[squid-users] Multiple domains in dstdomain bug?

2010-02-10 Thread Michael Tennes
Hi, For the life of me I can't figure out why the following two lines in my squid.conf file causes squid (Squid Cache: Version 3.0.STABLE16) to crash with a BUS ERROR, but if I split the acl into two (last for lines) it works fine. What am I missing? From what I've read acl entries are ORed. Ex

[squid-users] Allowing links inside websites in whitelist

2010-02-10 Thread CASALI COMPUTERS - Michele Brodoloni
Hello, i?m using Squid Version 2.6.STABLE21 with squid_ldap_group auth helper for authenticating groups of users. My problem is that some groups need to access certain sites only, but these sites contain links to other external content outside the whitelist causing squid popping up the annoying

Re: [squid-users] reverse proxying for sharepoint ??

2010-02-10 Thread Kinkie
On Tue, Feb 9, 2010 at 11:02 PM, Jakob Curdes wrote: > Can anybody comment on protecting a sharepoint server with squid as reverse > proxy? > I worked my way through some stories, also on the squid list, and it seems > that there are two possible problems: > > - sharepoint seems to rely on http 1.

[squid-users] Any work around for bug 2805 (Digest LDAP auth failed)

2010-02-10 Thread sankar m
Dear All, I have one doubt, please clarify. I already mentioned that squid is dereferencing some other memory address for a specific request (digest authentication). When I ran it in command line, it works perfectly (same userid). I'm seeing the access.log lines which has different userid for the

RE: [squid-users] cache manager access from web

2010-02-10 Thread J. Webster
As a side note >> http_access allow ncsa_users >> http_access allow manager localhost >> http_access allow manager cacheadmin >> http_access deny manager cache_manager access (any access, really) is already allowed to ncsa_users, no matter if they are accessing from localhost, 88.xxx.xxx

Re: [squid-users] Multiple domains in dstdomain bug?

2010-02-10 Thread Amos Jeffries
Michael Tennes wrote: Hi, For the life of me I can't figure out why the following two lines in my squid.conf file causes squid (Squid Cache: Version 3.0.STABLE16) to crash with a BUS ERROR, but if I split the acl into two (last for lines) it works fine. What am I missing? From what I've read

Re: [squid-users] Allowing links inside websites in whitelist

2010-02-10 Thread Amos Jeffries
CASALI COMPUTERS - Michele Brodoloni wrote: Hello, i?m using Squid Version 2.6.STABLE21 with squid_ldap_group auth helper for authenticating groups of users. My problem is that some groups need to access certain sites only, but these sites contain links to other external content outside the wh

Re: [squid-users] squid 3.1 and error_directory

2010-02-10 Thread Amos Jeffries
Amos Jeffries wrote: Eugene M. Zheganin wrote: Hi. Recently I decided to look on 3.1 branch on my test proxy. Everything seems to work fine, but I'm stuck with the problem with the error messages. Whatever I do with the error_directory/error_default_language settings (leaving 'em commented o

Re: [squid-users] reverse proxying for sharepoint ??

2010-02-10 Thread Jakob Curdes
- sharepoint seems to rely on http 1.1 - sharepoint uses absolute URLs which would have to be rewritten (but newer versions seem to have options to remedy that) http://technet.microsoft.com/en-us/library/cc287848.aspx seems to have some recipes, not specific to Squid but I expect them to

Re: [squid-users] reverse proxying for sharepoint ??

2010-02-10 Thread Kinkie
>From memory, 3.1 is almost there.. On 2/10/10, Jakob Curdes wrote: > >>> >>> - sharepoint seems to rely on http 1.1 >>> - sharepoint uses absolute URLs which would have to be rewritten (but >>> newer >>> versions seem to have options to remedy that) >>> >> >> http://technet.microsoft.com/en-us/

Re: [squid-users] RE: libsmb/ntlmssp.c:ntlmssp_update(334)

2010-02-10 Thread Amos Jeffries
Dawie Pretorius wrote: Is it possible that someone can get back to me on this issue, thanks Dawie Pretorius Hello Getting this error sometimes in my cache.log: [2010/01/28 14:23:58, 1] libsmb/ntlmssp.c:ntlmssp_update(334) got NTLMSSP command 3, expected 1 2010/01/28 14:25:51| AuthConfig::Cr

Re: [squid-users] reverse proxying for sharepoint ??

2010-02-10 Thread Amos Jeffries
Kinkie wrote: From memory, 3.1 is almost there.. Just topping 65% compliant in the latest 3.1 release. :) Alex has almost done updating the HTTP/1.1 checklist. The current one should be up in a few days. The older one in the wiki was not to far off in the estimated "Guess" column. http://

[squid-users] Multiple domains in dstdomain bug?

2010-02-10 Thread Michael Tennes
Hi, For the life of me I can't figure out why the following two lines in my squid.conf file causes squid (Squid Cache: Version 3.0.STABLE16) to crash with a BUS ERROR, but if I split the acl into two (last for lines) it works fine. What am I missing? From what I've read acl entries are ORed. Ex

Re: [squid-users] Multiple domains in dstdomain bug?

2010-02-10 Thread Kinkie
On Wed, Feb 10, 2010 at 2:42 PM, Michael Tennes wrote: > Hi, > > For the life of me I can't figure out why the following two lines in my > squid.conf file causes squid (Squid Cache: Version 3.0.STABLE16) to crash > with a BUS ERROR, but if I split the acl into two (last for lines) it works > fi

[squid-users] squid + dansguardian + auth

2010-02-10 Thread Bruno Ricardo Santos
X-Copyrighted-Material Hi all! I'm having some trouble configuring squid with auth + dansguardian content filter. It's all configured, but when i try to browse, i get an error: Dansguardian 400 URL malformed Does authentication (and dansguardian filter) only works with transparent proxy or

[squid-users] high load issues

2010-02-10 Thread Justin Lintz
Squid ver: squid-2.6.STABLE21-3 The server is a xen virtual with 6GB of ram available to it. relevant lines in Squid.conf: ierarchy_stoplist cgi-bin ? acl apache rep_header Server ^Apache broken_vary_encoding allow apache cache_mem 4096 MB maximum_object_size 8192 KB maximum_object_size_in_memory

Re: [squid-users] high load issues

2010-02-10 Thread Luis Daniel Lucio Quiroz
Le Mercredi 10 Février 2010 10:36:40, Justin Lintz a écrit : > Squid ver: squid-2.6.STABLE21-3 > The server is a xen virtual with 6GB of ram available to it. > > relevant lines in Squid.conf: > > ierarchy_stoplist cgi-bin ? > acl apache rep_header Server ^Apache > broken_vary_encoding allow apach

Re: [squid-users] Ongoing Running out of filedescriptors

2010-02-10 Thread Luis Daniel Lucio Quiroz
Le Mardi 9 Février 2010 19:34:13, Amos Jeffries a écrit : > On Tue, 9 Feb 2010 17:39:37 -0600, Luis Daniel Lucio Quiroz > > wrote: > > Le Mardi 9 Février 2010 17:29:23, Landy Landy a écrit : > >> I don't know what to do with my current squid, I even upgraded to > >> 3.0.STABLE21 but, the proble

Re: [squid-users] Is there ICAP evidence log in any log files?

2010-02-10 Thread Luis Daniel Lucio Quiroz
Le Mardi 9 Février 2010 22:57:58, Amos Jeffries a écrit : > Henrik Nordström wrote: > > tis 2010-02-09 klockan 15:18 -0600 skrev Luis Daniel Lucio Quiroz: > >> Le Mercredi 30 Juillet 2008 22:24:35, Henrik Nordstrom a écrit : > >>> On tor, 2008-07-31 at 11:26 +0900, S.KOBAYASHI wrote: > Hello d

Re: [squid-users] high load issues

2010-02-10 Thread Justin Lintz
We're seeing the symptoms across 4 servers on different hardware. What would be the reason for adjusting the cache_swap_high to 96? Thanks - Justin Lintz On Wed, Feb 10, 2010 at 11:45 AM, Luis Daniel Lucio Quiroz wrote: > Le Mercredi 10 Février 2010 10:36:40, Justin Lintz a écrit : >> Squid ve

Re: [squid-users] high load issues

2010-02-10 Thread Luis Daniel Lucio Quiroz
Le Mercredi 10 Février 2010 11:41:29, Justin Lintz a écrit : > We're seeing the symptoms across 4 servers on different hardware. > What would be the reason for adjusting the cache_swap_high to 96? > Thanks > > - Justin Lintz > > > > On Wed, Feb 10, 2010 at 11:45 AM, Luis Daniel Lucio Quiroz >

Re: [squid-users] high load issues

2010-02-10 Thread Justin Lintz
> > dont top list, > > we have seveal heavy load squids, and we realized that sometimes inet surf is > slow, we've discovered that  it is because IO (as you see in your top command > more than 1% of IO waiting), so we purge our cache to dont let it rise > cache_swap_high percentage very often > Th

[squid-users] NTLM Authentication and Connection Pinning problem

2010-02-10 Thread Jeff Foster
There appears to be a problem with the connection pinning in both versions squid-2.7.stable7 and squid-3.1.0.7. I have some network captures that show the client (IE6) creating multiple TCP connections to the squid proxy and the proxy creating multiple TCP connections to an IIS server. The initial

Re: [squid-users] squid + dansguardian + auth

2010-02-10 Thread Jose Ildefonso Camargo Tolosa
Hi! On Wed, Feb 10, 2010 at 9:35 AM, Bruno Ricardo Santos wrote: > X-Copyrighted-Material > > > Hi all! > > I'm having some trouble configuring squid with auth + dansguardian content > filter. > > It's all configured, but when i try to browse, i get an error: > > Dansguardian 400 > URL malformed

[squid-users] killall -HUP squid

2010-02-10 Thread Riccardo Castellani
What command can I use to permit Squid 2.7.STABLE3-4.1 to reload squid.conf file ?! First I'm usually to use killall -HUP squid in the previous version, with squid -k shutdown I can only doing process shutdown, but I'm going to reload Squid config file automatically with only one command.

Re: [squid-users] high load issues

2010-02-10 Thread Luis Daniel Lucio Quiroz
Le Mercredi 10 Février 2010 12:49:47, vous avez écrit : > > dont top list, > > > > we have seveal heavy load squids, and we realized that sometimes inet > > surf is slow, we've discovered that it is because IO (as you see in > > your top command more than 1% of IO waiting), so we purge our cache

Re: [squid-users] high load issues

2010-02-10 Thread Mike Rambo
Justin Lintz wrote: dont top list, we have seveal heavy load squids, and we realized that sometimes inet surf is slow, we've discovered that it is because IO (as you see in your top command more than 1% of IO waiting), so we purge our cache to dont let it rise cache_swap_high percentage very of

Re: [squid-users] squid + dansguardian + auth

2010-02-10 Thread Jose Lopes
Hi! Which version of squid are you using? Regards Jose Jose Ildefonso Camargo Tolosa wrote: > Hi! > > On Wed, Feb 10, 2010 at 9:35 AM, Bruno Ricardo Santos > wrote: > >> X-Copyrighted-Material >> >> >> Hi all! >> >> I'm having some trouble configuring squid with auth + dansguardian content

Re: [squid-users] killall -HUP squid

2010-02-10 Thread Luis Daniel Lucio Quiroz
Le Mercredi 10 Février 2010 13:05:44, Riccardo Castellani a écrit : > What command can I use to permit Squid 2.7.STABLE3-4.1 to reload squid.conf > file ?! > > First I'm usually to use killall -HUP squid in the previous version, with > squid -k shutdown I can only doing process shutdown, but I'm g

Re: [squid-users] high load issues

2010-02-10 Thread Mike Rambo
Justin Lintz wrote: dont top list, we have seveal heavy load squids, and we realized that sometimes inet surf is slow, we've discovered that it is because IO (as you see in your top command more than 1% of IO waiting), so we purge our cache to dont let it rise cache_swap_high percentage very of

Re: [squid-users] Ongoing Running out of filedescriptors

2010-02-10 Thread George Herbert
On Wed, Feb 10, 2010 at 8:50 AM, Luis Daniel Lucio Quiroz wrote: > Le Mardi 9 Février 2010 19:34:13, Amos Jeffries a écrit : >> On Tue, 9 Feb 2010 17:39:37 -0600, Luis Daniel Lucio Quiroz >> >> wrote: >> > Le Mardi 9 Février 2010 17:29:23, Landy Landy a écrit : >> >> I don't know what to do wit

Re: [squid-users] killall -HUP squid

2010-02-10 Thread Riccardo Castellani
so now I cannot use "kill -HUP" command ? - Original Message - From: "Luis Daniel Lucio Quiroz" To: Sent: Wednesday, February 10, 2010 8:11 PM Subject: Re: [squid-users] killall -HUP squid Le Mercredi 10 Février 2010 13:05:44, Riccardo Castellani a écrit : What command can I use to p

Re: [squid-users] high load issues

2010-02-10 Thread Amos Jeffries
On Wed, 10 Feb 2010 11:36:40 -0500, Justin Lintz wrote: > Squid ver: squid-2.6.STABLE21-3 > The server is a xen virtual with 6GB of ram available to it. > > relevant lines in Squid.conf: > > ierarchy_stoplist cgi-bin ? > acl apache rep_header Server ^Apache > broken_vary_encoding allow apache >

Re: [squid-users] cache manager access from web

2010-02-10 Thread Chris Robertson
J. Webster wrote: Doesn't the fact that the manager needs a password in previous config lines mean that they can't access it? Fair enough, if you are content with that. the ncsa_users is only for http access? The cachemgr interface is accessed via HTTP. It uses a specific request m

Re: [squid-users] squid + dansguardian + auth

2010-02-10 Thread Amos Jeffries
On Wed, 10 Feb 2010 14:05:14 + (WET), Bruno Ricardo Santos wrote: > X-Copyrighted-Material > Oh, lucky you did not add your "nobody is allowed to read this" disclaimer as well. I can finally answer this request without getting myself into trouble publicly... ;) > > Hi all! > > I'm having

Re: [squid-users] Is there ICAP evidence log in any log files?

2010-02-10 Thread Amos Jeffries
On Wed, 10 Feb 2010 10:51:16 -0600, Luis Daniel Lucio Quiroz wrote: > Le Mardi 9 Février 2010 22:57:58, Amos Jeffries a écrit : >> Henrik Nordström wrote: >> > tis 2010-02-09 klockan 15:18 -0600 skrev Luis Daniel Lucio Quiroz: >> >> Le Mercredi 30 Juillet 2008 22:24:35, Henrik Nordstrom a écrit :

Re: [squid-users] NTLM Authentication and Connection Pinning problem

2010-02-10 Thread Amos Jeffries
On Wed, 10 Feb 2010 12:53:16 -0600, Jeff Foster wrote: > There appears to be a problem with the connection pinning in both > versions squid-2.7.stable7 and > squid-3.1.0.7. I have some network captures that show the client > (IE6) creating multiple TCP > connections to the squid proxy and the pro

Re: [squid-users] Ongoing Running out of filedescriptors

2010-02-10 Thread Kinkie
>> After retarting, I did have 1024 descriptors, no matters i did compile with >> 64k FDs. > > As I said - > > The running configure / make / compile environment has to be set to > 64k file descriptors.  The build environment's max file descriptors > are an overriding limit on the actual usable FDs

Re: [squid-users] killall -HUP squid

2010-02-10 Thread Jeff Peng
On Thu, Feb 11, 2010 at 4:02 AM, Riccardo Castellani wrote: > so now I cannot use "kill -HUP" command ? from squid -h: -k reconfigure|rotate|shutdown|interrupt|kill|debug|check|parse Though "kill -HUP pid" may work but you really should use squid -k reconfigure. -- Jeff Peng Email: jeffp...@n

Re: [squid-users] Ongoing Running out of filedescriptors

2010-02-10 Thread Landy Landy
> As I said - > > The running configure / make / compile environment has to > be set to > 64k file descriptors. The build environment's max > file descriptors > are an overriding limit on the actual usable FDs, no matter > what you > set the configure maxfd value to. If ulimit -n = 1024 > at con

[squid-users] regarding squid with tproxy wccp

2010-02-10 Thread senthil
HI I have installed Tproxy 4 . I have done all the prerequisites like compiling kernel and installing iptables 1.4 etc When i create Bridge i cant able to browse in private ip My network : Internet ---> (eth1)squid machine(eth0)-->test client eth1 -public ip eth0 and test client ip

RE: [squid-users] RE: libsmb/ntlmssp.c:ntlmssp_update(334)

2010-02-10 Thread Dawie Pretorius
Hello Amos So will the problem be solved when adding the squid_kerb_auth to the squid.conf, so when the client does ask for the Kerberos auth it can be supplied to him? Dawie Pretorius Dawie Pretorius wrote: > Is it possible that someone can get back to me on this issue, thanks > > Dawie Pr

[squid-users] Regarding wccp and tproxy

2010-02-10 Thread senthil
Hi We have configured squid with wccp and tproxy. It has been working fine till date but suddenly some ip not able to browse The request can be seen in access log but not able to browse . Meanwhile https://www.google.com works but http://www.google.com does not work Please do me favour Tha