[squid-users] Re: SQUID in TPROXY - do not resolve

2013-10-30 Thread Dr.x
hi amos , is there a method that let squid force its dns reply and ignore the client dns reply ??? = i mean if client x got 1.1.1.1 and squid got 2.2.2.2 i want client to go to 2.2.2.2 not to 1.1.1.1 = regards - Dr.x --

Re: [squid-users] caching problem in squid 3.2 vs 3.1

2013-10-30 Thread Ayham Abou Afach
HI Amos On 30/10/2013 2:51 a.m., Ayham Abou Afach wrote: Hi i have the folloing problem after moving from squid 3.1 to ( 3.2 or 3.3 ) with same config bandwidth saving decreases to about 50% what is the deffirance between versions related to caching behaviour ??? any one has a solution

Re: [squid-users] Re: SQUID in TPROXY - do not resolve

2013-10-30 Thread Amos Jeffries
On 30/10/2013 8:28 p.m., Dr.x wrote: hi amos , is there a method that let squid force its dns reply and ignore the client dns reply ??? = i mean if client x got 1.1.1.1 and squid got 2.2.2.2 i want client to go to 2.2.2.2 not to 1.1.1.1

Re: [squid-users] caching problem in squid 3.2 vs 3.1

2013-10-30 Thread Amos Jeffries
On 30/10/2013 9:10 p.m., Ayham Abou Afach wrote: On 30/10/2013 2:51 a.m., Ayham Abou Afach wrote: Hi i have the folloing problem after moving from squid 3.1 to ( 3.2 or 3.3 ) with same config bandwidth saving decreases to about 50% what is the deffirance between versions related to caching

[squid-users] invalid request

2013-10-30 Thread Cheikhou Dramé
Hi everybody , I'm a newbie in squid .I have many clientProcessRequest: Invalid request errors in my cache.log file . Is there a way to identify the client which sending those requests ? my transparent squid server is running on centos 6.4. Thanks. Cheikhou DRAME

[squid-users] squid url_rewrite_program

2013-10-30 Thread Sachin Gupta
Hi, Need inputs regarding squid url_rewrite_program. Squid in our deployment listens on multiple ports. Each set of ports is meant for a different purpose and specific actions are required for some specfic ports. We also have a url_rewrite_program which till now was working for all ports.

Re: [squid-users] squid url_rewrite_program

2013-10-30 Thread John Doe
From: Sachin Gupta ching...@gmail.com We want the url_rewrite_program to work only when traffic comes from a specific port only. url_rewrite_access + a port acl...? JD

[squid-users] decode kerberos messages

2013-10-30 Thread Carlos Defoe
Hi, It is possible to decode those negotiate_kerberos_auth debug messages? I tried base64 -d, but it shows a lot of garbage and almost nothing readable. Ex: negotiate_kerberos_auth.cc(315): pid=32562 :2013/10/30 13:32:45| negotiate_kerberos_auth: DEBUG: Got 'YR YIIF0w/very/big/code/here/0z3Q=='

[squid-users] Re: Squid 3.3.2 SMP Problem

2013-10-30 Thread Dr.x
hi all , ive tried that on kernel of centos 6.4 last one but it give me : [root@squid ~]# sysctl -w net.local.dgram.recvspace=262144 error: net.local.dgram.recvspace is an unknown key wt does that mean ? im trying ti use kernel of centos 6.4 without compiling it but i have kid

[squid-users] squid_kerb_auth: Unspecified GSS failure (W2K8)

2013-10-30 Thread Mihail Lukin
Hello, I'm trying to configure Squid 3.1 to authenticate through AD with W2K8 DC with Kerberos. I used this how-to: http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos on CentOS 6 box that I've joined to domain with `net ads join`. Now I'm getting the error in cache.log when I'm

[squid-users] Re: transparent proxy on remote box issue

2013-10-30 Thread WorkingMan
I hope I can refocus this question to the real problem. I am currently have a working VPN setup but once I add my policy routing rules it breaks the client's port 80 connection (everything else still good, apps still work. I don't any traffic going to my SQUID server. First of all I don't use

[squid-users] Re: SQUID in TPROXY - do not resolve

2013-10-30 Thread Dr.x
hi amos , my request is , i dont want to install squidguar don my machine , i want to use dns of squid except of that i mean i want to direct squid to norton dns , and in this case if the dns of clients and squid didnt match , the website or the request of client must be blocked ! iive tried :

[squid-users] Re: IPv6 + Intercept proxy

2013-10-30 Thread WorkingMan
Mike Cardwell squid-users at lists.grepular.com writes: * on the Wed, Oct 23, 2013 at 05:14:00PM +1300, Amos Jeffries wrote: For starters NAT has never been transparent proxy. NAT is the lazy admins replacement, using the proxy IP on outbound to avoid having to setup proper routing

[squid-users] Re: squid_kerb_auth: Unspecified GSS failure (W2K8)

2013-10-30 Thread Markus Moeller
Hi Mihail, Did you use export KRB5_KTNAME to point to the right keytab ? Is the keytab readable by the user under which squid runs ? Markus Mihail Lukin wrote in message news:CAAmm_rZ8jNoeFMRGthiYeHQ+GgSfmySFnw8708dwdDVUW3=r...@mail.gmail.com... Hello, I'm trying to configure Squid

[squid-users] Re: SQUID ERROR

2013-10-30 Thread Dr.x
hi , we dont see any attachments plz post squid.conf and cache.log file regards - Dr.x -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/SQUID-ERROR-tp4663015p4663016.html Sent from the Squid - Users mailing list archive at Nabble.com.

Re: [squid-users] Re: squid_kerb_auth: Unspecified GSS failure (W2K8)

2013-10-30 Thread Mihail Lukin
Hello, Markus! Sorry for not mentioning it at once, KRB5_KTNAME is being exported in /etc/sysconfig/squid and is readable by squid group. But there is still something wrong with it: keytab's access time is not changed neither when I restart squid not when I request an URL through the proxy. I

Re: [squid-users] Re: squid_kerb_auth: Unspecified GSS failure (W2K8)

2013-10-30 Thread Mihail Lukin
I don't know why access-time is not being updated, but strace has shown that keytab is being read successfully by squid_kerb_auth process. On Thu, Oct 31, 2013 at 8:15 AM, Mihail Lukin mihail.lu...@gmail.com wrote: Hello, Markus! Sorry for not mentioning it at once, KRB5_KTNAME is being

Re: [squid-users] squid url_rewrite_program

2013-10-30 Thread Sachin Gupta
Thanks John. does url_rewrite_access solve this? Sample below. I tried but doesnt seem to work. url_rewrite_program some_prog acl allow_port myportname xxx4 xxx5 url_rewrite_access allow allow_port Regards Sachin On Wed, Oct 30, 2013 at 9:51 PM, John Doe jd...@yahoo.com wrote: From: Sachin

Re: [squid-users] decode kerberos messages

2013-10-30 Thread Amos Jeffries
On 31/10/2013 6:02 a.m., Carlos Defoe wrote: Hi, It is possible to decode those negotiate_kerberos_auth debug messages? I tried base64 -d, but it shows a lot of garbage and almost nothing readable. It is a binary NTLMSSPI packet. I have put a simple decoder together for debugging purposes:

Re: [squid-users] Re: SQUID in TPROXY - do not resolve

2013-10-30 Thread Amos Jeffries
On 31/10/2013 7:52 a.m., Dr.x wrote: hi amos , my request is , i dont want to install squidguar don my machine , i want to use dns of squid except of that i mean i want to direct squid to norton dns , and in this case if the dns of clients and squid didnt match , the website or the request of