[squid-users] Squid ... delay in startup

2009-10-27 Thread Asim Ahmed @ Folio3
Hi all, I've squid-2.6.STABLE22-1.el5 installed on an Intel Pentium D box on RHEL5. There are two main problems with this setup: 1. When I restart squid, it takes an uncertain amount of time to come up! ranging from a minute to unlimited (till I restart again). 2. Even when startup

Re: [squid-users] Custom max-age header

2009-10-27 Thread Chris Hostetter
: Because one of my backend is Amazon S3 and I can't set up : Cache-Control on it. So I looking for different solution how to change : this header field (squid). I want the objects to be cache as long as : possible on the clients web-browser side (1 year). I've never used s3, but this

Re: [squid-users] Obtaining the GET query string from logs?

2009-10-27 Thread Amos Jeffries
Andres Salazar wrote: Hello, I have entries like these in my log: 1256612777.111 1145 66.199.62.74 TCP_MISS/200 17337 GET http://www.bing.com/search? admin DIRECT/8.17.64.41 text/xml 1256612777.605931 66.199.62.74 TCP_MISS/200 15785 GET http://www.bing.com/search? admin DIRECT/8.17.64.8

Re: [squid-users] Webpage partially downloaded via squid

2009-10-27 Thread Amos Jeffries
Gerard Saunders wrote: Hi, I have a strange issue where one website in particular is typically never being fully downloaded when accessing it via our squid proxy. It doesn't matter which browser is used, and the behaviour can be simulated using squidclient. If you do a browser

Re: [squid-users] Writing a access_log for an acl user doesnt work!

2009-10-27 Thread Amos Jeffries
Andres Salazar wrote: You say other requests ... do you mean these ones are not? thats a problem with squid not even receiving the requests. With other requestsm i meant every single request from all users and all IPs. Okay. All I can think of is a wild guess that maybe something will

Re: [squid-users] Squid ... delay in startup

2009-10-27 Thread Amos Jeffries
Asim Ahmed @ Folio3 wrote: Hi all, I've squid-2.6.STABLE22-1.el5 installed on an Intel Pentium D box on RHEL5. There are two main problems with this setup: 1. When I restart squid, it takes an uncertain amount of time to come up! ranging from a minute to unlimited (till I restart again). 2.

Re: [squid-users] Squid 3.1.0.14 uses considerably more memory than 2.7.x

2009-10-27 Thread Amos Jeffries
Ralf Hildebrandt wrote: I switched from 2.7.x to 3.1.0.14 yesterday. Today, my proxy would encounter an out of memory condition. cache_mem was EXPLICITLY set to 128 MB, thus the new default of 256 MB would not be relevant. Attached is a picture of squidstats that show the memory consumption

Re: [squid-users] TCS with ServerIron

2009-10-27 Thread Amos Jeffries
balkris...@subisu.net.np wrote: Dear all, I am getting problem with TCS load balancing among Proxies with ServerIron. I got 4 cache servers. Among those one of the server is serving only around 5-7 % of the total traffics while others are serving around 25-30% in average. I used the weight

Re: [squid-users] Squid ... delay in startup

2009-10-27 Thread Kinkie
It maybe a case of a long shutdown_lifetime. The rh script may decide that squid is taking too long in shutting down and kill the process without letting it write the cache index completely. In fact it may be a nice feature to add to change the shutdown sequence to start writing the index

Re: [squid-users] Writing a access_log for an acl user doesnt work!

2009-10-27 Thread Leonardo Rodrigues
i do not have the full data anymore, but i already had a similar problem 2-3 weeks ago. I made a src acl and used in a access_log line. The idea was to create a separate log for some specific user. I'm completly sure that IP was correct, there was no NAT involved i could see all

Re: [squid-users] Squid Server With Multiple Outgoing IPs, each ip with separate login and password

2009-10-27 Thread Leonardo Rodrigues
Amos Jeffries escreveu: You overlooked his requirement for _outgoing_ IP to be set. Also Port had nothing to do with the requirement so those ACL are not relevant. The username and http_access ones are still required though. yeah ... sorry for that, there's no need for multiple ports,

Re: [squid-users] TCP_CLIENT_REFRESH_MISS issues

2009-10-27 Thread Amos Jeffries
Antoni Villalonga wrote: Hi! There is any way to deny some ips to force a refresh of the cache? When a user do a CRTL+SHIFT+R in firefox it forces a TCP_CLIENT_REFRESH_MISS in Squid. Sadly, it increase the hits in Apache :-( No there is not. The closest you can get is to send them a 4xx

[squid-users] UfdbGuard refrences

2009-10-27 Thread Anders Larsson
Hi! Im looking for some refrences abount ufdbguard with squid.. Would be great if somene in this squid list can give me some feedback that they use it with squid.. problems etc... Regards Anders -- Med Vänliga Hälsningar Best Regards * Anders Larsson * Systemadmin Unix/Linux *

Re: [squid-users] Managing timeouts

2009-10-27 Thread Marcus Kool
Matt, Setting read_timeout to 1min and connect_timeout to 20sec should do the trick. And I recommend to look for users who download large files or watch CNN video news all day long. Marcus Matthew Young wrote: Hello all I have a group of proxy users who are not technical at all, and it is

Re: [squid-users] Writing a access_log for an acl user doesnt work!

2009-10-27 Thread Andres Salazar
On Tue, Oct 27, 2009 at 1:48 AM, Amos Jeffries squ...@treenet.co.nz wrote: Now that the user is being logged successfully what does a row of the log look like? 1256653823.243168 172.16.2.35 TCP_REFRESH_HIT/304 295 GET http://www.usa.net/images/burst.jpg admin FIRST_UP_PARENT/74.55.186.130 -

Re: [squid-users] Mac Address in access.log

2009-10-27 Thread M. Rodrigo Monteiro
Hi! On Wed, Sep 23, 2009 at 20:46, Amos Jeffries squ...@treenet.co.nz wrote: Creating an external ACL to lookup the MAC and then logging the tag returned using the %et code. MAC handling is getting an upgrade for 3.2 which will hopefully include logging abilities. Does anyone use this? What

Re: [squid-users] Managing timeouts

2009-10-27 Thread Matthew Young
Hello Marcus, Thank you! i will be applying this. I already have a reply body size limit.. so bummer for them. In any case this will not affect connections that remain open while data is feed at slow rates.. right? Thanks. -- Matt On Tue, Oct 27, 2009 at 9:33 AM, Marcus Kool

[squid-users] Error with flight booking websites

2009-10-27 Thread Alex Marsal
Hi everyone, I've been using squid 2.6 in my company to restrict the internet access to certain websites. I've a new clean installation of squid 3.0 and I'm having some problem with some website that I can't understand. I've different access levels with AD groups, and even with the total

[squid-users] Tproxy4+squid: ebtables wiki

2009-10-27 Thread Marko Kotar
Hi, You have incorrect commands in squid wiki for tproxy4 ebtables: I figure out that it is not --redirect-target DROP but it is --redirect-target ACCEPT . There is a -j REDIRECT which should be in lowercase letters -j redirect. Thanks for guide. Marko

[squid-users] sslBump, error SSL unknown certificate error

2009-10-27 Thread vandermeer
I have squid 3.1.0.14 running with the configuration below to forward decrypted traffic from sslBump to icap for inspection. When i browse non SSL sites with sslBump enabled everything is fine When i browse SSL sites with sslbump disabled everything is fine. When I browse SSL sites with

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-10-27 Thread Amos Jeffries
On Tue, 27 Oct 2009 11:50:56 -0700 (PDT), Marko Kotar kotarma...@yahoo.com wrote: Hi, You have incorrect commands in squid wiki for tproxy4 ebtables: I figure out that it is not --redirect-target DROP but it is --redirect-target ACCEPT . um, thats not what the kernel people, TPROXY authors,

[squid-users] Squid 2.7 on windows with authentication

2009-10-27 Thread Jason McGuidwin
I am having trouble getting the windows NTLM or ldap authentication working= . We want to prompt for authentication before displaying the web folder loc= ation, however, It will prompt for the user info but will not accept the in= fo even though the user exists I have tried following these

Re: [squid-users] Mac Address in access.log

2009-10-27 Thread Amos Jeffries
On Tue, 27 Oct 2009 12:01:13 -0300, M. Rodrigo Monteiro fale...@rodrigomonteiro.net wrote: Hi! On Wed, Sep 23, 2009 at 20:46, Amos Jeffries squ...@treenet.co.nz wrote: Creating an external ACL to lookup the MAC and then logging the tag returned using the %et code. MAC handling is getting

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-10-27 Thread Marko Kotar
Hi --- On Tue, 10/27/09, Amos Jeffries squ...@treenet.co.nz wrote: From: Amos Jeffries squ...@treenet.co.nz Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki To: Marko Kotar kotarma...@yahoo.com Cc: squid-users@squid-cache.org Date: Tuesday, October 27, 2009, 11:32 PM On Tue, 27 Oct

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-10-27 Thread Dan
Marko Kotar wrote: Hi, You have incorrect commands in squid wiki for tproxy4 ebtables: I figure out that it is not --redirect-target DROP but it is --redirect-target ACCEPT . With ebtables using broute ACCEPT and DROP have special meanings. DROP means route the frame and ACCEPT means

Re: [squid-users] sslBump, error SSL unknown certificate error

2009-10-27 Thread Amos Jeffries
On Tue, 27 Oct 2009 12:54:03 -0700 (PDT), vandermeer jason.vanderm...@gmail.com wrote: I have squid 3.1.0.14 running with the configuration below to forward decrypted traffic from sslBump to icap for inspection. When i browse non SSL sites with sslBump enabled everything is fine When i