On Sat, 18 May 2013 17:32:02 +1200
Amos Jeffries wrote:
> > On Sat, 18 May 2013 14:58:42 +1200
> > Amos Jeffries wrote:
> >
> >> a BIG blacklist is overhyped
> For the record that is a mis-attribution. I did not say that.
>
> Amos
>
Pardon my bad email etiquette, I'm using a wierd email clie
Hallo, Amos,
Du meintest am 18.05.13:
>>> SG has numerous problems which caused it not to do what it's
>>> supposed to, including that "emergency" mode thing. Here are some
>>> things to consider:
>>> 1) a BIG blacklist is overhyped - when I had a good look at our
>>> requirements, there was onl
On 18/05/2013 5:14 p.m., budsz wrote:
Hi,
I've strange problem here whereis my configuration:
squid.conf
acl urlpathdeny urlpath_regex -i "/usr/local/etc/squid/urlpath.deny"
http_access deny urlpathdeny
urlpath.deny:
3gp\.exe$
That's rules work to block 3gp.exe file, but I try to block facebo
On 18/05/2013 4:52 p.m., Squidblacklist wrote:
On Sat, 18 May 2013 14:58:42 +1200
Amos Jeffries wrote:
a BIG blacklist is overhyped
For the record that is a mis-attribution. I did not say that.
Amos
Hi,
I've strange problem here whereis my configuration:
squid.conf
acl urlpathdeny urlpath_regex -i "/usr/local/etc/squid/urlpath.deny"
http_access deny urlpathdeny
urlpath.deny:
3gp\.exe$
That's rules work to block 3gp.exe file, but I try to block facebook
URL pattens like this:
http://www.fa
On Sat, 18 May 2013 14:58:42 +1200
Amos Jeffries wrote:
> On 18/05/2013 5:53 a.m., Helmut Hullen wrote:
> > Hallo, csn233,
> >
> > Du meintest am 18.05.13:
> >
> >> SG has numerous problems which caused it not to do what it's
> >> supposed to, including that "emergency" mode thing. Here are some
On Sat, 18 May 2013 14:58:42 +1200
Amos Jeffries wrote:
> a BIG blacklist is overhyped
Nonsense, porn blacklists are big by nature have you tried
squid-porn.acl lately?
Squidblacklist.org is the new kid on the blacklist block, and our porn
blacklist is fantastic.
-
Signed,
Fix Nichols
http:
On 18/05/2013 8:14 a.m., Stuart Henderson wrote:
On 2013-05-17, Loïc BLOT wrote:
I have found the problem. In fact it's the problem mentionned on my last
mail, is right. Squid FD limit was reached, but squid doesn't mentionned
every time the freeze appear that it's a FD limit problem, then the
On 18/05/2013 1:52 p.m., juhan wrote:
I have squid installed in office at dedicated box but i want to filter
traffic outgoing from home too. Squid is in intercept mode and works for
connections from office. And from the home router i redirected all port 80
traffic to squid IP address. But as the
On 18/05/2013 6:49 a.m., Delton wrote:
Dear guys,
I'm testing in MySql authentication via 'basic_db_auth'.
I ran the test and it worked:
/lib/squid3/basic_db_auth --user squid --password password --md5
--cond 'enabled=1' --persis
testuser test
OK
But in the Squid error is returned:
2013/05/
On 18/05/2013 5:53 a.m., Helmut Hullen wrote:
Hallo, csn233,
Du meintest am 18.05.13:
SG has numerous problems which caused it not to do what it's supposed
to, including that "emergency" mode thing. Here are some things to
consider:
1) a BIG blacklist is overhyped - when I had a good look at o
> You can use ufdbGuard free.
So it's the filter DB component that's not free. Thanks for clarifying.
I have squid installed in office at dedicated box but i want to filter
traffic outgoing from home too. Squid is in intercept mode and works for
connections from office. And from the home router i redirected all port 80
traffic to squid IP address. But as the destination of packets are squid
machin
On 05/15/2013 09:12 AM, Guy Helmer wrote:
> I'm seeing something odd with icap REQMOD requests for HTTP POST
> requests in Squid 3.3.4: the encapsulated body appears to not be
> terminated by \r\n0\r\n. This seems to occur consistently with bumped
> SSL requests to graph.facebook.com:
The ICAP-en
On 05/17/2013 01:28 PM, Loïc BLOT wrote:
> I have found the problem. In fact it's the problem mentionned on my
> last mail, is right. Squid FD limit was reached, but squid doesn't
> mentionned every time the freeze appear that it's a FD limit
> problem, then the debug was so difficult.
Squid shou
On 2013-05-17, Loïc BLOT wrote:
> I have found the problem. In fact it's the problem mentionned on my last
> mail, is right. Squid FD limit was reached, but squid doesn't mentionned
> every time the freeze appear that it's a FD limit problem, then the
> debug was so difficult.
> Also, i think you
I'll run some more tests before getting rid of squidguard. I think the
idea of the rewriter sounds good. Also the use of berkeleydb to read
blacklists.
I've used squidguard in the past, in small networks, without any problems.
If it were running properly now, then i would have a great opportunity
Hallo, csn233,
Du meintest am 18.05.13:
>> Because I can.
> Sorry, more relevant question would be - do you have an answer for
> the original poster?
No. I don't run a huge network with the problem he has described.
I only run networks with about 50 ... 200 clients, and there I never had
thi
On Sat, May 18, 2013 at 01:27:36AM +0800, csn233 wrote:
> On Sat, May 18, 2013 at 1:09 AM, csn233 wrote:
> >>> I didn't bother spending any more time on it.
> >>
> >> ufdbGuard is a more powerful substitute of squidGuard.
> >> Has regular updates and even free support.
> >>
> >> Marcus
>
> Sure.
> Because I can.
Sorry, more relevant question would be - do you have an answer for the
original poster?
Hallo, csn233,
Du meintest am 18.05.13:
>> I can't see a big need for updating. Software really doesn't need
>> changes ("updates") every month or so.
> No, it doesn't - until you have a problem.
>> "That depends!" - I know many colleagues who use "squidguard" since
>> years; the program doesn'
Hi all,
some news and suggestions:
I have found the problem. In fact it's the problem mentionned on my last
mail, is right. Squid FD limit was reached, but squid doesn't mentionned
every time the freeze appear that it's a FD limit problem, then the
debug was so difficult.
Also, i think you must add
Dear guys,
I'm testing in MySql authentication via 'basic_db_auth'.
I ran the test and it worked:
/lib/squid3/basic_db_auth --user squid --password password --md5 --cond
'enabled=1' --persis
testuser test
OK
But in the Squid error is returned:
2013/05/17 15:43:17.868 kid1| UserRequest.cc(66)
On Friday 17 May 2013 13:36:07 Delton wrote:
> Using the dstdomain http://www.facebook.com is blocked and you receive
> the error page of Squid, but when accessing https://www.facebook is
> displayedthe proxy server connection refused, not the Squid error page.
>
> Em 17/05/2013 11:57, Amos Jeffri
On Sat, 18 May 2013 01:27:36 +0800
csn233 wrote:
> On Sat, May 18, 2013 at 1:09 AM, csn233 wrote:
> >>> I didn't bother spending any more time on it.
> >>
> >> ufdbGuard is a more powerful substitute of squidGuard.
> >> Has regular updates and even free support.
> >>
> >> Marcus
>
> Sure. You f
Hallo, csn233,
Du meintest am 18.05.13:
> SG has numerous problems which caused it not to do what it's supposed
> to, including that "emergency" mode thing. Here are some things to
> consider:
> 1) a BIG blacklist is overhyped - when I had a good look at our
> requirements, there was only a smal
On Sat, May 18, 2013 at 1:09 AM, csn233 wrote:
>>> I didn't bother spending any more time on it.
>>
>> ufdbGuard is a more powerful substitute of squidGuard.
>> Has regular updates and even free support.
>>
>> Marcus
Sure. You forgot to mention though, squidGuard is free whereas
ufdbGuard is a li
> Somebody please can help me?
As Amos said, 3.1 has a great many bugs.
If you don't feel like trying the latest releases, you should try
3.1.22, at least.
I certainly would not stay on 3.1.8.
On Sat, May 18, 2013 at 12:28:20AM +0800, csn233 wrote:
> > Has anyone experienced this?
>
> SG has numerous problems which caused it not to do what it's supposed
> to, including that "emergency" mode thing. Here are some things to
> consider:
>
> 1) a BIG blacklist is overhyped - when I had a go
Using the dstdomain http://www.facebook.com is blocked and you receive
the error page of Squid, but when accessing https://www.facebook is
displayedthe proxy server connection refused, not the Squid error page.
Em 17/05/2013 11:57, Amos Jeffries escreveu:
On 18/05/2013 1:41 a.m., Hussam Al-Tay
> Has anyone experienced this?
SG has numerous problems which caused it not to do what it's supposed
to, including that "emergency" mode thing. Here are some things to
consider:
1) a BIG blacklist is overhyped - when I had a good look at our
requirements, there was only a small percentage of thos
Hi Amos,
One big blacklist. Secondarily, it matches ads on each page to change
it to our logo, so it reduces bandwitdh usage, stops annoying ads and
makes our marketing thing.
Do you think squidGuard is not working properly, then?
Redirector Statistics:
program: /usr/local/squidGuard/bin/squidGu
On 18/05/2013 1:41 a.m., Hussam Al-Tayeb wrote:
On Friday 17 May 2013 09:21:55 Jose Junior wrote:
Personnel, the company where I work she, I need to block facebook, I
can but it affects the connection with other sites such as gmail
thank you very much
acl blockedurls dstdom_regex -i "/etc/squi
On 18/05/2013 1:14 a.m., Carlos Defoe wrote:
Hello,
I have enabled squidGuard within a huge network. Problem is that most
of the matches to my acls are logged (a block.log file), but the site
is still accessible. When i press F5 to reload, multiple times, one
time it got "blocked" (redirected to
On Friday 17 May 2013 09:21:55 Jose Junior wrote:
> Personnel, the company where I work she, I need to block facebook, I
> can but it affects the connection with other sites such as gmail
>
> thank you very much
acl blockedurls dstdom_regex -i "/etc/squid/squid.blockedurls"
http_access deny block
Hello,
I have enabled squidGuard within a huge network. Problem is that most
of the matches to my acls are logged (a block.log file), but the site
is still accessible. When i press F5 to reload, multiple times, one
time it got "blocked" (redirected to my local block page, published
with apache htt
On 18/05/2013 12:07 a.m., Adrian Miller wrote:
Recently i added cache-control: no-transform to Firefox's ModifyHeader
addon, expressly to stop vodafone adding its 1.2.3.4/bms.js (to
reduce image quality/bandwidth) to EVERY page it serves me.
Other suggestions on the vodafone js insertion was
Is there anything else I could check to see why this still doesn't work?
Does anyone have a working example of Squid 3.3 with this type of topology?
Routing on a stick.
--
View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-3-3-Intercept-Proxy-Traffic-routin
Personnel, the company where I work she, I need to block facebook, I
can but it affects the connection with other sites such as gmail
thank you very much
Recently i added cache-control: no-transform to Firefox's ModifyHeader
addon, expressly to stop vodafone adding its 1.2.3.4/bms.js (to reduce
image quality/bandwidth) to EVERY page it serves me.
Other suggestions on the vodafone js insertion was to use cache-control:
no-cache and/or pragma: n
On 17/05/2013 8:51 p.m., Martin Sperl wrote:
Any ideas how to debug this cache-miss issue?
Without knowing what component is causing the MISS it is hard to say.
You could try sections 88, 85, 22, 11 at level 5. All of those deal with
response cacheability in a big way.
Amos
Thanks,
On 17/05/2013 10:18 p.m., Satish Thareja wrote:
Hi,
Is it possible to remove DNS lookup capability from squid, given that
the client will anyways be doing the DNS resolution.
Can this redundancy be removed ??
In what context?
Reverse-proxy and forward-proxy traffic can be passed through Squid
On 17/05/2013 8:37 p.m., lantuin wrote:
Hi,
we have an instance of squid - running version 3.1.8 - that suddenly has
gone in FATAL error. The reason that I found in cache.log is this:
2013/05/13 15:42:46| mem_hdr::write: writeBuffer: [341,553)
2013/05/13 15:42:46| mem_hdr::debugDump: lowest off
Hi,
Is it possible to remove DNS lookup capability from squid, given that
the client will anyways be doing the DNS resolution.
Can this redundancy be removed ??
Thanks
Any ideas how to debug this cache-miss issue?
Thanks,
Martin
-Original Message-
From: Martin Sperl
Sent: Donnerstag, 16. Mai 2013 12:19
To: squid-users@squid-cache.org
Subject: [squid-users] What "debug_options" are needed to efficiently debug
cache-miss issues
Hi!
I need to f
Hi,
we have an instance of squid - running version 3.1.8 - that suddenly has
gone in FATAL error. The reason that I found in cache.log is this:
2013/05/13 15:42:46| mem_hdr::write: writeBuffer: [341,553)
2013/05/13 15:42:46| mem_hdr::debugDump: lowest offset: 0 highest offset +
1: 342.
2013/0
Let's try this again
While you are busy with the deb packages, how about not putting in a
squid.conf and rather calling it squid.conf.default, or do "include"
configs like Apache ? Pretty please ? :)
I'm not sure I understand the first suggestion there about squid.cofn
and squid.conf.defau
47 matches
Mail list logo