[squid-users] Re: Any Way To Check If Windows Updates Are Cached?

2013-09-04 Thread HillTopsGM
Helmut, you are the *BEST!!! * Thank you, Thank you, Thank you. I am completely amazed as to how well "*WSUS Offline Update*" works. Now I can really tweak the Proxy to be . . . well, a proxy! Again, Thank You for the suggestion. -- View this message in context: http://squid-web-proxy-cache

Re: [squid-users] Squid applying acls differently when transparent & non transparent proxy

2013-09-04 Thread Amos Jeffries
On 5/09/2013 2:40 a.m., Andrew Wood wrote: My Squid proxy which is being used to prevent access to inappropriate sites and to display a session splash / AUP page to public visitors on the public wifi VLAN subnet works great when transparently intercepting traffic via NAT/ iptables but intermit

Re: [squid-users] Re: Squid 3 doesn't overwrite/replace cached objects(?)

2013-09-04 Thread Amos Jeffries
On 4/09/2013 2:40 a.m., Antony Stone wrote: Why runs the parent >squid process as root and the child as user proxy? Is that normal? Is it >best practice? Should I chmod or chown cache directory? It is completely normal for a great many applications providing network services, and yes, it is best

Re: [squid-users] Re: URL blacklist/block and redirector

2013-09-04 Thread Amos Jeffries
On 4/09/2013 5:31 p.m., Sachin Gupta wrote: Hi, I came through quite a number of redirectors listed on the site: http://www.squid-cache.org/Misc/redirectors.html However was not able to decide which one of these suits my requirement. I will be having a list of URLs which need to be blocked wr

[squid-users] Re: Squid Reverse Proxy. Attempted connections to domains we do not host?

2013-09-04 Thread PSA4444
Hi Amos, We did not get a solution to this yet. The work around has been to disable http (port 80) and only run https (port 443) with a firewall in front of the proxy server. This blocked out 100% of these requests for now but I will need to re-enable it later. How can I disable this open-pr

Re: [squid-users] One squid instance, two WAN links, how to failover from primary to secondary link?

2013-09-04 Thread Alfredo Rezinovsky
El 04/09/13 17:22, Thomas Harold escribió: On 8/26/2013 6:41 AM, Nishant Sharma wrote: Hi Thomas, Thomas Harold wrote: In an instance where you have a single instance of squid running on a two WAN links as WAN #2 is very slow compared to WAN #1. Is this simply handled by changing the defaul

Re: [squid-users] One squid instance, two WAN links, how to failover from primary to secondary link?

2013-09-04 Thread Thomas Harold
On 8/26/2013 6:41 AM, Nishant Sharma wrote: Hi Thomas, Thomas Harold wrote: In an instance where you have a single instance of squid running on a two WAN links as WAN #2 is very slow compared to WAN #1. Is this simply handled by changing the default gateway of the server using the "ip route"

Re: [squid-users] Re: Any Way To Check If Windows Updates Are Cached?

2013-09-04 Thread Helmut Hullen
Hallo, HillTopsGM, Du meintest am 04.09.13: > "it's completed/refreshed every time you want."? > I was looking into it more and so can you confirm this for me; > If I run the updategnerator.exe file that will ONLY add the files I > don't have right at the moment? Surely. "wget" checks if the fi

[squid-users] Wondering Why This Isn't Caching

2013-09-04 Thread Geoffrey Schwartz
I have a page which gets cached by Firefox. Google Page Speed says it's cacheable as well. Squid does not cache it. I'm running Squid v3.3.8. My configuration is pretty standard... I'll post it if need be. The page is being served through Apache's mod_asis so I can explicitly set the headers.

[squid-users] Re: Any Way To Check If Windows Updates Are Cached?

2013-09-04 Thread HillTopsGM
Hi Helmut, You have my attention now! Helmut Hullen wrote > Hallo, HillTopsGM, > > Du meintest am 04.09.13: > > [wsusoffline] > >> Thanks for this tip - I know you have mentioned it before, but what I >> am trying to avoid is on an on going basis (every week) when there is >> an update, havin

Re: [squid-users] Reiser vs etx4

2013-09-04 Thread Alex Rousskov
On 09/04/2013 04:35 AM, Alfredo Rezinovsky wrote: > In the page reccomends reiserfs. So I tried to set up a squid for > 200Mbps squid using reiser and squid 3.3 > > I had a problem, every five to ten minutes, the system freezes and the > bandwith drops to a half for about 10 seconds. Yes, this is

Re: [squid-users] HTTPS Caching between Squid's Parent and Child

2013-09-04 Thread Alex Rousskov
On 09/04/2013 09:50 AM, Ghassan Gharabli wrote: > Is there any solution to cache HTTPS Traffic without installing a > certificate file at customer's machines?. In short, no. > Do you think that by using SSL Bump between Parent and Child Squids , > it would solve the problem No, it would not.

Re: [squid-users] Re: ERROR: This proxy does not support the 'rock' cache type. Ignoring.

2013-09-04 Thread Alex Rousskov
On 09/04/2013 01:28 AM, Ahmad wrote: > after i corrected rock storage and recompiled squid , > it worked , but wccp is no longer working with router ???! I believe WCCP registration timeouts when using Rock Store have been discussed before on this mailing list this year. I do not have a poin

Re: [squid-users] Re: Any Way To Check If Windows Updates Are Cached?

2013-09-04 Thread Helmut Hullen
Hallo, HillTopsGM, Du meintest am 04.09.13: [wsusoffline] > Thanks for this tip - I know you have mentioned it before, but what I > am trying to avoid is on an on going basis (every week) when there is > an update, having all 12 computers download the same file. > This is a great tool if you ar

[squid-users] Re: Any Way To Check If Windows Updates Are Cached?

2013-09-04 Thread HillTopsGM
Hey Eliezer Croitoru-2, You mentioned: > If you have a local windows network and server you can just add WSUS > service that will build a updates store which is better for many networks. Is that an actual part of the windows server (WSUS) or is it refering to what Helmut was referring to earlie

[squid-users] HTTPS Caching between Squid's Parent and Child

2013-09-04 Thread Ghassan Gharabli
Hi, I am trying to setup SSL-Bump between Parent Squid Proxy and the Child Proxy . I am using Squid Version : 3.3.8 for each Parent and Squid installed on the same system (Fedora 64-Bit) Configure Options : --enable-ssl --enable-ssl-crtd --enable-icap-client --with-filediscriptors=65536 --enable

[squid-users] Squid applying acls differently when transparent & non transparent proxy

2013-09-04 Thread Andrew Wood
My Squid proxy which is being used to prevent access to inappropriate sites and to display a session splash / AUP page to public visitors on the public wifi VLAN subnet works great when transparently intercepting traffic via NAT/ iptables but intermittently fails to block stuff when the client i

[squid-users] Re: Any Way To Check If Windows Updates Are Cached?

2013-09-04 Thread HillTopsGM
Hi Helmut Hullen, Thanks for this tip - I know you have mentioned it before, but what I am trying to avoid is on an on going basis (every week) when there is an update, having all 12 computers download the same file. This is a great tool if you are always doing fresh installs - that's fine - but

[squid-users] Re: squid active directory integration

2013-09-04 Thread Sandeep
Hi David, You can try the below steps: 1. Assume there is a user "bob" and he is member of "Admin Users" group. Execute the following command in terminal: # echo "bob Admin%20Users" | /usr/lib64/squid/wbinfo_group.pl And if you ge

Re: [squid-users] Re: squid active directory integration

2013-09-04 Thread Amos Jeffries
On 4/09/2013 9:44 p.m., Sandeep wrote: Great, thank you. I'm testing it two days. it works without problem. may ask you one question? I add in my these lines in my squid.conf -- external_acl_type In

[squid-users] Re: Squid 3 doesn't overwrite/replace cached objects(?)

2013-09-04 Thread uners
Thanks Antony for your explanation. Sounds reasonable to me. The thread is marked "solved". Regards, Bob -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-3-doesn-t-overwrite-replace-cached-objects-tp4661911p4661969.html Sent from the Squid - Users mail

[squid-users] Re: Squid 3 doesn't overwrite/replace cached objects(?)

2013-09-04 Thread uners
Thanks Antony for your explanation. Sounds reasonable. As the "production" process of Squid3 runs as user proxy and the cache disk contents belong to the same user, there shouldn't be a problem for Squid3 to overwrite/recycle the cached objects. The thread is marked "resolved". Regards, Bob -

[squid-users] Re: squid active directory integration

2013-09-04 Thread cheitac
hi all, I'm interesting is it possible to use space separated group? for example (Internet Users, Admin Users, ) or i need to rename those groups and remove or change spaces in it like tis(InternetUsers AdminUsers)? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabb

Re: [squid-users] Re: ERROR: This proxy does not support the 'rock' cache type. Ignoring.

2013-09-04 Thread Amos Jeffries
On 4/09/2013 7:28 p.m., Ahmad wrote: hi amos , thanks alot for clarification , but again i still have problems , after i corrected rock storage and recompiled squid , it worked , but wccp is no longer working with router ???! but if i use port in my explorer it works You may have

Re: [squid-users] Any Way To Check If Windows Updates Are Cached?

2013-09-04 Thread Eliezer Croitoru
It really depends on the environment and links speed you do have now. If you do a very specific thing which is use a cache_peer only for windows updates while using a hierarchy like this: Main LB and router proxy -> domain specific proxy cache_peer on the domain specific cache_peer instance or mac

Re: [squid-users] Reiser vs etx4

2013-09-04 Thread Eliezer Croitoru
Hey there, On 09/04/2013 01:35 PM, Alfredo Rezinovsky wrote: > In the page reccomends reiserfs. So I tried to set up a squid for > 200Mbps squid using reiser and squid 3.3 > Since squid works in L1 and L2 directories the design meant for every FS that has limits which reiser has a limit on your s

Re: [squid-users] Reiser vs etx4

2013-09-04 Thread Helmut Hullen
Hallo, Alfredo, Du meintest am 04.09.13: > In the page reccomends reiserfs. So I tried to set up a squid for > 200Mbps squid using reiser and squid 3.3 For the squid cache? Strange. That's a cache, no archive. Journalling shouldn't be necessary. Viele Gruesse! Helmut

Re: [squid-users] Reiser vs etx4

2013-09-04 Thread Antony Stone
On Wednesday 04 September 2013 at 12:35:50, Alfredo Rezinovsky wrote: > I know people leaving linux in favor of BSD to be able to use > zfs. Anyone knows the status and usability of zfs in linux ? It's a licensing thing, not a technical one. ZFS works fine on Linux, but its licence is incompati

[squid-users] Reiser vs etx4

2013-09-04 Thread Alfredo Rezinovsky
In the page reccomends reiserfs. So I tried to set up a squid for 200Mbps squid using reiser and squid 3.3 I had a problem, every five to ten minutes, the system freezes and the bandwith drops to a half for about 10 seconds. I tried tuning squid in many ways. And I noticed reiser flushes the

[squid-users] Re: squid active directory integration

2013-09-04 Thread Sandeep
Great, thank you. I'm testing it two days. it works without problem. may ask you one question? I add in my these lines in my squid.conf -- external_acl_type InetUsers_Ldap ttl=0 children=5 %LOGIN /us

Re: [squid-users] Re: Re: ext_kerberos_ldap_group_acl vs ext_ldap_group_acl

2013-09-04 Thread Eugene M. Zheganin
Hi. On 04.09.2013 11:01, Markus Moeller wrote: > >> Are you still interested in tcpdump captures you mentioned in previous >> letter ? >> > > Yes I would still like to see it. > (looks like for some reason mailing list tracker ate this message - my relay says it's send, but it doesn't appear in th

[squid-users] Re: squid active directory integration

2013-09-04 Thread Sandeep
Great, thank you. I'm testing it two days. it works without problem. may ask you one question? I add in my these lines in my squid.conf -- external_acl_type InetUsers_Ldap ttl=0 children=5 %LOGIN /us

[squid-users] Re: squid active directory integration

2013-09-04 Thread Sandeep
HI, I try wbinfo_group.pl with default config and after that modified, But I received error bellow. - [root@SQUIDSRV01 squid]# echo “squidtest restrictedinet

[squid-users] Re: squid active directory integration

2013-09-04 Thread Sandeep
Hi David, Add the following line in samba configuration: idmap config * : backend = rid Restart winbind service and give it a try. Let me know the result. Best Regards, Sandeep -- View this message in context: http://squid-web-proxy-cache.1019090.n4

[squid-users] Re: squid active directory integration

2013-09-04 Thread Sandeep
Hi David, You can try "/usr/lib64/squid/wbinfo_group.pl". For testing purpose run following in terminal: # echo “username windowsgroup” | /usr/lib64/squid/wbinfo_group.pl -d And if it return something as: Sending OK to squid OK Then you can use it in your squid config. If you are using kerber

Re: [squid-users] Re: Log Squid logs to Syslog server on the Network

2013-09-04 Thread Kinkie
On Wed, Sep 4, 2013 at 7:32 AM, Sachin Gupta wrote: >> Hi, Hi Sachin, >> Is there a way to log SQUID log messages to a Syslog server listening on the >> network? Yes: http://wiki.squid-cache.org/Features/LogModules#Module:_System_Log -- /kinkie

[squid-users] Re: ERROR: This proxy does not support the 'rock' cache type. Ignoring.

2013-09-04 Thread Ahmad
hi amos , thanks alot for clarification , but again i still have problems , after i corrected rock storage and recompiled squid , it worked , but wccp is no longer working with router ???! but if i use port in my explorer it works when i comment smp options and restart squid , i

Re: [squid-users] Any Way To Check If Windows Updates Are Cached?

2013-09-04 Thread Helmut Hullen
Hallo, HillTopsGM, Du meintest am 03.09.13: > I have basically done everything the FAQ has said with regard to > optimizing the settings for windows updates. > I have done a few, and I am wondering if there is any way to check > what has been cached? You should really use something like "wsusoff