[squid-users] Squid + Squidguard ACL Problem

2011-12-05 Thread Claudio Prono
Hello all, Today, i have discovered a limitation into SquidGuard with the userlists. I make you an example: src user1 { userlist /etc/user1.txt } src user2 { userlist /etc/user2.txt } dest user1web { domainlist user1web/domains expressionlist user1web/expressions log user1web }

Re: [squid-users] Squid losing connectivity for 30 seconds

2011-12-05 Thread Amos Jeffries
On 5/12/2011 7:14 p.m., Elie Merhej wrote: Hi, I am currently facing a problem that I wasn't able to find a solution for in the mailing list or on the internet, My squid is dying for 30 seconds every one hour at the same exact time, squid process will still be running, I lose my wccp

Re: [squid-users] Make Squid in interception mode completely

2011-12-05 Thread Amos Jeffries
On 5/12/2011 7:34 p.m., Nguyen Hai Nam wrote: Hi, As last time I had a squid box working in interception mode as well: traffic was redirected from default gateway to squid box, then IP-filter will NAT to intercepting squid. Look like this: INTERNET Router | | SwitchDefault

Re: [squid-users] Squid + Squidguard ACL Problem

2011-12-05 Thread jeffrey j donovan
On Dec 5, 2011, at 3:54 AM, Claudio Prono wrote: Hello all, Today, i have discovered a limitation into SquidGuard with the userlists. I make you an example: src user1 { userlist /etc/user1.txt } src user2 { userlist /etc/user2.txt } dest user1web { domainlist

[squid-users] Re: not getting persistent connections to an ssl backend

2011-12-05 Thread rob yates
Sorry for the bump, could someone let me know if this is supported? If it's not supported I'll need to look at something other than squid and am far enough along that I would rather not, Thanks, Rob On Fri, Dec 2, 2011 at 11:48 AM, rob yates robertya...@gmail.com wrote: Hello, we are trying

Re: [squid-users] Make Squid in interception mode completely

2011-12-05 Thread Nguyen Hai Nam
Hi Amos, You're right, switch is not really true. But I still can't find the way on Solaris-like system like /proc/sys/net/bridge On Mon, Dec 5, 2011 at 7:25 PM, Amos Jeffries squ...@treenet.co.nz wrote: Like a switch? or or did you really mean like a bridge? * switch ... no solution.

[squid-users] limiting connection not working 3.1.4

2011-12-05 Thread J. Webster
I have squid 3.1.4 but using this conf, the rate limiting to 1Mbps does not seem to work. What can I change in the conf / delay parameters? auth_param basic realm Myname proxy server auth_param basic credentialsttl 2 hours auth_param basic program /usr/lib/squid/ncsa_auth

Re: AW: [squid-users] block TOR

2011-12-05 Thread Carlos Manuel Trepeu Pupo
I want to block the Tor traffic because my clients use it to jump my rules about the blocked site. In my firewall it's a little more difficult refresh the Node that I want to block. Jenny told about he/she can't establish a connection to the TOR net across squid, but I can't see the problem,

[squid-users] about rewrite an URL

2011-12-05 Thread Carlos Manuel Trepeu Pupo
I have in my FTP a mirror of the Bases of Kaspersky (all versions), I use KLUpdater to make that (from the Kaspersky site), now I want to redirect everyone to search for the domain of Kaspersky's update to my FTP, how can I do that ? That's a lot

Re: [squid-users] limiting connection not working 3.1.4

2011-12-05 Thread Amos Jeffries
On Mon, 5 Dec 2011 14:18:51 +, J. Webster wrote: I have squid 3.1.4 but using this conf, the rate limiting to 1Mbps does not seem to work. Please consider an upgrade to 3.1.18. There are a lot of important bugs resolved since 3.1.4. What can I change in the conf / delay parameters?

Re: [squid-users] How to set the IP of the real originator in HTTP requests (instead of Squid's IP)?

2011-12-05 Thread Amos Jeffries
On Mon, 5 Dec 2011 17:31:45 +0100, Leonardo wrote: On Thu, Dec 1, 2011 at 1:18 PM, Amos Jeffries wrote: Squid supports transparent proxy (not the NAT interception people call the same). http://wiki.squid-cache.org/Features/Tproxy4 My Squid is already compiled to function as transparent:

Re: [squid-users] Re: not getting persistent connections to an ssl backend

2011-12-05 Thread Amos Jeffries
On Mon, 5 Dec 2011 09:14:40 -0500, rob yates wrote: Sorry for the bump, could someone let me know if this is supported? If it's not supported I'll need to look at something other than squid and am far enough along that I would rather not, It is supported. Ensure that you have

Re: [squid-users] about rewrite an URL

2011-12-05 Thread Amos Jeffries
On Mon, 5 Dec 2011 15:22:38 -0500, Carlos Manuel Trepeu Pupo wrote: I have in my FTP a mirror of the Bases of Kaspersky (all versions), I use KLUpdater to make that (from the Kaspersky site), now I want to redirect everyone to search for the domain of Kaspersky's update to my FTP, how can I do

[squid-users] Problem compiling Squid 3.1.18 on Ubuntu 10.04 LTS - store.cc

2011-12-05 Thread Paul Freeman
Hi, I have come across a problem compiling Squid 3.1.18 on Ubuntu 10.04 LTS (gcc 4.4.3, latest updates from Ubuntu). The problem occurs in store.cc and has been reported in an earlier post (3 Dec 2011) related to compiling 3.1.17. Another user has also reported this issue on the squid-dev

Re: [squid-users] Problem compiling Squid 3.1.18 on Ubuntu 10.04 LTS - store.cc

2011-12-05 Thread Amos Jeffries
On Tue, 6 Dec 2011 03:01:40 +, Paul Freeman wrote: Hi, I have come across a problem compiling Squid 3.1.18 on Ubuntu 10.04 LTS (gcc 4.4.3, latest updates from Ubuntu). The problem occurs in store.cc and has been reported in an earlier post (3 Dec 2011) related to compiling 3.1.17.

RE: [squid-users] Problem compiling Squid 3.1.18 on Ubuntu 10.04 LTS - store.cc

2011-12-05 Thread Paul Freeman
Amos Thank you for the very prompt reply. Unfortunately I need ICAP so I will need to wait until the problem is resolved although I guess in the interim I can do as you mention and simply comment out this line and forgo the debugging output. Good luck trying to find the root cause. Regards

Re: [squid-users] Re: not getting persistent connections to an ssl backend

2011-12-05 Thread Rob Yates
Amos, Many thanks, I upgraded to 3.1.18 and that seems to have done the trick. Weird as no other parameters were changed. Not sure why 2.6 ( the default for the version of rhel that we have) did not work but no need to investigate now, Thanks again, Rob On Dec 5, 2011, at 9:42 PM, Amos

[squid-users] Cache has stopped using memory?

2011-12-05 Thread Sean SPALDING
Hi all, I recently noticed one of my squid servers reverse its normal usage stats for: Request Memory Hit Ratios: 5min: 0.6%, 60min: 0.5% Request Disk Hit Ratios:5min: 41.7%, 60min: 48.3% Normal usage looks more like: Request Memory Hit Ratios: 5min:

Re: [squid-users] Make Squid in interception mode completely

2011-12-05 Thread Edmonds Namasenda
Hai, Seems your network set-up is what might be ruining your connection expectations or the default gateway needs a rule (possibly using a firewall) to direct all HTTP traffic to the squid box rather than to the internet. Otherwise, think of the set-up below (with the Squid box the same as the

[squid-users] compile error on Squid 3.1.18

2011-12-05 Thread kzl
There's error thrown while compiling Squid 3.1.18 in Solaris Sparc which never experience in earlier version like 3.1.17, 3.1.16, 3.0.15 Anyone having any idea what's the problem?  Making all in compat /bin/bash ../libtool --tag=CXX    --mode=link g++ -Wall -Wpointer-arith -Wwrite-strings

[squid-users] increasing file descriptors in Ubuntu 10.04/2.7.STABLE9

2011-12-05 Thread Sean Boran
Hi, On squid proxy using the stock Ubuntu squid packages, the file descriptors need to be increased. I found two suggestions: http://chrischan.blog-city.com/ubuntu_804_lts_increasing_squid_file_descriptors.htm but ulimit -n was still 1024 after rebooting. (and it also talks about recompiling