In regards to a five minutes delay people are experiencing when
accessing http://cat.lib.unimelb.edu.au/
I run the following iptables rules. What I'm trying to achieve is; if
the request is destine to http://cat.lib.unimelb.edu.au/ then redirect
to firewall.
The rule is where I placed the ### ma
2006/09/19 14:36:24| WARNING! Your cache is running out of filedescriptors
2006/09/19 14:36:40| WARNING! Your cache is running out of
filedescriptors
2006/09/19 14:36:56| WARNING! Your cache is running out of
filedescriptors
2006/09/19 14:37:12| WARNING! Your cache is running out of
filedescrip
Thanks
Please can you explain what this line means with its characters:
acl NWW dstdom_regex \.?nww\.
Sorry how should : Obviously, this ACL should be adjusted as shown above
Thanks again
-Original Message-
From: Chris Robertson [mailto:[EMAIL PROTECTED]
Sent: 19 September 2006 19:56
Hi
This config u have suggested we use may not be able to support what we
like:
How would this access-list cope with a website like this:
http://nww.nhsmessaging.co.uk/ or
www.nhs.uk - this should go direct but
nww.nhs.uk needs to go to peer
acl NWW dstdom_regex \.?nww\.
acl NHS dstdomain
Hello,
i've run a squid proxy for abaout 2000 users. The users have not to
authenticate to use the squid.
But on the squid are two delay pools for downloads configured.
The users can only use (max 256 kB/s to min 32 kB/s -> as larger the
file as slower the download)
Now i have about 30 "Powe
Hi,
How can I realise content filtering with squid?
Has anybody an example/experience
Thanks for your help
Yours,
UB
On Wed, Sep 20, 2006, Benner, Uwe wrote:
> Hi,
>
> How can I realise content filtering with squid?
> Has anybody an example/experience
It'll happen once Squid-3 is released.
Adrian
Any planned release date available?
Uwe
-Ursprüngliche Nachricht-
Von: Adrian Chadd [mailto:[EMAIL PROTECTED]
Gesendet: Mittwoch, 20. September 2006 14:09
An: Benner, Uwe
Cc: squid-users@squid-cache.org
Betreff: Re: [squid-users] content filtering with squid
On Wed, Sep 20, 2006, Benne
Hi,
We want to set up a kind of accounting for your users, i.e. depending on
the data volume (kB) we want to charge them.
Prerequisites are authentication (we are using NTLM) and to get the data
volume for every request.
Any idea how this can be realised?
Yours,
UB
tis 2006-09-19 klockan 17:26 -0600 skrev sOngUs:
> But it doesnt work, it gives me timeouts!
Then you haven't given it correct addresses for your network setup..
> I got many questions... like...
> >tcp_outgoing_address 192.168.0.1 someacl ( src acl)
> What does this rule do? im guessing:
>
>> 2006/09/19 11:44:30| parseHttpRequest: NF getsockopt(SO_ORIGINAL_DST)
>> failed: (92) Protocol not available
>>
>> ...in our cache.log.
>>
>> Any idea on what is going on?
>
> Do you have the NAT iptable loaded?
On the squid-box? No, I have not loaded iptable nat. Should I? NAT is
applied in
On 19.09.06 12:30, Michał Margula wrote:
> Matus UHLAR - fantomas wrote:
> >I would use the 4), decrease cache_disk for both disks and create ~1GB file
> >for COSS on both disks.
> >
>
> Can you explain why? I am not saying you're wrong, but I want to
> understand :)
i would keep small files in
On Wed, Sep 20, 2006, Benner, Uwe wrote:
>
> Any planned release date available?
No fixed "It'll be stable" date. We'll be making an announcement shortly
of the roadmap going forward.
Squid-3 isn't that far off however. There's not that many showstopper
bugs (that we know about!)
What kind of c
tis 2006-09-19 klockan 23:01 -0400 skrev dny:
> can i put this in squid.conf ??
>
> acl wpad url_regex -i \wpad.dat$
> http_access deny wpad
> deny_info myownwpad.dat
>
> any suggestion?
Probably not.. I don't thing browsers will accept pac files as errors,
and probably will be confused if you
Benner, Uwe schrieb:
Hi,
We want to set up a kind of accounting for your users, i.e. depending on
the data volume (kB) we want to charge them.
Prerequisites are authentication (we are using NTLM) and to get the data
volume for every request.
Pull the information from the logfile - it's all
ons 2006-09-20 klockan 10:01 +0400 skrev Mohamed Navas:
> Hi,
>
> OK ... thanks for the replay ...
>
> Our requirement is, we should have an initial URL
> http://proxy.mydomain.com for the proxy server. Clients browser want
> to just type simple folder name after this initial URL to look on to
ons 2006-09-20 klockan 11:28 +0100 skrev Mehmet, Levent (Accenture):
> Thanks
>
> Please can you explain what this line means with its characters:
>
> acl NWW dstdom_regex \.?nww\.
maybe a dot followed by nww followed by a dot, anywhere in the hostname
component of the requested URL.
Probably
ons 2006-09-20 klockan 14:05 +0200 skrev Benner, Uwe:
> How can I realise content filtering with squid?
With 2.5 only URL based content filtering is practical. Most of the
available URL filters on the marked supports this.
Content based filtering looking into the actual content instead of
lookin
ons 2006-09-20 klockan 14:10 +0200 skrev Benner, Uwe:
> Any planned release date available?
When we are happy with the quality of the release. Doesn't look that
it's very far away now, but no date set yet.
Regards
Henrik
signature.asc
Description: Detta är en digitalt signerad meddelandedel
ons 2006-09-20 klockan 14:12 +0200 skrev Benner, Uwe:
> Hi,
>
> We want to set up a kind of accounting for your users, i.e. depending on
> the data volume (kB) we want to charge them.
>
> Prerequisites are authentication (we are using NTLM) and to get the data
> volume for every request.
>
> Any
>> 2006/09/19 11:44:30| parseHttpRequest: NF getsockopt(SO_ORIGINAL_DST)
>> failed: (92) Protocol not available
>>
>> ...in our cache.log.
>>
>> Any idea on what is going on?
>
> Do you have the NAT iptable loaded?
On the squid-box? No, I have not loaded iptable nat. Should I? NAT is
applied in
ons 2006-09-20 klockan 08:32 +0200 skrev "Víctor J. Hernández Gómez":
> >> 2006/09/19 11:44:30| parseHttpRequest: NF getsockopt(SO_ORIGINAL_DST)
> >> failed: (92) Protocol not available
> >>
> >> ...in our cache.log.
> >>
> >> Any idea on what is going on?
> >
> > Do you have the NAT iptable loade
tis 2006-09-19 klockan 14:45 -0700 skrev Mark Nottingham:
> On 2006/09/19, at 1:54 PM, Henrik Nordstrom wrote:
>
> >> However, if it receives a HTTP/1.1 request, it will fall back to one-
> >> request-per-connection. Since pconns are the default in HTTP 1.1, why
> >> not use them?
> >
> > Because
I am trying to get released in January 2007
- Original Message -
From: "Benner, Uwe" <[EMAIL PROTECTED]>
To: "Adrian Chadd" <[EMAIL PROTECTED]>
Cc:
Sent: Wednesday, September 20, 2006 1:10 PM
Subject: AW: [squid-users] content filtering with squid
Any planned release date available
Hi everybody! Nice to be back to the mailing list :-)
I'm having a problem... I upgraded my squid via yum recently. My previous
version was 2.5.STABLE6, which came with Fedora Core 3 (my distro), now the
version is 2.5.STABLE11. But since I made the upgrade, I'm having problems
with the language i
Thanks for all the help! I was able to get this up & running. My
setup, by the way, uses the new Cisco ASA5510 firewall for WCCP.
I am down to one issue at the moment, and I'm hoping for a little bit
more help. I've experienced a few times that certain websites (like
Ebay auctions) have problems
Hi everyone,
The Squid developers have been discussing the Squid-3 roadmap on and off
for a few weeks and we've decided upon the following roadmap. You can find
the roadmap in the Wiki:
http://wiki.squid-cache.org/RoadMap
In short - we're very close to a Squid-3 release. We're missing a few
feat
After some reflection (and coffee!), I'm not sure I understand your
point. If the proxy synthesises the Content-Length from the stored
response, it can definitively count the bytes it's to send and always
delimit the response correctly. While it's true that the response may
be incomplete fr
RFC2616 refers to RFC2068 for HTTP/1.0-style persistent connections,
which is the most normative source we have for this.
http://rfc.net/rfc2068.html#s19.7.1
The way that that's written leads me to believe that a HTTP/1.1
client can send a request to a HTTP/1.0 server and expect the
resul
Hello All,
I am running a polymix-4 test with 3 coss partition. 2 are files (one
of them is in memory, tmpfs) and one is a raw partition.
I am getting the above message once in a while, not very frequently.
Can I safely increase
MAX_ASYNCOP ?
Does this indicate that the disk is overloaded ?
Ar
ons 2006-09-20 klockan 10:43 -0300 skrev Palula Brasil:
> Previously, in the squid folder, a symbolic link existed called errors
> linking to the Portuguese language folder. When I upgraded squid, this link
> was erased... Anyway I created the link using LN but it still doesn't work.
>
> Down any
ons 2006-09-20 klockan 08:07 -0600 skrev Shaun Skillin (home):
> more help. I've experienced a few times that certain websites (like
> Ebay auctions) have problems. I can access most things on the site, but
> certain functions just die horribly in timeout-land. When I put the
> settings directly
ons 2006-09-20 klockan 11:29 -0700 skrev Pranav Desai:
> I am running a polymix-4 test with 3 coss partition. 2 are files (one
> of them is in memory, tmpfs) and one is a raw partition.
> I am getting the above message once in a while, not very frequently.
> Can I safely increase
> MAX_ASYNCOP ?
ons 2006-09-20 klockan 09:52 -0700 skrev Mark Nottingham:
> After some reflection (and coffee!), I'm not sure I understand your
> point. If the proxy synthesises the Content-Length from the stored
> response, it can definitively count the bytes it's to send and always
> delimit the response c
Well, it assures that the *response body* is that size, which it will
be.
The problem you're pointing out WRT Squid caching partial responses
exists today; if I send a connection-delimited response and close
early, Squid will cache it, given the appropriate headers...
Cheers,
On 2006/09/
ons 2006-09-20 klockan 09:52 -0700 skrev Mark Nottingham:
> RFC2616 refers to RFC2068 for HTTP/1.0-style persistent connections,
> which is the most normative source we have for this.
>http://rfc.net/rfc2068.html#s19.7.1
which doesn't define persistent proxy connections at all, other than a
ons 2006-09-20 klockan 13:13 -0700 skrev Mark Nottingham:
> Well, it assures that the *response body* is that size, which it will
> be.
Not only that, it also assures that the response entity is of that size,
which isn't assured by the close of connection end signaling. The two is
similar but no
On 2006/09/20, at 2:14 PM, Henrik Nordstrom wrote:
But it's true that we probably could assume a HTTP/1.1 message is
persistent unless it has a connection: close tag as the close tag is
required by HTTP/1.1. But at the same time RFC 2616 8.1.2.1 says:
Clients and servers SHOULD NOT assume th
I reaise that C-L has two different purposes. Since closing the
connection signals both, synthesising the C-L doesn't seem like
taking a huge liberty in the face of serving the partial cached
response as if it's the whole thing. YMMV (obviously).
Thanks for the help,
On 2006/09/20, at 2:2
Hi,
Squid newbie here with a problem regarding squid and HTTPS.
HTTP URLS work as desired. I've spent the past two days googling
and reading the archives, but still don't understand how to
build/configure Squid to do what I want.
Any pointers/help would be greatly appreciated.
Setup :
Remot
ons 2006-09-20 klockan 14:27 -0700 skrev Mark Nottingham:
> >Clients and servers SHOULD NOT assume that a persistent
> > connection is
> >maintained for HTTP versions less than 1.1 unless it is explicitly
> >signaled. See section 19.6.2 for more information on backward
> >compati
ons 2006-09-20 klockan 14:31 -0700 skrev Mark Nottingham:
> I reaise that C-L has two different purposes. Since closing the
> connection signals both, synthesising the C-L doesn't seem like
> taking a huge liberty in the face of serving the partial cached
> response as if it's the whole thing
ons 2006-09-20 klockan 17:37 -0400 skrev Brand, Thomas R.:
> access.log:1158787213.443 0 10.31.129.28 TCP_DENIED/400 1381
> CONNECT error:invalid-request - NONE/- text/html
Looks like your Squid didn't like the request at all.
What does cache.log say?
Regards
Henrik
signature.asc
Descrip
I found these lines for configuring the err_dir in squid but I don't know
the information relative to: langs and charsets. Does anybody know the
portuguese config for these? Or knows somewhere I can find a list of
possible solutions?
Here is the conceptual line:
#error_directory
Here are some
Hi Henrik,
For this test, all of the clients are on the same LAN, 172.16.1.X/24.
The firewall is 172.16.1.254, squid is 172.16.1.3, clients are .100-.199
(dhcp range). Client gateway is 172.16.1.252, which is a Cisco 3550
Layer 3 switch with IP redirects.
I was wondering if I perhaps need to adjust
More information, if this helps to narrow it down...I have tried adjusting MTU
sizes to try to solve this. When I set wccp0 to 1200, it seems to make no
difference at all. When I set eth0 to 1200, ebay.com will not load at all.
Other sites (presumably with smaller page?) can load OK.
Also, ve
46 matches
Mail list logo
