Re: [squid-users] error with file system

2013-08-21 Thread Pavel Kazlenka
Hi Carlos, Please note, that client's requests also spend file descriptors. Use netstat to find the exact number. If you use ubuntu you could be interested in this thread too: http://www.squid-cache.org/mail-archive/squid-users/201212/0276.html Best wishes, Pavel On 08/20/2013 09:57 PM,

Re: [squid-users] Exchange WebServices (EWS)

2013-08-21 Thread Pavel Kazlenka
Hi Matthew, If squid doesn't stop any http requests/responses than it can be that some part of traffic from client goes (or tries to go) directly to server and the other part goes through squid. This could be caused by e.g. incorrect NAT settings or routing. You could install some tool like

Re: [squid-users] how do I block facebook?

2013-08-21 Thread Pavel Kazlenka
Hi, You can use dstdomain acl type. See details at http://www.squid-cache.org/Doc/config/acl/ Best wishes, Pavel On 08/21/2013 03:21 AM, junio wrote: I'm okay to block facebook in the company I work for, I can not redirect port 443 successfully. -- View this message in context:

Re: [squid-users] Re: TCP_MISS/Squid-Error: ERR_CONNECT_FAIL

2013-08-21 Thread Amos Jeffries
On 20/08/2013 9:40 p.m., SaRaVanAn wrote: Hi Amos, I changed my configuration file as you suggested. There is an another clarification from my side. I could able to see TCP_HIT only when I clear browser cache manually . The behavior is same for all the websites I have tried to connect. Is

Re: [squid-users] range request in url_rewrite

2013-08-21 Thread Amos Jeffries
On 20/08/2013 11:43 p.m., Alfredo Rezinovsky wrote: I have a url_rewrite_program and I want it to know if the request includes a range, and the value of the range. What for please? and in what Squid version? Amos

Re: [squid-users] Normalizing user-agent and accept-encoding

2013-08-21 Thread Amos Jeffries
On 21/08/2013 12:00 a.m., jabourbih wrote: Using Squid in an accelerator (reverse proxy) configuration, I'd like to normalize the user-agent and accept-encoding headers *before* Squid generates its cache key. In other words, I want to ensure that Squid does not cache different responses for

Re: [squid-users] tproxy and DNS

2013-08-21 Thread Amos Jeffries
On 21/08/2013 12:51 a.m., Alfredo Rezinovsky wrote: With tproxy squid uses the original source IP address as source IP for the request There's a way to force the use of the original server destination IP instead of using a DNS query? This is the default for intercepted traffic in Squid-3.2

Re: [squid-users] squid 3.1.10 page allocation failure. order:1, mode:0x20

2013-08-21 Thread Amos Jeffries
On 21/08/2013 1:31 a.m., inittab wrote: Hello, Thanks for the suggestions. I've moved up to squid version 3.3.5, changed the raid5 into a raid0, tweaked the value of cache_dir to 10, moved the acl manager lines, removed hierarchy_stoplist, and enabled memory_pools. I have also added RPS

Re: [squid-users] Forcing Windows Automatic Updates to us Proxy - Question about FAQ

2013-08-21 Thread Amos Jeffries
On 21/08/2013 1:36 p.m., Helmut Hullen wrote: Hallo, HillTopsGM, Du meintest am 20.08.13: At the end of this FAQ page: http://wiki.squid-cache.org/SquidFaq/WindowsUpdate http://wiki.squid-cache.org/SquidFaq/WindowsUpdate they give some windows command prompt commands. Do these apply to all of

Re: [squid-users] SslBumped request: It is an encapsulated request do not authenticate

2013-08-21 Thread Amos Jeffries
On 21/08/2013 1:59 p.m., Daniel Niasoff wrote: Hi, We are using Squid with SslBump/ Our users are sporadically getting access denied errors so I did a bit of debugging and saw this. 2013/08/21 01:24:49.900 kid1| Acl.cc(336) matches: ACLList::matches: checking authenticated 2013/08/21

[squid-users] Re: tproxy and DNS

2013-08-21 Thread Ahmad
well , but what is the benefit of that ?? - Mr.Ahmad -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/tproxy-and-DNS-tp4661670p4661694.html Sent from the Squid - Users mailing list archive at Nabble.com.

Re: [squid-users] [NEED HELP] TPROXY + L2 WCCP + multi cpu

2013-08-21 Thread Amos Jeffries
On 21/08/2013 1:17 a.m., Mohsen Dehghani wrote: Hi team I have already implemented tproxy + L2 wccp and it works perfectly except one: squid just uses one cpu(core) and other cores on a DELL R710 are wasted. I have about 140 Mbps traffic and it utilizes 50% of one core. When decided to run

Re: [squid-users] Re: tproxy and DNS

2013-08-21 Thread Amos Jeffries
On 21/08/2013 10:34 p.m., Ahmad wrote: well , but what is the benefit of that ?? TPROXY is an abbreviation of Transparent PROXY. It is the *real* behaviour behind the term. To make as few alterations to the traffic flow as possible. The NAT interception proxy behaviour has been confused

Re: [squid-users] range request in url_rewrite

2013-08-21 Thread Alfredo Rezinovsky
El 21/08/13 05:15, Amos Jeffries escribió: On 20/08/2013 11:43 p.m., Alfredo Rezinovsky wrote: I have a url_rewrite_program and I want it to know if the request includes a range, and the value of the range. What for please? and in what Squid version? Amos Version 3.HEAD. 1. I want my

Re: [squid-users] how do I block facebook?

2013-08-21 Thread Alfredo Rezinovsky
El 20/08/13 21:21, junio escribió: I'm okay to block facebook in the company I work for, I can not redirect port 443 successfully. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/how-do-I-block-facebook-tp4661678.html Sent from the Squid - Users mailing

Re: [squid-users] error with file system

2013-08-21 Thread Carlos Defoe
Hi Pavel, thanks for you answer. Yes, I know. Linux lsof command lists all of it, including sockets, pipes. The problem should not be too many open files, since the limit is configured to 65535 and applied in both squid and OS. I have checked with su squid ; ulimit -n, it shows 65535. In the

Re: [squid-users] kerberos keytab

2013-08-21 Thread Carlos Defoe
I'm not sure, but if you use a computer account instead of a user account, you will have not the password never expires option. I think is just two ways to do the same. I remember i read that the machine account used with msktutil is a better option than the user account with password never

[squid-users] How can I get a separated logifle of denied URL by acl?

2013-08-21 Thread OSUMI Yusuke
Hi, I'm using squid 3.1 to block HTTP requests by my customized URL blacklists. squid.conf: --- acl blacklist_regex url_regex /usr/local/squid/etc/blacklist.txt http_access deny blacklist_regex --- Then, I want to get blocked requests from a logfile. Because my

[squid-users] Re: Forcing Windows Automatic Updates to us Proxy - Question about FAQ

2013-08-21 Thread HillTopsGM
Helmut / Amos, Thanks for the help. If I may repeat back to you in my own words (and ask a question) to make sure that I understand what it is that is being said: *Question 1:* I do not actually have to run these command lines UNLESS it appears that Windows is not using the proxy - is that

[squid-users] Removing overlapping subdomains from blacklists

2013-08-21 Thread Andrew Wood
Hi Can someone please help me work out an algorithm to remove overlapping subdomains from a blackclist such as shallalist to prevent errors such as: ERROR: 'interracialcandy.tumblr.com' is a subdomain of '.tumblr.com' 2013/08/21 17:18:41| ERROR: because of this '.tumblr.com' is ignored to

[squid-users] cache_dir size v.s. available RAM

2013-08-21 Thread HillTopsGM
*MY MAIN GOAL: Cache all Windows Updates* I have a little EeeBox that I want to dedicate MAINLY to Windows Updates Unless someone can give me a reason why I'd ever want to 're-download' or refresh any particular Windows Update that might already be stored in the Cache I plan to dedicate LOTS of

[squid-users] refresh_pattern AND reload-into-ims

2013-08-21 Thread HillTopsGM
I have read what . . . reload-into-ims . . . is supposed to mean here: http://www.squid-cache.org/Versions/v3/3.1/cfgman/refresh_pattern.html http://www.squid-cache.org/Versions/v3/3.1/cfgman/refresh_pattern.html Basically this is all that it says: (QUOTE) reload-into-ims changes client

Re: [squid-users] cache_dir size v.s. available RAM

2013-08-21 Thread Helmut Hullen
Hallo, HillTopsGM, Du meintest am 21.08.13: *MY MAIN GOAL: Cache all Windows Updates* What about wsusoffline? http://www.wsusoffline.net/ http://www.wsusoffline.net/docs/ That may be a better way than using the proxy cache. There is a Windows and a Linux version. Viele

[squid-users] Re: cache_dir size v.s. available RAM

2013-08-21 Thread HillTopsGM
That's really interesting! I'll look into it a little closer, however, I already have the hardware, and there is the potential to use the system for other program updates within the network. I thought that I'd /start/ by focusing on something like Windows Updates, with the idea that I could

Re: [squid-users] Removing overlapping subdomains from blacklists

2013-08-21 Thread Marcus Kool
On Wed, Aug 21, 2013 at 05:27:55PM +0100, Andrew Wood wrote: Hi Can someone please help me work out an algorithm to remove overlapping subdomains from a blackclist such as shallalist to prevent errors such as: ERROR: 'interracialcandy.tumblr.com' is a subdomain of '.tumblr.com'

Re: [squid-users] Re: Forcing Windows Automatic Updates to us Proxy - Question about FAQ

2013-08-21 Thread Helmut Hullen
Hallo, HillTopsGM, If I may repeat back to you in my own words (and ask a question) to make sure that I understand what it is that is being said: *Question 1:* I do not actually have to run these command lines UNLESS it appears that Windows is not using the proxy - is that correct?

Re: [squid-users] How can I get a separated logifle of denied URL by acl?

2013-08-21 Thread Amos Jeffries
On 22/08/2013 2:01 a.m., OSUMI Yusuke wrote: Hi, I'm using squid 3.1 to block HTTP requests by my customized URL blacklists. squid.conf: --- acl blacklist_regex url_regex /usr/local/squid/etc/blacklist.txt http_access deny blacklist_regex --- Then, I want

Re: [squid-users] refresh_pattern AND reload-into-ims

2013-08-21 Thread Amos Jeffries
On 22/08/2013 4:37 a.m., HillTopsGM wrote: I have read what . . . reload-into-ims . . . is supposed to mean here: http://www.squid-cache.org/Versions/v3/3.1/cfgman/refresh_pattern.html http://www.squid-cache.org/Versions/v3/3.1/cfgman/refresh_pattern.html Basically this is all that it says:

Re: [squid-users] Re: cache_dir size v.s. available RAM

2013-08-21 Thread Amos Jeffries
On 22/08/2013 5:59 a.m., HillTopsGM wrote: That's really interesting! I'll look into it a little closer, however, I already have the hardware, and there is the potential to use the system for other program updates within the network. I thought that I'd /start/ by focusing on something like