Re: [squid-users] squid can not automatically run when system boot

2006-09-07 Thread Emilio Casbas
wangzicai wrote: Thanks Colin Campbell When I try the command line chkconfig --list squid , Squid service do not support chkconfig. Then you need add to the script something like this in the first lines: # chkconfig: 2345 20 80 # description: Squid proxy script and you squid script now

Re: [squid-users] Squid permission in log files

2006-09-07 Thread Odhiambo WASHINGTON
* On 07/09/06 07:48 -, [EMAIL PROTECTED] wrote: | | Hi | | | I have installed squid 2.6.3 on freebsd server 5. My problem is, I have | | created a cron script to rotate the log files everynight. When ever this | | cron run and new log file is created, the permission for the file is | |

Re: [squid-users] LIMIT behaving strange

2006-09-07 Thread Matus UHLAR - fantomas
On 07.09.06 08:49, kashif Mazhar wrote: Few days back i implement a two lines code in my squid.conf to block selected users from extra downloads , i restcirt them in a way that they cannot download more than 10-MB.(this is for restricted users). acl limit urlpath_regex

[squid-users] wizzar online booking and transparent proxy issue

2006-09-07 Thread Zoltan Sutto
Is there anyone who can able to use the online booking future of wizzair.com I receive an empty page every time. I tried theno_cache deny wizzar directive and clearing the cache. Still getting an empty result page for any request. The only way it works if I use a prerouting rule in my

Re: [squid-users] ntlm_auth with password prompt

2006-09-07 Thread Jakob Curdes
Jimmy Jonsson schrieb: Hi Adrian, I made these modifications in my squid.conf and restarted squid and samba: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param ntlm children 5 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2

[squid-users] Re: Squid permission on log files

2006-09-07 Thread Bisal
Thanks for your quicker replies. Actually there is nothing except squid -k rotate lines inside that script. Below is my script line #!/bin/sh squid -k rotate chmod 644 /var/log/squid/access.log --- By writing the line in /etc/newsyslog.conf

Re: [squid-users] Re: FreeBSD 6.x server with Squid/diskd

2006-09-07 Thread Thomas-Martin Seck
* Adrian Chadd ([EMAIL PROTECTED]): And I've been testing squid-2.6 + aufs on FreeBSD 6.1 and it seems quite stable and performing (ie, not blocking on IO like it would do under FreeBSD 4.x.) Could you tell which thread library is best suited for Squid/aufs on FreeBSD 5 and up? I'd lean

Re: [squid-users] Authenticating from Perl

2006-09-07 Thread Henrik Nordstrom
ons 2006-09-06 klockan 20:32 -0500 skrev Kevin Gordon: Hey , I am trying to do a simple authentication script in perl. The Code #!/usr/bin/perl $| = 1; $userInfo = STDIN; open(lg, what.log); print lg $userInfo\n; close(lg); print OK; You need to loop over STDIN

Re: [squid-users] --disable-internal-dns for Tor

2006-09-07 Thread Henrik Nordstrom
tor 2006-09-07 klockan 13:48 +1000 skrev Ian: Documentation at The Onion Router (http://wiki.noreply.org/noreply/TheOnionRouter/SquidProxy) suggests that when Tor is used in conjunction with Squid, Squid should be compiled with --disable-internal-dns. If I do that, superficially Squid

Re: [squid-users] Re: Squid permission on log files

2006-09-07 Thread Henrik Nordstrom
tor 2006-09-07 klockan 17:08 +0545 skrev Bisal: By writing the line in /etc/newsyslog.conf file, there is a problem, I have to sighup the squid process manually. Any other tips so that log files will be rotated automatically without changing the read permission for the file? It's a new file,

Re: [squid-users] Re: FreeBSD 6.x server with Squid/diskd

2006-09-07 Thread Adrian Chadd
On Thu, Sep 07, 2006, Thomas-Martin Seck wrote: * Adrian Chadd ([EMAIL PROTECTED]): And I've been testing squid-2.6 + aufs on FreeBSD 6.1 and it seems quite stable and performing (ie, not blocking on IO like it would do under FreeBSD 4.x.) Could you tell which thread library is best

[squid-users] Re: Squid permission on log files

2006-09-07 Thread Odhiambo WASHINGTON
* On 07/09/06 17:08 +0545, Bisal wrote: | Thanks for your quicker replies. | | Actually there is nothing except squid -k rotate lines | inside that script. Below is my script line | | | #!/bin/sh | | squid -k rotate | | chmod 644 /var/log/squid/access.log | |

Re: [squid-users] Re: FreeBSD 6.x server with Squid/diskd

2006-09-07 Thread Henrik Nordstrom
tor 2006-09-07 klockan 20:02 +0800 skrev Adrian Chadd: To be honest: i just compiled my test squid with ./configure ; make ; make install. I didn't look into it in depth too much. Are you saying the default for 6.1 is pthreads and these still play badly with blocking IO calls? I'll have to

Re: [squid-users] Re: FreeBSD 6.x server with Squid/diskd

2006-09-07 Thread Adrian Chadd
On Thu, Sep 07, 2006, Henrik Nordstrom wrote: tor 2006-09-07 klockan 20:02 +0800 skrev Adrian Chadd: To be honest: i just compiled my test squid with ./configure ; make ; make install. I didn't look into it in depth too much. Are you saying the default for 6.1 is pthreads and these still

Re: [squid-users] Re: FreeBSD 6.x server with Squid/diskd

2006-09-07 Thread Thomas-Martin Seck
* Adrian Chadd ([EMAIL PROTECTED]): On Thu, Sep 07, 2006, Thomas-Martin Seck wrote: * Adrian Chadd ([EMAIL PROTECTED]): And I've been testing squid-2.6 + aufs on FreeBSD 6.1 and it seems quite stable and performing (ie, not blocking on IO like it would do under FreeBSD 4.x.)

Re: [squid-users] Re: FreeBSD 6.x server with Squid/diskd

2006-09-07 Thread Odhiambo WASHINGTON
* On 07/09/06 21:49 +0800, Adrian Chadd wrote: | On Thu, Sep 07, 2006, Henrik Nordstrom wrote: | tor 2006-09-07 klockan 20:02 +0800 skrev Adrian Chadd: | | To be honest: i just compiled my test squid with ./configure ; | make ; make install. I didn't look into it in depth too much. | Are

[squid-users] Re: Squid permission on log files

2006-09-07 Thread bishal
Thanks Actually my problem is when I rotate the log file I couldnot view the access.log file with tail command. gives permission denied. Thanks On 9/7/2006, Odhiambo WASHINGTON [EMAIL PROTECTED] wrote: * On 07/09/06 17:08 +0545, Bisal wrote: | Thanks for your quicker

[squid-users] webwasher ssl content scanner anyone ?

2006-09-07 Thread Jakob Curdes
Hello, several months ago we had a lengthy discussion here about the prevention of ssl tunneling through a http proxy. The conclusion was that to avid this type of misuse which can undermine your entire security strategy you need to inspect the ssl content. I just sutmbled on the commercial

Re: [squid-users] FATAL: xcalloc: Unable to allocate 1 blocks of 4112 bytes!

2006-09-07 Thread Pranav Desai
On 9/6/06, Henrik Nordstrom [EMAIL PROTECTED] wrote: ons 2006-09-06 klockan 18:54 -0700 skrev Pranav Desai: 64-bit. Then I have no idea. Have 64-bit Squid's being many GB in size.. Ok thanks. Let me try to find some more information. -- Pranav Regards Henrik --

Re: [squid-users] Large Files

2006-09-07 Thread Mark Nottingham
Lighttpd uses it... Is it just that it would require a substantial redesign? (he says, completely ignorant of the internals...) On 2006/09/06, at 6:51 PM, Henrik Nordstrom wrote: - How does sendfile support in 2.6 affect this? It doesn't. Not really usable for Squid. Using sendfile

[squid-users] cache_dir file systems

2006-09-07 Thread Dan Thomson
I'm sure this has been discussed before, but I'm curious about what people think are the best file systems to use for your cache dirs. I've read that ReiserFS and XFS are good choices... is there an optimal request rate/request size to take into account? Any other hard drive tweaking that have

Re: [squid-users] webwasher ssl content scanner anyone ?

2006-09-07 Thread Christoph Haas
On Thursday 07 September 2006 18:28, Jakob Curdes wrote: several months ago we had a lengthy discussion here about the prevention of ssl tunneling through a http proxy. The conclusion was that to avid this type of misuse which can undermine your entire security strategy you need to inspect the

Re: [squid-users] webwasher ssl content scanner anyone ?

2006-09-07 Thread Jakob Curdes
I don't know any free SSL scanner. We are using the WebWasher for much more than just SSL scanning anyway. Squid isn't sufficient at all for enforcing a corporate security policy. This may change once large companies will stop using crap like Windows and especially the Internet Explorer.

Re: [squid-users] cache_dir file systems

2006-09-07 Thread Christoph Haas
On Thursday 07 September 2006 21:22, Dan Thomson wrote: I'm sure this has been discussed before, but I'm curious about what people think are the best file systems to use for your cache dirs. I've read that ReiserFS and XFS are good choices... is there an optimal request rate/request size to

Re: [squid-users] Large Files

2006-09-07 Thread Henrik Nordstrom
tor 2006-09-07 klockan 10:24 -0700 skrev Mark Nottingham: Lighttpd uses it... Is it just that it would require a substantial redesign? (he says, completely ignorant of the internals...) It works fine if the amount of files is small and all fit in the filesystem cache. To use sendfile

RE: [squid-users] Why ERR_ZERO_SIZE_OBJECT?

2006-09-07 Thread Henrik Nordstrom
tor 2006-09-07 klockan 11:16 -0700 skrev Xin Wang: The ERR_ZERO_SIZE was not sent to the requesting client. However, since the squid takes 1 minute to respons (due to ERR_ZERO_SIZE_OBJECT and retry), the requesting client timed out. The requesting client is actually our customer's

[squid-users] XFS on RedHat EL4?

2006-09-07 Thread Shawn Wright
Is anyone successfully running the XFS filesystem on Redhat EL4? We have always run squid on XFS on earlier RedHat Mandrake releases, but are trying to deploy a new RedHat EL4 box and having some issues. It seems RedHat goes out of their way to remove XFS support, so we compiled a custom

[squid-users] no access to sites Intranet

2006-09-07 Thread paulo braga
Hi I made VPN connection between 2 sites. On the same server I installed OpenVPN and Squid. The only problem I am having is that I can't access any of my Intranet web servers on the other side of the VPN, even if I use the IP address. I can ping them by their name and access the share folders

Re: [squid-users] delivering stale content while fetching fresh

2006-09-07 Thread Mark Nottingham
On 2006/09/05, at 2:33 PM, Henrik Nordstrom wrote: The drawback of enabling collapsed_forwarding is that concurrent requests for uncachable content will get delayed a bit until Squid sees that the response can not be cached (response headers required), at which point all pending collapsed

RE: [squid-users] Why ERR_ZERO_SIZE_OBJECT?

2006-09-07 Thread Xin Wang
Hi Henrik, I applied the workaround you suggested and did a quick test. It seems working. I would like to know what's the impact of this change. Hmm.. if you see a long delay between Squid sent the request and ERR_ZERO_SIZE then something is wrong at the web server, eating the request

Re: [squid-users] Large Files

2006-09-07 Thread Adrian Chadd
On Thu, Sep 07, 2006, Mark Nottingham wrote: Lighttpd uses it... Is it just that it would require a substantial redesign? (he says, completely ignorant of the internals...) It wouldn't give Squid much of a performance benefit considering the codebase and how we do IO. Lighttpd currently

Re: [squid-users] XFS on RedHat EL4?

2006-09-07 Thread Adrian Chadd
On Thu, Sep 07, 2006, Shawn Wright wrote: Is anyone successfully running the XFS filesystem on Redhat EL4? Are you sure its not available as a kernel module via a package? There's a whole whack of XFS related packages in Fedora Core 5. Adrian

Re: [squid-users] squid -k reconfigure error: (1) Operation not permitted

2006-09-07 Thread Adrian Chadd
On Thu, Sep 07, 2006, Jaime Solorzano B wrote: 2006/09/07 14:36:22| leave_suid: PID 1597 called 2006/09/07 14:36:22| leave_suid: PID 1597 giving up root, becoming 'squid' squid: ERROR: Could not send signal 1 to process 1033: (1) Operation not permitted Our LAN is not accessing Internet.

Re: [squid-users] delivering stale content while fetching fresh

2006-09-07 Thread Henrik Nordstrom
tor 2006-09-07 klockan 15:12 -0700 skrev Mark Nottingham: I'm guessing that's the full URL. Yes, of course it is. It would be nice if there were an option to ignore the query string for this purpose; E.g., if Squid sees http://example.com/search?q=foo and finds it's uncacheable, it

RE: [squid-users] Why ERR_ZERO_SIZE_OBJECT?

2006-09-07 Thread Henrik Nordstrom
tor 2006-09-07 klockan 15:35 -0700 skrev Xin Wang: I applied the workaround you suggested and did a quick test. It seems working. I would like to know what's the impact of this change. The impact of server_persistent_connections off is that Squid now always opens a new TCP connection to the

Re: [squid-users] delivering stale content while fetching fresh

2006-09-07 Thread Mark Nottingham
On 2006/09/07, at 4:33 PM, Henrik Nordstrom wrote: In accelerator setups which this is primarily targeted for I don't think it's that hard to add some rules telling which query URLs are cachable and which are not if you want to collapse requests for some query URLs. Fair enough, good

Re: [squid-users] delivering stale content while fetching fresh

2006-09-07 Thread Henrik Nordstrom
tor 2006-09-07 klockan 17:01 -0700 skrev Mark Nottingham: Agreed. I was thinking more about a general mechanism using a template; http://www.ietf.org/internet-drafts/draft-nottingham-http- link-header-00.txt A template if I understands it correctly in this context reduces into a pattern,

Re: [squid-users] Large Files

2006-09-07 Thread Henrik Nordstrom
fre 2006-09-08 klockan 07:14 +0800 skrev Adrian Chadd: Lighttpd currently implements its disk IO using a blocking method. If they wanted to change to async they'd probably have to drop the sendfile() support. really? async sendfile is effectively the same as async read, just an fd as output

Re: [squid-users] cache_dir file systems

2006-09-07 Thread Henrik Nordstrom
tor 2006-09-07 klockan 12:22 -0700 skrev Dan Thomson: I'm sure this has been discussed before, but I'm curious about what people think are the best file systems to use for your cache dirs. reiserfs has been a strong over the years choice, and I think it still is. But haven't done any recent

Re: [squid-users] XFS on RedHat EL4?

2006-09-07 Thread Henrik Nordstrom
fre 2006-09-08 klockan 07:20 +0800 skrev Adrian Chadd: On Thu, Sep 07, 2006, Shawn Wright wrote: Is anyone successfully running the XFS filesystem on Redhat EL4? Are you sure its not available as a kernel module via a package? Not from RedHat. Maybe it will be supported in RHEL5, I

Re: [squid-users] Large Files

2006-09-07 Thread Adrian Chadd
On Fri, Sep 08, 2006, Henrik Nordstrom wrote: fre 2006-09-08 klockan 07:14 +0800 skrev Adrian Chadd: Lighttpd currently implements its disk IO using a blocking method. If they wanted to change to async they'd probably have to drop the sendfile() support. really? async sendfile is

Re: [squid-users] webwasher ssl content scanner anyone ?

2006-09-07 Thread Henrik Nordstrom
tor 2006-09-07 klockan 21:45 +0200 skrev Christoph Haas: obviously a cache - what WebWasher isn't. You could as well try to use both through an ICAP connection since WebWasher works both as a HTTP/HTTPS/FTP proxy and as an ICAP server. Note: You won't be able to scan CONNECT requests