Re: [squid-users] Single-user web-browsing behavior

2008-02-26 Thread Alex Rousskov
On Fri, 2008-02-22 at 10:49 -0800, Pranav Desai wrote: > Does anyone know of or can point me to any resource (papers, etc.) > that give a single-user web-browsing behavior in terms of req/s, > conn/s and kbits/s. I tried some googling, but most of point to > web-browsing patterns, i.e the type of

Re: [squid-users] Page view counts

2008-02-26 Thread Alex Rousskov
On Fri, 2008-02-22 at 12:52 +0200, Ali Hardogan wrote: > I'd like to count the page views as the HTTP requests are proxied > through Squid. > > If I blindly count the HTTP GETs, I get a wrong (higher) number > because for the same page multiple HTTP GET commands are issued. > > How can I get an

RE: [squid-users] I want to purge too many TIME_WAITs immediatelyafter closing HTTP port.

2008-02-26 Thread Alex Rousskov
On Tue, 2008-02-26 at 08:53 +0900, S.KOBAYASHI wrote: > My http emulater can send the HTTP packet very fast, so most of squid listen > ports being full in 30 seconds without keep alive, finally http client are > refused to connect from the squid( OS ). > Do you know any other ideas? > Did anyone

Re: [squid-users] HTTPS proxy

2008-02-26 Thread Alex Rousskov
On Tue, 2008-02-19 at 15:38 -0300, Marcus Kool wrote: > > Matus UHLAR - fantomas wrote: > > On 17.02.08 18:10, Sam Przyswa wrote: > >> We use Squid and SquidGuard to control webmails access, that work fine, > >> but for those who use HTTPS protocole Squid/SquidGuard doesn't operate. > >> Is it a

Re: [squid-users] Squid meetup in london

2008-02-26 Thread Mark Nottingham
Is this going to be a semi-regular event? I'd be interested in participating in the future, but need more lead time to arrange travel... Cheers, On 27/02/2008, at 7:35 AM, Robert Collins wrote: I'm very happy to announce that Canonical are hosting a squid meetup in London this coming Sa

[squid-users] Squid-2, Squid-3, roadmap

2008-02-26 Thread Mark Nottingham
Hello Squid folk, I maintain Yahoo!'s internal build of Squid, and serve as a resource for the various Y! properties that use it. We currently only use Squid-2, and don't have plans to migrate to Squid-3; although ESI, ICAP as well as eCAP look interesting, there are too many critical fea

Re: [squid-users] SARG - deny_info problem

2008-02-26 Thread Amos Jeffries
> eXtremer wrote: >> Hi all. >> A few days ago my server died, yesterday I installed and configured >> again. >> all fine except one deny_info. >> Here is my config: >> >> acl adv url_regex -i "/etc/squid/deny/banner.block" >> >> http_access deny adv >> deny_info http://192.168.1.50/spam/nospam.gif

Re: [squid-users] High CPU usage and degraded service time after 2 weeks of activity

2008-02-26 Thread Guillaume Smet
On Wed, Feb 27, 2008 at 12:22 AM, leongmzlist <[EMAIL PROTECTED]> wrote: > What is the swap usage? I once had the same problem w/ squid > degrading over time. I had to reduce the cache_mem from 2GB to > 512MB, and reduce the amount of objects in the cache since the index > was growing too big.

[squid-users] storeurl_rewrite_program children increases after log rotated

2008-02-26 Thread Siu Kin LAM
Hi all I have installed the squid2.7 intpo a CentOS release 4.5 for evaluation. I have enabled the "storeurl" feature. However, I found the children of "storeurl_rewrite_program" increased after ran "squid -k rotate". for example [0225]# ps -ef | grep store_url_rewrite nobody 27759 24942 0

[squid-users] slow browsing when IE6 with squid v2.7

2008-02-26 Thread Siu Kin LAM
Dear all I have setup a squid 2.7 environment. When browsing some pages with embedded XML, the browser would hold for around 2 seconds, even sometimes timeout. I found this problem occurs when using IE6 with squid 2.7 only. Browsing with IE6 with squid 2.6stable6 works fine. Also, browsing with

RE: [squid-users] round robin DNS and the occassional failing IP.

2008-02-26 Thread Adam Carter
> dig +recurse +additional +authority +notrace A google.com.au > (which I freely admit I could be using wrong, or my upstream > ncsd server > on the host I am on now and exhibited these problems before, > could be silly) I think it would be highly unlikely that google would be advertising a dead

Re: [squid-users] Getting Real Player to work with LDAP Authenticated Proxy

2008-02-26 Thread Brett Lymn
On Tue, Feb 26, 2008 at 07:42:48AM +, Hubert Asior wrote: > > Can someone help me solve this problem so that it affects all > streaming media players and not just Real Player. > Yes. I have yet to see a media player that actually conforms to the HTTP specification and properly handles an

Re: [squid-users] High CPU usage and degraded service time after 2 weeks of activity

2008-02-26 Thread leongmzlist
What is the swap usage? I once had the same problem w/ squid degrading over time. I had to reduce the cache_mem from 2GB to 512MB, and reduce the amount of objects in the cache since the index was growing too big. mike At 11:35 AM 2/26/2008, Guillaume Smet wrote: Hi squid-users, We recen

Re: [squid-users] SARG - deny_info problem

2008-02-26 Thread martin perner
eXtremer wrote: Hi all. A few days ago my server died, yesterday I installed and configured again. all fine except one deny_info. Here is my config: acl adv url_regex -i "/etc/squid/deny/banner.block" http_access deny adv deny_info http://192.168.1.50/spam/nospam.gif adv when trying to use the

Re: [squid-users] Multiple hosts with cache_peer and urlpath_regex

2008-02-26 Thread Amos Jeffries
Chris Malek wrote: Well...thank you for your suggestions, but i still have the same problem. In the cache.log everything looks OK except this one line: icmpSend: send: (111) Connection refused Ah, your pinger helper is not working. You may need to go to the dir you built squid and run "mak

Re: [squid-users] TCP_DENIED for www2 address

2008-02-26 Thread Amos Jeffries
Rebecca Pakish Crum wrote: Hi all - I'm running an older version of squid (squid/2.5.STABLE10) on a Fedora Core box. Usually I have no problems, but one of my end-users is clicking on a link on a county website that takes them (or tries to take them) to www2.madisoncountyindiana.org:450/.. I

Re: [squid-users] Why squid -z

2008-02-26 Thread Ric
On Feb 26, 2008, at 2:25 AM, Angela Williams wrote: On Tuesday 26 February 2008, Ric wrote: I'm wondering why we require "squid -z" before starting up Squid for the first time. Is there some reason why Squid shouldn't do this automatically when necessary? Just a simple scenario? I use a sep

[squid-users] Squid meetup in london

2008-02-26 Thread Robert Collins
I'm very happy to announce that Canonical are hosting a squid meetup in London this coming Saturday and Sunday the 1st and 2nd of March. Any *developers* (in the broad sense - folk doing coding/testing/documenting/community support/) are very welcome to attend. As it is a weekend and a security off

[squid-users] Squid + SquidGuard not showing some pages styles

2008-02-26 Thread Webster
Hi there !! We are using Squid + SquidGuard over Fedora core 6 for more than a year without any issue, but once in a while some sites are not shown as expected. For example now the cnn website edition.cnn.com is not being presented as expected. Looking at the page I noticed that the html page sty

[squid-users] High CPU usage and degraded service time after 2 weeks of activity

2008-02-26 Thread Guillaume Smet
Hi squid-users, We recently experienced a problem on our new Squid setup (2 Squid servers configured as reverse proxy - mostly the same configuration as before except we allocated more memory and disk on the new servers - the old boxes didn't have this problem). After 2 weeks of very good performa

[squid-users] Problem with Citrix and Squid 3 as Reverse Proxy

2008-02-26 Thread Kaddu, Patrick
Hello everybody, We try to replace the old NFUSE Reverse Proxy with Squid 3.0, the most BackendServer work fine (OWA, IIS, Cognos), but only Citrix wont work. We can reach the WI interface and the Applications are shown, but when you try to start any application in WI, we get a timeout. This Mess

[squid-users] wccp v2 and cisco working info

2008-02-26 Thread Ritter, Nicholas
I have complete testing of our squid implementation...here is the Cisco information for the wiki. Unless someone objects, Iwould like to submit a detailed howto to squid-cache.org for CentOS 5.1 deployment. This solution is working VERY well. Special thanks to all of those on this list who gave s

Re: [squid-users] Multiple hosts with cache_peer and urlpath_regex

2008-02-26 Thread Chris Malek
Well...thank you for your suggestions, but i still have the same problem. In the cache.log everything looks OK except this one line: icmpSend: send: (111) Connection refused Below are all the things that I have added to the squid.conf Maybe there is some crucial mistake that squid newbie can't

[squid-users] TCP_DENIED for www2 address

2008-02-26 Thread Rebecca Pakish Crum
Hi all - I'm running an older version of squid (squid/2.5.STABLE10) on a Fedora Core box. Usually I have no problems, but one of my end-users is clicking on a link on a county website that takes them (or tries to take them) to www2.madisoncountyindiana.org:450/.. I'm getting TCP_DENIED:NONE in

[squid-users] Auth Helpers in Squid 3.0

2008-02-26 Thread Dave Coventry
Hi, I've downloaded and compiled Squid3.0_STABLE1. The various Howtos suggest that the User Authentication programs like pam_auth need to be compiled seperatley. Any suggestions on how to do this with PAM? Alternatively, I see that I should have compiled squid with the authentication scheme --e

[squid-users] CARP and Multicast...

2008-02-26 Thread Andy McCall
Hi Folks, I posted to this list a few weeks ago, and have had time to get around to reading more of the squid manuals I have two identical Ubuntu Linux 6.06.2 LTS based Squid servers caching for two Web Marshal server front ends. The Web Marshal servers are load balanced using Windows Network

Re: [squid-users] round robin DNS and the occassional failing IP.

2008-02-26 Thread Tim Connors
On Mon, 25 Feb 2008, Henrik Nordström wrote: > mån 2008-02-25 klockan 17:30 +1100 skrev Tim Connors: > > > So it's already meant to be doing this (by caching bad status, I presume > > you mean it doesn't keep trying that ip?)? Is that perhaps in the 3.x > > branch? One host that has this wron

Re: [squid-users] Why squid -z

2008-02-26 Thread Angela Williams
On Tuesday 26 February 2008, Ric wrote: > I'm wondering why we require "squid -z" before starting up Squid for > the first time. Is there some reason why Squid shouldn't do this > automatically when necessary? Just a simple scenario? I use a separate cache file system for all my many squid boxes.

Re: [squid-users] Multiple hosts with cache_peer and urlpath_regex

2008-02-26 Thread J. Peng
On Tue, Feb 26, 2008 at 11:02 AM, Ric <[EMAIL PROTECTED]> wrote: > > > Is never_direct really necessary in the accelerator mode? > > Ric > I didn't use it at my squid.conf. I have only a original server, don't have parent cache etc.

[squid-users] Problems Accessing Certain Sites

2008-02-26 Thread Mike.Peters
Hi, I'm having problems accessing a certain site, namely partner.microsoft.com, when using Squid. If I bypass Squid I can access the site. I had no problems accessing this site up until last Friday. The initial login page loads, but I get a DNS error when trying to get to the Partner Dashboard. I'

RE: [squid-users] Redirection

2008-02-26 Thread Mark Barlow
Slight mistake in my earlier reply. It's still early and I was on my first cup of coffee. The acl should be acl blocked url_regex -I "" The simplest way of doing this would be to create an acl for your black list something like acl blocked / and then put an http_access deny blocked near the t

RE: [squid-users] WCCP2 + Cisco ASA + FreeBSD 6.3, gmail and hotmail not working

2008-02-26 Thread Miraj Shah
Hi all, I made progress to get this to work. Thanks to Adrian's suggestion :-) http_port 127.0.0.1:3128 transparent disable-pmtu-discovery=always Kind Regards, Miraj Shah. -Original Message- From: Miraj Shah [mailto:[EMAIL PROTECTED] Sent: Friday, February 15, 2008 4:34 PM To: squi

RE: [squid-users] Redirection

2008-02-26 Thread Mark Barlow
The simplest way of doing this would be to create an acl for your black list something like acl blocked / and then put an http_access deny blocked near the top of the access rules. However, if your blacklist is very long, you will find that squid starts running slower and takes more memory as it h

[squid-users] Authentication error page

2008-02-26 Thread Mark Barlow

Re: [squid-users] problem with wccp v2 and cisco

2008-02-26 Thread Manoj_Rajkarnikar
On Mon, 25 Feb 2008, Adrian Chadd wrote: On Mon, Feb 25, 2008, Manoj_Rajkarnikar wrote: I have much simpler setup working on CentOS x86_64 2.6.23 and cisco 7204VXR IOS version 12.2(46a). squid version 2.6 STABLE17: Which IOS release specifically? Could you throw me a "show version" ? Sure.

Re: [squid-users] HTTPS proxy

2008-02-26 Thread Matus UHLAR - fantomas
> >On 17.02.08 18:10, Sam Przyswa wrote: > >>We use Squid and SquidGuard to control webmails access, that work fine, > >>but for those who use HTTPS protocole Squid/SquidGuard doesn't operate. > >>Is it a way to control HTTPS as well HTTP trafic ? > Matus UHLAR - fantomas wrote: > >no. the HTTPS t

[squid-users] Getting Real Player to work with LDAP Authenticated Proxy

2008-02-26 Thread Hubert Asior
Hi, I have an LDAP authenticated Squid proxy server. I have blocked all traffic from leaving my network except through the proxy server. My clients use a proxy.pac file. My problem is that some clients have complained that they can not have access to streaming pod casts using Real Player.

RE: [squid-users] I want to purge too many TIME_WAITs immediatelyafter closing HTTP port.

2008-02-26 Thread Adam Carter
It sounds like the problem is source port exhaustion, for the outgoing sessions that squid creates. > Why do you consider the TIME_WAIT as such to be a problem? There is no > significant problem to have some hundreds of thousand > TIME_WAIT sockets on a server port. Wouldn't there be a 65,536 li

Re: [squid-users] Re: why so many MISS?

2008-02-26 Thread Adrian Chadd
On Tue, Feb 26, 2008, J. Peng wrote: > On Mon, Feb 25, 2008 at 8:19 PM, Adrian Chadd <[EMAIL PROTECTED]> wrote: > > If you think so then please submit a bugzilla bug. > > > > Just be sure to turn on header logging and log the request and reply > > headers in the access.log . > > How to turn on i

Re: [squid-users] FTP access configuration

2008-02-26 Thread Arun Shrimali
On Mon, Feb 25, 2008 at 6:03 PM, Henrik Nordström <[EMAIL PROTECTED]> wrote: > > mån 2008-02-25 klockan 13:57 +0530 skrev Arun Shrimali: > > > > I have tried the said method also ftp://[EMAIL PROTECTED]/, but I found > the > > following error ( I have the ftp username as reso.ac.in) > > > >

Re: [squid-users] problem with wccp v2 and cisco

2008-02-26 Thread Daniel Rose
Ritter, Nicholas wrote: Regarding the gre tunnel, does the IP address on the the gre0 interface have to be unique, or can it be the same address, or a dot1q trunked address? I was hoping to use one physical network interface to do the GRE tunnel and the squid daemon. This would require subinter

Re: [squid-users] Multiple hosts with cache_peer and urlpath_regex

2008-02-26 Thread Ric
On Feb 25, 2008, at 2:01 PM, Amos Jeffries wrote: Chris Malek wrote: Hello squid users, I'm a bit puzzled here. I was recently asked to setup a squid box with the following requirements: when people would hit http://example.com/srv1 that request should go to server1 and http://example.co

Re: [squid-users] problem with wccp v2 and cisco

2008-02-26 Thread Adrian Chadd
On Mon, Feb 25, 2008, Ritter, Nicholas wrote: > > Regarding the gre tunnel, does the IP address on the the gre0 interface > have to be unique, or can it be the same address, or a dot1q trunked > address? I was hoping to use one physical network interface to do the > GRE tunnel and the squid daemo