Re: [squid-users] Help with accelerated site

2010-03-28 Thread Amos Jeffries
a...@gmail wrote: Hi All, I get this in my cache log, does anyone know what it means please? Unlinkd pipe opened on FD 13 Everytime I get this I know something is going pear shape again Thank you all Regards Adam unlinkd (linux-style abbreviation for 'unlink daemon') is the name of the

Re: [squid-users] Help with accelerated site

2010-03-28 Thread Amos Jeffries
a...@gmail wrote: Hi Ron, Thanks for your reply and thanks for your time This is perhaps the 10th time I uninstalled it and reinstalled it And this is the very first time I could access my websites internally, externally nothing yet, I am still getting the error This error: The following

Re: [squid-users] Having issue with reverse proxy and SSL

2010-03-28 Thread Amos Jeffries
Nick Duda wrote: Thanks a ton, this seems to have worked. I'll play more with it. Thanks again. Nick, Dean;meet proto ACL. :) acl HTTP proto HTTP acl HTTPS proto HTTPS It's faster than the regex. There is also the myport type which works reliably in regular receiving ports. With

Re: [squid-users] Negotiate/NTLM authentication caching

2010-03-28 Thread Amos Jeffries
Khaled Blah wrote: Hi all, I'm developing an authentication helper (Negotiate/NTLM) for squid and I am trying to understand more how squid handles this process internally. Most of all I'd like to know how and how long squid caches authentication results. I have looked at the debug logs and they

Re: [squid-users] TCP_MISS

2010-03-28 Thread Amos Jeffries
Rudolf Meijering wrote: Hi Amos, Thanks for the advice, I put the dynamic catch all at the bottom of the pattern list before the . catch now, and restarted squid. I accessed the website from my computer using firefox. The source of the webpage for instance has this line: TD vAlign=top

Re: [squid-users] Windows Authentication Helper client

2010-03-28 Thread Amos Jeffries
Matt Richards wrote: Hello, Does anybody know if any technique or application that will allow windows machines (XP and 7) to authenticate against a proxy when applications don't support proxy authentication. What I am looking for is an alternative to Novell's Client Trust, its an application

Re: [squid-users] CONNECT method support(for https) using squid3.1.0.6 + tproxy4

2010-03-28 Thread Mikio Kishi
Hi, Amos I'm sorry in the old topic. In this case, I'd also like to use authentication. So, - auth/Acl.cc int AuthenticateAcl(ACLChecklist *ch) { ACLFilledChecklist *checklist = Filled(ch); HttpRequest *request = checklist-request; http_hdr_type headertype; ... snip ... }

Re: [squid-users] Help with accelerated site

2010-03-28 Thread a...@gmail
Hi Amos, Thanks for your time at the moment my config is as follow it's working as far is the acceleration mode is concerned http_port 80 accel vhost defaultsite=www.mysite.org cache_peer 192.168.1.3 parent 81 0 no-query originserver name=main acl out_sites dstdomain www.mysite.org

Re: [squid-users] Help with accelerated site

2010-03-28 Thread Ron Wheeler
Are you trying to build an accellerator for your site or a proxy. Pick one and get it to work. The config that I sent you is an accelerator. I would suggest to stick with the accelerator and let your inside guys hit your server on port 80. 1) Put your backend server back on port 80

Re: [squid-users] Help with accelerated site

2010-03-28 Thread a...@gmail
Hi Again, Well my local network can't access the Internet since I had to put the vhost option on the http_port 3128 They can access my sites internally not a problem, but the problem is they can no longer access the internet I have kept the original config The only thing I have changed was

Re: [squid-users] Help with accelerated site

2010-03-28 Thread Nyamul Hassan
Hi Adam, Did you read the page: http://www.squid-cache.org/Versions/v2/2.7/cfgman/http_port.html Under vhost, it clearly says: Accelerator mode using Host header for virtual domain support. Implies accel. So, if you want Squid listener on 3128 to be acting as forward proxy, then don't use

Re: [squid-users] Help with accelerated site

2010-03-28 Thread Ron Wheeler
You seemed to have missed my note quoted below. quote I would suggest to stick with the accelerator and let your inside guys hit your server on port 80. 1) Put your backend server back on port 80 http_port 80 accel vhost defaultsite=www.mysite.org cache_peer 192.168.1.3 parent 80

Re: [squid-users] Help with accelerated site

2010-03-28 Thread a...@gmail
Hi Hassan, Did you read the page: http://www.squid-cache.org/Versions/v2/2.7/cfgman/http_port.html Yes I did read it and I read a great deal more and I have been on many forums, and I have been through the mailing list and and... Yes it says it clearly but what it doesn't say clearly is

Re: [squid-users] Help with accelerated site

2010-03-28 Thread Nyamul Hassan
See what happened? While you answered to the parts where I complained about your mailing-list behaviour, you failed to try out what was suggested, and report back with the logs. All the other criticisms that you make, is making the emails unnecessarily big.  That's the main complain from myself

Re: [squid-users] Help with accelerated site

2010-03-28 Thread a...@gmail
Hi Hassan, If I had made a long email before is because somebody asked me to post some of my log files some of my config file, some of my iptables and explain what I was trying to achieve so they can see. There was one email where I tried to express my frustration it was not directed to

Re: [squid-users] Help with accelerated site

2010-03-28 Thread a...@gmail
Hi Ron thanks again for your reply No I think you're a little confused here I have one network at the moment and is the 192.168.1.0 My Router and proxy are both on the same machine which is 192.168.1.4 My backend server is on 192.168.1.3 Two different machines but on the same network However if

Re: [squid-users] Help with accelerated site

2010-03-28 Thread Amos Jeffries
On Sun, 28 Mar 2010 23:37:38 +0100, a...@gmail adbas...@googlemail.com wrote: Hi Ron thanks again for your reply No I think you're a little confused here I have one network at the moment and is the 192.168.1.0 My Router and proxy are both on the same machine which is 192.168.1.4 My backend

Re: [squid-users] Help with accelerated site

2010-03-28 Thread a...@gmail
Hello Amos, Thanks for your reply and suggestion I have just done what you suggested and I still couldn't access the internet from my local network I completely removed our_network and the relevant http_access etc.. But couldn't access the internet After that I did the following added and

Re: [squid-users] Help with accelerated site

2010-03-28 Thread Amos Jeffries
On Mon, 29 Mar 2010 00:39:40 +0100, a...@gmail adbas...@googlemail.com wrote: Hello Amos, Thanks for your reply and suggestion I have just done what you suggested and I still couldn't access the internet from my local network I completely removed our_network and the relevant http_access

Re: [squid-users] Help with accelerated site

2010-03-28 Thread Nyamul Hassan
At this point, the best suggestion that I can provide to Adam is to remove the existing config, and re-instate the default config that came with Squid. Then, start from there. No need to define make custom ACLs, make everything accessible at first. Just concentrate on making the FWD + REV

Re: [squid-users] Help with accelerated site

2010-03-28 Thread a...@gmail
Hi Amos, Thanks again for your reply You asked me to remove the our_network Acl completely, I have done so I didn't even comment it, I removed it. I have commented out the # acl localnet 172.0.0 I have commented out the # acl localnet 10.0.0.0/8 I have put my own localnet acl localnet

Re: [squid-users] Help with accelerated site

2010-03-28 Thread a...@gmail
Hi Hassan, Thanks for your suggestion, I just did that about 10 times already lol I started from scratch, the one I have right now is basically a default config with few changes I can easily remove them, but with the default config there was no way I could access my sites the only thing it did

Re: [squid-users] Help with accelerated site

2010-03-28 Thread a...@gmail
Hi Amos, Yes I didn't copy paste it I just typed it and I forgot to mention it but it is in the actual config, because what I did basically I took a default config copy pasted everything that was uncommented to a file I then created another config file because to go through the amount of

Re: [squid-users] Intermittent connections patch

2010-03-28 Thread Amos Jeffries
HC Barfield wrote: hi since there is demand for an offline squid server, when will the current release include the Intermittent connections patch with the tristate offline mode? http://linuxdevcenter.com/pub/a/linux/2001/08/02/offline_squid.html Cb Thanks for pointing the patch

Re: [squid-users] TCP MISS 502

2010-03-28 Thread Amos Jeffries
Ivan . wrote: Hi, What would cause a TCP MISS 502, which would prevent a site from loading? The site works on squidv3.0 but not on v2.6? Any one of quite a few things. The ERR_READ_ERROR result means the remote server or network is closing the TCP link on you for some unknown reason. Why

Re: [squid-users] Does squid redirector work for https requests

2010-03-28 Thread Amos Jeffries
Priyadarsan Roy wrote: Hi All, Does the squid redirector program configured by the derivative redirect_program work for https requests coming to squid ? What I mean to ask is when https requests that come to squid, will that also to be send to the redirector program ? Squid may send the

Re: [squid-users] Cache size is decreasing

2010-03-28 Thread Amos Jeffries
Mr. Issa(*) wrote: Dear mates, I hope you enjoy your weekend... :) I did compile/install Squid2.7Stable9 and i noticed something /dev/sdc1 1.8T 355G 1.4T 21% /cache1 /dev/sdd1 1.8T 352G 1.4T 21% /cache2 the /cache1 cache2 dirs where 370G each.. suddenly they are

Re: [squid-users] **xs**Javascript problem

2010-03-28 Thread Amos Jeffries
Alan Lehman wrote: My browser is hanging when trying to access a javascript page over https via Squid proxy (squid-3.1.0.17). When I click a button with the following code, the page won't load. input name=Begin type=button onClick=window.location =

[squid-users] cache_peer

2010-03-28 Thread GIGO .
I want that if my first listed cache peer goes down then only should my second peer be used. - cache_peer 127.0.0.1 3128 0 default no-digest no-query no-delay (only if this is unavailable then the second one listed is used) cache_peer 10.1.82.205 8080 0 default proxy-only

Re: [squid-users] TCP MISS 502

2010-03-28 Thread Ivan .
Hi Amos You can see the tcp_miss in the access.log here:- 1269834108.182 120002 127.0.0.1 TCP_MISS/000 0 GET http://www.environment.gov.au - DIRECT/155.187.3.81 - Here is a tcpdump output from the connection. You can see the TCP handshake setup and then the http session just hangs? I have