[squid-users] squid-2.6.STABLE19 https proxying

2008-04-01 Thread ssoo
Squid-2.6.STABLE19 have sslproxy* directives. Can it support forward proxying https? Below is part of squid FAQ: Unsupported Request Method and Protocol for ''https'' URLs. The information here is current for version 2.3 This is correct. Squid does not know what to do with an https URL. To

Re: [squid-users] squid-2.6.STABLE19 https proxying

2008-04-01 Thread Adrian Chadd
On Tue, Apr 01, 2008, [EMAIL PROTECTED] wrote: Squid-2.6.STABLE19 have sslproxy* directives. Can it support forward proxying https? It doesn't, no. Porting the sslbump stuff from Squid-3 or a cut-down version shouldn't be hard. Adrian -- - Xenion - http://www.xenion.com.au/ - VPS Hosting -

Re: [squid-users] With Two Internet connection

2008-04-01 Thread Arun Shrimali
On Tue, Apr 1, 2008 at 12:50 AM, Daniel Becker [EMAIL PROTECTED] wrote: Hi Arun, to realise this scenario you need to implement a dynamic routing protocol, which announces the routing information on the two egde routers, as well as on your squid server or alternatively if you have a

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread J Beris
Can other people here access this site using Suse Linux? Yes, works perfectly here behind a squid-2.6.STABLE6-0.8 proxy on openSUSE 10.3. Both Firefox and IE. What was the site again? http://www.franklintraffic.com/ Regards, Joop

[squid-users] how to controll user to download from torrent

2008-04-01 Thread Tarak Ranjan
Hi List, i have one squid proxy server . all the traffic(http) has been redirect to the squid ip:port. now i want to deny the torrent download , using my Proxy. if anyone help me or share the experience to do it, then it'll be really appreciable . /\ Tarak

[squid-users] squid-3.0.STABLE3 make error in dns_internal.cc

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 06:59 +0200 skrev Tvrtko Majstorović: I have applied patch to 'src/Makefile.am' described on your pages, but when I run 'make' get this error: dns_internal.cc: In function ‘void idnsSendQuery(idns_query*)’: dns_internal.cc:778: error: cannot convert ‘sockaddr_in’ to

Re: [squid-users] squid-2.6.STABLE19 https proxying

2008-04-01 Thread J. Peng
On 4/1/08, Henrik Nordstrom [EMAIL PROTECTED] wrote: tis 2008-04-01 klockan 15:15 +0900 skrev [EMAIL PROTECTED]: Squid-2.6.STABLE19 have sslproxy* directives. Can it support forward proxying http? Not really no. This feature allows Squid to gateway requests to http. I.e. if Squid receives

Re: [squid-users] squid-3.0.STABLE3 make error in dns_internal.cc

2008-04-01 Thread Amos Jeffries
Henrik Nordstrom wrote: tis 2008-04-01 klockan 06:59 +0200 skrev Tvrtko Majstorović: I have applied patch to 'src/Makefile.am' described on your pages, but when I run 'make' get this error: dns_internal.cc: In function ‘void idnsSendQuery(idns_query*)’: dns_internal.cc:778: error: cannot

RE: [squid-users] client ip's

2008-04-01 Thread Jorge Bastos
No, just squid himself. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: terça-feira, 1 de Abril de 2008 10:22 To: Jorge Bastos Cc: squid-users@squid-cache.org Subject: Re: [squid-users] client ip's tis 2008-04-01 klockan 10:07 +0100 skrev Jorge

Re: [squid-users] Block Squid error page

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 10:42 +0530 skrev sekar it: Iam using squid as Transparent proxy. I dont want send any error message from squid. Is there any possible to send the origin server error message instead of squid error message ? Squid doesn't replace origin server error messages. You will

Re: [squid-users] squid-2.6.STABLE19 https proxying

2008-04-01 Thread Amos Jeffries
J. Peng wrote: On 4/1/08, Henrik Nordstrom [EMAIL PROTECTED] wrote: tis 2008-04-01 klockan 15:15 +0900 skrev [EMAIL PROTECTED]: Squid-2.6.STABLE19 have sslproxy* directives. Can it support forward proxying http? Not really no. This feature allows Squid to gateway requests to http. I.e. if

Re: [squid-users] client ip's

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 10:07 +0100 skrev Jorge Bastos: Hi, My squid always report localhost on the client's IP. What can I do to correct this? Only started to happen with the last 3.0 stable2. are you using dansguardian or another filtering proxy infront of your Squid? Regards Henrik

[squid-users] client ip's

2008-04-01 Thread Jorge Bastos
Hi, My squid always report localhost on the client's IP. What can I do to correct this? Only started to happen with the last 3.0 stable2. --- 1207040749.939436 localhost TCP_MISS/200 1528 GET http://library.gnome.org/skin/tab_right.png - DIRECT/209.132.176.176 image/png

Re: [squid-users] squid-2.6.STABLE19 https proxying

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 15:15 +0900 skrev [EMAIL PROTECTED]: Squid-2.6.STABLE19 have sslproxy* directives. Can it support forward proxying http? Not really no. This feature allows Squid to gateway requests to http. I.e. if Squid receives an request for https:// over HTTP, or if you use an url

Re: [squid-users] how to controll user to download from torrent

2008-04-01 Thread Leonardo Rodrigues Magalhães
Tarak Ranjan escreveu: Hi List, i have one squid proxy server . all the traffic(http) has been redirect to the squid ip:port. now i want to deny the torrent download , using my Proxy. if anyone help me or share the experience to do it, then it'll be really appreciable . i have answered

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 09:28 -0400 skrev Terry Dobbs: Thanks for checking. Odd, not sure why this wont work here, the only problem like this that I have had in the few years ive used it. Well.. Squid will only be able to reach the sites you can reach from the server where Squid runs. The site

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread J Beris
Thanks for checking. Odd, not sure why this wont work here, the only problem like this that I have had in the few years ive used it. Hi Terry/Henrik, No problem, little effort to click the link :-) I made one small mistake, our proxy runs on openSUSE 10.2, not 10.3 as reported earlier. Which

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread Terry Dobbs
Yea, I understand that this issue really isn't squid related, just was hoping someone running squid on suse linux has had a similar issue. I am running Suse Linux 10 and I can ping the domain from the server. I just cant browse to it, I get an error box in Mozilla saying Document contains no data.

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread Terry Dobbs
Thanks for checking. Odd, not sure why this wont work here, the only problem like this that I have had in the few years ive used it. -Original Message- From: J Beris [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2008 3:46 AM To: Henrik Nordstrom; Terry Dobbs Cc:

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread J Beris
This is obviously why the squid users cant access. I thought it might be a DNS issue, but that's crossed off as I can ping the domain, and it resolves to correct address. Yes, if you can ping and resolve, it's not DNS related. I'd fire up wireshark/ethereal and grab the communication that

Re: [squid-users] Block Squid error page

2008-04-01 Thread Matus UHLAR - fantomas
tis 2008-04-01 klockan 10:42 +0530 skrev sekar it: Iam using squid as Transparent proxy. I dont want send any error message from squid. Is there any possible to send the origin server error message instead of squid error message ? On 01.04.08 10:40, Henrik Nordstrom wrote: Squid doesn't

Re: [squid-users] cpu load boom when rotate the access.log(coss filesystem)

2008-04-01 Thread Felix New
Amos: thank you very much. i appreciate you if give me some detail. 2008/3/28, Amos Jeffries [EMAIL PROTECTED]: Ah a few problems with COSS. Firstly it does not handle large objects very well. Secondy its reload requires reading into memory the entire cache_dir slice by slice. Which is

[squid-users] https -- http reverse proxy problem

2008-04-01 Thread Mirabello Massimiliano
Hi all, I have a problem with squid in reverse proxy mode (squid-2.6.STABLE16 on HP-UX). I need to redirect an https port on squid server to a http port on the backend server that's my configuration: ### acl Safe_ports port 37500-37501 acl xprov0_sec myport 37500 acl

Re: [squid-users] Slow internet

2008-04-01 Thread François Cami
On Mon, 31 Mar 2008 13:04:35 -0400 Jeremy Kim [EMAIL PROTECTED] wrote: Using the squid proxy is really slow. Is there anyway to make it faster? I have squid version Squid2.6STABLE18 on a XP. Please use a server OS, either 2003 Server if you really have to run on Windows, or something like

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread Terry Dobbs
Yea, im lost on this one. Ethereal doesn't show anything strange, just the initial connection request, just doesn't seem to get anything back. Doesn't really make sense that only this one site (at least that I know of) is having this issue. The SUSE firewall is turned off, network card is

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 17:29 -0400 skrev Terry Dobbs: Yea, im lost on this one. Ethereal doesn't show anything strange, just the initial connection request, just doesn't seem to get anything back. Doesn't really make sense that only this one site (at least that I know of) is having this

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread Terry Dobbs
Would you want the trace from the squid server, or from a client behind the squid server? Also, the TCP scaling fix, it was just to add a record to the file right? Also, I tried doing the window scaling again. Is it just as simple as creating the file tcp_default_win_scale in /proc/sys/net/ipv4?

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 18:00 -0400 skrev Terry Dobbs: Would you want the trace from the squid server, or from a client behind the squid server? Also, the TCP scaling fix, it was just to add a record to the file right? Also, I tried doing the window scaling again. Is it just as simple as

Re: [squid-users] https -- http reverse proxy problem

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 17:55 +0200 skrev Mirabello Massimiliano: My cache.log reports: 2008/04/01 17:53:50| clientNegotiateSSL: Error negotiating SSL connection on FD 11: error:140B512D:SSL routines:SSL_GET_NEW_SESSION:ssl session id callback failed (1/-1) Hmm.. that's a new one. Which

[squid-users] All url_rewriter processes are busy x Too many open files

2008-04-01 Thread Marcio Augusto Stocco
Testing Squid/SquidGuard with thousands of users, the cache.log shows the following messages: 2008/04/01 15:19:16| WARNING: All url_rewriter processes are busy. 2008/04/01 15:19:16| WARNING: up to 2730 pending requests queued 2008/04/01 15:19:16| Consider increasing the number of url_rewriter

RE: [squid-users] client ip's

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 12:29 +0100 skrev Jorge Bastos: No, just squid himself. As a plain proxy, or playing with NAT? Regards Henrik

RE: [squid-users] Unable to access a website through Suse/Squid.

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 18:00 -0400 skrev Terry Dobbs: Would you want the trace from the squid server, or from a client behind the squid server? The squid server talking to the web site. Regards Henrik

[squid-users] Reverse proxy question

2008-04-01 Thread James Wenzel
Hi I am setting up squid in front of an oracle applications server. The squid is in a DMZ, the oracle applications server is in the internal network. I need to have the squid server talk to port 8000 and port 9000 and accept requests for those ports from internet users. Currently my

Re: [squid-users] Reverse proxy question

2008-04-01 Thread Henrik Nordstrom
tis 2008-04-01 klockan 19:52 -0400 skrev James Wenzel: http_port 8000 httpd_accel_host 10.1.140.200 httpd_accel_port 8000 Before you continue, upgrade to a supported Squid release. I.e. Squid-2.6 or later. Regards Henrik

Re: [squid-users] cpu load boom when rotate the access.log(coss filesystem)

2008-04-01 Thread Amos Jeffries
Felix New wrote: Amos: thank you very much. i appreciate you if give me some detail. 2008/3/28, Amos Jeffries [EMAIL PROTECTED]: Ah a few problems with COSS. Firstly it does not handle large objects very well. Secondy its reload requires reading into memory the entire cache_dir slice by

Re: [squid-users] All url_rewriter processes are busy x Too many open files

2008-04-01 Thread Amos Jeffries
Marcio Augusto Stocco wrote: Testing Squid/SquidGuard with thousands of users, the cache.log shows the following messages: 2008/04/01 15:19:16| WARNING: All url_rewriter processes are busy. 2008/04/01 15:19:16| WARNING: up to 2730 pending requests queued 2008/04/01 15:19:16| Consider increasing

[squid-users] TCP Connection failed to parent proxy server

2008-04-01 Thread Josh
Hi all, I'm having an issue with the squid server I setup on Openbsd 4.2-stable. Clients are coming on 10.X.X.X (virtual IP) port 8080 and requests are made to parent proxy server from 10.X.X.Y to 10.2.5.1 port 8080 As you can see below (cache.log) I got a lot of TCP connection to parent proxy