[squid-users] error during make

2007-08-07 Thread zen
Hi, i recently trying to build a squid box using squid-3.0.PRE6 version but the process stop during make stage with these error messages : Making all in src if g++ -DHAVE_CONFIG_H -I. -I. -I.. -I../include-Werror -Wall -Wpointer-arith -Wwrite-strings -Wcomments -g -O2 -MT Trie.o -MD -MP -MF

[squid-users] Digest auth trouble

2007-08-07 Thread Sergey Svyatkin
Hello. There are problems at use digest-auth by means of a perl-script which takes data of users from a database postgresql. With periodicity of the order of 40 minutes squid is core dumped. In logs (with debug_options ALL, 9): /var/messages Aug 7 08:40:06 proxy kernel: pid 44537 (squid), uid 1

RE: [squid-users] FW: Allowing streaming media through NTLM Authentication

2007-08-07 Thread Mathew Archibald
Whoops my copy and paste didn't go through so well. Below is formatted properly acl AuthorizedUsers proxy_auth REQUIRED acl streaming_media browser -i "/usr/local/squid-2.6STABLE13/etc/user_agent.conf" http_access allow streaming_media http_access allow AuthorizedUsers I used to use wbinfo_group

Re: [squid-users] FW: Allowing streaming media through NTLM Authentication

2007-08-07 Thread Mauricio Silveira
Hi Mathew, You're matching against authenticated users, I'm using it against wbinfo_group. Anyway this should work, such as "http_access allow streaming_media Streaming_allow" (Streaming_allow is an external acl for matching against a group into the AD server). I didn't notice that browser regex

Re: [squid-users] High CPU usage for large object

2007-08-07 Thread Adrian Chadd
The place to start is grabbing traces from a running system to find out where the time is being spent. You'll probably want to start with vmstat and see whether its chewing 100% of one CPU, or whether its blocked waiting for disk IO, or a combination of the two. Its probably CPU - I'd then run op

Re: [squid-users] recommendations for timeouts

2007-08-07 Thread Adrian Chadd
On Tue, Aug 07, 2007, Frank R wrote: > Any recommendations would be much appreciated: > > Problem 40k connections in time wait, and running out of file descriptors. > (8192) > Content many small images. > Connections per second, 3-5k, short lived. Have you dropped the MSL time in your kernel con

RE: [squid-users] FW: Allowing streaming media through NTLM Authentication

2007-08-07 Thread Mathew Archibald
Hi Guys I was able to work around this problem by matching on the streaming media's User Agent string. My squid.conf looks like this: acl AuthorizedUsers proxy_auth REQUIRED acl streaming_media browser -i "/usr/local/squid-2.6STABLE13/etc/user_agent.conf" http_access allow streaming_media http_a

RE: [squid-users] Blocking proxies

2007-08-07 Thread Amos Jeffries
>> -Original Message- >> From: Peter Albrecht [mailto:[EMAIL PROTECTED] >> Sent: Tuesday, August 07, 2007 10:04 AM >> To: squid-users@squid-cache.org >> Subject: Re: [squid-users] Blocking proxies >> >> Hi Thomas, >> >> On Tuesday 07 August 2007 15:41, Thomas Raef wrote: >> > How can we blo

Re: [squid-users] Squid Clustering on Windows platform

2007-08-07 Thread Amos Jeffries
> Hi amos, > > Could you give me an example of how this should look in the conf file. > Sorry I am relatively new to all things squid. > > thanks > > N > Sorry too, like I said I don't know much more about it than thats how its done. I don't use it myself. The links I provided had working exampl

Re: [squid-users] Squid Clustering on Windows platform

2007-08-07 Thread nick w
Hi amos, Could you give me an example of how this should look in the conf file. Sorry I am relatively new to all things squid. thanks N On 8/7/07, Amos Jeffries <[EMAIL PROTECTED]> wrote: > nick w wrote: > > Hi there, > > > > I am looking at setting up clustering with 2 squid servers running on

Re: [squid-users] Can I block CONNECT to any IP (but allow hostnames)?

2007-08-07 Thread Tim Bates
I based mine on the one from this old message... http://www.squid-cache.org/mail-archive/squid-users/200503/0373.html I actually only used the ^[0-9\.:]*$ part because I wasn't interested in IP address based URLs for plain HTTP. Just watch out for the typo in the acl line. It's missing the colon

[squid-users] recommendations for timeouts

2007-08-07 Thread Frank R
Any recommendations would be much appreciated: Problem 40k connections in time wait, and running out of file descriptors. (8192) Content many small images. Connections per second, 3-5k, short lived. Timeouts currently set: dns_timeout 30 seconds forward_timeout 5 seconds connect_timeout 5 secon

Re: [squid-users] Compiling issue with 2.6-STABLE14

2007-08-07 Thread SM
At 08:16 07-08-2007, SirWING wrote: Hi. I'm trying to compile Squid 2.6-STABLE14 on Linux running: Kernel 2.4.26 Gcc version 2.96 Glibc 2.2.5-44 (I know, really old versions) When the compiler gets to the HttpHeaderTools.c file, the following errors occur: HttpHeaderTools.c: In function `s

Re: [squid-users] 4 squid with multiple cache_dir and cache_peer

2007-08-07 Thread Pablo GarcĂ­a
To simplify the setup, you should use multicast parents, you can achive that by configure the cache_peers with this line. cache_peer 230.0.0.4 multicast 3128 3130 remember to create a route for multicast, since in linux it's not created by default. Also, you've probably better with separate disk

[squid-users] High CPU usage for large object

2007-08-07 Thread NGUYEN, KHANH, ATTSI
Hi, I am using squid 2.6 on Linux AS version 4, update 3. Hardware: dell 2850, 4 GB memory, 6 x 72 GB disks. NO RAID. Each disk is one mount point. Squid basic configuration: cache_mem: 2 GB maximum_object_size 5096 MB maximum_object_size_in_memory 100 MB cache_replacement_policy lru 6 cache

RE: [squid-users] Blocking proxies

2007-08-07 Thread Thomas Raef
> -Original Message- > From: Peter Albrecht [mailto:[EMAIL PROTECTED] > Sent: Tuesday, August 07, 2007 10:04 AM > To: squid-users@squid-cache.org > Subject: Re: [squid-users] Blocking proxies > > Hi Thomas, > > On Tuesday 07 August 2007 15:41, Thomas Raef wrote: > > How can we block open

[squid-users] Compiling issue with 2.6-STABLE14

2007-08-07 Thread SirWING
Hi. I'm trying to compile Squid 2.6-STABLE14 on Linux running: Kernel 2.4.26 Gcc version 2.96 Glibc 2.2.5-44 (I know, really old versions) When the compiler gets to the HttpHeaderTools.c file, the following errors occur: HttpHeaderTools.c: In function `strIsSubstr': HttpHeaderTools.c:19

Re: [squid-users] Setting a cron job at system startup

2007-08-07 Thread Henrik Nordstrom
On tor, 2007-08-02 at 21:07 +0530, Santosh Rani wrote: > I have setup cron under Cygwin to update my malware list on the Squid > that is running on Windows. > I want to setup a cron job which rotates the Squid log files when the > system is started up in the morning for the first time. For runni

Re: [squid-users] 4 squid with multiple cache_dir and cache_peer

2007-08-07 Thread Shekhar Gupta
Any updates on this ??? On 8/5/07, Shekhar Gupta <[EMAIL PROTECTED]> wrote: > Hi Michel, > > that is a city not an office :) > thats my dream to handle such a big city if i am an ISP :) , however > to give you a brief idead i was serving the same with 4 downstream ( > ISA running with surfcont

Re: [squid-users] Blocking proxies

2007-08-07 Thread Peter Albrecht
Hi Thomas, On Tuesday 07 August 2007 15:41, Thomas Raef wrote: > How can we block open proxy use? > > Either transparent or non-transparent. We looked at using l7-filter but > there must be an acl or some config option to block users from accessing > outside proxy servers. We have a school in nee

Re: [squid-users] Can I block CONNECT to any IP (but allow hostnames)?

2007-08-07 Thread Vadim Pushkin
OK, so now I have these questions: 1. Which ones of these regex'es is the right one to use? acl numeric_IPs url_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ OR. acl numeric_IPs urlpath_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ 2. The following will first allow all IP's as per acl numeric_IPs so as long

Re: [squid-users] Regular Expression

2007-08-07 Thread Enrico Popp
Henrik Nordstrom wrote: >On tor, 2007-08-02 at 11:30 +0200, Enrico Popp wrote: > > >>Hello >> >>I have an problem with regular expression in squidGuard. I'm using the >>following regex >> >>[EMAIL PROTECTED]://www.main.example.org/(.+)@http://[EMAIL PROTECTED] >> >>Now the problem consists that

Re: [squid-users] Firewall rule for dnsserver process on SquidNT-2.6 STABLE 13 on Windows

2007-08-07 Thread Santosh Rani
Thanks for reply, Sir. Best Regards On 06/08/07, Henrik Nordstrom <[EMAIL PROTECTED]> wrote: > On tor, 2007-08-02 at 10:00 +0530, Santosh Rani wrote: > > Sir, > > > > The problem is resolved with the help of Firewall Support. > > > > One question here, what if I want to have a separate dnsserver.

[squid-users] Blocking proxies

2007-08-07 Thread Thomas Raef
How can we block open proxy use? Either transparent or non-transparent. We looked at using l7-filter but there must be an acl or some config option to block users from accessing outside proxy servers. We have a school in need of this. Yes? No? Thank you in advance. Thomas J. Raef e-Based Securi

[squid-users] Multiple Upstream Proxy

2007-08-07 Thread wlagmay
I am using Squid-2.5Stable13 and everything is working smooth. My Squidproxy was configured to connect to the internet directly (transparent upstream proxy), meaning I have not define a cache_peer entry on my Squid. Now the problem is I need to forward one site let say www.abc.com to proxy2.xyz.com

Re: [squid-users] FW: Allowing streaming media through NTLM Authentication

2007-08-07 Thread Gavin White
Hi Dean, how did you disable ntlm authentication? I want to allow certain clients to bypass ntlm auth based on their IP address. Thanks, Gavin On 8/7/07, Plant, Dean <[EMAIL PROTECTED]> wrote: > Mauricio Silveira wrote: > > Hi! > > > > I'm somehow "Happy" I'm not alone with this problem... > >

Re: [squid-users] Squid Clustering on Windows platform

2007-08-07 Thread Amos Jeffries
nick w wrote: Hi there, I am looking at setting up clustering with 2 squid servers running on Windows platform, 2003 std. I am stumped at how to implement this and would appreciate all the help I can get on this issue. Currently I have 2 Windows servers running squid but not clustered. Any help

Re: [squid-users] Allow origin IP address to pass through Squid proxy

2007-08-07 Thread Amos Jeffries
Adam Parsons wrote: Hi, I have a child proxy server that forwards requests to the parent proxy server where the traffic goes through url filtering to block requests to sites not appropriate. The administrator at the child proxy server site, has access to temporary override the blocking while the

[squid-users] more bluecoat proxying

2007-08-07 Thread Michael Pye
Henrik helped me with an issue we had with another proxy, a bluecoat sg200, requesting documents from our reverse proxy squid. See thread "bluecoat proxying to squid". We now have another issue whereby the bluecoat will occasionally not cache documents because it seems to think they have already

RE: [squid-users] FW: Allowing streaming media through NTLM Authentication

2007-08-07 Thread Plant, Dean
Mauricio Silveira wrote: > Hi! > > I'm somehow "Happy" I'm not alone with this problem... > > I'm having this problem since squid 2.6STABLE9... (ALWAYS) > > I've tried everything possible without success... > > Let's try to get some progress on this matter, I'll dedicate some time > to this soo

Re: [squid-users] Regular Expression

2007-08-07 Thread Henrik Nordstrom
On tor, 2007-08-02 at 11:30 +0200, Enrico Popp wrote: > Hello > > I have an problem with regular expression in squidGuard. I'm using the > following regex > > [EMAIL PROTECTED]://www.main.example.org/(.+)@http://[EMAIL PROTECTED] > > Now the problem consists that http://example.org contain no qu

Re: [squid-users] Different URL same ETag

2007-08-07 Thread Henrik Nordstrom
On tor, 2007-08-02 at 10:49 +0200, Enrico Popp wrote: > i have more than one different urls. For each Url squid save an object > allthrough all these objects have the same E-Tag. E-Tag's is per request-URI (and to some extend Content-Location). Two objects with different URIs but the same ETag is

Re: [squid-users] authentication ip ttl reset

2007-08-07 Thread Bgs
nm, I just noticed that the section in authenticate.c is single user only :) Bgs wrote: I did a quick 3-4 minute skim through of the source. The solution doesn't seem to be difficult, but I may be wrong due to the haste. Would any of the more seasoned squid developers tell me if this approach