Re: [squid-users] illegal instruction with 3.4.6 (no problem with 3.4.4)

2014-08-27 Thread Alfredo Rezinovsky
There's no log output, it just exists. No coredump either. strace output is useful ? Please provide more details, like log output, or a coredump backtrace. Thanks 2014-08-27 11:44 GMT-03:00 Alfredo Rezinovsky : squid exits with "illegal instruction" message Squid Cache

[squid-users] illegal instruction with 3.4.6 (no problem with 3.4.4)

2014-08-27 Thread Alfredo Rezinovsky
squid exits with "illegal instruction" message Squid Cache: Version 3.4.6-20140826-r13168 configure options: '--disable-auth' '--disable-auto-locale' '--disable-cache-digests' '--disable-cpu-profiling' '--disable-debug-cbdata' '--disable-delay-pools' '--disable-devpoll' '--disable-ecap' '--di

Re: [squid-users] logrotate only instead (all) squid rotate

2014-04-28 Thread Alfredo Rezinovsky
El 15/03/14 22:21, Amos Jeffries escribió: On 15/03/2014 12:26 a.m., Alfredo Rezinovsky wrote: Using: "squid -k rotate" squid rotates logs but also closes and reopen caches_dirs and url_rewrite_programs There's a way to signal only the (logfile-daemon) processes to rotate th

Re: [squid-users] Squid segfaults

2014-04-02 Thread Alfredo Rezinovsky
El 17/03/14 15:08, Alfredo Rezinovsky escribió: segfault at 0 ip 005929d3 sp 7fff7756b068 error 4 in squid[40+318000] When this happens It segfaults again after restarting unless I remove and rebuild the cache_dirs The proxy then works perfectly for a day or a whole month

[squid-users] Squid segfaults

2014-03-17 Thread Alfredo Rezinovsky
segfault at 0 ip 005929d3 sp 7fff7756b068 error 4 in squid[40+318000] When this happens It segfaults again after restarting unless I remove and rebuild the cache_dirs The proxy then works perfectly for a day or a whole month after crashing again. Squid Cache: Version 3.3.11

Re: [squid-users] logrotate only instead (all) squid rotate

2014-03-15 Thread Alfredo Rezinovsky
El 15/03/14 22:21, Amos Jeffries escribió: On 15/03/2014 12:26 a.m., Alfredo Rezinovsky wrote: Using: "squid -k rotate" squid rotates logs but also closes and reopen caches_dirs and url_rewrite_programs There's a way to signal only the (logfile-daemon) processes to rotate th

[squid-users] logrotate only instead (all) squid rotate

2014-03-14 Thread Alfredo Rezinovsky
Using: "squid -k rotate" squid rotates logs but also closes and reopen caches_dirs and url_rewrite_programs There's a way to signal only the (logfile-daemon) processes to rotate the logs and only the logs ? -- Alfrenovsky

Re: [squid-users] squid 3.4 won't answer mgr:info

2014-01-09 Thread Alfredo Rezinovsky
El 09/01/14 09:43, Alfredo Rezinovsky escribió: Squid Cache: Version 3.4.1-20131209-r13055 configure options: '--prefix=/opt/sepia/squid' '--sysconfdir=/opt/sepia/etc' '--disable-auth' '--disable-auto-locale' '--disable-cache-digests'

[squid-users] squid 3.4 won't answer mgr:info

2014-01-09 Thread Alfredo Rezinovsky
Squid Cache: Version 3.4.1-20131209-r13055 configure options: '--prefix=/opt/sepia/squid' '--sysconfdir=/opt/sepia/etc' '--disable-auth' '--disable-auto-locale' '--disable-cache-digests' '--disable-cpu-profiling' '--disable-debug-cbdata' '--disable-delay-pools' '--disable-devpoll' '--disable-

[squid-users] TPROXY and non http protocols

2013-12-27 Thread Alfredo Rezinovsky
What squid does in a TPROXY configuration when a client tries to use a non-http protocol in port 80? ToR for example tries port 80. There's a way to squid to seamlessly pass through the connection when there's not and http conversation? -- Alfrenovsky

[squid-users] Number of clients accessing cache

2013-11-08 Thread Alfredo Rezinovsky
With squidclient mgr:info I get a "Number of clients accessing cache:" This number is always bigger than the different IP addresses in my access log. I know I can have Squid is using the user agent, the X-Forwarded-For or something else to distinguish one client with another? -- Alfrenovsky

Re: [squid-users] Re: squid with muliwan

2013-10-21 Thread Alfredo Rezinovsky
El 21/10/13 07:03, Eliezer Croitoru escribió: On 10/21/2013 11:37 AM, adamso wrote: Thanks for the replies, I am using pfsense like router for the dual wan, the squid box have only one interface, it is in the DMZ in transparent mode. Is it for load balancing or FailOver? pfsense supports b

Re: [squid-users] Bandwith limit

2013-10-21 Thread Alfredo Rezinovsky
El 20/10/13 15:24, Antony Stone escribió: On Sunday 20 October 2013 at 19:09, Alfredo Rezinovsky wrote: El 20/10/13 13:03, Antony Stone escribió: There's nothing you can do to stop a packet arriving at your router - you can only decide what to do with it afterwards. The package arrives

Re: [squid-users] Bandwith limit

2013-10-20 Thread Alfredo Rezinovsky
El 20/10/13 13:03, Antony Stone escribió: On Sunday 20 October 2013 at 16:50, Alfredo Rezinovsky wrote: I need to limit the INBOUND bandwith to squid Why? I need the http traffic to be between limit. Using delay pools I can limit the traffic to the clients. I need to limit the traffic from

[squid-users] Bandwith limit

2013-10-20 Thread Alfredo Rezinovsky
I need to limit the INBOUND bandwith to squid Using delay pools I can limit the traffic to the clients. I need to limit the traffic from the internet, leaving at wire speed the traffic to the clients. Is that possible? -- Alfrenovsky

Re: [squid-users] url_regex matchint any IP

2013-10-14 Thread Alfredo Rezinovsky
El 14/10/13 12:07, Alfredo Rezinovsky escribió: I'm trying acl dotted_ip url_regex -i ^http:\/\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\/ to match any ip address hostname. I don't need to be strict, http://999.777.555.333 could match and I dont care. The problem

[squid-users] url_regex matchint any IP

2013-10-14 Thread Alfredo Rezinovsky
I'm trying acl dotted_ip url_regex -i ^http:\/\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\/ to match any ip address hostname. I don't need to be strict, http://999.777.555.333 could match and I dont care. The problem is that my url_regex doesn't match ANY ip address.

Re: [squid-users] Re: how to use tproxy + iptables load balancing

2013-10-10 Thread Alfredo Rezinovsky
El 10/10/13 05:07, Ding Guigeng escribió: Mohsen Dehghani wrote Hi team I am planning to install multiple instances of squid on a machine as a frontend. Tproxy is now working fine on a single instance machine. No I want to run multiple instances and use this help to load balance between them: h

Re: [squid-users] http 302 status and storeid: infinite loop problem

2013-10-08 Thread Alfredo Rezinovsky
El 08/10/13 11:18, Niki Gorchilov escribió: Hi there. Started playing with Squid 3.4.0.2 store_id feature (thanks Eliezer for the implementation) and discovered an unresolvable issue, due to the caching of 302 results (I know it's happening when only Expires header is present, but anyway). Imag

[squid-users] bridge + tproxy

2013-10-04 Thread Alfredo Rezinovsky
I have a squid in tproxy mode running in a bridge. Let name LAN side the one connected to the clients and WAN side the one connected to the gateway. I'm using Ubuntu server LTS with a 3.5.0 kernel The LAN network has various sub-networks, handled with many different IPs in the gateway. When

[squid-users] is "nice" useful?

2013-09-23 Thread Alfredo Rezinovsky
I have a heavy loaded squid and I noticed high latency. using workers it seems a little faster I dont have 100% CPU load and iowait is also low. But clients browse faster when I disable the tproxy and let them pass bridged. Running squid with a lower "nice" value should improbe the latency?

Re: [squid-users] Local Squid

2013-09-22 Thread Alfredo Rezinovsky
El 22/09/13 09:58, shawn wilson escribió: I'm trying to setup a transparent proxy on my local machine. This works when I give Firefox proxy info, but this fails when I get iptables to redirect with (the rule I keep turning on/off): iptables -t nat -A OUTPUT -p tcp --dport 80 -j REDIRECT --to-port

Re: [squid-users] Squid intermittently fails with 503 after connect

2013-09-18 Thread Alfredo Rezinovsky
El 16/09/13 18:35, John McGowan escribió: Hi, First, a brief background: I'm using squid as a non caching proxy server within Amazon AWS to serve as a common place for my web applications to make API requests to third parties. This is because many of the 3rd parties I connect to have private

Re: [squid-users] Workers rock, aufs

2013-09-13 Thread Alfredo Rezinovsky
El 12/09/13 12:11, Marcos A. Dzieva escribió: Dear, I have tried to use workers with rock and aufs, but I could not make it work. workers 4 cache_dir rock /var/cache2/squid/rock 5 min-size=1 max-size=31000 max-swap-rate=250 swap-timeout=350 if ${process_number} = 1 cache_dir aufs /var/

[squid-users] LFUDA Docs

2013-09-11 Thread Alfredo Rezinovsky
There are some docs about how does LFUDA works? -- Alfrenovsky

Re: [squid-users] Dynamic acl file

2013-09-11 Thread Alfredo Rezinovsky
El 11/09/13 11:52, Ian Coetzee escribió: Hi guys, I have a dynamic acl file with source ip that I am trying to deny. What is the best way to implement this? Regards Ian Try external_acl_type http://www.squid-cache.org/Doc/config/external_acl_type/

Re: [squid-users] Fecthing Source Ip Address and Invoking a Code

2013-09-06 Thread Alfredo Rezinovsky
El 06/09/13 12:53, Norbert Naveen escribió: Hello all , How can we get Source Ip address and dynamically call a script within Squid acting as a Proxy for HTTP Rgds I don't understand the question. Please use an example.

[squid-users] Finding files in squid cache.

2013-09-06 Thread Alfredo Rezinovsky
Les suppose I need to find a file logged as "00 1234" in store log. I have a cache dir with 16 256 structure so the structure is $(dirs from 00 to 0F)/$(dirs from 00 to FF)/$(file) The first 00 means the first cache listed in squid.conf I have a file 00/12/1234. the 12 is from the 5 an

Re: [squid-users] One squid instance, two WAN links, how to failover from primary to secondary link?

2013-09-04 Thread Alfredo Rezinovsky
El 04/09/13 17:22, Thomas Harold escribió: On 8/26/2013 6:41 AM, Nishant Sharma wrote: Hi Thomas, Thomas Harold wrote: In an instance where you have a single instance of squid running on a two WAN links as WAN #2 is very slow compared to WAN #1. Is this simply handled by changing the defaul

[squid-users] Reiser vs etx4

2013-09-04 Thread Alfredo Rezinovsky
In the page reccomends reiserfs. So I tried to set up a squid for 200Mbps squid using reiser and squid 3.3 I had a problem, every five to ten minutes, the system freezes and the bandwith drops to a half for about 10 seconds. I tried tuning squid in many ways. And I noticed reiser flushes the

[squid-users] tproxy and url-rewrite

2013-09-02 Thread Alfredo Rezinovsky
I have a squid with tproxy and url-rewrite Some url-rewtites goes to localhost OK rewrite-url="http://127.0.0.1/"; The problem is that squid does the request using the original client IP (as tproxy has to) and localhost can't answer. there's a way to force a tcp_outgoing address (or disa

Re: [squid-users] how to use tproxy + iptables load balancing

2013-08-31 Thread Alfredo Rezinovsky
El 31/08/13 05:13, Mohsen Dehghani escribió: Hi team I am planning to install multiple instances of squid on a machine as a frontend. Tproxy is now working fine on a single instance machine. No I want to run multiple instances and use this help to load balance between them: http://wiki.squid-cac

[squid-users] status acl

2013-08-29 Thread Alfredo Rezinovsky
I need to log only TCP_MISS in a custom log for further processing There's an acl for that ? -- Alfrenovsky

Re: [squid-users] Look into the cache.

2013-08-28 Thread Alfredo Rezinovsky
El 28/08/13 11:32, Alex Rousskov escribió: On 08/28/2013 08:00 AM, Alfredo Rezinovsky wrote: I need to know if an URL is cached or not. could I use squidclient for that? If the object is cached I'll need to get it, if its a miss I just want to know it without getting it. Try sendi

Re: [squid-users] Look into the cache.

2013-08-28 Thread Alfredo Rezinovsky
El 28/08/13 11:32, Alex Rousskov escribió: On 08/28/2013 08:00 AM, Alfredo Rezinovsky wrote: I need to know if an URL is cached or not. could I use squidclient for that? If the object is cached I'll need to get it, if its a miss I just want to know it without getting it. Try sendi

[squid-users] Look into the cache.

2013-08-28 Thread Alfredo Rezinovsky
I need to know if an URL is cached or not. could I use squidclient for that? If the object is cached I'll need to get it, if its a miss I just want to know it without getting it. -- Alfrenovsky

Re: [squid-users] Choose one worker

2013-08-28 Thread Alfredo Rezinovsky
El 28/08/13 02:23, Amos Jeffries escribió: On 28/08/2013 2:19 p.m., Alfredo Rezinovsky wrote: El 27/08/13 22:43, Alfredo Rezinovsky escribió: I have a high load servers and need to use workers or else one CPU core climbs to 100% usage and I see a slow down in the network. There's a w

Re: [squid-users] Choose one worker

2013-08-27 Thread Alfredo Rezinovsky
El 27/08/13 22:43, Alfredo Rezinovsky escribió: I have a high load servers and need to use workers or else one CPU core climbs to 100% usage and I see a slow down in the network. There's a way to choose a worker for a single specific request? I have a script and I need to make a re

[squid-users] Choose one worker

2013-08-27 Thread Alfredo Rezinovsky
I have a high load servers and need to use workers or else one CPU core climbs to 100% usage and I see a slow down in the network. There's a way to choose a worker for a single specific request? I have a script and I need to make a request knowing wich worker will answer it. I've seen both th

[squid-users] Dump some contents

2013-08-22 Thread Alfredo Rezinovsky
I need to "save" some full responses. squid usually receives a requests, process it and answers. Sometimes answers are cached so I can get the content from the cache. Sometimes the content is not cachable or the cache needs to be denied. I need to "fork" the send to the client and have this co

Re: [squid-users] how do I block facebook?

2013-08-21 Thread Alfredo Rezinovsky
El 20/08/13 21:21, junio escribió: I'm okay to block facebook in the company I work for, I can not redirect port 443 successfully. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/how-do-I-block-facebook-tp4661678.html Sent from the Squid - Users mailing lis

Re: [squid-users] range request in url_rewrite

2013-08-21 Thread Alfredo Rezinovsky
El 21/08/13 05:15, Amos Jeffries escribió: On 20/08/2013 11:43 p.m., Alfredo Rezinovsky wrote: I have a url_rewrite_program and I want it to know if the request includes a range, and the value of the range. What for please? and in what Squid version? Amos Version 3.HEAD. 1. I want my

Re: [squid-users] squid 3.1.10 page allocation failure. order:1, mode:0x20

2013-08-20 Thread Alfredo Rezinovsky
El 16/08/13 15:45, inittab escribió: Hello, I wanted to get some suggestions on my current setup and ask if i'm expecting too much out of my hardware for the traffic load. it appears i am running into out of memory problems and hitting swap, squid processes then end up dying out. [root@squid01

[squid-users] tproxy and DNS

2013-08-20 Thread Alfredo Rezinovsky
With tproxy squid uses the original source IP address as source IP for the request There's a way to force the use of the original server destination IP instead of using a DNS query? -- Alfrenovsky

[squid-users] range request in url_rewrite

2013-08-20 Thread Alfredo Rezinovsky
I have a url_rewrite_program and I want it to know if the request includes a range, and the value of the range. I can get the original URL request in the url_rewrite_program but no headers are passed by. -- Alfrenovsky

[squid-users] My own mails to the list

2013-08-19 Thread Alfredo Rezinovsky
When I send a mail to squid-users I don't see mi own mails, only the answers. There's a way to have my own mails with the [squid-users] subject prefix? -- Alfrenovsky

Re: [squid-users] Transparent Proxy

2013-08-08 Thread Alfredo Rezinovsky
El 07/08/13 16:02, Roman Gelfand escribió: Is there a way I could control access to various sites based on user irregardless of workstation they are on? All in transparent proxy. Thanks in advance I did this a long time ago. I had a terminal server, so all the users came from the same IP. I

[squid-users] deny_info TCP_RESET all for hiding squid

2013-08-05 Thread Alfredo Rezinovsky
I need a squid in tproxy mode to work in stealth mode I tried deny_info TCP_RESET all but when squid timeouts or the destination server rejects the connection squid returns an error. I want squid to just reset the connection with no messages. -- Alfrenovsky

Re: [squid-users] helper output in logs

2013-08-04 Thread Alfredo Rezinovsky
El 04/08/13 15:52, Eliezer Croitoru escribió: On 08/04/2013 09:46 PM, Alfredo Rezinovsky wrote: El 02/08/13 18:03, Amos Jeffries escribió: On 3/08/2013 3:37 a.m., Alfredo Rezinovsky wrote: I'm using store_id_program and I want my program to ouput a Key/Value pair so the value goes in the

Re: [squid-users] helper output in logs

2013-08-04 Thread Alfredo Rezinovsky
El 02/08/13 18:03, Amos Jeffries escribió: On 3/08/2013 3:37 a.m., Alfredo Rezinovsky wrote: I'm using store_id_program and I want my program to ouput a Key/Value pair so the value goes in the logs I tried with "log" and "tag" keys and using "%[et" and

[squid-users] helper output in logs

2013-08-02 Thread Alfredo Rezinovsky
I'm using store_id_program and I want my program to ouput a Key/Value pair so the value goes in the logs I tried with "log" and "tag" keys and using "%[et" and "%[ea" in LogFormat but it didn't worked. There's a generic Key/Value handling or each helper needs a special support ? -- Alfreno

[squid-users] helper output in logs

2013-08-02 Thread Alfredo Rezinovsky
I'm using store_id_program and I want my program to ouput a Key/Value pair so the value goes in the logs I tried with "log" and "tag" keys and using "%[et" and "%[ea" in LogFormat but it didn't worked. There's a generic Key/Value handling or each helper needs a special support ? -- Alfreno