Re: [squid-users] CRL Messages

2012-10-11 Thread Amos Jeffries
On 11/10/2012 6:00 p.m., Roman Gelfand wrote: What do these messages mean? Why is squid interested in certificate revocation? Squid is not. Whatever client software made that request is interested in them. btw... I was able to download this file from box running squid using wget command.

Re: [squid-users] CRL Messages

2012-10-11 Thread Amos Jeffries
On 11/10/2012 7:44 p.m., Amos Jeffries wrote: On 11/10/2012 6:00 p.m., Roman Gelfand wrote: What do these messages mean? Oops, forgot to answer this one. It means Squid was instructed by your config to always go DIRECT for these requests. But DNS results for that host did not produce any

[squid-users] Squid 3.2.2 is available

2012-10-11 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.2.2 release! This release is a security update and bug fix release resolving several issues found in the prior releases. Some changes to note: * Regression: Make login=PASS send no credentials when none

[squid-users] Re: problem with squid 3.2 as transaparent proxy

2012-10-11 Thread Giovanni Rosini
Now i have Centos 6.2 and i installed squid 3.2.1 without any problems. On my wrt router i changed firewall rules to mark and route packets to squid box, where packets are forwarded from port 80 to port 3128. Now i have other issues: 1. on wrt router i have Chillispot acting as captive portal,

AW: [squid-users] squid 3.2.1: workers not working

2012-10-11 Thread Rietzler, Markus (RZF, SG 324 / RIETZLER_SOFTWARE)
thanxs, upgrading to 3.2.2 did the trick! now the workers are working. also thanxs for the config options, we have used a configure-script which we have created with long time ago with squid 2.5x and then adjusted it a little. some of the options have survived since then... mfg Markus

[squid-users] NTLM passthu

2012-10-11 Thread Alexandre Chappaz
Hi, since upgrade from 3.1.20 to 3.2.1, we are facing a problem regarding access to a IIS server with authentication : the popup asking for credentials keeps poping out and make the browsing impossibe. I observed the same behavior with latest 3.2.2 version (r11676 ). On the contrary, using

Re: [squid-users] NTLM passthu

2012-10-11 Thread Wolfgang Breyha
Alexandre Chappaz wrote, on 11.10.2012 14:45: Is this a regression? Shoudl I file a bug? There already is a bug and a proposed fix http://bugs.squid-cache.org/show_bug.cgi?id=3655 Greetings, Wolfgang -- Wolfgang Breyha wbre...@gmx.net | http://www.blafasel.at/ Vienna University Computer Center

Re: [squid-users] NTLM passthu

2012-10-11 Thread Alexandre Chappaz
Yes I have seen this bug and applied the patch right now. with patch applied, behavior is a bit different : after asking for credentials, I get a connexion reset. and from access log : 1349962782.169 9 10.XXX.XXX.XXX TCP_MISS/401 436 GET http://www.si-diamant.fr/ -

Re: [squid-users] NTLM passthu

2012-10-11 Thread Wolfgang Breyha
Alexandre Chappaz wrote, on 11.10.2012 15:42: Yes I have seen this bug and applied the patch right now. with patch applied, behavior is a bit different : after asking for credentials, I get a connexion reset. Did you use 3.2.2 or 3.2.1? My patch is for 3.2.1. Don't know if it still works

Re: [squid-users] NTLM passthu

2012-10-11 Thread Alexandre Chappaz
Applied the patch on both 3.2.1 and 3.2.2 . Same result. I'll post on your bug report. In the meantime, is there some additional info that could help to debug? 2012/10/11 Wolfgang Breyha wbre...@gmx.net: Alexandre Chappaz wrote, on 11.10.2012 15:42: Yes I have seen this bug and applied the

Re: [squid-users] NTLM passthu

2012-10-11 Thread Wolfgang Breyha
Alexandre Chappaz wrote, on 11.10.2012 15:57: Applied the patch on both 3.2.1 and 3.2.2 . Same result. I'll post on your bug report. In the meantime, is there some additional info that could help to debug? At least I can't help in this matter because my knowledge about squid source code is

[squid-users] From Squid 2.7 STABLE 6 to....

2012-10-11 Thread mc8647tv
I need to install a new proxy server in exchange to the current one based on Squid 2.7 STABLE 6. You already told me that on the new, 12 core, 12 GB server, I should create a hierarchy of squids to use all CPUs but I now have to replace a failing hardware. I currently use a aufs + coss

Re: [squid-users] NTLM passthu

2012-10-11 Thread Alexandre Chappaz
Hi, In fact I made a wrong manipulation while appling the patch. When applied correctly, the provided patch does fix the pinning problem and the authentaction to IIS works. thanks Alex 2012/10/11 Wolfgang Breyha wbre...@gmx.net: Alexandre Chappaz wrote, on 11.10.2012 15:57: Applied the patch

[squid-users] Unit of measure for st

2012-10-11 Thread squid squid
Hi, There is a parameter in the logformat and the format code is st which is Sent reply size including HTTP headers. I would like to know is the unit of measure of unit for this parameter in bits or bytes. Thank you.  

[squid-users] Re: Reverse proxy; finding out what robots (IPs and user-agents) are sending you most of the requests

2012-10-11 Thread Manuel
I have finally found the solution; logformat combined configuration directive in Squid -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Reverse-proxy-finding-out-what-robots-IPs-and-user-agents-are-sending-you-most-of-the-requests-tp4656972p4656973.html Sent

Re: [squid-users] From Squid 2.7 STABLE 6 to....

2012-10-11 Thread Amos Jeffries
On 12/10/2012 4:15 a.m., mc864...@mclink.it wrote: I need to install a new proxy server in exchange to the current one based on Squid 2.7 STABLE 6. You already told me that on the new, 12 core, 12 GB server, I should create a hierarchy of squids to use all CPUs but I now have to replace a

Re: [squid-users] From Squid 2.7 STABLE 6 to....

2012-10-11 Thread Marcus Kool
In case of replacement of failing hardware, I suggest to install the same as you had: 2.7stable6 will work for you. After the hardware replacement I recommend to plan and test an upgrade. Although the Squid development team recommends 3.2.x I prefer to go for 3.1.x because at this time there