On Wed, 2006-02-22 at 11:39 -0600, Steve Brown wrote:
> > It seems that I misunderstood what you meant. Do you want the PROXY to
> > authenticate against its parent? Independently from who is the user it
> > acts in behalf of?
>
> Yes, that's the idea. All users are restricted to the same ACL, so
Chris Robertson wrote:
See lines inserted below...
acl msntime time M T W H F A 11:59-12:59
acl msntime time M T W H F A 16:59-18:59
acl msnp rep_mime_type ^application/x-msn-messenger$
acl msnq req_mime_type ^application/x-msn-messenger$
# Allow management MSN
http_reply_access allow msnp m
Sorry to be pounding the list lately, but I'm about to lose it with
these file descriptors...
I've done everything I have read about to increase file descriptors on
my caching box, and now I just rebuilt a fresh clean squid. Before I
ran configure, I did ulimit -HSn 8192, and I noticed that while
> -Original Message-
> From: Tomasz Kolaj [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, February 22, 2006 2:24 PM
> To: squid-users@squid-cache.org
> Subject: Re: [squid-users] low squid performance?
>
>
> Dnia środa, 22 lutego 2006 23:57, Chris Robertson napisał:
> [cut]
> >
> > The answe
Dnia środa, 22 lutego 2006 23:57, Chris Robertson napisał:
[cut]
>
> The answer to that question is dependant on a whole host of variables, such
> as ACLs used, whether it's a proxy or an accelerator, the types of clients
> accessing it (client latency has a dramatic effect on CPU usage), types of
> -Original Message-
> From: Tomasz Kolaj [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, February 22, 2006 1:30 PM
> To: squid-users@squid-cache.org
> Subject: Re: [squid-users] low squid performance?
>
>
> Dnia środa, 22 lutego 2006 23:18, Mark Elsen napisał:
>
> > - Make your own build
After I upgrade the memory to 2gb can I increase the cache_mem value
to 256MB. At the moment it is 64MB.
Thanks
On 2/22/06, Kevin <[EMAIL PROTECTED]> wrote:
> > We are running OpenBSD version 3.6
>
> I'd recommend going to 3.8.
>
>
> > > Can you define "performance issues"?
> >
> > If I access a
Dnia środa, 22 lutego 2006 23:18, Mark Elsen napisał:
> - Make your own build and installation of SQUID; configure only those
> options which you need.
> This may help for performance too.
Ok, I'll rebuild squid without not-needed options. I have top squid's usage at
18:00-21:00 so I'll check c
> Has anyone got this working properly? When users access a page that plays a
> .wav/mp3 there is userid/password prompt. If you click cancel it goes away
> until you go to the next page. These pages with the audio have a NSPlayer
> header.
>
> I don't have any rules setup to allow only header X.
> Hello,
>
> I observed have too low performance. On 2x 64bit Xeon 2,8GHz 2GB DDR2, 2x WD
> RAPTOR Squid 2.5.STABLE12 can answer max for 120 requests/s.
> 115 r/s - 97-98% usage of first processor. Second is unusable for squid :/. I
> have two cache_dirs (aufs). One pre disk.
>
> aragorn ~ # squid
Hello,
I observed have too low performance. On 2x 64bit Xeon 2,8GHz 2GB DDR2, 2x WD
RAPTOR Squid 2.5.STABLE12 can answer max for 120 requests/s.
115 r/s - 97-98% usage of first processor. Second is unusable for squid :/. I
have two cache_dirs (aufs). One pre disk.
aragorn ~ # squid -v
Squid Ca
I added this line to the config on two of my hosts, but it did not
have any effect. The host experienced the same amount of slowdown
under high load and had to be restarted.
I should note that I changed the config file and did:
sudo squid -k reconfigure
I did not kill the process.
I'm not
See lines inserted below...
> -Original Message-
> From: Brent Clark [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, February 22, 2006 5:20 AM
> To: squid-users@squid-cache.org
> Subject: [squid-users] management get MSN 24/7
>
>
> Hi all
>
> I need to setup up a interesting configuration
Has anyone got this working properly? When users access a page that plays a
.wav/mp3 there is userid/password prompt. If you click cancel it goes away
until you go to the next page. These pages with the audio have a NSPlayer
header.
I don't have any rules setup to allow only header X. Surely,
> By wiser, I mean: will squid just picked up where it left off with the cache
> as if nothing >happened? Or will items in the cache become alien to squid?
>
Certainly not, SQUID is alien-free, and was even designed to
run on :
http://planetquest.jpl.nasa.gov/TPF/tpf_index.cfm
So
> It seems that I misunderstood what you meant. Do you want the PROXY to
> authenticate against its parent? Independently from who is the user it
> acts in behalf of?
Yes, that's the idea. All users are restricted to the same ACL, so I
see no reason to try to auth w/ differnt users, except maybe
By wiser, I mean: will squid just picked up where it left off with the cache as
if nothing happened? Or will items in the cache become alien to squid?
Not a big deal either way, I'll just try it and if I have to wipe the caches,
so be it.
-Original Message-
From: Mark Elsen [mailto:[
> Yes my program talks with Windows 2003 AD.
>
Please ( !-> again) , keep discussions into the same original-thread
- You are friendly-er to the community
- Archives en search-tools will be able to organize and
operate, themselves in a more optimal manner;
which will also benefit
Yes my program talks with Windows 2003 AD.
-Messaggio originale-
Da: Paul Mattingly [mailto:[EMAIL PROTECTED]
Inviato: mercoledì 22 febbraio 2006 15.01
A: squid-users@squid-cache.org
Oggetto: RE: [squid-users] Save clients password
If you can configure squid to use NTLM, this authenticat
> Thanx for your reply
>
> I have tried all of the instructions listed in the given site but they wont
> work.
>
> I think problem is out of the iptables.
>
>
- For your hotmail issue , please try (in squid.conf) :
acl hotmail_domains dstdomain.hotmail.msn.com
header_acce
Hi all
I need to setup up a interesting configuration for a different list of users
acl management src "/etc/SQUID/management.txt"# List of managment users
acl staff src "/etc/SQUID/staff.txt" # List of normal users
My MSN controlling time is as so:
acl msntime time M T W H F
hello,
I have a RHELv4 cache + Cisco IOS Software, C1700
Software (C1700-K9O3SY7-M), Version 12.3(14)T2,
RELEASE SOFTWARE (fc4).
I have applied your suggestions, but it's still not
working. Please take a lookt at my Router's + Squid
config.
Am I missing something ?
-
!
version 1
On 2/22/06, Oliver Schulze L. <[EMAIL PROTECTED]> wrote:
> Hi Mark,
> I have 2 identical servers (CentOS 4.2), with same squid version and
> interception iptables settings.
>
> I have the same boinc client behind both squid servers,
> and in one that work I see:
> 1140608197.087 3022 192.168.1.1
Hi,
My kernel is 2.6.9-22.ELsmp #1 SMP
And I have loaded the ip_gre module.
Please can you point out where I do not get it ?
Regards,
Dan
On 2/21/06, Henrik Nordstrom <[EMAIL PROTECTED]> wrote:
> mån 2006-02-13 klockan 13:31 -0500 skrev Shoebottom, Bryan:
> > Hello,
> >
> > I have not been able t
If you can configure squid to use NTLM, this authentication process
happens in the background with no user intervention which may be a
better option.
Is your ldap program talking to active directory or some other ldap
directory?
-Original Message-
From: Franco, Battista [mailto:[EMAIL PRO
Hi,
I have a RHELv4 cache + Cisco IOS Software, C1700
Software (C1700-K9O3SY7-M), Version 12.3(14)T2,
RELEASE SOFTWARE (fc4).
I have applied your suggestions, but it's still not
working. Please take a lookt at my Router's + Squid
config.
Am I missing something ?
-
!
version 12.3
Hi Mark,
I have 2 identical servers (CentOS 4.2), with same squid version and
interception iptables settings.
I have the same boinc client behind both squid servers,
and in one that work I see:
1140608197.087 3022 192.168.1.1 TCP_MISS/200 248 POST
http://setiboincdata.ssl.berkeley.edu/sah_cgi/
mån 2006-02-13 klockan 13:31 -0500 skrev Shoebottom, Bryan:
> Hello,
>
> I have not been able to get the ip_gre module and tunnel to work. I
> currently use the ip_wccp module
> (http://www.squid-cache.org/WCCP-support/Linux/) and no configured
> tunnel on the linux box.
ip_gre is the recommende
ons 2006-02-15 klockan 19:08 +0100 skrev Maciej Zięba:
> * Here are a couple of last lines from cache.log
>
> 2006/02/15 13:52:02| WARNING: Forwarding loop detected for:
> Client: 127.0.0.1 http_port: 127.0.0.1:80
> REPORT http://xxx:81/svn/SwordFish/Trunk/SwordFish/SwordSite HTTP/1.0
> Host: xxx
ons 2006-02-15 klockan 11:39 -0600 skrev Fernando Rodriguez:
> Is there any way to capture the return url of a redirector program so i can
> reprosses the resulting url for password authentication??
Can you explain in more detail what it is you want to do?
Regards
Henrik
signature.asc
Descript
ons 2006-02-15 klockan 16:37 +0200 skrev laurentiu r:
> Hi everyone,
> Just a quick question about the dynamic delay pools. Apologies if it
> has been asked before - it must have been - but I've looked into the
> mail archives and didn't seem to find indication as to what's the
> current
tis 2006-02-14 klockan 22:31 -0800 skrev Mike Solomon:
> Hardware:
> DualCore Opeteron 270, 1800MHz
A bit overkill. Squid can not use SMP effectively...
> This would be fantastic, but the machines "fall over" after several
> hours. I have 4 machines, each configured identically. They last a
>
tis 2006-02-14 klockan 18:36 -0600 skrev Fernando Rodriguez:
> Hello,
>
> Is there a way to match a regexp after redirect returns??
The rproxy patch available from devel.squid-cache.org adds among a lot
of other things a http_access2 statement executing after redirectors and
can be used for this
mån 2006-02-13 klockan 14:55 -0200 skrev Carlos Eduardo Gomes Marins:
> I don't have Squidguard nor Dansguardian, only Trendmicro IWSS as mentioned,
> so all the acls's and handled by Squid itself.
> Is there anything I can do to improve the overall performance?
What kinds of ACLs are you using?
tis 2006-02-14 klockan 13:55 +0800 skrev Russell:
> Hi,
>
> Was hoping to get some help passing usernames from an external acl to a
> cache peer. My situation is squid -> dansguardian -> squid. First
> squid for making ident queries and applying some acl's we have in place
> (quota limits, id
I think my problem could be that I use an IP alias for interception.
Will do some test, thanks for you comments Mark!
Oliver
--
Oliver Schulze L.
<[EMAIL PROTECTED]>
Hi
I use squid ldap users authentication.
>From my client PCs every time I start IE I need to insert username and
password.
Is it possible to configure squid user and password popup with a
checkbox to permit to save password?
So next time I'll not retype password.
Thanx for your reply
I have tried all of the instructions listed in the given site but they wont
work.
I think problem is out of the iptables.
Waiting for reply
M Bilal Ahmad
-Original Message-
From: Kinkie [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 22, 2006 4:23 PM
To: Muhamm
On Wed, 2006-02-22 at 15:30 +0500, Muhammad Bilal Ahmad wrote:
> Dear all
[...]
> touch /var/lock/subsys/local
>
> ulimit -n 8192
>
> echo "1" > /proc/sys/net/ipv4/ip_forward
>
> iptables -t nat -A POSTROUTING -p tcp -j MASQUERADE
>
> iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth0
Hi Mark
I will do but I have to wait for the next trouble.
Thanks
Christian
-Ursprüngliche Nachricht-
Von: Mark Elsen [mailto:[EMAIL PROTECTED]
Gesendet: Mittwoch, 22. Februar 2006 09:53
An: Christian Herzberg
Cc: squid-users@squid-cache.org
Betreff: Re: [squid-users] Squid 2.5.STABLE9
Dear all
I am in a panic situation. I have configured squid with Diskd to use as a
transparent proxy following are the lines I used to support it for
transparent proxy.
Httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
the squi
Hi
Below is a diagram of part of our network.
We have an L2TP tunnel that gets terminated on our Cisco 7200 for DSL users.
The tunnel comes from our Upstream provider and once terminated we do the
Radius authentication and then redirect all port 80 traffic to our Squid
server.
However the Squid pa
On 2/22/06, Mark Elsen <[EMAIL PROTECTED]> wrote:
> > 'm working for an ISP company and I'm using squid as a cache engine
> > for the first time.
> > when a dial-up user downloads a cached file originally form a local
> > server, the download rate is 10 kbps, but if the origin server is
> > anywher
On Tue, 2006-02-21 at 10:03 -0600, Steve Brown wrote:
[...]
> In the specific scenario I mentioned, the browser isn't submitting any
> credentials. The traffic is being intercepted and routed through a
> local proxy which in turns forwards requests to a remote proxy w/
> authentication. It seems
:
>
> I'm preparing to rebuild squid on a few servers within a production
> cluster to apply the epoll patch and fix a FD issue. Once everything is
> rebuilt (same configuration options), do I have to run "squid -z"
> initially? Or, can squid reuse the existing cache directories after
> being re
> HI Mark
>
>
> I´m sorry vor that. I was asked if the squid is waiting (stopping) or
> crashing.
> The squid isn´t crashing. It waits and waits and waits.
>
I asked you, to provide, when SQUID is in this condition, to
provide the output of cache.log entries after a 2 secs DEBUG session,
which ca
> Hello Squid-User Group Members,
>
> The problem is not new, there are many postings about file upload issues with
> files >1MB. -> But I've read the FAQ and searched a few hours in Mailing list
> archives. The only recommendations I found was to check the Squid Config and
> php.ini for correct
> Hi,
>
> I would just like to know. When downloading a file from a site say for
> example a link like so: http://host1.example.com/test.zip and the file
> has a size say 300kb (and timestamp 2006/01/01 ?) and then downloading
> the same file from another (mirror) site say
> http://host2.example.c
> Hi,
>
> can anybody tell me what this acl does? does it block downloading or
> uploading?
> and how can i test it?
>
It identifies mime types, which can then be used further;
when building access control in squid (http_access rules)
M.
> 'm working for an ISP company and I'm using squid as a cache engine
> for the first time.
> when a dial-up user downloads a cached file originally form a local
> server, the download rate is 10 kbps, but if the origin server is
> anywhere else on the Internet the download rate of a previously cac
'm working for an ISP company and I'm using squid as a cache engine
for the first time.
when a dial-up user downloads a cached file originally form a local
server, the download rate is 10 kbps, but if the origin server is
anywhere else on the Internet the download rate of a previously cached
file w
51 matches
Mail list logo
