[squid-users] external acl with miss access

2009-03-05 Thread Bharath Raghavendran
Hey, I was trying to use miss_access directive with an external acl I tried the following 2 configurations 1. miss_access allow acl_name miss_access deny all 2. miss_access allow !acl_name miss_access deny all where acl_name is an external acl using a helper program that always prints OK. I

Re: [squid-users] squidaio_queue_request: WARNING - Queue congestion

2009-03-05 Thread Kinkie
On Wed, Mar 4, 2009 at 6:59 AM, Shekhar Gupta shekharsaha...@gmail.com wrote: it's showing client_http.requests = 102.190863/sec It's strange. The load doesn't seem to be that high. What's the CPU load for squid, and how is iowait on your system? (both can be found using the 'top' command)

Re: [squid-users] 2 node squid cluster

2009-03-05 Thread Matus UHLAR - fantomas
On 04.03.09 11:26, Marc wrote: Anyone .. ? Bottomline question is: Why doesn't ICP work with stale, expired pages ? You apparently did not turn icp_hit_stale on, and it is off by default. Read the config file for comments -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/

Re: [squid-users] squid and ntlm: looking for SSO enabling tools

2009-03-05 Thread Amos Jeffries
robert rottermann wrote: Hi there, I want to run an intranet using an applicationserver (zope/plone) running behind a squid http accelerator. I want to provide NTLM based SSO such that a user that logged into his/her workstation is automaticely logged into the intranet. what I am looking for

Re: [squid-users] Problem with certain java sites

2009-03-05 Thread Amos Jeffries
Joop Beris wrote: Squid users, I am having a problem accessing/using certain Java enabled websites through my squid proxy. I am using squid-2.6.STABLE6-0.10 on a Suse machine (yes, I know this is an ancient release...). This release has been serving us very well and I am a bit reluctant to

Re: [squid-users] Are there some successful stories using Squid to build Content Distribution Networks?

2009-03-05 Thread Amos Jeffries
XUFENG wrote: Hi all, Are there some successful stories using Squid to build Content Distribution Networks (CDNs)? Any experience sharing will be welcomed. Yours, XUFENG From China. http://www.squid-cache.org/Library/ And of course, if anyone has their own publications about using Squid

Re: [squid-users] Problem with certain java sites

2009-03-05 Thread Joop Beris
On Thursday 05 March 2009 10:27:44 you wrote: You mean it sends only:   POST http://example.com/blah\n;  ?? No, sorry! I misread the wireshark capture. The exact post request is as follows: POST /cms/index.php HTTP/1.1 Host: www.nederweert.nl User-Agent: jupload/0.87 Referer:

Re: [squid-users] external acl with miss access

2009-03-05 Thread Amos Jeffries
Bharath Raghavendran wrote: Hey, I was trying to use miss_access directive with an external acl I tried the following 2 configurations 1. miss_access allow acl_name miss_access deny all 2. miss_access allow !acl_name miss_access deny all where acl_name is an external acl using a helper

[squid-users] TProxy Issues

2009-03-05 Thread Jamie Orzechowski
I am trying to get TProxy setup and running on a Linux based squid box. I have compiled a custom kernel with the following options (2.6.28.7) NETFILTER_TPROXY=y NETFILTER_XT_MATCH_SOCKET=y NETFILTER_XT_TARGET_TPROXY=y I have also installed the latest iptables r...@cache-01:/var/log/squid3#

Re: [squid-users] squidaio_queue_request: WARNING - Queue congestion

2009-03-05 Thread Shekhar Gupta
For Last 1 hr . cpu_time = 86.267886 seconds wall_time = 3600.031220 seconds cpu_usage = 2.396309% On Thu, Mar 5, 2009 at 2:07 PM, Kinkie gkin...@gmail.com wrote: On Wed, Mar 4, 2009 at 6:59 AM, Shekhar Gupta shekharsaha...@gmail.com wrote: it's showing client_http.requests =

Re: [squid-users] Problem with certain java sites

2009-03-05 Thread Amos Jeffries
Joop Beris wrote: On Thursday 05 March 2009 10:27:44 you wrote: You mean it sends only: POST http://example.com/blah\n; ?? No, sorry! I misread the wireshark capture. The exact post request is as follows: POST /cms/index.php HTTP/1.1 Host: www.nederweert.nl User-Agent: jupload/0.87

Re: [squid-users] TProxy Issues

2009-03-05 Thread Amos Jeffries
Jamie Orzechowski wrote: I am trying to get TProxy setup and running on a Linux based squid box. I have compiled a custom kernel with the following options (2.6.28.7) NETFILTER_TPROXY=y NETFILTER_XT_MATCH_SOCKET=y NETFILTER_XT_TARGET_TPROXY=y I have also installed the latest iptables

Re: [squid-users] TProxy Issues

2009-03-05 Thread Jamie Orzechowski
I went from a standard transparent setup to tproxy. Everything works fine with the old transparent method so my ACL's are working. My customers are seeing nothing. No squid errors on their browsers just timesout ... my access log does not not grow. Amos Jeffries wrote: Jamie Orzechowski

Re: [squid-users] Problem with certain java sites

2009-03-05 Thread Joop Beris
On Thursday 05 March 2009 14:53:32 you wrote: POST /cms/index.php HTTP/1.1 Host: www.nederweert.nl User-Agent: jupload/0.87 Referer: http://www.nederweert.nl/cms/ From: i...@jupload.biz Accept: text/*;q=1.0, */*;q=0.0 Cache-Control: no-cache Pragma: no-cache Accept-Charset:

Re: [squid-users] TProxy Issues

2009-03-05 Thread Amos Jeffries
Jamie Orzechowski wrote: I went from a standard transparent setup to tproxy. Everything works fine with the old transparent method so my ACL's are working. My customers are seeing nothing. No squid errors on their browsers just timesout ... my access log does not not grow. Amos Jeffries

Re: [squid-users] TProxy Issues

2009-03-05 Thread Jamie Orzechowski
I am watching my counters and they do not appear to be incrementing but tcpdump is showing alot of traffic Example 10:42:02.348321 IP 66-78-113-55.access.ripnet.com.59690 www.11.07.facebook.com.www: S 341952050:341952050(0) win 65535 mss 1452,sackOK,eol 10:42:02.358773 IP

[squid-users] detecting cache hit at external acl

2009-03-05 Thread Bharath Raghavendran
Hi, We are using http_reply_access and calling c++ program using external_acl_type. We are looking for if we could access status related to cache(to be precise - to know whether value is TCP_HIT/TCP_MEM_HIT/TCP_MISS, etc) I could see these values getting populated in logs. Is there

[squid-users] buggy_server

2009-03-05 Thread squid proxy
hi I have squid Version 2.6.STABLE5 could someone explain me pls what exactly buggy_server is? howto recognize a buggy_server? could I recognize in the squid logs? Piotr

Re: [squid-users] Squid and NTLM Authentication

2009-03-05 Thread Ryan McCain
On Wed, Mar 4, 2009 at 5:22 PM, in message eb2a55e07ade8fe1700dc079b76b687c.squir...@webmail.treenet.co.nz, Amos Jeffries squ...@treenet.co.nz wrote: Ah SLES. They have actually managed to be slower than RedHat on updating their software. Okay, from what I can tell you're pretty much

[squid-users] Squid + Zimbra

2009-03-05 Thread João Alberto Kuchnier
Hi! I'm having some problems configuring Squid with ldap_auth on a Zimbra server. Actually, authentication is working, but when I define an user as blocked, his/her account continue having access to Internet through proxy. Someone had the same problem before? Thanks! João Alberto

Re: [squid-users] Squid and NTLM Authentication

2009-03-05 Thread Ryan McCain
I was able to install Squid 3.x and the result is still the same.. Any ideas? Which 3.x? 3.0 is based on 2.5 and does not support it either. Try the 2.7 for stable version, or 3.1 for beta release. Amos Amos, 2.7 worked like a charm. Any idea what version will ship with SLES 11?

[squid-users] Caputre trafic

2009-03-05 Thread Luis Daniel Lucio Quiroz
Hi Squids, We are going to set up some inverse squid, but as a requirement we must log html trafic. Not just access.log but html traffic, I mean tags. Is this possible with squid? TIA LD

Re: [squid-users] TProxy Issues

2009-03-05 Thread Amos Jeffries
Jamie Orzechowski wrote: I am watching my counters and they do not appear to be incrementing but tcpdump is showing alot of traffic Aha. That means something else in the firewall rules is catching or changing the traffic before it gets near the TPROXY rules. Amos Example 10:42:02.348321

Re: [squid-users] detecting cache hit at external acl

2009-03-05 Thread Amos Jeffries
Bharath Raghavendran wrote: Hi, We are using http_reply_access and calling c++ program using external_acl_type. We are looking for if we could access status related to cache(to be precise - to know whether value is TCP_HIT/TCP_MEM_HIT/TCP_MISS, etc) I could see these values getting populated

Re: [squid-users] buggy_server

2009-03-05 Thread Amos Jeffries
squid proxy wrote: hi I have squid Version 2.6.STABLE5 could someone explain me pls what exactly buggy_server is? howto recognize a buggy_server? could I recognize in the squid logs? Piotr No such control or log tag in any current Squid. Where did you find it? Amos -- Please be using

Re: [squid-users] Squid and NTLM Authentication

2009-03-05 Thread Amos Jeffries
Ryan McCain wrote: I was able to install Squid 3.x and the result is still the same.. Any ideas? Which 3.x? 3.0 is based on 2.5 and does not support it either. Try the 2.7 for stable version, or 3.1 for beta release. Amos Amos, 2.7 worked like a charm. Any idea what version will ship with

[squid-users] Squid 3.1.0.6 beta is available

2009-03-05 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.1.0.6 beta release! This release corrects a few features that were regressed one way or another from Squid-3.0 or in some cases from Squid-2.7. Important changes to note: - Regression Fix: Support HTTP/0.9

Re: [squid-users] squidaio_queue_request: WARNING - Queue congestion

2009-03-05 Thread Nyamul Hassan
In cachemgr, you can see the queue in ASYNC IO Functions Counters. What number do you see during peak load, or when the error shows in Cache.Log? Are you using 280GB cache_dir on one HDD? Or multiple HDDs? What's your HDD interface type (IDE, SATA, SCSI, etc.)? Regards HASSAN -

Re: [squid-users] Streaming is killing Squid cache

2009-03-05 Thread Nyamul Hassan
Yes, you're right. But, onto your problem with Windows Update, did you follow the instruction mentioned in the FAQ about windows update, and are still facing problems? We implemented the rules mentioned in the FAQ, and it works like a charm. My customers are so happy to get Windows Updates

Re: [squid-users] Two Squid with common cache

2009-03-05 Thread Nyamul Hassan
Hi all, This thread just raised another question on my mind. How would adding another instance (in the same box) with null cache_dir improve my performance? I'm a bit confused. Could you please explain a bit more? Regards HASSAN - Original Message - From: Leonardo Rodrigues

[squid-users] Squid 2.7STABLE6 for Windows?

2009-03-05 Thread joost.deheer
Hello, Usually I download the Windows binary from Acme (http://squid.acmeconsulting.it/download/dl-squid.html), but 2.7STABLE6 hasn't been published there (yet). Is this service discontinued, is it commercial now, or is there another place I can get Windows binaries? In case no one provides