hi all
we want to use an autentication protocol based on
smart card and https server through squid.
we want to save the user credentials runtime to allow
a fluent navigation to the user without adding the
username and password every time for every page.
so we need to save the user credentials and
On Friday 28 November 2003 01:17, Henrik Nordstrom wrote:
On Thu, 27 Nov 2003, Mauro wrote:
It's a hardware firewall, a Netscreen ns 204.
It has all the ports closed except for 80, 443, 21, 53, 22.
Why?
Maybe it is the firewall who disturbs your DNS traffic, but I would
think a NS 204
On Thursday 27 November 2003 11:56, Henrik Nordstrom wrote:
On Thu, 27 Nov 2003, Mauro wrote:
Here is the file in attach.
I hope can have an help to solve this problem.
Thank you.
Looks like there is serious packet loss between your proxy and the
DNS servers causing DNS retransmissions
On Thursday 27 November 2003 17:11, Henrik Nordstrom wrote:
On Thu, 27 Nov 2003, Mauro wrote:
Squid caches dns queries with ipcache, isn't it?
Yes, but this is not entirely the same as using a caching DNS
server.
Your packet trace clearly shows that Squid is sending the DNS
queries
On Thursday 27 November 2003 21:19, Ounsted, Toby wrote:
Mauro - what kind of firewall is it? Toby.
It's a hardware firewall, a Netscreen ns 204.
It has all the ports closed except for 80, 443, 21, 53, 22.
Why?
Mauro
-Original Message-
From: Mauro [mailto:[EMAIL PROTECTED]
Sent
If you have more than a few users, I would recommend using one of
the asynchronous IO types (aufs/diskd) instead of ufs.
I have about 400 clients accessing the cache.
I'm using ufs.
Do you recommend aufs?
I have to recreate the cache?
Thnak you.
On Tuesday 25 November 2003 13:36, Henrik Nordstrom wrote:
On Tue, 25 Nov 2003, Mauro wrote:
I have changed positive_dns_ttl parameter.
I put positive_dns_ttl 5 minutes.
Now it seems that things goes better.
What was it set to before?
Default value.
What do you think about?
On Wednesday 26 November 2003 11:59, Henrik Nordstrom wrote:
On Wed, 26 Nov 2003, Mauro wrote:
I have about 400 clients accessing the cache.
I'm using ufs.
Do you recommend aufs?
If you see that your have Squid blocked a lot then yes (see vmstat
1)
I have squid blocked but the only
On Wednesday 26 November 2003 12:05, Henrik Nordstrom wrote:
On Wed, 26 Nov 2003, Mauro wrote:
On Tuesday 25 November 2003 13:36, Henrik Nordstrom wrote:
On Tue, 25 Nov 2003, Mauro wrote:
I have changed positive_dns_ttl parameter.
I put positive_dns_ttl 5 minutes.
Now it seems
On Wednesday 26 November 2003 13:36, Peter van der Does wrote:
It looks like you don't have enough DNS processes running
How much is your dns_children set?
From the squid.conf:
# TAG: dns_children
# Note: This option is only available if Squid is rebuilt with the
#
On Wednesday 26 November 2003 14:23, Peter van der Does wrote:
The process isn't running as a squid process.
If you do ps -aux | grep proxy you should see more.
ps aux |grep proxy
proxy13595 2.5 2.5 58456 53676 ? S14:52 0:30 [squid]
proxy13596 0.0 0.0 1248 308 ?
On Wednesday 26 November 2003 15:35, Peter van der Does wrote:
Did you try the suggestion of increasing the dns-children?
No, I have to recompile squid.
On Wednesday 26 November 2003 15:42, Peter van der Does wrote:
Oh cause you said earlier:
I use a precompiled package from debian and it seems that this
option is enable.
Oh scuse me .. sorry.I have to mean that it isn't enable.
On Tuesday 25 November 2003 13:36, Henrik Nordstrom wrote:
On Tue, 25 Nov 2003, Mauro wrote:
I have changed positive_dns_ttl parameter.
I put positive_dns_ttl 5 minutes.
Now it seems that things goes better.
What was it set to before?
To default value, I think 6 hours.
On Monday 24 November 2003 14:29, Raphael Maseko wrote:
Hi All,
May be I should take the silence over my question below as a sign
that not may people use or attempt to use squidalyser.
Can someone, please, suggest an alternative application that I can
use to analyse proxy users' access
b) Squid is the worst case application for RAID5 and will
absolutely kill the performance of a RAID5. RAID1 is fine, and so
is separate drives.
And if I use Logical Volume Manager?
I use EVMS in my linux system, http://evms.sourceforge.net/.
EVMS is like LVM.
I have 3 scsi disks seen as a
be squid has a problem in searching in its cache and so I have no
responses from dns servers.
It seems to me that when cache was not full there were not any
problem.
Sorry for my english.
Mauro
On Friday 21 November 2003 21:15, Mark Pelkoski wrote:
List,
I FINALLY implemented a Squid server into my production environment
today. It is squid-2.5.STABLE4-20031029 on a Quad Proc Xeon 500MHz
with 1M Cache and 3x9Gig Raid-5 dedicated for cache and 2x9Gig
Raid-1 for OS Redhat 9.0. I tested
On Thursday 20 November 2003 02:05, Henrik Nordstrom wrote:
On Thu, 20 Nov 2003, Mauro wrote:
a local network.
I always have this kind of errors in my syslog:
Oct 15 16:04:30 proxy1 squid[879]: idnsCheckQueue: ID 12ad:
giving up after 31 tries and 309.1 seconds
This does not need
On Thursday 20 November 2003 10:36, Henrik Nordstrom wrote:
On Thu, 20 Nov 2003, Mauro wrote:
Yes, I see many entries logges as TCP_MISS/503 in access.log.
Is it a cache problem?
Not if you have the timeout messages in cache.log you posted
earlier. It is then a DNS related problem.
If I
Sorry for my bad english, I'm italian.
I have squid 2.4STABLE6 in a debian linux system.
I use this proxy server to give internet connection to 700 clients in
a local network.
I always have this kind of errors in my syslog:
Oct 15 16:04:30 proxy1 squid[879]: idnsCheckQueue: ID 12ad: giving up
Hello.
After configuring a browser to connect to squid at localhost, I receive an
error page of url not retrieved because forwarding denied. It specify that
the cache will not forward the request because it is trying to enforce a
sibling relationship.
Have you some hints to resolve it? Could
Hello to everyone.
I am an italian newbye and after installing and configuring squid.conf file I
don't succeed to start it by etc/init.d directory.
The command ./squid start send back this msg:
Starting squid: ./squid: line 162: 3239 Aborted $SQUID $SQUID_OPTS 2
/dev/null
and the
I'm using debian and it's ok.
On Thursday 17 July 2003 03:32, Wei Ming Long wrote:
We are using RedHat Linux 8.0 it has been running for a long long long
time, highly reliable, secure, stable fast.
regards
Matthew
Mathew Thomas [EMAIL PROTECTED] 07/14/03 09:40AM
Hi All,
I am
?
Thank you.
Mauro
I use squidguard for this.
www.squidguard.org.
On Wednesday 18 June 2003 15:38, Frank Chibesakunda wrote:
hello
Just downloaded the blacklist, how do i use it, want to block users from
browsing porn sites,
rgds,
frank
On Tuesday 03 June 2003 14:01, Ralf Hildebrandt wrote:
* Mauro [EMAIL PROTECTED]:
What about squid with XFS filesystem?
Anyone use it?
Yes, we have it running on 2 boxes:
$ mount
/dev/sda8 on / type auto (rw,errors=remount-ro)
proc on /proc type proc (rw)
devpts on /dev/pts type devpts
I've a proxy.pac which is like this
function FindProxyForURL(url, host)
{
// controllo se viene inserito un host non appartente a nessun Dominio
if (isPlainHostName(host) ||
...
// se vengono
I use a proxy server to connect about 600 client (the requests are about 300 a
minute) of a lan to internet.
So there's no need for a dns cache?
Thank you
Mauro
On Sunday 06 April 2003 10:49, Robert Collins wrote:
On Sun, 2003-04-06 at 18:46, Mauro wrote:
Can explain me how to proceed
Hallo.
I have a lan and a proxy machine to connect to interent.
I have configured all client' browsers to use proxy to connect to internet.
For IE I have configured Use proxy and don't use proxy for local addresses
then I list all the local addresses not to use with proxy.
But...there is a way to
/var 10Gb
/cache0 8Gb
/cache1 8Gb
/cache2 8Gb
swap 2Gb
My question is: why 3 caches?
In your opinion, it's userful to have 3 cache rather than one?
Thank you.
Mauro
But I have only 3 disks.
raid5 is the worst possible disk model for Squid performance. The
performance of your three disks is almost limited to that of a single
disk when using raid5.
I would install one more drive, then use two of the drives in mirror for
OS, swap and logs, and two drives as
Help me, I am in trouble.
I work in a pubblic organization.
We have a LAN and an internet connection.
The LAN is not connected to internet.
The client use a proxy to connect to internet.
I have proposed to install squid in a linux machine.
So I have installed squid on a Pentium II 400Mhz with
Do you know a good FTP proxy software for Linux to use in conjuction with
squid as well as a Socks one
Cheers
34 matches
Mail list logo
