Re: [squid-users] squid 3.0STABLE14: Detected DEAD Parent [proxy]

2009-04-19 Thread Amos Jeffries
of the last 150 ICP replies are DENIED 2009/04/19 20:12:09| WARNING: No replies will be sent for the next 3600 seconds 2009/04/19 20:12:31| Detected DEAD Parent: 127.0.0.1 2009/04/19 20:12:52| ipcacheParse: No Address records in response to 'www.ipv6.sixxs.net' After building 3.0.STABLE14-20

[squid-users] Forwarding problems

2009-04-19 Thread Pandu E Poluan
Hi all! I've configured my proxies correctly, and now they work as expected. * Requests to fast sites get forwarded to ProxyA, which uses FastInet * Other requests gets handled directly by ProxyB and ProxyC, which uses SlowInet There's a problem, however, that recently cropped up. I've added

Re: [squid-users] Headers control in Squid 3.0

2009-04-19 Thread Oleg
Oops. Ya - it's work's with Negotiate-NTLM-Basic sequence... Strange - Firefox for Windows on Squid 2.7.6 don't work properly with that sequence. That why I begin experiments with headers control. Now all works right. Thans for reply. Amos Jeffries пишет: > Oleg wrote: >> Hi. >> >> Before Squi

Re: [squid-users] Re: squid 3.0STABLE14: Detected DEAD Parent [proxy]

2009-04-19 Thread Amos Jeffries
vollkom...@gmx.net wrote: I've made one change in squid.conf that seems to cure most of the problem, with STABLE14-20090411: cache_peer 127.0.0.1 parent 8123 0 no-query no-digest no-netdb-exchange default Interestingly, I was searching about "tunnelReadServer: FD 70: read failure: (0) Unknown e

Re: [squid-users] Headers control in Squid 3.0

2009-04-19 Thread Amos Jeffries
Oleg wrote: Hi. Before Squid 3.0 I can change a Proxy-Authenticate header through duplet: header_access Proxy-Authenticate deny browserFirefox osLinux header_replace Proxy-Authenticate Negotiate That because first authenticate method is NTLM for IE. After upgrade to Squid 3.0, header_access d

[squid-users] Headers control in Squid 3.0

2009-04-19 Thread Oleg
Hi. Before Squid 3.0 I can change a Proxy-Authenticate header through duplet: header_access Proxy-Authenticate deny browserFirefox osLinux header_replace Proxy-Authenticate Negotiate That because first authenticate method is NTLM for IE. After upgrade to Squid 3.0, header_access directive fork

[squid-users] Re: squid 3.0STABLE14: Detected DEAD Parent [proxy]

2009-04-19 Thread vollkommen
WARNING: 143 of the last 150 ICP replies are DENIED 2009/04/19 20:12:09| WARNING: No replies will be sent for the next 3600 seconds 2009/04/19 20:12:31| Detected DEAD Parent: 127.0.0.1 2009/04/19 20:12:52| ipcacheParse: No Address records in response to 'www.ipv6.sixxs.net' After

[squid-users] squid 3.0STABLE14: Detected DEAD Parent [proxy]

2009-04-19 Thread vollkommen
DENIED 2009/04/19 20:12:09| WARNING: No replies will be sent for the next 3600 seconds 2009/04/19 20:12:31| Detected DEAD Parent: 127.0.0.1 2009/04/19 20:12:52| ipcacheParse: No Address records in response to 'www.ipv6.sixxs.net' After building 3.0.STABLE14-20090419, I find the above is

Re: [squid-users] is there a squid "cache rank" value available for statistics?

2009-04-19 Thread Amos Jeffries
> Hi, > > I'm wondering about ways to measure the optimum size for a cache, in terms > of the "value" you gain from each GB of cache space. If you've got a > 400GB > cache and only 99% of your hits come from the first 350GB, there's > probably > no point looking for a larger cache. If only 80% co

Re: [squid-users] is there a squid "cache rank" value available for statistics?

2009-04-19 Thread Gavin McCullagh
On Sun, 19 Apr 2009, Gavin McCullagh wrote: > In the case of simple LRU, if the queue must be traversed to find each > element and requeue it (perhaps this isn't the case?), On reflection, I presume this is not the case. I imagine the struct in ram for each cache object must include a pointer t

[squid-users] is there a squid "cache rank" value available for statistics?

2009-04-19 Thread Gavin McCullagh
Hi, I'm wondering about ways to measure the optimum size for a cache, in terms of the "value" you gain from each GB of cache space. If you've got a 400GB cache and only 99% of your hits come from the first 350GB, there's probably no point looking for a larger cache. If only 80% come from the fir

Re: [squid-users] reverse proxy filtering?

2009-04-19 Thread Gavin McCullagh
Hi, On Sun, 19 Apr 2009, Jeff Sadowski wrote: > Actually no you can browse books without login in. Why not just prevent logins then by having squid block the login processing page with a custom error page stating "no logins from outside"? > Cool thanks but I'm seriously looking at using privoxy

Re: [squid-users] reverse proxy filtering?

2009-04-19 Thread Jeff Sadowski
On Sun, Apr 19, 2009 at 3:09 AM, Gavin McCullagh wrote: > Hi, > > On Sun, 19 Apr 2009, Jeff Sadowski wrote: > >> I am helping a library to setup a way to display available books to the >> outside. >> The internal website allows you to login and check out books which >> they want blocked to the ou

Re: [squid-users] Allow Single IP to bypass Squid Proxy

2009-04-19 Thread Amos Jeffries
robp2175 wrote: Would you be so kind as give me an example of how to do this, I am very new to this. Thank you very much. Can't say what to set your firewall. Take a gander at http://wiki.squid-cache.org/ConfigExamples/Intercept for several types of transparent setup and the firewall settings

Re: [squid-users] reverse proxy filtering?

2009-04-19 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, On Sun, 19 Apr 2009, Jeff Sadowski wrote: I am helping a library to setup a way to display available books to the outside. The internal website allows you to login and check out books which they want blocked to the outside. They do not want to modify the web develope

Re: [squid-users] Allow Single IP to bypass Squid Proxy

2009-04-19 Thread robp2175
Would you be so kind as give me an example of how to do this, I am very new to this. Thank you very much. Amos Jeffries-2 wrote: > > robp2175 wrote: >> >> >> robp2175 wrote: >>> I want one ip on my network to bypass the squid proxy. How do I go about >>> accomplishing this. Any help is great

[squid-users] Re: Tproxy + wccp + tcp_outgoing_address

2009-04-19 Thread Vivek
Henrik, Thanks for your reply. I will check all the things you had mention. Get you back to you if i need. Thanks again for your reply. Regards Vivek -Original Message- From: Henrik Nordstrom To: Vivek Cc: squid-users@squid-cache.org Sent: Sun, 19 Apr 2009 1:42 pm Subject: Re: Tproxy

Re: [squid-users] reverse proxy filtering?

2009-04-19 Thread Gavin McCullagh
Hi, On Sun, 19 Apr 2009, Jeff Sadowski wrote: > I am helping a library to setup a way to display available books to the > outside. > The internal website allows you to login and check out books which > they want blocked to the outside. They do not want to modify the web > developers code to fit

[squid-users] Re: Tproxy + wccp + tcp_outgoing_address

2009-04-19 Thread Henrik Nordstrom
sön 2009-04-19 klockan 03:52 -0400 skrev Vivek: > I have configured two squid servers in tproxy+wccp mode and its working > fine. I am using squid 2.7 (ctt proxy) and gre tunnel. Browsing is very > slow compare than normal tproxy+bridge mode. I assume the problem is > both incoming and outgoing

Re: [squid-users] reverse proxy filtering?

2009-04-19 Thread Jeff Sadowski
On Sun, Apr 19, 2009 at 1:18 AM, Jeff Sadowski wrote: > On Sat, Apr 18, 2009 at 10:24 PM, Amos Jeffries wrote: >> Jeff Sadowski wrote: >>> >>> On Sat, Apr 18, 2009 at 5:18 PM, Amos Jeffries >>> wrote: Jeff Sadowski wrote: > > I'm new to trying to use squid as a reverse proxy. >

[squid-users] Tproxy + wccp + tcp_outgoing_address

2009-04-19 Thread Vivek
Hi All, I have configured two squid servers in tproxy+wccp mode and its working fine. I am using squid 2.7 (ctt proxy) and gre tunnel. Browsing is very slow compare than normal tproxy+bridge mode. I assume the problem is both incoming and outgoing traffic passed via eth0 (Gigabit Ethernet ).

Re: [squid-users] reverse proxy filtering?

2009-04-19 Thread Jeff Sadowski
On Sat, Apr 18, 2009 at 10:24 PM, Amos Jeffries wrote: > Jeff Sadowski wrote: >> >> On Sat, Apr 18, 2009 at 5:18 PM, Amos Jeffries >> wrote: >>> >>> Jeff Sadowski wrote: I'm new to trying to use squid as a reverse proxy. I would like to filter out certain pages and if possible