>
>
> Hello,
> I don't know whether this issue is relating to squid mailing
> lists. Any
> way so many experts are there here with wide range of skills,
> if anybody
> knows solution/come across the same type of issue, please mail me.
>
> Whenever we try to access mail.yahoo.com or any yahoo
Hello,
I don't know whether this issue is relating to squid mailing lists. Any
way so many experts are there here with wide range of skills, if anybody
knows solution/come across the same type of issue, please mail me.
Whenever we try to access mail.yahoo.com or any yahoo mail sites, we are
gwtti
I have been examining both the aufs and ufs versions of squid with truss
and have seen that the async i/o version has thousands more calls to
lseek than the non async version. On looking at the source of
squidaio_do_read() it does indeed do a lseek() followed by a read()
where the non async read do
On Wed, 29 Sep 2004, Roberto wrote:
My question again: is there any way, if possible through configuration, but
if nessecary through a source code hack, to determine at the
httpd_accellerated server wether a request came in through ssl or not?
You could look into Squid-3 where the https accelerat
Roberto wrote:
Hi,
When running Squid as httpd_accel, AND taking care of SSL, i'd like to
figure out at the httpd wether a request was done with or without SSL,
so I would be able to do a redirect in certain conditions.
I figured this would be a way (hack):
acl Secure port 443
header_access Via
I have a user that is using GAIM to talk with yahoo messenger. We have
configured the proxy but when she tries to connect she gets the error:
'GAIM Error: Access denied proxy server forbids port 5050 tunnelling'.
If I look at the conf file I can't see where that is being blocked. We
are running squ
> > I have tried using
> >
> > Acl esav urlpath_regex ^*/esav/*
> > Acl esav url_regex ^*/esav/*
>
> These are not valid regex expressions.
>
> I think what you are looking for is
>
> ^/esav/
..which by the way only works with the urlpath_regex acl.
/Andreas
I forgot to mention that I am running RedHat Ent.3 and using the
squid-2.5.STABLE3-3.3E RPM.
Thanks,
Nick
Thank you for the reply.
I understand that Squid has been designed and optimized for handling large
numbers of (relatively) small objects. What I desire to understand is if it is
possible to configure squid in such a manner as to make it reasonably efficient
in the handling of small numbers of lar
What is the extent of the squid metacharater support. Does is follow
say the normal egrep metacharacter set, or does it support the perl
extended version.
Hello, I am trying to get squid setup as a reverse proxy. I have
squid on a seperate server than my Apache server. I was able to get
squid to deliver pages but if I view the access log while trying to
hit pages, everything gets reported as a MISS and I don't see any
HITs. I am not sure what I am
On Wed, 29 Sep 2004, Michael Puckett wrote:
Ok, I asked this question yesterday and got little response, so I can only
guess that this was the wrong question to ask. Let me ask a different one
instead today.
Can someone tell me where I can find relevant information on proper
configuration of squid
On Wed, 29 Sep 2004, Michael Puckett wrote:
No, the system did not start swapping. There was no swap activity at all, and
no disk activity at all. Just a significant amount of CPU activity and a very
long delay.
Which Squid version?
Regards
Henrik
On Wed, 29 Sep 2004, [ISO-8859-1] Mário Gamito wrote:
X-Cache: MISS from nau.netual.pt
This "MISS" means the index.html i got didn't come from Squid's cache ?
Yes.
Regards
Henrik
On Wed, 29 Sep 2004, Damir wrote:
cache_peer 192.168.0.23 parent 8080 0 no-query max-conn=100
connect-timeout=3
cache_peer_access 192.168.0.23 allow http
cache_peer_access 192.168.0.23 deny all
cache_peer 192.168.0.23 parent 2121 0 no-query max-conn=100
The two must be defined using different nam
On Wed, 29 Sep 2004, Boniforti Flavio wrote:
But, is it possible to have *whole* log files (I rotate them daily) of squid
usage done by at least 150 clients, *without* ANY TCP_HIT?
Sounds unrealistic unless your Squid is configured to not cache anything.
Regards
Henrik
On Wed, 29 Sep 2004, Richard Skeggs wrote:
I have tried using
Acl esav urlpath_regex ^*/esav/*
Acl esav url_regex ^*/esav/*
These are not valid regex expressions.
I think what you are looking for is
^/esav/
How can I get the servlet component of the application to run through squid?
servlet compone
On Wed, 29 Sep 2004, Merton Campbell Crockett wrote:
In what way is the "ufs" cache_dir type broken? I do see TCP_HIT/200
entries in access.log.
http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ufs_no_valid_dir
Regards
Henrik
> In what way is the "ufs" cache_dir type broken? I do see TCP_HIT/200
> entries in access.log.
>
> Merton Campbell Crockett
>
It means that you are not suffering from
this 'condition' :
http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ufs_no_valid_dir
which is prob
Ok, I asked this question yesterday and got little response, so I can only
guess that this was the wrong question to ask. Let me ask a different one
instead today.
Can someone tell me where I can find relevant information on proper
configuration of squid for large object caching? Is this even advi
Ray,
Thanks for the reply.
No, the system did not start swapping. There was no swap activity at all, and
no disk activity at all. Just a significant amount of CPU activity and a very
long delay.
-mikep
"Raymond A. Meijer" wrote:
> On Tue 28 September 2004 20:05, Michael Puckett wrote:
>
> > I t
devendra wrote:
> 1. urlParse: Illegal character in hostname
Just what is says - Squid encountered a URL request that had an illegal
character in it (likely an underscore).
> 2. WARNING: Disk space over limit
This will correct itself over time.
> 3. I am getting Zero Sized Reply
See the Squid
Mário Gamito wrote:
> I've installed Squid, and after a walk with my browser and watch at
> /var/log/squid/access.log i get a lot of TCP_MISS entries.
This is common - Internet content isn't always cacheable.
> Does this mean that my cache is not working ?
Note likely. Using the Cacheability Te
Jeff Heckart wrote:
> How would I set this up to have redundancy that if one controller went
> down, samba would look to the other listed?
This is purely a Samba issue, so the best sources of help are the Samba
documentation and the Samba mailing lists, not the Squid mailing list.
Adam
OK Thanks a lot
|-+---|
| "Andreas Pettersson" | |
| <[EMAIL PROTECTED]>| |
| |
> I got this:
> X-Cache: MISS from nau.netual.pt
>
> This "MISS" means the index.html i got didn't come from Squid's cache ?
Yes. Or more precise, it means that it didn't come from nau.netual.pt.
/Andreas
On Wed, 29 Sep 2004, Henrik Nordstrom wrote:
> On Wed, 29 Sep 2004, Boniforti Flavio wrote:
>
> > I mean: shouldn't there be any "TCP_HIT", at least *once* in my logs?
>
> Which Squid version are you using?
>
> Squid-2.5.STABLE6 has a broken "ufs" cache_dir type..
In what way is the "ufs" cach
> Is there a way to tell squid that accept strange caracters like this "_" I
> have tried to get some pages with this caracter but squid does not accept
> them.
You can set this when you build squid:
./configure --enable-underscores
/Andreas
>
> Hi everybody
> Is there a way to tell squid that accept strange caracters
> like this "_" I
> have tried to get some pages with this caracter but squid
> does not accept
> them.
--enable-underscores
During configure, will make SQUID allow underscores in hostnames.
M.
> Hi Elsen,
>
> Thank you for your patience with me.
>
> Yes, the double return indeed solved the issue.
>
> Just one more thing and i'll bother no more :)
>
> I got this:
> X-Cache: MISS from nau.netual.pt
>
> This "MISS" means the index.html i got didn't come from
> Squid's cache ?
>
> T
Hi Elsen,
Thank you for your patience with me.
Yes, the double return indeed solved the issue.
Just one more thing and i'll bother no more :)
I got this:
X-Cache: MISS from nau.netual.pt
This "MISS" means the index.html i got didn't come from Squid's cache ?
Thank you very much.
Warm Regards,
Mário
Hi everybody
Is there a way to tell squid that accept strange caracters like this "_" I
have tried to get some pages with this caracter but squid does not accept
them.
Thanks
> Hi,
>
> Ok, i can now telnet to Squid, but get no response after the
> third line.
> What am i doing wrong ?
> (First i've visited http://www.mysql.com/index.html with the browser
> configured for proxy on 10.10.2.250, obviously).
>
> "[EMAIL PROTECTED] squid]# telnet 10.10.2.250 3128
> Tr
Hi,
Ok, i can now telnet to Squid, but get no response after the third line.
What am i doing wrong ?
(First i've visited http://www.mysql.com/index.html with the browser
configured for proxy on 10.10.2.250, obviously).
"[EMAIL PROTECTED] squid]# telnet 10.10.2.250 3128
Trying 10.10.2.250...
Conne
Hello,
I am on an NT 4 network and am using squid w/ntlm auth as my proxy. I have two
controllers listed in smb.conf, and had one of those domain controllers go down last
evening. When the one controller went down, the proxy did not seem to authenticate
against the backup/secondary.
How wo
Henrik Nordstrom wrote:
Which Squid version are you using?
Squid-2.5.STABLE6 has a broken "ufs" cache_dir type..
SQUID 2.5 stable 1
And on another proxy, squid 2.5 stable 6...
But it happens on BOTH of them
--
---
Boniforti Flavio
Provincia del Verbano-Cusio-Ossola
On Wed, 29 Sep 2004 11:32:47 +0200 (CEST)
Henrik Nordstrom <[EMAIL PROTECTED]> wrote:
>
>
> On Wed, 29 Sep 2004, Jens Strohschnitter wrote:
>
> > sometimes in my messages there will be the following message:
> >
> > squid[5230]: WARNING: Disk space over limit: 8 KB > 4 KB
>
> 4 KB?
>
> How la
> OK, in this case you're right and I'm wrong... :)
>
> But, is it possible to have *whole* log files (I rotate them
> daily) of
> squid usage done by at least 150 clients, *without* ANY TCP_HIT?
>
Normally not, (well in theory) but it's better to narrow the
discussion with an example fo
On Wed, 29 Sep 2004, Costas Zacharopoulos wrote:
Can I have an external authorization scheme based on ip addresses and
hostnames?
Provided you have a method to find the hostname from the IP address yes.
How to find the hostname depends on your type of network and how the
stations registers their h
On Wed, 29 Sep 2004, Boniforti Flavio wrote:
I mean: shouldn't there be any "TCP_HIT", at least *once* in my logs?
Which Squid version are you using?
Squid-2.5.STABLE6 has a broken "ufs" cache_dir type..
Regards
Henrik
Elsen Marc wrote:
Not for that object : check ->
http://www.ircache.net/cgi-bin/cacheability.py?query=http%3A%2F%2Fwww.rossoalice.it%2Falice%2Fvm%2Fdemand%2Finclude%2Freload.vm+&descend=on
OK, in this case you're right and I'm wrong... :)
But, is it possible to have *whole* log files (I rotate th
Thanks for help and tips , but I still have no luck ..
Well I read documentation , and I try this setings :
cache_peer 192.168.0.23 parent 8080 0 no-query max-conn=100
connect-timeout=3
cache_peer_access 192.168.0.23 allow http
cache_peer_access 192.168.0.23 deny all
cache_peer 192.168.0.23 pare
> Hello all!
> I'm using a proxy, which sends every request to its upper parent.
> This is what I *always* get:
>
> 1096457070.690759 10.167.211.11 TCP_MISS/200 394 GET
> http://www.rossoalice.it/alice/vm/demand/include/reload.vm boniforti
> FIRST_PARENT_MISS/proxy.reteunitaria.piemonte.i
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Can I have an external authorization scheme based on ip addresses and
hostnames?
Which authentication mechanism shall I use?
Is it possible to use digest authentication?
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)
iD8DBQFBWp4rm
Hello all!
I'm using a proxy, which sends every request to its upper parent.
This is what I *always* get:
1096457070.690759 10.167.211.11 TCP_MISS/200 394 GET
http://www.rossoalice.it/alice/vm/demand/include/reload.vm boniforti
FIRST_PARENT_MISS/proxy.reteunitaria.piemonte.it text/html
I mea
> Hi,
>
> > But the problem is that SQUID can not use the specified http port
> > because it is in use (by another process).
>
> Yes, that's the obvious thing.
> The problem is that i have no process listening in port 3128.
>
> Also i've changed the port to 8080 and get the same thing:
> "200
Hi,
But the problem is that SQUID can not use the specified http port
because it is in use (by another process).
Yes, that's the obvious thing.
The problem is that i have no process listening in port 3128.
Also i've changed the port to 8080 and get the same thing:
"2004/09/29 12:13:42| Accepting HT
> Hi Elsen,
>
> After a squid restart, i get this:
>
> "2004/09/29 11:43:51| Accepting HTTP connections at 10.10.2.250, port
> 3128, FD 16.
> 2004/09/29 11:43:51| commBind: Cannot bind socket FD 17 to
> 10.10.2.250:3128: (98) Address already in use
> 2004/09/29 11:43:51| Accepting ICP messag
Hi Elsen,
After a squid restart, i get this:
"2004/09/29 11:43:51| Accepting HTTP connections at 10.10.2.250, port
3128, FD 16.
2004/09/29 11:43:51| commBind: Cannot bind socket FD 17 to
10.10.2.250:3128: (98) Address already in use
2004/09/29 11:43:51| Accepting ICP messages at 0.0.0.0, port 313
>...
>...
>
> 2 - I read in a previous mail in this list, that we could test if the
> cache is realy working, by telneting to Squid. Well, i telnet to port
> 3128, but i get connectin refused.
> What's up ?
>
Probably means that SQUID is not running or is using another
http port. Check cache.
Hi,
1 - I've tried over and over to implement an authenticated proxy. Read a
lot of stuff (basically they all say the same), but i wasn't capable, so
i'm addressing to you:
I have this in my squid .conf:
#auth_param digest program /usr/lib/squid/ncsa_auth /etc/passwd
#auth_param digest children
On Wed, 29 Sep 2004, Costas Zacharopoulos wrote:
Do I have to reconfigure squid from scratch to install ldap_group helper?
No, just install the ldap_group helper..
cd helpers/external_acl/ldap_group
make install
Regards
Henrik
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Do I have to reconfigure squid from scratch to install ldap_group helper?
I have already a running squid server.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)
iD8DBQFBWoX4m87SXUGUjPsRAu1eAKDrgry/Rq+70lkYXS7K1KuI5IOVlgCgyeke
0SH0wOQcC
On Wed, 29 Sep 2004, Jens Strohschnitter wrote:
sometimes in my messages there will be the following message:
squid[5230]: WARNING: Disk space over limit: 8 KB > 4 KB
4 KB?
How large cache have you configured?
Was there any other relevant messages before this?
Regards
Henrik
On Tue 28 September 2004 20:05, Michael Puckett wrote:
> I then tried setting maximum_object_size_in_memory to 512MB to get squid
> to retain the object in memory. This worked, as I went from TCP_HIT to
> MEM_HIT, but performance plummeted by about 20X, which was unexpected.
Could it be that the
>
> Hi List,
>
> sometimes in my messages there will be the following message:
>
> squid[5230]: WARNING: Disk space over limit: 8 KB > 4 KB
>
> I've proofed the diskspace, but there is still enough (> 2GB)
> free. So what value has to be changed ?
>
Nothing, it not seen too much, don't
Hi List,
sometimes in my messages there will be the following message:
squid[5230]: WARNING: Disk space over limit: 8 KB > 4 KB
I've proofed the diskspace, but there is still enough (> 2GB)
free. So what value has to be changed ?
--
Regards,
Jens Strohschnitter
On Tue, 28 Sep 2004, Jake Gold wrote:
I'd like to ask again: What's up with the collapsed forwarding feature in Squid 3.x?
Simply not done yet. But it looks like it may be on the way thanks to one
of the common Squid contributors/sponsors.
Regards
Henrik
On Wed, 29 Sep 2004, Costas Zacharopoulos wrote:
Can I combine digest authentication with external authorization helpers?
For example can I use digest and openldap as an external authorization helper?
Yes.
Regards
Henrik
Hello Richard,
My reply below preceded ***
> Do you mean not write the access.log and pump it into a SQL database?
> not sure its possible or desirable, what happens if the SQL database
> isn't available?
>
> Id say the best way would be to write something in perl that would use
> the access.log
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Can I combine digest authentication with external authorization helpers?
For example can I use digest and openldap as an external authorization helper?
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)
iD8DBQFBWnG6m87SXUGUjPsRAn8QAJ0TS4X
61 matches
Mail list logo