Re: [squid-users] Using squidclient

2010-05-21 Thread Amos Jeffries
Ryan McCain wrote: I'm trying to use squidclient to get some information on the performance of one of our squid boxes. The version is 2.7x. See below.. -- dss-cs99lv02-a:/usr/local/squid/bin # nmap localhost Starting Nmap 4.00 ( http://www.insecure.org/nmap/ ) at 2010-05-21 14:16 CDT Intere

Re: [squid-users] Squid 3.1 rejecting connections after few thousands requests

2010-05-21 Thread Amos Jeffries
alter...@gmail.com wrote: Hi, I've run into problems after upgrading 3.0.STABLE19 (installed from packages) to squid 3.1 I'm running amd64 8.0-RELEASE FreeBSD, with squid as accelerated proxy. 3.0.STABLE19 runs almost flawlessly. I'm getting 'Select loop Error' every second: 2010/05/21 14:37:3

Re: [squid-users] 71 Protocol Error when using SSL

2010-05-21 Thread Amos Jeffries
Edoardo COSTA SANSEVERINO wrote: Hi all, I had a look in the archives and the only similar problem I found was never answered (http://www.squid-cache.org/mail-archive/squid-users/200801/0152.html) so I hope someone can help me. I posted this request on linuxquestions.org but got no reply s

[squid-users] Re: Squid3 Reverse Proxy based on url path

2010-05-21 Thread rainolf
m...i understand your point of view... so...what do you suggest to me in order to have a better configuration? webportal.domain.com is the dns with NAT that points to reverse proxy and should contain a small html page where i will have the links to the other servers... webportal.domain.com

Re: [squid-users] Content-Type log erro

2010-05-21 Thread Henrik Nordström
fre 2010-05-21 klockan 17:39 -0300 skrev Romulo Boschetti: > Hi Henrik, > > Yes, I talking about responses denied by http_reply_access. Ok. Yes, it would be useful to log the received content-type there. Or in fact to be able to log anything about the incoming response. Unfortunately not suppo

Re: [squid-users] Re: Squid3 Reverse Proxy based on url path

2010-05-21 Thread Henrik Nordström
fre 2010-05-21 klockan 13:24 -0700 skrev rainolf: > hrm is in another server and it is responding ad xxx.xxx.xxx.xxx/dbghrm > work ok > ftp is in another server again and its responding at xxx.xxx.xxx.xxx/webftp > work ok My concern is not where the servers are, but which URLs should be sent to

Re: [squid-users] Content-Type log erro

2010-05-21 Thread Romulo Boschetti
Hi Henrik, Yes, I talking about responses denied by http_reply_access. But unfortunately I can't use the following configuration , Because it did not work too : acl videos rep_header Content-Type -i "/opt/hsc/webcontrol/squid/etc/str.txt" http_reply_access deny videos logformat mime l-s-8

[squid-users] Re: Squid3 Reverse Proxy based on url path

2010-05-21 Thread rainolf
webportal.domain.com should be the apache in the same server as squid reverse.it should answer to localhost.. hrm is in another server and it is responding ad xxx.xxx.xxx.xxx/dbghrm work ok ftp is in another server again and its responding at xxx.xxx.xxx.xxx/webftp work ok all works good ex

Re: [squid-users] Content-Type log erro

2010-05-21 Thread Henrik Nordström
fre 2010-05-21 klockan 15:15 -0300 skrev Romulo Boschetti: > The Squid to Deny one specified mime-type it need know who is this mime-type. > Correct ? Are we talking about responses denied by http_reply_access? Regards Henrik

Re: [squid-users] Re: Squid3 Reverse Proxy based on url path

2010-05-21 Thread Henrik Nordström
fre 2010-05-21 klockan 04:58 -0700 skrev rainolf: > cache_peer xxx.xxx.xxx.xxx parent 8080 0 no-query originserver name=domain4 > cache_peer_access domain4 allow portal > cache_peer_access domain4 deny all > > cache_peer xxx.xxx.xxx.xxx parent 80 0 no-query originserver name=dbghrm > cache_peer_a

Re: [squid-users] Re: Advices for a squid cluster with kerberos auth

2010-05-21 Thread Henrik Nordström
fre 2010-05-21 klockan 11:31 +0100 skrev Nick Cairncross: > Has anyone had success using Service Location records in DNS for different > sites? I would be interested to hear about it.. Do you mean SRV records? HTTP is not yet using an SRV profile, and I don't see it likely that SRV support will

[squid-users] Using squidclient

2010-05-21 Thread Ryan McCain
I'm trying to use squidclient to get some information on the performance of one of our squid boxes. The version is 2.7x. See below.. -- dss-cs99lv02-a:/usr/local/squid/bin # nmap localhost Starting Nmap 4.00 ( http://www.insecure.org/nmap/ ) at 2010-05-21 14:16 CDT Interesting ports on localh

Re: [squid-users] Content-Type log erro

2010-05-21 Thread Romulo Boschetti
Hi Amos, First thanks for you help. The Squid to Deny one specified mime-type it need know who is this mime-type. Correct ? This is my Cache Log , where the Squid detect the Mime-Type of request web page: 2010/05/21 09:29:50| aclMatchRegex: looking for '^application/x-shockwave-flash$'

[squid-users] 71 Protocol Error when using SSL

2010-05-21 Thread Edoardo COSTA SANSEVERINO
Hi all, I had a look in the archives and the only similar problem I found was never answered (http://www.squid-cache.org/mail-archive/squid-users/200801/0152.html) so I hope someone can help me. I posted this request on linuxquestions.org but got no reply so I thought I'd be better off ask

Re: [squid-users] 2.7 upstream parent (cache_peer) connection reset. Child how to handle?

2010-05-21 Thread James Tan
Hi Amos, the PoC is for a project involving malware inspection, a personal project. I tried to chain 2 Squids as part of solution. The AV perform the check on the wire before actually allowing Parent Squid to get hold of it. I.e. Client --> ... ... -> Parent Squid --> AV (inspects HTTP, it it is

[squid-users] Squid 3.1 rejecting connections after few thousands requests

2010-05-21 Thread alter...@gmail.com
Hi, I've run into problems after upgrading 3.0.STABLE19 (installed from packages) to squid 3.1 I'm running amd64 8.0-RELEASE FreeBSD, with squid as accelerated proxy. 3.0.STABLE19 runs almost flawlessly. I'm getting 'Select loop Error' every second: 2010/05/21 14:37:34| Select loop Error. Retry

Re: [squid-users] refresh patterns for Caching Media

2010-05-21 Thread Amos Jeffries
Jumping Mouse wrote: From: kafr...@hotmail.com To: squid-users@squid-cache.org Date: Wed, 19 May 2010 18:35:44 +0200 Subject: [squid-users] refresh patterns for Caching Media Hello eveyone, We are using Squid 2.7 for caching educational media files.

Re: [squid-users] Running Multiple instances and reporting confusion.

2010-05-21 Thread Amos Jeffries
GIGO . wrote: Hi all, I am running multiple instances of squid on the same machine. One instance is taking the clients request and forwarding to its parent peer at 127.0.0.1. All is going well. However there is a confusion related to reporting through sarg. To capture the client activity sarge i

[squid-users] Re: [squid users] parent proxy authentication

2010-05-21 Thread jyothi
I am still facing the problem, can anybody help me out? -- Forwarded Message --- From: "jyothi" To: Amos Jeffries Sent: Sun, 16 May 2010 20:25:57 +0630 Subject: Re: [squid users] parent proxy authentication On Mon, 17 May 2010 01:23:55 +1200, Amos Jeffries wrote > jyothi wrote:

Re: [squid-users] Cannot connect to squid port intermittently

2010-05-21 Thread Amos Jeffries
Tejpal Amin wrote: Hi , Disabling the iptables has had no effect , the problem of slow performance still exists. Can anybody help me on this. I am not able to figure out why squid is not able to accept connections. It still times out when I try to telnet to squid port 3218 from the squid box it

Re: [squid-users] very slow browsing and page is not displaed properly

2010-05-21 Thread Amos Jeffries
abdul sami wrote: Thank you heaps for reply. I have revisited the squid.conf and have make necessary changes. I would try to revise the RAID too. About size of the Cache, pls let me know how much size could be the best for performance. Unknown. A few days to a week worth of your networks

[squid-users] Re: Squid3 Reverse Proxy based on url path

2010-05-21 Thread rainolf
Sorrybut its not completelly clear for me how can be modified my config in order to have a working situation? sorry to boring ubut i'm newbie... -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid3-Reverse-Proxy-based-on-url-path-tp2197692p22

Re: [squid-users] Content-Type log erro

2010-05-21 Thread Amos Jeffries
Romulo Boschetti wrote: Hi Amos, I removing the "logformat" line from my config file acl video rep_mime_type -i ^video/*$ http_reply_access deny video access_log /opt/hsc/webcontrol/log/access.log But my problem persist. When I access one youtube video the Mime-type in the log is incorrect

Re: [squid-users] Re: Squid3 Reverse Proxy based on url path

2010-05-21 Thread Amos Jeffries
rainolf wrote: Hi, I've changed my configuration and now seem to work like i wantI eliminate the fake url and replaced with right dns records This is my configuration: http_port 80 vhost vport=90 protocol=http defaultsite=webportal.domain.com acl http proto http acl port80 port 80 acl

Re: [squid-users] Content-Type log erro

2010-05-21 Thread Romulo Boschetti
Hi Amos, I removing the "logformat" line from my config file acl video rep_mime_type -i ^video/*$ http_reply_access deny video access_log /opt/hsc/webcontrol/log/access.log But my problem persist. When I access one youtube video the Mime-type in the log is incorrect. This only happens when

Re: [squid-users] Re: Advices for a squid cluster with kerberos auth

2010-05-21 Thread Emmanuel Lesouef
Le Fri, 21 May 2010 11:31:39 +0100, Nick Cairncross a écrit : > Has anyone had success using Service Location records in DNS for > different sites? I would be interested to hear about it.. Service location ? DNS discovery with _tcp zones ? What do you try to configure ? -- Emmanuel Lesouef

[squid-users] Re: Squid3 Reverse Proxy based on url path

2010-05-21 Thread rainolf
Hi, I've changed my configuration and now seem to work like i wantI eliminate the fake url and replaced with right dns records This is my configuration: http_port 80 vhost vport=90 protocol=http defaultsite=webportal.domain.com acl http proto http acl port80 port 80 acl domain2_com dstd

RE: [squid-users] Memory Considerations when you are running multiple instances of squid on the same server.

2010-05-21 Thread GIGO .
Thank you for explaining well regards, Bilal > From: hen...@henriknordstrom.net > To: gi...@msn.com > CC: squid-users@squid-cache.org > Date: Fri, 21 May 2010 09:53:06 +0200 > Subject: Re: [squid-users] Memory Considerations when you are running > mult

Re: [squid-users] Re: Advices for a squid cluster with kerberos auth

2010-05-21 Thread Nick Cairncross
Just to add: Thanks for this. I've successfully got RR working with Kerberos as you said. It's something I've been interested in as well. My test setup is: SQUID1.domain.com 10.0.0.1 SQUID2.domain.com 10.0.0.2 RR DNS record SQUIDS.domain.com for each SQUIDx IP Computer account in UnixPrinci

RE: [squid-users] agent.log and https clients

2010-05-21 Thread Steve
Henrik Thanks for that. Explains what I am seeing for this software. Given my browser acls which only allow specific known user-agents then anything that doesn't come into squid with a User-Agent header is going to get the forbidden error. As this particular software uses one particular site th

Re: [squid-users] Cannot connect to squid port intermittently

2010-05-21 Thread Tejpal Amin
Hi , Disabling the iptables has had no effect , the problem of slow performance still exists. Can anybody help me on this. I am not able to figure out why squid is not able to accept connections. It still times out when I try to telnet to squid port 3218 from the squid box itself. Regards Tejpal

Re: [squid-users] Re: Advices for a squid cluster with kerberos auth

2010-05-21 Thread Emmanuel Lesouef
Le Thu, 20 May 2010 21:51:08 +0100, "Markus Moeller" a écrit : > It will work with the right setup (e.g. you have to copy the Kerberos > keytab to all machines and use the -s HTTP/ or -s > GSS_C_NO_NAME option with squid_kerb_auth). > > Regards > Markus > Understood. Thanks Markus. I didn't kn

Re: [squid-users] Memory Considerations when you are running multiple instances of squid on the same server.

2010-05-21 Thread Henrik Nordström
fre 2010-05-21 klockan 06:38 + skrev GIGO .: > can it be said as a generalization that one can allocate/fix 1/4 of > physical ram for cache mem objects. Will it holds true even when you > are running multiple instances??? I would not generalize a rule like that. It is a reasonable recommenda

Re: [squid-users] very slow browsing and page is not displaed properly

2010-05-21 Thread Amos Jeffries
goody goody wrote: Hi, Squid GURUs, Your response is required, please. Regards, .Goody. - Original Message From: goody goody To: squid-users@squid-cache.org Sent: Fri, May 21, 2010 1:52:23 AM Subject: Re: [squid-users] very slow browsing and page is not displaed properly Dear Membe

Re: [squid-users] agent.log and https clients

2010-05-21 Thread Henrik Nordström
fre 2010-05-21 klockan 00:20 +0100 skrev Steve: > I have a quick question about agent.log. Does the user agent get logged for > https clients? Most agents do not indicate who they are in CONNECT requests. Regards Henrik

Re: [squid-users] Deny IPs

2010-05-21 Thread Matus UHLAR - fantomas
On 17.05.10 21:43, kranthi wrote: > I want squid to deny requests from certain IPs and forward the rest. > The list of IPs will be saved in an external file (or a MySql > database), which will be updated every minute. (and my squid server > can't be restarted every minute) ny ideas how this can be