Re: [squid-users] How to enable SSL connect on httpd-accelerator mode?

2004-10-13 Thread Emilio Casbas
杨顶 wrote: >Hi: > I use squid 2.5 stable6 . Work on httpd-accelerator mode.and I use >--enable-ssl to make the squid.Then I set "https_port 443 >cert=/etc/squid/squid.pem" in squid.conf .Now my Squid can accept https >request.but when squid server recerve https request ,he connect the real >

[squid-users] icap_access and external_acl does not work

2004-10-13 Thread Christoph Haas
Hoo, hoo... I'm currently playing around with the squid with the ICAP client patch applied. It seems to work nicely just that I would like to get more control of when I use which ICAP server. So I toyed with the "icap_access" statement to 'route' the traffic according to ACLs. Unfortunately it loo

[squid-users] 403 HTTP CODE ERROR

2004-10-13 Thread florent . beyssac
The 403 HTTP code: On the other hand, in the RFC2616, the codes HTTP 403 can contain a message to indicate information to the user. The SQUID on code 403 does not respect the RFC. It posts an SQUID error message (connexion failed) without checking that the request contains a message for the user.

Re: [squid-users] How to enable SSL connect on httpd-accelerator mode?

2004-10-13 Thread Henrik Nordstrom
On Wed, 13 Oct 2004, [gb2312] 杨顶 wrote: I use squid 2.5 stable6 . Work on httpd-accelerator mode.and I use --enable-ssl to make the squid.Then I set "https_port 443 cert=/etc/squid/squid.pem" in squid.conf .Now my Squid can accept https request.but when squid server recerve https request ,h

[squid-users] 403 HTTP CODE ERROR

2004-10-13 Thread florent . beyssac
- Réacheminé par Florent BEYSSAC/CNEDI06/CNAF le 13/10/2004 11:02 - |-+---> | | [EMAIL PROTECTED]| | | cnafmail.fr | | | | | | 13/10/2004 10:2

[squid-users] 403 HTTP CODE ERROR

2004-10-13 Thread florent . beyssac
- Réacheminé par Florent BEYSSAC/CNEDI06/CNAF le 13/10/2004 11:33 - |-+---> | | Florent BEYSSAC | | | CNEDI06 | | | | | | 13/10/2004 11:03| | |

[squid-users] parent proxy question

2004-10-13 Thread Costas Zacharopoulos
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is this statement correct? cache_peer parent 8080 0 default no-query (where hostname the parent's hostname) How can I see from cachemgr menu or with squidclient parent state and stats? -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3 (GNU/Linux)

[squid-users] 403 HTTP CODE ERROR

2004-10-13 Thread florent . beyssac
The 403 HTTP code: On the other hand, in the RFC2616, the codes HTTP 403 can contain a message to indicate information to the user. The SQUID on code 403 does not respect the RFC. It posts an SQUID error message (connexion failed) without checking that the request contains a message for the user.

Re: [squid-users] problem in figures & links

2004-10-13 Thread Matus UHLAR - fantomas
On 11.10 17:05, Subramanian Narayanan wrote: >I have successfully configured proxy + 2000 AD > auth. > The problem is that sometimes users can't get pictures > and links of webpages. could anybody please tell what > is the reason and how to fix this? Thanks to all in > advance. the problem ma

Re: [squid-users] squid log analysis / merging with apache logs

2004-10-13 Thread Matus UHLAR - fantomas
On 11.10 17:15, [EMAIL PROTECTED] wrote: > I think I'll use scp to shoot the logs over to the apache server where > webalizer is running. Does anyone know how to configure webalizer to > analyse multiple log files? i.e. the httpd log & the squid log. You should search in webalizer docs, not in

Re: [squid-users] New exploit? Two squid proxies simultaneously spike to 99 percent CPU utilization.

2004-10-13 Thread Matus UHLAR - fantomas
> * Henrik Nordstrom <[EMAIL PROTECTED]>: > > > >It's set to the default here (on). I just changed all three proxies to > > >"off". > > > > Ok. Hopefully that should cure the problem for now. On 12.10 14:06, Ralf Hildebrandt wrote: > I hope so. It happened the first time here in YEARS. I'd try

[squid-users] Squid with auth options.

2004-10-13 Thread ads squid
Hi, I am runnung squid on Redhat Linux 9.0 working O.K. It is serving Interent access for two subnets 192.168.0.0. 192.168.1.1. having 2 Network cards. I want to authenticate users of subnet 192.168.1.1 only and users of subnet 192.168.0.0.will get internet access without authenticatoin. It is pos

Re: [squid-users] 403 HTTP CODE ERROR

2004-10-13 Thread Matus UHLAR - fantomas
Hello, could someone kick this person off the list? seems like broken "vacation" autoresponder.. On 13.10 11:33, [EMAIL PROTECTED] wrote: > To: [EMAIL PROTECTED] > From: [EMAIL PROTECTED] > Date: Wed, 13 Oct 2004 11:33:08 +0200 > Subject: [squid-users] 403 HTTP CODE ERROR > > > - Réacheminé

Re: [squid-users] icap_access and external_acl does not work

2004-10-13 Thread Henrik Nordstrom
On Wed, 13 Oct 2004, Christoph Haas wrote: more control of when I use which ICAP server. So I toyed with the "icap_access" statement to 'route' the traffic according to ACLs. Unfortunately it looks like icap_access does not work with external ACLs (external_acl). In my case I'm doing LDAP group loo

Re: [squid-users] 403 HTTP CODE ERROR

2004-10-13 Thread Henrik Nordstrom
On Wed, 13 Oct 2004 [EMAIL PROTECTED] wrote: The 403 HTTP code: On the other hand, in the RFC2616, the codes HTTP 403 can contain a message to indicate information to the user. The SQUID on code 403 does not respect the RFC. It posts an SQUID error message (connexion failed) without checking that

Re: [squid-users] parent proxy question

2004-10-13 Thread Henrik Nordstrom
On Wed, 13 Oct 2004, Costas Zacharopoulos wrote: Is this statement correct? cache_peer parent 8080 0 default no-query (where hostname the parent's hostname) Yes. See also the FAQ on how to configure Squid within a firewall. How can I see from cachemgr menu or with squidclient parent state and stat

Re: [squid-users] Squid with auth options.

2004-10-13 Thread Henrik Nordstrom
On Wed, 13 Oct 2004, ads squid wrote: I want to authenticate users of subnet 192.168.1.1 only and users of subnet 192.168.0.0.will get internet access without authenticatoin. It is possible with one running instance of squid on this server? Yes. Quite trivial even. For a more detailed description o

Re: [squid-users] parent proxy question

2004-10-13 Thread Costas Zacharopoulos
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 13 October 2004 13:50, you wrote: Alwars the parent is down!!! What is wrong with that? I want to make all requests go throuht the parent, but if is down to go directly to the origin. Is this statement enough? cache_peer squid.eurodyn.c

Re: [squid-users] New exploit? Two squid proxies simultaneously spike to 99 percent CPU utilization.

2004-10-13 Thread Henrik Nordstrom
On Wed, 13 Oct 2004, Matus UHLAR - fantomas wrote: I'd try to find out which clients caused the problem and disable them proxy access. afaik, this problem comes from badly configured ("overfirewalled") clients, and fixing them would be imho better than turning half_closed_clients off Unfortunately

RE: [squid-users] parent proxy question

2004-10-13 Thread Elsen Marc
> Is this statement correct? > cache_peer parent 8080 0 default no-query > (where hostname the parent's hostname) Depends what your intended setup is : 'no-query' means that the parent does not support ICP (e.g.) Read the relevant comments in squid.conf.default. > > How can I see from cache

RE: [squid-users] Squid with auth options.

2004-10-13 Thread Elsen Marc
> > Hi, > I am runnung squid on Redhat Linux 9.0 working O.K. > It is serving Interent access for two subnets > 192.168.0.0. 192.168.1.1. having 2 Network cards. > > I want to authenticate users of subnet 192.168.1.1 > only and users of subnet 192.168.0.0.will get internet > access without auth

[squid-users] cpu usage and squid-2-5S7

2004-10-13 Thread Emilio Casbas
Hi We have in an environment with approximately: 5000 clients accessing to internet. 50 Req/s 35% of Request Hit Ratios Today, we have update our squid servers to squid-2.5Stable7 version and we have seen a small increase in the cpu usage. Is it normal? Thanks Emilio C. <><>

[squid-users] parent question

2004-10-13 Thread Costas Zacharopoulos
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 How can I exclude two ip's and localhost and servers hostname from a parent node? I want to get statistics and I doesn't let me. I want to avoid forward loops. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQFBbTbpm87SXUGUjPsRAr

Re: [squid-users] icap_access and external_acl does not work

2004-10-13 Thread Stephane DAVY
Well, it works for me. I have something like that: external_acl_type ldap_group %LOGIN bla-bla ldap bla acl one_group external ldap_group group_in_ldap http_access allow one_group icap_class one_class bla-bla icap_access one_class allow one_group The trick is that you really need "http_ac

[squid-users] Web radio and WMP9

2004-10-13 Thread gfvarone
I want to prevent users from streaming radio (example http://bbwms.libero.it/lifegate) using Squid. Mime Type is video/x-ms-asf. Squid version is 2.5 STABLE6 - Win32. Added these lines to my squid.conf: acl webRadioReq req_mime_type -i ^video/x-ms-asf$ acl webRadioRep rep_mime_typ

Re: [squid-users] parent proxy question

2004-10-13 Thread Henrik Nordstrom
On Wed, 13 Oct 2004, Costas Zacharopoulos wrote: I want to make all requests go throuht the parent, but if is down to go directly to the origin. Then you need to use ICP, or prefer_direct off. Regards Henrik

Re: [squid-users] parent question

2004-10-13 Thread Henrik Nordstrom
On Wed, 13 Oct 2004, Costas Zacharopoulos wrote: How can I exclude two ip's and localhost and servers hostname from a parent node? cache_peer_access, or always_direct depending on what it is you actually want to do. Regards Henrik

Re: [squid-users] Web radio and WMP9

2004-10-13 Thread Henrik Nordstrom
On Wed, 13 Oct 2004 [EMAIL PROTECTED] wrote: Launch Windows Media Player 9 Select File, Open URL, type the address in the box 'http://bbwms.libero.it/lifegate' and I LISTEN STREAMING RADIO WITH NO TROUBLE What does access.log say? Regards Henrik

[squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-13 Thread Mark Krawec
We've recently upgraded our domain controllers to 2003 and as a result the squid_ldap_auth helper has stopped working. We're running 2.5Stable6 on Redhat9. I've tried the Squid3 helper and get the same error. I can run ldapsearch without problem, but squid_ldap_auth gives an "operations error".

[squid-users] ldap_auth protocol error Msg

2004-10-13 Thread Digitalfx
Im getting this squid cache log error while trying to validate squid users using slapd "squid_ldap_auth: WARNING, could not bind to binddn 'Protocol error' " Script: /usr/lib/squid/autenticacion_ldap #!/bin/bash /usr/lib/squid/ldap_auth -R -b dc=mydomain,dc=com -D cn=admin,dc=mydomain,dc=com -w p

[squid-users] Questions about large files

2004-10-13 Thread Brennon Church
Hello all, Has anyone here come across problems when using squid to cache larger files? I know about the upper limit on the size of objects when using Squid 2.x, and I have the maximum_object_size set to 1048576KB (1G), so that shouldn't be a concern. I'm coming across two problems: 1) When I

[squid-users] SMTP server

2004-10-13 Thread Rahul Sinha
Dear All, Can any one tell me how to use another smtp server to use in squid to send mails. I don't have sendmail running in my PC. Thanks, Rahul

Re: [squid-users] Questions about large files

2004-10-13 Thread Matus UHLAR - fantomas
On 13.10 13:45, Brennon Church wrote: > Has anyone here come across problems when using squid to cache larger > files? I know about the upper limit on the size of objects when using > Squid 2.x, and I have the maximum_object_size set to 1048576KB (1G), so > that shouldn't be a concern. I'm com

Re: [squid-users] SMTP server

2004-10-13 Thread Matus UHLAR - fantomas
On 14.10 02:37, Rahul Sinha wrote: > Can any one tell me how to use another smtp server to use in squid to > send mails. squid is HTTP proxy, it has nothing to do with SMTP. You can tunnel SMTP through HTTP (via CONNECT request) but that's another story. -- Matus UHLAR - fantomas, [EMAIL PROTECTE

[squid-users] problems with HTTP acceleration

2004-10-13 Thread Octopus
I'm having some problems getting HTTP acceleration to work with a web server. I've got the web server in my local NOC and am serving it to a client via a leased line. I want to install a httpd accelerator squid cache in the clients NOC as the leased line is too slow. I've got a pretty normal in

Re: [squid-users] SMTP server

2004-10-13 Thread Rahul Sinha
I'll give a scenario. System#1 is running squid and no sendmail System#2 is running sendmail or any other smtp server System#1 wants to send email to [EMAIL PROTECTED] once the cache is full thru ( cache_mgr option in squid.conf) How do i configure System#1 to send email at [EMAIL PROTECTED] R

Re: [squid-users] Questions about large files

2004-10-13 Thread Brennon Church
Matus UHLAR - fantomas wrote: On 13.10 13:45, Brennon Church wrote: Has anyone here come across problems when using squid to cache larger files? I know about the upper limit on the size of objects when using Squid 2.x, and I have the maximum_object_size set to 1048576KB (1G), so that shouldn't

Re: [squid-users] Transparent Cache

2004-10-13 Thread Alejandro Barcena
Thanks for replying to my mail. It's very slow... and most of clients aren't getting back the page they asked for, they just can't browse... but some do. I've analized the log files, and I don't stop getting the: 2004/10/13 20:18:09| WARNING! Your cache is running out of filedescriptors 2004/10/1

[squid-users] problem with cache store

2004-10-13 Thread Nont Banditwong
Dear group I have 2 squid 2.5.STABLE3 server on P-IV 2.8E ASUS P4P800-SE RAM 2GB , 2 IDE harddisk 120GB for system and first cache_dir and 40GB for cache only. Client request is about 400req/s and 2 cache use the same squid configuration. The problem is a cache is after I found many warning mess

RE: [squid-users] problem with cache store

2004-10-13 Thread Elsen Marc
> > Dear group > > I have 2 squid 2.5.STABLE3 server on P-IV 2.8E ASUS P4P800-SE > RAM 2GB , 2 IDE harddisk 120GB for system and first cache_dir > and 40GB for cache only. Client request is about 400req/s and 2 cache > use the same squid configuration. > > The problem is a cache is after I f

[squid-users] Why squid can not cache a file which a client use multi session download?

2004-10-13 Thread yang jianzhou
I use squid-2.5.STABLE7,When i use one session download a file(such as a mp3 file),It can be cache in hard driver,But when i use multi session(some tool such as 'FlashGet' can support this) download a file,It will can not be cache in hard driver,How do i resolve this problem?Thanks for any r