Re: [squid-users] tcp_outgoing_address?

2013-10-11 Thread Alex Domoradov
does this setting tcp_outgoing_address can help me? yes, it does, but you need to configure PBR (Policy Base Routing). You can find more at http://lartc.org/howto/lartc.rpdb.multiple-links.html#AEN298 acl user_of_dep1 src 192.168.1.0/24 acl user_of_dep2 src 192.168.2.0/24 acl user_of_dep3 src

Re: [squid-users] acl bandomain dstdomain -i domain.com cannot work

2013-09-29 Thread Alex Domoradov
Have you added something like http_deny bandomain all ? On Sun, Sep 29, 2013 at 10:29 AM, Ding Guigeng guigeng.d...@gmail.com wrote: i defined an acl like this: acl bandomain dstdomain -i google.com then squid -k reconfig but when i visiting the website google.com in IE,it's not be denied.

Re: [squid-users] Making Squid 3 use a specific IP address or NIC for internet traffic

2013-07-18 Thread Alex Domoradov
It working. What exactly doesn't work? On Thu, Jul 18, 2013 at 1:40 PM, Nikolas Kallis n...@nikolaskallis.com wrote: Hello, My server has two internet connections via two NIC's. I am wanting to make Squid 3 use only one of the internet connections for internet traffic. How can this be

Re: [squid-users] Re: A lot of TCP_REFRESH_UNMODIFIED after upgrading squid

2013-06-11 Thread Alex Domoradov
Amos, any idea? On Tue, May 28, 2013 at 1:00 PM, Alex Domoradov alex@gmail.com wrote: On Tue, May 28, 2013 at 9:37 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 28/05/2013 5:17 a.m., Alex Domoradov wrote: Any suggestions? One thing you should be aware of is that between 2.6 and 3.3

Re: [squid-users] Re: A lot of TCP_REFRESH_UNMODIFIED after upgrading squid

2013-06-11 Thread Alex Domoradov
On Tue, Jun 11, 2013 at 11:21 AM, Eliezer Croitoru elie...@ngtech.co.il wrote: On 6/11/2013 10:56 AM, Alex Domoradov wrote: Amos, any idea? Just asking. do you understand the difference between a TCP_HIT and TCP_REFRESH_UNMODIFIED ?? Looking at the wiki again it seems like it would

[squid-users] squid and webdav caching

2013-06-05 Thread Alex Domoradov
Hello, is there possibility to cache webdav (subversion) at all? As I found in google there was experimental option extension_methods. But I don't see such option in 3.1, 3.2, 3.3. Any advise?

Re: [squid-users] squid and webdav caching

2013-06-05 Thread Alex Domoradov
On Wed, Jun 5, 2013 at 6:55 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 6/06/2013 3:51 a.m., Alex Domoradov wrote: Hello, is there possibility to cache webdav (subversion) at all? As I found in google there was experimental option extension_methods. But I don't see such option in 3.1

Re: [squid-users] Re: A lot of TCP_REFRESH_UNMODIFIED after upgrading squid

2013-05-28 Thread Alex Domoradov
On Tue, May 28, 2013 at 9:37 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 28/05/2013 5:17 a.m., Alex Domoradov wrote: Any suggestions? One thing you should be aware of is that between 2.6 and 3.3 Squid gained a huge amount of HTTP/1.1 feature support. Including a lot of caching

[squid-users] Re: A lot of TCP_REFRESH_UNMODIFIED after upgrading squid

2013-05-27 Thread Alex Domoradov
Any suggestions? On Sun, May 26, 2013 at 10:00 PM, Alex Domoradov alex@gmail.com wrote: Hello all, I got a strange behavior after I have upgraded squid from 2.6.STABLE21 to 3.3.5 on the parent proxy server. I have a file in the cache # zcat /var/log/squid/store.log-20130519.gz | grep

Re: [squid-users] Block all known image files with squid?

2013-05-26 Thread Alex Domoradov
You could try something like following acl FORBIDDEN_EXT urlpath_regex \.(jpg|png|jpeg|gif|bmp|ico)$ http_access deny FORBIDDEN_EXT also you could try use of req_mime_type acl type On Sun, May 26, 2013 at 12:47 PM, Squidblacklist webmas...@squidblacklist.org wrote: Anyone ever tried to block

[squid-users] A lot of TCP_REFRESH_UNMODIFIED after upgrading squid

2013-05-26 Thread Alex Domoradov
Hello all, I got a strange behavior after I have upgraded squid from 2.6.STABLE21 to 3.3.5 on the parent proxy server. I have a file in the cache # zcat /var/log/squid/store.log-20130519.gz | grep 0295 1368817711.745 SWAPOUT 00 0295 83D4FBB382014271606DD58FADD64E98 200 1368817554

Re: [squid-users] Compiling squid-3.3.5 with SSL on RedHat EL 6

2013-05-22 Thread Alex Domoradov
I think the easiest way to find out with which version of openssl was link squid is to use ldd # ldd /usr/sbin/squid | grep ssl libssl.so.10 = /usr/lib64/libssl.so.10 (0x7ff8b13d6000) On Wed, May 22, 2013 at 8:42 AM, Eliezer Croitoru elie...@ngtech.co.il wrote: On 5/22/2013 8:20 AM,

Re: [squid-users] Squid: how to link inbound IPv4 + multiple port connections to unique outbound IPv6's

2013-05-22 Thread Alex Domoradov
I have similar issue. Try to upgrade at least to squid-3.2 On Wed, May 22, 2013 at 11:47 AM, bilderberger marketqu...@googlemail.com wrote: I'm trying to setup a squid proxy that will accept multiple inbound connections on one IPv4 across a range of ports, and for each port connection to

[squid-users] Option name doesn't work in cache_peer

2013-05-22 Thread Alex Domoradov
Hello all, I have the following squid.conf acl parent_squid peername PARENT_SQUID acl FILE_TO_CACHE urlpath_regex \.(zip|iso|rar)$ acl TEST dstdomain storage.example.net cache_peer 192.168.100.50 parent 3128 3130 name=PARENT_SQUID connect-timeout=7 cache_peer_access 192.168.100.50 allow TEST

Re: [squid-users] I am please to release 3.3.5 + 3.HEAD RPM for centos 6.4.

2013-05-21 Thread Alex Domoradov
Thanks for the rpm, but I can't find src.rpm for squid-3.3.5. Could you point me? On Tue, May 21, 2013 at 5:52 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: Another mirror is at: http://www2.ngtech.co.il/rpm/centos/6/x86_64/ which is much faster(GB over 0.7 KB) Eliezer On 5/21/2013

Re: [squid-users] Strange behavior in selection of tcp_outgoing_address

2013-05-20 Thread Alex Domoradov
So I need to upgrade at least to squid 3.2? 3.1.23 wouldn't be enough? On Mon, May 20, 2013 at 10:16 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 20/05/2013 9:37 a.m., Alex Domoradov wrote: Hello all, I have encountered with strange issue in selection of tcp_outgoing_address. I have linux

Re: [squid-users] Strange behavior in selection of tcp_outgoing_address

2013-05-20 Thread Alex Domoradov
ok, I will try 3.2 On Mon, May 20, 2013 at 1:48 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 20/05/2013 8:34 p.m., Alex Domoradov wrote: So I need to upgrade at least to squid 3.2? 3.1.23 wouldn't be enough? Probably not. Most of the issues with tcp_outgoing_address required a major

[squid-users] Strange behavior in selection of tcp_outgoing_address

2013-05-19 Thread Alex Domoradov
Hello all, I have encountered with strange issue in selection of tcp_outgoing_address. I have linux box with CentOS-6.4 x64. Is default getaway for a few vlans. On the router is installed squid # squid -v Squid Cache: Version 3.1.10 configure options: '--build=x86_64-redhat-linux-gnu'

Re: [squid-users] Fwd: config squid to set specific acl delay pools for username and then set it to the ip addr of username

2013-05-13 Thread Alex Domoradov
On Mon, May 13, 2013 at 11:18 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 13/05/2013 5:54 p.m., Alex Domoradov wrote: You can use acl apr, for example acl BIG_BOSS arp 01:02:03:04:05:06 On Mon, May 13, 2013 at 8:11 AM, Daniyal Khorashadi Zadeh wrote: Assume your executive

Re: [squid-users] Looking for squid spec file

2013-05-13 Thread Alex Domoradov
For which version of squid do you need spec file? On Mon, May 13, 2013 at 3:02 PM, Eliezer Croitoru elie...@ngtech.co.il wrote: Since I had a little trouble and my old spec file to create RPM for CentOS I am looking for one. I remember a nice guy from here that had a SPEC file. If you do

Re: [squid-users] Looking for squid spec file

2013-05-13 Thread Alex Domoradov
On Mon, May 13, 2013 at 3:45 PM, Amm ammdispose-sq...@yahoo.com wrote: - Original Message - From: Eliezer Croitoru elie...@ngtech.co.il To: Alex Domoradov alex@gmail.com Cc: squid-users@squid-cache.org squid-users@squid-cache.org Sent: Monday, 13 May 2013 6:05 PM Subject: Re

Re: [squid-users] Re: ssd hardsik to the operation system , does it make difference ?

2013-05-12 Thread Alex Domoradov
SSDs have a huge but limited write operations. and a hard disk doesn't have? :) You forgot to tell about IOPS difference and random read/write speeds.

Re: [squid-users] Re: How to use tcp_outgoing_address with cache_peer

2013-05-12 Thread Alex Domoradov
On Wed, May 1, 2013 at 12:42 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 1/05/2013 10:21 a.m., babajaga wrote: Amos, although a bit off topic: It does not work the way you seem to think. 2x 200GB cache_dir entries have just as much space as 1x 400GB. Using two cache_dir allows Squid

Re: [squid-users] Re: How to use tcp_outgoing_address with cache_peer

2013-05-12 Thread Alex Domoradov
If I understand you correctly, if the drive is failed all I need is to remove failed disk, comment cache_dir ( with corresponding drive) and restart squid? On Mon, May 13, 2013 at 2:03 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 13/05/2013 7:27 a.m., Alex Domoradov wrote: On Wed, May 1

Re: [squid-users] Fwd: config squid to set specific acl delay pools for username and then set it to the ip addr of username

2013-05-12 Thread Alex Domoradov
You can use acl apr, for example acl BIG_BOSS arp 01:02:03:04:05:06 On Mon, May 13, 2013 at 8:11 AM, Daniyal Khorashadi Zadeh daniyal.khorashadiza...@gmail.com wrote: Assume your executive of corporation, sit on his clerk desk PC, and login to his username on the network (authenticate with

[squid-users] dropbox and transparent interception of https

2013-05-09 Thread Alex Domoradov
Hello all, has anyone setup squid in transparent mode to intercept https traffic to dropbox? Is it possible at all?

[squid-users] dropbox and transparent interception of https

2013-05-09 Thread Alex Domoradov
Hello all, has anyone setup squid in transparent mode to intercept https traffic to/from dropbox? Is it possible at all?

Re: [squid-users] How to use tcp_outgoing_address with cache_peer

2013-04-30 Thread Alex Domoradov
On Tue, Apr 30, 2013 at 9:16 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 30/04/2013 2:49 a.m., Alex Domoradov wrote: On Mon, Apr 29, 2013 at 4:57 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 26/04/2013 10:57 p.m., Alex Domoradov wrote: On Fri, Apr 26, 2013 at 12:31 PM, Amos

Re: [squid-users] Re: How to use tcp_outgoing_address with cache_peer

2013-04-30 Thread Alex Domoradov
On Tue, Apr 30, 2013 at 11:46 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 30/04/2013 8:16 p.m., babajaga wrote: Hi, just my few cents: Up to my understanding. what is going in here, the original simple tcp_outgoing_address yyy.yyy.yyy.239 forces squid to use this outgoing interface

Re: [squid-users] How to use tcp_outgoing_address with cache_peer

2013-04-29 Thread Alex Domoradov
On Mon, Apr 29, 2013 at 4:57 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 26/04/2013 10:57 p.m., Alex Domoradov wrote: On Fri, Apr 26, 2013 at 12:31 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 26/04/2013 8:37 p.m., Alex Domoradov wrote: First of all - thanks for your help

Re: [squid-users] How to use tcp_outgoing_address with cache_peer

2013-04-26 Thread Alex Domoradov
First of all - thanks for your help. Problem #1: Please upgrade your Squid. Squid-2.6 has been 3 years since the last security update, nearly 5 years since your particular version was superceded. ok, I will update to the latest version On 24/04/2013 12:15 a.m., Alex Domoradov wrote

Re: [squid-users] How to use tcp_outgoing_address with cache_peer

2013-04-26 Thread Alex Domoradov
On Fri, Apr 26, 2013 at 12:31 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 26/04/2013 8:37 p.m., Alex Domoradov wrote: First of all - thanks for your help. Problem #1: Please upgrade your Squid. Squid-2.6 has been 3 years since the last security update, nearly 5 years since your

[squid-users] How to use tcp_outgoing_address with cache_peer

2013-04-23 Thread Alex Domoradov
Hello all, I encountered the problem with configuration 2 squids. I have the following scheme - http://i.piccy.info/i7/0ecd5cb8276b78975a791c0e5f55ae60/4-57-1543/57409208/squids_schema.jpg The main idea is to download all files from rackspace and amazon through parent squid and store all files in