Re: [squid-users] bug? (was cache deny and the 'public' token)

2008-03-25 Thread Henrik Nordstrom
On Mon, 2008-03-24 at 11:44 -0700, Ric wrote: Yes, I realize this. Unless we authenticate using one of the Authenticated header methods, it seems that we have to be careful not to try caching split views in standard proxies. Even then you have the same problem. A public response is a

Re: [squid-users] How can I tell if snmp has been compiled into Squid?

2008-03-25 Thread Cassiano Martin
Try squid -v It should report configure parameters Ed Flecko escreveu: Hi folks, I'm running OpenBSD 4.2 and have installed the Squid package using the pkg_add method. I'm trying to set up snmp monitoring with no success. I keep getting a Invalid ACL type 'snmp_community error message, so now

Re: [squid-users] How can I tell if snmp has been compiled into Squid?

2008-03-25 Thread s f
Hi, Try squid -v On 3/25/08, Ed Flecko [EMAIL PROTECTED] wrote: Hi folks, I'm running OpenBSD 4.2 and have installed the Squid package using the pkg_add method. I'm trying to set up snmp monitoring with no success. I keep getting a Invalid ACL type 'snmp_community error message, so now I'm

RE: [squid-users] BYPASS UPON FAILURE

2008-03-25 Thread Sadiq Walji
Thanks very much guys... as I mentioned, I am new to this and will therefore try it out with a colleague who knows squid well. Will get back if anything. Thanks once again. -Original Message- From: ian j hart [mailto:[EMAIL PROTECTED] Sent: Sunday, March 23, 2008 3:04 PM To:

RE: [squid-users] How can I tell if snmp has been compiled intoSquid?

2008-03-25 Thread Adam Carter
Is there a command I can run on Squid to see what options have been compiled in? Run squid -v and look for '--enable-snmp' in the output

Re: [squid-users] squid behind ziproxy ?

2008-03-25 Thread Amos Jeffries
Michael Gale wrote: Hello, I guess I should of also asked if ziproxy could exist between the squid cache #1 system and squid cache #2 system. I initially ruled this out ... I figured that when the squid servers talk to one another that it would not be HTTP. But I guess it could be ?

Re: [squid-users] Hardware setup ?

2008-03-25 Thread Adrian Chadd
On Mon, Mar 24, 2008, Michael Gale wrote: Hey, We are working on our hardware requirements and am looking for some feedback. Please let me know what you think: Demand: - 225 requests per second during peak times in 2008. So we are plaining for 300 RPS minimal per server. Ideally

Re: [squid-users] Streaming audio burps

2008-03-25 Thread Adrian Chadd
G'day, Its a miracle that streaming media (With whatever quality of service issues it has) works through Squid. Squid does things best effort, and doesn't try to schedule IO between peers in any guaranteed way. That said, if there's an issue with streaming data going through it then I'd point my

Re: [squid-users] you tube +delay pool

2008-03-25 Thread Chris Robertson
Amos Jeffries wrote: Chris Robertson wrote: s f wrote: hi, here is the things u mentioned acl our_networks src x.x.x.x/x delay_pools 1 delay_class 1 2 delay_parameters 1 -1/-1 2048/8000 #delay_parameters 1 4096/8000 acl dp url_regex -i \.mp3$ \.wmv$ \.avi$ \.wma$ \.mpe?g$ acl dp1

Re: [squid-users] How squid does Src/Dst IP address matching

2008-03-25 Thread Amos Jeffries
Adrian Chadd wrote: On Mon, Mar 24, 2008, Saurabh Agarwal wrote: I understand the security concern, but if squid is accessed by Users only within the company and company's intranet is secure enough, then it is an overkill as DNS is performed twice(Squid being used in transparent mode), once by

Re: [squid-users] ACLs and localhost

2008-03-25 Thread Amos Jeffries
paul cooper wrote: there is something in all this i really am not understanding.Sorry to be so stupid. AIUI now, it looks at the ACLs and processes them until it finds one that matches, and then it stops matching them and allows access. It will only deny a page when its has processed all the

Re: [squid-users] Hardware setup ?

2008-03-25 Thread Frog
Hey, We are working on our hardware requirements and am looking for some feedback. Please let me know what you think: We currently are planing on two servers being available behind an LVS router. These two servers will speak with a squid instance at each location so some form of

Re: [squid-users] you tube +delay pool

2008-03-25 Thread Amos Jeffries
Chris Robertson wrote: s f wrote: hi, here is the things u mentioned acl our_networks src x.x.x.x/x delay_pools 1 delay_class 1 2 delay_parameters 1 -1/-1 2048/8000 #delay_parameters 1 4096/8000 acl dp url_regex -i \.mp3$ \.wmv$ \.avi$ \.wma$ \.mpe?g$ acl dp1 rep_mime_type video/flv #acl

Re: [squid-users] adjacency issues with Cisco devices and WCCP

2008-03-25 Thread Adrian Chadd
* You want to use L2, not GRE, on the Sup720 * .. this requires L2 adjacency, and no GRE tunnel * You also want to use Mask, not Hash assignment. So please, please don't use GRE with a Sup720. Adrian On Mon, Mar 24, 2008, Ritter, Nicholas wrote: I am having an adjacency issue with Cisco

Re: [squid-users] Hardware setup ?

2008-03-25 Thread Amos Jeffries
Michael Gale wrote: Hey, We are working on our hardware requirements and am looking for some feedback. Please let me know what you think: Demand: - 225 requests per second during peak times in 2008. So we are plaining for 300 RPS minimal per server. Ideally if each server could handle

Re: [squid-users] How can I tell if snmp has been compiled into Squid?

2008-03-25 Thread Chris Robertson
Ed Flecko wrote: Hi folks, I'm running OpenBSD 4.2 and have installed the Squid package using the pkg_add method. I'm trying to set up snmp monitoring with no success. I keep getting a Invalid ACL type 'snmp_community error message, so now I'm wondering if snmp has been compiled in. Is there a

Re: [squid-users] How can I tell if snmp has been compiled into Squid?

2008-03-25 Thread Amos Jeffries
Ed Flecko wrote: Hi folks, I'm running OpenBSD 4.2 and have installed the Squid package using the pkg_add method. I'm trying to set up snmp monitoring with no success. I keep getting a Invalid ACL type 'snmp_community error message, so now I'm wondering if snmp has been compiled in. Is there a

Re: [squid-users] Bypass tools that works with squid

2008-03-25 Thread Henrik Nordstrom
On Mon, 2008-03-24 at 13:16 +0630, Mr Crack wrote: Is there any way in squid to bypass some sites that are banned by firewall or special tools as squid-plug in ...? Because ISP banned some sites such as GMail I dont want to use Windows software e.g. YourFreedom, UltraSurf I want to

Re: [squid-users] Squid + ClamAV

2008-03-25 Thread Henrik Nordstrom
On Mon, 2008-03-24 at 11:42 +0530, Tarak Ranjan wrote: Hi List, Has anyone done the integration of ClamAV in Squid My recommended method: Squid-3 + c-icap There is other methods as well such as viralator, but ICAP is much better. Regards Henrik

RE: [squid-users] How can I tell if snmp has been compiled into Squid?

2008-03-25 Thread Nick Duda
Amos, It's a lowercase v , not uppercase V (at least in 2.6) ./squid -v -Original Message- From: Amos Jeffries [mailto:[EMAIL PROTECTED] Sent: Monday, March 24, 2008 6:34 PM To: Ed Flecko Cc: squid-users@squid-cache.org Subject: Re: [squid-users] How can I tell if snmp has been

RE: [squid-users] TCP_HIT and TCP_MISS

2008-03-25 Thread Guillaume Chartrand
-Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Chris Robertson Envoyé : 20 mars 2008 21:21 À : squid-users@squid-cache.org Objet : Re: [squid-users] TCP_HIT and TCP_MISS Guillaume Chartrand wrote: I try the solution on the other post to increase file

[squid-users] RAID is good (was: Re: [squid-users] Hardware setup ?)

2008-03-25 Thread Marcus Kool
I wish that the wiki for RIAD is rewritten. Companies depend on internet access and a working Squid proxy and therefore the advocated no problem if a single disk fails is not from today's reality. One should also consider the difference between simple RAID and extremely advanced RAID disk

Re: [squid-users] you tube +delay pool

2008-03-25 Thread s f
Hi, I tried but its not working. I know this is a lame answer but before mailing you all i even tried with this delay_pools 1 delay_class 1 1 delay_parameters 1 1000/1000 acl dp rep_mime_type video/flv delay_access 1 allow dp The videos from sites like youtube, metacafe, dialymotion plays

Re: [squid-users] you tube +delay pool

2008-03-25 Thread Adrian Chadd
Uhm, doesn't delay_access only match on -request-, not -reply-? :) (I've got a patch here to match on reply for delay_pools that a customer would like me to integrate.) Adrian On Tue, Mar 25, 2008, s f wrote: Hi, I tried but its not working. I know this is a lame answer but before

Re: [squid-users] RAID is good (was: Re: [squid-users] Hardware setup ?)

2008-03-25 Thread Adrian Chadd
On Tue, Mar 25, 2008, Marcus Kool wrote: I wish that the wiki for RIAD is rewritten. Companies depend on internet access and a working Squid proxy and therefore the advocated no problem if a single disk fails is not from today's reality. Mirroring? no worries. RAID5? reduced performance.

Re: [squid-users] ACLs and localhost

2008-03-25 Thread paul cooper
so is what i want to do actually possible ? unixlogin emma logged into VT7 unixlogin andrew - VT8 web page request from either - squid requests login if its emma !testing - access denied if its emma testing - access allowed switch to VT8 ( andrews desktop) web page request - squid requests

Re: [squid-users] RAID is good (was: Re: [squid-users] Hardware setup ?)

2008-03-25 Thread Kinkie
On Tue, Mar 25, 2008, Marcus Kool wrote: I wish that the wiki for RIAD is rewritten. Companies depend on internet access and a working Squid proxy and therefore the advocated no problem if a single disk fails is not from today's reality. Mirroring? no worries. RAID5? reduced

Re: [squid-users] you tube +delay pool

2008-03-25 Thread martin perner
Hi, I think the problem is that the delaypool acls are only done by a fast lookup. That means that not every ACL-type is used in delay_access. a solution is to include the wanted acl in the http_access, where it is normally processed and the result get cached so it can be used in

Re: [squid-users] ACLs and localhost

2008-03-25 Thread Dieter Bloms
Hi, On Tue, Mar 25, paul cooper wrote: so is this login stored in the cache somewhere ? I need to flush the cache when i change user ? squid caches the authentication results, I think the default is 2h. Please have a look for the keywords in your default squid.conf: max_user_ip and

[squid-users] How do I allow access to a specific URL:port_number

2008-03-25 Thread Ed Flecko
Hi folks, Our ISP has a SPAM server with a web page that you have to be able to reach in order to manage your SPAM settings. I can't figure out how to tell Squid to allow this page. The web page is: myisp.com:10020 I've tried using the always_direct method and adding the 10020 port number to my

Re: [squid-users] RAID is good (was: Re: [squid-users] Hardware setup ?)

2008-03-25 Thread Matus UHLAR - fantomas
On 25.03.08 10:23, Marcus Kool wrote: I wish that the wiki for RIAD is rewritten. I think that (nearly) anyone can rewrite it, but... Companies depend on internet access and a working Squid proxy and therefore the advocated no problem if a single disk fails is not from today's reality.

Re: [squid-users] How do I allow access to a specific URL:port_number

2008-03-25 Thread Roger
On Tue, Mar 25, 2008 at 9:06 AM, Ed Flecko [EMAIL PROTECTED] wrote: I can't figure out how to tell Squid to allow this page. The web page is: myisp.com:10020 I've tried using the always_direct method and adding the 10020 port number to my Safe_ports, but neither method worked. Is it http

Re: [squid-users] How do I allow access to a specific URL:port_number

2008-03-25 Thread Ed Flecko
I think it's just normal, http. I can ping it just fine from the Squid box. Ed On Tue, Mar 25, 2008 at 9:36 AM, Roger [EMAIL PROTECTED] wrote: On Tue, Mar 25, 2008 at 9:06 AM, Ed Flecko [EMAIL PROTECTED] wrote: I can't figure out how to tell Squid to allow this page. The web page is:

Re: [squid-users] Squid + ClamAV

2008-03-25 Thread troxlinux
there is not much information, you have it implemented, what OS have? greetings 2008/3/25, Henrik Nordstrom [EMAIL PROTECTED]: My recommended method: Squid-3 + c-icap There is other methods as well such as viralator, but ICAP is much better. Regards Henrik

[squid-users] Squid returns old Expires: header

2008-03-25 Thread Ed Eddington
I'm having a problem where Squid is returning the cached Expires: header with a cached image. (These images are specified in CSS, so mouse roll-over is causing lots of re-requests for the images by the browser!) I have reload-into-ims turned on, so a browser reload turns into an If-Modified-Since

Re: [squid-users] TCP_HIT and TCP_MISS

2008-03-25 Thread Chris Robertson
Guillaume Chartrand wrote: -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Chris Robertson Envoyé : 20 mars 2008 21:21 À : squid-users@squid-cache.org Objet : Re: [squid-users] TCP_HIT and TCP_MISS Guillaume Chartrand wrote: I try the solution on

Re: [squid-users] Squid + ClamAV

2008-03-25 Thread Cassiano Martin
You could try HAVP http://www.server-side.de/ At least it works fine for me troxlinux escreveu: there is not much information, you have it implemented, what OS have? greetings 2008/3/25, Henrik Nordstrom [EMAIL PROTECTED]: My recommended method: Squid-3 + c-icap There is other

Re: [squid-users] you tube +delay pool

2008-03-25 Thread Chris Robertson
s f wrote: Hi, I tried but its not working. I know this is a lame answer but before mailing you all i even tried with this delay_pools 1 delay_class 1 1 delay_parameters 1 1000/1000 acl dp rep_mime_type video/flv delay_access 1 allow dp The videos from sites like youtube, metacafe,

Re: [squid-users] How do I allow access to a specific URL:port_number

2008-03-25 Thread Chris Robertson
Ed Flecko wrote: Hi folks, Our ISP has a SPAM server with a web page that you have to be able to reach in order to manage your SPAM settings. I can't figure out how to tell Squid to allow this page. The web page is: myisp.com:10020 I've tried using the always_direct method Unless you are

Re: [squid-users] Squid returns old Expires: header

2008-03-25 Thread Amos Jeffries
Ed Eddington wrote: I'm having a problem where Squid is returning the cached Expires: header with a cached image. (These images are specified in CSS, so mouse roll-over is causing lots of re-requests for the images by the browser!) I have reload-into-ims turned on, so a browser reload turns into

Re: [squid-users] RAID is good

2008-03-25 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: On 25.03.08 10:23, Marcus Kool wrote: I wish that the wiki for RIAD is rewritten. I think that (nearly) anyone can rewrite it, but... Companies depend on internet access and a working Squid proxy and therefore the advocated no problem if a single disk fails is

Re: [squid-users] ACLs and localhost

2008-03-25 Thread Amos Jeffries
paul cooper wrote: so is what i want to do actually possible ? If I understand your intentions correctly yes it is: http_access deny !Safe_ports http_access emma weekends http_access andrew http_access deny non-safe port access denied emma only logging in on weekends, not accepted

Re: [squid-users] OpenBSD 4.2+Squid3_Stable1+Windows AD

2008-03-25 Thread Macroendrix
Use this code: - diff -r -u -N samba/Makefile samba_winbind/Makefile --- samba/Makefile Tue Oct 3 16:07:10 2006 +++ samba_winbind/Makefile Tue Sep 26 05:51:14 2006 @@ -61,7 +61,7 @@

Re: [squid-users] Squid returns old Expires: header

2008-03-25 Thread Ed Eddington
Thanks for your assistance. I'm using 2.6.STABLE4, btw. I've been aware reload-into-ims violates HTTP (and love using it nonetheless), but I hadn't anticipated this behavior to be a side effect of reload-into-ims. I will follow your advice. however... - upgrade to the latest squid release to

Re: [squid-users] bug? (was cache deny and the 'public' token)

2008-03-25 Thread Ric
On Mar 25, 2008, at 3:19 AM, Henrik Nordstrom wrote: On Mon, 2008-03-24 at 11:44 -0700, Ric wrote: Yes, I realize this. Unless we authenticate using one of the Authenticated header methods, it seems that we have to be careful not to try caching split views in standard proxies. Even then

Re: [squid-users] Squid returns old Expires: header

2008-03-25 Thread Amos Jeffries
Thanks for your assistance. I'm using 2.6.STABLE4, btw. I've been aware reload-into-ims violates HTTP (and love using it nonetheless), but I hadn't anticipated this behavior to be a side effect of reload-into-ims. It's a side-effect of bug #7 which is made noticable by reload-into-ims. I

Re: [squid-users] RAID is good

2008-03-25 Thread Adrian Chadd
And I'd completely agree with you; because you're comparing $EXPENSIVE attached storage (that generally is run as RAID) to $NOT_SO_EXPENSIVE local storage which doesn't have .. well, all the fruit. The EMC disk arrays, when treated as JBOD's, won't be faster. They're faster because you're rolling