Dear
I need to use an acl that works with reply size.
better way( I found) is using following acl
acl aclname rep_header header-name [-i] any\.regex\.here # from
squid.conf.default
changed to:
acl bigfiles rep_header Content-Length ^(1|2)?+[0-9]{0,6}?$
http_access deny bigfiles
http_access a
Just to compare:
Squid Cache: Version 3.0.PRE4-CVS
(same options for 2.6 work fine.)
configure options: '--prefix=/usr/local/squid' '--enable-storeio=ufs aufs null'
'--enable-linux-netfilter'
Config:
cache_effective_user adrian
wccp2_service standard 0
#wccp2_service dynamic 80
#wccp2_service_
My config options
configure options: '--prefix=/usr' '--exec_prefix=/usr' '--bindir=/usr/sbin'
'--sbindir=/usr/sbin' '--libexecdir=/usr/lib/squid'
'--sysconfdir=/etc/squid' '--localstatedir=/var/spool/squid'
'--datadir=/usr/share/squid' '--enable-async-io' '--with-pthreads'
'--enable-storeio=ufs,
On Sat, Sep 02, 2006, Stephen Fletcher wrote:
> Hi
> I have compiled the Debian Unstable package of Squid 2.6.3 and cannot get
> WCCPv2 GRE working.
> I have built with standard confiure options so WCCPv2 support should be
> available. I configure my wccp2_router and leave it as other default wccp2
Hi
I have compiled the Debian Unstable package of Squid 2.6.3 and cannot get
WCCPv2 GRE working.
I have built with standard confiure options so WCCPv2 support should be
available. I configure my wccp2_router and leave it as other default wccp2
options such that it is using ID 0 and GRE. I see the s
Hi,
I just updated my squid to squid-2.6.1 but strange it adds up a default
cache_peer entry against itself. Could some help me out? cant figured it
out during configure...
heres my squid configure switches
./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu
--target=x86_
Hi All,
I am running Version 2.5.STABLE10 on an Open BSD operating system. I
am having problems with proxy.pac file. I have the following proxy.pac
file.
if (isInNet(myIpAddress(), "172.26.96.0", "255.255.240.0")) return "PROXY 172.
26.11.50:3128; PROXY 172.26.11.150:3128";
if (isInNet(myIpAddr
On Sat, Sep 02, 2006, Daniel Appleby wrote:
> Hi,
>
> Just a question about cache_peering. If you have proxys setup in a
> sibling relationship does one proxy require authentication to access
> cache of another proxy if both proxys use prxoy_auth?
>
> i.e. does proxy A have to auth to proxy B i
On Fri, Sep 01, 2006, Mark Nottingham wrote:
> I'd appreciate some enlightenment as to how Squid handles large files
> WRT memory and disk.
>
> In particular;
> - squid.conf says that memory is used for "in-transit objects."
> What exactly is kept in memory for in-transit objects; just metad
I'd appreciate some enlightenment as to how Squid handles large files
WRT memory and disk.
In particular;
- squid.conf says that memory is used for "in-transit objects."
What exactly is kept in memory for in-transit objects; just metadata,
or the whole thing?
- if something is in memory
Hi,
Just a question about cache_peering. If you have proxys setup in a
sibling relationship does one proxy require authentication to access
cache of another proxy if both proxys use prxoy_auth?
i.e. does proxy A have to auth to proxy B in ordered to get its cache?
Thanks in Advance
Regards
D
fre 2006-09-01 klockan 15:04 -0700 skrev Zaki Akhmad:
> On 9/1/06, Henrik Nordstrom <[EMAIL PROTECTED]> wrote:
> >
> > Yes, but browses only support this when using Squid as reverse proxy
> > infront of your web servers, not when using it as an Internet proxy.
> >
> > Squid doesn't use LDAP to veri
fre 2006-09-01 klockan 22:37 +0300 skrev Odhiambo WASHINGTON:
> * On 01/09/06 12:28 -0700, dale wilhelm wrote:
> | it appears that reverse proxy has been removed from the 2.6
> | version... does anyone know of a reason why this rm'd and if there is
> | a work around??? i have the following in my co
fre 2006-09-01 klockan 11:32 -0700 skrev Zaki Akhmad:
> I am trying to use digital certificate for squid authentication. I
> have my certicate export to LDAP server. Is it possible to
> authenticate squid using digital certificate?
Yes, but browses only support this when using Squid as reverse pr
fre 2006-09-01 klockan 14:33 -0400 skrev Nick Duda:
> The 2.5 to 2.6 upgrade went great, everything appears to work , except
> its throwong some ntlm stuff which I think I can figure out...however,
> the access.log has stopped working, it doesnt write to it anymore. The
> store.log and cache.log wo
fre 2006-09-01 klockan 11:35 -0500 skrev Jason:
> # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
>
> # Example rule allowing access from your local networks. Adapt
> # to list your (internal) IP networks from where browsing should
> # be allowed
> #acl our_networks src 192.168.1
fre 2006-09-01 klockan 10:56 -0500 skrev Robert Shatford:
> Hey guys, this is my first post on this forum, so I would like to say
> hello.
>
> I am having troubles when I run "make". It throws a bunch of errors
> that I don't understand.
Golden rule: Start with the first error, ignore the rest.
fre 2006-09-01 klockan 15:37 -0500 skrev Greg Bledsoe:
> Ok, one I've tried to look on your website for a windows .exe file on
> your website and was unsuccessful. So, do you have to use CYGWin or
> some other program to run it, or if not could you tell me where it is.
> Another thing, if I can't
* On 01/09/06 12:28 -0700, dale wilhelm wrote:
| it appears that reverse proxy has been removed from the 2.6
| version... does anyone know of a reason why this rm'd and if there is
| a work around??? i have the following in my config for 2.5:
|
| httpd_accel_host ( ip addr )
| httpd_accel_port 808
it appears that reverse proxy has been removed from the 2.6
version... does anyone know of a reason why this rm'd and if there is
a work around??? i have the following in my config for 2.5:
httpd_accel_host ( ip addr )
httpd_accel_port 8083
httpd_accel_single_host on
httpd_accel_with_proxy on
al
Client --> Squid ---> server (IIS)
We just put squid into play like this for a test we are doing. Prior to
the test the client would hit the server directly for its pages. The web
log showed the clients hits and downloading the pages, images...etc. We
then put squid inbetween them, and th
Hello
I am trying to use digital certificate for squid authentication. I
have my certicate export to LDAP server. Is it possible to
authenticate squid using digital certificate? Should I install extra
package? And what configuration that I should add on the squid.conf?
I had browse this mailing-
The 2.5 to 2.6 upgrade went great, everything appears to work , except
its throwong some ntlm stuff which I think I can figure out...however,
the access.log has stopped working, it doesnt write to it anymore. The
store.log and cache.log work fineany ideas?
Regards,
Nick
---
Hello, I have searched and read until I wanna bang my head. What I want
squid to do: I have 6 internet computers that will access the internet (they
have static ip's) and 2 homework computers (also static) that will only have
access (whitelist) to a couple of websites (www.tutor.com for example). I
Probablly you did not upgrade your libxml2.
If you configure with ssl, you need the newest openssl.
I have set up Squid on Linux, FreeBSD and Windows, all accelerator
mode with SSL. I can help you in my chat server at
http://breakevilaxis.org if you want do the same mode.
I have scripts to create
Hey guys, this is my first post on this forum, so I would like to say
hello.
I am having troubles when I run "make". It throws a bunch of errors
that I don't understand. I was wondering if it outputs those errors
to
log somewhere and then I was wondering how do I find out what these
errors mean
On Fri, 2006-09-01 at 10:47 -0400, Nick Duda wrote:
> Are you saying 2.6 can work with the microsoft broken authentication
> schemes?
Yes.
Regards
Henrik
On Fri, 2006-09-01 at 09:58 -0400, Nick Duda wrote:
> I've read about the issues with NTLM passthrough on squid.
Those should be pretty much an issue of the past now with the release of
Squid-2.6 with support for NTLM passthrough. If you still have problems
with 2.6.STABLE3 please file a bug repor
Are you saying 2.6 can work with the microsoft broken authentication
schemes? This would be so nice...and solve lots of my problems.
-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: Friday, September 01, 2006 10:44 AM
To: Strandell, Ralf
Cc: squid-users@squid-cach
On Fri, 2006-09-01 at 15:07 +0200, Saqib Khan (horiba/eu) wrote:
>
> Hello List members,
>
> I am getting problem after authenticating a user over ldap. After getting
> authenticated I get the following error message:
>
> ERROR
> The requested URL could not be retrieved
>
>
> While trying to r
On Fri, 2006-09-01 at 07:27 -0300, Erick Dantas Rotole wrote:
> Henrik,
>
> I had already read the FAQ. But the configuration for FREEBSD I think it is
> for older version.
Possible. The reasoning is the same.
> Searching the web I found.
>
> add the following values to /boot/loader.conf whic
Hi ! my squid friend.Can you explain me how did you do to install everything
. A long tome ago i tried but i could not made this method of athentication.
Can you give me a hand explain me step by step how this you all I read a lot
of article hou to install ldap and squid with active directory but
On Fri, 2006-09-01 at 12:42 +0300, Strandell, Ralf wrote:
> Hi
>
> I try to access a page that requires a username and a password. The page
> is hosted on IIS.
Which Squid version? Should work with current STABLE release
(2.6.STABLE3).
Squid-2.5 can only forward HTTP compliant authentication sch
On Fri, 2006-09-01 at 09:37 +0200, Gregor Reich wrote:
> > Kind of. See the collapsed_forwarding and refresh_stale_hit options.
>
> Thank you for the hint; I searched the archives, googled and searched
> squid.conf (Squid3) but I didn't found any description of these options
See the current STA
I've read about the issues with NTLM passthrough on squid. Is there any
way a client can be configured to use squid for its cached content (like
images) but go directly to a server for NTLM (nt auth)?
The scenario is that one of our branch offices has a squid cache. They
have dedicated private li
Hello List members,
I am getting problem after authenticating a user over ldap. After getting
authenticated I get the following error message:
ERROR
The requested URL could not be retrieved
While trying to retrieve the URL: http://www.google.de/
The following error was encountered:
Acces
Henrik,
I had already read the FAQ. But the configuration for FREEBSD I think it is
for older version. Searching the web I found.
add the following values to /boot/loader.conf which worked:
kern.maxdsiz="1073741824" # 1GB
kern.dfldsiz="1073741824" # 1GB
kern.maxssiz="134217728" # 128MB
Is that
Hi
I try to access a page that requires a username and a password. The page
is hosted on IIS.
1) If I bypass Squid completely, I get through (after the XP
authentication dialog).
2) If I use Squid, I am asked for the username and password three times
(auth dialog by web browser) and then I get "
Hello!
For last two days I had trouble with squid performance. It turns out
that some kind of virus was heavily flooding with SYN packets which
reduced availible numer of file descriptors and degraded performance
I used menu Process Filedescriptor Allocation to finally find that guy.
But it
Henrik Nordstrom schrieb:
tor 2006-08-31 klockan 16:14 +0200 skrev Gregor Reich:
But is there a possibility to have squid responding - to a client that
request a document that is (in some way) expired - with the stale
document while - at the same time fetching the new one and storing it to
fre 2006-09-01 klockan 08:22 +0200 skrev Thomas Nilsen:
> As utils like squidguard/dansguardian are able to handle regex files
> with good performance, I was hoping to achieve the same with asqredir or
> similar light tools.
squidguard doesn't handle large regex expression lists any better than
S
Thanks
I have solved the problem!
Regards
Garlic
-Original Message-
From: Thomas Nilsen [mailto:[EMAIL PROTECTED]
Sent: Friday, September 01, 2006 2:32 PM
To: wangzicai
Cc: squid-users@squid-cache.org
Subject: RE: [squid-users] swap.log size continuing to grow?
You need to change the s
Suggest you configure this in stages.
1. Get Interscan to work on port 8080 and pass it's request on the the
parent proxy in the other company. Configure your browser to use your
interscan server IP and port 8080 as proxy and test.
2. Once step 1 works. Configure squid to use parent proxy on
loca
43 matches
Mail list logo
