[squid-users] upgrade but leave earlier version running?

2012-08-17 Thread J Webster
Is there a way to install the new version of squid and leave 2.6 running and then swpa them over once I am sure everything in verison 3 is running on the server ok? I don;t believe CentOS 5.8 has anything in the repos above 2.6 so is there a way I can use yum without installing from source and c

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-12 Thread J Webster
rtmp can be used on squid with a big BUT. since rtmp is a tcp protocol you must allow a CONNECT and destination ports to be used through the proxy. but it's not such a safe and good idea to do so. since the squid box is a router in your case and you will intercept the port 80\443 rtmp will not

Re: [squid-users] block dodgy sites with squidguard

2012-08-12 Thread J Webster
/2012 7:46 p.m., J Webster wrote: I would like to allow access to some 18+ sites on the proxy server but prevent anyone looking at dodgy illegal sites. Is there a way to do that with squidguard because the filter dest only seems to be on porn. Would I have to write my own access control list to pr

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
squid is a http proxy and not rtmp. rtmp use other ports then 80\443 and cannot be used over squid(you can if it's tcp and you allow CONNECT and unsafe ports which is not safe.. and will make the vpn connection vulnerable and maybe useless) if you have a solid reason to do so it can be a nice

[squid-users] squidguard spyware log

2012-08-11 Thread J Webster
I see some logs of spyware sites being blocked by squidguard. I presume these are sites that have cross domain xml or javascript or other things built in. Will squidguard block the whole page even if there is one script in it that might be spyware? 2012-08-11 17:10:31 [3630] Request(default/sp

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
eb traffic through a proxy so it must be possible somehow. On 11/08/12 13:54, Alex Crow wrote: On 11/08/12 08:20, J Webster wrote: Is there a way to push all openvpn connections using http ports through a transparent squid and how? Also, can I log which openvpn certificate/client is accessing which pag

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
eb traffic through a proxy so it must be possible somehow. On 11/08/12 13:54, Alex Crow wrote: On 11/08/12 08:20, J Webster wrote: Is there a way to push all openvpn connections using http ports through a transparent squid and how? Also, can I log which openvpn certificate/client is accessing which

[squid-users] take out something from squidguard.conf without restarting squid

2012-08-11 Thread J Webster
If I want to remove one of the dest restrictions form squidguard, how can I do this without restarting squid?

[squid-users] block dodgy sites with squidguard

2012-08-11 Thread J Webster
I would like to allow access to some 18+ sites on the proxy server but prevent anyone looking at dodgy illegal sites. Is there a way to do that with squidguard because the filter dest only seems to be on porn. Would I have to write my own access control list to prevent this?

Re: [squid-users] squidguard not blocking

2012-08-11 Thread J Webster
It wa spermissions on all the conf and db files - I thought I changed them but apparently not: 2012-08-11 08:41:22 [1096] init urllist /var/lib/squidguard/weapons/urls 2012-08-11 08:41:22 [1096] loading dbfile /var/lib/squidguard/weapons/urls.db 2012-08-11 08:41:22 [1093] squidGuard 1.3 started

Re: [squid-users] squidguard not blocking

2012-08-11 Thread J Webster
# # CONFIG FILE FOR SQUIDGUARD # #dbhome /usr/local/squidGuard/db #logdir /usr/local/squidGuard/logs dbhome /var/lib/squidguard logdir /var/log/squidguard dest porn { domainlist porn/domains urllist porn/urls } dest aggressive { domainlist aggressive/domains

[squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
Is there a way to push all openvpn connections using http ports through a transparent squid and how? Also, can I log which openvpn certificate/client is accessing which pages in this way? I assume I would have to use an alternative port or use firewall rules to only allow squid connections from

Re: [squid-users] squidguard not blocking

2012-08-10 Thread J Webster
> -Original Message- > From: J Webster > Date: Fri, 10 Aug 2012 20:34:31 > To: > Subject: [squid-users] squidguard not blocking > squidguard correctly blocks when I run from the command line: > [root squidguard]# echo "http://www.porn.com/ - - GET" | squidGuard -

[squid-users] squidguard not blocking

2012-08-10 Thread J Webster
squidguard correctly blocks when I run from the command line: [root squidguard]# echo "http://www.porn.com/ - - GET" | squidGuard -c /etc/squid/squidguard.conf -d 2012-08-10 17:45:22 [28923] New setting: dbhome: /var/lib/squidguard 2012-08-10 17:45:22 [28923] New setting: logdir: /var/log/squidg

[squid-users] deafult configure options?

2011-12-06 Thread J. Webster
I just updated to 3.1.18 but am not sure I have all the correct configure options. The version that comes with my distro is 3.1.4 and has: [root@264219 squid-3.1.18]# squid -v Squid Cache: Version 3.1.4 configure options:  '--build=i686-pc-linux-gnu' '--host=i686-pc-linux-gnu' '--target=i686-red

RE: [squid-users] limiting connection not working 3.1.4

2011-12-06 Thread J. Webster
delay_access allow_all still seems to throw an error: [root@264219 myscripts]# service squid restart Stopping squid:    [FAILED] Starting squid:    [FAILED] 2011/12/06 05:48:07| Processing Configuration File: /etc/squi

RE: [squid-users] limiting connection not working 3.1.4

2011-12-06 Thread J. Webster
Also, I now get a: 2011/12/06 05:22:49| squid.conf line 50: refresh_pattern -i (/cgi-bin/|?) 0 0% 0 2011/12/06 05:22:49| refreshAddToList: Invalid regular expression '(/cgi-bin/|?)  ': Invalid preceding regular expression FATAL: Bungled squid.conf line 65: delay_access allow a

RE: [squid-users] limiting connection not working 3.1.4

2011-12-06 Thread J. Webster
> > http_access deny manager > > http_access allow ncsa_users > > So all logged in users have unlimited access? > > > > http_access deny !Safe_ports > > http_access deny CONNECT !SSL_ports > > http_access deny to_localhost > > http_access deny maxuser > > These deny rules are placed below the allo

[squid-users] limiting connection not working 3.1.4

2011-12-05 Thread J. Webster
I have squid 3.1.4 but using this conf, the rate limiting to 1Mbps does not seem to work. What can I change in the conf / delay parameters? auth_param basic realm Myname proxy server auth_param basic credentialsttl 2 hours auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd

[squid-users] limiting connection not working 3.1.4

2011-12-02 Thread J. Webster
I have squid 3.1.4 but using this conf, the rate limiting to 1Mbps does not seem to work. What can I change in the conf / delay parameters? auth_param basic realm Myname proxy server auth_param basic credentialsttl 2 hours auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd

RE: [squid-users] won't accept port 8080, 80 works

2011-10-03 Thread J. Webster
any ideas on this? Thanks > From: webster_j...@hotmail.com > To: squid-users@squid-cache.org > Date: Tue, 27 Sep 2011 08:07:12 +0100 > Subject: [squid-users] won't accept port 8080, 80 works > > > I cannot get squid to connect on port 8080 even though it w

[squid-users] Squidalyser: nothing entered into database

2011-09-28 Thread J. Webster
Right, I installed everything and ran the mysql script so that it put in x thousand rows into the database. However, when I access: http://mysite.org/cgi-bin/squidalyser.pl I just get a blank page. No errors, it doesn't show anything at all. The webserver is working because if I access http://m

[squid-users] lost connection - reconnect automatically

2011-09-28 Thread J. Webster
I have a squid service with ncsa user auth (login/password). We have one user who loses their internet connection intermittently and is continually being re-presented with the login prompt. Presumably, the server / browser thinks they have disconnected from the server and asks them to re-authent

[squid-users] won't accept port 8080, 80 works

2011-09-27 Thread J. Webster
I cannot get squid to connect on port 8080 even though it works on 80. Firstly, should this iptables script have a DROP/REJECT command somewhere? Port 8080 is open. squid conf is below: # Generated by iptables-save v1.3.5 on Fri Sep 16 04:59:49 2011 *mangle :PREROUTING ACCEPT [19588:10233482] :IN

[squid-users] squid with Ipad and iphone and ipods

2011-09-26 Thread J. Webster
Is there anyway to get squid to work with ncsa auth on mobile devices such as Ipad and iphone and ipods? These devices have the ability to enter proxy settings but they do not accept username / password prompts and therefore fail squid authentication. Can I somehow detect a mobile device and per

[squid-users] won't accept port 8080, 80 works

2011-09-24 Thread J. Webster
I cannot get squid to connect on port 8080 even though it works on 80. Firstly, should this iptables script have a DROP/REJECT command somewhere? Port 8080 is open. squid conf is below: [code] # Generated by iptables-save v1.3.5 on Fri Sep 16 04:59:49 2011 *mangle :PREROUTING ACCEPT [19588:1023348

[squid-users] deleting headers

2011-09-24 Thread J. Webster
Is it a bad idea to put this in the conf? forwarded_for delete header_access From deny all header_access Referer deny all header_access Server deny all header_access User-Agent deny all header_access WWW-Authenticate deny all header_access Link deny all I accessed a "What's my IP" site and it kne

RE: [squid-users] deleting headers

2011-09-23 Thread J. Webster
I did not unsubscribe, that was someone else. How can I remove some headers for privacy but have squid work properly on most webpages? confs below > From: webster_j...@hotmail.com > To: squid-users@squid-cache.org > Date: Thu, 22 Sep 2011 16:49:43 +0100 >

[squid-users] deleting headers

2011-09-22 Thread J. Webster
Is it a bad idea to put this in the conf? forwarded_for delete header_access From deny all header_access Referer deny all header_access Server deny all header_access User-Agent deny all header_access WWW-Authenticate deny all header_access Link deny all I accessed a "What's my IP" site and it kn

[squid-users] won't accept port 8080, 80 works

2011-09-22 Thread J. Webster
I cannot get squid to connect on port 8080 even though it works on 80. Firstly, should this iptables script have a DROP/REJECT command somewhere? Port 8080 is open. squid conf is below: [code] # Generated by iptables-save v1.3.5 on Fri Sep 16 04:59:49 2011 *mangle :PREROUTING ACCEPT [19588:102334

[squid-users] RE: won't accept port 8080, 80 works

2011-09-22 Thread J. Webster
From: webster_j...@hotmail.com To: squid-users@squid-cache.org Subject: won't accept port 8080, 80 works Date: Thu, 22 Sep 2011 10:39:53 +0100 .ExternalClass .ecxhmmessage P {padding:0px;} .ExternalClass body.ecxhmmessage {font-size:10pt;font-family:Tahoma;} I cannot get squid to conne

RE: [squid-users] 2 squid on the same server

2011-05-01 Thread J. Webster
>> (logIn only challenges and fetches auth if it is tested, it is only >> tested when the IP is in 'other_subnet'). But I need a username/password box to be sent to the user by default unless the IP address = 212.234.34.43 The above comment sounds like it will only send a username/password requ

RE: [squid-users] 2 squid on the same server

2011-04-30 Thread J. Webster
> Ah, that tutorial is about writing an authentication helper (ie > ncsa_auth). Not an ACL helper. > > The difference being that external_acl_type ACL helpers auth*orize* the > request permission to do something in Squid because it matches an IP > used by some username. > > auth_param helpers auth

RE: [squid-users] 2 squid on the same server

2011-04-30 Thread J. Webster
> > Something has gone wrong external ACL should not be getting the username > and password. It should be getting the IP address on STDIN. > Of the examples, that I can find they all talk about the username and password bewing sent from squid: http://www.freesoftwaremagazine.com/articles/authenti

RE: [squid-users] 2 squid on the same server

2011-04-30 Thread J. Webster
> Both yes and no and no. > Yes to "something", any scripting or executable language can be used. > Via *external_acl_type* (NOT auth_param). > STDIN passes the username and password but how does squid pass the IP address to the squid helper?

RE: [squid-users] 2 squid on the same server

2011-04-30 Thread J. Webster
> How they interact is entirely up to you and your configuration. > The http_access lists are a full-blown boolean programming language with > hundreds of ACL permutations and paths you can configure. > > It is perfectly possible to configure in a way where they don't > interact, BUT you need to c

RE: [squid-users] 2 squid on the same server

2011-04-29 Thread J. Webster
If by "forwarded" you mean NAT. Authentication is not possible. See the > FAQ about why. > http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#Why_can.27t_I_use_authentication_together_with_interception_proxying.3F > > > > > Are there any examples for having 2 authentication methods run at > >

RE: [squid-users] 2 squid on the same server

2011-04-29 Thread J. Webster
> > So, I can do this all with one squid service listening on different ports? > > Yes. > > > Out of interest, I had a post the other day: "proxy external ip address > > acl‏" > > You mentioned that adding an extra authentication would mess with the > > existing ncsa auth. > > Can I therefore ad

RE: [squid-users] 2 squid on the same server

2011-04-29 Thread J. Webster
> yes. yes. wrong. no it does not. > > You seem very confused about Squid capabilities... > > - *add* a second http_port with "intercept" flag (or "transparent" if > its an old Squid). > - configure iptables to pass the VPN port 80 traffic *to* that new > Squid port. > - configure iptables to prev

[squid-users] 2 squid on the same server

2011-04-29 Thread J. Webster
Is it possible to run 2 squids on the same server? I have an existing proxy that has ncsa auth via direct connections to the proxy. I would also like to route port 80 traffic from a VPN through a transparent proxy but without any authentication. Is this possible? I'm guessing I would have to blo

RE: [squid-users] proxy external ip address acl

2011-04-28 Thread J. Webster
> > > Will this mess with the ncsa auth? > > > > It will. > > > > You have already said they "cannot enter usernames and passwords". So > > the interference being in the form of not asking for username/password > > seems to be what you are wanting. > > > > I would extend that a bit and maybe check

[squid-users] proxy external ip address acl

2011-04-28 Thread J Webster
I currently have a squid proxy using ncsa auth. I would also like to add an ip address auth for those users that cannot enter usernames and passwords (some iphones, DVD players etc.|) Can I just add an acl like this: acl external_IP 200.123.45.23 http_access allow external_IP Will this mess wi

RE: [squid-users] certificate auth?

2011-04-17 Thread J. Webster
ing certificate authentication: > >> > >> > >> http://squid-web-proxy-cache.1019090.n4.nabble.com/Client-Certificate-Authentication-td3353759.html > >> > >> Regards, > >> Tom > >> > >> 2011/4/15 J. Webster: > >>> > >>&g

[squid-users] certificate auth?

2011-04-15 Thread J. Webster
Is there a way to generate authentication certificates for access to a proxy server instead of or in addition to ncsa auth? I understand there is an IP address auth check in squid but is this for local network (192.168.x.x) only? My current setup is that users login through ncsa auth and all t

[squid-users] connection not being limited

2010-12-29 Thread J Webster
I have this at the bottom of my squid conf: delay_pools 1 delay_class 1 2 delay_parameters 1 -1/-1 125000/125000 On connection, it seems each individual client is being limited. However, iftop shows a connection to one site of over 6Mb?! Any ideas on why this is escaping through the throttle? se

Re: [squid-users] prevent squid being used as spam passthrough

2010-12-28 Thread J Webster
ports -- From: "Amos Jeffries" Sent: Monday, December 27, 2010 9:36 PM To: Subject: Re: [squid-users] prevent squid being used as spam passthrough On 27/12/10 09:23, J Webster wrote: Is it possible for a proxy running on port 80 or 8080 to be used as a pass

Re: [squid-users] refusing connections

2010-12-27 Thread J Webster
Is it possible that something in this squid.conf might cause a memory block or excessive CPU usage that could lead to this: It seems a coincidence that a server reboot seemed to fix the issue. auth_param basic realm NameHere proxy server auth_param basic credentialsttl 2 hours auth_param basic p

Re: [squid-users] refusing connections

2010-12-27 Thread J Webster
ravel Factory S.r.l." Sent: Sunday, December 26, 2010 11:44 PM To: "J Webster" ; Subject: Re: [squid-users] refusing connections what are the permissions and who is the owner of /var/spool/squid/swap.state ? please do a ls -lsa /var/spool/squid/swap.state and report

[squid-users] prevent squid being used as spam passthrough

2010-12-26 Thread J Webster
Is it possible for a proxy running on port 80 or 8080 to be used as a pass through or zone origination for spam email? We have had some users sign up with email addresses such as spambot and other stuff recently. I suspect these are just bots signing up around the web but got me thinking whether

Re: [squid-users] refusing connections

2010-12-26 Thread J Webster
very strange - I turned all local firewalls off and it is the same thing. -- From: "Amos Jeffries" Sent: Sunday, December 26, 2010 2:01 AM To: Subject: Re: [squid-users] refusing connections On 26/12/10 11:46, J Webster wrote: Hmm. I

Re: [squid-users] refusing connections

2010-12-25 Thread J Webster
Hmm. I turned the cache off and restarted and still the same issue so that means it can;t be the cache? -- From: "Kinkie" Sent: Saturday, December 25, 2010 11:31 PM To: "J Webster" Cc: Subject: Re: [squid-users] refusing c

Re: [squid-users] refusing connections

2010-12-25 Thread J Webster
00:03 store.log.5.gz -- From: "Kinkie" Sent: Saturday, December 25, 2010 11:11 PM To: "J Webster" Cc: Subject: Re: [squid-users] refusing connections store.log is usually not needed; I'd suggest to just disable it. sw

Re: [squid-users] refusing connections

2010-12-25 Thread J Webster
Maybe I should revuild the cache. Will that also delete swap.state and store.log automatically? -- From: "J Webster" Sent: Saturday, December 25, 2010 10:58 PM To: "Kinkie" Cc: Subject: Re: [squid-users] refusing connections

Re: [squid-users] refusing connections

2010-12-25 Thread J Webster
permissions somewhere or maybe some sort of blocking attack on the proxy? -- From: "Kinkie" Sent: Saturday, December 25, 2010 10:55 PM To: "J Webster" Cc: Subject: Re: [squid-users] refusing connections Anything in the cache man

Re: [squid-users] refusing connections

2010-12-25 Thread J Webster
5 21:47:19| Validated 521931 Entries 2010/12/25 21:47:19| store_swap_size = 9112264k 2010/12/25 21:47:20| storeLateRelease: released 6 objects -- From: "Kinkie" Sent: Saturday, December 25, 2010 10:41 PM To: "J Webster" Cc: Subje

Re: [squid-users] refusing connections

2010-12-25 Thread J Webster
The problem appears to be this: /var/spool/squid/swap.state: (13) Permission denied Why would that happen overnight? -- From: "J Webster" Sent: Saturday, December 25, 2010 10:33 PM To: Subject: [squid-users] refusing connections For n

[squid-users] refusing connections

2010-12-25 Thread J Webster
For no apparent reason, squid has started refusing connections today. Any ideas if there is something wrong with the conf below: auth_param basic realm AA proxy server auth_param basic credentialsttl 2 hours auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd authenticate_ca

[squid-users] sluggish squid

2010-12-25 Thread J Webster
I have had squid installed a while and tonight it is behaving very sluggishly. ANy ideas what I can do to check the problem? It doesn;t seem it is memory. Could be bandwidth related but I am getting could not connect errors from squid and then occasionally it connects but if it was bandwidth it

[squid-users] Re: squid cache not updating?

2010-12-08 Thread J Webster
Any ideas? Do I have to revuild the cache? Really not sure what to do on this one. Unsure whether the cache is being updated or it has stopped using the cache, etc. -- From: "J Webster" Sent: Friday, December 03, 2010 8:03 AM To: Subj

[squid-users] Re: squid cache not updating?

2010-12-06 Thread J Webster
Any ideas? Really not sure what to do on this one. Unsure whether the cache is being updated or it has stopped using the cache, etc. -- From: "J Webster" Sent: Saturday, December 04, 2010 7:14 PM To: Subject: Re: squid cache not upda

[squid-users] Re: squid cache not updating?

2010-12-04 Thread J Webster
Do I rebuild the cache? -- From: "J Webster" Sent: Friday, December 03, 2010 8:03 AM To: Subject: squid cache not updating? I have my cache mounted on a drive at /var/spool/squid. The other day I tied to mount a new folder also o

[squid-users] squid cache not updating?

2010-12-02 Thread J Webster
I have my cache mounted on a drive at /var/spool/squid. The other day I tied to mount a new folder also on the same drive, which is apparently not the best thing to do. Since then, I am not sure if my squid cache is updating or not. It seems to be stuck at 35Gb use and 16% capacity. Is there any

[squid-users] Re: squid cache not updating?

2010-11-26 Thread J Webster
I have my cache mounted on a drive at /var/spool/squid. The other day I tied to mount a new folder also on the same drive, which is apparently not the best thing to do. Since then, I am not sure if my squid cache is updating or not. It seems to be stuck at 35Gb use and 16% capacity. Is there any

[squid-users] squid cache not updating?

2010-11-25 Thread J Webster
I have my cache mounted on a drive at /var/spool/squid. The other day I tied to mount a new folder also on the same drive, which is apparently not the best thing to do. Since then, I am not sure if my squid cache is updating or not. It seems to be stuck at 35Gb use and 16% capacity. Is there any

Re: [squid-users] 2 NCSA password files

2010-11-21 Thread J Webster
quot;David Parks" Sent: Sunday, November 21, 2010 10:02 AM To: "'J Webster'" ; Subject: RE: [squid-users] 2 NCSA password files If you write a custom ACL helper you can match users against any criteria you define, then implement the delay pools for users that matched your custom ACL helper.

[squid-users] 2 NCSA password files

2010-11-20 Thread J Webster
Is it possible to have 2 NCSA password auth files and then have different download speeds per each NCSA file/user group?

Re: Fwd: Re: [squid-users] Re: Bandwidth split?

2010-11-10 Thread J Webster
To start off simply and just get the limit working, can I use this: delay_pools 1 delay_class 1 2 delay_parameters 1 -1/-1 125000/125000 delay_access 1 allow all That should limit all connections to 1 Mbps. I have seen varying lines for the last one ranging from allow all, deny all, and webmin d

Re: Fwd: Re: [squid-users] Re: Bandwidth split?

2010-11-10 Thread J Webster
delay_access 3 allow ncsa_users delay_access 3 deny all -- From: "Amos Jeffries" Sent: Wednesday, November 10, 2010 11:17 AM To: Subject: Re: Fwd: Re: [squid-users] Re: Bandwidth split? On 10/11/10 05:45, J Webster wrote: Thanks for the

Re: Fwd: Re: [squid-users] Re: Bandwidth split?

2010-11-09 Thread J Webster
;Chad Naugle" Sent: Tuesday, November 09, 2010 11:05 PM To: "J Webster" ; Subject: Re: Fwd: Re: [squid-users] Re: Bandwidth split? I could be wrong here, please read up on Visolve, relating to your version of Squid for more information... (3.X) http://www.visolve.com/squid/sq

Re: Fwd: Re: [squid-users] Re: Bandwidth split?

2010-11-09 Thread J Webster
9:16 PM To: "J Webster" ; Subject: Re: Fwd: Re: [squid-users] Re: Bandwidth split? Remember, the #3 pool here, should represent the TOTAL allowed rate for the Squid Proxy, for all users in 1 bucket. If you want to limit individual users' bandwidth, use at least a Class 2, or C

Re: Fwd: Re: [squid-users] Re: Bandwidth split?

2010-11-09 Thread J Webster
Thanks for the help. Does anyone know the difference between fill rate and reserve in how they are applied to restrciting proxy bandwidth? # 256 Kbit/s fill rate, 1024 Kbit/s reserve

Re: [squid-users] Re: Bandwidth split?

2010-11-09 Thread J Webster
maxuser http_access allow localhost http_access deny all icp_access allow all -- From: "Chad Naugle" Sent: Tuesday, November 09, 2010 3:10 PM To: "J Webster" ; Subject: Re: [squid-users] Re: Bandwidth split? So, where i

Re: [squid-users] Re: Bandwidth split?

2010-11-09 Thread J Webster
I still have users connecting at around 1.91Mb and faster on the server (seen using iftop) so the delay pools don;t seem to be working for the ncsa_users. Only thing I can think of is that it's not registering the ncsa users in the acl somehow? acl magic_words1 url_regex -i 192.168 acl magic_w

Re: [squid-users] Re: Bandwidth split?

2010-11-08 Thread J Webster
ay, November 08, 2010 4:36 PM To: "J Webster" ; Subject: Re: [squid-users] Re: Bandwidth split? Yes sorry, at work. See Below. I am not 100% on fill-rate versus the other numbers, so I'll leave that up for someone else to reply. I would just tinker with the values until you get

Re: [squid-users] Re: Bandwidth split?

2010-11-08 Thread J Webster
more than 1Mbps so maybe it isn;t picking up the ncsa users? From: Chad Naugle Sent: Monday, November 08, 2010 4:11 PM To: J Webster ; squid-users@squid-cache.org Subject: Re: [squid-users] Re: Bandwidth split? Your problem here is that you are trying to layer delay_pool 1 twice, so I

Re: [squid-users] Re: Bandwidth split?

2010-11-08 Thread J Webster
delay_parameters 1 32000/128000 delay_access 1 allow restuser delay_access 1 deny all -- From: "Chad Naugle" Sent: Monday, November 08, 2010 3:57 PM To: "J Webster" ; ; "Chad Naugle" Subject: [squid-users] Re: Bandwidt

[squid-users] Re: Bandwidth split?

2010-11-08 Thread J Webster
I have put in some controls for downloading files like iso, mp3 etc but I would like to limit the connection per ip address? -- From: "J Webster" Sent: Sunday, November 07, 2010 9:18 PM To: Subject: Bandwidth split? It is becoming app

[squid-users] Bandwidth split?

2010-11-07 Thread J Webster
It is becoming apparent that some users are hogging the bandwidth on the server by downloading videos instead of streaming them. Any idea on how I can restrict this? I would like to keep the server as unlimited downloads but split the bandwidth at any one time between the users - I figured that

Re: [squid-users] Limiting user's bandwidth

2010-10-26 Thread J Webster
Will that share the bandwidth pro rata? Say the bandwidth is 10Mbps and you have 10 users, they only get 1 each? Otherwise isn't it shared equally anyway? There must be a way to apply a kbps limit in case someone is hogging the bandwidth? -- From:

Re: [squid-users] upgrade

2010-08-03 Thread J Webster
-bb squid.spec Looks like they have 3.1.4 in there too. Either one. All the best to you :) ciao/Riaan On 03/08/2010 14:44, J. Webster wrote: I currently have squid 2.6 running on centos - they haven't updated = their repository yet. WIll upgrading to 3.1.6 have any performance enhancement

[squid-users] upgrade

2010-08-03 Thread J. Webster
I currently have squid 2.6 running on centos - they haven't updated = their repository yet. WIll upgrading to 3.1.6 have any performance enhancements? Can I leave the existing cache in place and config files or will they be = overwritten during the make commands?

RE: [squid-users] Limiting to 1 IP address / routers?

2010-05-08 Thread J. Webster
Is squid somehow checking the local IP address then? My proxy is a public proxy so any person accessing it does so with a WAN IP. How does squid know that it is a different computer accessing it to block them or is it the ncsa auth that is doing some check? I only want 1 IP to access it but thoug

RE: [squid-users] Limiting to 1 IP address / routers?

2010-05-08 Thread J. Webster
that way for > years. > > Jason > > > > ..·><((((º> > > >> -Original Message- >> From: J. Webster [mailto:webster_j...@hotmail.com] >> Sent: Saturday, May 08, 2010 1:56 PM >> To: squid-users@squid-cache.org >> Subject: [squid-users] L

[squid-users] Limiting to 1 IP address / routers?

2010-05-08 Thread J. Webster
If there are 3 computers behind a router with 1 WAN IP address, can they all use the proxy server at the same time with the same logon ncsa name? I'm currently running a NCSA user/pass authentication. For example, 192.168.0.1 user test1 192.168.0.2 user test1 192.168.0.3 user test1 but all have W

RE: [squid-users] NCSA upper case sensitive?

2010-03-10 Thread J. Webster
m: squ...@treenet.co.nz > To: squid-users@squid-cache.org > Subject: Re: [squid-users] NCSA upper case sensitive? > > On Mon, 8 Mar 2010 20:40:45 +, "J. Webster" > wrote: >> Is NCSA auth case sensitive for the login name? >> We have a case recently where it would not take

RE: [squid-users] Youtube and BBC iPlayer

2010-03-10 Thread J. Webster
Many of these video sites are starting to use RTMP, which is causing a problem for proxy servers. Do you know of anyway to reroute port 1935 through the proxy server or to somehow catch the RTMP protocol and redirect it? > Date: Thu, 11 Mar 2010 01:19:09

[squid-users] NCSA upper case sensitive?

2010-03-08 Thread J. Webster
Is NCSA auth case sensitive for the login name? We have a case recently where it would not take the username as a mixture of capitals (eg TestUser) whereas the password works successfully whether lower or upper. _

RE: [squid-users] Cache manager analysis

2010-02-21 Thread J. Webster
n \? >> #cache deny QUERY >> refresh_pattern ^ftp: 1440 20% 10080 >> refresh_pattern ^gopher: 1440 0% 1440 >> refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 >> refresh_pattern . 0 20% 4320 >> quick_abort_min 0 KB >> quick_abort_max 0 KB >> acl apache rep_header Serv

RE: [squid-users] Cache manager analysis

2010-02-18 Thread J. Webster
ents off > cache_mgr a...@aaa.com > cachemgr_passwd aaa all > visible_hostname ProxyServer > log_icp_queries off > dns_nameservers 208.67.222.222 208.67.220.220 > hosts_file /etc/hosts > memory_pools off > forwarded_for off > client_db off > coredump_dir /var/spool/squ

RE: [squid-users] Cache manager analysis

2010-02-14 Thread J. Webster
> Date: Sat, 13 Feb 2010 18:03:00 +1300 > From: squ...@treenet.co.nz > To: squid-users@squid-cache.org > Subject: Re: [squid-users] Cache manager analysis > > J. Webster wrote: >> What is the best place to start with in cache analysis? >> Would it be cache size, memory

RE: [squid-users] cache manager access from web

2010-02-13 Thread J. Webster
Would that work with: http_access deny manager CONNECT !SSL_ports > Date: Sat, 13 Feb 2010 20:58:11 +0100 > From: uh...@fantomas.sk > To: squid-users@squid-cache.org > Subject: Re: [squid-users] cache manager access from web > > On

RE: [squid-users] Cache manager analysis

2010-02-13 Thread J. Webster
Feb 2010 18:03:00 +1300 > From: squ...@treenet.co.nz > To: squid-users@squid-cache.org > Subject: Re: [squid-users] Cache manager analysis > > J. Webster wrote: >> What is the best place to start with in cache analysis? >> Would it be cache size, memory object size, IO, e

[squid-users] what happens whens quid cache gets full?

2010-02-12 Thread J. Webster
I have my squid cache size set to 4 - is this in MB or kb? What happens when the cache approaches its max size, do I have to manually clear it or does squid take care of that? Thanks _ G

[squid-users] Cache manager analysis

2010-02-12 Thread J. Webster
What is the best place to start with in cache analysis? Would it be cache size, memory object size, IO, etc.? I'm looking to optimise the settings for my squid server. Server:    about 220GB available for the cache, I'm only using 4 MB at present as in the config below.  

RE: [squid-users] cache manager access from web

2010-02-11 Thread J. Webster
access it is through a public IP address. > Date: Wed, 10 Feb 2010 12:49:36 -0900 > From: crobert...@gci.net > To: squid-users@squid-cache.org > Subject: Re: [squid-users] cache manager access from web > > J. Webster wrote: >> D

RE: [squid-users] cache manager access from web

2010-02-10 Thread J. Webster
ncsa_users is only for http access? > Date: Tue, 9 Feb 2010 16:14:31 -0900 > From: crobert...@gci.net > To: squid-users@squid-cache.org > Subject: Re: [squid-users] cache manager access from web > > Amos Jeffries wrote: >> J. Webster wrote: &g

RE: [squid-users] DNUMTHREADS

2010-02-09 Thread J. Webster
Would this dramatically improve performance or it it best left at default? > Date: Tue, 9 Feb 2010 17:01:46 +1300 > From: squ...@treenet.co.nz > To: squid-users@squid-cache.org > Subject: Re: [squid-users] DNUMTHREADS > > J. Webst

[squid-users] cache manager access from web

2010-02-08 Thread J. Webster
I have followed the tutorial here: http://wiki.squid-cache.org/SquidFaq/CacheManager and set up acls to access the cache manager cgi on my server. I have to access this externally for the moment as that is the only access to the server that I have (SSH or web). The cache manager login appears

RE: [squid-users] Wrong error page showing in browser

2010-02-08 Thread J. Webster
out of interest, when you issue a squid -k reconfigure does this disconnect any connected users? I assume service squid restart will definitely disconnect users > From: bodycar...@live.com > To: contactd...@gmail.com > CC: squid-users@squid-cache.org > Da

RE: [squid-users] Wrong error page showing in browser

2010-02-08 Thread J. Webster
Did you restart the squid server? I know when I tried this once before, I had to restart for it to pick up the custom error pages - maybe they are loaded into a cache at startup? > Date: Mon, 8 Feb 2010 18:46:46 +0100 > From: contactd...@gmail.com > To: s

  1   2   >