[squid-users] Cache issue

2008-03-20 Thread Tarak Ranjan
Hi Friends, i have one issue regarding squid cache. i'm clearing the cache squid -k shutdown cd /cache rm -rf * squid -z squid -k start but the issue is when i'm starting squid the cache is as it is same, before that i confirmed in /cache dir, that was empty . what could be the issue /\

RE: [squid-users] Squid2-only plugin from Secure Computing

2008-03-20 Thread Adam Carter
I would be happy to try to resolve this issue with Secure Computing. However, I need more information: - What exactly is the Secure Computing plugin that supports Squid2 and does not support Squid3? Does it have a name and a version number? I think SmartFilter patches the squid source, so is

Re: [squid-users] rewrite URLs (was hope squid provide development API)

2008-03-20 Thread Ric
On Mar 8, 2008, at 2:30 AM, Adrian Chadd wrote: On Sat, Mar 08, 2008, J. Peng wrote: like, rewrite the uri based on the request headers. I'm -reasonably- certain the stuff I committed from Gonzalo to Squid-2.HEAD last week included a patchset which can do just that. I'm not sure how

Re: [squid-users] rewrite URLs (was hope squid provide development API)

2008-03-20 Thread Adrian Chadd
Not at the moment; another developer submitted the work and the only documentation is what he submitted with it (in cf.data.pre; which becomes squid.conf.default.) It won't appear in Squid-2.7 until its been tested further. Adrian On Thu, Mar 20, 2008, Ric wrote: On Mar 8, 2008, at 2:30

Re: [squid-users] rewrite URLs (was hope squid provide development API)

2008-03-20 Thread J. Peng
On Thu, Mar 20, 2008 at 3:01 PM, Ric [EMAIL PROTECTED] wrote: This looks interesting. Am I understanding this correctly that Squid HEAD can now rewrite urls without an external application? Any ideas how this might compare performance-wise against a dedicated external app like squidGuard

RE: [squid-users] squid_ldap_group

2008-03-20 Thread Dmitry SUROVTSEV
Ok, thank you for explanation. But I still do not understand why squid_ldap_group does not work without -R option. And how to force it to make a real request to PDC, not just serch top-level groups... Best Regards, Dmitry Surovtsev - Дмитрий Суровцев Credit Europe Bank - Кредит Европа Банк

[squid-users] Digest auth doesn't work anymore

2008-03-20 Thread Ralf Hildebrandt
Version: ii squid3 3.0.STABLE2-1 A full featured Web Proxy cache (HTTP proxy) The Problem: Digest auth doesn't work anymore The users aren't even being asked for a username/password. All they get is a rejection page (access denied). In the log I get: 1205999382.801 0

Re: [squid-users] Cache issue

2008-03-20 Thread Amos Jeffries
Tarak Ranjan wrote: Hi Friends, i have one issue regarding squid cache. i'm clearing the cache First problem: why are you doing this? What has gone so massively wrong that its needed? squid -k shutdown cd /cache rm -rf * Risky. Safer to go: rm -rf /cache/* Or other options in:

Re: [squid-users] Digest auth doesn't work anymore

2008-03-20 Thread Amos Jeffries
Ralf Hildebrandt wrote: Version: ii squid3 3.0.STABLE2-1 A full featured Web Proxy cache (HTTP proxy) The Problem: Digest auth doesn't work anymore The users aren't even being asked for a username/password. All they get is a rejection page (access denied). In the log I get:

Re: [squid-users] Cache issue

2008-03-20 Thread Tarak Ranjan
On Thu, 2008-03-20 at 23:56 +1300, Amos Jeffries wrote: Tarak Ranjan wrote: Hi Friends, i have one issue regarding squid cache. i'm clearing the cache First problem: why are you doing this? What has gone so massively wrong that its needed? squid -k shutdown cd /cache rm -rf *

Re: [squid-users] Cache issue

2008-03-20 Thread Amos Jeffries
Tarak Ranjan wrote: On Thu, 2008-03-20 at 23:56 +1300, Amos Jeffries wrote: Tarak Ranjan wrote: Hi Friends, i have one issue regarding squid cache. i'm clearing the cache First problem: why are you doing this? What has gone so massively wrong that its needed? squid -k shutdown cd /cache rm

[squid-users] Outlook Express unable to download mail (POP3)

2008-03-20 Thread kenny
Hi all, i am new for squid, i am using squid version 2.6 STABLE 8. i able to setup the proxy server with squid, my user able to use IE to surf net by using my proxy server. BUT my problem is when i wan to use Outlook Express to download my mail, the Outlook popup a msg said that unable to find

Re: [squid-users] What exactly makes accelerator mode faster then transparent mode ?

2008-03-20 Thread Raemaekers Mark
Thank you Amos, Suppose that I have to put a WC in front of ONLY ONE HTTP server and both WC and web server are behind a load balancer, so the clients will never see whether traffic comes from a WC or from the server, anyway. What mode of WC (so transparent or accelerator) will give me the best

Re: [squid-users] CentOS 5.1, Squid, PIX WCCP

2008-03-20 Thread Dennis B. Hopp
Quoting Adrian Chadd [EMAIL PROTECTED]: Could you ask Cisco TAC if there are any bug id's relating to WCCP between your previous and current versions? I haven't had a chance to call them but in the release notes for 7.2(3) there is this: CSCsi52370 WCCP may result in 1550 block

[squid-users] Re: Not seeing internal icons

2008-03-20 Thread RW
On Thu, 20 Mar 2008 06:01:57 +0100 Henrik Nordstrom [EMAIL PROTECTED] wrote: On Tue, 2008-03-18 at 13:43 +, RW wrote: I don't have any of the internal icons showing in browsers. With wget -S, I'm seeing a 404 and X-Squid-Error: ERR_INVALID_REQ 0 on the icon urls. Seems to work

Re: [squid-users] Digest auth doesn't work anymore

2008-03-20 Thread Ralf Hildebrandt
Sounds like bug 2206. It is. Has the temporary fix patch for that been applied? No. http://www.squid-cache.org/bugs/show_bug.cgi?id=2206 I downgraded. -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450

Re: [squid-users] debugging ACLs

2008-03-20 Thread paul cooper
ive got it configured like this logformat squid %tl %ru %Ss %ru %un %ul %ue %ea external_acl_type ip_user_helper %SRC %LOGIN /usr/libexec/squid/ip_user_check -f /etc/squid/ip_user.conf [EMAIL PROTECTED] ~ $ cat /etc/squid/ip_user.conf 127.0.0.1 ALL hepworth squid # cat

Re: [squid-users] Re: Logging/Blocking URLs with question marks ?

2008-03-20 Thread Matus UHLAR - fantomas
so for example searches on google do not show the full URL. On 18.03.08 13:07, RW wrote: I don't know much about 2.5 but in up-to-date versions, logging of query urls is governed by strip_query_terms. By default it's on to avoid logging things like session IDs. it's called privacy :) On

Re: [squid-users] What exactly makes accelerator mode faster then transparent mode ?

2008-03-20 Thread Matus UHLAR - fantomas
On 20.03.08 12:14, Amos Jeffries wrote: proxy - software that sits between a web server and a web-client with purpose of resource saving or improving web service to the clients. intercepting proxy - software that performs as a proxy, but additionally can handle traffic redirected to it by

Re: [squid-users] Squid Future (was Re: [squid-users] Squid-2, Squid-3, roadmap)

2008-03-20 Thread Chris Woodfield
For our purposes (reverse proxy usage) we don't see any missing features from squid 3 that we would need - however, we'd like to see the code base mature some more before we trust it in production. Same reason that smart folks don't deploy new Cisco IOS trains until it hits the 3rd or 4th

Re: [squid-users] Cache issue

2008-03-20 Thread Matus UHLAR - fantomas
Tarak Ranjan wrote: i have one issue regarding squid cache. i'm clearing the cache On Thu, 2008-03-20 at 23:56 +1300, Amos Jeffries wrote: First problem: why are you doing this? What has gone so massively wrong that its needed? squid -z but the issue is when i'm starting squid

Re: [squid-users] Outlook Express unable to download mail (POP3)

2008-03-20 Thread Matus UHLAR - fantomas
On 20.03.08 20:14, [EMAIL PROTECTED] wrote: i am new for squid, i am using squid version 2.6 STABLE 8. i able to setup the proxy server with squid, my user able to use IE to surf net by using my proxy server. BUT my problem is when i wan to use Outlook Express to download my mail, the

[squid-users] Simple ACL entry to allow access to LAN intranet?

2008-03-20 Thread Ed Flecko
Hi folks, I'm trying to create a simple entry to allow access to my LAN web server, but darned if I can figure it out. I've tried all of the variations that I can thinnk of but no luck. Here's my acl entries: acl lan src 192.168.1.0/25 acl Intranet dstdomain intranet.int acl lan-intranet dst

RE: [squid-users] ntlm_auth seems to have losts it mind

2008-03-20 Thread Henrik Nordstrom
On Wed, 2008-03-19 at 23:49 -0400, Martin, Jeremy wrote: Ok, #1 should be all set wbinfo -t -g -u all work correctly #2,3 should be all set (did not work so I went as far as making the squid user and squid group owner of the folder and all the children and assigning 777 for the permissions,

Re: [squid-users] Re: Not seeing internal icons

2008-03-20 Thread Henrik Nordstrom
On Thu, 2008-03-20 at 13:09 +, RW wrote: I posted my squid.conf file in a previous reply, if it's any help. I don't save old messages. Do you use append_domain? Regards Henrik

Re: [squid-users] What exactly makes accelerator mode faster then transparent mode ?

2008-03-20 Thread Henrik Nordstrom
On Thu, 2008-03-20 at 05:31 -0700, Raemaekers Mark wrote: What mode of WC (so transparent or accelerator) will give me the best performance and why ? Or is there no difference with respect to performance ? The different modes is not about performance but different use cases. accelerator or

Re: [squid-users] bypass parent proxy for some urls - dstdomains

2008-03-20 Thread Chris Robertson
Paul Anderson wrote: Hello, I appologize if this has been answered before, but I have been unable to find anything. I am trying to set up the following: Lan - Squid - Parent Proxy (ISP) I have basically added the following lines to squid.conf file cache_peer parentcache.foo.com parent

Re: [squid-users] debugging ACLs

2008-03-20 Thread Henrik Nordstrom
On Thu, 2008-03-20 at 14:15 +, paul cooper wrote: ive got it configured like this logformat squid %tl %ru %Ss %ru %un %ul %ue %ea external_acl_type ip_user_helper %SRC %LOGIN /usr/libexec/squid/ip_user_check -f /etc/squid/ip_user.conf Are you sure that helper should use %LOGIN?

Re: [squid-users] Simple ACL entry to allow access to LAN intranet?

2008-03-20 Thread Henrik Nordstrom
On Thu, 2008-03-20 at 13:59 -0700, Ed Flecko wrote: I have my browser set to bypass local addresses and I'm stumped. Internet traffic works fine, but I can't get to my internal web server. So what happens? Regards Henrik

RE: [squid-users] squid_ldap_group

2008-03-20 Thread Henrik Nordstrom
On Thu, 2008-03-20 at 10:39 +0200, Dmitry SUROVTSEV wrote: Ok, thank you for explanation. But I still do not understand why squid_ldap_group does not work without -R option. And how to force it to make a real request to PDC, not just serch top-level groups... Here is some speculations: a)

Re: [squid-users] debugging ACLs

2008-03-20 Thread p cooper
Henrik Nordstrom wrote: On Thu, 2008-03-20 at 14:15 +, paul cooper wrote: ive got it configured like this logformat squid %tl %ru %Ss %ru %un %ul %ue %ea external_acl_type ip_user_helper %SRC %LOGIN /usr/libexec/squid/ip_user_check -f /etc/squid/ip_user.conf Are you

[squid-users] Re: Simple ACL entry to allow access to LAN intranet?

2008-03-20 Thread Ed Flecko
I get a The requested URL could not be retrieved While trying to retrieve the URL: http://intranet.int/ The following error was encountered: Unable to determine IP address from host name for intranet.int The

Re: [squid-users] Help needed

2008-03-20 Thread Chris Robertson
Siju John wrote: Hi, I am planning to configure Squid in a pass through ssl mode where the SSL negotiations should be handled by the end servers. Squid, as an accelerator, can't tunnel SSL traffic. You are going to have to terminate the SSL connection at squid, and then have it open a new

Re: [squid-users] Squid/Samba authenication with wrong username

2008-03-20 Thread Chris Robertson
Leach, Shane - MIS Laptop wrote: I currently have Samba 3.028 and Squid 7:2.6Stable set up to authenticate Active Directory users to the proxy server. I want the proxy to be transparent though and it is not. While testing some ideas I found on the Internet, I tried the following command:

Re: [squid-users] squid (Software caused connection abort)

2008-03-20 Thread Chris Robertson
humberto wrote: Hi everybody: My squid server sometimes give me connections problems, after the execution of periodic daily in my cache logs appear this lines: Mar 12 03:01:11 ac-ciencia squid[662]: comm_accept: FD 16: (53) Software caused connection abort Mar 12 03:01:11 ac-ciencia

Re: [squid-users] getting getpwnam basic authentication working

2008-03-20 Thread Chris Robertson
p cooper wrote: Ive volunteered to setup one machine with 4 logins + content filtering/time based ACL for the 2 children to replace ( and improve on ) my sisters' dying winXP machine. I want to use basic authentication ( less work for me and i think) and none are particularly computer

Re: [squid-users] Confusing redirection behaviour

2008-03-20 Thread Chris Robertson
Dave Coventry wrote: In an attempt to generate a login page I was previously using external_acl_type to define a helper program to define my acl, and then using deny_info to define a logon page for my users. This failed because the redirected page did not appear to use it's own URL as it's root

[squid-users] ICAP server failed to open files

2008-03-20 Thread John Mok
Hi, I have successfully setup c-icap + squid 3.0 on Ubuntu 6.06.2 LTS server, and passed EICAR test. However, when the client PC tried to download a EXE file, or download via Applet-based download manager, squid displayed the viralator page and failed to return the downloaded files. I

Re: [squid-users] Using multiple auth scheme types in one squid instance?

2008-03-20 Thread Chris Robertson
Adrian wrote: On Mon, Mar 17, 2008 at 9:25 PM, Amos Jeffries [EMAIL PROTECTED] wrote: Squid does not differentiate the types of auth a user has done. It tries all methods its configured with (in the order configured) until one succeeds. The common way to do this appears to be to use the

Re: [squid-users] TCP_HIT and TCP_MISS

2008-03-20 Thread Chris Robertson
Guillaume Chartrand wrote: I try the solution on the other post to increase file descriptor I have 4096 when I do a ulimit -n I recompile squid Here what I have when I run squid -v Squid Cache: Version 2.6.STABLE12 configure options: No configure options at all? The default (last I

Re: [squid-users] you tube +delay pool

2008-03-20 Thread Chris Robertson
s f wrote: Hello, I am trying to put you tube and other flv videos in delay pool acl flvvideo rep_mime_type video/flv delay_access 1 allow flvvideo our_networks But its not working. How can I do that? That looks like a good start, but without context. How is the delay pool set up? Do

[squid-users] Re: Not seeing internal icons

2008-03-20 Thread RW
On Thu, 20 Mar 2008 22:39:55 +0100 Henrik Nordstrom [EMAIL PROTECTED] wrote: On Thu, 2008-03-20 at 13:09 +, RW wrote: I posted my squid.conf file in a previous reply, if it's any help. I don't save old messages. http://permalink.gmane.org/gmane.comp.web.squid.general/65617 Do you

Re: [squid-users] Support for NTLM web authentication on squid 3.0

2008-03-20 Thread Chris Robertson
Alex Rousskov wrote: On Wed, 2008-03-19 at 21:18 +0800, John Mok wrote: Is it necessary to do all these stuffs (kerberos + samba) on squid3.0? On my current squid-2.6 setup, the NTLM web authentication worked out of the box, that squid proxied the CHAP back and forth from the web server

[squid-users] cache deny and the 'public' token

2008-03-20 Thread Ric
In reverse-proxy setup, I would like to prevent requests authenticated via cookies from being cached while retaining the ability of the Cache- Control: public token to override this behavior as if were a regular authenticated request. Will the following work? acl public rep_header

[squid-users] squid fails

2008-03-20 Thread troxlinux
I have problems with squid squid-2.6.STABLE14-23.2 , by moments the connection fails and I see in log this message TCP_MISS/503, and firefox says that it could not connect, I to me I also have implemented nat ERROR The requested URL could not be retrieved

Re: [squid-users] Re: Logging/Blocking URLs with question marks ?

2008-03-20 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: so for example searches on google do not show the full URL. On 18.03.08 13:07, RW wrote: I don't know much about 2.5 but in up-to-date versions, logging of query urls is governed by strip_query_terms. By default it's on to avoid logging things like session IDs.

Re: [squid-users] squid fails

2008-03-20 Thread Amos Jeffries
troxlinux wrote: I have problems with squid squid-2.6.STABLE14-23.2 , by moments the connection fails and I see in log this message TCP_MISS/503, and firefox says that it could not connect, I to me I also have implemented nat 23.2 looks like a highly patched old version of squid. Please try

Re: [squid-users] Re: Simple ACL entry to allow access to LAN intranet?

2008-03-20 Thread Amos Jeffries
Ed Flecko wrote: I get a The requested URL could not be retrieved While trying to retrieve the URL: http://intranet.int/ The following error was encountered: Unable to determine IP address from host name for

Re: [squid-users] What exactly makes accelerator mode faster then transparent mode ?

2008-03-20 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: On 20.03.08 12:14, Amos Jeffries wrote: proxy - software that sits between a web server and a web-client with purpose of resource saving or improving web service to the clients. intercepting proxy - software that performs as a proxy, but additionally can handle