Re: [squid-users] Squid %m parameter - what does it mean and how can I use it

2011-03-21 Thread Amos Jeffries
On 20/03/11 06:12, Mindaugas Žakšauskas wrote: Hi, I am trying to implement custom authenticator for Squid by having something like auth_param basic program my_authenticator.sh in the /etc/squid3/squid.conf file. It all works fine, but I want to make an improvement. What I want to do is to

Re: [squid-users] Re: squid as forward proxy for portal run on tomcat

2011-03-21 Thread Amos Jeffries
On 19/03/11 08:25, arielf wrote: Hi Amos, thanks for your response. I'll try to clarify. I want my browser (a client's browser) to always go through a squid proxy for accessing any website (target application). This is because I have an icap service working on the data. Thus to my understanding

Re: [squid-users] ipcCreate: fork: (12) Cannot allocate memory

2011-03-21 Thread Amos Jeffries
On 19/03/11 12:23, da...@lang.hm wrote: On Sat, 19 Mar 2011, Amos Jeffries wrote: On 19/03/11 02:43, Winfield Henry wrote: Hi, Squid has started to NOT come back up after log rotate. Here is snippett from cache.log. Machine has 1G ram and cache_mem is set to 500MB, Squid uses fork()

[squid-users] Re: squid as forward proxy for portal run on tomcat

2011-03-21 Thread arielf
Hi Amos, again thanks for your quick response. I've tried to take in what you wrote and try it out... The handing of CONNECT and ssl-bump are a bit broken when this mode change takes place internally to Squid. I have just days ago added changes that look like fixing CONNECT, these will be in

[squid-users] Squid reverse proxy with cache.

2011-03-21 Thread Morgan Storey
Hi Everyone, Setting up a reverse caching proxy with Squid on windows 2003 (unfortunately) in a lab for a proof of concept. Using 2.7.STABLE8. Never done this on windows so be kind. The reverse proxy works to any of the sites on the webserver, but if I turn off the webserver and attempt to get to

Re: [squid-users] Squid in HA.

2011-03-21 Thread Amos Jeffries
On 19/03/11 22:13, Jakob Curdes wrote: Am 18.3.2011 18:23, schrieb Edouard Zorrilla: My scenario is to use two Squids working as forwarding proxy : SquidA and SquidB. If SquidA fails users should be switched to the SquidB. If I decide to go with PAC files the workstation is the one that

Re: [squid-users] Squid reverse proxy with cache.

2011-03-21 Thread Amos Jeffries
On 21/03/11 21:44, Morgan Storey wrote: Hi Everyone, Setting up a reverse caching proxy with Squid on windows 2003 (unfortunately) in a lab for a proof of concept. Using 2.7.STABLE8. Never done this on windows so be kind. Should be identical to the non-windows variety from the Squid

Re: [squid-users] Re: squid as forward proxy for portal run on tomcat

2011-03-21 Thread Amos Jeffries
On 21/03/11 21:19, arielf wrote: Hi Amos, again thanks for your quick response. I've tried to take in what you wrote and try it out... The handing of CONNECT and ssl-bump are a bit broken when this mode change takes place internally to Squid. I have just days ago added changes that look like

[squid-users] Squid 3.1.x do not open certain sites

2011-03-21 Thread Francesco
Hello, some website, perhaps not compliant with W3C standard?, are not accessible by users with Squid proxy set into browser's connection. For example, one of this is: http://itinerari.mondodelgusto.it It waits for some seconds, and then the connections hangs... Is there a workaroung, bugfix?

[squid-users] Re: squid as forward proxy for portal run on tomcat

2011-03-21 Thread arielf
Hi Amos, thanks again for the quick response. I need some clarification on some of your answers The handing of CONNECT and ssl-bump are a bit broken when this mode change takes place internally to Squid. I have just days ago added changes that look like fixing CONNECT, these will be in

Fwd: Re: [squid-users] Time-based shift of bandwidth from delay pool

2011-03-21 Thread Dayo Adewunmi
On 03/19/2011 12:51 AM, Amos Jeffries wrote: On 19/03/11 07:37, Dayo Adewunmi wrote: Hi I've got a number of delay pools,one of which is only really used during daytime. Is there anyway for me to take the bandwidth allocated to that daytime pool and assign it to the other pools? Not

[squid-users] SSL certificate verify failed

2011-03-21 Thread Christopher Giblin
Hi, I am using Squid: 3.1.8 with ssl_bump configured and have a problem accessing a server over SSL/TLS. Background: I created a Certificate Authority (CA) with OpenSSL. The app server in question is configured with a certificate signed by my CA. I have verified my OpenSSL config and the app

Re: [squid-users] no-cache , no-store

2011-03-21 Thread N3O
Amos After modifying the php app now i receive: HTTP/1.1 200 OK Date: Mon, 21 Mar 2011 19:54:34 GMT Server: Apache/2.0.52 (Red Hat) Set-Cookie: PHPSESSID=82160b8ea5b353a66317bc8dae34f53d; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: max-age=1200 Pragma:

[squid-users] Can squid test whether a redirect target is up?

2011-03-21 Thread David Guertin
Hello, One of our remote web sites has a habit of going offline frequently. I am trying to configure squid to act as a proxy for this site so that if the site is down, the browser gets redirected to an alternate page instead of getting a generic server error page. I have configured squid

[squid-users] SquidGuard - Ldap doesnt filter users

2011-03-21 Thread Go Wow
Hi, I have a setup of squid3 with ntlm authen and I use squidGuard 1.5 to filter my web traffic. I know this is not a right place to post it, I guess squidguard dev team is busy enhancing the product. Looking for help from you guys. My squid3 is authenticating users properly and parsing all

[squid-users] PAC file testing.

2011-03-21 Thread Edouard Zorrilla
Do any one know how can I test a PAC file. ? It seems that Google PAC Tester Web Front End can do that from the web site : http://tuxjm.net/docs/Manual_de_Instalacion_de_Servidor_Proxy_Web_con_Ubuntu_Server_y_Squid/html-multiples/ch06s05.html#id390356 But I was not able to see the options

[squid-users] simple question about tproxy/squid

2011-03-21 Thread rpereyra
hi I'm squid newbie and have a question about a transparent squid/tproxy bridge. This bridging setup works with squid/tproxy ? ---/internet/---/router//squid-tproxy bridge/-/clients/ client have a mix of internal and externals. Or the squid/tproxy bridge must be in the router ?

Re: [squid-users] no-cache , no-store

2011-03-21 Thread Amos Jeffries
On Mon, 21 Mar 2011 14:57:26 -0400, N3O wrote: Amos After modifying the php app now i receive: HTTP/1.1 200 OK Date: Mon, 21 Mar 2011 19:54:34 GMT Server: Apache/2.0.52 (Red Hat) Set-Cookie: PHPSESSID=82160b8ea5b353a66317bc8dae34f53d; path=/ Expires: Thu, 19 Nov 1981 08:52:00

Re: [squid-users] simple question about tproxy/squid

2011-03-21 Thread Amos Jeffries
On Mon, 21 Mar 2011 15:56:19 -0400 (EDT), rpere...@lavabit.com wrote: hi I'm squid newbie and have a question about a transparent squid/tproxy bridge. This bridging setup works with squid/tproxy ? ---/internet/---/router//squid-tproxy bridge/-/clients/ client have a mix of

Re: [squid-users] Squid reverse proxy with cache.

2011-03-21 Thread Morgan Storey
Thanks Amos I tried your suggestions, still no good when the webserver is offline. I get only a single line in the cache.log 2011/03/22 10:28:50| TCP connection to myAccel (10.0.0.18:80) failed I have put the squid.conf in the email to make corrections easier (I have tried that offline mode on but

Re: [squid-users] Can squid test whether a redirect target is up?

2011-03-21 Thread Amos Jeffries
On Mon, 21 Mar 2011 15:17:38 -0400, David Guertin wrote: Hello, One of our remote web sites has a habit of going offline frequently. I am trying to configure squid to act as a proxy for this site so that if the site is down, the browser gets redirected to an alternate page instead of getting

Re: [squid-users] Re: squid as forward proxy for portal run on tomcat

2011-03-21 Thread Amos Jeffries
On Mon, 21 Mar 2011 08:58:58 -0700 (PDT), arielf wrote: Hi Amos, thanks again for the quick response. I need some clarification on some of your answers The handing of CONNECT and ssl-bump are a bit broken when this mode change takes place internally to Squid. I have just days ago added

Re: [squid-users] Squid 3.1.x do not open certain sites

2011-03-21 Thread Amos Jeffries
On Mon, 21 Mar 2011 13:42:47 +0100 (CET), Francesco wrote: Hello, some website, perhaps not compliant with W3C standard?, are not accessible by users with Squid proxy set into browser's connection. For example, one of this is: http://itinerari.mondodelgusto.it It waits for some seconds, and

Re: [squid-users] youtube safety mode

2011-03-21 Thread Jon R.
On Friday, March 18, 2011 15:48 AKDT, Amos Jeffries squ...@treenet.co.nz wrote: On 19/03/11 07:14, Test User wrote: I had been asked if this is possible and doing a search through the mailing list and google, I could only find a howto for SafeSquid. Is it possible to do this in

[squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread david
resending without the attachments since this doesn't appear to have gotten through to the list. if this gets through I'll reply with them. David Lang On Mon, 21 Mar 2011, da...@lang.hm wrote: Date: Mon, 21 Mar 2011 16:41:19 -0700 (PDT) From: da...@lang.hm To: squid-users@squid-cache.org

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread david
On Mon, 21 Mar 2011, da...@lang.hm wrote: resending without the attachments since this doesn't appear to have gotten through to the list. if this gets through I'll reply with them. ok, apparently the list doesn't like attachments here is workers 1 (starts and works) Mar 21 23:14:11

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread david
On Mon, 21 Mar 2011, da...@lang.hm wrote: On Mon, 21 Mar 2011, da...@lang.hm wrote: resending without the attachments since this doesn't appear to have gotten through to the list. if this gets through I'll reply with them. ok, apparently the list doesn't like attachments it also has a

Re: [squid-users] Squid reverse proxy with cache.

2011-03-21 Thread Amos Jeffries
On Tue, 22 Mar 2011 10:37:57 +1100, Morgan Storey wrote: Thanks Amos I tried your suggestions, still no good when the webserver is offline. I get only a single line in the cache.log 2011/03/22 10:28:50| TCP connection to myAccel (10.0.0.18:80) failed I have put the squid.conf in the email to

Re: [squid-users] youtube safety mode

2011-03-21 Thread Amos Jeffries
On Mon, 21 Mar 2011 16:06:31 -0800, Jon R. wrote: On Friday, March 18, 2011 15:48 AKDT, Amos Jeffries wrote: On 19/03/11 07:14, Test User wrote: I had been asked if this is possible and doing a search through the mailing list and google, I could only find a howto for SafeSquid. Is it

Re: [squid-users] Squid reverse proxy with cache.

2011-03-21 Thread Morgan Storey
so if I load www.site.com on the squid server with a proxy set in internet explorer of 127.0.0.1:80 I can get the site and browse around, if I down the web server after and try the site after a long time I get an error Connection to myAccel Failed . I can't hit these test servers outside the lab

[squid-users] FW: Configuring SQUID in Windows to authenticate with Active Directory

2011-03-21 Thread Liyanage, Lakshman
Hi All, Just hoping thise Windows guys will help me with my query below - where/how would I find squid_kerb_auth helper for 2.7? Thanks Lakshman From: Liyanage, Lakshman Sent: Wednesday, 16 March 2011 10:08 AM To: squid-users@squid-cache.org

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread david
one thing that I've found is that even with --disable-ipv6 squid will still use IPv6 on a system that has it configured (next I'll try and see if that's what's going wrong on the systems that don't have it configured, but those systems don't have strace on them, so I'll have to build a

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread david
On Mon, 21 Mar 2011, da...@lang.hm wrote: one thing that I've found is that even with --disable-ipv6 squid will still use IPv6 on a system that has it configured (next I'll try and see if that's what's going wrong on the systems that don't have it configured, but those systems don't have

[squid-users] squid 3.2.0.5 smp scaling issues

2011-03-21 Thread david
test setup box A running apache and ab test against local IP address 13000 requests/sec box B running squid, 8 2.3 GHz Opteron cores with 16G ram non acl/cache-peer related lines in the config are (including typos from me manually entering this) http_port 8000 icp_port 0 visible_hostname

[squid-users] what replaces -D

2011-03-21 Thread david
when starting squid 3.1 and 3.2 it says that -D is depriciated and should not be used. but I don't find anything in the documentation that says what to do to get squid to start if the name servers are not available yet? David Lang

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread Amos Jeffries
On Mon, 21 Mar 2011 18:34:41 -0700 (PDT), da...@lang.hm wrote: one thing that I've found is that even with --disable-ipv6 squid will still use IPv6 on a system that has it configured (next I'll try and see if that's what's going wrong on the systems that don't have it configured, but those

Re: [squid-users] what replaces -D

2011-03-21 Thread Amos Jeffries
On Mon, 21 Mar 2011 19:27:58 -0700 (PDT), da...@lang.hm wrote: when starting squid 3.1 and 3.2 it says that -D is depriciated and should not be used. but I don't find anything in the documentation that says what to do to get squid to start if the name servers are not available yet? Nothing

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread david
On Tue, 22 Mar 2011, Amos Jeffries wrote: On Mon, 21 Mar 2011 18:34:41 -0700 (PDT), da...@lang.hm wrote: one thing that I've found is that even with --disable-ipv6 squid will still use IPv6 on a system that has it configured (next I'll try and see if that's what's going wrong on the systems

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread Amos Jeffries
On Mon, 21 Mar 2011 17:10:23 -0700 (PDT), da...@lang.hm wrote: On Mon, 21 Mar 2011, da...@lang.hm wrote: resending without the attachments since this doesn't appear to have gotten through to the list. if this gets through I'll reply with them. ok, apparently the list doesn't like attachments

Re: [squid-users] youtube safety mode

2011-03-21 Thread Jon
On 03/21/2011 04:31 PM, Amos Jeffries wrote: On Mon, 21 Mar 2011 16:06:31 -0800, Jon R. wrote: On Friday, March 18, 2011 15:48 AKDT, Amos Jeffries wrote: On 19/03/11 07:14, Test User wrote: I had been asked if this is possible and doing a search through the mailing list and google, I could

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread Amos Jeffries
On 22/03/11 14:49, da...@lang.hm wrote: On Mon, 21 Mar 2011, da...@lang.hm wrote: one thing that I've found is that even with --disable-ipv6 squid will still use IPv6 on a system that has it configured (next I'll try and see if that's what's going wrong on the systems that don't have it

Re: [squid-users] youtube safety mode

2011-03-21 Thread Amos Jeffries
On 22/03/11 16:16, Jon wrote: On 03/21/2011 04:31 PM, Amos Jeffries wrote: On Mon, 21 Mar 2011 16:06:31 -0800, Jon R. wrote: On Friday, March 18, 2011 15:48 AKDT, Amos Jeffries wrote: On 19/03/11 07:14, Test User wrote: I had been asked if this is possible and doing a search through the

Re: [squid-users] youtube safety mode

2011-03-21 Thread Jon
On 03/21/2011 08:16 PM, Amos Jeffries wrote: On 22/03/11 16:16, Jon wrote: On 03/21/2011 04:31 PM, Amos Jeffries wrote: On Mon, 21 Mar 2011 16:06:31 -0800, Jon R. wrote: On Friday, March 18, 2011 15:48 AKDT, Amos Jeffries wrote: On 19/03/11 07:14, Test User wrote: I had been asked if this

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread david
On Tue, 22 Mar 2011, Amos Jeffries wrote: On Mon, 21 Mar 2011 17:10:23 -0700 (PDT), da...@lang.hm wrote: On Mon, 21 Mar 2011, da...@lang.hm wrote: resending without the attachments since this doesn't appear to have gotten through to the list. if this gets through I'll reply with them. ok,

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread Amos Jeffries
On 22/03/11 18:22, da...@lang.hm wrote: On Tue, 22 Mar 2011, Amos Jeffries wrote: On Mon, 21 Mar 2011 17:10:23 -0700 (PDT), da...@lang.hm wrote: On Mon, 21 Mar 2011, da...@lang.hm wrote: resending without the attachments since this doesn't appear to have gotten through to the list. if this

Re: [squid-users] Re: squid 3.2.0.5 even slower than squid 3.1 and doesn't work with workers 1

2011-03-21 Thread david
On Tue, 22 Mar 2011, Amos Jeffries wrote: snip Mar 21 23:14:11 gromit1-p squid[12082]: Loaded Icons. Mar 21 23:14:11 gromit1-p squid[12082]: HTCP Disabled. Mar 21 23:14:11 gromit1-p squid[12082]: Configuring Parent 192.168.106.27/8000/0 Mar 21 23:14:11 gromit1-p squid[12082]: Configuring