Re: [squid-users] Async request queue growing uncontrollably!

2008-06-18 Thread Adrian Chadd
That means that a lot of disk IO is being done and you've run out of threads and work queues. You'll want to start by analysing your IO patterns and seeing if you're maxing out your disk/controller/etc. If you are then you may find some COSS/AUFS tuning to optimise things, but its difficult to

Re: [squid-users] Where are the ircache.net cgi for creating graphs?

2008-06-18 Thread Henrik Nordstrom
On tis, 2008-06-17 at 21:49 -0700, Richard Hubbell wrote: In general I agree. But in this case I wanted something quick and just for squid. And I didn't want to use cgi, just want something that runs out of cron. I'm just trying to understand Squid and what it's doing. Then I would

Re: [squid-users] error

2008-06-18 Thread Henrik Nordstrom
On tis, 2008-06-17 at 17:53 +0400, Mario Almeida wrote: Can some one explain me the bellow message? temporary disabling (Bad Gateway) digest from 10.200.2.16 It means the peer does not support cache digests. You can ignore the message, or disable cache digest exchanges for the peer (see

Re: [squid-users] Squid problem:. Some addresses work OK - but most hang indefinitely.

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 01:11 +0800, Richard Chapman wrote: I now have the following situation on this client: 1) I can browse local addresses fine (as they are direct) Ok. 2) I can browse a few non local addresses fine. I can refresh my ISPs usage data OK for example, and it is clearly

Re: [squid-users] Squid on steroids

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 01:44 +, [EMAIL PROTECTED] wrote: I'm most interested in the squid back-end setup. Should we look at something linux based clustering? Or should we be looking at some internal squid process? You don't need to cluster Squif, just a bunch of more or less independent

Re: [squid-users] Log Format

2008-06-18 Thread Henrik Nordstrom
On tis, 2008-06-17 at 16:37 -0400, Jonathan Chretien wrote: Is there a way to purge the access log to get only the URL that the user requested when he clicked on a link or when he typed the address in the address bar ? There is no difference between clicking on a link or objects composing a

Re: [squid-users] Squid supports all the cache directives described in RFC2616 and SNMPv1 agent?

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 13:13 +0800, 邹伟 wrote: First of all sorry if I am asking someting obvious, I am a really squid newbie. Now I am using squid-2.6.STABLE19 to set up a web proxy, I want to know whether squid-2.6.STABLE19 supports all the cache directives described in the section 13 and

RE: [squid-users] Log Format

2008-06-18 Thread Jonathan Chretien
Hello. It's exactly what I was thinking. There is not way with the Squid log to only get or extract the typed or click URL. Doing what I did, like only extract TEXT/. mime type purge a lot of thing that my HR department don't need to see. Thanks Jonathan

[squid-users] Negotiate problem 'BH received type 1 NTLM token'

2008-06-18 Thread Malte Schröder
Hello everyone. I have trouble running Squid (2.6.STABLE20) on linux with negotiate authentication in a M$ ActiveDirectory environment. When I try with Firefox or IE7 from an AD-integrated WindowsXP machine all looks fine. But on some pages which use Windows Media Player 11 I get a login

Re: [squid-users] custom logformats and squid-2.5.STABLE14-1.4E

2008-06-18 Thread Henrik Nordstrom
On tis, 2008-06-17 at 22:24 -0700, Richard Hubbell wrote: I looked around but seem to not have much luck finding or figuring out exactly what logging features work in this version of Squid. Is there a version matrix somewhere listing versions and the features they support? The squid.conf

[squid-users] Reverse proxies...

2008-06-18 Thread John Doe
Hi everybody, I need to setup something like this: +--- Squid1 --- Apache1 | | | proxyonly | | Internet ---+--- Squid2 --- Apache2 | | | proxyonly | | +--- Squid3 ---

[squid-users] name resolution problems (/etc/hosts)

2008-06-18 Thread Donoso Gabilondo, Daniel
Hello again, I Use Squid as a reverse Proxy with 192.168.240.22:8080 as default site and works fine, but when I put a name, and after restarting, doesn't work. I have correctly configured the name in the /etc/hosts file. What am I doing wrong?

[squid-users] Squid

2008-06-18 Thread aot2002
I have squid setup using a reverse proxy on port listening 21080 squid redirects and gets info from my webserver to 21080 back to the user everything works except when i get a 302 redirect if i enter in the webbrowser http://MYIPADDRESS:21080/test/home.php it works fine

Re: [squid-users] custom logformats and squid-2.5.STABLE14-1.4E

2008-06-18 Thread Richard Hubbell
--- On Wed, 6/18/08, Henrik Nordstrom [EMAIL PROTECTED] wrote: From: Henrik Nordstrom [EMAIL PROTECTED] Subject: Re: [squid-users] custom logformats and squid-2.5.STABLE14-1.4E To: [EMAIL PROTECTED] Cc: squid-users@squid-cache.org Date: Wednesday, June 18, 2008, 6:20 AM On tis,

Re: [squid-users] Where are the ircache.net cgi for creating graphs?

2008-06-18 Thread Richard Hubbell
--- On Wed, 6/18/08, Henrik Nordstrom [EMAIL PROTECTED] wrote: From: Henrik Nordstrom [EMAIL PROTECTED] Subject: Re: [squid-users] Where are the ircache.net cgi for creating graphs? Then I would suggest one of the MRTG templates for Squid.Quick, easy, and only needs cron + any kind of web

Re: [squid-users] custom logformats and squid-2.5.STABLE14-1.4E

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 10:36 -0700, Richard Hubbell wrote: That one gave me a 404, but this one works: http://www.squid-cache.org/Versions/v2/2.5/ Is the cfgman new to 2.6 and above? Or is there another link? Right.. 2.5 was already end-of-life when the online manual was introduced, so it

Re: [squid-users] Where are the ircache.net cgi for creating graphs?

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 10:40 -0700, Richard Hubbell wrote: While on the topic has anyone written a squid-top? i.e. something akin to the top command but for squid? Unlikely. Regards Henrik signature.asc Description: This is a digitally signed message part

Re: [squid-users] Negotiate problem 'BH received type 1 NTLM token'

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 13:55 +0200, Malte Schröder wrote: 2008/06/18 13:42:16| authenticateNegotiateHandleReply: Error validating user via Negotiate. Error returned 'BH received type 1 NTLM token' Negotiate is configured like this: auth_param negotiate program /usr/lib/squid/squid_kerb_auth

Re: [squid-users] Re: Help with sarg usage

2008-06-18 Thread Chris Robertson
Richard Chapman wrote: I also can't find a way to make it cover further back than the current squid log file - though the daily and weekly reports will presumably go further back. /path/to/sarg -l /var/log/squid/access.log -l /var/log/squid/access.log.1 -l /var/log/squid/access.log.2.gz

[squid-users] Passing web service username and password in Squid for Windows...

2008-06-18 Thread Gary Tai
One of our applications is failing to pass encrypted username and password to Squid. From the application documentation: Web services requires a client to provide credentials as BASIC HTTP user authentication. BASIC authentication encrypts the user ID and password with Base64 encoding and passes

Re: [squid-users] Re[squid-users] verse proxy to Sharepoint

2008-06-18 Thread Chris Robertson
afstcklnd wrote: We have a working infrastructure using Windows 2003, AD Sharepoint for Project Web Access. In order to allow branch office access, we wanted to put in place a reverse proxy solution and looked at Squid. After a lot of reading, it became clear the Squid 2.6 or above was the best

Re: [squid-users] Squid on steroids

2008-06-18 Thread Chris Robertson
Henrik Nordstrom wrote: On ons, 2008-06-18 at 01:44 +, [EMAIL PROTECTED] wrote: I'm most interested in the squid back-end setup. Should we look at something linux based clustering? Or should we be looking at some internal squid process? You don't need to cluster Squif, just a

[squid-users] Cisco PIX redirection

2008-06-18 Thread AL
Hi guys, I was wondering if it is possible for a Cisco PIX firewall to redirect www traffic to Squid, I am interested in a method other than WCCP? If it is possible, does anyone have a configuration example handy for what needs to be done on the PIX. Thanks everyone. --AL

[squid-users] Re: Negotiate problem 'BH received type 1 NTLM token'

2008-06-18 Thread Markus Moeller
I am working on integrating ntlm_auth into squid_kerb_auth to have a better negotiate support, but I have some basic issues right now to get a test setup. Markus Malte Schröder [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]

Re: [squid-users] Squid on steroids

2008-06-18 Thread Tuc at T-B-O-H.NET
Just consider balancing the load on source IP, or NATing the Squid servers, as there are a number of websites that don't like a single HTTP session originating from multiple IPs. Long ago, far away, when I owned a managed server hosting company... We used Foundry load balancers to

Re: [squid-users] Reverse proxies...

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 06:55 -0700, John Doe wrote: Do I have to remove the self sibling line? Preferably yes. It will probably still surive with it, but there will quite likely be some forwarding loops detected and additionally unneeded load on your servers. Do I miss any classic cache_peer

Re: [squid-users] name resolution problems (/etc/hosts)

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 18:40 +0200, Donoso Gabilondo, Daniel wrote: Hello again, I Use Squid as a reverse Proxy with 192.168.240.22:8080 as default site and works fine, but when I put a name, and after restarting, doesn't work. What's the error? What does your cache_peer line (and

Re: [squid-users] Squid

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 10:05 -0700, aot2002 wrote: I have squid setup using a reverse proxy on port listening 21080 squid redirects and gets info from my webserver to 21080 back to the user everything works except when i get a 302 redirect if i enter in the webbrowser

Re: [squid-users] Passing web service username and password in Squid for Windows...

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 17:08 -0400, Gary Tai wrote: From the application documentation: Web services requires a client to provide credentials as BASIC HTTP user authentication. BASIC authentication encrypts the user ID and password with Base64 encoding and passes it as an HTTP request header

Re: [squid-users] Cisco PIX redirection

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 17:39 -0400, AL wrote: I was wondering if it is possible for a Cisco PIX firewall to redirect www traffic to Squid, I am interested in a method other than WCCP? If it is possible, does anyone have a configuration example handy for what needs to be done on the PIX.

Re: [squid-users] No auth, only log?

2008-06-18 Thread docdiz
2008/6/17, Henrik Nordstrom [EMAIL PROTECTED]: Other applications are abusing the CONNECT method to do the same thing. meant to be used for SSL, but is in reality being used a lot more for other traffic such as FTP, IRC, Peer-To-Peer and god knows what.. Regards Henrik YES!!! Use lot

Re: [squid-users] Cisco PIX redirection

2008-06-18 Thread AL
the squid box is located on remote location, outside the network where the PIX sits. -AL On Wed, Jun 18, 2008 at 6:31 PM, Henrik Nordstrom [EMAIL PROTECTED] wrote: On ons, 2008-06-18 at 17:39 -0400, AL wrote: I was wondering if it is possible for a Cisco PIX firewall to redirect www traffic

Re: [squid-users] Cisco PIX redirection

2008-06-18 Thread AL
Also l forgot to mention that I am running the windows port of Squid which lacks the WCCP functionality. --AL On Wed, Jun 18, 2008 at 7:43 PM, AL [EMAIL PROTECTED] wrote: the squid box is located on remote location, outside the network where the PIX sits. -AL On Wed, Jun 18, 2008 at 6:31

Re: [squid-users] Passing web service username and password in Squid for Windows...

2008-06-18 Thread Gary Tai
Yes, sorry I didn't state, but it is a Reverse Proxy. So, the login=PASS parameter will forward the encoded username and password to the backend application? I'll give it a try. Thanks. On Wed, Jun 18, 2008 at 6:30 PM, Henrik Nordstrom [EMAIL PROTECTED] wrote: On ons, 2008-06-18 at 17:08

Re: [squid-users] Cisco PIX redirection

2008-06-18 Thread Henrik Nordstrom
On ons, 2008-06-18 at 19:43 -0400, AL wrote: the squid box is located on remote location, outside the network where the PIX sits. Then I would recommend you to look into getting WPAD set up in the network instead, allowing the clients to auto-discover what proxy to use. SHort of that you can

Re: [squid-users] Passing web service username and password in Squid for Windows...

2008-06-18 Thread Gary Tai
I should detail that the back end web service is an AXIS application (I don't know too much about it). Traffic that doesn't require a web service call using username and password works. It's only the web service communication using username and password where it fails. On Wed, Jun 18, 2008 at

[squid-users] Negotiate problem 'BH received type 1 NTLM token'

2008-06-18 Thread chris brain
Hi Malte, We have seen the same issue. It appears that it is a MS bug. Try changing the name in the config of media player from a fully qualified name to a netbios name. i.e. from proxy.domain.com to proxy it is caused by media player only using ntlm auth if it is specifed as a netbios name.

Re: [squid-users] Cisco PIX redirection

2008-06-18 Thread AL
Thanks Henrik. Do you know of an example somewhere (e.g. wiki) that outlines the nat redirection configuration for the Cisco PIX ? --AL On Wed, Jun 18, 2008 at 8:28 PM, Henrik Nordstrom [EMAIL PROTECTED] wrote: On ons, 2008-06-18 at 19:43 -0400, AL wrote: the squid box is located on remote

Re: [squid-users] custom logformats and squid-2.5.STABLE14-1.4E

2008-06-18 Thread Amos Jeffries
I looked around but seem to not have much luck finding or figuring out exactly what logging features work in this version of Squid. Is there a version matrix somewhere listing versions and the features they support? Or maybe I'm just looking in the wrong places? Is it just me or is google

[squid-users] squid-3.0.STABLE6 compile on solaris 2.8

2008-06-18 Thread Robert Klopotoski, Jr.
I am having some issues getting squid 3.0 Stable6 on a solaris 2.8 box. The configure script was run with all default options except the following: --prefix=/usr/local/squid3, as well as CXX=/usr/bin/gcc. I've tried on two different 5.8 boxes. The gcc compiler versions are both 3.4.

Re: [squid-users] squid-3.0.STABLE6 compile on solaris 2.8

2008-06-18 Thread Amos Jeffries
I am having some issues getting squid 3.0 Stable6 on a solaris 2.8 box. Codie and build problems should really be brought up in squid-dev mailing list where all the developers are likely to see and help you. CC'ing in case someone else there has a good idea what to do... The configure script

Re: [squid-users] name resolution problems (/etc/hosts)

2008-06-18 Thread Amos Jeffries
On ons, 2008-06-18 at 18:40 +0200, Donoso Gabilondo, Daniel wrote: Hello again, I Use Squid as a reverse Proxy with 192.168.240.22:8080 as default site and works fine, but when I put a name, and after restarting, doesn't work. What's the error? What does your cache_peer line (and

Re: [squid-users] Squid

2008-06-18 Thread Amos Jeffries
I have squid setup using a reverse proxy on port listening 21080 squid redirects and gets info from my webserver to 21080 back to the user everything works except when i get a 302 redirect if i enter in the webbrowser http://MYIPADDRESS:21080/test/home.php it works fine

[squid-users] Filtered IP in a URL

2008-06-18 Thread Shaine
Dear Friends, In squid url-rewriting , i wanted to add some third party parameters to the url and wanted to filtered out IP which assigned for client ( Client -IP ). How can i do this ? and is there any examples exist in squid-cache guide or some where ? URL ip-address/fqdn ident method please

Re: [squid-users] squid-3.0.STABLE6 compile on solaris 2.8

2008-06-18 Thread Amos Jeffries
Amos Jeffries wrote: I am having some issues getting squid 3.0 Stable6 on a solaris 2.8 box. Codie and build problems should really be brought up in squid-dev mailing list where all the developers are likely to see and help you. CC'ing in case someone else there has a good idea what to do...