Re: [squid-users] Re: https reverse proxy

2004-08-31 Thread Henrik Nordstrom
On Mon, 30 Aug 2004, Estevam Henrique Carvalho wrote: Does anybody have a sample ? A sample of a perl redirector rewriting http:// to https://? #!/usr/bin/perl -p BEGIN { $|=1; } # Rewrite http: to https: s%^http:%https%; Regards Henrik

Re: [squid-users] Re: credentials ttl for digest scheme

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Robert Collins wrote: In this case, I think its a browser bug - the browser should note that a new nonce was mandated in the error's headers and try again with that nonce before prompting the user. Only if squid did return stale which I doubt it does it the nonce is

Re: [squid-users] newbie authentication help

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Md. Jawed Ahmed wrote: I have started using squid recently and am glad to have found it. am running the latest version on win2k AS..and I have put two NIC in that machine, one on public IP and the other on local IP. It is a pentium 2 machine with 1 GB HDD and 64 MB RAM.. I

Re: [squid-users] Hard Drive Latency

2004-08-31 Thread Matus UHLAR - fantomas
On 30.08 17:43, James Gray wrote: Thanks for the info. Actually we have a 4 drive setup; 4x18Gb 10k RPM U160 in RAID 0+1 on a Compaq SmartArray5i controller with 64MB cache, Xeon 1.2GHz (IIRC) with 512MB ECC RAM :). Performance isn't such and issue for us, but redundancy is. Sure we

[squid-users] Slow dynamic pages

2004-08-31 Thread Frode Villumstad
Hi I have problems with dynamic server pages, such as ASP pages. When trying to access sites like www.microsoft.com, it takes up to five minutes before the browser stops loading the the page. I'm running Squid Cache: Version 2.5.STABLE5 Does anyone have a clue of what I can do? -- Mvh / Regards

AW: [squid-users] Slow dynamic pages

2004-08-31 Thread Werner . Rost
Works for me. Load takes about 5 seconds. Squid Cache: Version 2.5.STABLE4 Mit freundlichem Gruß/Yours sincerely Werner Rost GM-FIR - Netzwerk ZF Boge Elastmetall GmbH Friesdorfer Str. 175, 53175 Bonn, Deutschland/Germany Telefon/Phone +49 228 3825 - 420, Telefax/Fax +49 228 3825 - 398 [EMAIL

RE: [squid-users] Slow dynamic pages

2004-08-31 Thread Elsen Marc
Hi I have problems with dynamic server pages, such as ASP pages. When trying to access sites like www.microsoft.com, it takes up to five minutes before the browser stops loading the the page. I'm running Squid Cache: Version 2.5.STABLE5 Does anyone have a clue of what I can do?

Re: [squid-users] Which authentication method for me?

2004-08-31 Thread Boniforti Flavio
Henrik Nordstrom wrote: On Mon, 30 Aug 2004, Billy Macdonald wrote: I think LDAP can be used in AD environment for basic only but not sure again, never done that. You'll need to search the FAQ In and AD environment you can choose either LDAP or Winbind for Basic authenticaiton, but since most

Re: [squid-users] can my isp see sites i visitied if i am using proxy?

2004-08-31 Thread Ronny
Oh dear they/We see everything.You got to be good but you may end up not accessing anything. ;-) Ronny [EMAIL PROTECTED] wrote: Hello, if i surf the internet connected to Squid Web proxy can my isp knows what sites did i visited ? or my isp will only see that i connected to proxy ? and is it

Re: [squid-users] squid and named

2004-08-31 Thread Matus UHLAR - fantomas
On 30.08 16:14, Boskey Chheda wrote: I have squid running on a server which also has named running on it. I have around 200 users going through squid. But , after around 20-30 min the speeds go very slow. I server is Red hat 9 box and also has apache , mail, virus scan and dhcp services

Re: [squid-users] maximum inbound/outbound connections

2004-08-31 Thread Modesto Pietro
Hi to everybody, I have a problem, your mail. In my mail box arrived a lot of mail of squid-users but I never subscribe this mailing list. I try to unsubscribe me but I continue to recive mail. For sure they are very intersting but I can't understand it. Somebody can explain how I stop to recive

Re: [squid-users] Re: https reverse proxy

2004-08-31 Thread Modesto Pietro
Hi to everybody, I have a problem, your mail. In my mail box arrived a lot of mail of squid-users but I never subscribe this mailing list. I try to unsubscribe me but I continue to recive mail. For sure they are very intersting but I can't understand it. Somebody can explain how I stop to recive

Re: [squid-users] Disk Space over limit

2004-08-31 Thread Modesto Pietro
Hi to everybody, I have a problem, your mail. In my mail box arrived a lot of mail of squid-users but I never subscribe this mailing list. I try to unsubscribe me but I continue to recive mail. For sure they are very intersting but I can't understand it. Somebody can explain how I stop to recive

Re: [squid-users] Which authentication method for me?

2004-08-31 Thread Modesto Pietro
Hi to everybody, I have a problem, your mail. In my mail box arrived a lot of mail of squid-users but I never subscribe this mailing list. I try to unsubscribe me but I continue to recive mail. For sure they are very intersting but I can't understand it. Somebody can explain how I stop to recive

Re: [squid-users] Memory pools: why use them?

2004-08-31 Thread Matus UHLAR - fantomas
On Mon, 2004-08-30 at 14:03 +0200, Boniforti Flavio wrote: Hello list. Can anybody explain me what memory pools are and what benefits I would get by using them? On 30.08 22:18, Robert Collins wrote: Its the other way around: they are on by default, leave them on unless *you know of a

Re: [squid-users] Which authentication method for me?

2004-08-31 Thread Robert Collins
On Tue, 2004-08-31 at 10:06 +0200, Modesto Pietro wrote: Hi to everybody, I have a problem, your mail. In my mail box arrived a lot of mail of squid-users but I never subscribe this mailing list. I try to unsubscribe me but I continue to recive mail. For sure they are very intersting but I

Re: [squid-users] Disk Space over limit

2004-08-31 Thread Klodian Hima
In order to unsuscribe from this list you need to send an email to [EMAIL PROTECTED] It will put you out automatically. Regards, Klodian. - Original Message - From: Modesto Pietro [EMAIL PROTECTED] To: Eswari sharma [EMAIL PROTECTED]; Henrik Nordstrom [EMAIL PROTECTED] Cc: [EMAIL

[squid-users] chrooting: why and how?

2004-08-31 Thread Boniforti Flavio
Hello all! I noticed that there's the option to chroot my squid. Now, which benefits could I get from this configuration? What should I be doing/configuring for getting chroot to work in squid? Thank you all again... -- --- Boniforti Flavio Provincia del

Re: [squid-users] Memory pools: why use them?

2004-08-31 Thread Robert Collins
On Tue, 2004-08-31 at 10:42 +0200, Matus UHLAR - fantomas wrote: On Mon, 2004-08-30 at 14:03 +0200, Boniforti Flavio wrote: Hello list. Can anybody explain me what memory pools are and what benefits I would get by using them? On 30.08 22:18, Robert Collins wrote: Its the other way

Re: [squid-users] chrooting: why and how?

2004-08-31 Thread Joe Cooper
Boniforti Flavio wrote: Hello all! I noticed that there's the option to chroot my squid. Now, which benefits could I get from this configuration? What should I be doing/configuring for getting chroot to work in squid? Thank you all again... chrooting Squid gives the same benefits as chrooting any

Re: [squid-users] Disk Space over limit

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Modesto Pietro wrote: Hi to everybody, I have a problem, your mail. In my mail box arrived a lot of mail of squid-users but I never subscribe this mailing list. Our logs say you did Mon Jul 5 17:01:59 2004 + [EMAIL PROTECTED] Modesto Pietro [EMAIL PROTECTED] I try to

Re: [squid-users] Which authentication method for me?

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Boniforti Flavio wrote: If my boss wants two different user databases (AD for Windows logons, another one for squid), which would be the best solution in relation to squid? Then use the ncsa_auth module. The simplest of them all to set up and configure. Would there be any

Re: [squid-users] Which authentication method for me?

2004-08-31 Thread Boniforti Flavio
Henrik Nordstrom wrote: Sure. http://www.google.com/search?ie=UTF-8q=squid+mysql+auth But I would recommend starting first with ncsa_auth while testing, then when you have figured out how authentication works in Squid move to MySQL if desired. From the above words, I understand that MySQL

Re: [squid-users] chrooting: why and how?

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Boniforti Flavio wrote: I noticed that there's the option to chroot my squid. Now, which benefits could I get from this configuration? Added security should there be a security issue in Squid. What should I be doing/configuring for getting chroot to work in squid? Very little

RE: [squid-users] can my isp see sites i visitied if i am using p roxy?

2004-08-31 Thread Chris Perreault
I was thinking the same thing, and was going to say, if you do evil things, Evil, then there's a good chance you're asking for trouble:) Even if your IP address is hidden behind squid, and squid is not at the ISP but at your company or house, if something is going on, they'll trace it to the owner

Re: [squid-users] Re: PURGE objects

2004-08-31 Thread Eswari sharma
Hi squid_users and experts, Does anyone know wpurge objects from the squid cache, and what is the right way to do so? How can I purge an object from my cache? http://www.squid-cache.org/Doc/FAQ/FAQ-7.html#ss7.5 I've got few url which is not opening from cache and it seems to be stale in

Re: [squid-users] chrooting: why and how?

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Joe Cooper wrote: resolve.conf) that Squid relies on (it could be that shared libraries are pulled in before Squid chroots, and so they might not be needed--Henrik wrote the chroot code I think, or at least maintains it now, maybe he'll chime in with clarification). If you

Re: [squid-users] Which authentication method for me?

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Boniforti Flavio wrote: From the above words, I understand that MySQL support is a bit more complex and/or difficult to implement than NCSA, right? Dealing with databases is always slightly more complex than plain files. Dealing with third-party addons is also slightly mode

[squid-users] ACl setup

2004-08-31 Thread André Füchsel
Hi, hope, this question is not too basic. I dealt with ACLs quite a while now, but I cannot figure out, how to set up them correctly. Some help would be very much appreciated. I want to use squid only as an accelerating proxy. It is placed in the DMZ and one should be able to connect both to

Re: [squid-users] Re: Disk Space over limit

2004-08-31 Thread Eswari sharma
After clearing swap.state it rebuild swap and when I see cache log it shows /cache1[clean] and /cache2[clean] and Ready to server request but when I check access.log it doesnt update..and at the same time it doesnt server.it struck up... Henrik wrote : Is traffic even getting to your

Re: [squid-users] chrooting: why and how?

2004-08-31 Thread Rick G. Kilgore
I was able to leave the squid.conf and executable on my regular volume and use the squid chroot directive to chroot squid (thanks to help from this forum). I did notice that the mime.conf files will need to be on the chroot volume, but you should be able to leave the squid.conf and executable

Re: [squid-users] AUP page

2004-08-31 Thread Alexandre Ghisoli
Le jeu 26/08/2004 à 11:42, Alexandre Ghisoli a écrit : Hi there, /squid 2.5stable6/ I've read archives about how to force users to accept AUP before surfing. There is how I plan to do it : - Users must authenticate with LDAP - after that, if not accepted, accept AUP - free surf.

Re: [squid-users] Re: PURGE objects

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Eswari sharma wrote: squidclient -m Purge http://www.fewurl.com but I get access denied error as follows You need to allow squidclient to use the purge method. See your http_access rules. Regards Henrik

Re: [squid-users] chrooting: why and how?

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Rick G. Kilgore wrote: I was able to leave the squid.conf and executable on my regular volume and use the squid chroot directive to chroot squid (thanks to help from this forum). I did notice that the mime.conf files will need to be on the chroot volume, but you should be

Re: [squid-users] ACl setup

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, André Füchsel wrote: hope, this question is not too basic. I dealt with ACLs quite a while now, but I cannot figure out, how to set up them correctly. Some help would be very much appreciated. Start by reading and understanding the introduction section in Squid FAQ Chapter

[squid-users] Reverse proxy for Exchange 2003+SSL

2004-08-31 Thread Estevam Henrique Carvalho
Hi people, I'm using squid 2.5-STABLE6 to publish an internal OWA (Exchange 2003), with http all works fine but if I decide to terminate de SSL connection in the Squid server OWA insists in generating the hyperlinks with http:// instead https:// Reading the Microsoft documentation I discovered

Re: [squid-users] Reverse proxy for Exchange 2003+SSL

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Estevam Henrique Carvalho wrote: http all works fine but if I decide to terminate de SSL connection in the Squid server OWA insists in generating the hyperlinks with http:// instead https:// Reading the Microsoft documentation I discovered that OWA expected to receive a custom

RE: [squid-users] My squid doesn't seem to be caching

2004-08-31 Thread Derek Evans
-Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: August 30, 2004 7:15 PM To: Derek Evans Cc: [EMAIL PROTECTED] Subject: Re: [squid-users] My squid doesn't seem to be caching On Mon, 30 Aug 2004, Derek Evans wrote: Squid Cache: Version 2.5.STABLE6

RES: [squid-users] Reverse proxy for Exchange 2003+SSL

2004-08-31 Thread Estevam Henrique Carvalho
Does the squid 2.5-STABLE6 compiled with --with-ssl support this feature or should I apply the path ? If so where can I find it ? Because in the past, if I'm not mistaken, I tried to apply a path and received a warning saying that the fix have already be applied -Mensagem original- De:

Re: [squid-users] Memory pools: why use them?

2004-08-31 Thread Matus UHLAR - fantomas
On Tue, 2004-08-31 at 10:42 +0200, Matus UHLAR - fantomas wrote: IIUC, they are blocks of reserved/unused memory, which squid maintains itself instead of running malloc/free on the memory (and letting the malloc library to maintain the memory) On 31.08 19:23, Robert Collins wrote: A

Re: [squid-users] Re: PURGE objects

2004-08-31 Thread galle
Yo need something like this in your squid.conf acl PURGE method PURGE acl localhost src 127.0.0.1 and this lines must be in the beginning of your http_access section: http_access allow PURGE localhost http_access deny PURGE salu2 Diego - Original Message - From: Eswari sharma [EMAIL

[squid-users] Squid Slow

2004-08-31 Thread ilopez
Hi everybody I still have the same problem with squid and squidguard because when I use urlblacklist.com `s file squid works very slow If I change my blacklist for squidguard`s blacklist everything goes good. I have slackware 10 and squid2-5STABLE6 with squidguard 1.2.0 Thanks

Re: RES: [squid-users] Reverse proxy for Exchange 2003+SSL

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Estevam Henrique Carvalho wrote: Does the squid 2.5-STABLE6 compiled with --with-ssl support this feature No. or should I apply the path? If so where can I find it? http://devel.squid-cache.org/ Because in the past, if I'm not mistaken, I tried to apply a path and received a

Re: [squid-users] Memory pools: why use them?

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Matus UHLAR - fantomas wrote: in what way? to have that behavior permanent, or to keep things at library malloc? Does squid handle its memory in such efficient way that using malloc/free would have strong performance impact? Just to take away the memory_pools on/off

[squid-users] Web accelerator and Cache engine

2004-08-31 Thread Mohsin Khan
Hi, Can any one explain me about squid acting as web accelerator, the topology may be. = Regards, Mohsin Khan CCNA ( Cisco Certified Network Associate 2.0 ) http://forum.aaghaz.net Happy is the one who can smile __ Do

[squid-users] Insight into vmstat output?

2004-08-31 Thread Brett Charbeneau
Greetings Fellow Squidders, I have a Squid box running at my main library (2.5.STABLE1) and I'm trying to get things tuned up on it. It's of the RedHat flavor running kernel 2.4.20-30.9 with 1 GB of RAM. NOW: the kernel needs to be recompiled with HIGHMEM enabled so it can take

Re: [squid-users] Insight into vmstat output?

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Brett Charbeneau wrote: I've got some vmstat info below, and as you'll notice the amount of swap increases at the beginning of the day and tends to hover around 102700 (yes, six digits there) - which I understand to be a Bad Thing. Odd.. your system at the time you

RE: [squid-users] Web accelerator and Cache engine

2004-08-31 Thread Chris Perreault
http://www.squid-cache.org/Doc/FAQ/FAQ-20.html#what-is-httpd-accelerator One example would be: Internet browser --- squid -- company firewall -- back end webserver (origin server) Reverse proxy means the same thing as web accelerator, if that helps. Chris -Original Message- From:

Re: [squid-users] Insight into vmstat output?

2004-08-31 Thread Brett Charbeneau
Thanks mucho for the response, Henrik! On Tue, 31 Aug 2004, Henrik Nordstrom wrote: HN On Tue, 31 Aug 2004, Brett Charbeneau wrote: HN HNI've got some vmstat info below, and as you'll notice the amount of swap HN increases at the beginning of the day and tends to hover around

Re: [squid-users] Raw sockets

2004-08-31 Thread Giancarlo Boaron
Why have you built your Squid with icmp support to start with? I haven't built it because it was already builted when I put my hands on this server. This is not enabled by default when building the Squid binary, and in almost all setups is not something you need. I know that. But how

Re: [squid-users] Insight into vmstat output?

2004-08-31 Thread Mohsin Khan
I do not think that you should rebuild your kernel. First tweak your squid.conf and see what results you get, i will say lower down the squidGuard threads. helperOpenServers: Starting 25 'squidGuard' --- Brett Charbeneau [EMAIL PROTECTED] wrote: Greetings Fellow Squidders, I have a

RE: [squid-users] Web accelerator and Cache engine

2004-08-31 Thread Mohsin Khan
How will it speed up the connection, i mean if a page is placed behind a web accelerator, will it effect its upload speed to the client, who will make a get request. If it will , than how. As since the client would get the same page if it request is directly handled by the webserver. --- Chris

[squid-users] Virtual directories to diffent internal machines

2004-08-31 Thread Estevam Henrique Carvalho
I have a site accelerated by Squid-2.5-STABLE6 with the following structure: http://www.my_site.root below this site I have two virtual directories http://www.my_site.root/virtual1 and http://www.my_site.root/virtual2. I need to send virtual1 and virtual2 to different internal machines. How

Re: [squid-users] Insight into vmstat output?

2004-08-31 Thread Brett Charbeneau
On Tue, 31 Aug 2004, Mohsin Khan wrote: MK I do not think that you should rebuild your kernel. MK First tweak your squid.conf and see what results you MK get, i will say lower down the squidGuard threads. MK helperOpenServers: Starting 25 'squidGuard' Thanks for the response, Mohsin.

Re: [squid-users] chrooting: why and how?

2004-08-31 Thread Joe Cooper
Henrik Nordstrom wrote: On Tue, 31 Aug 2004, Joe Cooper wrote: resolve.conf) that Squid relies on (it could be that shared libraries are pulled in before Squid chroots, and so they might not be needed--Henrik wrote the chroot code I think, or at least maintains it now, maybe he'll chime in with

Re: [squid-users] chrooting: why and how?

2004-08-31 Thread Rick G. Kilgore
Works just as if it was not chroot jailed at all. Actually with the conf file in the chroot I had more problems accessing external ACL and other oddities. Joe Cooper wrote: Henrik Nordstrom wrote: On Tue, 31 Aug 2004, Joe Cooper wrote: resolve.conf) that Squid relies on (it could be that

Re: [squid-users] chrooting: why and how?

2004-08-31 Thread Joe Cooper
Actually, I was hoping for a clue from Henrik on how the Squid process gets access to a file outside of the chroot during a reconfigure. I believed Henrik when he said it needed to be outside of the chroot. Just looking to understand Squid's chroot implementation a more deeply. ;-) Rick G.

[squid-users] linux transparent proxy problem

2004-08-31 Thread Matthew Krenzer
I'm trying to setup a transparent proxy system on linux and have run into what I hope is a rather strange configuration problem. . I have squid listening on port 3128. . I have the firewall configured to intercept traffic over ports 80 and 8015 and send them to squid. . I have the following

Re: [squid-users] chrooting: why and how?

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Joe Cooper wrote: Out of curiosity: without squid.conf in the chroot, how does a -k reconfigure work? It doesn't. It should work with a copy of squid.conf within the chroot however. Regards Henrik

RE: [squid-users] Web accelerator and Cache engine

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Mohsin Khan wrote: How will it speed up the connection, i mean if a page is placed behind a web accelerator, will it effect its upload speed to the client, who will make a get request. If it will , than how. As since the client would get the same page if it request is directly

Re: [squid-users] Virtual directories to diffent internal machines

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Estevam Henrique Carvalho wrote: I have a site accelerated by Squid-2.5-STABLE6 with the following structure: http://www.my_site.root below this site I have two virtual directories http://www.my_site.root/virtual1 and http://www.my_site.root/virtual2. I need to send virtual1

Re: [squid-users] linux transparent proxy problem

2004-08-31 Thread Henrik Nordstrom
On Tue, 31 Aug 2004, Matthew Krenzer wrote: 1. If I configure 'httpd_accel_port 80' as mentioned in the documentation I can never send request to port 8015. Everything gets hard set to port 80. Correct. 2. If I configure 'httpd_accel_port 0' then if the request specifies a Host header _with_ a

Re: [squid-users] Memory pools: why use them?

2004-08-31 Thread Robert Collins
On Tue, 2004-08-31 at 17:13 +0200, Henrik Nordstrom wrote: On Tue, 31 Aug 2004, Matus UHLAR - fantomas wrote: in what way? to have that behavior permanent, or to keep things at library malloc? Does squid handle its memory in such efficient way that using malloc/free would have strong