Re: [squid-users] When worlds collide

2008-07-14 Thread Henrik Nordstrom
On sön, 2008-07-13 at 15:55 +1200, Amos Jeffries wrote: Out of luck. Domain hijacking like this is precisely why squid doesn't trust the client-given dst IP in transparent mode. They will have to: a) connect to that domain using raw IP address in the URL. b) negotiate with the proxy

Re: [squid-users] When worlds collide

2008-07-14 Thread Henrik Nordstrom
On sön, 2008-07-13 at 10:46 -0400, Tuc at T-B-O-H.NET wrote: Thanks for the reply. It turns out, oddly, that the IP that the system is sending them to doesn't seem to be contactable either. Interestingly, its generating those 0 0 (return code/bytes) I was seeing recently. So maybe if

[squid-users] H/W requirement for Squid to run in bigger scene like ISP

2008-07-14 Thread bijayant kumar
Hello to list, I am using squid 3.0.STABLE7. Can i use squid for caching server in a ISP like environment. If yes, then what should be the H/W configuration? I have gone through to various articles found in google. In my observations since Squid is a single threaded(not a multithread) s/w, so

Re: [squid-users] H/W requirement for Squid to run in bigger scene like ISP

2008-07-14 Thread Anna Jonna Armannsdottir
On mán, 2008-07-14 at 02:25 -0700, bijayant kumar wrote: In my observations since Squid is a single threaded(not a multithread) s/w, so there is no need to use dual/quad core processor, and RAM is also not very important factor because somewhere i read, 10MB RAM for every 1 GB of cache space

[squid-users] Reverse Proxy, OWA RPCoHTTPS and NTLM authentication passthrough

2008-07-14 Thread Abdessamad BARAKAT
Hi, I need to reverse proxied a OWA 2007 service and I have some problems with NTLM authentication and the RPC connection. Squid offers a SSL service and connect himself to the OWA with a SSL connection The NTLM authentication was made bu the OWA so I need squid to pass the credentials

Re: [squid-users] H/W requirement for Squid to run in bigger scene like ISP

2008-07-14 Thread Angelo Hongens
Anna Jonna Armannsdottir wrote: With todays hardware, wich is often dual processor by default, there are very little savings using only one processor. Chances are that Your users will hate the proxy server, if it turns out to be a bottleneck during heavy load. I'm not running any squid

Re: [squid-users] Persistent connect to cache_peer parent question

2008-07-14 Thread Russell Suter
Amos Jeffries wrote: Russell Suter wrote: Hi, I have a question with regards to persistent connections to a cache peer parent. I have multiple users connecting through a custom compiled Squid.2.6.STABLE17 (also tried 3.0.STABLE7) on a RedHat EL 4 box in front of a commercial web filter

Re: [squid-users] H/W requirement for Squid to run in bigger scene like ISP

2008-07-14 Thread Anna Jonna Armannsdottir
On mán, 2008-07-14 at 13:01 +0200, Angelo Hongens wrote: All the servers I usually buy have either one or two quad core cpu's, so it's more the question: will 8 cores perform better than 4? If not, I would be wiser to buy a single Xeon X5460 or so, instead of 2 lower clocked cpu's, right?

Re: [squid-users] FW: Problems with LDAP on Windows XP

2008-07-14 Thread Chris Woodfield
I seem to remember having a similar problem when calling a URL rewriter with command-line arguments; I solved it by having squid call a shell script instead that had the actual rewriter + arguments on an exec line. I later rewrote the helper app to read a config file in lieu of

Re: [squid-users] H/W requirement for Squid to run in bigger scene like ISP

2008-07-14 Thread Amos Jeffries
Anna Jonna Armannsdottir wrote: On mán, 2008-07-14 at 13:01 +0200, Angelo Hongens wrote: All the servers I usually buy have either one or two quad core cpu's, so it's more the question: will 8 cores perform better than 4? If not, I would be wiser to buy a single Xeon X5460 or so, instead of 2

[squid-users] assertion failed

2008-07-14 Thread pritam
Hi All, Knowing that it is a bug ( ..? ) I need yours help here. My squid is getting restarted often (2, 3 times a day) with following messages: 2008/07/14 07:56:47| assertion failed: store_client.c:172: !EBIT_TEST(e-flags, ENTRY_ABORTED) 2008/07/14 17:18:17| assertion failed:

Re: [squid-users] When worlds collide

2008-07-14 Thread Tuc at T-B-O-H.NET
On s=C3=B6n, 2008-07-13 at 10:46 -0400, Tuc at T-B-O-H.NET wrote: Thanks for the reply. It turns out, oddly, that the IP that the system is sending them to doesn't seem to be contactable either. Interest= ingly, its generating those 0 0 (return code/bytes) I was seeing recently. So =

[squid-users] wccp and Cisco router identifier

2008-07-14 Thread Clemente Aguiar
I am in the process of installing a transparent squid cache using wcpp using a Cisco Router C2600 (IOS Version 12.2(46a)) Everything is working fine except there is something that I don't know how to change. The Cisco router identifier is the address that is used for GRE on the router. Our

[squid-users] POST method doesn't work on Squid 3.0 Stable 7(+ ICAP client) and GreasySpoon (ICAP server)

2008-07-14 Thread Jones
Thanks to developers' hard work to let us enjoy the Squid. Currently, I am using Squid 3.0 Stable 7 + ICAP client and GreasySpoon (ICAP server) to customize the page. It works pretty well in Debian. However, when I browse the page, which has a form with POST method, the page will load repeatedly

[squid-users] POST method doesn't work on Squid 3.0 Stable 7(+ ICAP client) and GreasySpoon (ICAP server)

2008-07-14 Thread Jones
Thanks to developers' hard work to let us enjoy the Squid. Currently, I am using Squid 3.0 Stable 7 + ICAP client and GreasySpoon (ICAP server) to customize the page. It works pretty well in Debian. However, when I browse the page, which has a form with POST method, the page will load repeatedly

Re: [squid-users] When worlds collide

2008-07-14 Thread Henrik Nordstrom
Mån 2008-07-14 klockan 11:03 -0400 skrev Tuc at T-B-O-H.NET: I heard back from the company today. Yes, they said it is an internal (onsite/VPN) only accessible site (Yet they use a Public IP.. And we wonder where all the good IPs have gone. ;) ). Heh.. But shouldn't Squid be

[squid-users] Does --enable-ntlm-auth-helpers=fakeauth work with 3.0?

2008-07-14 Thread Jeff Jenkins
Trying to get fakeauth to work with 3.x (have used 3.HEAD-20080711 sources), but I see crashes in fakeauth. Anyone have this working? Additionally, where is a definitive guide on getting NTLM auth to work with 3.x? I have googled a bunch of 2.x stuff, but not much mentioning 3.x

[squid-users] Need help with a Reverse proxy situation

2008-07-14 Thread Patson Luk
Hi, We are using SQUID 3.0 as a reverse proxy on our server and it boosts the performance a lot! However, we have problems when some of the requests are coming in as XML files. On several forums there are mentions that SQUID is only HTTP 1.0 compliant hence those XML files comes in as chunked

[squid-users] Need help with POST problem in Squid 3.0 + ICAP client

2008-07-14 Thread Jones
Thanks to developers' hard work to let us enjoy the Squid. Currently, I am using Squid 3.0 Stable 7 + ICAP client and GreasySpoon (ICAP server) to customize the page. It works pretty well in Debian. However, when I browse the page, which has a form with POST method, the page will load repeatedly

[squid-users] Need help with POST problem in Squid 3.0 + ICAP client

2008-07-14 Thread Jones
Thanks to developers' hard work to let us enjoy the Squid. Currently, I am using Squid 3.0 Stable 7 + ICAP client and GreasySpoon (ICAP server) to customize the page. It works pretty well in Debian. However, when I browse the page, which has a form with POST method,the page will load repeatedly

Re: [squid-users] wccp and Cisco router identifier

2008-07-14 Thread Adrian Chadd
conf t int lo0 ip addr x.x.x.x 255.255.255.255 end wri mem Then probably delete and rebuild your wccp config on the router. Adrian 2008/7/15 Clemente Aguiar [EMAIL PROTECTED]: I am in the process of installing a transparent squid cache using wcpp using a Cisco Router C2600 (IOS Version

Re: [squid-users] can't get squid to cache

2008-07-14 Thread Angelo Hongens
Henrik Nordstrom wrote: The problem is minimum_expiry_time in your squid.conf: minimum_expiry_time 3600 seconds refresh_pattern . 3600 100% 3600 ignore-no-cache ignore-reload override-expire override-lastmod There is a corner issue with minimum_expiry_time that the expiry time needs to

[squid-users] Fwd: Url redirection to ip

2008-07-14 Thread jason bronson
Is it possible to redirect based on a URL path in squid example I have 63.45.45.45/login/test 63.45.45.45/login/new 63.45.45.45/login/test -- 10.108.111.34 63.45.45.45/login/new -- 10.108.18.254 So I want to redirect squid's call based upon its external path being seen then send to the

RE: [squid-users] wccp and Cisco router identifier

2008-07-14 Thread Ritter, Nicholas
You can't set this in the router that I am aware of. I had the same issue. -Original Message- From: Clemente Aguiar [mailto:[EMAIL PROTECTED] Sent: Monday, July 14, 2008 11:01 AM To: squid-users@squid-cache.org Subject: [squid-users] wccp and Cisco router identifier I am in the process

Re: [squid-users] Does --enable-ntlm-auth-helpers=fakeauth work with 3.0?

2008-07-14 Thread Jeff Jenkins
I built squid as follows: $ sudo ./configure --prefix=/usr/local/squid/ntlm --enable-auth=ntlm -- enable-ntlm-auth-helpers=fakeauth When running squid and attempting to get my client to use the squid proxy, I see the following errors on the console of the squid machine: 2008/07/14

Re: [squid-users] wccp and Cisco router identifier

2008-07-14 Thread Michel
I am in the process of installing a transparent squid cache using wcpp using a Cisco Router C2600 (IOS Version 12.2(46a)) Everything is working fine except there is something that I don't know how to change. The Cisco router identifier is the address that is used for GRE on the router.

[squid-users] Re: assertion failed

2008-07-14 Thread pritam
pritam wrote: Hi All, Knowing that it is a bug ( ..? ) I need yours help here. My squid is getting restarted often (2, 3 times a day) with following messages: 2008/07/14 07:56:47| assertion failed: store_client.c:172: !EBIT_TEST(e-flags, ENTRY_ABORTED) 2008/07/14 17:18:17| assertion

Re: [squid-users] H/W requirement for Squid to run in bigger scene like ISP

2008-07-14 Thread Chris Woodfield
Hi, One thing to keep in mind is that in my experience, it makes sense to not only get fast disks, but put as much RAM in the box you can afford. Now *don't* give this all the squid via the mem_cache config; let the OS use the spare memory for caching disk reads. This will spee

[squid-users] Need help with POST problem in Squid 3.0 + GreasySpoon

2008-07-14 Thread Jones
Thanks to developers' hard work to let us enjoy the Squid. Currently, I am using Squid 3.0 Stable 7 + ICAP client and GreasySpoon (ICAP server) to customize the page. It works pretty well in Debian. However, when I browse the page, which has a form with POST method, the page will load repeatedly

Re: [squid-users] Fwd: Url redirection to ip

2008-07-14 Thread Michael Alger
On Mon, Jul 14, 2008 at 04:31:35PM -0400, jason bronson wrote: Is it possible to redirect based on a URL path in squid example I have 63.45.45.45/login/test 63.45.45.45/login/new 63.45.45.45/login/test -- 10.108.111.34 63.45.45.45/login/new -- 10.108.18.254 So I want to redirect

Re: [squid-users] Need help with a Reverse proxy situation

2008-07-14 Thread Michael Alger
On Tue, Jul 15, 2008 at 03:39:46AM +0900, Patson Luk wrote: We are using SQUID 3.0 as a reverse proxy on our server and it boosts the performance a lot! However, we have problems when some of the requests are coming in as XML files. On several forums there are mentions that SQUID is only

[squid-users] Need help with POST problem in Squid 3.0 + ICAP client

2008-07-14 Thread Yu Jones
I am using Squid 3.0 Stable 7 + ICAP client and GreasySpoon (ICAP server) to customize the page. It works pretty well in Debian. However, when I browse the page, which has a form with POST method,the page will load repeatedly without finishing, such as