[squid-users] WCCP Routing

2008-01-23 Thread Dave Raven
Hi all, Is it possible to make the request back out the router that sent in a WCCP packet to begin with? For example if you have two routers, and router A sends request A and router B sends request B to send them back through their origin routers, regardless of your default route etc so tha

Re: [squid-users] Mem Cache flush

2008-01-23 Thread Manoj_Rajkarnikar
On Wed, 23 Jan 2008, Matus UHLAR - fantomas wrote: On Fri, 18 Jan 2008, Haytham KHOUJA wrote: I don't advise you to use partitions as separate cache_dirs. You will not get performance enhancement since you're still working on the same physical disk and same SCSI controller. On 20.01.08 11:57,

Re: [squid-users] Cache for mp3 and ogg in memory...

2008-01-23 Thread Adrian Chadd
Hi, I'd first give ZFS a shot - either through opensolaris or FreeBSD. It has slightly saner memory caching logic (which eats RAM for breakfast mind you) that may suit this workload a little better. Thats probably a smarter move than trying to squeeze a HTTP proxy inline just yet. :) adrian O

Re: [squid-users] Redirects changing POST to GET

2008-01-23 Thread Amos Jeffries
> Amos Jeffries wrote: >>> I've setup a reverse proxy running Squid 2.6.STABLE6 5.el5_1.2 on >>> RHEL5.1. >>> All remote access to the proxy is supposed to be via HTTPS, but since >>> some of the protected apps give out absolute URL's at HTTP, I've also >>> setup a redirector that listens on port

Re: [squid-users] limiting download size to 1 MB for movie/video files with overall download limit of 15 MB

2008-01-23 Thread Amos Jeffries
> Hi friends, > > I am running a squid proxy server in transparent mode on FC7 > (squid-2.6.STABLE16-2). Currently 15 MB download limit is set in the > squid but I want to restrict download of certain file types based on > the size for ex if the size of .mp3/mpeg file is more than 1MB then > don't

Re: [squid-users] ftp clients through squid

2008-01-23 Thread Amos Jeffries
> > > users within my lan want to use ftp clients (CuteFTP, WS_FTP, CoffeCup > etc). > how can i make it happen through my squid proxy server? > > i am alreasy running MASQ on my gateway machine (which is the same squid > server) and have following entries in my squid.conf > > acl ftp proto FTP > h

Re: [squid-users] Redirects changing POST to GET

2008-01-23 Thread Ben Hollingsworth
Amos Jeffries wrote: I've setup a reverse proxy running Squid 2.6.STABLE6 5.el5_1.2 on RHEL5.1. All remote access to the proxy is supposed to be via HTTPS, but since some of the protected apps give out absolute URL's at HTTP, I've also setup a redirector that listens on port 80 and sends a 301 r

Re: [squid-users] Tips for blocking Messenger

2008-01-23 Thread Juraj Sakala
Andrea Soccal wrote / napísal(a): Hi Yesterday i have re-configured squid and I have add an acl : Acl block url_regex “block.txt” and in the block.txt I have add the word LIVE and this word block messenger !! I hope this tips will be hel for you Bye It will overblock all URLs with LIVE

Re: [squid-users] Redirects changing POST to GET

2008-01-23 Thread Amos Jeffries
> I've setup a reverse proxy running Squid 2.6.STABLE6 5.el5_1.2 on RHEL5.1. > All remote access to the proxy is supposed to be via HTTPS, but since > some of the protected apps give out absolute URL's at HTTP, I've also > setup a redirector that listens on port 80 and sends a 301 redirect back >

Re: [squid-users] p2p and squid

2008-01-23 Thread Marcus Kool
Mar Matthias Darin wrote: Hello, Frank Bonnet writes: OK thanks a lot for your "lights" , I think the easyiest way for me would be protocol filtering done by the firewall ... This is also the most secure. I personally do not let squid handle the CONNECT. IMHO, this is too easy to be abused

Re: [squid-users] reverse proxy headache

2008-01-23 Thread Amos Jeffries
> Thanks a lot, it worked! > I had reviewed the ACL syntax and saw that it only accepts one > parameter after the acl type, however it didn't occur to me that that > was the same case with the cache_peer access directive. > The reason to have the regex at the beggining is for it to catch a url > be

Re: [squid-users] p2p and squid

2008-01-23 Thread Mar Matthias Darin
Hello, Frank Bonnet writes: OK thanks a lot for your "lights" , I think the easyiest way for me would be protocol filtering done by the firewall ... This is also the most secure. I personally do not let squid handle the CONNECT. IMHO, this is too easy to be abused. I use a pac file that

Re: [squid-users] p2p and squid

2008-01-23 Thread Marcus Kool
Leonardo Rodrigues Magalhães wrote: Marcus Kool escreveu: Yes, indeed Squid *does* support P2P using HTTPS tunneling. just to make things clear . squid supports connection tunneling and not only HTTPS tunneling. A misconfigured squid can be used, for example, by worms to send spam em

[squid-users] Cache authenticated data

2008-01-23 Thread Tomer Brand
Hi,   I am trying to use SQUID to cache IIS data. The IIS is configured to use basic authentication. I set the response header with: Cache Control -> public, must-revalidate And then changed it to: Cache Control -> public, no-cache   My SQUID cache_peer is: cache_peer images.test.com parent    80

[squid-users] Redirects changing POST to GET

2008-01-23 Thread Ben Hollingsworth
I've setup a reverse proxy running Squid 2.6.STABLE6 5.el5_1.2 on RHEL5.1. All remote access to the proxy is supposed to be via HTTPS, but since some of the protected apps give out absolute URL's at HTTP, I've also setup a redirector that listens on port 80 and sends a 301 redirect back to the

Re: [squid-users] limiting download size to 1 MB for movie/video files with overall download limit of 15 MB

2008-01-23 Thread Mr Crack
On Jan 23, 2008 5:28 PM, ankush grover <[EMAIL PROTECTED]> wrote: > Hi friends, > > I am running a squid proxy server in transparent mode on FC7 > (squid-2.6.STABLE16-2). Currently 15 MB download limit is set in the > squid but I want to restrict download of certain file types based on > the size f

[squid-users] Slow switching to parent proxy

2008-01-23 Thread Mr Crack
I am using squid 2.6 STABLE-6 with RedHat Linux Enterprise 5.x My ISP has 5 proxy servers. But sometimes they down often If the first proxy is down, I want squid to switch to second proxy etc I have configure squid as below == squid.conf cache_peer 202.1.1

Re: [squid-users] Help with strange squid behavior

2008-01-23 Thread Simon Waters
On Wednesday 23 January 2008 14:54, Phyllis Smith wrote: > > I am running Debian Linux 4 (etch) with 2.6.18 kernel. I am running > 2.8.0.2 dansguardian, with 2.6.STABLE5 squid (the most current Debian > supported releases when I upgraded everything a few weeks ago). We run same config with Etch,

Re: [squid-users] Compile errors

2008-01-23 Thread trainier
Actually, I originally tried that, although "coss" was first in my list. I assume that doesn't matter. I took your idea and ran with it, though. I got things to compile properly when I omitted the quotes. So: --enable-storeio=coss,ufs,aufs,null Thanks for everyone's suggestions. Adrian Chadd

[squid-users] Help with strange squid behavior

2008-01-23 Thread Phyllis Smith
I have looked through the archives and searched the web, but I can't find any information that would help with the problem that I am having. If I wasn't clever enough to come up with the correct search terms and this has been discussed before, then I apologize in advance. I am running Debian

Re: [squid-users] Compile errors

2008-01-23 Thread Adrian Chadd
Hm, try --enable-storeio-"ufs,aufs,null,coss" ? Adrian On Wed, Jan 23, 2008, [EMAIL PROTECTED] wrote: > Okay, I have the latest stable source. > The exact same issue continues. > > "Amos Jeffries" <[EMAIL PROTECTED]> wrote on 01/22/2008 10:21:46 PM: > > > > My build/configure command: > > > .

[squid-users] Cache for mp3 and ogg in memory...

2008-01-23 Thread Michelle Konzack
Hello, I have killed a hardisk (160 GByte) again because to heavy traffic of "gnump3d". The problem is, that the "natural" caching of linux does not work, even if I have only arround 700 MByte of songs I hear all the time and the installed memory is 2 GByte. The access of gnump3d on the harddisk

Re: [squid-users] Compile errors

2008-01-23 Thread trainier
Okay, I have the latest stable source. The exact same issue continues. "Amos Jeffries" <[EMAIL PROTECTED]> wrote on 01/22/2008 10:21:46 PM: > > My build/configure command: > > ./configure --prefix=/services/proxy --enable-icmp --enable-snmp > > --enable-cachemgr-hostname=kmiproxy01 --enable-arp-a

Re: [squid-users] reverse proxy headache

2008-01-23 Thread Raymond Hall
Thanks a lot, it worked! I had reviewed the ACL syntax and saw that it only accepts one parameter after the acl type, however it didn't occur to me that that was the same case with the cache_peer access directive. The reason to have the regex at the beggining is for it to catch a url before the dst

Re: [squid-users] p2p and squid

2008-01-23 Thread Frank Bonnet
Leonardo Rodrigues Magalhães wrote: Marcus Kool escreveu: Yes, indeed Squid *does* support P2P using HTTPS tunneling. just to make things clear . squid supports connection tunneling and not only HTTPS tunneling. A misconfigured squid can be used, for example, by worms to send spam ema

Re: [squid-users] p2p and squid

2008-01-23 Thread Leonardo Rodrigues Magalhães
Marcus Kool escreveu: Yes, indeed Squid *does* support P2P using HTTPS tunneling. just to make things clear . squid supports connection tunneling and not only HTTPS tunneling. A misconfigured squid can be used, for example, by worms to send spam emails !!! worms can connect to squid p

Re: [squid-users] p2p and squid

2008-01-23 Thread Marcus Kool
Yes, indeed Squid *does* support P2P using HTTPS tunneling. You may use the free ufdbGuard Squid redirector to block HTTPS tunneling. ufdbGuard can also block HTTPS sites which have no valid certificate and sites which have no FQDN in the URL. Marcus Leonardo Rodrigues Magalhães wrote: Yeah

Re: [squid-users] p2p and squid

2008-01-23 Thread Leonardo Rodrigues Magalhães
Yeah squid supports only HTTP but also support connection tunneling with CONNECT method. My experiences showed that almost all 'P2P-through-squid' uses CONNECT and connects to IP addresses instead of hostnames. My experiences showed that CONNECT to ip addresses almost do NOT happe

Re: [squid-users] p2p and squid

2008-01-23 Thread Adrian Chadd
Squid doesn't support p2p protocols that aren't HTTP. :) On Wed, Jan 23, 2008, Frank Bonnet wrote: > Hello > > Is there a way to use squid proxying with P2P clients ? > if yes is it possible to avoid it or do I have to filter > with my firewall ? > > infos links tricks welcome > > Thanks > Fran

[squid-users] limiting download size to 1 MB for movie/video files with overall download limit of 15 MB

2008-01-23 Thread ankush grover
Hi friends, I am running a squid proxy server in transparent mode on FC7 (squid-2.6.STABLE16-2). Currently 15 MB download limit is set in the squid but I want to restrict download of certain file types based on the size for ex if the size of .mp3/mpeg file is more than 1MB then don't allow the fil

[squid-users] ftp clients through squid

2008-01-23 Thread sa
users within my lan want to use ftp clients (CuteFTP, WS_FTP, CoffeCup etc). how can i make it happen through my squid proxy server? i am alreasy running MASQ on my gateway machine (which is the same squid server) and have following entries in my squid.conf acl ftp proto FTP http_access allow f

[squid-users] p2p and squid

2008-01-23 Thread Frank Bonnet
Hello Is there a way to use squid proxying with P2P clients ? if yes is it possible to avoid it or do I have to filter with my firewall ? infos links tricks welcome Thanks Frank

[squid-users] Tips for blocking Messenger

2008-01-23 Thread Andrea Soccal
Hi Yesterday i have re-configured squid and I have add an acl : Acl block url_regex “block.txt” and in the block.txt I have add the word LIVE and this word block messenger !! I hope this tips will be hel for you Bye