Re: [squid-users] Report of visited sites? (No filtering, just reporting)

2010-05-12 Thread Marcello Romani
Charles Bray ha scritto: Hello, I am sure this must be a common question... please excuse. Does there exist a tool or example configuration that will enable me to log, and display in a nice HR department friendly format, the sites that users in our small office network are visiting? We are

[squid-users] Squid stops due to signal 6

2010-05-12 Thread Sagar
Dear All, I have enough space in /usr/local/squid/var/logs . access.log, store.log cache.log are well under 0.5 G Even then i've got this message when the SQUID stopped abruptly .

Re: [squid-users] Re: Re: squid_kerb_auth received type 1 NTLM token

2010-05-12 Thread lieven
Dear Markus, You have to be recommended for your patience!! Turns out that my keytab file was wrong all along due to a stupid mistake from my side. (as to be expected :-/) I did have the principal for the realm but not for the proxy server itself. Thus the HTTP-keytab was recreated with the

Re: [squid-users] Report of visited sites? (No filtering, just reporting)

2010-05-12 Thread lieven
did you try sarg? It checks the squid logs and creates overviews of the visited sites per ip. Marcello Romani wrote: Charles Bray ha scritto: Hello, I am sure this must be a common question... please excuse. Does there exist a tool or example configuration that will enable me to log, and

Re: [squid-users] Squid stops due to signal 6

2010-05-12 Thread Jakob Curdes
Sagar schrieb: Dear All, I have enough space in /usr/local/squid/var/logs . access.log, store.log cache.log are well under 0.5 G Even then i've got this message when the SQUID stopped abruptly .

[squid-users] ACL in SQUID

2010-05-12 Thread squidACL
Hi I have squid and squidGuard installed and working very well , but now I need to creat groups ( I use the Active Directory user) you know how can I create the ACL groups ? Many Thanks -- View this message in context:

[squid-users] a keepalive problem about NTLM authentication pass through

2010-05-12 Thread Mikio Kishi
Hi, There may be a situation which we can't pass through HTTP with NTLM authentication bacause of lack of keepalive. cache_peer XXX.XXX.XXX.XXX parent 8080 0 no-query connection-auth=on always_direct allow all In above case, squid does not output Proxy-Connection: keep-alive to cache peer

[squid-users] sslbump and cache_peer

2010-05-12 Thread Benjamin Fleckenstein
Hi, I'm trying to setup sslbump in combination with a parent proxy. Here a short drawing: Client my proxy (with sslbump) parent proxy internet Unfortunately the parent proxy isn't able to handle the requests from my proxy and returns a bad request error message. As soon as

[squid-users] user authentication using multiple LDAP servers.

2010-05-12 Thread Sagar
Hi All, We are two sister concern companies using one single infrastructure. We have 1 LDAP server (ldap.company.com) which is used for authentication on squid proxy server. However we have 2 different user groups already in place for the two companies. Going ahead we want to split the LDAP

RE: [squid-users] Increasing File Descriptors - Fixed!!

2010-05-12 Thread Bradley, Stephen W. Mr.
I may try that, thanks steve -Original Message- From: Jose Ildefonso Camargo Tolosa [mailto:ildefonso.cama...@gmail.com] Sent: Monday, May 10, 2010 5:39 PM To: Bradley, Stephen W. Mr. Cc: mnhas...@usa.net; Squid Users Subject: Re: [squid-users] Increasing File Descriptors - Fixed!! Hi!

[squid-users] RE: Anacron log entries

2010-05-12 Thread Simon Brereton
No suggestions? Google seems to suggest I'm almost unique.. http://markmail.org/message/lbins37z2p4jgnux#query:ACL%3A%3APrototype%3A%3A~Prototype%3A%20TODO%3A%20unregister%20me+page:1+mid:yd466psa5migptrk+state:results These lines definitely relate to squid (which has nothing in the logs about

[squid-users] how .htaccess gets cached and works with Last-Modified

2010-05-12 Thread Reverse Squid
Hello List, We have an .htaccess in a certain directory in our origin server which redirects requests upon USER-AGENT. How does Squid treat that .htaccess? If it were to cache it, as it itself does not change, all requests will follow the first USER-AGENT, ie, if I come with Firefox 2.0 I get

Re: [squid-users] squid in load balanced wccpv2 configuration

2010-05-12 Thread Jiffy 1111
--- On Sun, 5/9/10, Amos Jeffries squ...@treenet.co.nz wrote: From: Amos Jeffries squ...@treenet.co.nz Subject: Re: [squid-users] squid in load balanced wccpv2 configuration To: squid-users@squid-cache.org Date: Sunday, May 9, 2010, 6:55 AM Jiffy wrote: Hi, all, In a nutshell,

[squid-users] kernel support 2.6.3 for tproxy

2010-05-12 Thread senthilkumaar2021
Hi. I am using squid 2.7stable 6 as tproxy in bridge mode with the help of tpxoxy 4 patch It was working fine with kernel 2.6.30 and i upgraded kernel to 2.6.33 I found that ebtables and iptables not redirecting request to the squid I have compiled kernel with tproxy support Did any one

RE: [squid-users] Increasing File Descriptors - Fixed!!

2010-05-12 Thread Bradley, Stephen W. Mr.
I went ahead and updated /etc/sysctl.conf to allow for 1024-64000 ports open for connections. That should help; I just wish I could test it before August. :-( steve -Original Message- From: Jose Ildefonso Camargo Tolosa [mailto:ildefonso.cama...@gmail.com] Sent: Monday, May

[squid-users] File with zero size when using squid proxy

2010-05-12 Thread Emmanuel Lesouef
Hello, I'm facing a strange issue with our Squid proxy. The situation is that one of our users reports us that when he tries to get a small file (under 2kb it seems), his browser leave him with a zero size text file. If we test with a direct access to the internet, the file is well sized (453

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Jeff Pang
2010/5/12 Emmanuel Lesouef e.leso...@crbn.fr: Hello, I'm facing a strange issue with our Squid proxy. The situation is that one of our users reports us that when he tries to get a small file (under 2kb it seems), his browser leave him with a zero size text file. It sounds squid has cached

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Emmanuel Lesouef
Le Wed, 12 May 2010 22:52:02 +0800, Jeff Pang pa...@arcor.de a écrit : 2010/5/12 Emmanuel Lesouef e.leso...@crbn.fr: Hello, I'm facing a strange issue with our Squid proxy. The situation is that one of our users reports us that when he tries to get a small file (under 2kb it seems),

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Emmanuel Lesouef
Le Wed, 12 May 2010 23:10:00 +0800, Jeff Pang pa...@arcor.de a écrit : How about upgrading squid to the latest version (2.7 or 3.1)? Ouch... This is Debian Stable. And the server is part of a critical cluster... To summarize, it is not possible to upgrade to v3.1... -- Emmanuel Lesouef

Re: [squid-users] user authentication using multiple LDAP servers.

2010-05-12 Thread Diego Woitasen
2010/5/12 Sagar sagar.naval...@gmail.com Hi All, We are two sister concern companies using one single infrastructure. We have 1 LDAP server (ldap.company.com) which is used for authentication on squid proxy server. However we have 2 different user groups already in place for the two

[squid-users] cache-control headers

2010-05-12 Thread Jonathan Lunn
Hello squid-users, I'm successfully using Squid (3.0.STABLE25) with ESI enabled but, I can't seem to cache anything that has a cache-control: max-age less than 60 seconds. At present I'm having to set cache-control: max-age header at 61 seconds in order to cache. e.g; ?php

RE: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread James Zuelow
-Original Message- From: Emmanuel Lesouef [mailto:e.leso...@crbn.fr] Sent: Wednesday, 12 May, 2010 07:20 To: squid-users@squid-cache.org Subject: Re: [squid-users] File with zero size when using squid proxy Le Wed, 12 May 2010 23:10:00 +0800, Jeff Pang pa...@arcor.de a écrit :

Re: [squid-users] kernel support 2.6.33 for tproxy

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 19:44 +0530 skrev senthilkumaar2021: Did any one tried the tproxy with latest kernel I have not tried 2.6.33 or running in bridge mode. but seems to work fine in routing mode in 2.6.32.11 (Fedora 12). Regards Henrik

RE: [squid-users] Increasing File Descriptors - Fixed!!

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 10:17 -0400 skrev Bradley, Stephen W. Mr.: I went ahead and updated /etc/sysctl.conf to allow for 1024-64000 ports open for connections. That should help; I just wish I could test it before August. :-( Reminds me that we should implement some smart address +

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 17:20 +0200 skrev Emmanuel Lesouef: Le Wed, 12 May 2010 23:10:00 +0800, Jeff Pang pa...@arcor.de a écrit : How about upgrading squid to the latest version (2.7 or 3.1)? Ouch... This is Debian Stable. And the server is part of a critical cluster... To

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Emmanuel Lesouef
Le Wed, 12 May 2010 08:38:31 -0800, James Zuelow james_zue...@ci.juneau.ak.us a écrit : Backports has 2.7STABLE7 which is newer than the Lenny version, if not quite up to date. 2.7STABLE9 has been in Squeeze for a couple of weeks (since April 28) so might be in the backports pipe now. That

Re: [squid-users] squid 3.1 strange upload behavior

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 17:20 +0200 skrev Daemen, Martin: after upgrading squid from 2.7 to 3.1 there is an strange upload behavior. Right now, the progress bar during the upload seem to show the upload in realtime. So if we upload 15MB through our proxy to an webserver at the internet, we

Re: [squid-users] cache-control headers

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 08:45 -0700 skrev Jonathan Lunn: I'm successfully using Squid (3.0.STABLE25) with ESI enabled but, I can't seem to cache anything that has a cache-control: max-age less than 60 seconds. At present I'm having to set cache-control: max-age header at 61 seconds in order

Re: [squid-users] how .htaccess gets cached and works with Last-Modified

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 15:48 +0300 skrev Reverse Squid: Hello List, We have an .htaccess in a certain directory in our origin server which redirects requests upon USER-AGENT. How does Squid treat that .htaccess? Depends on what the HTTP response looks like. If it were to cache it, as it

Re: [squid-users] RE: Anacron log entries

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 14:40 +0200 skrev Simon Brereton: /etc/cron.daily/logrotate: 2010/05/05 07:35:20.152| aclParseUserList: parsing user list 2010/05/05 07:35:20.152| aclParseUserList: parsing user list Looks like debug output. What is your debug_options directive set to? Regards Henrik

Re: [squid-users] user authentication using multiple LDAP servers.

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 16:18 +0530 skrev Sagar: Is squid able to authenticate users from 2 different LDAP servers for company A Company B. (ldap.companyA.com, ldap.companyB.com) Yes, with a little simple glue. This is best done if you can identify which company the user belongs to based on

Re: [squid-users] sslbump and cache_peer

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 12:32 +0200 skrev Benjamin Fleckenstein: As soon as I activate sslbump, my proxy sends out the requests to the parent proxy in the form: GET https://www.destination.com Indeed. Internal wrapping of the request into an CONNECT + SSL wrapper has not yet been

Re: [squid-users] a keepalive problem about NTLM authentication pass through

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 18:54 +0900 skrev Mikio Kishi: http.c:HttpStateData::sendRequest() 1998 /* 1999 * Is keep-alive okay for all request methods? 2000 */ 2001 if (orig_request-flags.must_keepalive) 2002 flags.keepalive = 1; 2003 else

Re: [squid-users] Squid stops due to signal 6

2010-05-12 Thread Henrik Nordström
ons 2010-05-12 klockan 12:32 +0530 skrev Sagar: May 06 09:37:29 (squid server hostname) (squid): ipcache_init: DNS name lookup tests failed. For some reason your host lost it's DNS name servers. Regards Henrik

Re: [squid-users] ident authentication and follow_x_forwarded_for

2010-05-12 Thread Henrik Nordström
tis 2010-05-11 klockan 16:35 -0500 skrev Ben Miller: Client -- Proxy:8080 (Dansguardian) -- 127.0.0.1:3128 (Squid running on Proxy) -- Edge firewall You can't do ident lookups in a proxy chain. This have to be done by the first proxy in the chain. This because to perform the ident lookup the

Re: [squid-users] squid non-accel default website

2010-05-12 Thread Henrik Nordström
tis 2010-05-11 klockan 17:04 +0200 skrev Nils Hügelmann: At the current state, it shows an invalid URL ... while trying to retrieve the URL: / error on direct access, which prevents using url rewriters(and deny_info too?!) so how to do this?... You can't. The reason is because Squid really

Re: [squid-users] squid 64bit compile

2010-05-12 Thread Henrik Nordström
On Tue, May 11, 2010 at 1:35 PM, senthilkumaar2021 senthilkumaar2...@gmail.com wrote: part of kernal panic message:this message was obtained in kernal 2.6.28.5 a0152a4b] bnx2_poll_work+0xea0/0xfb9 [bnx2] [81029713] enqueue_task+0x50/0x5b [8104d2ab]

[squid-users] Modifying MAX_URL

2010-05-12 Thread S H
I'm looking at using Squid 3.1.3 as a reverse proxy on FreeBSD 8 x64, but I need to allow URLs up to 16kb. Aside from upping MAX_URL to 16384 in defines.h, are there any other settings I need to modify? Any metrics to watch to ensure I'm not causing issues on my server? -SH

Re: [squid-users] Modifying MAX_URL

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 16:51:15 -0400, S H shdashb...@gmail.com wrote: I'm looking at using Squid 3.1.3 as a reverse proxy on FreeBSD 8 x64, but I need to allow URLs up to 16kb. Aside from upping MAX_URL to 16384 in defines.h, are there any other settings I need to modify? Any metrics to watch to

Re: [squid-users] File with zero size when using squid proxy

2010-05-12 Thread Nyamul Hassan
Every iteration of stable release has some fixes for known problems, and might also inadvertently introduce a new problem, which has to be fixed after a bug report is done. That is why it is suggested to use the latest version, so that the developers can work on the latest code.  As you can

Re: [squid-users] Report of visited sites? (No filterin g, just reporting)

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 11:24:34 +0200, lieven lieve...@gmail.com wrote: did you try sarg? It checks the squid logs and creates overviews of the visited sites per ip. Marcello Romani wrote: Charles Bray ha scritto: Hello, I am sure this must be a common question... please excuse. Does

Re: [squid-users] sslbump and cache_peer

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 22:17:43 +0200, Henrik Nordström hen...@henriknordstrom.net wrote: ons 2010-05-12 klockan 12:32 +0200 skrev Benjamin Fleckenstein: As soon as I activate sslbump, my proxy sends out the requests to the parent proxy in the form: GET https://www.destination.com Indeed.

Re: [squid-users] ACL in SQUID

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 02:53:02 -0700 (PDT), squidACL zakariai...@gmail.com wrote: Hi I have squid and squidGuard installed and working very well , but now I need to creat groups ( I use the Active Directory user) you know how can I create the ACL groups ? Many Thanks

Re: [squid-users] kernel support 2.6.33 for tproxy

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 21:50:55 +0200, Henrik Nordström hen...@henriknordstrom.net wrote: ons 2010-05-12 klockan 19:44 +0530 skrev senthilkumaar2021: Did any one tried the tproxy with latest kernel I have not tried 2.6.33 or running in bridge mode. but seems to work fine in routing mode in

Re: [squid-users] cache-control headers

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 08:45:27 -0700 (PDT), Jonathan Lunn j46l...@yahoo.com wrote: Hello squid-users, I'm successfully using Squid (3.0.STABLE25) with ESI enabled but, I can't seem to cache anything that has a cache-control: max-age less than 60 seconds. At present I'm having to set

Re: [squid-users] squid non-accel default website

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 23:02:08 +0200, Nils Hügelmann n...@huegelmann.info wrote: Hi Henrik, thanks for the answer, a fallback feature for direct requests would be great :-) regards nils Am 12.05.2010 22:38, schrieb Henrik Nordström: tis 2010-05-11 klockan 17:04 +0200 skrev Nils

Re: [squid-users] squid in load balanced wccpv2 configuration

2010-05-12 Thread Amos Jeffries
On Wed, 12 May 2010 07:03:59 -0700 (PDT), Jiffy jiffy1...@yahoo.com wrote: --- On Sun, 5/9/10, Amos Jeffries squ...@treenet.co.nz wrote: From: Amos Jeffries squ...@treenet.co.nz Subject: Re: [squid-users] squid in load balanced wccpv2 configuration To: squid-users@squid-cache.org Date: