[squid-users] R: [squid-users] Tips for blocking Messenger

2008-01-24 Thread netmail
Yes -Messaggio originale- Da: Juraj Sakala [mailto:[EMAIL PROTECTED] Inviato: mercoledì 23 gennaio 2008 23.33 Cc: squid-users@squid-cache.org Oggetto: Re: [squid-users] Tips for blocking Messenger Andrea Soccal wrote / napísal(a): > Hi > Yesterday i have re-configured squid and I have a

Re: [squid-users] limiting download size to 1 MB for movie/video files with overall download limit of 15 MB

2008-01-24 Thread Amos Jeffries
Mr Crack wrote: On Jan 23, 2008 5:28 PM, ankush grover <[EMAIL PROTECTED]> wrote: Hi friends, I am running a squid proxy server in transparent mode on FC7 (squid-2.6.STABLE16-2). Currently 15 MB download limit is set in the squid but I want to restrict download of certain file types based on th

Re: [squid-users] Cache authenticated data

2008-01-24 Thread Amos Jeffries
Tomer Brand wrote: Hi, I am trying to use SQUID to cache IIS data. The IIS is configured to use basic authentication. I set the response header with: Cache Control -> public, must-revalidate And then changed it to: Cache Control -> public, no-cache My SQUID cache_peer is: cache_peer images

Re: [squid-users] Slow switching to parent proxy

2008-01-24 Thread Amos Jeffries
Mr Crack wrote: I am using squid 2.6 STABLE-6 with RedHat Linux Enterprise 5.x My ISP has 5 proxy servers. But sometimes they down often If the first proxy is down, I want squid to switch to second proxy etc I have configure squid as below == squid.conf

Re: [squid-users] [SOLVED] Large ACL's list, the ways to distribute squid caches, asking pro-users for advice.

2008-01-24 Thread Serg A. Androsov
The problem has solved, it was our mistake with authenticator :). Big thanks for help us. Think this expirience will be so useful for others. I'll send mgr:info where server will have most load (typically at the end and start of the month) for community statistics. P.S. I'll having some questio

[squid-users] Question

2008-01-24 Thread Adam Fyne
Hi, Here at work we have programs that run on computers that ask for large files from our storage computer(s) (also on our network). Instead of copying the file locally each time for every computer - we would like to find out if we could use Squid for this purpose. On the first time - squid wou

Re: [squid-users] Cache for mp3 and ogg in memory...

2008-01-24 Thread Matus UHLAR - fantomas
On 19.01.08 18:26, Michelle Konzack wrote: > I have killed a hardisk (160 GByte) again because to heavy traffic of > "gnump3d". The problem is, that the "natural" caching of linux does > not work, even if I have only arround 700 MByte of songs I hear all the > time and the installed memory is 2 GB

Re: [squid-users] Question

2008-01-24 Thread Amos Jeffries
Adam Fyne wrote: Hi, Here at work we have programs that run on computers that ask for large files from our storage computer(s) (also on our network). Instead of copying the file locally each time for every computer - we would like to find out if we could use Squid for this purpose. On the firs

Re: [squid-users] p2p and squid

2008-01-24 Thread Leonardo Rodrigues Magalhães
Marcus Kool escreveu: Mar Matthias Darin wrote: Hello, Frank Bonnet writes: OK thanks a lot for your "lights" , I think the easyiest way for me would be protocol filtering done by the firewall ... This is also the most secure. I personally do not let squid handle the CONNECT. IMHO, this

[squid-users] Transform dynamic page into static page.??..

2008-01-24 Thread Seonkyu Park
Hello Everyone. I'm using squid for reverse proxy. Original server has following URI . http://www.xyz.com/abc.swf http://www.xyz.com/abc.swf?id=xxx http://www.xyz.com/abc.swf?id=yyy Squid know that is dyanamic page. Squid store three objects. ( abc.swf , abc.swf?id=xxx, abc.swf?id=yyy ) I

[squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread bijayant kumar
Hello list, I am using squid as proxy server on gentoo box. All of a sudden from 2nd January in my cache.log i am seeing the error WARNING! Your cache is running out of filedescriptors When this messages repeats frequently, browsing becomes dead slow in 2mbps line. We have 2GB RAM, and 1 GB s

[squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread Bijayant
Hello list, I am using squid as proxy server on gentoo box. All of a sudden from 2nd January in my cache.log i am seeing the error WARNING! Your cache is running out of filedescriptors When this messages repeats frequently, browsing becomes dead slow in 2mbps line. We have 2GB RAM, and 1 GB swa

RE: [squid-users] Cache authenticated data

2008-01-24 Thread Tomer Brand
Amos thank you for the help. I set the following: authenticate_ttl 0 seconds authenticate_ip_ttl 3 seconds Delete SQUID cache folder and run squid -z The first request needs to be authenticate. The second request was from a different computer with a different IP 15 minutes after the first reques

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread Adrian Chadd
You need to set ulimit -n before you compile and run Squid. Maybe you don't need to do it before compilation these days, I forget. ulimit -n 32768 check ulimit -a Then ./configure make make install put ulimit -n 32768 in the startup script start squid check cachemgr "info" page and/or the cache.l

Re: [squid-users] ULTRASURF (anti-filtering program) problem

2008-01-24 Thread Matus UHLAR - fantomas
> SSCR Internet Admin wrote: > >I would like to ask if anyone from squid mailing list has stumble upon > >ultrasurf that can bypass any filtering products such as squidguard. I > >have setup a test pc with ip being blocked on squidguard. But to my > >surprise it bypass everything ive setup and wit

Re: [squid-users] WCCP Routing

2008-01-24 Thread Adrian Chadd
On Thu, Jan 24, 2008, Dave Raven wrote: > Hi all, > Is it possible to make the request back out the router that sent in > a WCCP packet to begin with? For example if you have two routers, and router > A sends request A and router B sends request B to send them back through > their origin rout

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread Gleidson Antonio Henriques
If you are running squid-2 compile your squid with --with-fd=numberoffiledescriptors If you are running squid-3 compile your squid with --with-filedescriptors=numberoffiledescriptors - Original Message - From: "bijayant kumar" <[EMAIL PROTECTED]> To: "squid users" Sent: Thursday, Ja

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread Gonzalo Arana
I would recommend you to run ./configure with --with-maxfd=you_desired_limit and --enable-epoll Watch for messages like this in configure output: checking if epoll works... yes Using epoll for the IO loop. ... Maximum filedescriptors set to 131072 ... Having large number of FDs with select is dan

[squid-users] client_http.hit_median_svc_time: what's the definition, again ?

2008-01-24 Thread john allspaw
Hello smart and nice folks: We have some reverse-proxy caches on the west coast that get hit quite a bit from across the Pacific, and we see cache hit times much higher there than in our other datacenters. I *think* it's because client_http.hit_median_svc_time might also include transfer time t

Re: [squid-users] WCCP Routing

2008-01-24 Thread Jason Taylor
I worked around that a few years ago by having multiple instances of squid on my server, each with its own IP and dedicated squid.conf Each router would connect to its own squid instance and linux policy routing would determine the default gateway to use. The downside is that you are now effectiv

[squid-users] Re: Strange issues with squid

2008-01-24 Thread Ryan Thoryk
I've got more information (on the FreeBSD side): The packets are coming in over the GRE interface, but seem to be randomly disappearing after the IPFW forward operation (forwards to localhost:3128). Here's the ipfw config: 00150 fwd 127.0.0.1,3128 tcp from any to any dst-port 80 via gre0 in 0

Re: [squid-users] p2p and squid

2008-01-24 Thread Mar Matthias Darin
Hello, Leonardo Rodrigues Magalhães writes: Yeah i have to agree with Marcus and disagree completly with Mar Matthias. But ... there are cases and cases. At least for me, letting squid deal with CONNECTs showed completly efficient and pretty enough for my needs. My needs are usually

Re: [squid-users] Transform dynamic page into static page.??..

2008-01-24 Thread Amos Jeffries
> Hello Everyone. > I'm using squid for reverse proxy. > > Original server has following URI . > > http://www.xyz.com/abc.swf > http://www.xyz.com/abc.swf?id=xxx > http://www.xyz.com/abc.swf?id=yyy > > Squid know that is dyanamic page. > Squid store three objects. ( abc.swf , abc.swf?id=xxx,

RE: [squid-users] Cache authenticated data

2008-01-24 Thread Amos Jeffries
> Amos thank you for the help. > > I set the following: > authenticate_ttl 0 seconds > authenticate_ip_ttl 3 seconds > > Delete SQUID cache folder and run squid -z > > The first request needs to be authenticate. > The second request was from a different computer with a different IP 15 > minutes aft

Re: [squid-users] ULTRASURF (anti-filtering program) problem

2008-01-24 Thread Amos Jeffries
>> SSCR Internet Admin wrote: >> >I would like to ask if anyone from squid mailing list has stumble upon >> >ultrasurf that can bypass any filtering products such as squidguard. I >> >have setup a test pc with ip being blocked on squidguard. But to my >> >surprise it bypass everything ive setup an

Re: [squid-users] Re: Strange issues with squid

2008-01-24 Thread Adrian Chadd
On Thu, Jan 24, 2008, Ryan Thoryk wrote: > I've got more information (on the FreeBSD side): > > The packets are coming in over the GRE interface, but seem to be > randomly disappearing after the IPFW forward operation (forwards to > localhost:3128). > > Here's the ipfw config: > 00150 fwd 127.0

Re: [squid-users] WCCP Routing

2008-01-24 Thread Adrian Chadd
On Thu, Jan 24, 2008, Jason Taylor wrote: > I worked around that a few years ago by having multiple instances of > squid on my server, each with its own IP and dedicated squid.conf > Each router would connect to its own squid instance and linux policy > routing would determine the default gateway

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread bijayant kumar
Hi Arana, Thanks for your reply. As you are suggesting in your reply that incresing the filedescriptor can be dangerous. Is there any other way to get rid of this warning, because this warning makes browsing dead slow,and the box is deployed at our client place. I have to do things fast. If you ha

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread Manoj_Rajkarnikar
On Fri, 25 Jan 2008, bijayant kumar wrote: Hi Arana, Thanks for your reply. As you are suggesting in your reply that incresing the filedescriptor can be dangerous. Is there any other way to get rid of this warning, because this warning makes browsing dead slow,and the box is deployed at our cli

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread Adrian Chadd
Yo'ure using UFS and small filedescriptor counts. Recompile with 16384 filedescriptors and enable AUFS. Adrian On Fri, Jan 25, 2008, bijayant kumar wrote: > Hi Arana, > > Thanks for your reply. As you are suggesting in your > reply that incresing the filedescriptor can be > dangerous. Is there

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread bijayant kumar
Hi, While checking the squid-2.6.17.ebuild file i found in econf section there is a line --with-maxfd=8192. It means that squid has been compiled with 8192 descriptors, right ?? But in cache.log it says 1024 file descriptors are available and complains about the running out of file descriptors. Sh

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread Adrian Chadd
Check ./squid -v ; see what it was compiled with. Make sure you start squid after you change the default ulimit. Either put "ulimit -n 8192" at the top of the squid startup script or find the place where your default ulimits are set and modify that. Adrian On Fri, Jan 25, 2008, bijayant kumar w

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread bijayant kumar
Hi, I did recompiled squid and entere the first line in /etc/init.d/squid as ulimit -n 8192 and output of squid -v configure options: '--prefix=/usr' '--host=i686-pc-linux-gnu' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--datadir=/usr/share' '--sysconfdir=/etc' '--localstatedir=/va

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread Adrian Chadd
Try running squid manually; see if that works better. Adrian On Fri, Jan 25, 2008, bijayant kumar wrote: > Hi, > I did recompiled squid and entere the first line in > /etc/init.d/squid as > ulimit -n 8192 > > and output of squid -v > > configure options: '--prefix=/usr' > '--host=i686-pc-l

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread bijayant kumar
I have tried it also, but in log files it still saying 1024 file descriptors available. while squid is compile with 8192. --- Adrian Chadd <[EMAIL PROTECTED]> wrote: > Try running squid manually; see if that works > better. > > > > Adrian > > On Fri, Jan 25, 2008, bijayant kumar wrote: > > H

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread Ding Deng
bijayant kumar <[EMAIL PROTECTED]> writes: > I have tried it also, but in log files it still saying > 1024 file descriptors available. while squid is > compile with 8192. ulimit -n What's the output?

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread bijayant kumar
Hi, [EMAIL PROTECTED] ~ $ ulimit -n 1024 I have tried to change this via giving the command ulimit -HSn 8192 /usr/include/bits/typesizes.h /* Number of descriptors that can fit in an `fd_set'. */ #define __FD_SETSIZE8192 rebooted my machine several times, also cat /proc/sys/fs/fil

Re: [squid-users] Unable to increase filedescriptor limit -- tried all things

2008-01-24 Thread Adrian Chadd
On Fri, Jan 25, 2008, bijayant kumar wrote: > Hi, > > [EMAIL PROTECTED] ~ $ ulimit -n > 1024 Thats your problem. Check your pam security file. under ubuntu its: [EMAIL PROTECTED]:~$ cat /etc/security/limits.conf | grep nofile #- nofile - max number of open files * hard