Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Henrik Nordström
ons 2010-03-17 klockan 03:53 + skrev Amos Jeffries: > During the infected period imaginary-HAVP scans the documents and sends a > large "clean" prefix to all visitors. > BUT... aborts when the appended infection is detected. Browser is lucky > enough to notice the file is incomplete and retir

[squid-users] squid consuming too much processor/cpu

2010-03-16 Thread Muhammad Sharfuddin
Squid Cache: Version 2.7.STABLE5(squid-2.7.STABLE5-2.3) kernel version: 2.6.27 x86_64 CPU: Xeon 2.6 GHz CPU Memory: 2 GB /var/cache/squid is ext3, mounted with 'noacl' and 'noatime' options number of users using this proxy: 160 number of users using simultaneously/concurrently using this proxy: 72

FW: [squid-users] Cache_dir size considerations

2010-03-16 Thread GIGO .
Please somebody guide on the requested matter. > From: gi...@msn.com > To: squ...@treenet.co.nz; hen...@henriknordstrom.net; > squid-users@squid-cache.org > Date: Mon, 15 Mar 2010 13:03:24 + > Subject: [squid-users] Cache_dir size considerations > > >

[squid-users] Startup/Shutdown scripts.

2010-03-16 Thread GIGO .
It is related to starting squid automatically at boot. i have tried enough but did not succeded in doing that. I have compiled squid3 stable24 on Ubuntu 8.04LTS. What i figured out is that squid is not being allowed to run as root so my startup scripts failed evend doing su -u proxy /bla/bla

[squid-users] Max Object Size.

2010-03-16 Thread GIGO .
Dear All, Please guide me on this Is there any difference between maximum_object_size and max-size directives. What is the recommended setting when you are looking forward for caching windows update and youtube content. Almost 1000 clients. regards,

RE: [squid-users] Squid Youtube caching & Autostartup.

2010-03-16 Thread GIGO .
Thank you. > Date: Tue, 16 Mar 2010 21:38:10 + > From: squ...@treenet.co.nz > To: squid-users@squid-cache.org > Subject: Re: [squid-users] Squid Youtube caching & Autostartup. > > On Tue, 16 Mar 2010 13:10:11 +, "GIGO ." wrote: >> Please your guidance required on the following >>

Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Henrik K
On Wed, Mar 17, 2010 at 03:53:01AM +, Amos Jeffries wrote: > > So HAVP is designed specifically to send client scanned parts of the file > before the entire thing is checked? Right. Of course all this is configurable. > That explains something that I was wondering about... > > Consider this

Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Amos Jeffries
On Wed, 17 Mar 2010 05:24:38 +0200, Henrik K wrote: > On Tue, Mar 16, 2010 at 08:58:27PM +0100, Henrik Nordström wrote: >> mån 2010-03-15 klockan 18:47 +0200 skrev Henrik K: >> >> > If you don't want this limitation, you can use HAVP. It scans the file >> > while >> > it's being transferred to cl

Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Henrik K
On Tue, Mar 16, 2010 at 08:58:27PM +0100, Henrik Nordström wrote: > mån 2010-03-15 klockan 18:47 +0200 skrev Henrik K: > > > If you don't want this limitation, you can use HAVP. It scans the file while > > it's being transferred to client, while keeping small part of it buffered > > (in case of vi

Re: [squid-users] squid redirection to local apache

2010-03-16 Thread jayesh chavan
Hi, Plz rply. Regards, Jayesh On Mon, Mar 15, 2010 at 4:22 PM, jayesh chavan wrote: > Hi, >   Its not ssl it is safe_ports. >  Regards, >  Jayesh > > On Mon, Mar 15, 2010 at 3:21 PM, jayesh chavan > wrote: >> 2010/3/15 jayesh chavan : >>> Hi, >>>   squid is used as normal proxy.Port 80 is

Re: [squid-users] Reverse Proxy to Exchange 2010 OWA slow load time

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 17:06 -0500 skrev James Nguy: > I am testing with Squid 3 Stable 13 on CentOS 5, reverse proxy to > Exchange 2010 and seeing very slow page on the main OWA page. When I > access OWA, the initial login page loads very quickly, then I click > "Sign In." The next screen takes 4-

[squid-users] Reverse Proxy to Exchange 2010 OWA slow load time

2010-03-16 Thread James Nguy
I am testing with Squid 3 Stable 13 on CentOS 5, reverse proxy to Exchange 2010 and seeing very slow page on the main OWA page. When I access OWA, the initial login page loads very quickly, then I click "Sign In." The next screen takes 4-5 mins to finish loading. I sat there and timed it... If I hi

Re: [squid-users] Problem with http upload through squid

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 17:28 +0100 skrev Eric: > I answer your questions, i reproduced this error : > > (104) Connection reset by peer > Generated Tue, 16 Mar 2010 15:54:50 GMT by ipcop.localdomain (squid) > > 1268754892.475 64407 192.168.2.104 TCP_MISS/502 1406 POST > http://www.website.com/op

Re: [squid-users] Blocking or allowing specific arbitrary request headers in squid-3.1.

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 21:46 + skrev Amos Jeffries: > Rant: I for one got tired of handling complaints because application X > would not work through Squid when the admin stripped away all it's > proprietary headers. Another Rant: Most admins I have spoken to which uses this say they do thi

Re: [squid-users] Problem running as a Transparent Proxy

2010-03-16 Thread Amos Jeffries
On Tue, 16 Mar 2010 17:39:32 -0400, Warren Turner wrote: > I wouldn't be surprised if that is the problem, this is the first time I > tried to compile squid on my own. Should it be fine to just ad > "--enable-linux-netfilter" to the configuration options and do a "make > clean"? Thank you. >

Re: [squid-users] Blocking or allowing specific arbitrary request headers in squid-3.1.

2010-03-16 Thread Amos Jeffries
On Tue, 16 Mar 2010 14:06:59 +, Graham Keeling wrote: > Hello, > > In older versions of squid, I was able to block or allow specific arbitrary > request headers. For example: > > header_access X-SomeRandomHeaderA allow all > header_access X-SomeRandomHeaderB deny all > > In squid-3.1 (and 3

Re: [squid-users] Problem running as a Transparent Proxy

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 17:39 -0400 skrev Warren Turner: > I wouldn't be surprised if that is the problem, this is the first time I > tried to compile squid on my own. Should it be fine to just ad > "--enable-linux-netfilter" to the configuration options and do a "make > clean"? Thank you. Yes

Re: Re: [squid-users] "emulate_httpd_log on" is not working

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 20:54 + skrev mkryg...@gmail.com: > All the documentation I looked at still refers to this as an active > feature. So I was banging my head off this more than I needed to. > Apparently it is deprecated as of 2.6 and does not maintain any > backward compatibility. It's

Re: [squid-users] Problem running as a Transparent Proxy

2010-03-16 Thread Warren Turner
I wouldn't be surprised if that is the problem, this is the first time I tried to compile squid on my own. Should it be fine to just ad "--enable-linux-netfilter" to the configuration options and do a "make clean"? Thank you. -Warren Henrik Nordström wrote: tis 2010-03-16 klockan 14:38 -04

Re: [squid-users] Squid Youtube caching & Autostartup.

2010-03-16 Thread Amos Jeffries
On Tue, 16 Mar 2010 13:10:11 +, "GIGO ." wrote: > Please your guidance required on the following > > 1. I have studies these two guides for youtube content caching but i am > not sure that whether this addresses squid3 as well or not. > > http://wiki.squid-cache.org/ConfigExamples/Dynamic

Re: [squid-users] SQuid Slow

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 21:12 + skrev Amos Jeffries: > In Squid the chunked decoder needs to buffer the reply to decode it for > clients It should not, just the chunk header needs buffering if split across reads, not the chunk data. Regards Henrik

Re: [squid-users] squid returns an error on an ajax request

2010-03-16 Thread Amos Jeffries
On Tue, 16 Mar 2010 15:31:51 -0400, Chris Nighswonger wrote: > This is probably a problem with the site rather than with squid, but I > thought the list might be able to identify it as I cannot. > > Below is the entire response body. > FORM http://www.blueletterbible.org/BibleAJAX/tense.cfm?t

Re: [squid-users] SQuid Slow

2010-03-16 Thread Amos Jeffries
On Tue, 16 Mar 2010 20:56:58 +0100, Henrik Nordström wrote: > tis 2010-03-16 klockan 17:22 +0500 skrev Adnan Shahzad: > >> Is there any way to fast the simple html pages. Currently everything >> working fine, but user complaint that it appear all html page at once >> which cause delay. > > Squid

Re: [squid-users] Problem running as a Transparent Proxy

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 14:38 -0400 skrev Warren Turner: > Hello everyone, > I am running Squid 3.0 STABLE24 on an Ubuntu 8.04 server. When I > try to make a transparent proxy I get the following warning in my syslog: > > WARNING: transparent proxying not supported Your Squid binary is not c

Re: [squid-users] "emulate_httpd_log on" is not working

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 11:50 -0400 skrev Mike K.: > I have gone in and uncommented the "emulate_httpd_log off" in the > sample and changed it to "emulate_http_log on". Once the change was > made, I restarted squid. Do we still have that directive? Thought it was removed when we added format speci

Re: [squid-users] Squid v2.6 error accessing site

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 11:12 +1100 skrev Ivan .: > I am having some trouble accessing the site > http://www.efirstaid.com.au/. I confirm the TCP SYN packet leaves our > edge router, but I don't see anything back? That's usually ECN issues at the requested site. http://wiki.squid-cache.org/SquidF

[squid-users] Proxy Script Error

2010-03-16 Thread Sam Larson
Hello, I'm trying to set up a proxy server with upsidedownternet (http://www.ex-parrot.com/pete/upside-down-ternet.html) running, and I'm having a bit of trouble. After much struggling, I have squid up and running fine and successfully using it as a proxy for one of my computers. I'm using part o

Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Henrik Nordström
mån 2010-03-15 klockan 18:47 +0200 skrev Henrik K: > If you don't want this limitation, you can use HAVP. It scans the file while > it's being transferred to client, while keeping small part of it buffered > (in case of virus, it is not transferred so client can't open incomplete > file). It's as

Re: [squid-users] SQuid Slow

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 17:22 +0500 skrev Adnan Shahzad: > Is there any way to fast the simple html pages. Currently everything > working fine, but user complaint that it appear all html page at once > which cause delay. Squid relays data to the requesting browser as soon as it receives it. It doe

[squid-users] Re: Problem running as a Transparent Proxy

2010-03-16 Thread Frank Becker
Am 16.03.2010 19:38, schrieb Warren Turner: Hello everyone, I am running Squid 3.0 STABLE24 on an Ubuntu 8.04 server. When I try to make a transparent proxy I get the following warning in my syslog: WARNING: transparent proxying not supported This message seems to appear every time a client mak

[squid-users] squid returns an error on an ajax request

2010-03-16 Thread Chris Nighswonger
This is probably a problem with the site rather than with squid, but I thought the list might be able to identify it as I cannot. Below is the entire response body. This request works fine without squid in line. Kind Regards, Chris http://www.w3.org/TR/html4/loose.dtd";> ERROR: The requested U

[squid-users] Problem running as a Transparent Proxy

2010-03-16 Thread Warren Turner
Hello everyone, I am running Squid 3.0 STABLE24 on an Ubuntu 8.04 server. When I try to make a transparent proxy I get the following warning in my syslog: WARNING: transparent proxying not supported This message seems to appear every time a client makes an access request. Squid seems to

[squid-users] Reg wccp+Tproxy

2010-03-16 Thread senthilkumaar2021
Hi All, I have configured squid+wccp+Tproxy i followed the document as in squid cache i.e., in the following http://wiki.squid-cache.org/Features/Tproxy4 I have tested wccp with transparent proxy it was working fine But when using wccp with Tproxy the request can be seen in access log but no b

Re: [squid-users] Problem with http upload through squid

2010-03-16 Thread Eric
Henrik Nordstrom a écrit : > lör 2010-03-13 klockan 17:30 +0100 skrev Eric: > > >> I'm using Squid v. 2.7.STABLE7 in an ipcop server (v.1.4.21). I'm facing >> problem with http upload through squid. >> I often get 2 error's messages when i try to upload a file on my website >> using an amazing

Re: [squid-users] /etc/init.d/squid start failed

2010-03-16 Thread John Doe
From: Hubert Choma > 2010/03/15 13:05:53| Squid is already running! Process ID 14132 The last line seems to imply that it is already running... Did you check? If you cannot find it, check if the following files exists: /var/run/squid.pid /var/lock/subsys/squid JD

[squid-users] "emulate_httpd_log on" is not working

2010-03-16 Thread Mike K.
First off, I apologize if this is in an archive, the search function appears to be broken and I came up with nothing by googling. I'm a n00b and I am trying to setup a test environment to run some different logging scenarios. I have gone in and uncommented the "emulate_httpd_log off" in the sample

RE: [squid-users] Ignore requests from certain hosts in access_log

2010-03-16 Thread Baird, Josh
Hi Amos, Same results. Nothing coming from the load balancers is being logged (even requests using X-Forwarded-For). Here is my configuration: acl loadbalancers src x.x.x.y/255.255.255.255 acl loadbalancers src x.x.x.z/255.255.255.255 follow_x_forwarded_for allow loadbalancers log_uses_indire

[squid-users] Blocking or allowing specific arbitrary request headers in squid-3.1.

2010-03-16 Thread Graham Keeling
Hello, In older versions of squid, I was able to block or allow specific arbitrary request headers. For example: header_access X-SomeRandomHeaderA allow all header_access X-SomeRandomHeaderB deny all In squid-3.1 (and 3.0, I think), the equivalent of header_access for request headers is now requ

[squid-users] Squid Youtube caching & Autostartup.

2010-03-16 Thread GIGO .
Please your guidance required on the following 1. I have studies these two guides for youtube content caching but i am not sure that whether this addresses squid3 as well or not. http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube/Discussion?action http://www.wlug.org.nz/SquidC

[squid-users] SQuid Slow

2010-03-16 Thread Adnan Shahzad
Dear all, Is there any way to fast the simple html pages. Currently everything working fine, but user complaint that it appear all html page at once which cause delay. So my question is it possible that as squid receive object it should display to user's, instead of display whole website at onc

Re: Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Trever L. Adams
On 01/-10/-28163 12:59 PM, Henrik Nordström wrote: > Yes. See the "viralator" mode of c-icap srv_clamav. > The service supports 3 different modes of download management > > - Wait with response until scanning have completed > - Send some data of the file while scanning is performed to keep the > cl

Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Leonardo Carneiro - Veltrac
Tks for your info Amos. Amos Jeffries wrote: On Mon, 15 Mar 2010 14:50:54 -0300, Leonardo Carneiro - Veltrac wrote: I have always read that transparent proxy + https was not possible. It is now? There is a stable squid version with this feature? There aew any major drawbacks using this fea

Re: [squid-users] Questions about referer url cache

2010-03-16 Thread Henrik Nordström
tis 2010-03-16 klockan 10:08 +0800 skrev dave jones: > Thanks. I use url_rewrite_program /etc/squid/redirect_test.php, > but it seems my program doesn't work... In most languages you need to turn off output buffering, and is something everyone trips over when writing their first url rewriter/redi

[squid-users] Squid slow on one site

2010-03-16 Thread ozan ucar
Hello all, I'm using squid 2.6. My company using Microsoft CRM web service, the name crm.xyz.com I'm connect from the web address crm.xyz.com squid was recalled over 2.6 also comes as 14sn-15sn. however is stopped squid proxy and direct connect to MS CRM web site from a

Re: [squid-users] /etc/init.d/squid start failed

2010-03-16 Thread Hubert Choma
Dnia 15-03-2010 o godz. 18:00 Hubert Choma napisał(a): > Dnia 15-03-2010 o godz. 14:42 Henrik Nordström napisał(a): > > mĂĄn 2010-03-15 klockan 14:00 +0100 skrev Hubert Choma: > > > > > iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j REDIRECT > > > --to-port 8080 > > > It's correct iptab