Re: [squid-users] Recommended Cache Settings for cache_mem

2007-07-05 Thread Alexandre Correa
i have 1 dedicated server for squid serving about 700 users simultaneous and 80 req/s !! server is dual opteron dual core and 4gb of ram.. this cache_mem is fine ? cache_mem 256 MB or is best decrease ou increase this ? Thanks, AlexandrE -- Sds. Alexandre J. Correa Onda Internet /

Re: [squid-users] Recommended Cache Settings for cache_mem

2007-07-05 Thread Adrian Chadd
On Thu, Jul 05, 2007, Alexandre Correa wrote: i have 1 dedicated server for squid serving about 700 users simultaneous and 80 req/s !! Smallfry. :) server is dual opteron dual core and 4gb of ram.. this cache_mem is fine ? cache_mem 256 MB or is best decrease ou increase this ?

[squid-users] FW: Allowing streaming media through NTLM Authentication

2007-07-05 Thread Mathew Archibald
Hi Apologies if this has been discussed before but I couldn't find a solution for my exact problem in the archives. I run Squid 2.6STABLE13 and have configured it to use NTLM authentication for all client requests. This is working properly for standard traffic but I am hitting a problem with

[squid-users] How can do squid automatically detect Origin Server's condition about LIVE or DEAD ?

2007-07-05 Thread Seonkyu Park
Hi Squid users. I am having following problem with squid acting as reverse proxy. 1. Origin Server === Cache Server ( Squid ) === [Client] 2. Origin Server Dead at AM 04:00 Origin Server =X= Cache Server ( Squid ) === [Client] Log message like this. 2007/07/05 04:32:08| TCP

[squid-users] SquidNT Reporting - Analysis Tools

2007-07-05 Thread Adam Parsons
Hi, My organisation is about to send out almost 400 SquidNT boxes to different sites and would like to know the best way of being able to keep a track of their health (i.e. cache percentages, hit ratios, etc.) What would be the best way to remotely connect to these boxes to analyse their

[squid-users] Re: *** VIRUS *** [squid-users] Server Report

2007-07-05 Thread Manoj_Rajkarnikar
On Tue, 1 Jan 2002, [EMAIL PROTECTED] wrote: WARNING: This e-mail has been altered by MIMEDefang. Following this paragraph are indications of the actual changes made. For more information about your site's MIMEDefang policy, contact Vianet System Administrator [EMAIL PROTECTED]. For more

Re: [squid-users] Re: *** VIRUS *** [squid-users] Server Report

2007-07-05 Thread Neil A. Hillard
Hi, Manoj_Rajkarnikar wrote: On Tue, 1 Jan 2002, [EMAIL PROTECTED] wrote: WARNING: This e-mail has been altered by MIMEDefang. Following this paragraph are indications of the actual changes made. For more information about your site's MIMEDefang policy, contact Vianet System

Re: [squid-users] SquidNT Reporting - Analysis Tools

2007-07-05 Thread Adrian Chadd
On Thu, Jul 05, 2007, Adam Parsons wrote: Hi, My organisation is about to send out almost 400 SquidNT boxes to different sites and would like to know the best way of being able to keep a track of their health (i.e. cache percentages, hit ratios, etc.) What would be the best way to

Re: [squid-users] Search Blocked URL on google

2007-07-05 Thread Henrik Nordstrom
On ons, 2007-07-04 at 07:37 +0300, Murat Ipekbayrak wrote: Hi, I want to query the URL that I put on my blacklist. How can i do this using the TAG deny_info? What exactly do you want to do? Regards Henrik signature.asc Description: This is a digitally signed message part

Re: [squid-users] Squid 2.6 Stable13 with ISA as Upstream

2007-07-05 Thread Henrik Nordstrom
On ons, 2007-07-04 at 12:34 +0530, Shekhar Gupta wrote: The problem starts at squid when i don't have login=PASS option set for squid it ask for the username and password which is good , however if i type the username and password it doesn't take those credentials . and if i have login=PASS

[squid-users] SSL Reverse Proxy

2007-07-05 Thread Paulo Andre
We have multiple windows webservers that are available to the WWW. On all the servers we have different SSL certs for various apps. Is it possible or viable to have a Squid server running as a reverse proxy with one SSL cert to different webservers? As an example if you browse

Re: [squid-users] SquidNT Reporting - Analysis Tools

2007-07-05 Thread Tek Bahadur Limbu
Adam Parsons wrote: Hi, My organisation is about to send out almost 400 SquidNT boxes to different sites and would like to know the best way of being able to keep a track of their health (i.e. cache percentages, hit ratios, etc.) What would be the best way to remotely connect to these boxes

Re: [squid-users] Re: *** VIRUS *** [squid-users] Server Report

2007-07-05 Thread Manoj_Rajkarnikar
Hi neil. On Thu, 5 Jul 2007, Neil A. Hillard wrote: Hi, Manoj_Rajkarnikar wrote: On Tue, 1 Jan 2002, [EMAIL PROTECTED] wrote: WARNING: This e-mail has been altered by MIMEDefang. Following this paragraph are indications of the actual changes made. For more information about your site's

Re: [squid-users] Recommended Cache Settings for cache_mem

2007-07-05 Thread Michel Santos
Alexandre Correa disse na ultima mensagem: i have 1 dedicated server for squid serving about 700 users simultaneous and 80 req/s !! server is dual opteron dual core and 4gb of ram.. this cache_mem is fine ? cache_mem 256 MB or is best decrease ou increase this ? how much you need

[squid-users] suqid proxy and localhost problem

2007-07-05 Thread Zbigniew Szalbot
Hello, I am quite new to squid. I did a very minimal configuration started the software, configured browsers and all seems ok. With one exception. The box on which I run squid does not open http pages which it serves. Can you advise me what I need to set up to allow this box to talk to me on port

Re: [squid-users] suqid proxy and localhost problem

2007-07-05 Thread Amos Jeffries
Zbigniew Szalbot wrote: Hello, I am quite new to squid. I did a very minimal configuration started the software, configured browsers and all seems ok. With one exception. The box on which I run squid does not open http pages which it serves. Depends on what you mean by 'it serves' and 'does

Re: [squid-users] suqid proxy and localhost problem

2007-07-05 Thread Isnard Jaquet
Hi, I don't think I understand what you mean. Are you trying to connect to port 80 of your proxy? Is that it? Is apache installed and running (on port 80)? If it is, put the ip address of it in the exceptions list on your browser or disable the proxy from it when trying to connect to the apache

Re: [squid-users] suqid proxy and localhost problem

2007-07-05 Thread Tek Bahadur Limbu
Zbigniew Szalbot wrote: Hello, I am quite new to squid. I did a very minimal configuration started the software, configured browsers and all seems ok. With one exception. The box on which I run squid does not open http pages which it serves. Can you advise me what I need to set up to allow this

[squid-users] ACL URL question

2007-07-05 Thread Rui Dias | Expoarade - Animação,E.M.
Hello Everyone, I need to block a site like http://www.xpto.com/?id=000 When i try to block the full address with the ?id=000 the rule don’t work, but if I block only www.xpto.com .. I can block the website .. The problem is that I don’t want to block the whole website only the link like at top.

Re: [squid-users] squid and antivirus, again

2007-07-05 Thread Matus UHLAR - fantomas
On 03.07.07 09:17, Michael W. Lucas wrote: The search engines give too many answers to this question over the last several years, so I'm just asking here. What is the best antivirus solution for Squid these days? We're running Squid 2.6 on RHEL4. I'd use c-icap with clamav, and

Re: [squid-users] ACL URL question

2007-07-05 Thread Emilio Casbas
Rui Dias | Expoarade - Animação,E.M. escribió: Hello Everyone, I need to block a site like http://www.xpto.com/?id=000 When i try to block the full address with the ?id=000 the rule don’t work, but if I block only www.xpto.com .. I can block the website .. The problem is that I don’t want to

Re: [squid-users] Different scenarios in a reverse proxy environment

2007-07-05 Thread Jeff Pang
2007/7/5, Emilio Casbas [EMAIL PROTECTED]: I think this example would be redundant, We could achive the same objective with: cache_peer 12.34.56.78 parent80 0 no-query originserver name=CCTV acl service_cctv dstdomain .cctv.com cache_peer_access CCTV allow service_cctv No.This

Re: [squid-users] Different scenarios in a reverse proxy environment

2007-07-05 Thread Emilio Casbas
Jeff Pang escribió: 2007/7/4, Emilio Casbas [EMAIL PROTECTED]: But what about - Different requests to different directorys on the same web server. - Mapping different URLs to different directorys on the same web server. This is based on original server's virtual hosts config,squid just take

[squid-users] squid and content filtering

2007-07-05 Thread Dave
Hello, I'm running squid 2.6 with icap support on FreeBSD 6.2. I've done some searching on this, but was wondering what the current trend was with squid and content filtering? The last time i tried it it was with squid 2.5 and adding in the content filter slowed browsing and the internet

[squid-users] ACL and http_access Confusion

2007-07-05 Thread Vadim Pushkin
Hello; I have an ACL which contains IP addresses that I want to allow outbound requests to. acl allowed_IPs dstdomain /net/squid/allowed-IP-Dests I have another ACL which is intended to capture all destinations which use an IP address versus FQDN, which one of these two is correct for this

Re: [squid-users] ACL and http_access Confusion

2007-07-05 Thread Emilio Casbas
Vadim Pushkin escribió: Hello; I have an ACL which contains IP addresses that I want to allow outbound requests to. acl allowed_IPs dstdomain /net/squid/allowed-IP-Dests I have another ACL which is intended to capture all destinations which use an IP address versus FQDN, which one of these

[squid-users] Squid ACL

2007-07-05 Thread Christian Vallant
Hello, i need to solve following problem. I have an ldap-server, which i use to authenticate the user. If the user is in the group, he has access to the group A. If the authentications fails, he has access to the group B. Can anyone tell me, how i can solve this problem. I have already have an

Re: [squid-users] suqid proxy and localhost problem

2007-07-05 Thread Zbigniew Szalbot
Hello, On Thu, 05 Jul 2007 09:37:29 -0300, Isnard Jaquet [EMAIL PROTECTED] wrote: Hi, I don't think I understand what you mean. Are you trying to connect to port 80 of your proxy? Is that it? Is apache installed and running (on port 80)? If it is, put the ip address of it in the exceptions

[squid-users] Is it possible to allow access to a single site and allow all embedded images to show as well?

2007-07-05 Thread Richmond Low
Hi, Is it possible to allow access to a single site, eg. a forum site, and allow all the images to display as well even if they are not hosted on the forum site itself? For example, if a forum user makes a posts and embeds and image from Flickr or any other image hosting site, I would still

[squid-users] Worm.SCO.A-1 sent through the list (was: [squid-users] Re: *** VIRUS ***)

2007-07-05 Thread SM
At 03:53 05-07-2007, Manoj_Rajkarnikar wrote: I too don't believe its Henrik. But it made it here from the list and it came yesterday not 5 years ago. An email with a document.scr attachment was sent through the list on July 3, 2007. The date header was Jan 1, 2002. Henrik's email address

[squid-users] split access log up for different sites?

2007-07-05 Thread Anton Melser
Hi, I had a look but couldn't see any way to split up a log for different sites being reverse proxied. Is this possible? Cheers Anton

Re: [squid-users] ACL and http_access Confusion

2007-07-05 Thread Vadim Pushkin
From: Emilio Casbas [EMAIL PROTECTED] Vadim Pushkin escribió: Hello; I have an ACL which contains IP addresses that I want to allow outbound requests to. acl allowed_IPs dstdomain /net/squid/allowed-IP-Dests I have another ACL which is intended to capture all destinations which use an

[squid-users] Squid performance in the tank.

2007-07-05 Thread Jeff Honey
I don't know that I've ever had occasion to ask the squid group anything before but this one thing has me stumped. We just moved our infrastructure from one facility to another and our squid servers' performance has really gone down the tubes. Request processes have slowed to a crawl.

Re: [squid-users] Squid performance in the tank.

2007-07-05 Thread Shekhar Gupta
What is the change in Network , are the WAN Ip's still the same or they have changed . something on routing like previously u were using default route and now switched to BGP ?? On 7/6/07, Jeff Honey [EMAIL PROTECTED] wrote: I don't know that I've ever had occasion to ask the squid group

Re: [squid-users] Squid 2.6 Stable13 with ISA as Upstream

2007-07-05 Thread Henrik Nordstrom
On tor, 2007-07-05 at 15:14 +0530, Shekhar Gupta wrote: I agree its the client , then why its working in basic and not in Integrated. Basic is not integrated with the domain, and the client never ever attemtpts any form of automatic authentication when using Basic. What i get on ISA is this

RE: [squid-users] Squid performance in the tank.

2007-07-05 Thread Jeff Honey
What is the change in Network , are the WAN Ip's still the same or they have changed . something on routing like previously u were using default route and now switched to BGP ?? Where there was only just a firewall between the proxy and the Internet now there is a routing switch a router

Re: [squid-users] Squid performance in the tank.

2007-07-05 Thread Dietrich Radel
Jeff Honey wrote: What is the change in Network , are the WAN Ip's still the same or they have changed . something on routing like previously u were using default route and now switched to BGP ?? Where there was only just a firewall between the proxy and the Internet now there is a

Re: [squid-users] ACL and http_access Confusion

2007-07-05 Thread squid3
From: Emilio Casbas [EMAIL PROTECTED] Vadim Pushkin escribió: Hello; I have an ACL which contains IP addresses that I want to allow outbound requests to. acl allowed_IPs dstdomain /net/squid/allowed-IP-Dests I have another ACL which is intended to capture all destinations which use an IP

Re: [squid-users] squid and content filtering

2007-07-05 Thread squid3
Hello, I'm running squid 2.6 with icap support on FreeBSD 6.2. I've done some searching on this, but was wondering what the current trend was with squid and content filtering? The last time i tried it it was with squid 2.5 and adding in the content filter slowed browsing and the internet

Re: [squid-users] Different scenarios in a reverse proxy environment

2007-07-05 Thread squid3
2007/7/5, Emilio Casbas [EMAIL PROTECTED]: I think this example would be redundant, We could achive the same objective with: cache_peer 12.34.56.78 parent80 0 no-query originserver name=CCTV acl service_cctv dstdomain .cctv.com cache_peer_access CCTV allow service_cctv

Re: [squid-users] Squid ACL

2007-07-05 Thread squid3
Hello, i need to solve following problem. I have an ldap-server, which i use to authenticate the user. If the user is in the group, he has access to the group A. If the authentications fails, he has access to the group B. Can anyone tell me, how i can solve this problem. I have already

Re: [squid-users] Squid performance in the tank.

2007-07-05 Thread Adrian Chadd
Firstly, upgrade from Squid-2.5 to Squid-2.6. If you're on Linux, FreeBSD (or soon, Solaris) then you'll definitely notice the CPU drop. I'd check that your DNS is functioning, that your MTU is consistent everywhere, you're not filtering ICMP. Saying the only thing that changed is the path it

Re: [squid-users] Is it possible to allow access to a single site and allow all embedded images to show as well?

2007-07-05 Thread squid3
Hi, Is it possible to allow access to a single site, eg. a forum site, and allow all the images to display as well even if they are not hosted on the forum site itself? Squid by itself doesn;t scan eth data portion of HTTP objects. It has no way of knowing where the images are going to come

Re: [squid-users] split access log up for different sites?

2007-07-05 Thread Adrian Chadd
On Thu, Jul 05, 2007, Anton Melser wrote: Hi, I had a look but couldn't see any way to split up a log for different sites being reverse proxied. Is this possible? Squid-2.6 introduced the ability to use ACLs and multiple access log lines to determine which log gets which requests. Adrian

Re: [squid-users] FreeBSD Squid timeout issue

2007-07-05 Thread Chris Robertson
Amos Jeffries wrote: Dave wrote: Hi, Thanks for your reply. The following is the ip and abbreviated msg: (reason: 554 5.7.1 Service unavailable; Client host [65.24.5.137] blocked using dnsbl-1.uceprotect.net; To my squid issue, if aufs is less intensive and more efficient i'll

[squid-users] transparent tproxy: routing issue or my own problem ?

2007-07-05 Thread Ming-Ching Tiew
This is long I appreciate you patience. I am using squid in a Linux box setting up as a bridge, and have set up ebtables and iptables following the documentation available on the Net :- ebtables -t broute -A BROUTING -p IPv4 --ip-protocol 6 \ --ip-destination-port 80 -j redirect