Re: [squid-users] Regarding Squid SSL cipher filtering

2019-02-03 Thread john doe
Thanks a lot guys for providing clear explanation. Much appreciated! Cheers, Chris On Sat, Feb 2, 2019 at 3:29 PM Alex Rousskov < rouss...@measurement-factory.com> wrote: > On 2/1/19 4:04 PM, john doe wrote: > > > I'm using Squid 3.5 as a forward proxy and want to lim

[squid-users] Regarding Squid SSL cipher filtering

2019-02-01 Thread john doe
Hi Squid-Community, I've a question for which I haven't been able to find answer. I'm using Squid 3.5 as a forward proxy and want to limit the SSL ciphers allowed. I see that "sslproxy_cipher" config property would allow me to do it. But what is unclear to me is whether just setting that list is

Re: [squid-users] ip hiding in squid-3.3.8

2013-12-12 Thread John Doe
From: 0bj3ct hs...@box.az Hi, Am using Squid 3.3.8. Want to prevent the Squid server to change ip addresses of clients. How can I do it? How to disable ip replacing in Squid? Squid is the one talking to the web servers... so the web servers see squid's IP. Maybe you want to check the http

Re: [squid-users] squid url_rewrite_program

2013-10-31 Thread John Doe
From: Sachin Gupta ching...@gmail.com does url_rewrite_access solve this? Sample below. I tried but doesnt seem to work. url_rewrite_program some_prog acl allow_port myportname xxx4 xxx5 url_rewrite_access allow allow_port What do you mean by doesnt seem to work? Everyone has access? or

Re: [squid-users] squid url_rewrite_program

2013-10-30 Thread John Doe
From: Sachin Gupta ching...@gmail.com We want the url_rewrite_program to work only when traffic comes from a specific port only. url_rewrite_access + a port acl...? JD

Re: [squid-users] running squid by only one eth

2013-04-25 Thread John Doe
From: ma~sha sspard...@gmail.com Is it possible to run squid by only one eth, for example eth0 only? If this is possible how do I do it? What about the following?  http_port eth0_IP:PORT JD

Re: [squid-users] Squid 3.3.3 issues...

2013-03-15 Thread John Doe
From: Amos Jeffries squ...@treenet.co.nz On 15/03/2013 2:59 a.m., John Doe wrote: So, I removed workers... but squid keeps dieing after 1 or 2 mns...     assertion failed: comm.cc:1838: isOpen(fd) !commHasHalfClosedMonitor(fd) Any idea how I can find out what caused it? A debugger

[squid-users] Squid 3.3.3 issues...

2013-03-14 Thread John Doe
Hi, I replaced my old 2.7.STABLE9 reverse proxy with a 3.3.3. I tried smp but found out that aufs does not support it, right?   BUG 3279: HTTP reply without Date: I saw that you can set a cache_dir per worker; but is it some kind of consistent hashing with objects going always going to the same

Re: [squid-users] helpers die all at the same time without any reason

2013-01-02 Thread John Doe
From: JokeTube.TV m...@joketube.tv This  kind  of  logs  seems  suspicious to me. The helper program is a simple  PHP  script  which  has set_time_limit(0) at the beginning and while loop to process requests: I guess you are not running php in safe mode, right? Also, maybe check:

Re: [squid-users] Squid 3.1.10 CentOS : cache_swap_log (13) Permission Denied

2012-12-19 Thread John Doe
From: Christophe Marchand cmarch...@oxiane.com I have the following problem : when I do not declare a cache dir, my squid starts correctly and runs perfectly. When I uncomment the cache_dir line, it fails with this message :     2012/12/18 11:31:18| /var/cache/squid/.00: (13) Permission

Re: [squid-users] RHELv6 install squid 3.2

2012-11-23 Thread John Doe
From: Михаил maklek...@yandex.ru T hanks for your advice, but it doesn't help me. Oh, I missed the fc17 in the rpm file you are trying to install... RHEL6 is based on fc12 I think; so maybe try a fc12 rpm. You could also try to recompile the srpm. JD

Re: [squid-users] RHELv6 install squid 3.2

2012-11-22 Thread John Doe
From: Михаил maklek...@yandex.ru # rpm -Uvh squid-3.2.3-1.fc17.x86_64.rpm error: Failed dependencies: /bin/perl is needed by squid-7:3.2.3-1.fc17.x86_64 libc.so.6(GLIBC_2.14)(64bit) is needed by squid-7:3.2.3-1.fc17.x86_64 libdb-4.8.so()(64bit) is needed by

Re: [squid-users] Need help to build my own external help

2012-04-17 Thread John Doe
From: Mohamed Amine Kadimi amine.kad...@gmail.com *cp = '\0'; } ... fflush(stderr); fflush(stdout); } I can't figure out why the requests are being queued indefinitely in the helper. Are you flushing stdout? JD

Re: [squid-users] Need help to build my own external help

2012-04-16 Thread John Doe
From: Mohamed Amine Kadimi amine.kad...@gmail.com I reduced my program to that: #include stdio.h #include stdlib.h #include string.h #define MAX_INPUT 8192 int main(int argc, char **argv) {   char request [MAX_INPUT];   while (fgets(request, MAX_INPUT , stdin) != NULL)   {      

Re: [squid-users] squid 3.2 cache_dir and max-size

2011-12-19 Thread John Doe
From: Saleh Madi saleh.m...@hadara.ps We have a server with Linux 64 Bit OS, 50GB RAM, 4xSSD 120GB and 8xHDD 2TB, we try to configure squid 3.2.0.14 on it with 8 workers, what is the best setting for the cache_dir and max-size  for SSD and HDD per worker and what is the best store type aufs

Re: [squid-users] Squid not communicating with Helper Processes

2011-11-24 Thread John Doe
From: Christian Zink bigboyfore...@hotmail.com #external_acl_type ldap_group %LOGIN /usr/lib64/squid/squid_ldap_group -H ldap://127.0.0.1 -v 3 -b ou=groups,dc=drv,dc=drv -f ((memberuid=%u)(cn=%g)) -D uid=digestreader,dc=drv,dc=drv -W /etc/squid/digestreader_credexternal_acl_type ldap_group

Re: [squid-users] SQUID Logrotate problem

2011-07-18 Thread John Doe
From: Railic Njegos railic.nje...@gmail.com i have problem, after uprade CentOS 5.5 to 5.6, Logrotate don't work on two proxy servers. I have installed : On first server , squid logs never rotated, config is here On second server squid logs rotated every day . Config : Before upgrade i have

Re: [squid-users] SQUID Logrotate problem

2011-07-18 Thread John Doe
From: Railic Njegos railic.nje...@gmail.com On Mon, Jul 18, 2011 at 2:15 PM, Amos Jeffries squ...@treenet.co.nz wrote: Please explain the part about don't work. Multiple log files with some empty?  * check for logfile_rotate directive. Must be set to 0 when an external log rotation

Re: [squid-users] Squid SDK

2011-06-28 Thread John Doe
From: Mohsen Pahlevanzadeh moh...@pahlevanzadeh.org We must write a program that along with normal tasks, it had do a variety of jobs,But i need to PURGE and insert cache. I must a write a web appl thet it manages squid with many extra job. normal job: every work that squid can do. Variety

Re: [squid-users] Squid not caching

2011-06-22 Thread John Doe
From: Fabiano Carlos Heringer b...@grupoheringer.com.br minimum_object_size 512 KB maximum_object_size 200 bytes Are these the values you really want...? JD

Re: [squid-users] bandwith restriction

2011-06-20 Thread John Doe
From: benjamin fernandis benjo11...@gmail.com As per squid document, there are class object in that they are using terms like aggregate , network and individual terms. What does that mean? If I understand the documentation correctly: If IP=a.b.c.d aggregate (for class 1,2,3): *.*.*.*    =

Re: [squid-users] How to Hide Proxy detected at whatismyip.com

2011-04-12 Thread John Doe
From: AZHAR CHOWDHURY az...@banglalion.com.bd But when any client PC browse to whatismyip.com that time, the site shows client's fixed IP address along with detection of cache server mentioning hostname of squid server. May I know to hide that detection? Go to a website that shows the

[squid-users] delay pools and reverse proxy mode...

2011-03-29 Thread John Doe
Hi, I have a little issue with delay pools and Squid (2.7) in reverse proxy mode... If the target is not yet in the cache, I get correctly slowed down. But, once the target is cached, I can dowload at full speed... If I purge the url from the cache and try again, I get once more slowed down...

Re: [squid-users] delay pools and reverse proxy mode...

2011-03-29 Thread John Doe
From: Amos Jeffries squ...@treenet.co.nz On 29/03/11 21:42, John Doe wrote: I have a little issue with delay pools and Squid (2.7) in reverse proxy mode... Or is there a way to make it apply to client-squid connections? client_delay_pools delay pools. which is available in 3.2 beta

Re: [squid-users] Concurrently downloading a file

2011-02-17 Thread John Doe
From: Pelit Mamani pelit.mam...@timetoknow.com My question is, what should happen if *several* clients ask for the file, concurrently, for the first time? If I have 4 such clients - would Squid download 4X50=200MB from the CMS? Or would it be smart enough to recognize the existence of

Re: [squid-users] yoube-URLs

2011-01-26 Thread John Doe
For example access to this video http://www.youtube.com/watch?v=aLSFcF8SOiw with an entry in the url_regex-whitelist like this: youtube.com/watch?v=aLSFcF8SOiw This does not work, I get no access to the video. I´ve now seen, that if I access to youtube, the log entry in the access log

[squid-users] Re: quick_abort...

2011-01-03 Thread John Doe
From: John Doe jd...@yahoo.com I have a problem with quick aborts... reverse proxy chain: 1. Nginx - consistent hashing 2. Squid 2.7.STABLE9 3. Nginx - fcgi 4. php script 5. backend (lighttpd) For a 7MB test file download (interrupted at around 2MB), I tried

[squid-users] quick_abort...

2010-12-31 Thread John Doe
Hi, I have a problem with quick aborts... reverse proxy chain: 1. Nginx - consistent hashing 2. Squid 2.7.STABLE9 3. Nginx - fcgi 4. php script 5. backend (lighttpd) For a 7MB test file download (interrupted at around 2MB), I tried: quick_abort_pct 1 then: quick_abort_min 16 MB

Re: [squid-users] Having trouble denying http_access to the proxy

2010-12-22 Thread John Doe
On 12/22/2010 05:43 PM, Volker-Yoblick, Adam wrote: Greetings, I seem to be having some trouble denying access to my proxy. I'm running squid 3.1.9. Here's the relevant part of my squid.conf: # my machine only acl myMachine src 10.8.144.43 # some destination servers

Re: [squid-users] Share HTTPS over SQUID

2010-12-13 Thread John Doe
The problem that I dont use Squid for a domain or with IIS! Im using Squid as Transparent HTTP for caching purpose and to save traffic thus I also want share HTTPS if its possible to work with HTTP Transparent Enabled . I suppose you are talking about a transparent forward-proxy achieved by

[squid-users] statistics...

2010-12-03 Thread John Doe
Hi, Squid 2.7-STABLE9. I am doing a monitoring/graphing (nagios) plugin and I have 2 questions: The number of objects from manager info ('Store Entries') and SNMP ('cacheNumObjCount.0') differs... Example on 2 squids: MGR: 62 and 30, SNMP: 29 and 29 I would think that the MGR numbers are the

Re: [squid-users] strip domain/realm from icap header username

2010-11-12 Thread John Doe
Hi, Thanks for your reply. Not sure if this helps but Smb.conf can use the tag:winbind use default domain = false OR true I know that, thanks. If I set winbind use default domain = false (=default), then I will get the domain appended to my username EVEN for the default domain, e.g.

[squid-users] partial content clarification...

2010-11-09 Thread John Doe
Hi, In a reverse proxy situation with big videos. I read that 206 (partial content) is not cachable by squid. But I also read about range_offset_limit... Let's say there's a 100MB video and I use a range_offset_limit of 20971520. Does that mean that if the browser min range request is below

Re: [squid-users] access.log

2010-10-08 Thread John Doe
From: viswa waytovi...@gmail.com I am running four squid servers and using own user based reports(access.log), now i need consolidated report, for that all four server's access.log should be at one server. how can i make it ? Two ideas: Merge the log files... Use syslog to send all

Re: [squid-users] Ahead Caching

2010-10-06 Thread John Doe
From: Isaac Witmer isaa...@gmail.com On Tue, Oct 5, 2010 at 11:51 AM, John Doe jd...@yahoo.com wrote: Why recurse? If you take your list from the log files, you will get all accessed files already... no? How would you do it? with wget, the only way of having it crawl through websites

Re: [squid-users] Ahead Caching

2010-10-05 Thread John Doe
From: flaviane athayde flavianeatha...@gmail.com I try to put a shell script that read the Squid log, and use it to run wget with -r -l1 -p flag, but it also get its on pages, making a infinit loop, and I can't resolve it. Why recurse? If you take your list from the log files, you will get

Re: [squid-users] support

2010-10-04 Thread John Doe
From: Badrul Mohamad b...@apex.com.my what browser need from user if my network used squid to allow go to outside/internet ? If you google for squid supported browsers, the 2nd result is: http://wiki.squid-cache.org/SquidFaq/ConfiguringBrowsers JD

Re: [squid-users] Squid Start service chkconfig error....!

2010-10-04 Thread John Doe
From: M. Asghar Nazir asghar_na...@yahoo.com But when I try to manually start withservice squid start [r...@proxysrv ~]# service squid start squid: unrecognized service I also want to configure it for autostart at startup of server. It give me following error [r...@proxysrv ~]#

Re: [Fwd: [squid-users] Compiling Squid with ssl enable]

2010-09-30 Thread John Doe
From: sq...@sourcesystemsonline.com sq...@sourcesystemsonline.com Why has no nobody attended to me, i need solution urgently. Maybe nobody knows the answer to your problem... Maybe see: http://squid.acmeconsulting.it/Squid27.html Or try their experimental binary:

Re: [squid-users] Re: Native Kerberos (squid_kerb_auth) with LDAP-Fallback (squid_ldap_auth)

2010-09-17 Thread John Doe
On 09/17/2010 03:28 PM, Amos Jeffries wrote: Squid does not currently offer any way to selectively pick the auth methods to advertise. There are a few possible designs and someone was working on it a while back. Offering a specific authentication method for a defined network would be a nice

Re: [squid-users] forwarding port changed based on url

2010-09-09 Thread John Doe
From: foobar devnull foobar2devn...@gmail.com Squid can be configured as an HTTPS reverse proxy to do it either way. It's a standard virtual-host setup with ssl added, differing only in the receiving https_port settings. http://wiki.squid-cache.org/ConfigExamples/Reverse/VirtualHosting

Re: [squid-users] Squid redirectors children doesn't shutdown/die with squid

2010-09-08 Thread John Doe
From: Jorge Iván Burgos Aguilar jorgebur...@inaipyucatan.org.mx Well to be honest m not so sure, i have seen the code at src/redirect.cc and cant confirm the behavior m seen, but if i put a debug line logging all input send to the redirector script i find thousands of \n (0x0a), a good

Re: [squid-users] Rotate Log Files

2010-09-07 Thread John Doe
From: Harish Pokharel harish.pokha...@gmail.com When I try to execute /usr/local/squid/sbin/squid -k rotate I receive the following error squid: ERROR: Could not send signal 10 to process 3457: (3) No such process The error message means that it tried to contact a non existent squid

Re: [squid-users] Squid redirectors children doesn't shutdown/die with squid

2010-09-07 Thread John Doe
From: Jorge Iván Burgos Aguilar jorgebur...@inaipyucatan.org.mx I have been building for the past week a special redirector for squid in python 2.6.x; the redirectors works good they do their job but when i hit shutdown or reload (squid -k shutdown|reload) they just won't simple die Do

Re: [squid-users] squid 3.1.6 also won't compile

2010-09-01 Thread John Doe
From: Tóth Tibor Péter tibor.peter.t...@mtv.hu I'm getting this problem: checking for g++... no checking for c++... no checking for gpp... no checking for aCC... no checking for CC... no checking for cxx... no checking for cc++... no checking for cl.exe... no checking for FCC... no

Re: [squid-users] Bigger cache size on hdd

2010-08-26 Thread John Doe
From: Jose Ildefonso Camargo Tolosa ildefonso.cama...@gmail.com On Tue, Aug 24, 2010 at 12:59 AM, Hamza Sani Abubakar Usman hamza_s...@hotmail.com wrote: Can you please tell me that How much amount of ram will required if we use 100GB partition for squid caching. I don't remember. A

Re: [squid-users] Fwd: %path% in acl list squid 2.6

2010-08-19 Thread John Doe
From: sushi squid sushi.sq...@gmail.com On Wed, Aug 18, 2010 at 2:52 PM, John Doe jd...@yahoo.com wrote: Either amos way, or you could use an external_acl script that will be able to get %userprofile%, but that means you will have to handle the whitelist yourself... @John's solution : i didn't

Re: [squid-users] rewrite domain

2010-08-18 Thread John Doe
From: Thomas E. Maleshafske tmaleshaf...@maleshafske.com I'm having problems with rewrite rules. basically I'm wanting to rewrite the domain so that it points the http://us.archive.ubuntu.com/somefolder/somefile.deb to http://host.localdomain.com/samefolder/samefile.deb And what are the

Re: [squid-users] Fwd: %path% in acl list squid 2.6

2010-08-18 Thread John Doe
From: sushi squid sushi.sq...@gmail.com On 8/17/10, John Doe jd...@yahoo.com wrote: From: sushi squid sushi.sq...@gmail.com I am a newbie in squid ... my squid config file is giving some strange error My OS is Windows XP and squid version is 2.6Stable In the acl permission list

Re: [squid-users] maximum concurrent user limit

2010-08-17 Thread John Doe
From: Ozan UÇAR m...@ozanucar.com I have been on the lookout for a solution to limit the number of users allowed to connect to the Internet. What I am looking for is not maxconn. I do not wish to limit the number of total connections per client. A client can have as many connections as

Re: [squid-users] Fwd: %path% in acl list squid 2.6

2010-08-17 Thread John Doe
From: sushi squid sushi.sq...@gmail.com I am a newbie in squid ... my squid config file is giving some strange error My OS is Windows XP and squid version is 2.6Stable In the acl permission list the path is as follows acl goodsite url_regex -i %userprofile%/whitelist.txt Maybe I am wrong

Re: [squid-users] maximum concurrent user limit

2010-08-17 Thread John Doe
From: Ozan UÇAR m...@ozanucar.com John Doe yazmış: From: Ozan UÇAR m...@ozanucar.com I have been on the lookout for a solution to limit the number of users allowed to connect to the Internet. What I am looking for is not maxconn. I do not wish to limit the number of total connections

Re: [squid-users] Restricting bandwidth usage through squid

2010-08-16 Thread John Doe
From: Paul Hennion phenn...@bhs.org.za I have been looking around for a howto on this. Numerous google searches have only lead me to half explanations, etc. Can anyone please point me to a nice howto on setting this up. Were those half explanations talking about delay pools? Did you check

Re: [squid-users] How to prevent illegal activity on squid?

2010-08-11 Thread John Doe
From: Al - Image Hosting Services a...@familysafeinternet.com I have a squid server setup to block objectionable content from the web. It is publicly available, and free. All anyone needs to do to use it is signup for a free account. The problem is that so far everyone who has signed up

Re: [squid-users] Deny IP in URL possible ?

2010-08-10 Thread John Doe
From: Scott Keith (NHS National Services Scotland) ke...@nhs.net Hi, I've been trying to find out if it's possible to get squid to deny access to websites via an IP in the URL. I've had a fairly good Google around o= n how to do this but I just keep finding out about blocking access to a

Re: [squid-users] Delay Pool help...

2010-08-09 Thread John Doe
From: Landy Landy landysacco...@yahoo.com Lately I've been experiencing that our internet connection has being crawling. I noticed some users like to download movies, videos, and a lot of other content that kills our internet bw. I've been thinking of throtle every user in our network.

Re: [squid-users] url rewrite

2010-08-05 Thread John Doe
From: senthilkumaar2021 senthilkumaar2...@gmail.com Is there any possibility to pass urlpath rewritten urls to particular cache_peer in reverse proxy The urlpath rewritten is done using perl script .only path in url is re written Three identical web servers are running at different ip and

Re: [squid-users] url rewrite

2010-08-05 Thread John Doe
From: John Doe jd...@yahoo.com From: senthilkumaar2021 senthilkumaar2...@gmail.com Is there any possibility to pass urlpath rewritten urls to particular cache_peer in reverse proxy The urlpath rewritten is done using perl script .only path in url is re written Three identical web

Re: [squid-users] Rewrite url and reverse proxy

2010-08-03 Thread John Doe
From: senthilkumaar2021 senthilkumaar2...@gmail.com I have three web servers running at three different ip's (content in that are same) the server name is squid.example.com and squid is running as reverse proxy. Three web server ip's are 172.16.1.48,172.16.1.49.172.16.1.50. I used perl

Re: [squid-users] upgrade

2010-08-03 Thread John Doe
From: J. Webster webster_j...@hotmail.com I currently have squid 2.6 running on centos - they haven't updated their repository yet. WIll upgrading to 3.1.6 have any performance enhancements? Can I leave the existing cache in place and config files or will they be overwritten during the

[squid-users] squid 3.1.6 icap problem

2010-08-03 Thread John Doe
Hi guys, Today I wanted to upgrade from Squid 3.1.5 to Squid 3.1.6, but unfortunately I ran into a few problems, one of them was an icap problem (1), the other one is related to IPv6 (2) I suppose. I am running RHEL5.5 64 Bit with a lot of RAM and a lot of CPUs. (1) essential ICAP service is

Re: [squid-users] Can a cache be too big?

2010-07-28 Thread John Doe
From: Isaac Witmer isaa...@gmail.com On Wed, Jul 21, 2010 at 4:57 PM, Marcus Kool marcus.k...@urlfilterdb.com wrote: yes. 1) the index is in memory and needs 10-20 MB index in memory for each GB on disk I was under the impression (from the oriely squid manual) that recent versions

Re: [squid-users] Real-time images

2010-07-28 Thread John Doe
From: Amos Jeffries squ...@treenet.co.nz Nick Cairncross wrote: This is just a curiosity (whilst I have some time on my hands) and not something I want to put into a live environment. I once stumbled across a site which offered a program/plug-in to scan the access.log file and watch for

Re: [squid-users] Problem to load Java Program via proxy

2010-07-13 Thread John Doe
From: David Walcher david.walc...@knapp.com there is a Java Program launcher on this webpage http://web.ubivent.com/polarion.html Problem is the file will not load completely Maybe related to jnlp...? http://forums.sun.com/thread.jspa?threadID=218915 JD

Re: [squid-users] ACL blocks, browser retries constantly

2010-07-05 Thread John Doe
From: David Parks davidpark...@yahoo.com But when the ACL fails the request, the browser goes into a vicious cycle of continuing to re-try the same request indefinitely Did you set 'negative_ttl' in your external_acl line? JD

Re: [squid-users] FTP Access

2010-06-25 Thread John Doe
From: Malik Madni m4madnima...@hotmail.com i want to access ftp through command prompt. but it is blocked by squid. when i tried it on Squid machine then on squid ftp was opening on command prompt. What do you mean by is blocked by squid? Squid should not handle ftp traffic (ports 20,21)...

Re: [squid-users] cachemanager

2010-06-25 Thread John Doe
From: Philippe Dhont philippe.dh...@gems-group.com Cache manager error Connect 127.0.0.1:3128: (111) connection refused. Did you allow (http_access) the manager connection in squid.conf? http://wiki.squid-cache.org/SquidFaq/CacheManager JD

Re: [squid-users] Problem with Backslash

2010-06-17 Thread John Doe
From: Dave Forster dave.fors...@apm.net.au Is there a way to make Squid parse all backslashes in URLs as forwardslashes??? Check url_rewrite helpers JD

Re: [squid-users] Questions about acls

2010-06-17 Thread John Doe
acl pippo src 192.168.1.10 acl limit maxconn 2 http access allow pippo http access deny pippo limit You should swap the http lines. If pippo has more than 2 connections, deny pippo. If not; allow pippo. In addition, if I specify more that one maxconn acl, which one will prevail? The

Re: [squid-users] Questions about acls

2010-06-17 Thread John Doe
From: Alberto Cappadonia alberto.cappado...@polito.it There exist documentation about the formal model used to evalute acl and http_access? Yes, squid has a documentation section on its website: By example: http://wiki.squid-cache.org/SquidFaq/SquidAcl#Access_Lists Access list rules are

Re: [squid-users] Spotify Access Denied

2010-06-16 Thread John Doe
From: Francisco Martinez Espadas fmarti...@tarragona.cat acl port SSL_ports 443 563 444 4070 8081 http_access deny CONNECT! SSL_ports The default squid.conf for 2.7 uses: acl SSL_ports port 443 acl CONNECT method CONNECT http_access deny CONNECT !SSL_ports Pay attention to the syntax... JD

Re: [squid-users] OAFIID:GNOME

2010-05-27 Thread John Doe
From: squidACL zakariai...@gmail.com I have a big problem when I strat fedora give me this three error message : please if you have any idea i will be thankful This is the squid mailing list, ask the fedora mailing list... JD

Re: [squid-users] Re: Autostart services

2010-05-26 Thread John Doe
From: squidACL zakariai...@gmail.com I add in this file just : service smb start service squid start If you ask operating system specific questions... 1. It would help to say which one... 2. they have dedicated mailing lists... What does the OS documentation say about services...? So, I will

Re: [squid-users] squid crashing while trying use url_rewrite_program

2010-05-17 Thread John Doe
From: jyothi jyo...@cse.iitm.ac.in What happens when you run in manually as the proxy user? does it keep running until you abort it? Sorry I am new to this, run in manually as the proxy user means? What happens if you run your script from the command line as the squid user? JD

Re: [squid-users] Shalla's blacklist

2010-05-17 Thread John Doe
From: Rich Winkel wink...@missouri.edu Could someone explain the organization of this blacklist? There's a BL directory which includes the same categories as the top-level directory (and more) but the overlapping categories seem to have more entries. Is this for differing levels of safety

Re: [squid-users] SSH not working With Squid3.0

2010-05-06 Thread John Doe
From: a...@gmail adbas...@googlemail.com Yes I have searched why but could not find why not in the log not anywhere else. Tried with Iptables, with router same thing. How do I know? Ok if I shut down the proxy machine and completely remove it from the network and try again absolutely no

Re: [squid-users] SSH not working With Squid3.0

2010-05-06 Thread John Doe
From: a...@gmail adbas...@googlemail.com Internet [ISP-Modem] Router / Firewall (LocalNetwork ) Local Network Machine1 Machine2 Machine3 Machine4 Machine5 Machine6 Machine1 = SQUID3.0 Machine2= Mail-Server ... I can access these machines except via SSH Even though I have forwarded

Re: [squid-users] configure: WARNING: Cannot find necessary Linux kernel (Netfilter) header files

2010-05-05 Thread John Doe
From: Wong Fei Young wongb...@telkom.net I got error to configure Squid (either 3.1.1 or 3.1.3) below. I used the old (OpenSuSE stock) linux-kernel-headers RPM 2.6.31. Please advise me what I should do to enable Intercepting Proxy. Personaly, I have 2 different netfilter.h on my CentOS... #

Re: [squid-users] SSH not working With Squid3.0

2010-05-05 Thread John Doe
From: a...@gmail adbas...@googlemail.com even if I try internally to access the other machine's SSH servers the connection is refused Fix that first... Searched why it is refused? And why do you say it is squid fault? JD

Re: [squid-users] SSH not working With Squid3.0

2010-05-03 Thread John Doe
From: a...@gmail adbas...@googlemail.com Before I installed Squid3.0 I could access every host's ssh server, but not since no matter what I do I simply cannot access the back end SSH servers First, it would help if you described your configuration... Only problem I could guess is that you

Re: [squid-users] Multiple Internet portals Routing

2010-04-27 Thread John Doe
From: Eric Mei eric.mei...@gmail.com We have two Internet accessing which connected to two firewalls. The issue is we need to use SQUID to route the different request to the different firewall. Can SQUID do this? And how? Have a look at 'tcp_outgoing_address'. JD

Re: [squid-users] checked with nothing to match against!!

2010-04-26 Thread John Doe
From: Сухоруков Александр emo...@gmail.com every time i take a look at logs i've got ... SECURITY ERROR: ACL 0x28fe20a4 checked with nothing to match against!! ... what does this error means ? Google says: The ACL List should NEVER be NULL when calling this method. So maybe check if you

Re: [squid-users] SQUID3: Access denied connecting to one site

2010-04-21 Thread John Doe
From: Alexandr Dmitriev alexandr.dmitr...@mos.lv I tried to change tcp_ecn, but this did not help. Maybe some other ideas? Just 2 things I found: When I check the page source, I see: metahttp-equiv=Cache-Control: max-age content=300 metahttp-equiv=Expires content=Tue, 20 Apr 2010 06:23:44

Re: [squid-users] Squid No Longer Compiles on RedHat enterprise 5

2010-04-20 Thread John Doe
From: Bradley, Stephen W. Mr. bradl...@muohio.edu This is my second time posting this with no answers yet. I have probably compiled Squid with various options over 100 times in the last two months and after a two week break I tried compiling last night to add SNMP support and it fails with

Re: [squid-users] Squid No Longer Compiles on RedHat enterprise 5

2010-04-20 Thread John Doe
From: Bradley, Stephen W. Mr. bradl...@muohio.edu ./configure --prefix=/usr --includedir=/usr/include --datadir=/usr/share --bindir=/usr/sbin --libexecdir=/usr/lib/squid --localstatedir=/var --sysconfdir=/etc/squid --enable-wccpv2 --enable-linux-netfilter

Re: [squid-users] how to find out what options squid was compiled with

2010-04-15 Thread John Doe
From: Yury Kuryakov kuryu...@mail.ru Can't find answer to my simple question in google and yandex: how to find out what options squid binary was compiled with? Tried squid -v ? JD

Re: [squid-users] Unable to create keytab Msktutil ldap_set_option failed (local errror)

2010-04-15 Thread John Doe
From: GIGO . gi...@msn.com ... KERBEROS / LDAP stuff ... Maybe you'd have more answers if you posted your kerberos/ldap questions on the kerberos/ldap mailing lists? JD

Re: [squid-users] Squid No Longer Compiles

2010-04-15 Thread John Doe
From: Bradley, Stephen W. Mr. bradl...@muohio.edu gcc -DHAVE_CONFIG_H -I.. -I../include -I../src -I../include-Wall -Wpointer-arith -Wwrite-strings -Wmissing-prototypes -Wmissing-declarations -Wcomments -Werror -D_REENTRANT -Wall -g -O2 -MT util.o -MD -MP -MF .deps/util.Tpo -c -o

Re: [squid-users] Re: need help port 80

2010-04-14 Thread John Doe
From: da...@lafourmi.de da...@lafourmi.de acl OnlyFox browser -i Firefox/ http_access deny !OnlyFox but with internet explorer i can surf? I think the following is easier to read: http_access allow OnlyFox http_access deny all Can you list all your http_access lines, or the whole config? I

Re: [squid-users] Trouble writing external acl helper

2010-04-14 Thread John Doe
From: marriedto51 johnmwil...@talktalk.net 2010/04/14 08:40:31.197| WARNING: toy_helper #1 (FD 7) exited 2010/04/14 08:40:31.197| WARNING: toy_helper #3 (FD 11) exited 2010/04/14 08:40:31.198| WARNING: toy_helper #2 (FD 9) exited 2010/04/14 08:40:31.198| WARNING: toy_helper #4 (FD 13) exited

Re: [squid-users] need help port 80

2010-04-13 Thread John Doe
From: da...@lafourmi.de da...@lafourmi.de i have to block port 80 for all applications only firefox should have access! how can i realized that with squid? From the default config file: # acl aclname browser [-i] regexp ... # # pattern match on User-Agent header (see also

Re: [squid-users] Testing squid performance

2010-04-07 Thread John Doe
From: b1 fo...@b1online.de Do you know any tools which request many sites in a short period of time, measuring the avarage load time, etc?? Maybe gather a few thousands URLs (each pointing to a *different* domain to avoid DOSing them) and lauch n recursive wgets in parallel... Or setup your

Re: [squid-users] url_rewrite_program with acl

2010-03-29 Thread John Doe
From: Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br I'm testing some redirectors to learn something about it. Is there a way to use acl with redirectors, so they will only redirect some URL or hosts, intead of redirecting all? I guess 'url_rewrite_access' should do that. JD

Re: [squid-users] Mail client with squid

2010-03-22 Thread John Doe
From: Impact Services impactservi...@gmail.com I want to enable one particular mac address, if possible, else ip address to access internet without routing through squid but all other clients on the network to access through squid. Is it possible? I guess you could use the iptables MAC

Re: [squid-users] Cancelled downloads

2010-03-19 Thread John Doe
From: CASALI COMPUTERS - Michele Brodoloni m.brodol...@casalicomputers.com In this case, are you aware of some third-party software/squid plugin which may could do the job? I'm still crawling the entire internet without luck... I've seen a redirector written in perl, but it seems to use

Re: [squid-users] Absolute Beginner help required on concepts related to Cache_effective_user.

2010-03-19 Thread John Doe
From: GIGO . gi...@msn.com On a compiled squid3 stable24. I am unable to run squid as root in Ubuntu. So the cache_effective_user defined in squid.conf never comes into play. Is this a security concern? what good is cache_effective_user for? Is it right to run squid with the default

Re: [squid-users] Startup/Shutdown scripts.

2010-03-17 Thread John Doe
From: GIGO . gi...@msn.com It is related to starting squid automatically at boot. i have tried enough but did not succeded in doing that. I have compiled squid3 stable24 on Ubuntu 8.04LTS. What i figured out is that squid is not being allowed to run as root so my startup scripts failed

Re: [squid-users] Max Object Size.

2010-03-17 Thread John Doe
From: GIGO . gi...@msn.com Is there any difference between maximum_object_size and max-size directives. What is the recommended setting when you are looking forward for caching windows update and youtube content. Almost 1000 clients. From the documentation: # TAG: maximum_object_size

Re: [squid-users] /etc/init.d/squid start failed

2010-03-16 Thread John Doe
From: Hubert Choma hubert...@wp.pl 2010/03/15 13:05:53| Squid is already running! Process ID 14132 The last line seems to imply that it is already running... Did you check? If you cannot find it, check if the following files exists: /var/run/squid.pid /var/lock/subsys/squid JD

Re: [squid-users] Ignore requests from certain hosts in access_log

2010-03-12 Thread John Doe
From: Baird, Josh jba...@follett.com I am trying to ignore requests from two IP addresses in my access_log. These two hosts connect every second and do health checks of the proxy service and I would like to eliminate the access_log spam that theycreate. Here is what I am trying: acl

  1   2   3   >