Re: [squid-users] Squid not working for me

2008-01-08 Thread Dave Coventry
I have found the following Kernel requirements: (http://wiki.squid-cache.org/SquidFaq/InterceptionProxy ) # # Code maturity level options # CONFIG_EXPERIMENTAL=y # # Networking options # CONFIG_FIREWALL=y # CONFIG_NET_ALIAS is not set CONFIG_INET=y CONFIG_IP_FORWARD=y # CONFIG_IP_MULTICAST is not

Re: [squid-users] Squid not working for me

2008-01-08 Thread Indunil Jayasooriya
On Jan 8, 2008 1:14 PM, Dave Coventry [EMAIL PROTECTED] wrote: Damn! Did it again. Sent the reply direct rather than to the list. Sorry. Indunil, #For squid traffic to Accept iptables -A INPUT -i eth1 -d 192.168.60.254 -p tcp -s 192.168.60.0/24 --dport 3128 -j ACCEPT I get this error

Re: [squid-users] Squid not working for me

2008-01-08 Thread Dave Coventry
On Jan 8, 2008 10:37 AM, Indunil Jayasooriya wrote: command again, pls note this is one LINE. iptables -A INPUT -i eth1 -d 192.168.60.254 -p tcp -s 192.168.60.0/24 --dport 3128 -j ACCEPT I just tried on my RedHat EL4 box. It worked. Sorry, yes that is what happened. It still doesn't

[squid-users] null store type has been removed?

2008-01-08 Thread Ralf Hildebrandt
Yes, they are wrong. They're counting down from 4GB to 0, just to go back to 4GB again. It used to work with 2.6.x I assume this is bug 2114, which was fixed recently. If not, please file a fresh bug report. http://www.squid-cache.org/bugs/show_bug.cgi?id=2114 I'm building 3.0 HEAD as

Re: [squid-users] Squid not working for me

2008-01-08 Thread Indunil Jayasooriya
I have a laptop running XP (Home) connected to eth1 which reports the following in response to 'ipconfig' IP Address ..192.168.60.199 Default Gateway192.168.60.254 My Laptop cannot access the Internet, it just says Server not found Hey, Could you pls check DNS entries in

[squid-users] How to redirect URL in SQUID

2008-01-08 Thread TRM
Hi , i have one query. How to redirect certain url to another url using SQUID. In detail www.abc.com to www.xyz.com, if user hit abc.com it will redirect to xyz.com. -- \\\/// / \ | \\ // | ( | (.) (.)

Re: [squid-users] How to redirect URL in SQUID

2008-01-08 Thread J. Peng
You write a redirector to do that. On Jan 8, 2008 7:26 PM, TRM [EMAIL PROTECTED] wrote: Hi , i have one query. How to redirect certain url to another url using SQUID. In detail www.abc.com to www.xyz.com, if user hit abc.com it will redirect to xyz.com.

[squid-users] Reverse Proxy with Webmin Authentication

2008-01-08 Thread Gianluca Gargiulo
Hi, i'm this problem with reverse proxy: the squid authentication do not work fine. On this page http://www.squid-cache.org/Versions/v2/2.6/cfgman/auth_param.html i red that the authentication is not allowed when the web resource's architecture is made with the firewall actives the trasparent

RE: [squid-users] How to redirect URL in SQUID

2008-01-08 Thread Shalvi Ziv
Or use SQUIRM plug-in for that. -Original Message- From: J. Peng [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 08, 2008 1:39 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] How to redirect URL in SQUID You write a redirector to do that. On Jan 8, 2008 7:26 PM, TRM

Re: [squid-users] null store type has been removed?

2008-01-08 Thread Ralf Hildebrandt
* Ralf Hildebrandt [EMAIL PROTECTED]: I assume this is bug 2114, which was fixed recently. If not, please file a fresh bug report. http://www.squid-cache.org/bugs/show_bug.cgi?id=2114 I'm building 3.0 HEAD as I write. Stats seem to work again. I notice the null store type has been

Re: [squid-users] Problem: Squid+Kaspersky_for_proxy+SquidGuard

2008-01-08 Thread Amos Jeffries
Alexander Schaefer wrote: Alex Rousskov schrieb: On Mon, 2008-01-07 at 14:18 +0100, Alexander Schaefer wrote: Hello squid users, we did install Kaspersky Antivirus for Proxy on our existing corporate proxy server, which is Squid 2.6.STABLE5 running on Debian 4.0 server. We also use

[squid-users] secure proxy auth

2008-01-08 Thread Peter Huber
I need a way to securely authenticate proxy users against an ADS. To use a simple basic authentication via ldap is no problem, but in this solution the traffic between the client and the proxy is unencrypted. For a digest auth the proxy needs access to unencrypted passwords in the ADS. This is

Re: [squid-users] 'include' feature

2008-01-08 Thread Gonzalo Arana
On Jan 7, 2008 1:49 PM, Adrian Chadd [EMAIL PROTECTED] wrote: I gave up and coded up a way to include configuration files in squid.conf. you can now do something like this: include /full/path/to/another/file/to/include without quotes or anything like that. Heck, spaces in the filename may

Re: [squid-users] inode ratio and block-size

2008-01-08 Thread Matus UHLAR - fantomas
On 08.01.08 00:42, Linux Man wrote: In your experience, when you make a new fs (I will use ext3) for cache dir, what block-size and inode ratio do you use? depends on usage, but the average file size is usually around 13KB which may tell enough... using COSS for small files should change this

Re: [squid-users] 'include' feature

2008-01-08 Thread Adrian Chadd
On Tue, Jan 08, 2008, Gonzalo Arana wrote: (I do)**3 Will test it tomorow. Porting the changeset to 2.6 and 2.7 will be trivial.. Adrian

Re: [squid-users] Proxy authentication based on requested host

2008-01-08 Thread Mikko Kettunen
Mikko Kettunen wrote: I'm thinking of something like this: auth_param basic program /usr/local/bin/my_authenticator %DST_HOST %OTHER_PARAM I didn't find much information on this matter. Any help is appreciated. After some thoughts I think it would be better if I could send the dst_host

Re: [squid-users] Counting TOTAL number of requests to Squid

2008-01-08 Thread Gonzalo Arana
Ziv, On Jan 7, 2008 7:34 PM, Shalvi Ziv [EMAIL PROTECTED] wrote: For support and availability reports purposes, I need to count the total number of requests to Squid, including those that have not been handled by the squid, and compare it with the number of handled requests. Meaning, in case

Re: [squid-users] dansguardian, squid, shorewall

2008-01-08 Thread Richard Pyne
On 7 Jan 2008 at 23:43, Amos Jeffries wrote: Adrian Chadd wrote: Have you configured the http_port with 'transparent' ? I think the problem here is that its *dansguardian* being redirected to not squid. The transparent features of squid will not work when there is no redirection, ie

[squid-users] TCP_DENIED/411 with POST method

2008-01-08 Thread Daniel Herrero
Hello, trying to view this web page http://gepas.bioinfo.cipf.es/cgi-bin/norm.cgi we get this error: TCP_DENIED/411 3610 POST http://gepas.bioinfo.cipf.es/cgi-bin/norm.cgi - NONE/- text/html Googled about this error, got this article:

RE: [squid-users] How to fix skype sound problem over squid ?

2008-01-08 Thread C B
Dear Matus, You mean maxconn setting? If yes, I have not set maxconn setting. What would you advice to do ? Thanks... Date: Mon, 7 Jan 2008 23:59:19 +1300 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] CC: squid-users@squid-cache.org Subject: Re: [squid-users] How to fix skype sound

Re: [squid-users] inode ratio and block-size

2008-01-08 Thread Linux Man
Thanks for you help Well, I'll use it for cache web traffic, thus save bandwidth. The cache dir will have 50 GB, and the linux box 2 GB RAM. I think that while coss is under development, diskd is a good alternative, so that is will I use. With an average of 13KB is a good choice a block size of

[squid-users] Memory usage of squid parent proces the same as child

2008-01-08 Thread Tomek K.
Hello, I have squid server running on Linux Debian Etch. Squid Version 2.6.STABLE5 is using LDAP group authentication based on Win2003 domain controller. The hardware configuration is: IBM xSeries 336 with one XEON 3.4GHz, 4GB RAM, 2xHDD SCSI 146GB 15K with RAID 1 The problem is that the squid

Re: [squid-users] dansguardian, squid, shorewall

2008-01-08 Thread Richard Pyne
Well, I solved my problem for now, I went back to squid 2.6, made NO configuration changes, and everything is working fine. So much for improved versions. --Richard On 8 Jan 2008 at 10:08, Richard Pyne wrote: On 7 Jan 2008 at 23:43, Amos Jeffries wrote: Adrian Chadd wrote: Have you

Re: [squid-users] dansguardian, squid, shorewall

2008-01-08 Thread Amos Jeffries
Richard Pyne wrote: Well, I solved my problem for now, I went back to squid 2.6, made NO configuration changes, and everything is working fine. So much for improved versions. Are you sure 2.6 accepted those config lines? did you mean 2.5 works with that 2.5 syntax? In 2.6 and 3.x the

Re: [squid-users] Memory usage of squid parent proces the same as child

2008-01-08 Thread Amos Jeffries
Tomek K. wrote: Hello, I have squid server running on Linux Debian Etch. Squid Version 2.6.STABLE5 First step is upgrade to the latest 2.6 STABLE17 from unstable. There have been a lot of improvements made since stable5. Amos is using LDAP group authentication based on Win2003 domain

[squid-users] Invalid URL when using transparent proxy

2008-01-08 Thread l3d
Hey guys, I have searched the archives and interwebs and haven't found any answers yet. OS: OpenBSD4.2 Squid: 3.0.Stable1 --enable-pf-transparent (and others) squid.conf has the line http_port 3128 transparent. I am using a second openbsd box and pf to redirect 80 to this squid box(to port

Re: [squid-users] dansguardian, squid, shorewall

2008-01-08 Thread Amos Jeffries
Richard Pyne wrote: On 9 Jan 2008 at 11:50, Amos Jeffries wrote: Richard Pyne wrote: Well, I solved my problem for now, I went back to squid 2.6, made NO configuration changes, and everything is working fine. So much for improved versions. Are you sure 2.6 accepted those config lines? did

Re: [squid-users] dansguardian, squid, shorewall

2008-01-08 Thread Richard Pyne
On 9 Jan 2008 at 11:50, Amos Jeffries wrote: Richard Pyne wrote: Well, I solved my problem for now, I went back to squid 2.6, made NO configuration changes, and everything is working fine. So much for improved versions. Are you sure 2.6 accepted those config lines? did you mean 2.5

Re: [squid-users] 'include' feature

2008-01-08 Thread Dave
I still get unrecognized: 'include /path/to/included/file/squid.acl.config' when trying it out Dave wrote: This feature will be very useful. I have just downloaded the 2.HEAD-20080107 but doesn't seem to be in that build. So will try it out again later on. Thanks Adrian Chadd wrote: I

Re: [squid-users] 'include' feature

2008-01-08 Thread Amos Jeffries
Dave wrote: I still get unrecognized: 'include /path/to/included/file/squid.acl.config' when trying it out There seems to be a one-off error in the initial logics. whitespace in the config line is at character 7 not 8. Fixing that here in the 3.1 port solves the problem you are seeing and

Re: [squid-users] 'include' feature

2008-01-08 Thread Adrian Chadd
On Wed, Jan 09, 2008, Amos Jeffries wrote: Dave wrote: I still get unrecognized: 'include /path/to/included/file/squid.acl.config' when trying it out There seems to be a one-off error in the initial logics. whitespace in the config line is at character 7 not 8. Fixing that here in

Re: [squid-users] 'include' feature

2008-01-08 Thread Amos Jeffries
Adrian Chadd wrote: On Wed, Jan 09, 2008, Amos Jeffries wrote: Dave wrote: I still get unrecognized: 'include /path/to/included/file/squid.acl.config' when trying it out There seems to be a one-off error in the initial logics. whitespace in the config line is at character 7 not 8. Fixing

Re: [squid-users] 'include' feature

2008-01-08 Thread Adrian Chadd
On Wed, Jan 09, 2008, Amos Jeffries wrote: 2008/01/09 15:12:05| aclParseAclLine: missing ACL name. FATAL: Bungled airo.treenetnz.com troja.treenetnz.com line 3: acl Squid Cache (Version 3.HEAD-CVS): Terminated abnormally. fatalf(Bungled %s line %d: %s, cfg_filename,

[squid-users] [help] setting up firewall policy for transparent (single-homed host) proxy

2008-01-08 Thread Rachmat Hidayat Al Anshar
var YAHOO = {'Shortcuts' : {}}; YAHOO.Shortcuts.hasSensitiveText = false; YAHOO.Shortcuts.sensitivityType = []; YAHOO.Shortcuts.doUlt = false; YAHOO.Shortcuts.location = us; YAHOO.Shortcuts.document_id = 0; YAHOO.Shortcuts.document_type = ; YAHOO.Shortcuts.document_title = [help] setting up

[squid-users] problems using cache_peer_domain or urlpath_regex

2008-01-08 Thread robert rottermann
hi there, I am trying to set up a squid accelerator that shoul redirect using cache peers. my problem is, that what ever I do all request are grabbed by the first peer. I am using 2.6 stable 17 on a suse 10.3 box these are the two different setups I was trying: first attempt with

[squid-users] Blocking webex

2008-01-08 Thread Nadeem Semaan
Hello everyone, anyone know a way of blocking webex without blocking the actual site? I mean I still want users to read about it (even on the official website), I just dont want them to be able to use it without prior permission. Thanks and Happy New Year

[squid-users] https report 71 Protocol Error in squid 3.0

2008-01-08 Thread Penghui Wang
hello, list, I wanna implement (web browser)-SSL-(squid)-SSL-Apache+mod_ssl in my servers. After dig on the google, i found if wanna this i have to use squid 2.x + SSL patch or i could use the latest versioni 3.0. Then i install squid 3.0 with --enable-ssl parameter during the installation. And

[squid-users] squid + default webpage

2008-01-08 Thread Meshbah Uddin Ahmed
hi, i have installed squid in my nat server. squid is running fine. now i want, when users open their browser, a default webpage will be open which i want to set in my server. is it possible using squid? if so, please help me how i can do it? thanks meshbah

Re: [squid-users] [help] setting up firewall policy for transparent (single-homed host) proxy

2008-01-08 Thread Rachmat Hidayat Al Anshar
Hi all... I am on my research deploying a transparent single-homed host proxy server on my virtual network. My squid box is not on the same box where the firewall applied. I didn't have any idea how to set up the iptables running on the firewall, so I can redirect all client's web request to