RE: RES: [squid-users] block https requests

2008-12-17 Thread Dean Weimer
The host is still known from the request header, and is not encrypted in https, only the data in the body of the request and reply is encrypted, if the headers were encrypted a proxy would never be able to direct the request to the origin server. Here is a direct copy from a raw TCP data

RE: [squid-users] winbind directories permissions issue

2008-12-17 Thread vincent.blondel
... Amos I made some cut from our previous posts to avoid any confusion. Sorry I haven't had much to do with winbind than we have already tried. you are the first I've seen where these fixes have not worked. Can you get a full ls -la trace of the directory content and permissions at

[squid-users] Performance problems with 2.6.STABLE18

2008-12-17 Thread Mark Kent
Hi, I'm currently having a performance issue with Squid 2.6.STABLE18 (running on RHEL4). As I run traffic through the proxy, the memory grows steadily, and apparently without limit. This increase in memory usage is coupled with a steadily growing CPU usage, up to a point at which a single

[squid-users] Zeros in cachemgr output

2008-12-17 Thread Jevos, Peter
Hi all Is this ok with all these zero's in my output ? Cache information for squid: Request Hit Ratios: 5min: 0.0%, 60min: 0.0% Byte Hit Ratios:5min: 87.9%, 60min: 42.4% Request Memory Hit Ratios: 5min: 0.0%, 60min: 0.0% Request Disk Hit Ratios:

[squid-users] SquidNT 2.6 Stable 16 - Uploading Files Problem

2008-12-17 Thread web
Hi,  *REPOST* Can anyone help me with this please?  Is there something in my squid.conf file that I need to change or is it a mime.conf problem? Sorry I dont have much of an idea of what to look for. To recap, some people are having trouble uploading files using web based email or other

Re: RES: [squid-users] block https requests

2008-12-17 Thread Matus UHLAR - fantomas
On 16.12.08 13:51, Ricardo Augusto de Souza wrote: I AM used to block sites using: acl bad_sites dstdomain /etc/squid/bad_sites.txt http_access deny bad_sites With this my users cannot access all domains listed in /etc/squid/bad_sites.txt using http but they can access using

Re: [squid-users] Squid reload -- assertion failed: store_client.cc:

2008-12-17 Thread Christos Tsantilas
Hi Thomas, Thomas Meier wrote: Hello just compiled Squid 3.1, but the same error (assertion failed + tunnelReadServer ) About tunnelReadServer error, I think you can ignore it. The first reload now after only 3 Minutes. What kind of trace do you need ?? Is it possible to collect and

[squid-users] Squid reload -- assertion failed: store_client.cc:

2008-12-17 Thread Thomas Meier
Hello just compiled Squid 3.1, but the same error (assertion failed + tunnelReadServer ) The first reload now after only 3 Minutes. What kind of trace do you need ?? Here the cache.log: 2008/12/17 09:55:22| tunnelReadServer: FD 154: read failure: (0) Error 0 2008/12/17 09:55:23|

Re: [squid-users] Squid reload -- assertion failed: store_client.cc:

2008-12-17 Thread Thomas Meier
Hello just compiled Squid 3.1, but the same error (assertion failed + tunnelReadServer ) The first reload now after only 3 Minutes. What kind of trace do you need ?? Here the cache.log: 2008/12/17 09:55:22| tunnelReadServer: FD 154: read failure: (0) Error 0 2008/12/17 09:55:23|

Re: [squid-users] More access.log questions

2008-12-17 Thread Wilson Hernandez - MSD, S. A.
Amos. Thanks for replying. After reviewing this access.log file section, is sqid working correctly or are there any adjustments I need to make to make run more smoothly? Amos Jeffries wrote: w...@msdrd.com wrote: Hello. Guys, sorry to post so many questions regarding access.log but, I'm

RE: [squid-users] SSL EDI Site issues

2008-12-17 Thread Joseph L. Casale
Add this before the line that requires auth: acl covisint dstdomain messaging.covisint.com http_access allow CONNECT localnet covisint Assuming that you have the localnet (local network ranges) and CONNECT acls defined already. Much appreciated Amos, this worked perfectly! jlc

[squid-users] Strange crash squid3 STABLE8 + ntlm_auth

2008-12-17 Thread gbillios
Hello, I have searched the archives and web but couldn't find anything about the following error I get in the cache.log after which squid restarts: ctx: exit level 0 assertion failed: helper.cc:1160: srv-deferred_requests == 0 Does someone know anything about this? I'm using squid3 STABLE8

[squid-users] TR: [Bulk] Re: [squid-users] TR: [Bulk] Re: TR: certificate verification with sha256 and squid

2008-12-17 Thread Raphael
Hello again, In case it helps, I manage to make the reverse proxy check and let access to the web site with the reverse-proxy Pound (which does not cache anything). I made another CA to test with sha256 and with 2048 bits certificates, and the error is still the same with Squid. Regards Raphael

Re: [squid-users] Squid reload -- assertion failed: store_client.cc:

2008-12-17 Thread thematice
en i can ss 2008-12-17 thematice ·¢ŒþÈË£º Thomas Meier ·¢ËÍʱŒä£º 2008-12-17 19:09:20 ÊÕŒþÈË£º squid-users ³­ËÍ£º Ö÷Ì⣺ [squid-users] Squid reload -- assertion failed: store_client.cc: Hello just compiled Squid 3.1, but the same error (assertion failed + tunnelReadServer )

Re: [squid-users] Performance problems with 2.6.STABLE18

2008-12-17 Thread Kinkie
On Wed, Dec 17, 2008 at 4:24 PM, Mark Kent mk...@messagelabs.com wrote: Hi, I'm currently having a performance issue with Squid 2.6.STABLE18 (running on RHEL4). As I run traffic through the proxy, the memory grows steadily, and apparently without limit. This increase in memory usage is

RE: [squid-users] Performance problems with 2.6.STABLE18

2008-12-17 Thread Mark Kent
Thanks, Kinkie. The version that I'm running contains a couple of minor modifications, so as a first pass I'd rather get the 2.6 version working, rather than go through a repatch. I tried running under valgrind, and it found a couple of leaks, but I'm not sure that those are strictly the

Re: [squid-users] Performance problems with 2.6.STABLE18

2008-12-17 Thread Adrian Chadd
2008/12/17 Mark Kent mk...@messagelabs.com: I tried running under valgrind, and it found a couple of leaks, but I'm not sure that those are strictly the problem. If it were a traditional memory leak, where memory was just wandering off, I don't quite see why the CPU would climb along with the

RE: [squid-users] time format of error page

2008-12-17 Thread Amos Jeffries
Amos, Okay. How exactly are you configuring Squid to use it? I've created a simple html web-stie running in apache2 in the same server. I'm using squidguard to block the sites if someone access these sites, it redirects the users to this website. Now I want to display this message

Re: Re: [squid-users] clientNatLookup: PF open failed: (13) Permissiondenied

2008-12-17 Thread Amos Jeffries
[r...@sraid-server ~]# /home/squid/sbin/squid -v Squid Cache: Version 2.7.STABLE4 configure options: '--prefix=/home/squid' '--enable-dlmalloc' '--with-pthreads' '--enable-poll' '--disable-internal-dns' '--enable-stacktrace' '--enable-removal-policies=heap,lru' '--enable-delay-pools'

[squid-users] how to append to the requests to origin

2008-12-17 Thread Evuraan::ഏവൂരാന്‍
Greetings, I've squid running in non-transparent mode. On a MISS, when it makes requests to the origin, how can something else be passed along with that request? Like a custom signature header? %{Foobar}i or even somehting like: http.setHeader(X-Pew-Pew:Blah-blah-1) thx.!

Re: [squid-users] SquidNT 2.6 Stable 16 - Uploading Files Problem

2008-12-17 Thread Amos Jeffries
Hi, *REPOST* Can anyone help me with this please? Is there something in my squid.conf file that I need to change or is it a mime.conf problem? Sorry I dont have much of an idea of what to look for. To recap, some people are having trouble uploading files using web based email or other

Re: [squid-users] SquidNT 2.6 Stable 16 - Uploading Files Problem

2008-12-17 Thread Amos Jeffries
Hi, *REPOST* Can anyone help me with this please? Is there something in my squid.conf file that I need to change or is it a mime.conf problem? Sorry I dont have much of an idea of what to look for. To recap, some people are having trouble uploading files using web based email or other

Re: [squid-users] More access.log questions

2008-12-17 Thread Amos Jeffries
Amos. Thanks for replying. After reviewing this access.log file section, is sqid working correctly or are there any adjustments I need to make to make run more smoothly? Did you even read that page on the logs? access.log has nothing to do with what you are talking about. If your squid.conf

Re: [squid-users] how to append to the requests to origin

2008-12-17 Thread Amos Jeffries
Greetings, I've squid running in non-transparent mode. On a MISS, when it makes requests to the origin, how can something else be passed along with that request? Like a custom signature header? %{Foobar}i or even somehting like: http.setHeader(X-Pew-Pew:Blah-blah-1) thx.! Define

RE: [squid-users] winbind directories permissions issue

2008-12-17 Thread Amos Jeffries
... Amos I made some cut from our previous posts to avoid any confusion. Sorry I haven't had much to do with winbind than we have already tried. you are the first I've seen where these fixes have not worked. Can you get a full ls -la trace of the directory content and permissions at

Re: [squid-users] More access.log questions

2008-12-17 Thread Wilson Hernandez - MSD, S. A.
Amos. Yes, I meant cache.log NOT access.log sorry for the confusion. I will remove extension_methods from squid.conf I won't be able to stop transparent interception because I don't want to go to every clients' sites to change their configurations. Will this keep the cache CLEAN? Hope it

Re: [squid-users] how to append to the requests to origin

2008-12-17 Thread Evuraan::ഏവൂരാന്‍
Thanks for the response. The idea is to make entries in origin's access log easily distinguishable and usefull. The prototype I've is as follows: Anything from my squids to their origin servers should have a Bill-To header, something like, ~$ curl -v http://192.168.1.100/index.html -o

RE: [squid-users] time format of error page

2008-12-17 Thread Sameer Shinde
Date: Thu, 18 Dec 2008 11:58:04 +1300 Subject: RE: [squid-users] time format of error page From: squ...@treenet.co.nz To: s2sam...@hotmail.com CC: squ...@treenet.co.nz; squid-users@squid-cache.org Amos, Okay. How exactly are you configuring Squid

[squid-users] Alert!: Invalid header 'WWW-Authenticate: NTLM'

2008-12-17 Thread Gregory Machin
Hi A client of ours needs to access a website that uses WWW-Authenticate: NTLM, but squid does not pass it through to the browser . The squid version is Squid Cache: Version 2.6.STABLE13 Whats the work around for this ? Thanks