[squid-users] Help - Squid 3.2.0.4 - IPV6 - Crashes

2011-03-19 Thread Steve
oblem as well as output from squid -v. Is there any way to force Squid to fully ignore ipV6? Any assistance or pointers would be gratefully received. Thanks Steve Squid Cache: Version 3.2.0.4 configure options: '--prefix=/usr/arcadia/Squid_0' '--enable-replacement-policies=heap

[squid-users] Build fail for versions squid-3.0.STABLE21 and later on IBM PowerPC64

2010-04-15 Thread Steve
that the file is different between releases. If I copy the version from squid-3.0.STABLE20 to squid-3.0.STABLE21 and try again then the build works. I don’t know what the knock on effect of this would be but I guess a more permanent fix at source may be possible. Any help on getting these working without copying source files between releases would be gratefully received. Thanks Steve

Re: [squid-users] Build fail for versions squid-3.0.STABLE21 and later on IBM PowerPC64

2010-04-16 Thread Steve
Amos Many Thanks. Have tried the latest snapshot and all is fine. Thanks for swift fix. Steve On Fri, Apr 16, 2010 at 2:46 AM, Amos Jeffries wrote: > Steve wrote: >> >> Hi >> This is my first post to such a list so please go easy with me and I >> hope I have found

[squid-users] agent.log and https clients

2010-05-20 Thread Steve
allow this client software to work but cannot find the user agent in agent.log. Nothing gets logged. Any clues would be helpful. Thanks Steve

RE: [squid-users] agent.log and https clients

2010-05-21 Thread Steve
site then maybe a dstdomain acl above the browser ones will be the answer. I'll give that a try. Thanks again. Steve -Original Message- From: Henrik Nordström [mailto:hen...@henriknordstrom.net] Sent: 21 May 2010 08:36 To: Steve Cc: squid-users@squid-cache.org Subject: Re: [s

[squid-users] Build Fail for 3.1.4 on IBM PowerPC64

2010-06-18 Thread Steve
cc has a change from 3.1.3 from > new_pool_limit = mem_unlimited_size; To < new_pool_limit = -1; which seems to be the problem. Compiler is gcc version 3.4.6 20060404 (Red Hat 3.4.6-11). Thanks Steve

[squid-users] Problems accessing a website

2008-04-16 Thread steve
Hello, I'm using squid V3 Stable4 on Freebsd 7. Having a problem accessing one particular website. http://folding.extremeoverclocking.com/team_summary.php?s=&t=88608 Using Firefox 2.013 a blank page is returned, but in Firefox 3 beta5 there is a message about a compression type not supported, no

[squid-users] TCP/DENIED 303 redirect firefox 19.0 not working

2013-10-08 Thread steve
!CONNECT http_access deny !whitelist CONNECT http_access deny all Any help welcome Kind regards Steve

[squid-users] How squid get and make use of username?

2005-01-13 Thread Steve
nyone can tell me about generally how the squid get username from the system, how they make use of the username (does squid resolve the ip?) and how the acl is enforce to that user? Thank you. Steve

Re: [squid-users] auth_param username rewrite

2005-04-10 Thread Steve
Hi David and all, I found this thread in the old archive of squid-users. Any updates on the status of your patch you mentioned before? Thanks, Steve. David Brown wrote: On Wed, 19 Jan 2005 23:17:58 +0100 (CET), Henrik Nordstrom <[EMAIL PROTECTED]> wrote: On Mon, 17 Jan 2005, Scott

Re: [squid-users] auth_param username rewrite

2005-04-11 Thread Steve
Scott wrote: After a few weeks we got an internal programmer to add the features we wanted to the auth system We actually have it done for basic and for digest.. I am not sure about the posting of files to this list so I won't post it but if anybody was willing to take the code and maintain it I

[squid-users] external_acl_type and returned keyword

2005-04-13 Thread Steve
Hi All, Squid 2.5 question: In the case of external_acl_type, if the helper program returns OK user=Bob Will squid make use of this username? If yes, how? Is it related to proxy_auth? How bout in version 3? Making use of ext_user? Thanks! Regards, Steve

Re: [squid-users] external_acl_type and returned keyword

2005-04-13 Thread Steve
Henrik Nordstrom wrote: On Wed, 13 Apr 2005, Steve wrote: In the case of external_acl_type, if the helper program returns OK user=Bob Will squid make use of this username? If yes, how? It will appear in access.log, and available using the ident acl in squid-2.5 or ext_user in squid-3. Thanks

Re: [squid-users] external_acl_type and returned keyword

2005-04-13 Thread Steve
ident works? what about in version 3? Regards, Steve

[squid-users] what is the max length for acl name?

2005-05-11 Thread Steve
Greetings, Just a very quick question: I wish to know what is the max length for a acl name, and also how long a single line can go in our configuration file? Thanks! Steve

Re: [squid-users] FW: WCCP Problem

2006-02-28 Thread Steve
? I was thinking it might be DNS related since it seems to have difficulty resolving host_names. Steve

[squid-users] RE: corrupt web caches?

2004-04-03 Thread Steve
"proof-positive" methods I can use to demonstrate that the problem is NOT with the cache servers? (And I'm afraid you'll need to be detailed in how to run the commands, because I am just learning squid.) Thanks again! Steve -Original Message- From: Raphael Maseko [ma

[squid-users] Squid requiring domain for auth

2009-06-22 Thread Steve Allen
owto With both MIT and Heimdal Kerberos, it is unnecessary to configure the /etc/krb5.conf, and it may be detrimental. My system hasn't got a the krb5.conf at all and I wonder if the lack of said file is causing me to have to enter the AFCT\test99 format? Cheers Steve FreeBSD 6.4-RELEASE

Re: [squid-users] Using Squid/Squidguard on

2009-06-25 Thread Steve Allen
option to be compiled in and uncomment the '/usr/local/etc/dansguardian/authplugins/proxy-ntlm.conf' line Cheers Steve

Re: [squid-users] Using Squid/Squidguard on

2009-06-25 Thread Steve Allen
Do the clients connect to the Squid port or to the Dansguardian port? Clients Connect to Dansguardian, then it connects to squid, then squid goes out of the net. Why Dans->Squid->Web and not Squid->Dans->Web? Why, coz all the configuration i've seen does it this way. I didn't think it worked

[squid-users] Posting Files

2009-10-18 Thread Steve Allen
.19 I've been messing around with these 3 settings to try and get it working. chunked_request_body_max_size 0 maximum_object_size 500024 KB request_body_max_size 0 K Any ideas what I've done wrong? Squid conf below. Cheers Steve Squid conf #listen port http_port 3128 hierarchy_sto

Re: [squid-users] Squid 3.0 icap HIT

2010-11-08 Thread Steve Hill
and a postcache respmod hook (respmod_precache). The caching Squid would provide the same precache reqmod hook (reqmod_precache) and a precache respmod hook (respmod_precache), although I don't have a use for these myself. Its a bit nasty, but it happens to work. :) -- - Steve Hill Technica

[squid-users] How to diagnose race condition?

2011-04-25 Thread Steve Snyder
I just upgraded from CentOS 5.5 to CentOS 5.6, while running Squid v3.1.12.1 in both environments, and somehow created a race condition in the process. Besides updating the 200+ software packages that are the difference between 5.5 and 5.6, I configured and enabled DNSSEC on my nameserver. Wha

[squid-users] Trying to install squid with --enable-ssl-crtd switch

2011-09-23 Thread Steve Mansfield
, but still it doesn't work, due to SSL errors, and the helper application ssl_crtd, never gets built. Building without the --enable-ssl-crtd switch works OK. Is there a list of the dependencies? TIA Steve

[squid-users] Squid Processes

2012-02-21 Thread Steve Tatlow
users) Thanks Steve

[squid-users] ICAP breaks HTTP responses with 1 octet bodies

2012-06-14 Thread Steve Hill
g 1 to the contentSize given to bytesWanted() actually have? And is this supposed to be handled elsewhere? -- - Steve Hill Technical Director Opendium Limited http://www.opendium.com Direct contacts: Instant messager: xmpp:st...@opendium.com Email:st...@opendium.c

[squid-users] Tproxy without spoofed source address

2012-11-28 Thread Steve Hill
non-transparent upstream proxy. Is there some way to turn off source address spoofing without using a second proxy? -- - Steve Hill Technical Director Opendium Limited http://www.opendium.com Direct contacts: Instant messager: xmpp:st...@opendium.com Email:st.

Re: [squid-users] A way to redirect google/Youtube SSL

2012-11-28 Thread Steve Hill
s you connect to changes. -- - Steve

Re: [squid-users] A way to redirect google/Youtube SSL

2012-11-29 Thread Steve Hill
On 28.11.12 23:22, David Touzeau wrote: Thanks !!! But what about Youtube ? I'm not aware of anything similar for youtube I'm afraid, but if you come across anything I'd be very interested. The other possibility is to ssl-bump the https sessions, but that's a bit nasty.

Re: [squid-users] Build Fail for 3.1.4 on IBM PowerPC64

2010-06-21 Thread Steve Hall
Silamael Many Thanks. I have tested with a later daily build and it works OK. Cheers Steve Sent from my iPad On 19 Jun 2010, at 10:30, Silamael wrote: > On 06/18/2010 08:27 PM, Steve wrote: >> Hi >> I am getting a compile error with 3.1.4 on IBM Power ppc64 running Red Ha

[squid-users] Leaking ICAP connections

2010-10-14 Thread Steve Hill
d fail and the user would get an error page. Any suggestions on how to debug the problem would be greatfully received. Thanks. -- - Steve Hill Technical Director Opendium Limited http://www.opendium.com

Re: [squid-users] Leaking ICAP connections

2010-10-18 Thread Steve Hill
long time. :( -- - Steve

Re: [squid-users] Leaking ICAP connections

2010-10-19 Thread Steve Hill
terminated ICAP request, but there isn't much more I can tell from it. I will attempt to capture further data -- - Steve xmpp:st...@nexusuk.org sip:st...@nexusuk.org http://www.nexusuk.org/ Servatis a periculum, servatis a maleficum - Whisper, Evanescence

[squid-users] Client Error Cannot Connect

2007-12-03 Thread Steve Billig
Well I did do a search, but I couldn't figure out what the problem I am having could be to actually be solved. I have been seeking help from Fedoraforum.org , with a thread link here: http://forums.fedoraforum.org/showthread.php?t=173935. I will give a basic run-down. So f

[squid-users] Squid will not stop

2007-12-09 Thread Steve Billig
Well, in Fedora 8, I changed some things in the squid.conf file, so I try to restart squid. Both Stopping and Starting failed, so I tried to do the commands individually. They both fail, coming up with: "Stopping squid... [FAILED]" & "Starting squid... [FAILED]" while using the commands service squ

Re: [squid-users] Squid will not stop

2007-12-09 Thread Steve Billig
bnormally." On Dec 9, 2007 8:03 PM, Steve Billig <[EMAIL PROTECTED]> wrote: > Well doing squid -k parse in terminal doesn't do anything for me, and > since I installed squid with a .rpm I don't know where the cache.log > is actually. > > > On Dec 9, 2007 7:59 PM

[squid-users] Re: Delivery Status Notification (Failure)

2007-12-09 Thread Steve Billig
85.198.191 > >- Original message - > > Received: by 10.142.110.3 with SMTP id i3mr810299wfc.1197249611792; > Sun, 09 Dec 2007 17:20:11 -0800 (PST) > Received: by 10.142.232.16 with HTTP; Sun, 9 Dec 2007 17:20:11 -0800 (PST) > Message-ID: <[EMAIL PROTECTED

Re: [squid-users] Squid will not stop

2007-12-09 Thread Steve Billig
So I guess in the squid.conf instead of having http_access allow 209.213.210.178 I want acl allow 209.213.210.178? On Dec 9, 2007 8:46 PM, Adrian Chadd <[EMAIL PROTECTED]> wrote: > On Sun, Dec 09, 2007, Steve Billig wrote: > > I also did see that if I do service squid status, i

Re: [squid-users] Move Media Player

2007-12-18 Thread Steve Snyder
On Tuesday 18 December 2007 4:12:42 pm [EMAIL PROTECTED] wrote: > Is it possible to get this plugin video player to work over squid? If > so, how? > > http://movenetworks.com/support/renderer.html > > Requires IE. We have squid/2.6.STABLE13 > > Thanks 1. Squid (2.6S17) doesn't cause any problems

Re: [squid-users] Pending Squid-2.7 release - testers wanted!

2007-12-19 Thread Steve Snyder
On Wednesday 19 December 2007 9:56:03 am Adrian Chadd wrote: > Hi everyone, > > The Squid-2.7 release should be tagged any day now, so we'd appreciate > it if people currently using Squid-2.6 in high-traffic environments > could give Squid-2.HEAD a whirl. Is there a 2.6S17 --> 2.7S1 changelog? Wh

Re: [squid-users] 2.7 vs 3.0

2007-12-20 Thread Steve Snyder
On Thursday 20 December 2007 12:13:03 pm Alex Rousskov wrote: > On Thu, 2007-12-20 at 16:43 +, Tony Dodd wrote: > > Jason wrote: > > > I'm about to build a cache for a production environment. Which do > > > I want, 2.7 or 3.0? If you have time for a detailed answer, what > > > are the differe

[squid-users] Benchmarking methodology for Squid 2.6/2.7?

2008-01-15 Thread Steve Snyder
Would those who regularly benchmark their Squid 2.6/2.7 installations comment on the procedure they use? I'm setting up a (Linux-based) Squid v2.7 system and have several decisions to make about the software/hardware to use. I'd like to tune the system for best responsiveness and don't want to

Re: [squid-users] Squid Pre-Requisites

2008-01-31 Thread Steve Snyder
On Wednesday 30 January 2008 5:59:36 pm Go Wow wrote: > What are the pre-requisites software in order to have squid installed > on a machine. An example. These are the libraries Squid wants to see on my Fedora 7 system at runtime: $ ldd /usr/sbin/squid linux-gate.so.1 => (0x0011)

[squid-users] Squid currently not working.

2008-02-19 Thread Steve Billig
not working correctly. Any help is greatly appreciated. Thanks. -- -Steve

Re: [squid-users] Squid currently not working.

2008-02-20 Thread Steve Billig
. I did allow this port in Fedora's firewall and I also forwarded it through my router. I will check the logs when I get home. VNC won't let me connect to my server from school. : / -- -Steve

Re: [squid-users] Squid currently not working.

2008-02-20 Thread Steve Billig
Where are the log files that I am supposed to be looking at? On Wed, Feb 20, 2008 at 7:59 AM, Steve Billig <[EMAIL PROTECTED]> wrote: > > > cache_log seems like a good place to start looking. > > > > > > What OS is this? > > > > > Currently I a

Re: [squid-users] Squid currently not working.

2008-02-20 Thread Steve Billig
can't be opened. I made sure that the firewall had it opened and that my router was forwarding it. Thanks a lot for the help. -- -Steve

Re: [squid-users] Squid currently not working.

2008-02-20 Thread Steve Billig
have > the correct privilages to open the port. Typically you need to be root > open a port <1024. > > As root, use 'netstat -anp | grep 81' to check if its in use and what is > using it. I use port 8080 for squid; > rix adam # netstat -anp | grep 8080 > tcp0 0 192.168.1.4:80800.0.0.0:* > LISTEN 11852/(squid) > rix adam # > > -- -Steve

Re: [squid-users] Squid currently not working.

2008-02-21 Thread Steve Billig
Yes I am running in root. That is shown in this print out. This is what is printed out by the netstat command. [EMAIL PROTECTED] ~]# netstat -anp | grep 81 unix 2 [ ACC ] STREAM LISTENING 14810 2545/gnome-panel/tmp/orbit-root/linc-9f1-0-3f5a8e763496f unix 2 [ ACC ]

Re: [squid-users] Squid currently not working.

2008-02-22 Thread Steve Billig
allow apache coredump_dir /var/spool/squid I haven't saved it yet. -- -Steve

Fwd: [squid-users] Squid currently not working.

2008-02-23 Thread Steve Billig
school) it will not start squid. Any ideas with this problem? And thanks a lot everyone for the help. Plus, I am sorry for the double email and everything, but WHY did flushing the IPTables work and re-enabling SELinux? I guess it just needed a refresh in a sense? -- -Steve

[squid-users] Redirection

2008-02-24 Thread Steve Billig
Now I know you are able to redirect websites to others with squid, but how. I read up on like Squid Guard, but that did not help at all. -- -Steve

[squid-users] Port Changing in Fedora 8

2008-02-28 Thread Steve B
rt at 3128, it will start, but if it is anything other then that, it will go: 'Starting Squid. [FAILED]' Any help? -- -Steve

[squid-users] Redirection

2008-02-28 Thread Steve B
ed I will try again, but if not I will ask again, unless no one can help here which is also fine. -- -Steve

Re: [squid-users] Redirection

2008-02-28 Thread Steve B
ard. > > -Marcus > > > > > Steve B wrote: > > Sorry Mark, the problem didn't help and I don't have the email anymore... > > > > Anyways. I am trying to get squidGuard reinstalled on Fedora 8, which > > it was installed before. I un-installed

[squid-users] Port Changing in Fedora 8

2008-02-29 Thread Steve B
. 4) Not from what I had seen. On Fri, Feb 29, 2008 at 5:03 AM, Peter Albrecht <[EMAIL PROTECTED]> wrote: > Hi Steve, > > > > On Thursday 28 February 2008 20:18, Steve B wrote: > > I am trying to change the port that Squid uses from 3128(default) to > >

[squid-users] ACL restrictions by day of the week?

2008-03-03 Thread Steve Snyder
How do I allow/disallow access to specific sites by the day of the week? Example: allow connections to http://www.fun_n_games.com only on Saturdays and Sundays. It's easy enough to see that acl fun_n_games dstdomain .fun_n_games.com acl funtime time SA # Sunday & Saturday But I don't

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-04 Thread Steve Snyder
On Tuesday 04 March 2008 7:36:50 am Adrian Chadd wrote: > Hi everyone, > > I'm quite disappointed in the lack of feedback from the community over > this. Its hard to figure out what people want if noone speaks up, so > this is your time to speak up. I see nothing attractive in Squid v3.0. I don't

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-06 Thread Steve Snyder
On Thursday 06 March 2008 11:05:24 am Adrian Chadd wrote: > Well, the way I'd approach it is to first get an idea of how to throw > things into 'threads', and probably draft and craft a basic event loop > and submission queue for "stuff" to happen across threads. > > Then "Squid" can run as one thr

[squid-users] NTLM authentication failing silently

2008-04-09 Thread Steve King
I'm having a problem trying to set up NTLM authentication following the steps on the wiki and a few tutorials elsewhere. I think I have the computer joined to the domain correctly, and all of the command line tests work. Basic authentication works against AD accounts. However, when I turn on NT

Re: [squid-users] Chat Apps getting blocked

2008-04-24 Thread Steve Palmer
Hello guys i believe that could be our Exchange box - i am subscribed via gmail and then have them forwarded to my work address.I know we get some swear filtering going on (school enviro) but i wasn't aware it was sending out replys to those 'offenses'. I've notifed the admin about this but it appe

[squid-users] What happened to proxy_auth_realm in squid 3?

2008-05-17 Thread Steve King
cannot find an analogous configuration option for NTLM. Thank you, Steve King

Re: [squid-users] Error: comparison between signed and unsigned int

2008-05-28 Thread Steve Bertrand
ug 2363. As soon as the patch is in place, I'll test it again and report back. Steve

Re: [squid-users] Squid3 - reason to migrate

2008-06-09 Thread Steve Bertrand
[EMAIL PROTECTED] wrote: Hello, Is there any reason to migrate to Squid3 (or head snapshot 3.1)? IPv6 ;) Steve

[squid-users] Site-specific "Excess data"?

2008-08-13 Thread Steve Snyder
I've got a rash of "Excess data" entries in my cache.log (Squid 2.7S4, on a CentOS v5.2 system). I was about to report this as a bug in Squid, but the fact that these are all from the same site gives me pause. Is it possible for a web server to be mis-configured such that I would get entries like

[squid-users] IPv6-enabled Squid?

2008-08-19 Thread Steve Snyder
Is there a current guesstimate as to when an IPv6-capable version of Squid will be released? According to the FAQ, IPv6 support is already checked into the Squid3 trunk. It doesn't give any indicate, though, of when this functionality will be available in a non-development release. Cluestick,

Re: [squid-users] IPv6-enabled Squid?

2008-08-25 Thread Steve Bertrand
Amos Jeffries wrote: Steve Snyder wrote: Is there a current guesstimate as to when an IPv6-capable version of Squid will be released? According to the FAQ, IPv6 support is already checked into the Squid3 trunk. It doesn't give any indicate, though, of when this functionality wi

Re: [squid-users] IPv6-enabled Squid?

2008-08-25 Thread Steve Snyder
On Monday 25 August 2008 09:54:37 am Steve Bertrand wrote: > Amos Jeffries wrote: > > Steve Snyder wrote: > >> Is there a current guesstimate as to when an IPv6-capable version > >> of Squid will be released? > >> > >> According to the FAQ, IPv6 su

Re: [squid-users] Zero Sized Reply / Invalid response

2008-08-26 Thread Steve Bertrand
pcap - copy the pcap file from the Squid box to a Windows (or any platform with a GUI based Wireshark install) - open the file in Wireshark - right click on one of the frames of the conversation - click on 'Follow TCP Stream' Steve

Re: AW: [squid-users] Differences between Squid 2.7 and 3.0

2008-08-27 Thread Steve Bertrand
Altrock, Jens wrote: So there is no significant change in features, only in programming language, is that right? IPv6... ;) Steve

Re: AW: [squid-users] Differences between Squid 2.7 and 3.0

2008-08-27 Thread Steve Snyder
On Wednesday 27 August 2008 08:48:36 am Steve Bertrand wrote: > Altrock, Jens wrote: > > So there is no significant change in features, only in programming > > language, is that right? > > IPv6... ;) There is no IPv6 support in Squid v3.0. It is schedule for inclusion in v3.1

Re: AW: [squid-users] Differences between Squid 2.7 and 3.0

2008-08-27 Thread Steve Bertrand
Steve Snyder wrote: On Wednesday 27 August 2008 08:48:36 am Steve Bertrand wrote: Altrock, Jens wrote: So there is no significant change in features, only in programming language, is that right? IPv6... ;) There is no IPv6 support in Squid v3.0. It is schedule for inclusion in v3.1 Oops

[squid-users] ICP queries for 'dynamic' urls?

2008-11-19 Thread Steve Webb
t -> Akamai -> LB -> squid -> LB -> apache -> LB -> storage The "apache" layer does an image resize (which I want to cache) and the url is http://xxx/resize.php?w=xx&h=xx&;... The "storage" layer is just another group of apache servers t

Re: [squid-users] ICP queries for 'dynamic' urls?

2008-11-19 Thread Steve Webb
That did it. Thanks! - Steve On Wed, 19 Nov 2008, Chris Robertson wrote: Date: Wed, 19 Nov 2008 11:42:07 -0900 From: Chris Robertson <[EMAIL PROTECTED]> To: squid-users@squid-cache.org Subject: Re: [squid-users] ICP queries for 'dynamic' urls? Steve Webb wrote: Hello. I&#

[squid-users] Negotiate NTLM authentication broken?, 3.2.3

2012-12-07 Thread Steve Hill
og /var/log/squid/cache.log cache_store_log stdio:/var/log/squid/store.log pid_filename /var/run/squid.pid coredump_dir /var/spool/squid-nocache - The appropriate parts of cache.log are available at: http://persephone.nexusuk.org/~steve/cache.log -- - Steve Hill Technical Director

[squid-users] TPROXY with IPv6

2012-12-20 Thread Steve Hill
Squid's TPROXY sockets only seem to bind to the IPv4 stack - Some Googling suggests it can be made to work with IPv6, but I've not found anything explaining how. What am I missing? Thanks. -- - Steve Hill Technical Director Opendium Limited http://www.opendium.c

[squid-users] tproxy_uses_indirect_client

2012-12-20 Thread Steve Hill
be connecting to proxy B via a tproxy socket, so I don't understand how the tproxy_uses_indirect_client directive is supposed to be used. Am I misunderstanding the purpose of this configuration directive? -- - Steve Hill Technical Director Opendium Limited http://www.op

Re: [squid-users] TPROXY with IPv6

2012-12-20 Thread Steve Hill
et to the IPv4 stack. However, I just restarted squid and it has now bound to the IPv6 stack so I'm not sure what was previously preventing it. Anyway, looks like the problem is solved - thanks. -- - Steve Hill Technical Director Opendium Limited http://www.opendium.com Direc

[squid-users] CLOSE_WAIT

2013-01-09 Thread Steve Hill
ersions of Squid (including 3.2.3) don't seem to be exhibiting the problem to such an extent (I'm still seeing a number of CLOSE_WAIT sockets with an rx queue length of 1 on these servers, but in relatively small quantities.) -- - Steve Hill Technical Director Opend

Re: [squid-users] CLOSE_WAIT

2013-01-09 Thread Steve Hill
On 09/01/13 10:14, Steve Hill wrote: I have a busy Squid 3.2.3 server that constantly has a huge number of connections tied up in CLOSE_WAIT (i.e. at the moment it has 364 ESTABLISHED but 3622 in CLOSE_WAIT). tcp1 0 :::172.23.3.254:8080 :::172.23.2.158:49615 CLOSE_WAIT

Re: [squid-users] CLOSE_WAIT

2013-01-10 Thread Steve Hill
oth cases this bug manifests. Interestingly, if the ICAP service closes the ICAP connection instead of returning a response, Squid generates a "500 Internal Server Error" and does not abandon the socket (the client then drops the connection, which squid handles correctly, and therefore doesn

Re: [squid-users] CLOSE_WAIT

2013-01-11 Thread Steve Hill
rom the connection to the browser between the 403 response being sent and the browser dropping the connection (anything the browser sends after the 403 just piles up in the socket's rx buffer). -- - Steve Hill Technical Director Opendium Limited http://www.opendium.

[squid-users] Marking squid<->webserver traffic

2013-01-14 Thread Steve Hill
far as I can see the example configurations only route client->squid traffic via GRE and the squid->client and squid<->webserver traffic all follows the usual routing instead (which would require Squid to have its own dedicated connection to the router). -- - Steve Hill Techn

[squid-users] Squid 3.2.6 fails to handle large POSTs when returning errors

2013-01-17 Thread Steve Hill
ult in IE making the initial unauthenticated request and then hanging, waiting for the upload to complete before redoing the request with auth credentials. -- - Steve Hill Technical Director Opendium Limited http://www.opendium.com Direct contacts: Instant messager: xmpp:st...@opendiu

Re: [squid-users] CLOSE_WAIT

2013-01-21 Thread Steve Hill
ems that readMore should really be true at this point anyway. clientProcessRequest() explicitly sets readMore = false for CONNECT requests, so I don't understand how Squid handles keep-alive CONNECT tunnels? -- - Steve Hill Technical Director Opendium Limited http://www.

Re: [squid-users] CLOSE_WAIT

2013-03-06 Thread Steve Hill
else with the connection. If we can't connect to the remote host for whatever reason, tunnel.cc calls errorSend() and all the code paths seem to lead to the socket being closed; if we can connect then the socket then I don't think client_side_request.cc touches it again. --

[squid-users] OpenBSD pf and Squid running on Linux.

2003-02-16 Thread Steve Keate
I am having a problem using OpenBSD as a redirector for a Linux based transparent proxy, can anyone tell me what I'm doing wrong? I'm trying to use the NAT in OpenBSD's pf on a bridging firewall to pass requests to a Linux box running squid that is configured as a transparent proxy using this l

[squid-users] How to build with static linking?

2003-02-22 Thread Steve Snyder
Is there a clean way to tell the Squid v2.5S1 build process (on a Linux system) that I want to link the binaries staticly? If so, how is it done? Doing a "./configure --help" didn't tell me anything, and it seems that setting a "LDFLAGS=-static" environment variable doesn't work either. I kn

[squid-users] Re: How to build with static linking?

2003-02-25 Thread Steve Snyder
I take it then that there is no config option or similar for building Squid statically? -- Forwarded Message -- Subject: How to build with static linking? Date: Sat, 22 Feb 2003 12:35:40 -0500 From: Steve Snyder <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Is there a clean

[squid-users] "--enable-ssl" config needed if not doing authentication?

2003-02-25 Thread Steve Snyder
When building Squid v2.5S1 (+ all patches) do I need to use the "--enable-ssl" configuration option if I am not doing authentication of clients? If so, what feature(s) of Squid require the SSL services? Thanks.

[squid-users] ACL distinction between ".domain.tld" & "domain.tld"?

2003-03-16 Thread Steve Snyder
For purposes of defining an ACL in Squid v2.5S1, is there a distinction made between ".domain.tld" and "domain.tld" (note the leading dot in the first case)? For example, if I say: acl slashdot dstdomain slashdot.org no_cache deny slashdot (note absense of leading dot) will th

RE: [squid-users] Re: WCCP2 Authentication type 7

2003-06-20 Thread Steve Fischer
Type 7 ? The 7 in that configuration specifies a level of encryption for the password. In your scenario, abc123 would be the password AFTER it has passed thru the hashing algorithm, not before. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Friday, June 20, 20

[squid-users] Running squid -k reconfigure frequently

2003-07-18 Thread Steve Cody
ran. Thanks in advance! Steve Cody -- Open WebMail Project (http://openwebmail.org)

[squid-users] Is Squid 2.5S4 imminent?

2003-07-19 Thread Steve Snyder
[ This should really go to the Squid developers list, but I'm not subscribed to that one. Sorry.] Before deploying new software into my production environment, I like to test it for a couple of weeks in a less critical context. Now that Squid 2.5STABLE3 has accumulated 25 patches, some fixing

Re: [squid-users] Running squid -k reconfigure frequently

2003-07-19 Thread Steve Cody
ange. The changes don't take effect until I restart squid, or do a squid -k reconfigure. Someone else suggested that I use LDAP to avoid this issue, and I'm looking into that option right now. Steve On Sat, 2003-07-19 at 02:30, Peter Koinange wrote: > Something wrong here, why w

[squid-users] Questions on "http_access deny" and TCP_DENIED

2003-07-25 Thread Steve Snyder
I have a couple of questions regarding Squid (2.5S3 + patches) and TCP_DENIED on my Linux (RedHat v7.3) system. This is a prohibition I have in my config file: acl imrworldwide dstdomain .imrworldwide.com http_access deny imrworldwide Below are excerpts from my log file, showing the prohi

Re: [squid-users] Questions on "http_access deny" and TCP_DENIED

2003-07-25 Thread Steve Snyder
On Friday 25 July 2003 7:10 am, Henrik Nordstrom wrote: > fre 2003-07-25 klockan 15.10 skrev Steve Snyder: > > 1. Why does it take so long to do the denial? > > Do you have any other http_access lines before this which could cause > the request to be delayed? Well, I don't

[squid-users] Cybercafe setup

2003-07-26 Thread Steve Cody
uld hate to re-invent the wheel. Can someone recommend a free, open source, package or set of scripts that will work? I'm running Squid v?, Dansguardian v2.1.6?, and IPtables on Redhat 9. Thanks! Sorry for the lack of version info. It's the version that comes installed with Redhat 9. Steve Cody

Re: [squid-users] Questions on "http_access deny" and TCP_DENIED

2003-07-26 Thread Steve Snyder
On Saturday 26 July 2003 10:10 am, Henrik Nordstrom wrote: > On Saturday 26 July 2003 05.37, Steve Snyder wrote: > > Well, I don't see any reason for the delay. Here's all the > > "http_access" references I've got. Note that the logged TCP_DENIED > >

[squid-users] Destination address rewriting for TPROXY

2013-12-02 Thread Steve Hill
ent_dst_passthru off" option, which sounds like it would almost do what I want, except the manual says that this option gets forced back on for requests that fail host verification. -- - Steve Hill Technical Director Opendium Limited http://www.opendium.com Direct contacts:

  1   2   3   >