Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Squidblacklist
On Sat, 18 May 2013 17:32:02 +1200 Amos Jeffries wrote: > > On Sat, 18 May 2013 14:58:42 +1200 > > Amos Jeffries wrote: > > > >> a BIG blacklist is overhyped > For the record that is a mis-attribution. I did not say that. > > Amos > Pardon my bad email etiquette, I'm using a wierd email clie

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Helmut Hullen
Hallo, Amos, Du meintest am 18.05.13: >>> SG has numerous problems which caused it not to do what it's >>> supposed to, including that "emergency" mode thing. Here are some >>> things to consider: >>> 1) a BIG blacklist is overhyped - when I had a good look at our >>> requirements, there was onl

Re: [squid-users] Facebook URL username can't block

2013-05-17 Thread Amos Jeffries
On 18/05/2013 5:14 p.m., budsz wrote: Hi, I've strange problem here whereis my configuration: squid.conf acl urlpathdeny urlpath_regex -i "/usr/local/etc/squid/urlpath.deny" http_access deny urlpathdeny urlpath.deny: 3gp\.exe$ That's rules work to block 3gp.exe file, but I try to block facebo

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Amos Jeffries
On 18/05/2013 4:52 p.m., Squidblacklist wrote: On Sat, 18 May 2013 14:58:42 +1200 Amos Jeffries wrote: a BIG blacklist is overhyped For the record that is a mis-attribution. I did not say that. Amos

[squid-users] Facebook URL username can't block

2013-05-17 Thread budsz
Hi, I've strange problem here whereis my configuration: squid.conf acl urlpathdeny urlpath_regex -i "/usr/local/etc/squid/urlpath.deny" http_access deny urlpathdeny urlpath.deny: 3gp\.exe$ That's rules work to block 3gp.exe file, but I try to block facebook URL pattens like this: http://www.fa

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Squidblacklist
On Sat, 18 May 2013 14:58:42 +1200 Amos Jeffries wrote: > On 18/05/2013 5:53 a.m., Helmut Hullen wrote: > > Hallo, csn233, > > > > Du meintest am 18.05.13: > > > >> SG has numerous problems which caused it not to do what it's > >> supposed to, including that "emergency" mode thing. Here are some

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Squidblacklist
On Sat, 18 May 2013 14:58:42 +1200 Amos Jeffries wrote: > a BIG blacklist is overhyped Nonsense, porn blacklists are big by nature have you tried squid-porn.acl lately? Squidblacklist.org is the new kid on the blacklist block, and our porn blacklist is fantastic. - Signed, Fix Nichols http:

Re: [squid-users] Re: Squid CPU 100% infinite loop

2013-05-17 Thread Amos Jeffries
On 18/05/2013 8:14 a.m., Stuart Henderson wrote: On 2013-05-17, Loïc BLOT wrote: I have found the problem. In fact it's the problem mentionned on my last mail, is right. Squid FD limit was reached, but squid doesn't mentionned every time the freeze appear that it's a FD limit problem, then the

Re: [squid-users] using squid from home and office

2013-05-17 Thread Amos Jeffries
On 18/05/2013 1:52 p.m., juhan wrote: I have squid installed in office at dedicated box but i want to filter traffic outgoing from home too. Squid is in intercept mode and works for connections from office. And from the home router i redirected all port 80 traffic to squid IP address. But as the

Re: [squid-users] Squid and MySql authentication

2013-05-17 Thread Amos Jeffries
On 18/05/2013 6:49 a.m., Delton wrote: Dear guys, I'm testing in MySql authentication via 'basic_db_auth'. I ran the test and it worked: /lib/squid3/basic_db_auth --user squid --password password --md5 --cond 'enabled=1' --persis testuser test OK But in the Squid error is returned: 2013/05/

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Amos Jeffries
On 18/05/2013 5:53 a.m., Helmut Hullen wrote: Hallo, csn233, Du meintest am 18.05.13: SG has numerous problems which caused it not to do what it's supposed to, including that "emergency" mode thing. Here are some things to consider: 1) a BIG blacklist is overhyped - when I had a good look at o

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread csn233
> You can use ufdbGuard free. So it's the filter DB component that's not free. Thanks for clarifying.

[squid-users] using squid from home and office

2013-05-17 Thread juhan
I have squid installed in office at dedicated box but i want to filter traffic outgoing from home too. Squid is in intercept mode and works for connections from office. And from the home router i redirected all port 80 traffic to squid IP address. But as the destination of packets are squid machin

Re: [squid-users] Squid 3.3.4 icap request issue

2013-05-17 Thread Alex Rousskov
On 05/15/2013 09:12 AM, Guy Helmer wrote: > I'm seeing something odd with icap REQMOD requests for HTTP POST > requests in Squid 3.3.4: the encapsulated body appears to not be > terminated by \r\n0\r\n. This seems to occur consistently with bumped > SSL requests to graph.facebook.com: The ICAP-en

Re: [squid-users] Squid CPU 100% infinite loop

2013-05-17 Thread Alex Rousskov
On 05/17/2013 01:28 PM, Loïc BLOT wrote: > I have found the problem. In fact it's the problem mentionned on my > last mail, is right. Squid FD limit was reached, but squid doesn't > mentionned every time the freeze appear that it's a FD limit > problem, then the debug was so difficult. Squid shou

[squid-users] Re: Squid CPU 100% infinite loop

2013-05-17 Thread Stuart Henderson
On 2013-05-17, Loïc BLOT wrote: > I have found the problem. In fact it's the problem mentionned on my last > mail, is right. Squid FD limit was reached, but squid doesn't mentionned > every time the freeze appear that it's a FD limit problem, then the > debug was so difficult. > Also, i think you

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Carlos Defoe
I'll run some more tests before getting rid of squidguard. I think the idea of the rewriter sounds good. Also the use of berkeleydb to read blacklists. I've used squidguard in the past, in small networks, without any problems. If it were running properly now, then i would have a great opportunity

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Helmut Hullen
Hallo, csn233, Du meintest am 18.05.13: >> Because I can. > Sorry, more relevant question would be - do you have an answer for > the original poster? No. I don't run a huge network with the problem he has described. I only run networks with about 50 ... 200 clients, and there I never had thi

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Marcus Kool
On Sat, May 18, 2013 at 01:27:36AM +0800, csn233 wrote: > On Sat, May 18, 2013 at 1:09 AM, csn233 wrote: > >>> I didn't bother spending any more time on it. > >> > >> ufdbGuard is a more powerful substitute of squidGuard. > >> Has regular updates and even free support. > >> > >> Marcus > > Sure.

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread csn233
> Because I can. Sorry, more relevant question would be - do you have an answer for the original poster?

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Helmut Hullen
Hallo, csn233, Du meintest am 18.05.13: >> I can't see a big need for updating. Software really doesn't need >> changes ("updates") every month or so. > No, it doesn't - until you have a problem. >> "That depends!" - I know many colleagues who use "squidguard" since >> years; the program doesn'

Re: [squid-users] Squid CPU 100% infinite loop

2013-05-17 Thread Loïc BLOT
Hi all, some news and suggestions: I have found the problem. In fact it's the problem mentionned on my last mail, is right. Squid FD limit was reached, but squid doesn't mentionned every time the freeze appear that it's a FD limit problem, then the debug was so difficult. Also, i think you must add

[squid-users] Squid and MySql authentication

2013-05-17 Thread Delton
Dear guys, I'm testing in MySql authentication via 'basic_db_auth'. I ran the test and it worked: /lib/squid3/basic_db_auth --user squid --password password --md5 --cond 'enabled=1' --persis testuser test OK But in the Squid error is returned: 2013/05/17 15:43:17.868 kid1| UserRequest.cc(66)

Re: [squid-users] how to block facebook using squid transparent with SSL support?

2013-05-17 Thread Hussam Al-Tayeb
On Friday 17 May 2013 13:36:07 Delton wrote: > Using the dstdomain http://www.facebook.com is blocked and you receive > the error page of Squid, but when accessing https://www.facebook is > displayedthe proxy server connection refused, not the Squid error page. > > Em 17/05/2013 11:57, Amos Jeffri

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Squidblacklist
On Sat, 18 May 2013 01:27:36 +0800 csn233 wrote: > On Sat, May 18, 2013 at 1:09 AM, csn233 wrote: > >>> I didn't bother spending any more time on it. > >> > >> ufdbGuard is a more powerful substitute of squidGuard. > >> Has regular updates and even free support. > >> > >> Marcus > > Sure. You f

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Helmut Hullen
Hallo, csn233, Du meintest am 18.05.13: > SG has numerous problems which caused it not to do what it's supposed > to, including that "emergency" mode thing. Here are some things to > consider: > 1) a BIG blacklist is overhyped - when I had a good look at our > requirements, there was only a smal

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread csn233
On Sat, May 18, 2013 at 1:09 AM, csn233 wrote: >>> I didn't bother spending any more time on it. >> >> ufdbGuard is a more powerful substitute of squidGuard. >> Has regular updates and even free support. >> >> Marcus Sure. You forgot to mention though, squidGuard is free whereas ufdbGuard is a li

Re: [squid-users] Squid 3.1.8 restarting issue mem_hdr

2013-05-17 Thread csn233
> Somebody please can help me? As Amos said, 3.1 has a great many bugs. If you don't feel like trying the latest releases, you should try 3.1.22, at least. I certainly would not stay on 3.1.8.

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Marcus Kool
On Sat, May 18, 2013 at 12:28:20AM +0800, csn233 wrote: > > Has anyone experienced this? > > SG has numerous problems which caused it not to do what it's supposed > to, including that "emergency" mode thing. Here are some things to > consider: > > 1) a BIG blacklist is overhyped - when I had a go

Re: [squid-users] how to block facebook using squid transparent with SSL support?

2013-05-17 Thread Delton
Using the dstdomain http://www.facebook.com is blocked and you receive the error page of Squid, but when accessing https://www.facebook is displayedthe proxy server connection refused, not the Squid error page. Em 17/05/2013 11:57, Amos Jeffries escreveu: On 18/05/2013 1:41 a.m., Hussam Al-Tay

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread csn233
> Has anyone experienced this? SG has numerous problems which caused it not to do what it's supposed to, including that "emergency" mode thing. Here are some things to consider: 1) a BIG blacklist is overhyped - when I had a good look at our requirements, there was only a small percentage of thos

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Carlos Defoe
Hi Amos, One big blacklist. Secondarily, it matches ads on each page to change it to our logo, so it reduces bandwitdh usage, stops annoying ads and makes our marketing thing. Do you think squidGuard is not working properly, then? Redirector Statistics: program: /usr/local/squidGuard/bin/squidGu

Re: [squid-users] how to block facebook using squid transparent with SSL support?

2013-05-17 Thread Amos Jeffries
On 18/05/2013 1:41 a.m., Hussam Al-Tayeb wrote: On Friday 17 May 2013 09:21:55 Jose Junior wrote: Personnel, the company where I work she, I need to block facebook, I can but it affects the connection with other sites such as gmail thank you very much acl blockedurls dstdom_regex -i "/etc/squi

Re: [squid-users] squidguard not redirecting

2013-05-17 Thread Amos Jeffries
On 18/05/2013 1:14 a.m., Carlos Defoe wrote: Hello, I have enabled squidGuard within a huge network. Problem is that most of the matches to my acls are logged (a block.log file), but the site is still accessible. When i press F5 to reload, multiple times, one time it got "blocked" (redirected to

Re: [squid-users] how to block facebook using squid transparent with SSL support?

2013-05-17 Thread Hussam Al-Tayeb
On Friday 17 May 2013 09:21:55 Jose Junior wrote: > Personnel, the company where I work she, I need to block facebook, I > can but it affects the connection with other sites such as gmail > > thank you very much acl blockedurls dstdom_regex -i "/etc/squid/squid.blockedurls" http_access deny block

[squid-users] squidguard not redirecting

2013-05-17 Thread Carlos Defoe
Hello, I have enabled squidGuard within a huge network. Problem is that most of the matches to my acls are logged (a block.log file), but the site is still accessible. When i press F5 to reload, multiple times, one time it got "blocked" (redirected to my local block page, published with apache htt

Re: [squid-users] cache-control: no-transform - does it affect caching of pages & content?

2013-05-17 Thread Amos Jeffries
On 18/05/2013 12:07 a.m., Adrian Miller wrote: Recently i added cache-control: no-transform to Firefox's ModifyHeader addon, expressly to stop vodafone adding its 1.2.3.4/bms.js (to reduce image quality/bandwidth) to EVERY page it serves me. Other suggestions on the vodafone js insertion was

[squid-users] Re: Squid 3.3 Intercept Proxy -- Traffic routing to Squid Box..Now what? :)

2013-05-17 Thread jimmah6786
Is there anything else I could check to see why this still doesn't work? Does anyone have a working example of Squid 3.3 with this type of topology? Routing on a stick. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-3-3-Intercept-Proxy-Traffic-routin

[squid-users] how to block facebook using squid transparent with SSL support?

2013-05-17 Thread Jose Junior
Personnel, the company where I work she, I need to block facebook, I can but it affects the connection with other sites such as gmail thank you very much

[squid-users] cache-control: no-transform - does it affect caching of pages & content?

2013-05-17 Thread Adrian Miller
Recently i added cache-control: no-transform to Firefox's ModifyHeader addon, expressly to stop vodafone adding its 1.2.3.4/bms.js (to reduce image quality/bandwidth) to EVERY page it serves me. Other suggestions on the vodafone js insertion was to use cache-control: no-cache and/or pragma: n

Re: [squid-users] RE: What "debug_options" are needed to efficiently debug cache-miss issues

2013-05-17 Thread Amos Jeffries
On 17/05/2013 8:51 p.m., Martin Sperl wrote: Any ideas how to debug this cache-miss issue? Without knowing what component is causing the MISS it is hard to say. You could try sections 88, 85, 22, 11 at level 5. All of those deal with response cacheability in a big way. Amos Thanks,

Re: [squid-users] Avoiding DNS lookups in squid

2013-05-17 Thread Amos Jeffries
On 17/05/2013 10:18 p.m., Satish Thareja wrote: Hi, Is it possible to remove DNS lookup capability from squid, given that the client will anyways be doing the DNS resolution. Can this redundancy be removed ?? In what context? Reverse-proxy and forward-proxy traffic can be passed through Squid

Re: [squid-users] Squid 3.1.8 restarting issue mem_hdr

2013-05-17 Thread Amos Jeffries
On 17/05/2013 8:37 p.m., lantuin wrote: Hi, we have an instance of squid - running version 3.1.8 - that suddenly has gone in FATAL error. The reason that I found in cache.log is this: 2013/05/13 15:42:46| mem_hdr::write: writeBuffer: [341,553) 2013/05/13 15:42:46| mem_hdr::debugDump: lowest off

[squid-users] Avoiding DNS lookups in squid

2013-05-17 Thread Satish Thareja
Hi, Is it possible to remove DNS lookup capability from squid, given that the client will anyways be doing the DNS resolution. Can this redundancy be removed ?? Thanks

[squid-users] RE: What "debug_options" are needed to efficiently debug cache-miss issues

2013-05-17 Thread Martin Sperl
Any ideas how to debug this cache-miss issue? Thanks, Martin -Original Message- From: Martin Sperl Sent: Donnerstag, 16. Mai 2013 12:19 To: squid-users@squid-cache.org Subject: [squid-users] What "debug_options" are needed to efficiently debug cache-miss issues Hi! I need to f

[squid-users] Squid 3.1.8 restarting issue mem_hdr

2013-05-17 Thread lantuin
Hi, we have an instance of squid - running version 3.1.8 - that suddenly has gone in FATAL error. The reason that I found in cache.log is this: 2013/05/13 15:42:46| mem_hdr::write: writeBuffer: [341,553) 2013/05/13 15:42:46| mem_hdr::debugDump: lowest offset: 0 highest offset + 1: 342. 2013/0

Re: [squid-users] what is best method to connect two squid servers on the same router?

2013-05-17 Thread Pieter De Wit
Let's try this again While you are busy with the deb packages, how about not putting in a squid.conf and rather calling it squid.conf.default, or do "include" configs like Apache ? Pretty please ? :) I'm not sure I understand the first suggestion there about squid.cofn and squid.conf.defau