[squid-users] Squid crashes - Create Bugreport?

2009-08-10 Thread Thomas Jackowski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Squid crashes with this message in cache.log: 2009/08/11 06:54:31| assertion failed: store_client.cc:430: "STORE_DISK_CLIENT == getType()" 2009/08/11 06:54:35| Starting Squid Cache version 3.0.STABLE8 for x86_64-pc-linux-gnu... OS: Debian Lenny

[squid-users] Squid crashes abnormally

2009-08-10 Thread Nyamul Hassan
Hi, I've been using Squid.2.7.STABLE6 quite well till now. However, for the past 4 - 5 days, it started crashing everytime it finished loading the store directories (aufs + coss). Looking through the "cache.log", the following message is show at the very end, right before the crash: assert

[squid-users] squid 3.1: How to setup a Squid SSL reverse proxy for a parent SSL Squid proxy?

2009-08-10 Thread fulan Peng
Hi, I have a Squid reverse proxy running with SSL support. People can access it with https://domainA.com. No problem. Now I want to set up another Squid proxy server to proxy it with SSL support. That means https://domainA --> https://domainB. My configuration file is similar like this for the

Re: [squid-users] Script Check

2009-08-10 Thread michel
Henrik Nordstrom ha escrito: fre 2009-08-07 klockan 21:34 -0400 skrev mic...@casa.co.cu: Using squid 2.6 on my work, I have a group of users who connect by dial-up access to a NAS and a server freeradius to authenticate each time they log my users are assigned a dynamic IP address, making it

Re: [squid-users] Squid and YahooMail

2009-08-10 Thread Amos Jeffries
On Mon, 10 Aug 2009 22:01:40 -0400, Rick Chisholm wrote: > what's up with Squid and https://login.yahoo.com? > > Our marketing dept. at work needs access to Yahoo Analytics, but they > have to login via Yahoo! regular login. Squid complains about a DNS > resolution issue but names the link as >

[squid-users] Squid and YahooMail

2009-08-10 Thread Rick Chisholm
what's up with Squid and https://login.yahoo.com? Our marketing dept. at work needs access to Yahoo Analytics, but they have to login via Yahoo! regular login. Squid complains about a DNS resolution issue but names the link as http://443 It's quite odd. -- Rick Chisholm sysadmin Parallel42 e.

Re: [squid-users] Squid 3.1.0.13 Speed Test - Upload breaks?

2009-08-10 Thread Henrik Lidström
Daniel skrev: Kinkie, I'm using the default settings, so I don't have any specific max request sizes specified. I guess I'll hold out until someone else running 3.1 can test this. Thanks! -Original Message- From: Kinkie [mailto:gkin...@gmail.com] Sent: Saturday, August 08, 2

Re: [squid-users] Problem with Squid + Tproxy and Rapdishare

2009-08-10 Thread Amos Jeffries
On Mon, 10 Aug 2009 20:30:05 -0300, Carlos Botejara wrote: > OK. > > Ok. I did what you told me, modify the rule, but nothing happened .. > everything remains the same > Rule amended > iptables-t mangle-A PREROUTING-p tcp - dport 80-j TPROXY - tproxy-mark > 0x1/0x1 - on-port 3129 Hm, okay. Then

Re: [squid-users] "moved permanently" loop detection

2009-08-10 Thread Henrik Nordstrom
mån 2009-08-10 klockan 16:58 -0400 skrev Mike Mitchell: > I was thinking a simple string compare of the requested URL and the contents > of the 'Location:' field. If the two are the same it's a loop. If it's cacheble yes. Regards Henrik

Re: [squid-users] Problem with Squid + Tproxy and Rapdishare

2009-08-10 Thread Carlos Botejara
OK. Ok. I did what you told me, modify the rule, but nothing happened .. everything remains the same Rule amended iptables-t mangle-A PREROUTING-p tcp - dport 80-j TPROXY - tproxy-mark 0x1/0x1 - on-port 3129 2009/8/9 Amos Jeffries : > On Sun, 9 Aug 2009 10:58:23 -0300, Carlos Botejara >

Re: [squid-users] various squid instances on same server

2009-08-10 Thread Amos Jeffries
On Mon, 10 Aug 2009 10:20:04 -0500, "Enrique" wrote: > i can install various squid instances on same server? NP: The word order in English "i can" indicates something _is_ possible, with a side implication that it has already been proven so by doing it. You meant to say "can i", which means uncer

[squid-users] Kerberos Authentication - Squid 3.1.0.13

2009-08-10 Thread Daniel
Good afternoon, In my attempt to get Squid on our SLES 11 box authenticating with Kerberos (negotiate), I used the following to re-configure: ./configure --prefix=/usr/local/squid --enable-cachemgr-hostname=sclthdq01w --enable-auth="negotiate" --enable-negotiate-auth-helpers="squid_kerb_a

[squid-users] "moved permanently" loop detection

2009-08-10 Thread Mike Mitchell
Would it be possible to add a simple loop detection for "moved permanently" response codes? We've been hit a couple of times with loops from URLs like http://wwwcache.localtechwire.com/favicon.png. I know the fix should really go into the browser, but IE is broken and Microsoft won't fix it. See

Re: [squid-users] delay_access line

2009-08-10 Thread Dayo Adewunmi
Amos Jeffries wrote: On Sun, 09 Aug 2009 15:03:10 +0100, Dayo Adewunmi wrote: Amos Jeffries wrote: Dayo Adewunmi wrote: Amos Jeffries wrote: Dayo Adewunmi wrote: Hi Is this a valid config line? delay_access 6 allow lan-students magic_words url_words

RE: [squid-users] Squid 3.1.0.13 Speed Test - Upload breaks?

2009-08-10 Thread Daniel
Kinkie, I'm using the default settings, so I don't have any specific max request sizes specified. I guess I'll hold out until someone else running 3.1 can test this. Thanks! -Original Message- From: Kinkie [mailto:gkin...@gmail.com] Sent: Saturday, August 08, 2009 6:44 AM To:

Re: [squid-users] various squid instances on same server

2009-08-10 Thread Leonardo Rodrigues
Enrique escreveu: thats ok, now i can use same cache ( cache_dir aufs /var/cache/squid 10240 256 256 ) on all squid instances??? i will use with same authentication method different authentications methods is one of the only reasons for running multiple instances on the same machine.

Re: [squid-users] various squid instances on same server

2009-08-10 Thread Enrique
thats ok, now i can use same cache ( cache_dir aufs /var/cache/squid 10240 256 256 ) on all squid instances??? i will use with same authentication method thanks - Original Message - From: "Gontzal" To: "Enrique" Cc: Sent: Monday, August 10, 2009 10:28 AM Subject: Re: [squid-users] va

Re: [squid-users] various squid instances on same server

2009-08-10 Thread Gontzal
Yes, you can, more info: http://wiki.squid-cache.org/MultipleInstances I've running 3 different instances on the same server with different authentication modes and it's working fine. But I just change the port, I don't use different ips 2009/8/10 Enrique : > i can install various squid instances

Re: [squid-users] various squid instances on same server

2009-08-10 Thread Leonardo Rodrigues
Enrique escreveu: i can install various squid instances on same server? for example: i wnat to some users one squid response by someip:8080 port and external ip A ACL, directives etc... Other squid response to users otherip:3128 and external ip B somes times happen when some users is downl

[squid-users] various squid instances on same server

2009-08-10 Thread Enrique
i can install various squid instances on same server? for example: i wnat to some users one squid response by someip:8080 port and external ip A ACL, directives etc... Other squid response to users otherip:3128 and external ip B somes times happen when some users is downloading a file from

Re: [squid-users] Squid - Not replace source IP address

2009-08-10 Thread Leonardo Rodrigues
Transparent is a good word but it means something completely different: A "transparent proxy" is a proxy that does not modify the request or response beyond what is required for proxy authentication and identification. This is a citation from RFC2616 which defines the HTTP protocol. Sinc

Re: [squid-users] Squid - Not replace source IP address

2009-08-10 Thread Matus UHLAR - fantomas
> Amos Jeffries-2 wrote: > > NP: Your word 'transparently redirected' appears to mean 'routed' in that > > paragraph. Please use the word 'transparent' less > > /rant. On 04.08.09 17:24, casket88 wrote: > The useage of the word "transparent" is in reference to the users, it is > transparent to the

Re: [squid-users] [suiqd-2.7STABL E6-1]Problem RPC via HTTPS‏

2009-08-10 Thread Amos Jeffries
hdyugoplastika hdyugoplastika wrote: Hi at all I have a problem with authentication RPC over HTTPS with squid-2.7STABLE6-1 (rpm downloaded from squid-cache.org). I have squid server(version 2.5STABLE14-1 + owa patch) where RPC over HTTPS authetication works fine. With both version now problem via

[squid-users] Squid cache

2009-08-10 Thread Никоноров Григорий
Hi squid users! I'm running Squid 2.5 on FreeBSD 6.4. The problem with caching doc files,please help! Squid downloads a file and puts it in the cache. The file is then updated on the server and downloading again. File size: old - 2,5 Mb, new - 7 Mb. There is no restrictions on the size of the fil

[squid-users] [suiqd-2.7STABLE6-1] Problem RPC via HTTP S‏

2009-08-10 Thread hdyugoplastika hdyugoplastika
Hi at all I have a problem with authentication RPC over HTTPS with squid-2.7STABLE6-1 (rpm downloaded from squid-cache.org). I have squid server(version 2.5STABLE14-1 + owa patch) where RPC over HTTPS authetication works fine. With both version now problem via OWA. These are the log: access.log 1

Re: [squid-users] blocking gtalk from gmail (https)

2009-08-10 Thread Leonardo Carneiro
It is possible, but you'll need squid + firewall (iptables in my case) Rules i used in iptables: iptables -A FORWARD -p tcp -m tcp --dport 5222 -j DROP iptables -A FORWARD -p tcp -m tcp -d 72.14.217.189 -j DROP Acl i'd blocked in squid: acl gtalk url_regex -i .*talk.google.com .*chat

Re: [squid-users] refresh_pattern configuration

2009-08-10 Thread Amos Jeffries
Muhammad Sharfuddin wrote: On Sun, 2009-08-09 at 14:19 +1200, Amos Jeffries wrote: Muhammad Sharfuddin wrote: Squid Cache: Version 2.5.STABLE12 and Squid Cache: Version 2.7.STABLE5 I am using following refresh_patterns and never encounter any problem. e.g once I visit a website, on next visit

Re: [squid-users] When will SSLBump be included on the production version?

2009-08-10 Thread Amos Jeffries
SSCR Internet Admin wrote: Hello, I would like to ask as to when will SSLBump be included in the main stream of squid stable version? It seems that SSLBump can help use admin specially in schools where ultrasurf is used on some laboratories (on usb memory sticks) mostly on WiFi users. Regards

Re: [squid-users] Add a prefix/suffix if a domain is not resolved?

2009-08-10 Thread Olivier Sannier
Henrik Nordstrom wrote: lör 2009-08-08 klockan 15:54 +0200 skrev Kinkie: Many browsers already do this. With Squid you can use a redirector scriptan but you'll have to write your custom script, such a functionality is not bundled with squid. Indeed.. and didn't I write such a script s