[squid-users] Squid 3.3.5 dump core

2013-06-05 Thread C. Pelissier
Under Solaris 10 squid 3.3.5 dump core every 10 minutes even with a very low traffic. squid 3.3.4 was stable. -rw--- 1 root root 24091108 Jun 5 08:34 core.squid.4970 -rw--- 1 root root 28195300 Jun 5 08:44 core.squid.15773 -rw--- 1 root root 23124452

[squid-users] Slow down connexion for IP making a lot of hits

2013-05-15 Thread C. Pelissier
Hi, How can squid slow down clients (Browsers) making a lot of hits (over 100 000 hits per day) by staying connected all day and night to web sites doing page refresh up to 30 per minute (increasing also the size of access_log) ? Same question if download is over 20 Gb per day. delay_pools

Re: [squid-users] Slow down connexion for IP making a lot of hits

2013-05-15 Thread C. Pelissier
You might find this easier to achieve with IPtables rules than Squid: http://www.debian-administration.org/articles/187 You'd want to restrict connections to your Squid port (probably 3128) to be a compromise between lots in a few seconds to allow for normal browser parallel accesses,

Re: [squid-users] 3.3.4 compilation error on Solaris 10

2013-05-07 Thread C. Pelissier
Use Solaris gcc (compiling with studio no longer works after version 2.7). Le mar. 07/05/2013 à 15:08, drewB a écrit : Compiling version 3.3.4 on Solaris 10 using Solaris Studio 12.3, I get the following error: ... Making all in format source='Config.cc' object='Config.lo' libtool=yes \

[squid-users] Squid 3.2.10 Solaris 10 compilation failed

2013-04-29 Thread C. Pelissier
Hi, Squid 3.2.10 failed to compile under Solaris 10 Error : src/ip/Intercept.cc does not find include file src/tools.h ../src -I../../include -I../../libltdl -I/usr/sfw/include -Wall -Wpointer-arith -Wwrite-strings -Wcomments -pipe -D_REENTRANT -pthreads -Usparc -Uunix -Ui386

[squid-users] How to tell squid to redirect to cache_peer if IP's url belong to a defined adress range

2013-03-29 Thread C. Pelissier
Hi, How can I configure squid (direct proxy) to redirect to another parent proxy only if requested url hostname DNS resolves to a particular network (for example 125.0.0.0/32). With cache_peer PARENT-PROXY-IP parent 3128 0 proxy-only no-query all requested client url are redirected to

Re: [squid-users] Build Squid 3.3.1 on Solaris 10

2013-02-27 Thread C. Pelissier
Le jeu. 28/02/2013 à 01:39, Amos Jeffries a écrit : On 28/02/2013 10:32 a.m., Markus Sonnenberg wrote: On 2/27/2013 5:04 PM, C. Pelissier wrote: Le mer. 27/02/2013 à 16:21, Markus Sonnenberg a écrit : Hi All, i'm trying to build the latest squid on solaris 10 and i'm facing

Re: [squid-users] HAVP alternative for traffic scanning?

2013-02-21 Thread C. Pelissier
Le jeu. 21/02/2013 à 10:43, Henri Wahl a écrit : Hello world, does anybody know a good solution as replacement for the HTTP AntiVirus Proxy HAVP? We want to do online virus scanning, where HAVP does a good job, both there seems to be no much development (e.g. IPv6) and some performance

[squid-users] Squid 3.3.1 / Solaris 10

2013-02-12 Thread C. Pelissier
Hi, I've just tried Solaris 10 compilation of last squid 3.3.1. Here is my configure : CFLAGS=-std=c99 ./configure --prefix=$PREFIX --disable-strict-error-checking --localstatedir=/var/squid --with-pthreads --enable-default-err-language=French --enable-err-languages=French

[squid-users] Selective Java Filtering

2013-01-25 Thread C. Pelissier
Hello, I have tried the following ACL under the last squid 3.2.6 release to block Java Applet if Java 7 version is update 01 to update 10 (Just allowing Java 7 update 11). acl Java_UA browser Java/1\.7\.0_0 Java/1\.7\.0_10 ... http_access deny Java_UA ... deny_info ERR_JAVA_BROWSER Java_UA