Re: [squid-users] Issue with header_access and validation

2008-05-02 Thread Adrian Chadd
Use refresh_pattern entries to override the max-age. On Fri, May 02, 2008, Paul-Kenji Cahier wrote: Hello, In our current situation, we are trying to have Cache-control: max-age=0 headers from clients to be ignored in the cache decision process, while keeping all of the 'Cache-control:

[squid-users] Reverse proxy problem

2008-05-02 Thread Gianfranco Varone [TIN]
Hi to all, firstable sorry for my english!! I'm trying to configure reverse proxy with Squid version 2.6, to permit users to connect to our mail server Schema as follow: USER - internet - Squid(DMZ) - FW - Mail(LAN) Squid AND Mail answer on tcp port 1 Squid.conf: http_port

Re[2]: [squid-users] Issue with header_access and validation

2008-05-02 Thread Paul-Kenji Cahier
But wouldnt that only override max-age which is received in headers sent by servers? The ones we want to override are from client requests only. Plus refresh_pattern can not take an acl since it's global and only based on path.(ie no acls) Or am I not seeing things clearly? Thanks for any

Re: [squid-users] Reverse proxy problem

2008-05-02 Thread Amos Jeffries
Gianfranco Varone [TIN] wrote: Hi to all, firstable sorry for my english!! I'm trying to configure reverse proxy with Squid version 2.6, to permit users to connect to our mail server Schema as follow: USER - internet - Squid(DMZ) - FW - Mail(LAN) Squid AND Mail answer on tcp port 1

Re: [squid-users] Dub about how to work squid ...

2008-05-02 Thread Amos Jeffries
Ramiro Sabastta wrote: Hi !!! I installed squid on a Debian box, with 1Gb of RAM, 160 Gb of disk and AMD Optreon Dual Core, in transparent mode. I configured a cache of 100Gb on disk with aufs. I was making some testing in my private network, and I couldn't understand how the squid worked. I

Re: [squid-users] SSL Accel - Reverse Proxy

2008-05-02 Thread Amos Jeffries
Tory M Blue wrote: On Thu, May 1, 2008 at 2:02 AM, Amos Jeffries [EMAIL PROTECTED] wrote: You could make a second peer connection using HTTPS between squid and the back-end server and ACL the traffic so that only requests coming in via SSL are sent over that link. Leaving non-HTTPS incoming

[squid-users] Unable to Access support.microsoft.com through Squid

2008-05-02 Thread Dean Weimer
I have recently been unable to browse support.microsoft.com through our squid proxy servers. Investigation into the issue leads me to believe that Microsoft is responding with gzip transfer encoding. Firefox Reports a content encoding error: Content Encoding Error The page you are trying to

[squid-users] question about delay_pool

2008-05-02 Thread Christian Purnomo
HI Gurus I have a requirement where my user wants to have options to browse using different speed to the internet. At present I have 2 instances of squid to use different delay_pool parameters, one has 256kbits/s and the other has 64kbits/s. My question, is there any way I can run only an

Re: [squid-users] Surfing hangs after period of time

2008-05-02 Thread Usrbich
I am worried about the Request memory hit ratios 0.0% part. This means that my memory cache is unaffective, right? Where can I tune this? Cache information for squid: Request Hit Ratios: 5min: 32.8%, 60min: 32.8% Byte Hit Ratios:5min: 25.0%, 60min: 25.0%

[squid-users] Help with PROXY TRANSPARENT centos 5.1 and Squid 3.0.Stable4

2008-05-02 Thread opc
Hi I like configure squid with proxy transperent, but don't work, if i configure i my browser the address proxy and port of server this work very good. The next is the configuration squid.conf - http_port 3138 transparent firewall in /etc/rc.d/rc.local

Re: [squid-users] Unable to Access support.microsoft.com through Squid

2008-05-02 Thread Michael Graham
Has anyone else ran into this issue, and found a solution to the problem? I do # Fix broken sites by removing Accept-Encoding header acl broken dstdomain support.microsoft.com acl broken dstdomain .digitalspy.co.uk header_access Accept-Encoding deny broken The problem is that sending

Re: [squid-users] Squid sends TCP_DENIED/407 even on already authenticated users

2008-05-02 Thread Julio Cesar Gazquez
El Jueves 01 Mayo 2008 06:08:28 escribió: But, as far as I can tell, credentials are sent in the request as they appear in the log. Just happens that, after several successfull responses, 407 responses happen. Anyway, IE7 only ask again for authentication on a certain site, it keeps working

RE: [squid-users] Unable to Access support.microsoft.com through Squid

2008-05-02 Thread Dean Weimer
Thanks for your help Mick, this solved the problem. Also after seeing this I was able to figure out that in squid 3.0 you can use request_header_access in place of header_access. Thanks, Dean Weimer Network Administrator Orscheln Management Co -Original Message- From:

Re: [squid-users] SSL Accel - Reverse Proxy

2008-05-02 Thread Tory M Blue
On Fri, May 2, 2008 at 5:25 AM, Amos Jeffries [EMAIL PROTECTED] wrote: You made the situation clear. I mentioned the only reasonably easy solution. If you didn't understand me, Keith M Richad provided you with the exact squid.conf settings I was talking about before. Obviously i have

RE: [squid-users] SSL Accel - Reverse Proxy

2008-05-02 Thread Keith M. Richard
Tory, If you are going to use Certificates from a provider like Verisign or similar, and will be using an Intermediate cert, will need to chain them together as to avoid errors from EU web browsers. Keith -Original Message- From: Amos Jeffries [mailto:[EMAIL PROTECTED] Sent:

[squid-users] Inserting text on web page

2008-05-02 Thread Wet Mogwai
I have to collect information from every system on my network. I wrote a script that will be placed on a local web server. Now, I need to have an easy way to make sure it is accessible by even the least capable user. I would like to insert a link to it at the bottom of a page that every computer

Re: [squid-users] question about delay_pool

2008-05-02 Thread Chris Robertson
Christian Purnomo wrote: HI Gurus I have a requirement where my user wants to have options to browse using different speed to the internet. At present I have 2 instances of squid to use different delay_pool parameters, one has 256kbits/s and the other has 64kbits/s. My question, is there

Re: [squid-users] Inserting text on web page

2008-05-02 Thread Chris Robertson
Wet Mogwai wrote: I have to collect information from every system on my network. I wrote a script that will be placed on a local web server. Now, I need to have an easy way to make sure it is accessible by even the least capable user. I would like to insert a link to it at the bottom of a page

Re: [squid-users] 2.6.STABLE19 and 2.6.STABLE20 missing from mirrors

2008-05-02 Thread Henrik Nordstrom
On tor, 2008-05-01 at 11:38 +0100, Dave Holland wrote: I don't know if it's related, but the *.asc signature files for STABLE20 are missing too. The links to them from http://www.squid-cache.org/Versions/v2/2.6/ are also broken. Please can they be replaced? I haven't had time to sign the

Re: [squid-users] Squid sends TCP_DENIED/407 even on already authenticated users

2008-05-02 Thread Henrik Nordstrom
On ons, 2008-04-30 at 13:29 -0300, Julio Cesar Gazquez wrote: We are starting to deploy digest based authentication on a large network, and we found a weird problem: Sometimes authenticated requests are answered by TCP_DENIED/407 responses. Which Squid version? Regards Henrik

Re: [squid-users] SSL Accel - Reverse Proxy

2008-05-02 Thread Henrik Nordstrom
On ons, 2008-04-30 at 11:10 -0700, Tory M Blue wrote: I was wondering if there was a way for Squid to pass on some basic information to the server citing that the original request was Secure, so that the backend server will respond correctly. Yes. See the front-end-https cache_peer option.

Re: [squid-users] Help with PROXY TRANSPARENT centos 5.1 and Squid 3.0.Stable4

2008-05-02 Thread Amos Jeffries
[EMAIL PROTECTED] wrote: Hi I like configure squid with proxy transperent, but don't work, if i configure i my browser the address proxy and port of server this work very good. The next is the configuration squid.conf - http_port 3138 transparent firewall in /etc/rc.d/rc.local

Re: [squid-users] SSL Accel - Reverse Proxy

2008-05-02 Thread Amos Jeffries
Tory M Blue wrote: On Fri, May 2, 2008 at 5:25 AM, Amos Jeffries [EMAIL PROTECTED] wrote: You made the situation clear. I mentioned the only reasonably easy solution. If you didn't understand me, Keith M Richad provided you with the exact squid.conf settings I was talking about before.

Re: [squid-users] SSL Accel - Reverse Proxy

2008-05-02 Thread Amos Jeffries
Amos Jeffries wrote: Tory M Blue wrote: On Fri, May 2, 2008 at 5:25 AM, Amos Jeffries [EMAIL PROTECTED] wrote: You made the situation clear. I mentioned the only reasonably easy solution. If you didn't understand me, Keith M Richad provided you with the exact squid.conf settings I was