffner
I am having some issues with the supplied Squid 2.5 SNMP agent. I was wondering if it is capable of talking as a subagent to a native OS agent? My problem is that I need my squid box to report back the sysUpTime.0 MIB from the MIB II set and the squid SNMP agent does not. So either I need to

[squid-users] Does Squid process IP packets or this's kernel jobs?

2004-04-21 Thread Viet Hai
In the book 'Squid: The Definitive Guide' of Duane Wessels, in the Appendix C / C.4, he wrote: "Delay pools, however, are implemented in the application layer. Because Squid doesn't actually send and receive TCP packets (the kernel does)". If that's true, it's mean that the kernel receives reques

Re: [squid-users] Re: delay pools starvation

2004-04-21 Thread Bar
> > It would be a great feature if each delay pool have its own maxconn per ip > > address parameter solving the accelerators problem and delay pools > > starvation. > > How is the existing maxconn acl insufficient? Parameter maxconn is matched against all connections from ip irrespective of delay

Re: [squid-users] Memory usage (I know it's been up before.. tricky business)

2004-04-21 Thread Henrik Nordstrom
On Tue, 20 Apr 2004, Martin Svensson wrote: > The problem I am experiencing is that the machine > starts to swap (performance is still good though). We > have a cache of 90GB, 3GB of memory and cache_mem is > set to 128MB. We are caching quite large files to > speed up frequent downloads (up to 10

Re: [squid-users] ntlm scheme authentication with NT multi-domain

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Charles Blanchard wrote: > I have 3 Windows domains, a parent (company.com) and 2 children > (west.company.com and east.company.com). Is there a trust between the domains? > With the ntlm scheme, I must use the winbind helper (Samba 3.X) but the > FAQ "http://www.squid-cac

Re: [squid-users] Squid 3.0?

2004-04-21 Thread Henrik Nordstrom
yOn Wed, 21 Apr 2004, [EMAIL PROTECTED] wrote: > is there any roadmap for the release of Squid 3.0? > When will first RC be released? As soon as the developers are happy with the release. > Any active development? Yes, but not very much visible as Squid-3.0 is in feature freeze since long back

[squid-users] Re: Squid 3.0?

2004-04-21 Thread Adam Aube
[EMAIL PROTECTED] wrote: > is there any roadmap for the release of Squid 3.0? http://www.squid-cache.org/mail-archive/squid-users/200307/0671.html > When will first RC be released? There have been 3 RC releases thus far, though it's been some time since the last one. Adam

Re: [squid-users] Using Squid with a RHS DNSBL for filtering?

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Support ePaxsys/FRWS wrote: > This has the potential to greatly reduce the size and complexity of the > Squid lists needed to do effective filtering, reduce memory and CPU usage, > and of course, 'should' help Squid work more efficiently as a result. No? Agreed. > I search

[squid-users] Re: first-page redirector

2004-04-21 Thread Adam Aube
Serban Teodorescu wrote: > I would like to redirect all my users to a news page when they open the > browser (no matter what is their start page). > Can anyone suggest a method / tool to do that? A solution to this was posted just today: http://marc.theaimsgroup.com/?l=squid-users&m=1082554343

Re: [squid-users] How does the delay pools actually work?

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Payal Rathod wrote: > > 0, no delay pool assigned > > This is the default case, right? Yes, or when delay_access does not allow any pool to be used. > > 1, a class 1 pool with a single bucket shared by all users of the pool > > Ok. > > > 2, a class 2 pool with one g

Re: [squid-users] Problem with Authentication with certs

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004 [EMAIL PROTECTED] wrote: > On Wed, 21 Apr 2004, Henrik Nordstrom wrote: > > Sounds like a browser bug. Probably the browser gets paniced if it needs > > to both provide proxy authentication and ask the user about a > > certificate once the authentication has completed.. > >

Re: [squid-users] delay pools starvation

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Bar wrote: > It would be a great feature if each delay pool have its own maxconn per ip > address parameter > solving the accelerators problem and delay pools starvation. There is no problem combining delay pools and maxconn ACLs.. Regards Henrik

Re: [squid-users] Squid as HTTP accelerator

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Herman (ISTD) wrote: > Hmm, still don't know what is HTTP accelerator and how Squid can perform > this function. Any hints ? Squid FAQ chapter 20 Acceleration http://www.squid-cache.org/Doc/FAQ/FAQ-20.html> Regards Henrik

[squid-users] Squid 3.0?

2004-04-21 Thread [EMAIL PROTECTED]
Hi, is there any roadmap for the release of Squid 3.0? When will first RC be released? Any active development? -- Kind regards Thomas mailto:[EMAIL PROTECTED]

Re: [squid-users] Memory usage (I know it's been up before.. tricky business)

2004-04-21 Thread Denis Vlasenko
On Wednesday 21 April 2004 11:27, Martin Svensson wrote: > > It is perfectly sane to swap out something unused > > (think about getties which are unused for weeks) > > in order to free some RAM for file cache. > > > > The question is, how aggressive to be with it. > > > > You can: > > * play with /

[squid-users] first-page redirector

2004-04-21 Thread Serban Teodorescu
Hi, I'm running squid with delay pools, ldap_auth. I would like to redirect all my users to a news page when they open the browser (no matter what is their start page). Can anyone suggest a method / tool to do that? I read something about redirectors and looks pretty easy... but how to redire

Re: [squid-users] SNMP Trafficlogging

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004 [EMAIL PROTECTED] wrote: > I'd got a question related to SNMP Trafficlogging with MRTG. > > What to do in the squid.conf? Only snmp_access to allow the station where you run MRTG to query Squid using SNMP. Then you need to make a correct MRTG configuration, but this is in MR

Re: [squid-users] Security bug in squid LDAP authentication

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004 [EMAIL PROTECTED] wrote: > I am using squid with LDAP modules to authenticate to various Win 2k ADS . > Each user gets a pop up dialogue box to authenticate himself each time he > tries to browse the internet. Yes. > If passwords are saved in browsers they get saved in the re

Re: [squid-users] Recommended sibling relationship

2004-04-21 Thread Henrik Nordstrom
On Tue, 20 Apr 2004, unixware wrote: > > > > i have 4 squid proxy farm . what is recommended > > > sibling relationship ? > > > > How does clients get to the cache farm? > > Http Traffic Redirected through WCCP v1 Then no peering is needed as WCCP already divides the objects uniquely among the

Re: [squid-users] squid terminates abnormaly

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Perica Veljanovski wrote: > [: $[$[10#20]-$[10#2]+1]: bad number > [: $[$[10#20]+7-$[10#2]]: bad number > [: $[$[$[$[10#20]-$[10#2]+1]]]: bad number These messages seem to be from some helper.. What helpers are you using? > 2004/04/20 12:07:58| Store rebuilding is 4.3% com

Re: [squid-users] Another TCP_SWAPFAIL_MISS question.

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Lizzy Dizzy wrote: > Sorry, Just another question to add, so if the object is retrieved from > origin site, will there be another new entry inside access.log that says > TCP_MISS for the object that could not be found inside the cache disk(and > which is subsequently reques

RE: [squid-users] Delay pools can't work with accelerator??

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Herman (ISTD) wrote: > Anyone can clarify this ? Is the delaypool limitation for the whole > squid client computer or only apply for each of connection of the PC > initiated to squid ? delay pools are for the IP address of the client. But if you are not using per-user pools

Re: [squid-users] http_reply_access & LDAP external acl

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004 [EMAIL PROTECTED] wrote: > It seems like the problem only occurs in conjunction with the > http_reply_access. > > Any ideas? (My current workaround is a script that reads the admins group > from the LDAP-directory and writes the members into a file. Told squid to > read the "

Re: [squid-users] Another delay pools help?

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Nguyen Viet Hai wrote: > But when I change the rules for bandwidth controlling (say 8Kbs in replacing > for 4Kbs) in squid.conf, then run command: > ./squid -k reconfigure > > After that, the delay pools doesn't do my rules (neither old rules nor new > rules). My client down

[squid-users] Using Squid with a RHS DNSBL for filtering?

2004-04-21 Thread Support ePaxsys/FRWS
Good day Have a question that I am hoping someone has the answer to, or at least a point in a good direction. Currently we use toned-down version of SquidGuard (much smaller lists), our own filter lists and ACLs to do rudimentary filtering for some content (for those that want to use the filter

Re: [squid-users] TCP_SWAPFAIL_MISS

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Lizzy Dizzy wrote: > when this code is being triggered, it means that the object was believed to > be inside the cache disk, but could not be access. Yes. > So in this circumstances, will squid go out and fetch the object from the > origin server or does the user need to r

[squid-users] Re: FATAL: Too many queued ntlmauthenticator requests

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Marco Berizzi wrote: > > What does cachemgr say about ntlm helper usage? > > I haven't deployed cache_mgr. squidclient mgr: gives you the menu. squidclient mgr:info the info (General Runtime) menu entry.. > > Have you tried increasing the number of helpers? > > Yes, I

RE: [squid-users] slow squid; FAQ question

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Angela Burrell wrote: > At the time this was taken, squid seems to be running fine. The Internet is > fast. Can you tell me what to look for in case it slows down drastically, > again? Thanks. The response times section is quite useful. Also save "vmstat 5" output. Both in

RE: [squid-users] slow squid; FAQ question

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Angela Burrell wrote: > That's what I thought, it should be fast. And it IS fast when I bypass > squid. The server in question is our only server, it acts as a firewall > (iptables), proxy-squid, and content filter (squidGuard). For some > reason, the Mandrake software has par

Re: [squid-users] Problem with Authentication with certs

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004 [EMAIL PROTECTED] wrote: > On Wed, 21 Apr 2004, Henrik Nordstrom wrote: > > Sounds like a browser bug. Probably the browser gets paniced if it needs > > to both provide proxy authentication and ask the user about a > > certificate once the authentication has completed.. > >

Re: [squid-users] squid cache tuning questions

2004-04-21 Thread Joe Cooper
Dmitry Suhodoev wrote: hi, squid-users! i have the squid 2.4-STABLE6 on my proxy server, and i very want reduce consuption of traffic. how i configure squid to release the following algorithm? 1. user try to download something (let it http://www.some-server.com/test.html) from proxy (my squid).

Re: [squid-users] transprent squid on ports different from 80

2004-04-21 Thread Henrik Nordstrom
On Friday 15 November 2002 11.12, Dmitry Suhodoev wrote: > is it right? but what i must make with variable "httpd_accel_port" > in squid.conf? how make it work? please help :-) "httpd_accel_port virtual" may work. But I cannot say I have tried in standard Squid, and this is a area where Squid is

Re: [squid-users] How does the delay pools actually work?

2004-04-21 Thread Payal Rathod
Hi Henrik, Great explanations, but some doubts inline. On Wed, Apr 21, 2004 at 03:35:42PM +0200, Henrik Nordstrom wrote: > Depending on which delay pool class there may be 0 to 3 buckets involved. > The available bandwidth to the user is the least of all involved buckets, > and any delivered b

RE: [squid-users] How to inform users?

2004-04-21 Thread Angela Burrell
On Tue, 20 Apr 2004, Henk-Jan (squid) wrote: > Here is my question: I want somehow to point my users every time (or once a > day) that they access to internet to a company policy. (or disclaimer, tell > them that some info me be logged etc etc) > > What would be the easyest concept to do that? C

Re: [squid-users] How does the delay pools actually work?

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Fighting_the_war wrote: > I've read the book from www.squid-cache.org and the book "Squid: The > definitve guide" and FAQ of squid. But I can't understand the way how delay > pools does it's jobs. > > I think the definition "bucket" have no mean in bandwidth shaping. In those

[squid-users] Re: How does the delay pools actually work?

2004-04-21 Thread Adam Aube
Viet Hai wrote: > I think the definition "bucket" have no mean in bandwidth shaping. In > those books, it only is a threshold for squid to start it's bandwidth > shaping. > Anyone can tell me the way squid technically does bandwidth control? Clients are only permitted to download as many bytes a

[squid-users] ntlm scheme authentication with NT multi-domain

2004-04-21 Thread Charles Blanchard
I have 3 Windows domains, a parent (company.com) and 2 children (west.company.com and east.company.com). With squid 2.5 Stable 5, I can use the basic scheme with multi-domain-NTLM helper to authenticate the users of the 2 children domains. With the ntlm scheme, I must use the winbind helper (S

Re: [squid-users] bypass msauth on cache peer parent

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Muthukumar wrote: > > > How can I bypass the authentication of Proxy A from Proxy B?? There are > > other group of users connecting to proxy A and must use authentication on > > Proxy A. > > Use the always_direct or never_direct for the specified acl's on Proxy B. These dir

Re: [squid-users] bypass msauth on cache peer parent

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Tan, Kian Tiong wrote: > How can I bypass the authentication of Proxy A from Proxy B?? There are > other group of users connecting to proxy A and must use authentication on > Proxy A. Either you configure a login to use in the Proxy B cache_peer directive, or you configure P

[squid-users] Re: Another delay pools help?

2004-04-21 Thread Adam Aube
Nguyen Viet Hai wrote: > I have configured squid's delay pools to do bandwidth control. It does > good. > But when I change the rules for bandwidth controlling (say 8Kbs in > replacing for 4Kbs) in squid.conf, then run command: > ./squid -k reconfigure > After that, the delay pools doesn't do

[squid-users] Re: delay pools starvation

2004-04-21 Thread Adam Aube
Bar wrote: > It would be a great feature if each delay pool have its own maxconn per ip > address parameter solving the accelerators problem and delay pools > starvation. How is the existing maxconn acl insufficient? http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.22 Adam

Re: [squid-users] How to inform users?

2004-04-21 Thread Henrik Nordstrom
On Tue, 20 Apr 2004, Henk-Jan (squid) wrote: > Here is my question: I want somehow to point my users every time (or once a > day) that they access to internet to a company policy. (or disclaimer, tell > them that some info me be logged etc etc) > > What would be the easyest concept to do that? Ca

Re: [squid-users] slow squid; FAQ question

2004-04-21 Thread Henrik Nordstrom
On Tue, 20 Apr 2004, Angela Burrell wrote: > My SQUID is running _extremely_ slowly. (About 7-10 seconds for each web > page > > 1:11pm up 14 days, 20:09, 1 user, load average: 0.01, 0.01, 0.00 > 37 processes: 35 sleeping, 2 running, 0 zombie, 0 stopped > CPU states: 0.2% user, 1.0% system,

[squid-users] Re: Memory usage (I know it's been up before.. tricky business)

2004-04-21 Thread Adam Aube
Martin Svensson wrote: > The problem I am experiencing is that the machine starts to swap > (performance is still good though). > No other memory intense applications are running on this server > It's running on RHEL 3.0. Try shrinking your swap partition or turning swap off altogether. Adam

RE: [squid-users] slow squid; FAQ question

2004-04-21 Thread Henrik Nordstrom
Try squidclient -p 3328 mgr:info (or "client" if using Squid-2.4) Regards Henrik

Re: [squid-users] block only if part of a group

2004-04-21 Thread Henrik Nordstrom
On Tue, 20 Apr 2004 Jim_Brouse/[EMAIL PROTECTED] wrote: > Is there a way to say if you are part of this group then access is denied > to a particular acl, otherwise if you are not in the group then you have > access to the site listed in the acl. Yes, deny the group access to the sites before you

RE: [squid-users] Username Logging via Ident onTerminal Server

2004-04-21 Thread Henrik Nordstrom
On Tue, 20 Apr 2004, Scott Clark wrote: > There might be a work around if most of your clients are Windoze users. > NTML. Does anyone know if NTML is support in Squid 2.5? NTLM authentication is supported by 2.5. Regards Henrik

Re: [squid-users] Problem with Authentication with certs

2004-04-21 Thread bh
On Wed, 21 Apr 2004, Henrik Nordstrom wrote: > Sounds like a browser bug. Probably the browser gets paniced if it needs > to both provide proxy authentication and ask the user about a > certificate once the authentication has completed.. > > Try allowing access to these sites without requiring a

Re: [squid-users] Problem with Authentication with certs

2004-04-21 Thread Henrik Nordstrom
On Tue, 20 Apr 2004 [EMAIL PROTECTED] wrote: > Recently, we have run into problems with certain sites. These are sites > that use https, but require the user to accept a PKI certificate before > they can access the site. On the squid proxy with authentication, the > user does not get prompted

[squid-users] Re: FATAL: Too many queued ntlmauthenticator requests

2004-04-21 Thread Henrik Nordstrom
On Wed, 21 Apr 2004, Marco Berizzi wrote: > I don't see anything relevant. Do you want/need it? It's about 3MB > gzipped. No, I do not want it. Just the unique messages you have in it which may be related to authentication. What does cachemgr say about ntlm helper usage? What is your auth_par

RE: [squid-users] squid terminates abnormaly

2004-04-21 Thread Elsen Marc
> > Hi, > > Couple days ago squid started terminating abnormally about 2-3 > times every day. > > cache.log show this message: > > [: $[$[10#20]-$[10#2]+1]: bad number > [: $[$[10#20]+7-$[10#2]]: bad number > [: $[$[$[$[10#20]-$[10#2]+1]]]: bad number > > every minit or so, and then show t

RE: [squid-users] TCP_SWAPFAIL_MISS

2004-04-21 Thread Elsen Marc
> > Hi all, > > when this code is being triggered, it means that the object > was believed to > be inside the cache disk, but could not be access. > > So in this circumstances, will squid go out and fetch the > object from the > origin server or does the user need to re-request the object

Re: [squid-users] delay pools starvation

2004-04-21 Thread Bar
> On Fri, 16 Apr 2004, Bar wrote: > > > You mentioned also of the trick to nullify download accelerators by delay > > pools. > > But how can I set it up not to block normal, single-threaded downloads? > > That you can't, but with delay pools you can make sure they do not get > faster downloads by a

[squid-users] squid terminates abnormaly

2004-04-21 Thread Perica Veljanovski
Hi, Couple days ago squid started terminating abnormally about 2-3 times every day. cache.log show this message: [: $[$[10#20]-$[10#2]+1]: bad number [: $[$[10#20]+7-$[10#2]]: bad number [: $[$[$[$[10#20]-$[10#2]+1]]]: bad number every minit or so, and then show this message: [: $[$[10#20]-$[

[squid-users] Another TCP_SWAPFAIL_MISS question.

2004-04-21 Thread Lizzy Dizzy
Sorry, Just another question to add, so if the object is retrieved from origin site, will there be another new entry inside access.log that says TCP_MISS for the object that could not be found inside the cache disk(and which is subsequently requested from the origin server)? Hi all, when this

RE: [squid-users] Re: Squid authentication to Windows 2000 Active Directory

2004-04-21 Thread Herman (ISTD)
Thank you Hendrik. It is much more clearer to me now, of course shall try it afterwards. Regards, herman > -Original Message- > From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] > Sent: Wednesday, April 21, 2004 3:42 PM > To: Herman (ISTD) > Cc: Henrik Nordstrom; [EMAIL PROTECTED] > Subject

RE: [squid-users] Delay pools can't work with accelerator??

2004-04-21 Thread Herman (ISTD)
Yes, this is a real problem ? For your information, my users here are used to utilize DAP or Flashget for download. As long as I know, when we are using Flashget, for downloading one big file the Flashget would initiate several threads in downloading portions of the files. Of course, one of the wo

[squid-users] http_reply_access & LDAP external acl

2004-04-21 Thread Horst . Mundt
Hi, I'm using squid-2.5.STABLE5-20040419 and OpenLDAP 2.1.29 an RedHat Professional WS. I want to restrict access to certain MIME-Types on a per-user(Group)-level. The basic idea is to have a group of users that are allowed to access html, images css, javascript only and another group ("admins")

[squid-users] TCP_SWAPFAIL_MISS

2004-04-21 Thread Lizzy Dizzy
Hi all, when this code is being triggered, it means that the object was believed to be inside the cache disk, but could not be access. So in this circumstances, will squid go out and fetch the object from the origin server or does the user need to re-request the object again? Thanks Lizz _

[squid-users] Another delay pools help?

2004-04-21 Thread Nguyen Viet Hai
I have configured squid's delay pools to do bandwidth control. It does good. When doing download, a client only take 4Kbs while my Internet link is 56Kbs. A client is a PC which windows 98 installed. Client connect to squid proxy through ethernet link. But when I change the rules for bandwidth c

[squid-users] How does the delay pools actually work?

2004-04-21 Thread Viet Hai
I've read the book from www.squid-cache.org and the book "Squid: The definitve guide" and FAQ of squid. But I can't understand the way how delay pools does it's jobs. I think the definition "bucket" have no mean in bandwidth shaping. In those books, it only is a threshold for squid to start it's b

[squid-users] Delay pools can't work with accelerator??

2004-04-21 Thread Nguyen Viet Hai
I'm using Slackware 9.1, squid-STABLE-2.5 (with --enable-delay-pools compiling option) as proxy server. The client of proxy is a Windows 98 box. When using browser to load web pages or download file, the delay pools of squid does good jobs. It limit the bandwidth for windows 98 box as my settings i

RE: [squid-users] Re: Squid authentication to Windows 2000 Active Directory

2004-04-21 Thread Henrik Nordstrom
acl someuser proxy_auth a_login_name delay_pool_access 1 allow/deny someuser Regards Henrik On Wed, 21 Apr 2004, Herman (ISTD) wrote: > Dear Hendrik, > > Still don't quite how your suggestion can work. Is there any > configuration example available on the web ? > Thank you. > > Regards, > >

Re: [squid-users] Memory usage (I know it's been up before.. tricky business)

2004-04-21 Thread Martin Svensson
--- Denis Vlasenko --- CUT --- > It is perfectly sane to swap out something unused > (think about getties which are unused for weeks) > in order to free some RAM for file cache. > > The question is, how aggressive to be with it. > > You can: > * play with /proc/sys/vm/swappiness > * run wit

Re: [squid-users] Memory usage (I know it's been up before.. tricky business)

2004-04-21 Thread Denis Vlasenko
On Wednesday 21 April 2004 10:42, Martin Svensson wrote: > > > it swaps out so much. > > > > /proc/meminfo, top, etc? > > /proc/meminfo > --- > total:used:free: shared: buffers: > cached: > Mem: 3169054720 3149389824 196648960 > 728629248 1696555008 > Swap: 142

RE: [squid-users] bypass msauth on cache peer parent

2004-04-21 Thread Tan, Kian Tiong
Hi, I am not clear of the settings given below. Supposing I have an msnt authentication on Proxy A (parent) that MUST be there. And I need another msnt authentication on Proxy B (child) that can only direct all requests to Proxy A. My Proxy A setting: auth_param basic program /usr/local/squid/

Re: [squid-users] Memory usage (I know it's been up before.. tricky business)

2004-04-21 Thread Martin Svensson
--- Denis Vlasenko <[EMAIL PROTECTED]> wrote: > On Wednesday 21 April 2004 09:16, Martin Svensson > wrote: > > Hey all squid gurus! > > > > We have a cache to which 6000-7000 clients are > > connecting to (2.5STABLE5). On a typical day we > are > > handling 70-100 requests/sec and 8-11Mbit in > ne

Re: [squid-users] Squid on Windows - (Was Error with Squid_LDAP_Auth.exe on Win2K)

2004-04-21 Thread Serassio Guido
Hi, At 04.00 21/04/2004, Herman (ISTD) wrote: Dear all, To my surprise, I just know that squid at present can run on Windows platform. Hmm, I haven't noticed squid progress for quite a long time. Is there anyone ever compared the performance of squid running on linux vs squid running on Windows

RE: [squid-users] SNMP Trafficlogging

2004-04-21 Thread Elsen Marc
> Hi there, > > I'd got a question related to SNMP Trafficlogging with MRTG. > > What to do in the squid.conf? I have no idea, I activated the > things in > the conf, but MRTG (with a Config from the MRTG website) > didn't worked. > What to do? Anyone knows it? > > Thanks, Tim Korves >

[squid-users] SNMP Trafficlogging

2004-04-21 Thread squid
Hi there, I'd got a question related to SNMP Trafficlogging with MRTG. What to do in the squid.conf? I have no idea, I activated the things in the conf, but MRTG (with a Config from the MRTG website) didn't worked. What to do? Anyone knows it? Thanks, Tim Korves

RE: [squid-users] Cache peering

2004-04-21 Thread kuda muvirimi :: Powernet Zimbabwe
My side is the one using proxy.pmi.co.zw 80 for our browsing.What I want to do is to configure the client squid squid.client.co.zw to access our squid such that browsing will be a lot faster. -Original Message- From: Matus UHLAR - fantomas [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 20,

[squid-users] How does the delay pools actually work?

2004-04-21 Thread Fighting_the_war
I've read the book from www.squid-cache.org and the book "Squid: The definitve guide" and FAQ of squid. But I can't understand the way how delay pools does it's jobs. I think the definition "bucket" have no mean in bandwidth shaping. In those books, it only is a threshold for squid to start it's b

Re: [squid-users] Memory usage (I know it's been up before.. tricky business)

2004-04-21 Thread Denis Vlasenko
On Wednesday 21 April 2004 09:16, Martin Svensson wrote: > Hey all squid gurus! > > We have a cache to which 6000-7000 clients are > connecting to (2.5STABLE5). On a typical day we are > handling 70-100 requests/sec and 8-11Mbit in network > usage. > > The problem I am experiencing is that the mach