Re: [squid-users] what do i need to get the job done, performance squid

2010-01-22 Thread Amos Jeffries
william wrote: Amos Jeffries wrote: william wrote: Chris Robertson wrote: william wrote: i would assigh 12GB memcache and four disks with diskd to each instance. Last I heard, diskd was not the recommended cache_dir algorithm under Linux. If you are looking for maximum performance, Squi

Re: [squid-users] what do i need to get the job done, performance squid

2010-01-22 Thread william
Amos Jeffries wrote: william wrote: Chris Robertson wrote: william wrote: i would assigh 12GB memcache and four disks with diskd to each instance. Last I heard, diskd was not the recommended cache_dir algorithm under Linux. If you are looking for maximum performance, Squid 2.7 with a co

Re: [squid-users] what do i need to get the job done, performance squid

2010-01-22 Thread Amos Jeffries
william wrote: Chris Robertson wrote: william wrote: i would assigh 12GB memcache and four disks with diskd to each instance. Last I heard, diskd was not the recommended cache_dir algorithm under Linux. If you are looking for maximum performance, Squid 2.7 with a combination of COSS and a

Re: [squid-users] what do i need to get the job done, performance squid

2010-01-22 Thread william
Chris Robertson wrote: william wrote: i would assigh 12GB memcache and four disks with diskd to each instance. Last I heard, diskd was not the recommended cache_dir algorithm under Linux. If you are looking for maximum performance, Squid 2.7 with a combination of COSS and aufs is the curre

Re: [squid-users] Re: Squid 3.1.0.13 Speed Test - Upload breaks?

2010-01-22 Thread Irvan Adrian K
Mine too.. using Squid Version 3.1.0.15-20091212, and running on configuration of TPROXY 4, have a problem on upload, squid often error when upload facebook photo, attache an email on GMAIL or Yahoo, etc.. Irvan On 1/23/2010 5:53 AM, Amos Jeffries wrote: Linda Walsh wrote: jay60103 wrote:

Re: [squid-users] (0) Success but FATAL: failed to find or read error text file [SOLVED]

2010-01-22 Thread Andre Iskandar
enable-default-err-language=English > > > > > > It runs smooth, no warning, no error and > successfull > > through make and make install. > > > But when I run this: > > > rFATAL: failed to find or read error text file. > > > 2010/01/22 17:12:54

Re: [squid-users] OT N1

2010-01-22 Thread Glenn English
On Jan 22, 2010, at 4:29 PM, Chris Robertson wrote: > http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoPixWccp2 Encapsulation -- of course. 'Cept for I didn't know the PIX would do that. Thanks, Chris! -- Glenn English g...@slsware.com

Re: [squid-users] OT N1

2010-01-22 Thread Chris Robertson
Glenn English wrote: I'm trying to force a host to go through a proxy without it wanting to. I'm one of the 3 or 4 people who bought a Google Nexus One on day 0. It's a reasonably delightful gadget, with one monster flaw: it isn't possible to set a web proxy (without significant warranty voidi

Re: [squid-users] refresh pattern

2010-01-22 Thread Amos Jeffries
Il 22/01/2010 0.38, Amos Jeffries ha scritto: Ernesto Nataloni wrote: Hi, i havw found that if i set this refresh pattern with 1 minute min. time "refresh_pattern .aspx 1 100% 1 override-expire override-lastmod reload- into-ims ignore-reload ignore-no-cache ignore-private ignore-auth" Squ

Re: [squid-users] Pf bridge and transparent squid runnig problem

2010-01-22 Thread Amos Jeffries
ozan ucar wrote: Hi All, I use pfsense 1.2.3 stable.Lan ifterface bridge with Wan interface.I'm made all settings http://pfsense.trendchiller.com/transparent_firewall.pdf . And i install squid packet.I using squid working fine, however i settings squid for transparent dont working. I can not

Re: [squid-users] Re: Re: Re: Re: squid_kerb_auth problem

2010-01-22 Thread Amos Jeffries
nickcx wrote: hi, I'm brand new to linux, squid etc as of 10 days ago but have got my squid 3 stable 20 authenticating my users using NTLM. I'm now trying out Kerberos. I have followed all the steps in this post and everything seem set up ok (tests, kvno, klist etc), however my W7 IE8 client rep

Re: [squid-users] (0) Success but FATAL: failed to find or read error text file

2010-01-22 Thread Amos Jeffries
language=English It runs smooth, no warning, no error and successfull through make and make install. But when I run this: rFATAL: failed to find or read error text file. 2010/01/22 17:12:54| Starting Squid Cache version 2.7.STABLE7-20100122 for i686-pc-linux-gnu... 2010/01/22 17:12:54| Process ID

Re: [squid-users] Re: Squid 3.1.0.13 Speed Test - Upload breaks?

2010-01-22 Thread Amos Jeffries
Linda Walsh wrote: jay60103 wrote: I'm using Version 3.1.0.6 and speakeasy.net doesn't work for me either. Download test okay, but when it starts the upload part it fails with "Upload test returned an error while trying to read the upload file." FWIW, this speed test works for me us

Re: [squid-users] Re: [Snort-users] Commercial Advanced Packet Sniffers, how do they do this? Application signatures?

2010-01-22 Thread Amos Jeffries
Dimitri Syuoul wrote: On Fri, Jan 22, 2010 at 2:42 PM, Richard Bejtlich wrote: [1] http://taosecurity.blogspot.com/2006/09/port-independent-protocol.html [2] http://bro-ids.org/wiki/index.php/DynamicProtocolDetection Interesting enough the L7-filter and IPP2P projects seem to be dead. T

[squid-users] OT N1

2010-01-22 Thread Glenn English
I'm trying to force a host to go through a proxy without it wanting to. I'm one of the 3 or 4 people who bought a Google Nexus One on day 0. It's a reasonably delightful gadget, with one monster flaw: it isn't possible to set a web proxy (without significant warranty voiding). I'm doing my own D

Re: [squid-users] Re: CHALLENGE: LAN -> TRANSPARENT PROXY -> MULTIPLE VPNS. How to put it together?

2010-01-22 Thread Chris Robertson
Dimitri Syuoul wrote: I apologize for the repeated email... got sent before time. To finish on the example: LanUser1 makes an http request -> The HTTP request is processed on a BOX that acts as a gateway --> That same box has squid installed and filters the http request (Normal ACLs) --> Depend

[squid-users] Re: [Snort-users] Commercial Advanced Packet Sniffers, how do they do this? Application signatures?

2010-01-22 Thread Dimitri Syuoul
On Fri, Jan 22, 2010 at 2:42 PM, Richard Bejtlich wrote: > > [1] http://taosecurity.blogspot.com/2006/09/port-independent-protocol.html > [2] http://bro-ids.org/wiki/index.php/DynamicProtocolDetection > Interesting enough the L7-filter and IPP2P projects seem to be dead. http://bro-ids.org/wi

Re: [squid-users] (0) Success but FATAL: failed to find or read error text file

2010-01-22 Thread Chris Robertson
language=English It runs smooth, no warning, no error and successfull through make and make install. But when I run this: rFATAL: failed to find or read error text file. 2010/01/22 17:12:54| Starting Squid Cache version 2.7.STABLE7-20100122 for i686-pc-linux-gnu... 2010/01/22 17:12:54| Process ID

Re: [squid-users] what do i need to get the job done, performance squid

2010-01-22 Thread Chris Robertson
william wrote: i would assigh 12GB memcache and four disks with diskd to each instance. Last I heard, diskd was not the recommended cache_dir algorithm under Linux. If you are looking for maximum performance, Squid 2.7 with a combination of COSS and aufs is the current route to take. On th

[squid-users] Re: CHALLENGE: LAN -> TRANSPARENT PROXY -> MULTIPLE VPNS. How to put it together?

2010-01-22 Thread Dimitri Syuoul
I apologize for the repeated email... got sent before time. To finish on the example: LanUser1 makes an http request -> The HTTP request is processed on a BOX that acts as a gateway --> That same box has squid installed and filters the http request (Normal ACLs) --> Depending on the private IP of

[squid-users] Re: CHALLENGE: LAN -> TRANSPARENT PROXY -> MULTIPLE VPNS. How to put it together?

2010-01-22 Thread Dimitri Syuoul
Hello all, This is a question combining squid with firewall rule manipulation (both need to get along well...). I have a LAN and a GATEWAY BOX that serves as a NAT for all of the users behind the LAN. MY goal is to make the box filter all http requests and once they are clean route the traffic t

[squid-users] CHALLENGE: LAN -> TRANSPARENT PROXY -> MULTIPLE VPNS. How to put it together?

2010-01-22 Thread Dimitri Syuoul
Hello all, This is a question combining squid with firewall rule manipulation (both need to get along well...). I have a LAN and a GATEWAY BOX that serves as a NAT for all of the users behind the LAN. MY goal is to make the box filter all http requests and once they are clean route the traffic t

[squid-users] Stripping REALM from squid_kerb_auth

2010-01-22 Thread Matt Richards
Hello, I have just setup a squid proxy with squid_kerb_auth and have noticed, in the logs, that the user is lo...@realm which isn't helpful in a number of cases, mainly with helper applications not being able to find the logins. Previously I had a similar issue with ntlm_auth where DOMAIN\logi

[squid-users] Pf bridge and transparent squid runnig problem

2010-01-22 Thread ozan ucar
Hi All, I use pfsense 1.2.3 stable.Lan ifterface bridge with Wan interface.I'm made all settings http://pfsense.trendchiller.com/transparent_firewall.pdf . And i install squid packet.I using squid working fine, however i settings squid for transparent dont working. I can not access to internet

Re: [squid-users] what do i need to get the job done, performance squid

2010-01-22 Thread william
Jeff Peng wrote: What (linux) os kernel settings should i use? ulimit stuff and and what scheduler? The recent Linux kernel 2.6.2x or 2.6.3x are fine enough for running a squid. When compiling don't forget to add an option like: --with-filedescriptors=51200 And before start squid you co

[squid-users] Re: Re: Re: Re: squid_kerb_auth problem

2010-01-22 Thread nickcx
hi, I'm brand new to linux, squid etc as of 10 days ago but have got my squid 3 stable 20 authenticating my users using NTLM. I'm now trying out Kerberos. I have followed all the steps in this post and everything seem set up ok (tests, kvno, klist etc), however my W7 IE8 client repeatedly prompts

Re: [squid-users] refresh pattern

2010-01-22 Thread Ernesto Nataloni
Ciao Amos, Thanks for your help. I work for a financial data service provvider. I need to cache my data for 1 minute because i have a lot of web access that keep very little pattern data from IIS Web server ( that i hope to change in Apache as soo as possible). This data are real time data, so i

[squid-users] Re: Squid 3.1.0.13 Speed Test - Upload breaks?

2010-01-22 Thread Linda Walsh
jay60103 wrote: I'm using Version 3.1.0.6 and speakeasy.net doesn't work for me either. Download test okay, but when it starts the upload part it fails with "Upload test returned an error while trying to read the upload file." FWIW, this speed test works for me using 3.HEAD.BZR (h

[squid-users] (0) Success but FATAL: failed to find or read error text file (corrected)

2010-01-22 Thread Andre Iskandar
s smooth, no warning, no error and successfull through make and make install. But when I run this: r...@sipproxy:/usr/local/squid/share/errors# /usr/local/squid/sbin/squid -d 9 2010/01/22 17:12:54| Starting Squid Cache version 2.7.STABLE7-20100122 for i686-pc-linux-gnu... 2010/01/22 17:12:54| Proc

[squid-users] Re: Re: Re: Re: Re: squid_kerb_auth problem

2010-01-22 Thread Markus Moeller
Can you also check the WINS traffic. If I remember right you should see a query for the domain. If that does not get resolved Windows will fallback to NTLM. Markus "Jose Lopes" wrote in message news:4b58ae77.4090...@iportalmais.pt... Hi Markus, I have already defined Windows Server as WIN

Re: [squid-users] Re: Re: Re: Re: squid_kerb_auth problem

2010-01-22 Thread Jose Lopes
Hi Amos, Yes i also have reported to firefox support. But firefox support still didn't answer. Regards Jose Amos Jeffries wrote: > Jose Lopes wrote: >> Hi Markus, >> >> I have already defined Windows Server as WINS and DNS for windows >> client. >> I check again the messages between IE8 and Wind

[squid-users] (0) Success but FATAL: failed to find or read error text file

2010-01-22 Thread Andre Iskandar
s smooth, no warning, no error and successfull through make and make install. But when I run this: rFATAL: failed to find or read error text file. 2010/01/22 17:12:54| Starting Squid Cache version 2.7.STABLE7-20100122 for i686-pc-linux-gnu... 2010/01/22 17:12:54| Process ID 26103 2010/01/22 17:1

[squid-users] How to block teamviewer in squid

2010-01-22 Thread Ralf Hildebrandt
I found an old thread from Oct 2008, hijacked by some r*tard. Is blocking by user-agent string: DynGate the ultima ratio? Doesn't teamviewer simply fallback to https://? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Frankl

[squid-users] New squid3 error : DiskThreadsDiskFile::openDone: (2) No such file or directory

2010-01-22 Thread David B.
Hi squids users, I've made somes changes to my squid boxes (new fresh server, more powerful). All seems to be ok, but now i've got some strange errors (from time to time) on cache.log. Exemple : 2010/01/15 18:59:47| DiskThreadsDiskFile::openDone: (2) No such file or directory 2010/01/15 18:59:47|