Re: [squid-users] 100% CPU

2012-08-10 Thread Amos Jeffries
On 11/08/2012 3:05 a.m., Hank Disuko wrote: Hi folks, I'm using: Squid Cache version 3.0.STABLE13 for i686-suse-linux This cache has been running well for at least a couple years, or more. As of yesterday, my squid process started using 100% CPU and users on the proxy are experiencing extre

Re: [squid-users] squidguard not blocking

2012-08-10 Thread Go Wow
Is squidguard log config in squidguard.conf file? If not config the log and watch the log whether the traffic is hitting SG or not. I feel there some config issue in SG. Let us see your config files and client IP or username. -Sent via Blackberry -Original Message- From: J Webster Dat

Re: [squid-users] squidguard not blocking

2012-08-10 Thread J Webster
it is, I get the server IP address when browsing and log is full of HIT MISS lines etc On 10 Aug 2012, at 22:30, "Go Wow" wrote: > Check access.log and verify whether the traffic is passing through squid from > the client machine. > > -Sent via Blackberry > > -Original Message- > Fro

Re: [squid-users] squidguard not blocking

2012-08-10 Thread Go Wow
Check access.log and verify whether the traffic is passing through squid from the client machine. -Sent via Blackberry -Original Message- From: J Webster Date: Fri, 10 Aug 2012 20:34:31 To: Subject: [squid-users] squidguard not blocking squidguard correctly blocks when I run from the

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-10 Thread Eliezer Croitoru
On 8/10/2012 2:32 PM, Amos Jeffries wrote: On 10/08/2012 10:54 p.m., Eliezer Croitoru wrote: On 8/9/2012 4:47 AM, Amos Jeffries wrote: On 09.08.2012 12:32, Eliezer Croitoru wrote: On 8/9/2012 2:16 AM, Amos Jeffries wrote: Releases 3.2.0.14->3.2.0.18 have a standing block preventing requests

Re: [squid-users] squidguard not blocking

2012-08-10 Thread Eliezer Croitoru
On 8/10/2012 9:34 PM, J Webster wrote: squidguard correctly blocks when I run from the command line: [root squidguard]# echo "http://www.porn.com/ - - GET" | squidGuard -c /etc/squid/squidguard.conf -d Does the url rewriter need to be further up the squid.conf? It is right at the end of the

[squid-users] squidguard not blocking

2012-08-10 Thread J Webster
squidguard correctly blocks when I run from the command line: [root squidguard]# echo "http://www.porn.com/ - - GET" | squidGuard -c /etc/squid/squidguard.conf -d 2012-08-10 17:45:22 [28923] New setting: dbhome: /var/lib/squidguard 2012-08-10 17:45:22 [28923] New setting: logdir: /var/log/squidg

[squid-users] 100% CPU

2012-08-10 Thread Hank Disuko
Hi folks, I'm using: Squid Cache version 3.0.STABLE13 for i686-suse-linux This cache has been running well for at least a couple years, or more. As of yesterday, my squid process started using 100% CPU and users on the proxy are experiencing extremely slow Internet speeds. I've disabled ca

Re: [squid-users] squid_ldap_group (Group into Group)

2012-08-10 Thread Rickifer Barros
It Worked!!! Thank you Guys for all your tips... I got this with the command lines: FOR AUTHENTICATION: auth_param basic program /usr/lib/squid3/squid_ldap_auth -R -b "dc=domain,dc=yyy" -D "cn=user,ou=example,dc=domain,dc=yyy" -w "pa

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread Dan Charlesworth
I'm using 3.1.20 but I figured out where my patch was wrong from your example. All working now! Thanks again for your help. Cheers Dan On 10/08/2012, at 10:11 PM, nipun_mlist Assam wrote: >> >> I made a patch (attached) based on your suggestions but the build is = >> failing on the following

Re: [squid-users] squid_ldap_group (Group into Group)

2012-08-10 Thread Amos Jeffries
On 10/08/2012 11:55 p.m., Rickifer Barros wrote: Hi Eugene, yes, that's true, but this only works together the program squid_kerb_auth. So this require my computer inside a domain. I need that it works with a popup to type username and password. I tried: - to use squid_kerb_auth with the parame

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread nipun_mlist Assam
> > I made a patch (attached) based on your suggestions but the build is = > failing on the following errors: > certificate_db.cc: In member function 'bool = > Ssl::CertificateDb::deleteInvalidCertificate()': > certificate_db.cc:439: error: invalid conversion from 'void*' to 'const = > _STACK*' > c

[squid-users] Re: squid_ldap_group (Group into Group)

2012-08-10 Thread Markus Moeller
Hi Rickifer, squid_kerb_ldap does not require squid_kerb_auth. You can use command line options for ldap and a default realm. ext_kerberos_ldap_group_acl [-h] [-d] [-i] [-s] [-a] [-D Realm ] [-N Netbios-Realm-List] [-m Max-Depth] [-u Ldap-User] [-p Ldap-Password] [-b Ldap-Bind-Path] [-l Lda

Re: [squid-users] squid_ldap_group (Group into Group)

2012-08-10 Thread Rickifer Barros
Hi Eugene, yes, that's true, but this only works together the program squid_kerb_auth. So this require my computer inside a domain. I need that it works with a popup to type username and password. I tried: - to use squid_kerb_auth with the parameter "auth_param basic program" (DOESN'T WORK) - to

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-10 Thread Amos Jeffries
On 10/08/2012 10:54 p.m., Eliezer Croitoru wrote: On 8/9/2012 4:47 AM, Amos Jeffries wrote: On 09.08.2012 12:32, Eliezer Croitoru wrote: On 8/9/2012 2:16 AM, Amos Jeffries wrote: Releases 3.2.0.14->3.2.0.18 have a standing block preventing requests with conflicting destination IP and destinat

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread Dan Charlesworth
Thanks again. Turns out what you pasted is the same ABI my CentOS 6.3 = environment. I made a patch (attached) based on your suggestions but the build is = failing on the following errors: certificate_db.cc: In member function 'bool = Ssl::CertificateDb::deleteInvalidCertificate()': certificate_db

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-10 Thread Eliezer Croitoru
On 8/9/2012 4:47 AM, Amos Jeffries wrote: On 09.08.2012 12:32, Eliezer Croitoru wrote: On 8/9/2012 2:16 AM, Amos Jeffries wrote: Releases 3.2.0.14->3.2.0.18 have a standing block preventing requests with conflicting destination IP and destination domain name being passed to peers. Release 3.2

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread nipun_mlist Assam
ABI version is defined in opensslv.h. Something like "#define OPENSSL_VERSION_NUMBER 0x1003L" Generally openssl header files install in /usr/include/openssl/ Regards, Nipun On Fri, Aug 10, 2012 at 3:44 PM, Dan Charlesworth wrote: > Thanks Nipun. A patch is going to be a much bette

[squid-users] Re: squid_kerb_auth High CPU load.

2012-08-10 Thread Markus Moeller
Good news. Thank you for sharing. Markus "Viorel Robu" wrote in message news:loom.20120810t112710-...@post.gmane.org... Hooray!!! I solved my problem with squid_kerb_auth!!! The problem was not in architecture, as I wrongly supposed. The problem is SELINUX, even in permissive mode it make a

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread Dan Charlesworth
Thanks Nipun. A patch is going to be a much better option for me given the difficulty of dealing with building RPMs and mock environments etc. I understand part 2 of your suggestions but I'm unsure how to find out what my "abl version is" if I run openssl version I get the following output: "Ope

[squid-users] Re: squid_kerb_auth High CPU load.

2012-08-10 Thread Viorel Robu
Hooray!!! I solved my problem with squid_kerb_auth!!! The problem was not in architecture, as I wrongly supposed. The problem is SELINUX, even in permissive mode it make a big CPU pressure.

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread nipun_mlist Assam
>> certificate_db.cc: In member function 'bool >> Ssl::CertificateDb::deleteInvalidCertificate()': >> certificate_db.cc:441: error: cannot convert 'stack_st_OPENSSL_PSTRING*' >> to 'const _STACK*' for argument '1' to 'int sk_num(const _STACK*)' >> certificate_db.cc:442: error: cannot convert 'stack

Re: [squid-users] squid 3.2.0.19 compilation problem

2012-08-10 Thread nipun_mlist Assam
> > It looks like somebody has patched your particular library 1.0.0 beta3 to > back-port something? > No idea if somebody patched openssl. My system is CentOS Linux release 6.0. Also, I guess the compilation error "invalid conversion from ‘void*’ to ‘const _STACK*" will be thrown by higher versi

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-10 Thread Amos Jeffries
On 10/08/2012 7:36 a.m., Davide Alberani wrote: On Thu, Aug 9, 2012 at 1:16 AM, Amos Jeffries wrote: I'm trying squid 3.2 (since I'll need some of the new features), but I'm having troubles using it in intercept mode, when used along with an upstream proxy. Which 3.2 release number please? tha

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread Amos Jeffries
On 10/08/2012 1:55 a.m., Dan Charlesworth wrote: Hi Apparently I'm having the exact same issue as Michael was in this thread: http://www.squid-cache.org/mail-archive/squid-users/201204/0016.html Differences are: - I'm using 3.1.20 - I'm using CentOS 6.3 with openssl-1.0.0-20 - I'm building an R