[squid-users] Squid-3.0.STABLE1 available

2007-12-14 Thread Duane Wessels
The Squid HTTP Proxy team is pleased to FINALLY announce the availability of the Squid-3.0.STABLE1 release! Please refer to the release notes at http://www.squid-cache.org/Versions/v3/3.0/RELEASENOTES.html if and when you are ready to make the switch to Squid-3. This new release can be downloade

[squid-users] Squid-3.0.RC1 now available

2007-10-02 Thread Duane Wessels
The Squid Web Proxy developers are pleased to announce the availability of the Squid-3.0.RC1 "release candidate" release. This new release can be downloaded from our HTTP or FTP servers: http://www.squid-cache.org/Versions/v3/3.0/ ftp://ftp.squid-cache.org/pub/squid-3/DEVEL/ Or the mirrors. For

[squid-users] WCW'05 extension

2005-03-19 Thread Duane Wessels
Dear colleagues, We have extended the submission deadline by one week to March 22nd. Call for papers 10th International Workshop on Web Caching and Content Distribution (WCW) Support of IEEE pending Sophia Antipolis, French Riviera, France 12 September - 14 September, 2005 http://

[squid-users] CFP: 10th International Workshop on Web Caching and Content Distribution

2005-01-24 Thread Duane Wessels
10th International Workshop on Web Caching and Content Distribution (WCW) Support of IEEE pending Sophia Antipolis, French Riviera, France 12 September - 14 September, 2005 http://2005.iwcw.org/ O

[squid-users] CFP: 10th International Workshop on Web Caching and Content Distribution

2004-12-15 Thread Duane Wessels
10th International Workshop on Web Caching and Content Distribution (WCW) Support of IEEE pending Sophia Antipolis, French Riviera, France 12 September - 14 September, 2005 http://2005.iwcw.org/ Overview: The International Workshop on Web Caching and Content Distribution (WCW) serves as the pr

Re: [squid-users] ICAP patch for STABLE6 version

2004-09-15 Thread Duane Wessels
Anyone knows where to get a working patch for 2.5.STABLE6? FYI, I occasionally make squid-icap releases and put the files at http://www.squid-cache.org/~wessels/squid-icap-2.5/ Duane W.

Re: [squid-users] squid and Performing DNS test

2004-03-19 Thread Duane Wessels
On Fri, 19 Mar 2004, admin wrote: > Hello. > > why I go to execute the comand squid -NCd1 the squid proxy can´t starting, > because show me the following error. > > FATAL: ipcache_init: DNS name lookup test failed > > I have the service named(DNS) runing ok. Something is wrong with your DNS se

RE: [squid-users] disk space over limit, why?

2004-03-19 Thread Duane Wessels
On Fri, 19 Mar 2004, Mihai BUHA wrote: > It looks to me like the swap directory is slowly shrinking to the > configured size, so everything seems ok... Why did it grow to > that size? Dunno... I suppose there was some other squid in place > before, or some other configuration... My guess is th

Re: [squid-users] Monitoring Squid

2004-03-17 Thread Duane Wessels
On Wed, 17 Mar 2004, MANUEL CANSECO GARCIA wrote: > Any person know another tool for monitoring squid apart MRTG? Thx You can try out my stuff. It uses Perl and RRDTool: http://www.squid-cache.org/~wessels/squid-rrd/ Duane W.

Re: [squid-users] applying patch files

2004-03-16 Thread Duane Wessels
On Tue, 16 Mar 2004, Andrej G. Zadorozhnyj wrote: > I have Squid 2.5 Stable 4 installed from port tree (portrevision 10 FreeBSD > 4.9) and I want to install by hand (because there is not new port revision > in port tree yet) new patch files, but I don't known how to do it! Can > anybody explai

Re: [squid-users] ./configure error when install squid 2.5 stable5

2004-03-15 Thread Duane Wessels
> I can't find this crt1.o file on my box. I've had a browse on the innernet for some > help. They say its a lib file associated to gcc or something to that effect, and > find the libgcc rpm and install it, but I'm not convinced > Anyway, any simple ideas??? I'm not a linux expert, but it

Re: [squid-users] REPOST: HELP! WARNING: failed to unpack meta data

2004-03-15 Thread Duane Wessels
On Mon, 15 Mar 2004, Mark Pelkoski wrote: > Henrik, > > If you were getting these errors, how would you T-shoot this > > > I just built this box about two weeks ago. It has 4 separate diskd > stores for cache. I get about 20 - 30 " WARNING: failed to unpack > meta data" messages per MINUTE

Re: [squid-users] About squid Mib

2004-03-15 Thread Duane Wessels
On Mon, 15 Mar 2004, galle wrote: > Hi all !!! > > I have read the Squid-Mib but i cant understand the difference between > -cacheProtoClientHttpRequests This is # requests received from clients > and > -cacheServerRequests This is # requests forwarded to servers. Their difference is approx

Re: [squid-users] squid with wccp on solaris

2004-03-15 Thread Duane Wessels
> ipnat config file: > > rdr bge0 0.0.0.0/0 port 80 -> 167.206.45.99 port 8080 tcp > > output for ipnat -l: > > #ipnat -l > List of active MAP/Redirect filters: > rdr bge0 0.0.0.0/0 port 80 -> 167.206.45.99 port 8080 tcp > > List of active sessions: > > The network guy told me that the cisco router

Re: [squid-users] always/never_direct....

2004-03-15 Thread Duane Wessels
On Mon, 15 Mar 2004, Chris Knipe wrote: > Lo all, > > I seem to not understand always_direct / never_direct properly > > acl local src 66.18.x.x/29 > cache_peer a.a.a.a parent 3128 0 no-query no-digest no-netdb-exchange > round-robin > cache_peer b.b.b.b parent 3128 0 no-query no-digest no-

Re: [squid-users] High CPU load with diskd: back to ufs

2004-03-15 Thread Duane Wessels
> My squid is really slow. Your Squid is probably slow because the disk is a bottleneck with "UFS" storage scheme. When you switched to diskd, you allowed Squid to become much more efficient. Response time probably went down, but CPU usage went up. Higher CPU usage is not necessarily a bad thin

Re: [squid-users] Squid + ICAP status / feedback

2004-03-05 Thread Duane Wessels
> . At the moment it is available as a patch for 2.5, given > a new 2.5 has been released recently, will it need to be updated ? > are there people maintaining it ? how would you rate the stability ? I've merged the icap-2.5 branch to the s2_5 branch. At least I think I have--still haven't r

Re: [squid-users] swap.state question

2004-02-27 Thread Duane Wessels
On Fri, 27 Feb 2004, OTR Comm wrote: > Hello, > > Could someone explain the relationship between the swap.state file and > the actual files in the L2 directories? > > Is the swap.state a database where Squid does it's cache checking and > the L2 directory files where the data is presented from?

Re: [squid-users] View Config options in place

2004-02-23 Thread Duane Wessels
On Mon, 23 Feb 2004, Eric Kahklen wrote: > Is there an easy way to view what options you have confgured in your > squid.conf file? I'd like to see what excact is configured without the > comments. You can get Squid to dump its configuration: % squidclient mgr:config For that to work you

Re: [squid-users] ACL question

2004-02-20 Thread Duane Wessels
On Fri, 20 Feb 2004, Ballou, Matthew wrote: > Hello, > Could someone give me an example of the synatax in setting up squid > to prevent downloads of certain files (Zip, Exe for example). > I checked out the Archive posts but I dont seem to have it right. > > acl Downloads urlpath_regex .\

RE: [squid-users] FW: Squid memory utilization

2004-02-20 Thread Duane Wessels
On Fri, 20 Feb 2004, Scott Phalen wrote: > I understand that there are other processes that will run just from turning > on the server. I am using "TOP" to verify RAM utilization. When squid > isn't running there is not more than 200MB of RAM used. I turn on squid and > within 6 hours I am a

RE: [squid-users] FW: Squid memory utilization

2004-02-20 Thread Duane Wessels
On Fri, 20 Feb 2004, Scott Phalen wrote: > Thanks for showing me that command. Here is the info you asked for. > Anything I should be concerned about in here? > > Resource usage for squid: > UP Time:13526.773 seconds > CPU Time: 1184.000 seconds > CPU Usag

RE: [squid-users] FW: Squid memory utilization

2004-02-20 Thread Duane Wessels
On Fri, 20 Feb 2004, Scott Phalen wrote: > Ok, I have been all over the memory FAQs and still can't figure out why my > server is consuming all it's RAM. I have 2GIG of DDR RAM and the only > service running on this server is Squid. My cache_mem is set to 64MB and > cache_dir is 1 16 256.

Re: [squid-users] child squid proxy not saving data on disk, but anyway operating correctly.

2004-02-17 Thread Duane Wessels
> Btw the pc wich operates squid on is working as a bridge, and I realised, that > noone localhost connections are being processed. Interresting. Btw non locally > originated connections are working well. Then you can copy the squidclient program to an external machine (or install Squid again some

Re: [squid-users] Transparent Proxying Weirdness

2004-02-16 Thread Duane Wessels
On Tue, 17 Feb 2004 [EMAIL PROTECTED] wrote: > DNS Domain 'virtual' is invalid: Host not found (authoritative). > This means that: > > The cache was not able to resolve the hostname presented in the URL. > Check if the address is correct. > > > Could someone help me out on this? > > SQUID > h

Re: [squid-users] Squid parent: child process XXX exited due to signal 11

2004-02-16 Thread Duane Wessels
On Mon, 16 Feb 2004, [iso-8859-2] Éliás [iso-8859-2] Tamás wrote: > Hy all. After some hours of continous work I see the above message in the > messages log, and squid dissapears from process list. The system is a debian > woody, and the squid id the latest non-cvs beta, compiled from source. >

RE: [squid-users] is it a DOS attack ??

2004-02-16 Thread Duane Wessels
On Mon, 16 Feb 2004, Danish Khan wrote: > Yes I am using the same. Kindly tell me what should I do? What network device do you use for the interception? Duane W.

Re: [squid-users] zero snmp values

2004-02-16 Thread Duane Wessels
On Mon, 16 Feb 2004, Stuart Clark wrote: > Is their a way to reset/zero one particular snmp mib value while the > others continue ? Nope! Duane W.

RE: [squid-users] SQUID SETTINGS

2004-02-16 Thread Duane Wessels
On Sat, 14 Feb 2004, Scott Phalen wrote: > Duane, > > I have been watching my processes and cache all day today. Squid is the > only thing running on this server and seems to be running at 99% CUP > utilization. I currently have 600MB free mem out of 2GB (I reset squid 2 If you are using a v

RE: [squid-users] is it a DOS attack ??

2004-02-16 Thread Duane Wessels
On Sun, 15 Feb 2004, Danish Khan wrote: > Yea I can saw the forwarding loop thing in cache.log.. but plz tell me in > detail that how I overcome that. Forwarding loops usually happen (1) when you are using a parent cache, or (2) when you are using HTTP interception (aka transparent caching).

Re: [squid-users] ftp clients trouble: helpme please

2004-02-14 Thread Duane Wessels
On Sat, 14 Feb 2004, [EMAIL PROTECTED] wrote: > I've a beautifull squid 2.5.4 server running with gentoo. > It works really well with http and https client requests. > If a client requests an ftp://ftp.rfc-editor.org/some_RFC_#.txt > the browser displays it without trouble (the address is not >

Re: [squid-users] Proxy-Chaining

2004-02-14 Thread Duane Wessels
On Sat, 14 Feb 2004, Andreas Neumeier wrote: > Hello there, > > I tried to build a proxy chain with > > cache_peer > and > cache_peer_access > as well using: > always_direct deny > never_direct allow > > Now, normal operation seems to work like this: > > client <-> squid1 <-> squid2 <-> target-

Re: [squid-users] cache_dir L1 L2 question

2004-02-14 Thread Duane Wessels
On Sat, 14 Feb 2004, OTR Comm wrote: > Hello, > > I have a 80GB drive on a system that I would like to dedicate to a squid > server. The notes in squid.conf say that I should subtract 20% and use > that number for the Mbytes field for cache_dir. So I would have 64000. You should do that to s

RE: [squid-users] is it a DOS attack ??

2004-02-14 Thread Duane Wessels
On Sat, 14 Feb 2004, Danish Khan wrote: > I have configured my box with 8192 FD but still I got warnings of FD's and > tooo many comm.(23) Port error WHY plz update :( > > Danish > > -Original Message- > From: Mahmood Ahmed [mailto:[EMAIL PROTECTED] > Sent: Saturday, February 14, 2004 1

Re: [squid-users] Low hit rate

2004-02-14 Thread Duane Wessels
On Sat, 14 Feb 2004, Kemi Salam-Alada wrote: > Hi all, > > How can I tune my squid so that I can generate high hit rate? Presently, I > am running squid using FreeBSD 4.3 OS and Squid 2.5 STABLE2. > The file system used for the disk is aufs. See the 'refersh_pattern' directive in squid.conf.

Re: [squid-users] child squid proxy not saving data on disk, but anyway operating correctly.

2004-02-14 Thread Duane Wessels
On Sun, 15 Feb 2004, [iso-8859-2] Éliás [iso-8859-2] Tamás wrote: > Hy all! I have an ordinary transparent squid proxy defined on my gateway, wich > operates correctly. An other transparent proxy has been set up on the other > part of the network, wich has the proxy on the gateway as a parent d

Re: [squid-users] SQUID SETTINGS

2004-02-13 Thread Duane Wessels
On Fri, 13 Feb 2004, Scott Phalen wrote: > Hello, I am very new to the world of squid. > > First question ~ will WCCP V2 be incorporated in Squid 3.0? I hope so. > Second question ~ This is pertaining to cache_mem size. Here is what I am > using: > Dell 650 PowerEdge Server > 3Gh

Re: [squid-users] DNS Problems

2004-02-13 Thread Duane Wessels
On Fri, 13 Feb 2004, Stephen J. McCracken wrote: > Squid Cache: Version 2.5.STABLE4-20040211 > > Could someone please give me a pointer for the following DNS problems? > > On startup cache.log reports: > > 2004/02/13 16:20:27| Starting Squid Cache version 2.5.STABLE4-20040211 > for i686-pc-linu

Re: [squid-users] RE: Squid Accelerator and SSL, Unsupported method "L"

2004-02-13 Thread Duane Wessels
On Fri, 13 Feb 2004, Kent, Mr. John (Contractor) wrote: > Greetings, > > Setting up Squid3.0 as an accelerator that needs to handle SSL. > > As you recommended Henrik: > Un-encrypted my key. Modified key and cert permissions. > No longer get FATAL: Bungled squid.conf error. ! Good. > > For tes

Re: [squid-users] back to Squid 2.3

2004-02-13 Thread Duane Wessels
> > I had a lot of problems with squid 2.5stable6 on a Slackware 9.1. > > I changed the configuration and the compile option a milion times, > > enabling and disabling aufs and async-io, tuning the cache_mem and > > cache_dir. After a while (say ten to thirty minutes) the daemon stops > > answering

Re: [squid-users] back to Squid 2.3

2004-02-13 Thread Duane Wessels
On Fri, 13 Feb 2004, Davide Vaghetti wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I had a lot of problems with squid 2.5stable6 on a Slackware 9.1. > I changed the configuration and the compile option a milion times, > enabling and disabling aufs and async-io, tuning the cache_m

RE: [squid-users] need help debugging

2004-02-12 Thread Duane Wessels
On Thu, 12 Feb 2004, JOHNSON DAVID R wrote: > can you force a squid crash to test and see if a dump file is generated. Yes, you can send it a signal manually, like this % ps ax|grep squid 5981 ?? IW 0:01.51 /usr/local/squid/sbin/squid -sD 13646 ?? R

Re: [squid-users] squid, forwarding some specific requests to another proxy

2004-02-12 Thread Duane Wessels
> Your assumtion is right. Any http request goes through my cache server > running squid which I control. The ISP is using HTTP interception. The > problem is that I am not sure exactly which sites the ISP filters, so I > wonder if I can send the filtered http request to a proxy, and the way I > sq

Re: [squid-users] need help debugging

2004-02-12 Thread Duane Wessels
On Thu, 12 Feb 2004, JOHNSON DAVID R wrote: > I want to debug my squid process so I can find out what might be causing the > FATAL: Segment Fault received... dying error. > What level can I set the debug_options to so that I get this info without my > cache.log filling up in under 15 minutes?

Re: [squid-users] FreeBSD 4.9-Stable and WCCP not Working

2004-02-07 Thread Duane Wessels
On Sat, 7 Feb 2004, Cam wrote: > After much testing and pondering, my attempts to get this working have > failed. I have FreeBSD 4.9-Stable and a 2611 router. This used to work > perfectly with FreeBSD 4.6. Once I get the GRE tunnel up I can ping > between the hosts no problem. When I activate

Re: [squid-users] Squid does not accept funny character in the domain?

2004-02-05 Thread Duane Wessels
On Fri, 6 Feb 2004, Hwee Khoon, Neo wrote: > Hi, I am using squid 2.5S4. I ca'nt access sites like > http://`black.blogspot.com/ which has the "`" character in the domain. I > understand from the FAQ that underscore are not allowed, and the solution > calls for the using of ./configure --enable

[squid-users] Squid: The Definitive Guide now available

2004-02-05 Thread Duane Wessels
O'Reilly released "Squid: The Definitive Guide" a couple of days ago. Here is their web page for it: http://www.oreilly.com/catalog/squid/ Has anyone received a copy yet? Looks like Amazon and Barnes and Noble are yet shipping it. Duane W.

RE: [squid-users] URLS with double question mark don't work

2004-01-16 Thread Duane Wessels
On Fri, 16 Jan 2004, Derek Winkler wrote: > I've now retrieved these jpeg images with wget both with and without squid. > > When squid returns them to wget, it has a \r \n added on to the beginning. > > Sounds like a squid bug to me. So have you decided that the problem is not related to quest

Re: [squid-users] Only caching sometimes

2004-01-16 Thread Duane Wessels
On Wed, 14 Jan 2004, Ken wrote: > Hi all, > > Caching is not happening the way I expected. > > I am using Squid to cache the 'expensive' output of a Zope server. >Due to increased traffic on the site, I am getting many server >errors (database conflict), so it is urgent that objects be cached.

Re: [squid-users] Need advise on installation.

2004-01-08 Thread Duane Wessels
On Thu, 8 Jan 2004, Darren wrote: > Hello, > > I've got an older Dell server that I'm going to use for squid. > > I have 2 Ultra160 drives: 1 Quantum 9gb and 1 Seagate 36.1gb. > > Should I install the OS (RH9) on the Quantum and use the Seagate for > cache? or should I install the OS on the Sea

Re: [squid-users] LDAP Authentication storage issue

2004-01-08 Thread Duane Wessels
On Thu, 8 Jan 2004, Craig Sharp wrote: > Hi, > > I am using LDAP to authenticate to Novell E-Dir with Squid for > Internet access. It is working perfectly, however our management > and users do not like the fact that when the browser is closed down > and reopened, they have to authenticate aga

Re: [squid-users] help with access lists

2004-01-08 Thread Duane Wessels
On Thu, 8 Jan 2004, Dan Brita wrote: > I am having a hell of a time getting squid to let me browse the internet from client > machines. Every time I try to access the internet I get this error. > While trying to retrieve the URL: http://www.yahoo.com/ > > The following error was encountered: >

RE: [squid-users] how to send orginator IP

2004-01-07 Thread Duane Wessels
On Wed, 7 Jan 2004, Elsen Marc wrote: > > > > > > Hi all > > > > thanks for the reply > > > > how do i make squid as a http logger, not to cache the objects, > > > > Configure Squid with the 'null' storage type : > > --enable-storeio=null,ufs > > Then in squid.conf specify : > > ca

Re: [squid-users] Re: TCP parent, peer_connect_timeout, failover, load balancing depending on load

2004-01-06 Thread Duane Wessels
On Tue, 6 Jan 2004, Gabriel Wicke wrote: > On Tue, 06 Jan 2004 16:42:26 +0100, Henrik Nordstrom wrote: > > Thanks for your reply! > > > no-query round-robin gives plain rotation over the servers. > > This would still take different peer weights into account or is this > only affecting the ICP s

Re: [squid-users] Smb_auth

2004-01-06 Thread Duane Wessels
On Tue, 6 Jan 2004, raja wrote: > Hello, > > I'm at my wits' end. I have configure a running Squid. Everyone can > authorize, except one user. I tried to authenticate against smb_auth > like this ... > > # /usr/sbin/smb_auth -W DDD -d > user passwd > Domain name: DDD > Query address options: >

Re: [squid-users] can some one please tell me what it is ?

2004-01-05 Thread Duane Wessels
On Mon, 5 Jan 2004, Mahmood Ahmed wrote: > Hello List > > we have been having these messages in cache logs for last 2 days. > > 2004/01/06 03:20:41| WARNING: Forwarding loop detected for: > GET /testrun/index.html HTTP/1.0 > Authorization: Basic Z2V0OmdldA== > User-Agent: curl/7.10.7 (i386-port

Re: [squid-users] DNS + parent + redirect

2004-01-05 Thread Duane Wessels
On Mon, 5 Jan 2004, Elton S. Fenner wrote: > Hi All > > First I want to thank you. With your help I put a Squid box working just > fine. > > But i'm missing something. > > Let me tell you what's going on. > > I put SquidGuard with squid. SquidGuard is blocking some sites and > replacing some ba

RE: [squid-users] local IP addresses and proxy.pac

2004-01-03 Thread Duane Wessels
On Sat, 3 Jan 2004, mailinglists wrote: > > Hi > > This I found in messages log: > > Jan 3 02:30:48 styhead squid[8955]: WARNING: Forwarding loop detected > for: GET //apps/stag/tel_ostry_provoz/index.php HTTP/1.0^M Host: > 213.200.246.227^M Accept: */*^M Via: 1.0 styhead.seaan.net:80 > (squid

Re: [squid-users] local IP addresses and proxy.pac

2004-01-02 Thread Duane Wessels
On Thu, 1 Jan 2004, Florian Effenberger wrote: > Hi there, > > what do I need to add to a proxy.pac file in order to have > > local IPs (192.168.0.0/255.255.255.0) accessed directly > and > external IPs via proxy? > > Right now, it only works for domain names. See the isInNet f

Re: [squid-users] proxy.pac-Bug in IE?

2004-01-02 Thread Duane Wessels
On Thu, 1 Jan 2004, Florian Effenberger wrote: > Hi there, > > I have the following proxy.pac file: > > === > function FindProxyForURL(url, host) > { > if (isPlainHostName(host) || > dnsDomainIs(host, ".effenberger")) > return "DIRECT"; > else >

Re: [squid-users] ACL "dst" with no netmask

2004-01-02 Thread Duane Wessels
On Fri, 2 Jan 2004, Eric Geater 12/12/03 wrote: > I need to block an IP address. So far I've read that I can't enter it > into my dstdomain acl because it's not a FQDN. Fine, but the "dst" ACL > type expects an IP address AND subnet mask, which isn't used for web > addresses. Anyone who can

Re: [squid-users] httpd-accelerator for https servers

2004-01-02 Thread Duane Wessels
On Fri, 2 Jan 2004, cadu wrote: > Hi, > > I'm building a 2.5.STABLE4 to work as a reverse proxy on my firewall. > It's configured to listen for http and https requests. > > But it looks like the http or https connections can reach only the proxy server and > all comunication with my webservers

RE: [squid-users] Authentication TTL

2003-12-19 Thread Duane Wessels
On Fri, 19 Dec 2003, Travis Bullock wrote: > Thanks Duane, > > Is there a way to get the desired result from squid? Basically management > wants people to re-authenticate after 15 minutes in case someone walks away > from a multiuser station and leaves their browser open. This would prevent > s

Re: [squid-users] Strange High CPU usage

2003-12-19 Thread Duane Wessels
On Fri, 19 Dec 2003, Giulio Cervera wrote: > thank's for your reply: > > i'm monitoring median_select_fds > > this morning with 150req/sec > > select_loops = 280.262863/sec > select_fds = 1502.051748/sec > average_select_fd_period = 0.000660/fd > median_select_fds = 3.984375 > > thin evening w

Re: [squid-users] Authentication TTL

2003-12-19 Thread Duane Wessels
On Fri, 19 Dec 2003, Travis Bullock wrote: > Hey all, Greenhorn here again. > > I have the squid up and running nicely with NCSA authentication, currently > testing on my own XP machine with IE6. I would like the users credentials to > expire every 15 minutes as per request from management. > >

RE: [squid-users] False Web addresses, and how to handle them

2003-12-19 Thread Duane Wessels
On Fri, 19 Dec 2003, Eric Geater 12/12/03 wrote: > "There was an example acl for the purpose in the message sent by Duane." > > I didn't understand what I saw; that's what prompted my reply. I can > put something in my ACLs, but I'd like to know the implications behind > its structure. Someth

Re: [squid-users] Too few redirector processes are running

2003-12-19 Thread Duane Wessels
On Fri, 19 Dec 2003, OTR Comm wrote: > Yes, Squid has permission to run the redirector. Squid runs as 'nobody' > and the redirector is owned by 'nobody' with 755 permissions. The user nobody also needs at least read access to the directory where 'orsquidGuard' lives, and all parent directorie

Re: [squid-users] False Web addresses, and how to handle them

2003-12-18 Thread Duane Wessels
> Its not currently possible to block such requests in Squid because > the funny characters are a part of the "login" component of the > URL. Squid doesn't have any ACLs that use or care about the login > data. It should be pretty easy to come up with a patch that does. The attached patch adds a

Re: [squid-users] Too few redirector processes are running

2003-12-18 Thread Duane Wessels
> Is this telling me that my redirectors are dying from an error in the > redirector code, or what? Make sure that the Squid userid is able to execute the redirector program. Check file and directory permissions. Duane W.

Re: [squid-users] False Web addresses, and how to handle them

2003-12-18 Thread Duane Wessels
On Thu, 18 Dec 2003, Eric Geater 12/12/03 wrote: > I read an article in EWeek that explained how to create a misleading web > link or link in email by typing the acceptable http address, followed by > "%01%00@" and the actual destination address. I showed it to my boss, > who didn't like what

Re: [squid-users] Load balancing multiple Squid servers

2003-12-18 Thread Duane Wessels
On Wed, 17 Dec 2003, Cavanagh, Kevin B wrote: > > Hi there, > > Please forgive me if this question has been asked/answered before (I > searched the FAQs but quickly became too confused by all the various > postings regarding load balancing, etc). > > We currently have six RedHat Linux V8.0 serv

Re: [squid-users] Strange High CPU usage

2003-12-18 Thread Duane Wessels
> and actually configuration: > > cache_mem 64 MB > cache_swap_low 85 > cache_swap_high 90 > maximum_object_size 65536 KB > maximum_object_size_in_memory 24 KB > cache_replacement_policy heap LFUDA > memory_replacement_policy heap GDSF > cache_dir diskd /var/cache/spool/0 28000 96 256 Q1=72 Q2=64 >

Re: [squid-users] # of redirector children before system overload ??

2003-12-17 Thread Duane Wessels
> I am just wondering how many redirector children I should specify for a > system that is potentially supporting 5,000+ users. It will depend on the particular redirector program and other factors. Just pick a number that you think is more than large enough (say 30) and then watch Squid for a wh

Re: [squid-users] Problem to "make" LDAP_AUTH on Squid 2.4 STABLE 7

2003-12-17 Thread Duane Wessels
On Wed, 17 Dec 2003, Hamed Majnoonian wrote: > I am using a 4.9 STABLE machine and Squid 2.4 on it. Whenever I want to make > my LDAP_AUTH I got this error message: > > > > ### > cc -g -o squid_ldap_auth squid_ldap_auth.o -lldap -llber -lm > /usr/libe

Re: [squid-users] ACL question...

2003-12-17 Thread Duane Wessels
On Wed, 17 Dec 2003, Xpression wrote: > Hi list, I'm trying to deny some users to navigate at > certain times, I've created two users group (FULL_USERS [1] > and LIMITED_USERS [2]) and TIMES acl to achieve it, but it > doesn't works, group1 cannot access the cache, any clues ??? > Thanks... li

Re: RE: [squid-users] Squid & ntlm & Samba 3

2003-12-17 Thread Duane Wessels
On Wed, 17 Dec 2003 [EMAIL PROTECTED] wrote: > Hi !! > > Our cache.log has the following entries: > > 2003/12/17 16:29:51| helperStatefulOpenServers: Starting 5 'ntlm_auth' > processes > 2003/12/17 16:29:52| helperOpenServers: Starting 5 'ntlm_auth' processes > username must be specified! > > U

Re: [squid-users] is there a way to turn on/off basic_auth without editing squid.conf?

2003-12-17 Thread Duane Wessels
> btw, when is the book coming out, and how much? The book is being printed now, and will probably be shipping in late January. The list price is $45 and the discounted price is $32-36. Duane W.

Re: [squid-users] How to find the end of URL at cache file???

2003-12-16 Thread Duane Wessels
On Tue, 16 Dec 2003, [big5] ¶À ¤å³Ç wrote: > Hi all: >I want to find the rule of end of URL through cache file. In one computer > , I found that after the end of URL , 00 09 have been appeared. However , in another > computer , after the end of URL , 00 08 have been appeared. Can

Re: [squid-users] Squid and Mac Address

2003-12-16 Thread Duane Wessels
On Tue, 16 Dec 2003, Tarek Elemam wrote: > Dear Sir/Madam, > > I have recently installed Squid on a Linux 8.0 red hat. > I enabled the arp and compiled it. --enable-arp-acl to use MAC Address. > Did not get any errors while compiling. > > However, access is not allowed to the MAC Address. > > T

Re: [squid-users] Squid Auth or ACL suggestion ?

2003-12-16 Thread Duane Wessels
On Tue, 16 Dec 2003, Myongki Kim wrote: > I read transparent proxy and auth can't possible in previously message. > then, is possible external acl ? not auth. No. The problem is that the browser does not know what to do with the "407 Proxy Authentication Required" response, and the browser wi

Re: [squid-users] i see squid run twice, one as nobody, the other as root. Why?

2003-12-15 Thread Duane Wessels
On Mon, 15 Dec 2003, Renato Kalugdan wrote: > ok, so if i log in as root and issue command > > /usr/local/squid/sbin/squid > > the parent process will run as root and child process will run underneath? > > for security purposes, this is ok? In most situations I think it is fine. The parent pr

Re: [squid-users] Squid, snmp and MRTG

2003-12-15 Thread Duane Wessels
On Mon, 15 Dec 2003 Jim_Brouse/[EMAIL PROTECTED] wrote: > > Below is what I got after your email > > > snmpget -v 1 -c public localhost:3401 .1.3.6.1.4.1.3495.1.1.1 > SNMPv2-SMI::enterprises.3495.1.1.1 = INTEGER: 92 So we know that Squid is accepting and responding to SNMP queries. > Then I t

Re: [squid-users] i see squid run twice, one as nobody, the other as root. Why?

2003-12-15 Thread Duane Wessels
On Mon, 15 Dec 2003, Renato Kalugdan wrote: > Morning, > > ps -ax shows squid running as nobody and as root. > > I thought commands below would disallow root to run squid. This is normal. The first process is like a "watchdog." Its job is to monitor the child and make sure there is always on

Re: [squid-users] problems with post/get -- may be ! not sure at all :os

2003-12-15 Thread Duane Wessels
Your access controls are very strange > acl ACISNETWORK src 10.1.1.0/255.255.255.0 > acl all src 0.0.0.0/0.0.0.0 > acl manager proto cache_object > acl localhost src 127.0.0.1/255.255.255.255 > acl to_localhost dst 127.0.0.0/8 > acl SSL_ports port 443 563 > acl Safe_ports port 80 > acl CONNECT me

Re: [squid-users] Squid auth cache

2003-12-15 Thread Duane Wessels
On Mon, 15 Dec 2003, Esteban wrote: > Hello, > > I have a little problem with Squid auth. I am using radius Squid auth, > using auth.pl from Edmar Lourenco Borges. > > When a client sends its login and password to Squid, Squid sends an > authentication request to my radius server. It works fine

Re: [squid-users] Fw: delay pools and cache

2003-12-14 Thread Duane Wessels
On Sun, 14 Dec 2003, Gustavo Alvarez (Tecoar) wrote: > i want to know if it is possible to limit a user to download .mp3 files > from the internet at 256Kbps, but if the .mp3 file is already in the cache > allow him full bandwidth (10/100Mbit) yes, use delay pools with an access list that matc

Re: [squid-users] Squid in non-masquerading mode

2003-12-14 Thread Duane Wessels
> WHAT I WANT > > > > (client IP 10.0.0.1) > (request to squid 10.0.0.2) > request to > Internet 10.0.0.1(I want the originating IP to be the client not squid) > > > any help ? see http://www.squid-cache.org/Doc/FAQ/FAQ-7.html#ss7.13

Re: [squid-users] ncsa_auth

2003-12-12 Thread Duane Wessels
On Sat, 13 Dec 2003, Simon Walters wrote: > I am very new to squid, and I was following the instructions in >a manual to make squid ask for a username/password. It said squid >came with a programme called ncsa_auth, but when I looked for it, >I couldn't find it anywhere. I did a locate, but it

RE: [squid-users] Squid dstdomain ACL

2003-12-12 Thread Duane Wessels
> Thanks Duane. Unfortunately, my domains list is HUGE (~600,000 domains) and > the cache already runs at 50-95% CPU during the day, most of which I assume > is due to the huge domains list. If I were to lose the dstdomain ACL and > only use url_regex, would performance stay where it is? Sadly,

Re: [squid-users] forwarded_for

2003-12-12 Thread Duane Wessels
On Fri, 12 Dec 2003, Emilio Casbas wrote: > > Duane Wessels wrote: > > > > >Here is how X-Forwarded-For works: > > > >Each proxy in the hierarchy is going to append something to the > >X-Forwarded-For header. If 'forwarded_for' is on, then Sq

Re: [squid-users] forwarded_for

2003-12-12 Thread Duane Wessels
On Fri, 12 Dec 2003, Emilio Casbas wrote: > Hi, > In one jerarquia of 3 levels of proxy-cache, we have configured so that > the first level shows ips of the clients (forwarded on) and works well, > and in proxis-cache of third-level of exit (forwarded off), but here is > where it does not work

Re: [squid-users] Question regarding squid and url's

2003-12-12 Thread Duane Wessels
On Fri, 12 Dec 2003, Jim Greene wrote: > Hello, > I am attempting to do the following: > Type in http://10.0.0.1:3128/www.yahoo.com in my browser. I need to be able > to access a site like that because of some software we will be using that > does not have a proxy setting. > That gives me a

Re: [squid-users] Squid dstdomain ACL

2003-12-12 Thread Duane Wessels
On Fri, 12 Dec 2003, Mike McCall wrote: > All, > > I have a fairly busy cache using native squid ACLs to block access to > certain sites using the dstdomain ACL type. This is fine for denying access > to sites like www.playboy.com, but doesn't work when people use google's > cache of pages and

Re: [squid-users] Squid, snmp and MRTG

2003-12-11 Thread Duane Wessels
On Thu, 11 Dec 2003 Jim_Brouse/[EMAIL PROTECTED] wrote: > > This is the command I used mrtg /var/www/mrtg/mrtg-squid.cfg 49,9 > > Is that how you meant for 49,9 to be used? Not really. I meant for this line to be in squid.conf: debug_options ALL,1 49,9 > Below is the output in cache.log

Re: [squid-users] moving the cache

2003-12-11 Thread Duane Wessels
On Fri, 12 Dec 2003, George Dominguez wrote: > Good day, List > > I have added a new scsi disk to our squid server, and would like to know > which is the best way to move the cache to the new scsi disk. First, make sure Squid is not running. Assuming that your 'mv' can move directories betwee

Re: [squid-users] Squid, snmp and MRTG

2003-12-11 Thread Duane Wessels
On Thu, 11 Dec 2003 Jim_Brouse/[EMAIL PROTECTED] wrote: > I am trying to configure Squid for snmp although when I execute mrtg > pointing to my mrtg-squid.cfg I get a error "no response recieved". > > I am using the walkthrough contained on > http://www.psychofx.com/chris/unix/mrtg/ > > > > > I

Re: [squid-users] Update on odd errors

2003-12-11 Thread Duane Wessels
On Thu, 11 Dec 2003, fire-eyes wrote: > I removed the state files as Duane had instructed, and I am seeing > different problems now. This is after restarting squid, and for other > reasons, the entire machine. > > 2003/12/11 11:05:50| Starting Squid Cache version 2.5.STABLE4 for > i686-pc-linux

Re: [squid-users] [OT] Buy my book?

2003-12-11 Thread Duane Wessels
On Thu, 11 Dec 2003, fire-eyes wrote: > I appreciate this list being here, but why am I seeing what appear to be > automated responses from [EMAIL PROTECTED] to buy his book? Not > exactly a useful response to myself and others. > > I'm new to this list, is this normal here? This was my mistak

Re: [squid-users] Squid web acceleration for two

2003-12-11 Thread Duane Wessels
Duane W. -- Buy my book: http://squidbook.org/ On Wed, 10 Dec 2003 [EMAIL PROTECTED] wrote: > > Thanks much! Yes, pid_filename is an odd directive, no wonder I overlooked > that. ;) And that was the trick. By adding pid_filename "none", two > instances of squid will run, each using it's own

Re: [squid-users] 2.5.4: "WARNING: Disk space over limit: -755964 KB > 817152 KB" and huge memory usage

2003-12-11 Thread Duane Wessels
Duane W. -- Buy my book: http://squidbook.org/ On Wed, 10 Dec 2003, fire-eyes wrote: > Hello, I'd first off like to thank the squid team for a fantastic > product. Keep up the excellent work. > > Now I'd like to present the problem I have run into. I have hit google > for this one, and found cl

  1   2   >