Re: [squid-users] Strange problem accessing http://Bloomberg.com

Hi Amos, I resolved the issue with the following line in my proxy.pac file: if (dnsDomainIs(host, "\'wbetest2.bloomberg.com")) { return "proxy:3128"; } I used the page at http://jcurnow.home.comcast.net/~jcurnow/WritingEffectivePACFiles.html (mentioned in the proxy.pac entry in wikiped

Re: [squid-users] Transparent Proxy with https

Henrik Nordstrom wrote: On tor, 2007-09-27 at 14:26 -0400, fname lname wrote: Can squid do transparent proxy with https requests yet or is there an work around? Why do you want to transparently proxy https? Regards Henrik while I don't pretend to know the OP's situation, in ours, i

Re: [squid-users] Can Squid grab a list of files from a server and then Prefetch thost files?

miles800 wrote: Can Squid grab a list of files from a server and then prefetch those specific files? I would like to be able to set up a proxy server (that will run on both windows and Linux) that will grab mp3s and flash files from a server (running a web app) to help avoid a bottleneck. Ideal

Re: [squid-users] Full domain block

Paul Cocker wrote: Alas, it was all so perfectly planned. Grab some blacklists from Shalla - http://www.shallalist.de/ - and hook the domain lists into squid using dstdomain. Unfortunately, it seems squid's interpretation of domain names is incredibly literal, so rather than youtube.com blocking

Re: [squid-users] WCCP2 and Router/Switch combo

Ryan Thoryk wrote: We currently have Squid set up as a GRE-based WCCP2 transparent proxy, and are wondering if it can support both GRE and L2 modes simultaneously - we have a couple Cisco 7200 routers pointing to it, but are wanting to add a 3750 switch that has wccp2 support. Ryan Thoryk If

Re: [squid-users] Wiki down?

Amos Jeffries wrote: Elvar wrote: Anyone else having trouble getting to http://wiki.squid-cache.org/ Elvar, I'm visiting the wiki without problems... Seems to be an variable problem then. It's down for me from here now... Amos Down for me as well. /Jason

Re: [squid-users] WCCP Routing

I worked around that a few years ago by having multiple instances of squid on my server, each with its own IP and dedicated squid.conf Each router would connect to its own squid instance and linux policy routing would determine the default gateway to use. The downside is that you are now effectiv

[squid-users] Strange problem accessing http://Bloomberg.com

Hello, I ma having a very bizarre problem and I am wondering if anyone here can shed some light on it. Our internal users are accessing the Internet via a squid v2.6-STABLE9 proxy using a proxy.pac file. Their browsers (corporate dictates Internet Explorer) are configured to "Automatically det

Re: [squid-users] Strange problem accessing http://Bloomberg.com

So I think the client's proxy.pac script might be having trouble digesting the malformed URL below: 1239113823.055 0 xxx.yyy.zzz.aaa TCP_DENIED/400 1614 GET http://'wbetest2.bloomberg.com/jscommon/0/s_code.js' - NONE/- text/html The single quote is making the proxy.pac freeze which in tu

[squid-users] Squid 2.6 + WCCPv2 + Linux 2.6 + cisco

--with-large-files make make install # ## Deviations from stock squid.conf.default: http_port 172.16.2.93:8080 transparent http_port localhost:8080 tcp_outgoing_address 172.16.2.93 ## Disable ICP since we only have the one cache icp_port 0 ##### ## Set all the pathname stuff here. #

[squid-users] Squid 2.6 + WCCPv2 + Linux 2.6 + cisco -- more info.

Hello again, I was just corrected by one of my colleagues as to the hardware and os of the squid server. Hardware: IBM x360 OS: RedHat Enterprise Linux 4 update 3 Also, here is the combined tcpdump output from gre1 and eth2: ### This is the 3-way handshake. gre1 12:17:04.712823 IP 1

[squid-users] Squid 2.6 + WCCPv2 + Linux 2.6 + cisco -- more info.

Hello again, Here is the cache.log from a squid-2.6.STABLE5-20061116 built with a stock "./configure". So grab the latest squid-2.6.stable release, and build with ./configure make make install And you still get the same error, more or less. In previous builds, I had tried disabling "epoll" si

[squid-users] Squid 2.6 + WCCPv2 + Linux 2.6 + cisco -- solved.

I solved the problem. I was too aggressive in the version I was running. Something seems to be broken between squid-2.6.STABLE5 and squid-2.6.STABLE5.20061116 /Jason

[squid-users] WCCPv2 strangeness

Hello list-people, I am experiencing some strangeness with WCCPv2 on squid 2.6. My hunch is that the problem is likely on the cisco side. I have tried this with squid 2.6-stable5 as well as the latest version (20061204) which is supposed to allow for multi-router wccp2 configs. At the moment, I

Re: [squid-users] WCCPv2 strangeness

arding = 1 == Adrian Chadd wrote: On Mon, Dec 04, 2006, Jason Taylor wrote: However, a tcpdump on the GRE interface of the squid shows only the first packet (SYN). A tcpdump on the eth2 (where squid is listening) shows the SYN-ACK packet being sent back to the workstation. Whats the wccp config on

[squid-users] WCCPv2 strangeness - continued

Hello again, A little bit more info on this problem... The setup: The squid: - Squid 2.6 STABLE5-20061204 - RedHat Enterprise Linux v4 update 3 - IP/mask/gw: 192.168.40.37/255.255.255.240/192.168.40.33 - ip tunnel add gre1 mode gre \ remote 192.168.40.33 local

Re: [squid-users] WCCPv2 strangeness - continued

wrote: On Tue, Dec 05, 2006, Jason Taylor wrote: The intercept router: - Cisco 6509 - IOS version 12.2.18sxf Hm, I've heard rumours that there's been some WCCPv2 bugs in the SXF code. Yah, there's an unrelated bug resolved in 12.2(18)SXF7 and a couple more in previous r

[squid-users] Intercepting HTTPS with WCCPv2

Hi all, Is it possible to intercept https traffic with wccpv2 and squid 2.6? The Cisco documentation leads me to believe that it is possible, at least with the Cisco Web Cache Engine. I have heard that transparent proxying of https does not work, but what about intercept proxying? Our exi

[squid-users] Squid 2.6-STABLE6 100% cpu load, lots of iowait and coredumps

We recently upgraded our extremely old squid servers (P3-1GHz, 512MB ram) to modern hardware (3GHz P4, 2GB ram) running RedHat linux. The problem I am experiencing is that CPU load will jump to 100% and stay there. The system shows about 50% iowait cpu usage. We have about 1500 employees using

Re: [squid-users] High CPU usage problem on Squid 2.6 STABLE9

Are you logging access_log to syslog? I used to have "access_log syslog" in my squid.conf and just turned it off. I saw my iowait drop from 46% to 1% within 10 seconds. /Jason Andrew Miehs wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/01/2007, at 8:51 PM, Robert wrote: My connecti

[squid-users] URL access-restriction alternatives to "htadeny"

Hello list, Is it possible to have the URL-filter deny action not be to just serve an "access denied" page, but to rather serve up a "page is against policy, click here to access anyway" page? Would this be done through a "redirector" program? Any pointers? I think that putting this in place

[squid-users] URL access-restriction alternatives to "http_access deny"

Pardon the confusing subject in my previous message. Should have read "http_access deny" Hello list, Is it possible to have the URL-filter deny action not be to just serve an "access denied" page, but to rather serve up a "page is against policy, click here to access anyway" page? Would th

Re: [squid-users] URL access-restriction alternatives to "http_access deny"

Henrik Nordstrom wrote: tis 2007-04-10 klockan 17:28 -0400 skrev Jason Taylor: Is it possible to have the URL-filter deny action not be to just serve an "access denied" page, but to rather serve up a "page is against policy, click here to access anyway" page? Se

[squid-users] delay pools strangeness

Hello list, I have been putting in delay pools and just noticed an odd behaviour. My workstation was in the middle of a long file transfer which was properly being limited by the delay pools. I then made a modification to my squid filters and did a squid -k reconfigure to load the changes. I th