Re: [squid-users] Squid Sibling Proxy-Only Still Caching Locally

2012-01-19 Thread Amos Jeffries
On 20/01/2012 10:41 a.m., darren.trzy...@thomsonreuters.com wrote: I am configuring squid caches to be siblings of each other and have gotten them to correctly communicate with each other from an ICP perspective and have one of the caches (B) pull content from another cache (A) that already had

Re: [squid-users] clientTryParseRequest: FD 12 Invalid Request | TCP_DENIED/400 2079 GET NONE:// - NONE/- text/html | GET error:invalid-request

2012-01-19 Thread Amos Jeffries
On 20/01/2012 6:02 a.m., Sam Beechey wrote: Hi All, I have been configuring a new Squid server today. The original configuration (without TProxy) worked fine.. DNAT from port 80 to 3128 at squid server.. The source server is where end-users establish a connection, The Squid server is (10.10.1

Re: [squid-users] Running squid out of the router/gateway

2012-01-19 Thread Amos Jeffries
On 20/01/2012 1:11 p.m., Tim Fletcher wrote: On Thu, 2012-01-19 at 14:37 -0300, Sebastian muniz wrote: Reading at squid site, looks like NATting outgoing connections to a squid running on an other box is not a good idea. Questions: What is the suggested way to implement this scenario? How can I

Re: [squid-users] Running squid out of the router/gateway

2012-01-19 Thread Tim Fletcher
On Thu, 2012-01-19 at 14:37 -0300, Sebastian muniz wrote: > Reading at squid site, looks like NATting outgoing connections to a > squid running on an other box is not a good idea. > Questions: > What is the suggested way to implement this scenario? > How can I get rid of the loop? I use this scri

[squid-users] Squid Sibling Proxy-Only Still Caching Locally

2012-01-19 Thread darren.trzynka
I am configuring squid caches to be siblings of each other and have gotten them to correctly communicate with each other from an ICP perspective and have one of the caches (B) pull content from another cache (A) that already had the object cached, but it seems when it pulls this object that it e

[squid-users] ufdbGuard v1.28 is out - check out the URL filter for Squid

2012-01-19 Thread Marcus Kool
ufdbGuard version 1.28 has been released on January 19, 2012. ufdbGuard is a URL filter for Squid with the following features: - filter web access based on rules for users, times, website category - works with free and commercial URL databases - can enforce SafeSearch for all major search engines

Re: [squid-users] Running squid out of the router/gateway

2012-01-19 Thread Giles Coochey
On 2012-01-19 17:37, Sebastian muniz wrote: Reading at squid site, looks like NATting outgoing connections to a squid running on an other box is not a good idea. Questions: What is the suggested way to implement this scenario? How can I get rid of the loop? THanks in advance. You might look

[squid-users] Running squid out of the router/gateway

2012-01-19 Thread Sebastian muniz
Hello * I work at a small ISP. We give non routeable IPs 172.16/12 IPs to most of our customers, and some of them buys publics IPs from us. We have a squid box in the public segment of our network Until now we were NATing at mikrotiks outgoing tcp/80 connections to the squid public ip ( 200.45.94.2

[squid-users] clientTryParseRequest: FD 12 Invalid Request | TCP_DENIED/400 2079 GET NONE:// - NONE/- text/html | GET error:invalid-request

2012-01-19 Thread Sam Beechey
Hi All, I have been configuring a new Squid server today. The original configuration (without TProxy) worked fine.. DNAT from port 80 to 3128 at squid server.. The source server is where end-users establish a connection, The Squid server is (10.10.10.1) and The Client in question is (10.10.10.1

RE: [squid-users] Problems with Active Sync over squid with basic auth. Any successful config for Active Sync and Outlook Anywhere on Exchange 2010 replacing an ISA server?

2012-01-19 Thread Isenberg, Holger
With using 3.1.18 now and login=PASS instead and added connection-auth=on, both in cache_peer, Active Sync can be used now. cache_peer 192.168.100.24 parent 443 0 \ ssl sslflags=DONT_VERIFY_PEER \ sslcert=/etc/ssl/certs/webmail.domain.com.pem sslkey=/etc/ssl/certs/webmail.domain.

[squid-users] Squid workers bug

2012-01-19 Thread Jean-Philippe Menil
Hi, When using squid 3.2.0.14, configured with 4 workers, i can see segfault from one of the workers (don't know why currently). squid3[6832]: segfault at 7fff4b271ff8 ip 005bb7e1 sp 7fff4b272000 error 6 in squid3[40+3c8000] Logs are plenty of : 2012/01/19 06:26:07 kid3| varyE

Re: [squid-users] Problems with Active Sync over squid with basic auth. Any successful config for Active Sync and Outlook Anywhere on Exchange 2010 replacing an ISA server?

2012-01-19 Thread Amos Jeffries
On 19/01/2012 10:13 p.m., Isenberg, Holger wrote: Is anyone using squid successful as reverse proxy for Outlook Anywhere (RPC over https) and Active Sync for an Exchange 2010? Trying to use squid 3.2.0.13 to replace an ISA server forwarding RPC over https for Outlook Anywhere and Active Sync f

[squid-users] Problems with Active Sync over squid with basic auth. Any successful config for Active Sync and Outlook Anywhere on Exchange 2010 replacing an ISA server?

2012-01-19 Thread Isenberg, Holger
Is anyone using squid successful as reverse proxy for Outlook Anywhere (RPC over https) and Active Sync for an Exchange 2010? Trying to use squid 3.2.0.13 to replace an ISA server forwarding RPC over https for Outlook Anywhere and Active Sync for Outlook mobile devices like Android and iPhone I