Re: [squid-users] change in source code

2008-04-15 Thread Henrik Nordstrom
mån 2008-04-14 klockan 20:13 -0700 skrev Anil Saini: actually its is thr in squid.conf fine that max limit is 32 but i increased the limit to 60..and no of dns processes increases...but i dont know it will effect the squid or not If the number of helpers increased then it worked. The

[squid-users] Accessing cachemgr.cgi

2008-04-15 Thread hdkutz
Hello List, pretty new to squid 3.0. Tried to configure cachemgr.cgi. Problem: Squid is not listening to his standard port 3128. It is configured to Listen on port 80. Apache Webserver is configured to use port 3128. If I try to access http://proxy:3128/cgi-bin/cachemgr.cgi I'll get snip connect

[squid-users] How to check the cache_peer sibling is working?

2008-04-15 Thread John Lui
I used two squid server (A,B) as sibling,the icp_port,query_icmp,icp_access,cache_peer has been setted. query_icmp on icp_port 3130 cache_peer A(/B) sibling 80 3130 proxy-only icp_access allow All One object has been cached by server A and not cached by server B. when i want to get the object

Re: [squid-users] Getting sibling caches to work in an accelerator setup

2008-04-15 Thread Amos Jeffries
Patrik Ellrén wrote: We have a setup with a number of identical application servers running on Windows 2003 Server. On each server there is an instance of Squid (2.6 stable 18) that runs as an accelerator. The accelerator mode seems to work fine when each Squid instance is only accelerating

Re: [squid-users] squid as reverse proxy, serving large files

2008-04-15 Thread Lin Jui-Nan Eric
Hi All, Found that it is a FreeBSD deadlock bug: http://www.freebsd.org/cgi/query-pr.cgi?pr=106317

Re: [squid-users] Reverse proxy for Primary and then Secondary

2008-04-15 Thread Amos Jeffries
Indunil Jayasooriya wrote: On Thu, Apr 10, 2008 at 7:48 PM, Amos Jeffries [EMAIL PROTECTED] wrote: Indunil Jayasooriya wrote: Hi all, I have 2 web servers . One is Primary and the other is Secondary. Pls asssume ip of primary is 1.2.3.4 ip of secondary 2.3.4.5 I want squid resverse proxy

Fwd: [squid-users] Reverse proxy for Primary and then Secondary

2008-04-15 Thread Indunil Jayasooriya
Looks good. If you have multiplewebsites hosted you may need both accel vhost options on the http_port. NOTED , Thanks -- Thank you Indunil Jayasooriya

[squid-users] Adding Header file

2008-04-15 Thread Paras Fadte
Hi, I was trying to add header file stack.h in one of the squids source code file so that I could define stack data types. But it doesn't seem to work . Can anybody help me out with this please? Thank you. -plf

[squid-users] Parent selection mechanism?

2008-04-15 Thread Janis
Hi! Is there some possibility to tell to secondary proxy which parent (cache_peer) to connect depending from received request. for example, if sec. recievs reqest for page from address xxx.xxx.xxx.xxx, ir selects parent1, iy - yyy...yyy - parent2 etc. The reason - parent1 serves better

Re: [squid-users] Parent selection mechanism?

2008-04-15 Thread Amos Jeffries
Janis wrote: Hi! Is there some possibility to tell to secondary proxy which parent (cache_peer) to connect depending from received request. for example, if sec. recievs reqest for page from address xxx.xxx.xxx.xxx, ir selects parent1, iy - yyy...yyy - parent2 etc. The reason - parent1

Re: [squid-users] Adding Header file

2008-04-15 Thread Amos Jeffries
Paras Fadte wrote: Hi, I was trying to add header file stack.h in one of the squids source code file so that I could define stack data types. But it doesn't seem to work . Can anybody help me out with this please? Code discussions in squid-dev please. You need to: - add the files to the

[squid-users] Squid NTLM Auth Failing on Long Passwords

2008-04-15 Thread andrew . lathrop
I appear to have run into an issue with Squid failing to authenticate users with long passwords. I have had a few users that always get a username/password prompt box which re-appears even if the correct info is entered. The AD server logs each of the attempts as a bad password. Squid

RE: [squid-users] Squid2-only plugin from Secure Computing

2008-04-15 Thread Alex Rousskov
On Thu, 2008-03-20 at 17:46 +1100, Adam Carter wrote: I would be happy to try to resolve this issue with Secure Computing. However, I need more information: - What exactly is the Secure Computing plugin that supports Squid2 and does not support Squid3? Does it have a name and a version

[squid-users] Site filtering issue

2008-04-15 Thread Sheldon Carvalho
Site filtering issue I am having issues with filtering of my websites. I have setup squid 2.6.STABLE17 over a Fedora 8 machine. Below is my squid.conf file. Squid seems to log all sites that are going out from other stations but does not filter and of the sites. They all go through. My

Re: [squid-users] change in source code

2008-04-15 Thread Guy Helmer
Henrik Nordstrom wrote: mån 2008-04-14 klockan 20:13 -0700 skrev Anil Saini: actually its is thr in squid.conf fine that max limit is 32 but i increased the limit to 60..and no of dns processes increases...but i dont know it will effect the squid or not If the number of helpers

Re: [squid-users] change in source code

2008-04-15 Thread Adrian Chadd
On Tue, Apr 15, 2008, Guy Helmer wrote: Is this true for 2.6? I had to enable dns_defnames in response to a customer requirement, and found that I had to rebuild 2.6.18 with --disable-internal-dns so dns_defnames would work. Doesn't it pick that stuff up from /etc/resolv.conf w/ the

[squid-users] Site filtering issue

2008-04-15 Thread Sheldon Carvalho
Site filtering issue I am having issues with filtering of my websites. I have setup squid 2.6.STABLE17 over a Fedora 8 machine. Below is my squid.conf file. Squid seems to log all sites that are going out from other stations but does not filter and of the sites. They all go through. My

[squid-users] High availability based on Squid process

2008-04-15 Thread Nick Duda
I might need to take this elsewhere, but curious if anyone is doing this already. I need to have a failover Squid proxy server in the event the primary goes down...when I say down, I mean Squid is not working. Is there any linux high availability (fault tolerance) software solutions that would

Re: [squid-users] change in source code

2008-04-15 Thread Guy Helmer
Adrian Chadd wrote: On Tue, Apr 15, 2008, Guy Helmer wrote: Is this true for 2.6? I had to enable dns_defnames in response to a customer requirement, and found that I had to rebuild 2.6.18 with --disable-internal-dns so dns_defnames would work. Doesn't it pick that stuff up from

Re: [squid-users] Squid NTLM Auth Failing on Long Passwords

2008-04-15 Thread Guido Serassio
Hi, Il 17:38 15/04/2008 [EMAIL PROTECTED] ha scritto: I appear to have run into an issue with Squid failing to authenticate users with long passwords. I have had a few users that always get a username/password prompt box which re-appears even if the correct info is entered. The AD server logs

[squid-users] Clock sync accuracy importance?

2008-04-15 Thread Jon Drukman
I'm trying to run a squid accelerator on a server in India, accelerating an origin host in the USA. I don't have a ton of experience with ntpd but I think I have it running properly on both sites. For whatever reason, they are always 20 seconds out of sync. Squid is not appearing to cache

Re: [squid-users] High availability based on Squid process

2008-04-15 Thread BJ Tiemessen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Look at Linux HA (www.linux-ha.org), very nice software. BJ Nick Duda wrote: | I might need to take this elsewhere, but curious if anyone is doing this already. | | I need to have a failover Squid proxy server in the event the primary goes

Re: [squid-users] Site filtering issue

2008-04-15 Thread Felix Lazaro Carbonell Carbonell
Shelton, may be the tag http_access allow our_network should go after and not before (or may be you don't need it at all) http_access denied custom_denied_domains dst etc/squid/denied_domains.acl hope to be helpful. i'm a beginner. Regards, Felix Lazaro Carbonell Site filtering issue I am

Fwd: Re: [squid-users] Site filtering issue

2008-04-15 Thread Felix Lazaro Carbonell Carbonell
Shelton, may be the tag http_access allow our_network should go after and not before (or may be you don't need it at all) http_access denied custom_denied_domains dst etc/squid/denied_domains.acl hope to be helpful. i'm a beginner. Regards, Felix Lazaro Carbonell Site filtering issue I am

[squid-users] cache_peer_domain help

2008-04-15 Thread Nick Duda
I have a transparent 2.6 stable 19 setup. Its working for just one port 80 redirect but now I need it to redirect to a different internal server on port 80 for a certain domain only. Can someone help me with a basic config, here is what I need: - Squid listening in transparent mode on port 80

Re: [squid-users] change in source code

2008-04-15 Thread Henrik Nordstrom
tis 2008-04-15 klockan 11:19 -0500 skrev Guy Helmer: Another way is to build Squid without --disable-internal-dns. This will remove this directive as it isn't even relevant any more.. Is this true for 2.6? Yes. I had to enable dns_defnames in response to a customer requirement, and

Re: [squid-users] change in source code

2008-04-15 Thread Guy Helmer
Henrik Nordstrom wrote: tis 2008-04-15 klockan 11:19 -0500 skrev Guy Helmer: Another way is to build Squid without --disable-internal-dns. This will remove this directive as it isn't even relevant any more.. Is this true for 2.6? Yes. I had to enable dns_defnames in

Re: [squid-users] Site filtering issue.... Resolved

2008-04-15 Thread Sheldon Carvalho
Thanks for the reply Felix. I guess that must have helped. I did as you said but that seem to block all the sites. Which made me think that the order of the commands make a difference. Which is why, I followed the default squid.conf file and put the commands in some what the same order as it is on

Re: [squid-users] change in source code

2008-04-15 Thread Henrik Nordstrom
tis 2008-04-15 klockan 15:44 -0500 skrev Guy Helmer: Does this mean it ignores the domain directive in resolv.conf? That's what I use on my systems instead of search. Yes, it seems so (from reading the source). Regards Henrik

Re: [squid-users] Site filtering issue.... Resolved

2008-04-15 Thread Sheldon Carvalho
Thanks for the reply Felix. I guess that must have helped. I did as you said but that seem to block all the sites. Which made me think that the order of the commands make a difference. Which is why, I followed the default squid.conf file and put the commands in some what the same order as it is on

Re: [squid-users] Configuring cache_peer to use ssl

2008-04-15 Thread Chris Robertson
Janis wrote: Quoting Chris Robertson [EMAIL PROTECTED]: So the child Squid is trying to negotiate an SSL connection with a port on the Parent that's not set up to accept it. See http://www.squid-cache.org/Versions/v3/3.0/cfgman/https_port.html for the proper directive to terminate an SSL

Re: [squid-users] Accessing cachemgr.cgi

2008-04-15 Thread Chris Robertson
hdkutz wrote: Hello List, pretty new to squid 3.0. Tried to configure cachemgr.cgi. Problem: Squid is not listening to his standard port 3128. It is configured to Listen on port 80. Apache Webserver is configured to use port 3128. If I try to access http://proxy:3128/cgi-bin/cachemgr.cgi I'll

Re: [squid-users] cache_peer_domain help

2008-04-15 Thread Chris Robertson
Nick Duda wrote: I have a transparent 2.6 stable 19 setup. Its working for just one port 80 redirect but now I need it to redirect to a different internal server on port 80 for a certain domain only. Can someone help me with a basic config, here is what I need: - Squid listening in

Re: [squid-users] Site filtering issue.... Resolved

2008-04-15 Thread Chris Robertson
Sheldon Carvalho wrote: Thanks for the reply Felix. I guess that must have helped. I did as you said but that seem to block all the sites. Which made me think that the order of the commands make a difference. Which is why, I followed the default squid.conf file and put the commands in some what

Re: [squid-users] How to check the cache_peer sibling is working?

2008-04-15 Thread Henrik Nordstrom
tis 2008-04-15 klockan 16:23 +0800 skrev John Lui: One object has been cached by server A and not cached by server B. when i want to get the object from server B,the X-Cache from server B showed that the object was read from the original server not the server A. What is wrong with my

Re: [squid-users] Squid NTLM Auth Failing on Long Passwords

2008-04-15 Thread Henrik Nordstrom
tis 2008-04-15 klockan 11:38 -0400 skrev [EMAIL PROTECTED]: appears to log it as Empty LM password supplied for user ... Which ntlm helper are you using? The ntlm_auth helper from Samba is recommended. Avoid the helpers shipped with Squid, those are not very good and only supports now

Re: [squid-users] cache_peer_domain help

2008-04-15 Thread Henrik Nordstrom
tis 2008-04-15 klockan 15:51 -0400 skrev Nick Duda: cache_peer 192.168.1.10 parent 80 no-query originserver cache_peer 192.168.1.20 parent 80 no-query originserver cache_peer_domain 192.168.1.20 example.com The above should be cache_peer_domain 192.168.1.20 .example.com and you also need

Re: [squid-users] change in source code

2008-04-15 Thread Amos Jeffries
Henrik Nordstrom wrote: mån 2008-04-14 klockan 20:13 -0700 skrev Anil Saini: actually its is thr in squid.conf fine that max limit is 32 but i increased the limit to 60..and no of dns processes increases...but i dont know it will effect the squid or not If the number of helpers

Re: [squid-users] change in source code

2008-04-15 Thread Amos Jeffries
Adrian Chadd wrote: On Tue, Apr 15, 2008, Guy Helmer wrote: Is this true for 2.6? I had to enable dns_defnames in response to a customer requirement, and found that I had to rebuild 2.6.18 with --disable-internal-dns so dns_defnames would work. Doesn't it pick that stuff up from

RE: [squid-users] Squid2-only plugin from Secure Computing

2008-04-15 Thread Adam Carter
I think SmartFilter patches the squid source, so is tied to specific versions. It certainly adds another option to the configure script. You can download it for free from SecureComputing's website and have look. Sorry I cant be more helpful but I'm not a developer. Smartfilter 4.2.1

Re: [squid-users] Squid2-only plugin from Secure Computing

2008-04-15 Thread Adrian Chadd
On Wed, Apr 16, 2008, Adam Carter wrote: I think SmartFilter patches the squid source, so is tied to specific versions. It certainly adds another option to the configure script. You can download it for free from SecureComputing's website and have look. Sorry I cant be more helpful but

Re: [squid-users] Site filtering issue.... Resolved

2008-04-15 Thread Amos Jeffries
Thanks for the reply Felix. I guess that must have helped. I did as you said but that seem to block all the sites. Which made me think that the order of the commands make a difference. Which is why, I followed the default squid.conf file and put the commands in some what the same order as it

[squid-users] squid-2 fork - cacheboy (again)

2008-04-15 Thread Adrian Chadd
G'day, For those of you who don't remember, about two years ago I became annoyed at trying to maintain a local Squid-2.5 installation with half a dozen different patches which everyone used to 'fix' Squid-2.5 to perform well. I called this derivative cacheboy and after a few weeks (and a few