On Thu, 2014-03-27 at 10:26 +, Ed W wrote:
> Yes, I'm still really interested to implement this. I got as far as
> doing some investigation a few weeks back.
Thanks for looking into it. I'd like to sort it myself, but don't have
the time at the moment. In the meantime, I'll aim to submit a p
On Sat, 2014-03-15 at 21:13 +0530, Amm wrote:
> Ok I read further on that link itself, somewhere it says:
>
> disable-preserve-miss
> This option disables the preservation of the TOS or netfilter
> mark. By default, the existing TOS or netfilter mark value of
> the response comin
messing things up.
Any advice would be appreciated.
Thanks
Andrew
uid-web-proxy-cache.1019090.n4.nabble.com/IE8-10-Flash-videos-don-t-play-until-buffering-finishes-tp4664652p4664653.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
--
Andrew Tate
c.andrew.t...@gmail.com
704.905.3240
Hey there,
We've been trying to determine the cause (and potentially a fix) for
an issue we're seeing with Vimeo videos.
Issue: When trying to play back Vimeo videos through a network setup
with a Squid proxy, after clicking play, the video begins buffering,
but does not start playback until the
On Thu, 2013-12-26 at 15:59 +0800, Ge Jin wrote:
> Hi all!
>
> We want to use tcp_outgoing_tos with freeBSD 10.0-BETA2.
[...]
> So, it's the tcp_outgoing_tos still has bug in freeBSD or I have some
> mistake there ?
Have you tried increasing the logging level? Set it to at least level 3
and see
eway as a CA or is the
remote server cert passed through verbatim?
Hope this makes sense Ive experimented with many things but its looking
increasinly like im going to have to block non intercepted stuff (how?) and go
with option 3
Many thanks
Andrew
Sent from iPhone
cant find
a solution anywhere.
Perhaps we can calaborate on here to produce a Perl or Python script
which anyone can use?
Thanks
Andrew
On Sat, 2013-08-10 at 12:24 +0100, Andrew Beverley wrote:
> - I configured Squid as per [1]
>
> [1]
> http://www.andybev.com/index.php/Setting_up_a_captive_portal_from_scratch_using_Debian#Configure_Squid
There is also some extra stuff in there to only show the splash page on
a
On Thu, 2013-08-08 at 22:53 -0300, Roberto Carna wrote:
> In some cases depending on the Windows platform and web browser type
> and version (Firefox, IE, etc.), the splash page works OK but in other
> cases doesn't at al.
>
> Is there any way to implement an univeralñ splash page that work for
>
On 19 July 2013, Amos Jefferies wrote:
>Add this to your squid.conf:
> dns_defnames on
That worked a treat - thankyou !
When non-FQDN names are specified by clients I wish for them to be
appended by the domains in the search directive of resolv.conf on the
Squid host.
I can see that it is adding these domains at startup by the following
entries in squid.out...
2013/07/19 13:02:22| Adding domain sub01.domain.com. f
On Sun, 2013-05-19 at 15:52 +0200, folkert wrote:
> Hi,
>
> 8 years ago I implemented a program which can be integrated in Squid so
> that users are initially redirect to a page where they have to tick an
> "I agree" check-box and only then they can continue.
> Is this functionally integrated in t
On Thu, 2013-03-28 at 22:52 +, Ed W wrote:
[...]
> Users have a choice of gateways to use the internet via (each will have
> a cost). Their choice of gateway is marked on packets from their
> machine, we then route through the appropriate gateway based on the
> connection mark (hence why I n
On Wed, 2013-03-27 at 00:13 +, Ed W wrote:
> Hi Andy, Sorry to bug you, but I finally got round to trying the
> qos_flows feature and I think my understanding is completely back to front?
>
> What I need is to copy the packet/connection mark from the client
> request, and apply it to the ups
On Sun, 2013-03-03 at 14:38 +, Jorge Bastos wrote:
> Howdy,
>
> When trying to compile latest 3.3.0.2 I have he below information, also
> tried other versions like 3.2.8 and some problem.
> Is this a library that need to be updated?
I suspect that you are using an out of date and/or wrong ve
On Fri, 2013-03-01 at 18:38 +0700, Azma Yogi wrote:
> >>> Hi.. the new squid 3.3 has a new feature called tcp_outgoing_mark. i
> >>> tried this feature but not works. cache.log said this "ERROR:
> >>> 'tcp_outgoing_mark' requires Packet MARK (Linux)". anybody could help me
> >>> explain what this
On Fri, 2013-01-04 at 10:05 +0200, John Hay wrote:
> On Fri, Jan 04, 2013 at 07:36:35AM +0000, Andrew Beverley wrote:
> > On Fri, 2013-01-04 at 06:31 +0200, John Hay wrote:
> > > Looking at a linux man page:
> > >
> > > http://linux.die.net/man/2/setsockopt
On Fri, 2013-01-04 at 06:31 +0200, John Hay wrote:
> Looking at a linux man page:
>
> http://linux.die.net/man/2/setsockopt
>
> I see the same kind of text:
>
> Most socket-level options utilize an int argument for optval. For
> setsockopt(), the argument should be nonzero to enable a boolean op
On Thu, 2013-01-03 at 08:13 +0200, John Hay wrote:
> > Again, no official documentation found, but I found other bug reports in
> > software packages for a variety of BSD operating systems, so I think it
> > should apply to any BSD derivative (including OSX).
>
> Doing a google of "setsockopt free
On Wed, 2013-01-02 at 13:15 +1300, Amos Jeffries wrote:
> On 2/01/2013 4:24 a.m., Andrew Beverley wrote:
> > On Tue, 2013-01-01 at 15:15 +0000, Andrew Beverley wrote:
> >> Therefore, could you please try the following (untested) patch?
> > Ah, Amos, I've just re-read
On Tue, 2013-01-01 at 15:15 +, Andrew Beverley wrote:
> Therefore, could you please try the following (untested) patch?
Ah, Amos, I've just re-read the bug report and seen that you have closed
it with a FreeBSD workaround. I couldn't see your commit, but from what
I have read
On Mon, 2012-12-31 at 11:27 -0800, Nick Rogers wrote:
> On Fri, Dec 28, 2012 at 6:59 PM, Amos Jeffries wrote:
> > On 29/12/2012 3:49 p.m., Andrew Beverley wrote:
> >>
> >> On Fri, 2012-12-28 at 18:13 -0800, Nick Rogers wrote:
> >>>
> >>>
On Fri, 2012-12-28 at 18:13 -0800, Nick Rogers wrote:
> I was able to come up with a patch that works in my environment by
> looking at some of the changes between 3.1 and 3.2. It seems that
> sizeof(tos_t) does not result in a valid setsockopt() argument,
> whereas sizeof(int) that was used in 3.
On Tue, 2012-11-13 at 14:46 +0200, Pavel Bychykhin wrote:
> I tried in VirtualBox without the jail. Nothing changed.
> My system is FreeBSD 8.2. Maybe on Linux all is OK.
Maybe, but it would be strange if it became broken in 3.2, as although
the QOS code changed a lot, the actual code to set the T
On Sat, 2012-11-10 at 19:37 +0200, Pavel Bychykhin wrote:
> I tried 0x10, 0x14, 0x3C, 0x80, 0x84. Result is the same for Squid 3.2 - not
> working.
I'll test it myself when I get a moment (on Linux), but it might not be
until next week.
> For Squid 3.1 all values works fine.
There were a lot of
On Sat, 2012-11-10 at 15:30 +0200, Pavel Bychykhin wrote:
> Fragment from log of Squid 3.2:
> 2012/11/10 14:31:08.157 kid1| fwdConnectStart: got outgoing addr 0.0.0.0, tos
> 12
> 2012/11/10 14:31:08.157 kid1| The AsyncCall fwdConnectDoneWrapper
> constructed, this=0x28fbb340 [call982]
> 2012/11/1
On Fri, 2012-11-09 at 14:18 +0200, Pavel Bychykhin wrote:
> Hi All!
>
> Recently i tried to upgrade my Squid 3.1.21 to 3.2.3.
> Everything works fine, but tcp_outgoing_tos no longer affects outgoing
> packets.
> Here fragment from my config:
>
> acl rfc1579 dst 192.168.0.0/16
> acl rfc1579 dst 1
Have you specified
https_port 443 ... cert=
http://www.squid-cache.org/Versions/v2/2.7/cfgman/https_port.html
Regards,
Andrew
-Original Message-
From: Mike Muir [mailto:mm...@uniqueltd.com]
Sent: Tuesday, October 16, 2012 3:41 PM
To: squid-users@squid-cache.org
Subject: [squid-users
bling to behave as a parent for cgi content ONLY via
cache_peer_access directive.
Best regards,
Andrew
-Original Message-
From: Amos Jeffries [mailto:squ...@treenet.co.nz]
Sent: Friday, September 21, 2012 9:04 PM
To: squid-users@squid-cache.org
Subject: Re: [squid-users] Cache Manager work
Thanks Amos,
Our system is a custom product design with some special requirements, so we
ended up with the such configuration and somewhat customized Squid.
We thought that perhaps some easy way around might be available but at the end
this is not very critical issue for us.
Andrew
peer into to the parent peer which we don't want
to do.
Andrew
-Original Message-
From: Amos Jeffries [mailto:squ...@treenet.co.nz]
Sent: Wednesday, September 19, 2012 11:19 PM
To: squid-users@squid-cache.org
Subject: Re: [squid-users] Cache Manager working on Apache server as
figured as parent but are unsuccessful otherwise.
Do you think is that possibility at all?
Thanks,
Andrew
On Thu, 2012-08-30 at 05:01 -0700, Mustafa Raji wrote:
> i will try to use the 3.2, kindly would you tell me the linux os you
> used (most used linux distribution with 3.2)
[ Please don't top-post ]
I use Debian and compile v3.2 myself. I am not aware of any Linux
distribution shipping v3.2. Some
On Thu, 2012-08-30 at 00:14 -0700, Mustafa Raji wrote:
> hi i have a problem with zph configuration in squid 3.1.11 in the squid
> wiki i find the zph configuration directive is qos_flows and i want to
> mark the local-hit packet to root this packets locally
>
> the configuration in squid.conf fil
On 18/08/2012 18:43, Jenny Lee wrote:
> nonhierarchical_direct off
That did the trick. I thought I was probably missing something :-)
Thanks very much,
Andrew.
x27;--disable-ident-lookups'
'--enable-linux-netfilter' '--with-large-files' '--disable-snmp'
'--disable-htcp' '--disable-ipv6' 'CFLAGS=-pipe -Wall -O2
-fomit-frame-pointer -march=native -s' 'CXXFLAGS=-pipe -Wall -O2
-fomit-frame-pointer -march=native -s'
'PKG_CONFIG_PATH=/usr/local/lib64/pkgconfig:/usr/lib64/pkgconfig'
Any suggestions, or this a bug in 3.2?
Andrew
/when collapsed forwarding feature is going to be
incorporated into Squid 3.x?
Best regards,
Andrew
-Original Message-
From: Amos Jeffries [mailto:squ...@treenet.co.nz]
Sent: Friday, July 20, 2012 10:54 PM
To: squid-users@squid-cache.org
Subject: Re: [squid-users] How to optimize squid confi
On Mon, 2012-07-09 at 18:22 +0530, Ben wrote:
> We are running squid since long time and it is working fine.Now days, we
> migrated squid for RHEL 6 to use qos_flow DSCP marking parameter.
>
> For testing purpose at lab, we deploy two squid box, one with rhel rpm (
> Version 3.1.19 ) and on seco
On Tue, 2012-06-26 at 17:30 +1200, Amos Jeffries wrote:
> > Has anyone any idea how to actually Implement that in a system ?
>
> Search for information on "Captive Portal".
You might like to check out my tutorial on how to do it with iptables.
There are various "out of the box" software packages
Hello
Where is the best place to find the current list of Major bugs for
Squid showing the stoppers currently for 3.2?
How is progress going for 3.2 to be released some point this year?
Will it be within the next couple of months, or longer?
Thanks
Andy
On 4 October 2011 23:39, Amos Jeffries
On 5/10/12 4:33 PM, "Eliezer Croitoru" wrote:
>On 10/05/2012 23:47, Andrew Brown wrote:
>> Hello,
>>
>> I'm comparing Squid 2.7 to Squid 3.1, and I've found the error code
>> returned between the two versions differs when attempting to fetch a
>
force Squid 3.1 to always return an HTTP 504
error code, I've prepared a patch which seems to work, but I'd still like
some community feedback prior to submitting it. Is there a particular
reason why Squid 3.1 will return either HTTP 503 or 504, depending on
whether the request r
On Wed, 2012-04-25 at 00:11 -0400, Brian R. Landy wrote:
> Well, I was not using the correct field.
But it's still not working?
> I had also tried using something simple, like "clientside_tos 0xb8 all"
> (which under 3.0 definitely tagged all traffic) and it did nothing under
> 3.2.0.17.
I ass
> >> Hi, I’m very sorry it took so long for me to test this and reply;
> >> unfortunately, under 3.2.0.16 and 3.2.0.17 I still don’t see
> >> clientside_tos ever marking packets. My clientside_tos configuration
> >> has been working perfectly with 3.0.STABLE26 for the last month.
> >
> > Can you
On Sun, 2012-04-22 at 21:30 -0400, Brian Landy wrote:
> >> Hi, I applied the patch but it doesn’t seem to be working.
> >
> > Depending on your requirement, you could always try the 3.2 branch. A
> > lot of the TOS code was rewritten in that version as part of the
> > implementation of the netfilt
On Mon, 2012-04-16 at 16:24 +0100, Marilo wrote:
> I know one can set up an HTTP Proxy that requests authorization, and
> the browser prompts for a username and password. Only when it's right,
> can they then use the proxy, access the internet.
If you want to prevent/allow people access to all int
On Mon, 2012-04-02 at 14:28 -0400, Osmany Goderich wrote:
> Please have a look at this bash/mysql external helper. Can anyone tell me
> why is it not working?
...
> is there anyway I can test this directly on the server's shell
>
Yes, just run it on the shell as you would any other script, and in
[ Some stuff about TOS packet tagging ]
> Hi, I applied the patch but it doesn’t seem to be working.
Depending on your requirement, you could always try the 3.2 branch. A
lot of the TOS code was rewritten in that version as part of the
implementation of the netfilter mark feature.
Andy
> >> >>> I configured my splash like described here:
> >> >>> http://wiki.squid-cache.org/ConfigExamples/Portal/Splash. I have
> >> >>> chosen second example (Active Mode) and adopted it to my squid 3.0
> >> >>> version (there is squid_session helper instead ext_session_acl). So
> >> >>> when i go
On Sun, 2012-02-26 at 15:49 +0400, Vyacheslav Maliev wrote:
> 2012/2/24 Amos Jeffries :
> > On 24/02/2012 11:26 a.m., Andrew Beverley wrote:
> >>
> >> On Fri, 2012-02-24 at 02:06 +0400, Vyacheslav Maliev wrote:
> >>>
> >>> Hi!
> >&
On Fri, 2012-02-24 at 02:06 +0400, Vyacheslav Maliev wrote:
> Hi!
> I configured my splash like described here:
> http://wiki.squid-cache.org/ConfigExamples/Portal/Splash. I have
> chosen second example (Active Mode) and adopted it to my squid 3.0
> version (there is squid_session helper instead e
On Sat, 2012-02-11 at 11:36 -0200, João Paulo Ferreira wrote:
> Does anyone know how do I recompile my squid that was installing the
> tool using yum (centos)?
I've never used yum, but you should be able to recompile by downloading
the packaged sources. The following page will probably help:
http
On Tue, 2012-02-07 at 17:37 +0100, Carsten Ralle wrote:
> Is there a configuration (preferably without ICP) to transparently use
> all three lines in parallel for a connection (e.g. HTTP/FTP-download or
> data streaming) ?
How about multipath TCP? Assuming that you control both ends of your WAN
li
Thanks Amos,
Got that fixed no errors but it does not popup the username and password box
now.
Sigh did not think there will be such big difference between the Squid 2 & 3,
did not had this issues with previous versions.
Hope you can help.
Thanks
Andrew
-Original Mes
HI Amos,
Thanks for the answer.
I did had the following in auth_param program /usr/lib/squid/ncsa_auth
/etc/squid/squid_user but then removed it as well as I got the same error.
So im not so sure what els I wants from me.
Thanks
Andrew
-Original Message-
From: Amos Jeffries
ttern entries above these.
refresh_pattern ^ftp: 144020% 10080
refresh_pattern ^gopher:14400% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
Please help...
Thanks
Andrew
On Tue, 2012-01-24 at 09:50 -0500, Alona Rossen wrote:
> How can I unsubscribe from this mailing list?
http://lmgtfy.com/?q=squid+users+unsubscribe
Third in the list.
On Wed, 2011-12-21 at 11:52 +0200, yusuf özbilgin wrote:
> > Can you try putting the line back to "#include " and then remove
> > the "#if HAVE_DB_H" and "#endif" lines. Try recompiling, and see what
> > error message you then get.
>
> Same error.
>
> When I remove the line
>
> #include
>
> Er
On Wed, 2011-12-21 at 10:54 +0200, yusuf özbilgin wrote:
> > On Tue, 2011-12-20 at 20:18 +0200, yusuf özbilgin wrote:
> > > Hi,
> > >
> > > I am getting error when compile helpers/external_acl/session on freebsd
> > > 7.4.
> > > Error details are below.
> > >
> > > What can be the problem?
> > >
On Tue, 2011-12-20 at 15:49 -0200, Igor NM wrote:
> Hi all!
>
> My squid cannot run any external acl script or soft
> I want to restrict web access by Windows AD group..
>
> I test with other helpers, softs and scripts in this location and other
> location (ex. /tmp, /, /etc/squid3) and I got
On Tue, 2011-12-20 at 20:18 +0200, yusuf özbilgin wrote:
> Hi,
>
> I am getting error when compile helpers/external_acl/session on freebsd 7.4.
> Error details are below.
>
> What can be the problem?
>
> Thanks,
> Yusuf
>
>
> squid version is squid-3.2.0.14-20111219-r11470
> berkeley db ve
On Wed, 2011-11-23 at 13:28 -0800, someone wrote:
> I am unable to limit the hours squid will accept requests
>
>
>
> squid3 -v
> Squid Cache: Version 3.0.STABLE8 <---yes I know its older but will do
> for my needs.
>
>
> Ive tried this:
>
> acl ACLTIME time SMTWHFA 06:00-23:30
>
> http_acce
On Sun, 2011-11-13 at 23:12 +0530, Benjamin wrote:
> On 11/13/2011 10:51 PM, Andrew Beverley wrote:
> > On Sun, 2011-11-13 at 22:29 +0530, Benjamin wrote:
> >> Hi,
> >>
> >> I want to use squid version on centos 6.So for that i wonder that do i
> >> c
On Sun, 2011-11-13 at 22:29 +0530, Benjamin wrote:
> Hi,
>
> I want to use squid version on centos 6.So for that i wonder that do i
> compile squid latest stable version from squid source code or should i
> go with rpm package which i get from my distro.?
You're normally best using the one prov
On Fri, 2011-11-11 at 10:09 -0800, someone wrote:
> Im trying to Upgrade my squid install, I need to compile a newer version
> of squid 3.1 on a debian machine, but when I run Make Install, it puts
> everything in the wrong directories.
>
> Does anyone know the proper Make Install command for debi
Hi
Have you tried to use a ACL based upon a type of list of:-
acl AlwaysDirectSites url_regex -i "/etc/squid3/alwaysdirectsites"
http_access allow AlwaysDirectSites
always_direct allow AlwaysDirectSites
Also as a safety measure, I would possibly use
cache_peer_access deny AlwaysDirectSites
to
On Tue, 2011-10-25 at 02:23 +0300, Alex F wrote:
> >>
> >> BTW, how can I find out what version is the session helper?
> >> Cheers.
> >
> > ext_session_acl -v should tell you.
>
> It doesn't work, I already tried it.
> /usr/local/squid/libexec/ext_session_acl -v
> /usr/local/squid/libexec/ext_ses
On Sun, 2011-10-23 at 07:41 -0700, Ivan Matala wrote:
> hello, this is my code
>
> iptables -t nat -A PREROUTING -i tun0 -p tcp -m tcp --match multiport
> --dports 80 -j DNAT --to-destination 118.67.78.136:80
>
> what im trying to do is, im trying to redirect all http requests to a
> foreign prox
On Sat, 2011-10-22 at 02:41 +0300, Alex F wrote:
> On Wed, Oct 19, 2011 at 2:10 AM, Andrew Beverley wrote:
> >
> >>
> >> acl A dstdomain 192.168.235.136
> >> acl B urlpath_regex /splash.html /check.html
> >> http_access allow A B
> >
> >
On Wed, 2011-10-19 at 12:48 -0400, Wilson Hernandez wrote:
> Hello.
>
> After attempting several suggestions from guys here in the list, I'm
> still experiencing the same problem: Facebook is so sluggish that my
> users are complaining everyday and is just depressing.
>
> Today I came up with a
On Tue, 2011-10-18 at 14:44 +0300, Alex F wrote:
> Hello,
>
> I am trying to set up a splash page as an initial page, no matter what
> users request.
> Please note I am using Squid 3.2 with session helper 1.1 on debian 6.
> Following the examples from
> http://wiki.squid-cache.org/ConfigExamples/P
On Sun, 2011-10-02 at 21:50 -0700, Ivan Matala wrote:
> Hello guys, do you any idea or is it possible to display a splash page
> to squid proxy users? I want it like display for some specific
> interval. Also can we put license agreement, in which they have to
> press Yes or accept in order to brow
On Sat, 2011-09-24 at 04:18 -0700, Jim Gifford wrote:
> I have setup a small proxy server at home for my kids.
>
> My proxy is setup to allow access from 8am to 9pm on school nights. He
> has an alarm clock that uses his ipod, that needs 24x7 connectivity or
> his alarm clock doesn't work. Is it
Hi,
I would like to deny a request with http_access, but based on 2 ACLs. Is
there a way to do this?
The reason is that I want to produce a splash page, but only display it
between certain times. I was thinking something like:
http_access deny !new_users && correct_time
where new_users and corr
On Mon, 2011-04-25 at 07:54 -0700, Daniel Shelton wrote:
> First of all, thanks to Amos and Andrew for replying to my previous
> question. I have setup squid_session with the following in
> squid.conf. The result is attached below also. For whatever reason
> the squid sessions are
HI Essad,
I use acl authenticate proxy_auth REQUIRED where every user have there own
username & password to get on to the internet.
Would the below example still work?
Thanks
Andrew
From: Essad Korkic [mailto:essad.kor...@gmail.com]
Sent: 26 August 2011 13:14
To: squid-users@squid-cache
Thanks Amos,
I tried to search for a script that I can modify or something as I don't get
this one right.
Any help or anything you can point me to get it right?
Thanks
Andrew
-Original Message-
From: Amos Jeffries [mailto:squ...@treenet.co.nz]
Sent: 24 August 2011 16:16
To:
x27;s.
acl baduser proxy_auth
acl badsites dstdomain
Thanks
Andrew
>> Should I always trust these kind of connections and let them go direct
>> if the connection has authentication against it with a possible
>> statement of:-
>>
>> always_direct allow CONNECT auth
>
> CONNECT are absolutely not trustworthy. The one exception we have to make by
> default is port 44
Hi Amos
Thanks for the reply again
>> "TCP_REFRESH_UNMODIFIED" not which are showing like:-
>>
>> 1311836509.795 162 localhost TCP_REFRESH_UNMODIFIED/304 553 GET
>> http://i2.cdnds.net/11/30/P/gaming_sidpirates1.jpg -
>> DIRECT/213.244.185.38 -
>> 1311836509.795 163 mycomp.tg.local TCP_MISS
Hi Amos
Thanks for the detailed reply, I will study your comments accordingly
and will make changes to my squid.conf where necessary thankyou.
On 27 July 2011 07:15, Amos Jeffries wrote:
>
>
> This is the sandwich configuration looping on itself. You haev several
> choices:
>
> * configure two
On Thu, 2011-07-21 at 23:56 +0630, Mr Crack wrote:
> Dear Friends,
> I would like to know if there is any wifi hotspot solution software in
> Linux ( free or commercial )
> In Windows, that can be done with Antamedia Hotspot software.
There are instructions here if you want to roll your own:
http
e user can then just go to other computer enter
it' details in and visit the blocked website.
Is it possible to block user's by username?
Your help is much appreciated.
Thanks
Andrew
Hello,
I'm having an issue with Squid, Is it possible to add a username and
password onto the IP range, so the user is asked to login before using
the IP? If so, could you tell me how, please!.
Thanks!
Andrew.
On Sat, 2011-04-23 at 21:24 +0800, jiluspo wrote:
> therefore squid 3.2 still cant preserve TOS value from remote server to
> clients.
Correct.
> hmn. what about the zph that requires kernel patch?
zph and qos_flows are the same thing. The names differ between different
versions of Squid.
> w
On Sat, 2011-04-23 at 20:36 +0800, jiluspo wrote:
> remote servers I mean http web servers TOS.
> I already know about peers in fact current squid(as of 04/24/11) TOS are not
> being marked peer(digest or icp) hit when local miss.
> http://bugs.squid-cache.org/show_bug.cgi?id=3202
>
> AFAIK squid
On Wed, 2011-04-20 at 05:39 -0700, Daniel Shelton wrote:
> Does anyone know? Can Squid be set up as a wifi "Hotspot"?
>
> For example, with a splash page that users will see before connecting?
>
You can use Squid for a simple splash page:
http://wiki.squid-cache.org/ConfigExamples/Portal/Spla
On Thu, 2010-12-23 at 19:05 +0100, lupuscramus wrote:
> > > Do you know someone who managed to use the squid marked packets
> > > to make a QoS based on ip source with classful queuing ? (cbq, htb)
> >
> > Yes, I do this. For an example you could have a look at my website. It
> > is out of date an
On Wed, 2010-12-22 at 23:57 +0100, lupuscramus wrote:
> > Looks right for the Squid part.
> >
> > Also check that Squid was built with the netfilter-conntrack library and
> > the QoS feature enabled.
> > --enable-zph-qos --with-netfilter-conntrack
> >
> > when not explicitly specified for ./con
On Fri, 2010-10-29 at 05:48 -0700, Landy Landy wrote:
>
> --- On Thu, 10/28/10, Andrew Beverley wrote:
>
> > From: Andrew Beverley
> > Subject: Re: [squid-users] Limiting user's bandwidth
> > To: "Landy Landy"
> > Cc: "Squid-Users"
&
> > > $tc filter add dev eth1 parent 2:0
> >protocol ip prio 4 handle 1003 fw classid
> > 2:1003
> >
> > I'm no expert, but I would remove the prio parameter. I
> > think this is
> > matching the prio value of a packet - probably not what you
> > want. I
> > would also change the "classid" t
[top posting corrected]
>> Are you just trying to share bandwidth fairly between users? If so, your
>> best bet is to change to one leaf for all your clients, but attach a
>> filter to it that will share bandwidth *by IP address* (see below) - the
>> default is to share by connection. If you want
> Ah, well the difference is that you are using INPUT/OUTPUT chains with
> Squid, not FORWARD, so that will be the difference.
What a dreadful sentence! That will teach me to not proofread before
posting to a list...
> Thanks Andy for your reply and taking your time to help like always.
>
No problem at all.
> > > $tc class add dev eth0 parent 1:0 classid 1:1
> > htb rate 900kbit ceil 945kbit
>
> As I understand, correct me if I'm wrong, this rule is telling the
> kernel how much bw we want to use globally
On Tue, 2010-10-26 at 08:15 -0700, Landy Landy wrote:
> Here's a snip:
>
> #!/bin/bash
> #set -v
> iptables='sudo iptables'
> tc='sudo tc'
> #$iptables -t mangle -F
> #$iptables -t mangle -Z
>
> #
> ## Traffic Shaping
> #
> ## Parent ID: 1, Associated with
On Mon, 2010-10-25 at 17:15 -0700, Landy Landy wrote:
> > If it's not working, then I suspect it's something wrong
> > with your tc
> > rules. Are you sure you are shaping the correct interface?
> > Remember that
> > the interface will be the opposite one to the one that you
> > are using for
> > t
On Mon, 2010-10-25 at 15:39 -0700, Landy Landy wrote:
> > Just to confirm: you are using a recent snapshot tarball of
> > 3.2 beta
> > releases to do this right? with the packet marking
> > netfilter libraries
> > built in?
>
> No, I'm actually using Squid Cache: Version 3.0.STABLE24 (the version
On Mon, 2010-09-27 at 14:17 -0700, Landy Landy wrote:
> > What's the reason that you can't get the customer IP
> > address?
> >
> > If you can find a way to get the IP address, then you could
> > use the
> > following (which uses iptables and PHP):
> >
> > http://www.andybev.com/index.php/Using_i
> I would like to create a captive portal using PHP where it would
> authenticate the user based on IP address and status. I tried using
> php socket and redirect traffic to it with ip tables. I'm having some
> problems since I can't get the customer ip address.
What's the reason that you can't
1 - 100 of 276 matches
Mail list logo
