Re: [squid-users] Same cache_dir for many squid process

2013-05-31 Thread csn233
> CARP is the type of hierarchy you want for scalability if SMP is > unavailable. It is two-layer and each layer is independently scalable. The > gateway layer (childs) does not cache, but simply does access controls on > clients and determines which cache-layer (parents) proxies is storing the > U

Re: [squid-users] OpenBSD + PF + Squid: forwarding loop

2013-05-31 Thread Rob Sheldon
On 2013-05-31 22:18, Amos Jeffries wrote: On 1/06/2013 11:58 a.m., Rob Sheldon wrote: I'd rather not futz around with pf anymore for now, since I don't think that's where the problem is. (Unless Squid for some reason requires "http_port...intercept" to be passed through an rdr rule...? Why ye

Re: [squid-users] StoreID and concurrency?

2013-05-31 Thread Amos Jeffries
On 1/06/2013 1:31 a.m., csn233 wrote: I seem to be getting the occasional problem when running the same Youtube video at the same time on multiple browsers with the StoreID feature. If I don't run them at the same time, no problems and I see a nice caching (HIT) effect. The error basically is "a

Re: [squid-users] Same cache_dir for many squid process

2013-05-31 Thread Amos Jeffries
On 1/06/2013 2:59 p.m., csn233 wrote: if you correctly configure your parents to not cache anything, then you'll have no duplications. In that case, only the squid you'll choose will manage cache on disk. it can be as simple as a cache_dir null to the parent squids. If the pare

Re: [squid-users] OpenBSD + PF + Squid: forwarding loop

2013-05-31 Thread Amos Jeffries
On 1/06/2013 11:58 a.m., Rob Sheldon wrote: On 2013-05-31 16:07, Loïc BLOT wrote: Instead of your ugly: pass quick on lo0 use: skip lo0 which is better :) Thanks, I forgot about skip. You must redirect trafic on your lan interface directed to any remote 80 to your lan IP:3129 and also allow

Re: [squid-users] Can't stay logged in

2013-05-31 Thread Amos Jeffries
On 1/06/2013 11:41 a.m., cac...@quantum-sci.com wrote: On Friday, May 31, 2013 07:51:08 AM cac...@quantum-sci.com wrote: On Wednesday, May 29, 2013 04:20:21 PM cac...@quantum-sci.com wrote: Does anyone know why I can't stay logged in to this site, with headers paranoid? http://www.cctvforum.com

Re: [squid-users] cant build squid 3.3.5 with external_acl_helper ldap_group on CentOS 6.4 64bits

2013-05-31 Thread Amos Jeffries
On 1/06/2013 7:40 a.m., Ricardo Klein wrote: Hi there, I am trying to build squid on CentOS 6.4 64bits with external_acl_helper "ldap_group", but my ./configure log says: configure: external acl helper ldap_group ... found but cannot be built I have fired a but in the bugtrack, but, if any of yo

Re: [squid-users] Same cache_dir for many squid process

2013-05-31 Thread csn233
> if you correctly configure your parents to not cache anything, then > you'll have no duplications. In that case, only the squid you'll choose will > manage cache on disk. > > it can be as simple as a > > cache_dir null > > to the parent squids. If the parents have cache_dir null, tho

Re: [squid-users] OpenBSD + PF + Squid: forwarding loop

2013-05-31 Thread Rob Sheldon
On 2013-05-31 16:07, Loïc BLOT wrote: Instead of your ugly: pass quick on lo0 use: skip lo0 which is better :) Thanks, I forgot about skip. You must redirect trafic on your lan interface directed to any remote 80 to your lan IP:3129 and also allow tcp 3129 on pf pass out quick on $lan_if pr

Re: [squid-users] OpenBSD + PF + Squid: forwarding loop

2013-05-31 Thread Loïc BLOT
Instead of your ugly: pass quick on lo0 use: skip lo0 which is better :) You must redirect trafic on your lan interface directed to any remote 80 to your lan IP:3129 and also allow tcp 3129 on pf pass out quick on $lan_if proto tcp to port 80 rdr-to $lan_ip port 3129 pass in quick on $lan_if prot

Re: Re: [squid-users] Can't stay logged in

2013-05-31 Thread CACook
On Friday, May 31, 2013 07:51:08 AM cac...@quantum-sci.com wrote: > On Wednesday, May 29, 2013 04:20:21 PM cac...@quantum-sci.com wrote: > > > > Does anyone know why I can't stay logged in to this site, with headers > > paranoid? > > http://www.cctvforum.com/ > > > > squid.conf: > > http://past

Re: [squid-users] OpenBSD + PF + Squid: forwarding loop

2013-05-31 Thread Rob Sheldon
On 2013-05-31 5:27, Marko Cupać wrote: Try setting squid to listen on loopback address: http_port 127.0.0.1:3128 intercept Redirect web traffic to loopback address in pf: pass in quick on $if_int inet proto tcp from 192.168.0.209 to any \ port { www https } rdr-to 127.0.0.1 port 3128

Re: [squid-users] Same cache_dir for many squid process

2013-05-31 Thread Leonardo Rodrigues
Em 31/05/13 14:19, csn233 escreveu: http://wiki.squid-cache.org/Features/CacheHierarchy Not quite the same thing. With cache siblings, you have sharing but also duplication of caches. if you correctly configure your parents to not cache anything, then you'll have no duplications. In that

[squid-users] cant build squid 3.3.5 with external_acl_helper ldap_group on CentOS 6.4 64bits

2013-05-31 Thread Ricardo Klein
Hi there, I am trying to build squid on CentOS 6.4 64bits with external_acl_helper "ldap_group", but my ./configure log says: configure: external acl helper ldap_group ... found but cannot be built I have fired a but in the bugtrack, but, if any of you know what is wrong, please tell me so I can c

Re: [squid-users] Same cache_dir for many squid process

2013-05-31 Thread csn233
> http://wiki.squid-cache.org/Features/CacheHierarchy Not quite the same thing. With cache siblings, you have sharing but also duplication of caches. With parents, you will also have duplication - more than 1 parent can have the same copy cached. But there are workarounds. Cache Hierarchy is NO

Re: [squid-users] Same cache_dir for many squid process

2013-05-31 Thread Leonardo Rodrigues
Em 31/05/13 12:56, csn233 escreveu: if you cant do that, chaining squid processes is easy and, at the end, will provide the functionality of all squid processes using the same cache_dir, but being controlled by a single squid. What does "chaining" mean, and how exactly do you do that? ht

Re: [squid-users] sslbump intercept with chrom[e|ium]

2013-05-31 Thread Nuno Fernandes
Em Sexta, Maio de 31 de 2013 15:58 WEST, Michael Graham escreveu: > On Fri, 2013-05-31 at 09:59 +0100, npf-mli...@eurotux.com wrote: > > I have squid 3.3.5 working fine with sslbump in intercept mode. > > > > It works fine in firefox (windows and linux), konqueror (linux), IE > > (windows) an

Re: [squid-users] Same cache_dir for many squid process

2013-05-31 Thread csn233
> if you cant do that, chaining squid processes is easy and, at the end, > will provide the functionality of all squid processes using the same > cache_dir, but being controlled by a single squid. What does "chaining" mean, and how exactly do you do that?

Re: [squid-users] Same cache_dir for many squid process

2013-05-31 Thread Leonardo Rodrigues
Em 30/05/13 11:24, Alex Rousskov escreveu: On 05/30/2013 01:00 AM, Sekar Duraisamy wrote: Iam running 3 squid process on the same machine with different ports and i would like to use same cache_dir for all the 3 processes. Can we use same cache_dir for all the processes? Yes, provided you use

Re: [squid-users] sslbump intercept with chrom[e|ium]

2013-05-31 Thread Michael Graham
On Fri, 2013-05-31 at 09:59 +0100, npf-mli...@eurotux.com wrote: > I have squid 3.3.5 working fine with sslbump in intercept mode. > > It works fine in firefox (windows and linux), konqueror (linux), IE (windows) > and chrome > (windows). It doesn't work on chrome on Linux boxes. It keeps on rep

Re: [squid-users] Can't stay logged in

2013-05-31 Thread CACook
On Wednesday, May 29, 2013 04:20:21 PM cac...@quantum-sci.com wrote: > > Does anyone know why I can't stay logged in to this site, with headers > paranoid? > http://www.cctvforum.com/ > > squid.conf: > http://pastebin.ca/2384770 > > Here's what happens when I give my username and password on

Re: [squid-users] OpenBSD + PF + Squid: forwarding loop

2013-05-31 Thread Loïc BLOT
Hello Rob, no this is the same machine :) -- Cordialement, Loïc BLOT, Expertise en Systèmes UNIX, Sécurité et Réseaux http://www.unix-experience.fr Le vendredi 31 mai 2013 à 04:58 -0700, Rob Sheldon a écrit : > On 2013-05-30 21:34, Loïc BLOT wrote: > > > Hello Rob, > > I use OpenBSD and squid 3

[squid-users] StoreID and concurrency?

2013-05-31 Thread csn233
I seem to be getting the occasional problem when running the same Youtube video at the same time on multiple browsers with the StoreID feature. If I don't run them at the same time, no problems and I see a nice caching (HIT) effect. The error basically is "an error occurred..." on the player windo

Re: [squid-users] OpenBSD + PF + Squid: forwarding loop

2013-05-31 Thread Marko Cupać
On Fri, 31 May 2013 04:58:03 -0700 Rob Sheldon wrote: > On 2013-05-30 21:34, Loïc BLOT wrote: > > > Hello Rob, > > I use OpenBSD and squid 3.3.4 in production environment, you'll > > exactly > > what you need here: > > http://www.unix-experience.fr/2013/create-a-powerfull-proxy-cache-with-squid

Re: [squid-users] OpenBSD + PF + Squid: forwarding loop

2013-05-31 Thread Rob Sheldon
On 2013-05-30 21:34, Loïc BLOT wrote: Hello Rob, I use OpenBSD and squid 3.3.4 in production environment, you'll exactly what you need here: http://www.unix-experience.fr/2013/create-a-powerfull-proxy-cache-with-squid-and-openbsd-2/#sthash.9SpWE1kn.dpbs [2] Have a nice day Thanks -- that l

Re: [squid-users] Same cache_dir for many squid process

2013-05-31 Thread Amos Jeffries
On 31/05/2013 4:39 p.m., Sekar Duraisamy wrote: Hello All, Thanks for your help. Which version of squid will support this SMP? Is there a option in cache_dir? Squid-3.2 and later all have SMP support. Amos

[squid-users] sslbump intercept with chrom[e|ium]

2013-05-31 Thread npf-mlists
Hello, I have squid 3.3.5 working fine with sslbump in intercept mode. It works fine in firefox (windows and linux), konqueror (linux), IE (windows) and chrome (windows). It doesn't work on chrome on Linux boxes. It keeps on reporting error on the certificates. I've installed the root-CA usin