[squid-users] defined localnet to mean your local clients ???

2013-08-23 Thread HillTopsGM
In trying to configure the squid.conf file to cache windows updates as per the wiki on this page here: http://wiki.squid-cache.org/SquidFaq/WindowsUpdate http://wiki.squid-cache.org/SquidFaq/WindowsUpdate I am having trouble getting squid to run. If I paste this code: acl windowsupdate

Re: [squid-users] defined localnet to mean your local clients ???

2013-08-23 Thread Amos Jeffries
On 23/08/2013 6:13 p.m., HillTopsGM wrote: In trying to configure the squid.conf file to cache windows updates as per the wiki on this page here: http://wiki.squid-cache.org/SquidFaq/WindowsUpdate http://wiki.squid-cache.org/SquidFaq/WindowsUpdate I am having trouble getting squid to run. If I

[squid-users] Exchange 2010 and 502 Bad Gateway

2013-08-23 Thread Bill Houle
For the next in my continuing Exchange saga, let's talk 502 errors. I've got a couple different instances. 1) ActiveSync sends periodic 'Ping' requests to implement its server push feature. If I understand the process correctly, the client sends an empty (Content-Length: 0) keep-alive HTTP

[squid-users] Re: defined localnet to mean your local clients ???

2013-08-23 Thread HillTopsGM
Ok, I have added this line of code acl localnet src 192.168.1.0/24 just above where it lists all the safe ports. It appears to restart ok with these 2 lines enabled now. *http_access allow CONNECT wuCONNECT localnet http_access allow windowsupdate localnet* Now I thought I might try a test

Re: [squid-users] Re: cache_dir size v.s. available RAM

2013-08-23 Thread Helmut Hullen
Hallo, HillTopsGM, Du meintest am 22.08.13: *Question 2:* Seeing how this is significantly larger that the default 100 MB should I consider increasing the size of the 16 256 in the above sample code? That depends! I know many squid installations in schools, with about 200 ... 500 clients

[squid-users] Re: defined localnet to mean your local clients ???

2013-08-23 Thread HillTopsGM
I don't know if this helps, but this is everything that is NOT commented out in my squid.conf file. mysquid.conf http://squid-web-proxy-cache.1019090.n4.nabble.com/file/n4661731/mysquid.conf It looks like this: acl manager proto cache_object acl localhost src 127.0.0.1/32 ::1 acl

Re: [squid-users] Very strange DNS problem

2013-08-23 Thread Eliezer Croitoru
On 08/22/2013 07:43 PM, jo...@primebuchholz.com wrote: After the 5-minute retry shown above expires, the original record reappears. Ideas? Should I be looking at squid, or bind for the issue? Has anyone seen anything similar before? All other proxy and dns operations work perfectly,

Re: [squid-users] Re: defined localnet to mean your local clients ???

2013-08-23 Thread Amos Jeffries
On 23/08/2013 8:18 p.m., HillTopsGM wrote: Ok, I have added this line of code acl localnet src 192.168.1.0/24 just above where it lists all the safe ports. It appears to restart ok with these 2 lines enabled now. *http_access allow CONNECT wuCONNECT localnet http_access allow windowsupdate

Re: [squid-users] Re: defined localnet to mean your local clients ???

2013-08-23 Thread Amos Jeffries
Ah, you beat me to it. :-) Response inline as usual ... On 23/08/2013 8:47 p.m., HillTopsGM wrote: I don't know if this helps, but this is everything that is NOT commented out in my squid.conf file. mysquid.conf http://squid-web-proxy-cache.1019090.n4.nabble.com/file/n4661731/mysquid.conf It

Re: [squid-users] Very strange DNS problem

2013-08-23 Thread Amos Jeffries
On 23/08/2013 4:43 a.m., jo...@primebuchholz.com wrote: Greetings List, This is a really strange problem, that I can't tell if it's squid or bind causing it. Here's the summary: For only ONE address, whenever I attempt to access it through the proxy, the record disappears from DNS, and the

Re: [squid-users] Very strange DNS problem

2013-08-23 Thread John E.P. Hynes
On 08/23/2013 05:04 AM, Amos Jeffries wrote: On 23/08/2013 4:43 a.m., jo...@primebuchholz.com wrote: Greetings List, This is a really strange problem, that I can't tell if it's squid or bind causing it. Here's the summary: For only ONE address, whenever I attempt to access it through the

Re: [squid-users] Very strange DNS problem

2013-08-23 Thread John E.P. Hynes
On 08/23/2013 04:50 AM, Eliezer Croitoru wrote: On 08/22/2013 07:43 PM, jo...@primebuchholz.com wrote: After the 5-minute retry shown above expires, the original record reappears. Ideas? Should I be looking at squid, or bind for the issue? Has anyone seen anything similar before? All other

Re: [squid-users] Exchange 2010 and 502 Bad Gateway

2013-08-23 Thread Amos Jeffries
On 23/08/2013 8:18 p.m., Bill Houle wrote: For the next in my continuing Exchange saga, let's talk 502 errors. I've got a couple different instances. 1) ActiveSync sends periodic 'Ping' requests to implement its server push feature. If I understand the process correctly, the client sends an

Re: [squid-users] Re: cache_dir size v.s. available RAM

2013-08-23 Thread Amos Jeffries
On 23/08/2013 5:27 p.m., HillTopsGM wrote: Thanks for the Reply Amos. As per my original post, can anyone comment on the original 2 questions? *Question 1:* If I wanted to dedicate 3 GB of the Ram to the index, would that mean that I should set my cache_dir to 3072? cache_dir ufs

Re: [squid-users] squid deployment in 6Gbit network with tproxy as L2 bridge.

2013-08-23 Thread Amos Jeffries
On 22/08/2013 8:47 p.m., Pawel Mojski wrote: Hi Guys; I have some intresting deployment scenario. I have to install squid box(es) as L2 bridge in 10Gbit network with 6Gbit amonunt of traffic in peak. Squid is used to forward traffic to our ecap adapter. Ofcourse it's impossible to handle that

Re: [squid-users] Re: refresh_pattern AND reload-into-ims

2013-08-23 Thread Amos Jeffries
On 23/08/2013 5:38 p.m., HillTopsGM wrote: Thanks again Amos for the reply. I am not sure what you ment by: This encourages caching for the peak load period and lets later clients get the slower MISS. What is 'MISS'? This defines it best: http://en.wikipedia.org/wiki/Cache_%28computing%29

Re: [squid-users] how do I block facebook?

2013-08-23 Thread Amos Jeffries
On 21/08/2013 11:58 p.m., Alfredo Rezinovsky wrote: El 20/08/13 21:21, junio escribió: I'm okay to block facebook in the company I work for, I can not redirect port 443 successfully. -- View this message in context:

Re: [squid-users] how do I block facebook?

2013-08-23 Thread Eliezer Croitoru
On 08/23/2013 01:29 PM, Amos Jeffries wrote: Thinking of which there is the dst_as ACL type in Squid to block based on the ASN number. Also requires a whois server configured in the as_whois_server directive. PS. I'm not sure how well it works since IPv6 support was added. Feedback welcome.

Re: [squid-users] squid deployment in 6Gbit network with tproxy as L2 bridge.

2013-08-23 Thread Pawel Mojski
W dniu 2013-08-23 12:12, Amos Jeffries pisze: On 22/08/2013 8:47 p.m., Pawel Mojski wrote: Hi Guys; I have some intresting deployment scenario. I have to install squid box(es) as L2 bridge in 10Gbit network with 6Gbit amonunt of traffic in peak. Squid is used to forward traffic to our ecap

Re: [squid-users] squid deployment in 6Gbit network with tproxy as L2 bridge.

2013-08-23 Thread Pawel Mojski
W dniu 2013-08-23 14:08, Pawel Mojski pisze: W dniu 2013-08-23 12:12, Amos Jeffries pisze: On 22/08/2013 8:47 p.m., Pawel Mojski wrote: Hi Guys; I have some intresting deployment scenario. I have to install squid box(es) as L2 bridge in 10Gbit network with 6Gbit amonunt of traffic in peak.

Re: [squid-users] squid deployment in 6Gbit network with tproxy as L2 bridge.

2013-08-23 Thread Eliezer Croitoru
Hey, There are setups like this you have and you better make sure you have something that shows you the status of the proxies and the LB all the time so you can differentiate between the load times and boxes. a 32 cores proxy can handle about 1.5 GB of traffic in cases that there is a very

Re: [squid-users] squid deployment in 6Gbit network with tproxy as L2 bridge.

2013-08-23 Thread Amos Jeffries
On 24/08/2013 12:10 a.m., Pawel Mojski wrote: W dniu 2013-08-23 14:08, Pawel Mojski pisze: W dniu 2013-08-23 12:12, Amos Jeffries pisze: On 22/08/2013 8:47 p.m., Pawel Mojski wrote: Hi Guys; I have some intresting deployment scenario. I have to install squid box(es) as L2 bridge in 10Gbit

Re: [squid-users] squid deployment in 6Gbit network with tproxy as L2 bridge.

2013-08-23 Thread Pawel Mojski
Hi. W dniu 2013-08-23 14:16, Eliezer Croitoru pisze: Hey, There are setups like this you have and you better make sure you have something that shows you the status of the proxies and the LB all the time so you can differentiate between the load times and boxes. It's nothing production yet.

Re: [squid-users] squid deployment in 6Gbit network with tproxy as L2 bridge.

2013-08-23 Thread Pawel Mojski
W dniu 2013-08-23 14:25, Amos Jeffries pisze: On 24/08/2013 12:10 a.m., Pawel Mojski wrote: W dniu 2013-08-23 14:08, Pawel Mojski pisze: W dniu 2013-08-23 12:12, Amos Jeffries pisze: On 22/08/2013 8:47 p.m., Pawel Mojski wrote: Hi Guys; I have some intresting deployment scenario. I have to

[squid-users] Re: refresh_pattern AND reload-into-ims

2013-08-23 Thread HillTopsGM
The problem with this is that for it to work your cache size has to be equal to the total traffic used by you in 1 year. Any idea how much you and all your software browse and download in the course of a year? Most ISP situations I've seen caches are only able to store the last weeks worth

[squid-users] Re: defined localnet to mean your local clients ???

2013-08-23 Thread HillTopsGM
I appreciate you helping me Amos! Thanks Again in Advance I am using Squid v3.1.2 because that is what apt-get pulled from the repository. Hopefully I'll be able to sum up my response to your last 2 posts in a way that makes sense. *The First Thing I'd like to inquire about*: you mentioned

[squid-users] Re: [patch] Re: [squid-users] X-Forwarded-For and cache_peer_access -- Fixed!

2013-08-23 Thread David Isaacs
Amos, I've also come across what Michael identified. This is actually a bug, right? The checklist() constructor initialises checklist.src_addr correctly based on acl_uses_indirect_client but it is then overridden with the request's true client_addr by the calling function. I filed it as #3895