[squid-users] Betr.: RE: [squid-users] NNTP protocol port 119 throuh squid

2005-02-01 Thread K. Yntema
Elsen Marc [EMAIL PROTECTED] 01-02-2005 8:42:04 Hello, i won't to use NNTP news protocol port 119. How can i get NNTP through Squid. http://www.squid-cache.org/Doc/FAQ/FAQ-1.html#ss1.1 Squid deals with http proxy-ing (only). M. I've already read the FAQ. I know that,

Re: [squid-users] squid child process extended

2005-02-01 Thread Askar
Elsen Marc wrote: hi list today i get this in /var/log/messages Feb 1 11:40:04 Mcache squid[1318]: Squid Parent: child process 9501 exited with status 1 Feb 1 11:40:07 Mcache squid[1318]: Squid Parent: child process 9503 started Feb 1 11:40:07 Mcache squid[1318]: Squid Parent: child

[squid-users] RE: Betr.: RE: [squid-users] NNTP protocol port 119 throuh squid

2005-02-01 Thread Elsen Marc
I've already read the FAQ. I know that, but squid doesn't let the NNTP protocol through. So i can't use any news server any more. I want squid to stay off NNTP. Squid doesn't need to proxy NNTP. Just let it through. Can't i do it with always_direct? Squid isn't a firewall

Re: [squid-users] question on external_acl_type

2005-02-01 Thread Norio Korekawa
Hello again Henrik, To be exact, I also have to remove %DST to realize what I expect. If %DST remains, the helper is still called every time the user accesses different hosts... Thanks again. Regards, Norio Henrik, Thank you so much! Your answer did help me a lot and I could understand

RE: [squid-users] squid child process extended

2005-02-01 Thread Elsen Marc
right, cache partition size is 15gb and we have created cache_dir diskd /cache2/cache1 7500 cache_dir diskd /cache2/cache2 7500 Is this fine? or we have to leave some space on cache2 partition , currently 7500 + 7500 = 15000 all the partition space what is the good partice?

Re: [squid-users] squid child process extended

2005-02-01 Thread forgetful tan
Askar wrote: Elsen Marc wrote: hi list today i get this in /var/log/messages Feb 1 11:40:04 Mcache squid[1318]: Squid Parent: child process 9501 exited with status 1 Feb 1 11:40:07 Mcache squid[1318]: Squid Parent: child process 9503 started Feb 1 11:40:07 Mcache squid[1318]: Squid Parent:

RE: [squid-users] NNTP protocol port 119 throuh squid

2005-02-01 Thread K. Yntema
I've already read the FAQ. I know that, but squid doesn't let the NNTP protocol through. So i can't use any news server any more. I want squid to stay off NNTP. Squid doesn't need to proxy NNTP. Just let it through. Can't i do it with always_direct? Squid isn't a firewall

[squid-users] Extenel ACL blocking in Squid

2005-02-01 Thread jijo
Hai I have squid server I want to block the downloading .exe .mp3 files so i created one block.txt in /etc/squid/block.txt in tht i specified like this \.exe\?.*$ \.mp3\?.*$ \.wms\?.*$ \.mp4\?.*$ then in squid.conf i enter like this in the ACL part acl localhost src

Re: [squid-users] RE: Betr.: RE: [squid-users] NNTP protocol port 119 throuh squid

2005-02-01 Thread Martin Joseph
On Feb 1, 2005, at 12:10 AM, Elsen Marc wrote: I've already read the FAQ. I know that, but squid doesn't let the NNTP protocol through. So i can't use any news server any more. I want squid to stay off NNTP. Squid doesn't need to proxy NNTP. Just let it through. Can't i do it with always_direct?

Re: [squid-users] cache direcotry full

2005-02-01 Thread Kinkie
On Tue, 2005-02-01 at 12:39 +0500, Askar wrote: hi list df -lh showing 100% for one of /cache directory , how to manage this ? Decrease the cache_dir size by about 20% (to allow for overhead) and restart squid.

[squid-users] Re: Squid Sizing and other things

2005-02-01 Thread Maik Ihde
Matus UHLAR - fantomas uhlar at fantomas.sk writes: Do not use stripping for squid caches. squid has its own way for using multiple drives, which is safer and more effective. I have read some of the discussions about RAID and Squid, and I think that this is a good setup for two reasons: The

[squid-users] storage rebuild slow with reiserfs

2005-02-01 Thread Martin Marji Cermak
Hello, I have two 36 GB, 10 rpm scsi disk dedicated to Squid.2.5.STABLE7. No raid.Adaptec 29320LP Ultra320 SCSI adapter, SEAGATE ST336607LW cache_dir aufs /cache/cache1 28000 60 256 cache_dir aufs /cache/cache2 28000 60 256 When I had these disks formated with ext3, Squid store rebuild took

RE: [squid-users] Extenel ACL blocking in Squid

2005-02-01 Thread Vladimir Potapov
My example: test:/etc/squid # cat /etc/squid/deny.files \.mp3$ \.exe$ /etc/squid/squid.conf: acl test src 1.1.1.1 acl all 0.0 acl downloads url_regex /etc/squid/deny.files http_access deny downloads test http_access allow test http_access deny all -Original Message- From: jijo

RE: [squid-users] Re: Squid Sizing and other things

2005-02-01 Thread Elsen Marc
... ... I have read some of the discussions about RAID and Squid, and I think that this is a good setup for two reasons: The System itself is running over the stripe set and also the Virusscan Proxy will benefit from the StripeSet Performance gain.

Re: [squid-users] NNTP protocol port 119 throuh squid

2005-02-01 Thread Matus UHLAR - fantomas
On 01.02 08:32, K. Yntema wrote: i won't to use NNTP news protocol port 119. How can i get NNTP through Squid. Iff your NNTP readers can use HTTPS proxy, you just have to allow method CONNECT to port 119. Can't you just allow port 119 on firewall? You will get the same result, but it will be

[squid-users] Squid + ntlmauth + SSL + Java

2005-02-01 Thread Eduardo Freitas
Hello Everyone, I am currently having a problem when using squid with ntlm-auth on some banks website. The problem happens in a SSL page when it tries to load a java applet and it fails. If I take off ntlm authentication, the web page loads fine. The only problem that squid is using in order to

RE: [squid-users] squid child process extended

2005-02-01 Thread Elsen Marc
alright I got the point atm what i did is to decrease the cache_dir size and restart the squid. However now im thinking about to create a single cache directory on a single partition but duno howto do this, im pasting the output of df and cache_dir lines from squid.conf hopes

[squid-users] Squid 2.5 Stable6 doesn't match subdomains

2005-02-01 Thread Pablo Romero
Hello I am running Squid 2.5Stable6, created an acl like this: acl deniedsites dstdomain /usr/local/squid/blacklists/porn http_access deny deniedsites The porn file contains entries like: playboy.com penthouse.com When I

RE: [squid-users] Squid + ntlmauth + SSL + Java

2005-02-01 Thread Elsen Marc
Hello Everyone, I am currently having a problem when using squid with ntlm-auth on some banks website. The problem happens in a SSL page when it tries to load a java applet and it fails. If I take off ntlm authentication, the web page loads fine. The only problem that squid is using

[squid-users] Re: Squid 2.5 Stable6 doesn't match subdomains

2005-02-01 Thread Joost de Heer
Pablo Romero said: Hello I am running Squid 2.5Stable6, created an acl like this: acl deniedsites dstdomain /usr/local/squid/blacklists/porn http_access deny deniedsites The porn file contains entries like:

Re: [squid-users] Squid 2.5 Stable6 doesn't match subdomains

2005-02-01 Thread Ricardo López Urrutia
Pablo; You have to use a . before the domain name. IE .playboy.com .hustler.com .sex.com .yahoo.com Regards! Ricardo At 12:10 p.m. 01/02/2005 +, Pablo Romero wrote: Hello I am running Squid 2.5Stable6, created an acl like

Re: [squid-users] upgrading Squid 2.5S3 to 2.5S7 broke RealVideo

2005-02-01 Thread adam-s
On Mon, 31 Jan 2005 19:28:36 -0800, I wrote: We recently upgraded our Squid server from a Sun Ultra60 running Solaris 2.8 to a Sun V240 running Solaris 2.9. I also took the opportunity to upgrade Squid from 2.5STABLE3 to 2.5STABLE7. Now our streaming video (Real Media) no longer works (it

[squid-users] Reverse proxy redirector

2005-02-01 Thread Brad Taylor
I have a redirector setup on my reverse squid proxy to change all http requests to https. But it doesn't seem to be working. Here is the script: #!/usr/bin/perl $|=1; #Don't buffer output. while() #Infinite loop. running as a daemon { $url=(split)[0]; $url=~ s/^http:/https:/;

[squid-users] Squid NTLM authentication problem NT domain

2005-02-01 Thread nikolay nenchev
Hi, I have search in faq and mailing list about this problem and the only solution was with the premission in winbindd_privileged/pipe. So I'm going to discribe my situation: I have install samba 3.0.10 with ./configure --with-winbind smb.conf: [global] workgroup = mylan server string =

[squid-users] Blocking download video.

2005-02-01 Thread Renato Policani
Hi everybody I am blocking video in configuration file named deny_music and in squidGuardian in blacklist/audio-video. But some users had discovered a way for download this extension using ? before the extension. Exemple: http://www.xyz.com/video.wmv - Squid block !! OK !!

[squid-users] Newbie and can't figure ACL out

2005-02-01 Thread Hunter, Jess
I am a relative newbie here and I am trying to deny certain websites from being displayed. Here is what I have thus far and for some reason it is not working. If someone could have a look see at this snippet of code I would appreciate it: acl news1 dstdomain www.foxnews.com www.cnn.com

[squid-users] Simple feature request: random ACL

2005-02-01 Thread Brett Glass
Everyone: I am helping some folks with a Squid cache setup and would like to request the addition of a simple feature. What I need is an ACL type called random which would be of the form acl aclname random .66 Where the ACL will be matched with the specified probability. This type of ACL

[squid-users] http and port 443, windows update

2005-02-01 Thread EyalM
Hi, Im using squid and squidguard. I'm having problems using windows update on Windows XP... checking the logs I find out that iexplorer tries to download updates from http://v5.windowsupdate.microsoft.com:443/ but then nothing happends.. just hangs. I tried that page from my explorer and

[squid-users] Can not Browse this url since i update from squid2.5-stable6 to squid2.5-stable7 - Mail libre de virus.

2005-02-01 Thread gortega
Sorry for my poor English, but i am from Argentina .. so :) Usually my clients can browse this url http://www2.correoargentino.com.ar/scripts/tyt/tyt.pl?producto=TCnumero=366514830pais=AR without any problem. Since i update to 2.5stable7 and later they can´t I test installing again the stable6

[squid-users] Can not Browse this url since i update from squid2.5-stable6 to squid2.5-stable7 - Mail libre de virus.

2005-02-01 Thread gortega
Sorry for my poor English, but i am from Argentina .. so :) Usually my clients can browse this url http://www2.correoargentino.com.ar/scripts/tyt/tyt.pl?producto=TCnumero=366514830pais=AR without any problem. Since i update to 2.5stable7 and later they can´t I test installing again the stable6

Re: [squid-users] Pam authentication /etc/shadow

2005-02-01 Thread Henrik Nordstrom
On Tue, 1 Feb 2005, Robert Vangel wrote: Try removing /etc/pam.d/squid. I have just tried this (on Debian Sarge, pam 0.76-22, squid 2.5 stable 7) myself and it works with no manipulation of pam (odd I thought... but if it works). It is not soo odd. You probably have suitable defaults in the

Re: [squid-users] PURGE problem in squid-2.5.STABLE7

2005-02-01 Thread Henrik Nordstrom
On Tue, 1 Feb 2005, forgetful tan wrote: But I found it doesn't work in some unknown situation. I PURGE my squids, and clean my ie's cache,then review the page. It still the old version. At last, I found if the GET method pass the 'User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;

Re: [squid-users] upgrading Squid 2.5S3 to 2.5S7 broke RealVideo

2005-02-01 Thread Henrik Nordstrom
On Mon, 31 Jan 2005 [EMAIL PROTECTED] wrote: We recently upgraded our Squid server from a Sun Ultra60 running Solaris 2.8 to a Sun V240 running Solaris 2.9. I also took the opportunity to upgrade Squid from 2.5STABLE3 to 2.5STABLE7. Now our streaming video (Real Media) no longer works (it

RE: [squid-users] NNTP protocol port 119 throuh squid

2005-02-01 Thread Henrik Nordstrom
On Tue, 1 Feb 2005, K. Yntema wrote: When i shutdown Squid i can use NNTP and have no problems, but when squid is started I can't make a NNTP connection So squid blocks the NNTP protocol. I can assure you that Suqid does nothing of the kind. What I can think of maybe relating to this is either a)

Re: [squid-users] http and port 443, windows update

2005-02-01 Thread Henrik Nordstrom
On Tue, 1 Feb 2005 [EMAIL PROTECTED] wrote: I'm having problems using windows update on Windows XP... checking the logs I find out that iexplorer tries to download updates from http://v5.windowsupdate.microsoft.com:443/ but then nothing happends.. just hangs. That would be a very strange thing to

[squid-users] trying to read squid reports

2005-02-01 Thread Daniel Navarro
Hi, what does the hit percentage mean in calamaris report? Thanks, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos

[squid-users] protecting my network from known viruses.

2005-02-01 Thread Daniel Navarro
May I create rules in squid to protect my network from known viruses blocking for example .jpg.vbs files of .htm.exe files? how will the lines be? how can it affect squid performance? Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver

RE: [squid-users] trying to read squid reports

2005-02-01 Thread Daniel Navarro
Thanks, Is there any parameters telling me how much of browsing is took directly from squid cache? Regards, Daniel Navarro Maracay, Venezuela www.csaragua.com/ecodiver --- Chris Robertson [EMAIL PROTECTED] escribió: It's the percentage of requests that resulted in one of

RE: [squid-users] trying to read squid reports - Reformatted for clarity

2005-02-01 Thread Chris Robertson
-Original Message- From: Daniel Navarro [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 01, 2005 3:12 PM To: Squid Cache Subject: [squid-users] trying to read squid reports Hi, what does the hit percentage mean in calamaris report? Thanks, Daniel Navarro

Re: [squid-users] Blocking download video.

2005-02-01 Thread H Matik
On Tuesday 01 February 2005 14:25, Renato Policani wrote: Hi everybody I am blocking video in configuration file named deny_music and in squidGuardian in blacklist/audio-video. But some users had discovered a way for download this extension using ? before the extension. Exemple:

Re: [squid-users] Abnormal end of Squid 2.5S7

2005-02-01 Thread Awie
My Squid2.5S7 (+ all patches) has an abnormal end with (last) message assertion failed: HttpHeader.c:532: 0. Below the report in cache.log Make sure you have current versions of the patches. The header_parsing patch has been updated many times, and your error looks very similar to a

Re: [squid-users] storage rebuild slow with reiserfs

2005-02-01 Thread Martin Marji Cermak
Hello All people usually say reiserfs is more suitable for Squid than ext3. It does not seem to me, that is why I'm posting another mail. Actually, Duane Wessels book Squid The Definitive Guide shows ext3 has slightly higher throughput than reiserfs too. I am still very surprised about poor

Re: [squid-users] question on external_acl_type

2005-02-01 Thread Norio Korekawa
Hello again Henrik Thank you for your answer. My understanding of deny_info (with relation to http_access deny) was just insufficient... It might look a little redundant, but according to Scott's advice I guess an appropriate squid.conf would be as follows: --- my squid.conf -- deny_info

[squid-users] wccp problem after wccp_denial_of_service patch #1190

2005-02-01 Thread sekchye goh
Hi there! We are running squid on a debian linux box configured with wccp to a Cisco router. Recently, we patched the squid to resolve Denial of service with forged WCCP messages problem. #1190. We have also enabled features, such as unicast reverse path forwarding (uRPF), on your routers and

Re: [squid-users] Newbie and can't figure ACL out

2005-02-01 Thread Muthukumar
dear jess, Your acl formation may be the problem on this. Use as, acl news1 dstdomain www.foxnews.com www.cnn.com www.espn.com acl news1 dstdomain .foxnews.com .cnn.com .espn.com http_access deny news1 http_access allow all I have restarted the Squid Service several times

[squid-users] help on how to disable gopher:// requests.

2005-02-01 Thread kisha
%sysctl kern.version kern.version: FreeBSD 5.3-STABLE #5: Tue Feb 1 20:36:42 PHT 2005 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/MMP squid/2.5.STABLE7 The proxy accepts gopher:// requests. , is there a way to disable this in squid.conf i did search in google lots of thesame post but i havent

[squid-users] net2phone issue

2005-02-01 Thread Varun
Hello, My clients are accessing the net using squid proxy + NSCA auth. Is it possible have net2phone working through squid. If yes how ? Thanks Varun

[squid-users] permanently cache update packs

2005-02-01 Thread Bin Liu
Hi, folks, I want permanently cache some update packs, including Windows Update, Symantec LiveUpdate, etc. I've searched the web, and found someone using squid + apache + perl to achieve this. This is a little more complicated, and I don't think running redirectors is a good idea under heavy

[squid-users] NTLM is or isn't built?

2005-02-01 Thread Oliver Hookins
Hi again, I'm setting up another machine with Squid 2.5STABLE7, this time from the Mara Systems RPM on Redhat 8.0. If you take the output of squid -v, it looks like NTLM is compiled in: Squid Cache: Version 2.5.STABLE7-1 configure options: --host=i686-pc-linux-gnu --build=i686-pc-linux-gnu

[squid-users] Incorrect logging of any ICQ connection

2005-02-01 Thread sasha
Hi, dear squid-cache developers! In my LAN some of users use icq and of course through squid. I don't leave them chance to go other way. I need to get statistics per user for ALL traffic transferred through the cache. That works fine, but squid does NOT log these connections as it logs other

[squid-users] OT - squid2mysql

2005-02-01 Thread Bimal Pandit
Dear All, has anyone installed(successfully) squid2mysql-1.0 package?? i am struggling to get this installed on my redhat 9 system as it seems that there are lot of errors in this(may be it seems only to me!!) any pointers will be of great help. -- regards, Bimal Pandit [EMAIL PROTECTED]