Re: [squid-users] real client ip address instead of squid Ip address

2011-09-29 Thread Khemara Lyn
to find out all the IP ranges used by those sites? I would like to be able to block those IP ranges in WCCP access list so that accesses to those sites will bypass my Squid box. Regards, Khem On 09/20/2011 08:53 AM, Amos Jeffries wrote: On Mon, 19 Sep 2011 14:59:54 +0700, Khemara Lyn wrote

Re: [squid-users] real client ip address instead of squid Ip address

2011-09-19 Thread Khemara Lyn
On 09/18/2011 04:38 PM, Saleh Madi wrote: Dears, How could I configure the squid appear the clients real IP address instead of the squid IP address, the problem is that all clients get the same IP address which make problems in file sharing websites like mega upload, rapidshare and others

Re: [squid-users] real client ip address instead of squid Ip address

2011-09-19 Thread Khemara Lyn
ranges used by those sites? I would like to be able to block those IP ranges in WCCP access list so that accesses to those sites will bypass my Squid box. Regards, Khem On 09/20/2011 08:53 AM, Amos Jeffries wrote: On Mon, 19 Sep 2011 14:59:54 +0700, Khemara Lyn wrote: On 09/18/2011 04:38 PM, Saleh

[squid-users] Squid, WCCP and ACL for Youtube

2010-10-13 Thread Khemara Lyn
Dear All, My Squid-2.7 box is talking WCCP to my Cisco router. On the router, I create an ACL that would allow and disallow certain sources and destinations for WCCP. I'd like to know if it is possible to define an IP wild card in the ACL for Youtube servers/IPs. My goal is to have that

Re: [squid-users] possible SYN flooding on port 3128. Sending cookies

2010-06-06 Thread Khemara Lyn
On 06/06/2010 03:12 AM, Henrik Nordström wrote: lör 2010-06-05 klockan 07:31 +0700 skrev Khemara Lyn: What would be the good values for these parameters? Any extra parameters i should add? Add a zero to tcp_max_syn_backlog perhaps? If that does not help then you need to investigate

Re: [squid-users] Request for your recommendation for ISP setup

2010-06-04 Thread Khemara Lyn
On 06/04/2010 08:13 PM, Luis Daniel Lucio Quiroz wrote: Le vendredi 4 juin 2010 00:09:19, Khemara Lyn a écrit : Dear All, First, please bear with me for the lengthy message. I'm really in need of help from your expertise regarding a good, robust, high-performance forward-proxy Squid setup

Re: [squid-users] possible SYN flooding on port 3128. Sending cookies

2010-06-04 Thread Khemara Lyn
+0700 skrev Khemara Lyn: Jun 4 11:11:39 cache kernel: possible SYN flooding on port 3128. Sending cookies. You get this message when the SYN backlog queue is filled in the TCP kernel. This is mainly connections in SYN_RECV state. It is safe to tune up the limit considerably from

[squid-users] possible SYN flooding on port 3128. Sending cookies

2010-06-03 Thread Khemara Lyn
Dear All, I could see a lot of instances of the following message in the system log of Fedora 12 running Squid-2.7STABLE9: Jun 4 11:11:39 cache kernel: possible SYN flooding on port 3128. Sending cookies. Is the system really under SYN flood attack? I tried running this command: netstat

[squid-users] Request for your recommendation for ISP setup

2010-06-03 Thread Khemara Lyn
Dear All, First, please bear with me for the lengthy message. I'm really in need of help from your expertise regarding a good, robust, high-performance forward-proxy Squid setup for ISP customers. I am running an ISP with around 500 customers. I've been using a single Squid machine to do

Re: [squid-users] errors on some youtube videos

2010-05-27 Thread Khemara Lyn
Hi, I encountered the same thing before. My solution was to apply the patched as mentioned at the end of this page:

[squid-users] Problem with Rapidshare

2010-05-26 Thread Khemara Lyn
Dear All, My Squid box cannot connect to rapidshare server anymore; we always get the error of connection to [some ip] failed (110) Connection timed out. Did anyone ever encounter this before? Could it be that, they block/blacklist our Squidbox's IP? How can I resolve this? Also, I'm using

[squid-users] How to resolve: Excess data from ... error

2010-05-10 Thread Khemara Lyn
Dear All, I got a lot of the following logged messages in my cache.log file: 2010/05/10 19:23:59| httpReadReply: Excess data from GET http://ff.search.yahoo.com/gossip?command=...; 2010/05/10 19:24:00| httpReadReply: Excess data from GET http://ff.search.yahoo.com/gossip?command=...;

Re: [squid-users] Youtube Caching

2010-04-26 Thread Khemara Lyn
before i tried it out. Now, my next step is to try both the videocache and the sotreurl feature. I will update the list again. Thanks regards, Khem On 04/26/2010 07:06 PM, Amos Jeffries wrote: Khemara Lyn wrote: Thank you, Amos, for your comments and sorry for my late response. I don't use

Re: [squid-users] Youtube Caching

2010-04-25 Thread Khemara Lyn
: Khemara Lyn wrote: Dear All, I know this topic have been around every now and then; but i'm desperate now in finding any fix. I tried the configuration as mentioned in this page: Caching YouTube Content http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube?highlig ht

Re: [squid-users] Yahoo Messenger

2010-04-24 Thread Khemara Lyn
Thank you, sir Amos for your reply. I've added the example in my config and did not observe any problem yet. I assume, it is safe to include them. regards, khem On 04/22/2010 12:32 PM, Amos Jeffries wrote: Khemara Lyn wrote: Dear All, I was browsing through the Squid's config examples

[squid-users] Youtube Caching

2010-04-24 Thread Khemara Lyn
Dear All, I know this topic have been around every now and then; but i'm desperate now in finding any fix. I tried the configuration as mentioned in this page: Caching YouTube Content

[squid-users] Yahoo Messenger

2010-04-21 Thread Khemara Lyn
Dear All, I was browsing through the Squid's config examples and got to this page: http://wiki.squid-cache.org/ConfigExamples/Chat/YahooMessenger about the Yahoo Messenger. From what I understand, that is to deny access to those Yahoo IM servers. Why would we need that? What if we allow it?

Re: [squid-users] How to handle the error: Unsupported method 'BitTorrent'

2008-12-03 Thread Khemara Lyn
Thanks, Amos. Feel safe, then. On Wednesday 03 December 2008 11:44:32 am Amos Jeffries wrote: Khemara Lyn wrote: Dear All, How can I handle this error in Cache log: parseHttpRequest: Unsupported method 'BitTorrent' Is it serious or does it affect Squid performance? It's only

[squid-users] Any workaround for http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube/Discussion

2008-12-03 Thread Khemara Lyn
Hi All again, I've been following the config examples on the Squid Web site: http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube/Discussion I can say it works great. I've been using Squid for quite a while now and

Re: [squid-users] Any workaround for http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube/Discussion

2008-12-03 Thread Khemara Lyn
, Khem On Wednesday 03 December 2008 04:12:03 pm Khemara Lyn wrote: Hi All again, I've been following the config examples on the Squid Web site: http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube/Discussio n I can

[squid-users] How to handle the error: Unsupported method 'BitTorrent'

2008-12-02 Thread Khemara Lyn
Dear All, How can I handle this error in Cache log: parseHttpRequest: Unsupported method 'BitTorrent' Is it serious or does it affect Squid performance? I am using Squid-2.7 compiled from source with transparent proxy and talking WCCP2 to a CISCO router. Can I tell Squid to immediately drop