[squid-users] Squid 3.1 with Tproxy and WCCP on Cisco 3550

2013-10-28 Thread mudasirmirza
Hi, I am working on setting up Squid 3.1 with Tproxy using WCCP on Cisco 3550. Configs that I am using is below Router and Proxy both are on Public IPs, traffic coming in from clients are also Public IP But for some reason the Router Identifier IP is showing as Local IP which is being used to ac

Re: [squid-users] Squid-3.1 failed to select source

2013-04-28 Thread Doug
Hello, # squid3 -k parse 2013/04/29 10:10:15| Processing Configuration File: /etc/squid3/squid.conf (depth 0) This is the info it gives. 2013/4/29 Amos Jeffries : > On 28/04/2013 8:55 p.m., Doug wrote: >> >> Hello, >> >> I have the reverse proxy config as: >> >> cache_peer 175.6.1.216 parent

Re: [squid-users] Squid-3.1 failed to select source

2013-04-28 Thread Amos Jeffries
On 28/04/2013 8:55 p.m., Doug wrote: Hello, I have the reverse proxy config as: cache_peer 175.6.1.216 parent 80 0 no-query originserver name=caiyuan acl resdomain dstdomain www.52caiyuan.com www.52huayuan.cn 52caiyuan.com 52huayuan.cn huayuan.52caiyuan.com cache_peer_access caiyuan all

[squid-users] Squid-3.1 failed to select source

2013-04-28 Thread Doug
Hello, I have the reverse proxy config as: cache_peer 175.6.1.216 parent 80 0 no-query originserver name=caiyuan acl resdomain dstdomain www.52caiyuan.com www.52huayuan.cn 52caiyuan.com 52huayuan.cn huayuan.52caiyuan.com cache_peer_access caiyuan allow resdomain When accessing to the cach

Re: [squid-users] Squid 3.1 Client Source Port Identity Awareness

2012-10-23 Thread Amos Jeffries
On 24.10.2012 07:55, Alexander.Eck wrote: Hi everyone, is it possible to have squid use the same Source Port to connect to the Web= server as the client uses to connect to squid ? No. One gets errors when bind() is used on an already open port. connect() and sendto() do not supply the OS wi

Re: [squid-users] Squid 3.1 Client Source Port Identity Awareness

2012-10-23 Thread Eliezer Croitoru
On 10/23/2012 8:55 PM, alexander@heidelberg.de wrote: Any help is appreciated:) Best Regards Alex Take a peek at TPROXY. if you can share your squid.conf you can get better help. (notice that your email looks bad with lots of spaces) Regards, Eliezer -- Eliezer Croitoru https://ww

[squid-users] Squid 3.1 Client Source Port Identity Awareness

2012-10-23 Thread Alexander.Eck
Hi everyone, is it possible to have squid use the same Source Port to connect to the Web= server as the client uses to connect to squid ? My problem is the following setup: Various Citrix Server URL Filtering with Identity Awareness Squid 3.1 as Cache Proxy I had to instal

Re: [squid-users] Squid 3.1 vmware.com access

2012-09-20 Thread Amos Jeffries
On 20/09/2012 11:46 p.m., Bambang Sumitra wrote: On Sep 20, 2012 5:12 PM, "Amos Jeffries" > wrote: > > On 20/09/2012 7:03 p.m., Bambang Sumitra wrote: >> >> Hi All, >> >> I'am using Squid Cache: Version 3.1.19 on ubuntu 12.04, and i have >> problem accessing vmware

Re: [squid-users] Squid 3.1 vmware.com access

2012-09-20 Thread Amos Jeffries
On 20/09/2012 7:03 p.m., Bambang Sumitra wrote: Hi All, I'am using Squid Cache: Version 3.1.19 on ubuntu 12.04, and i have problem accessing vmware.com, its never complete load, always showing white blank page, i have try with different browser also, firefox, chrome and IE here is my squid con

[squid-users] Squid 3.1 vmware.com access

2012-09-20 Thread Bambang Sumitra
Hi All, I'am using Squid Cache: Version 3.1.19 on ubuntu 12.04, and i have problem accessing vmware.com, its never complete load, always showing white blank page, i have try with different browser also, firefox, chrome and IE here is my squid config -- squid conf

Re: [squid-users] Squid 3.1.x and Kemp loadbalancer.

2012-06-20 Thread Amos Jeffries
On 20.06.2012 22:40, Josef Karliak wrote: Hi there, we use Kemp loadbalancer for balancing proxy (active-backup). All users has set IP of kemp loadbalancer. But in the squid access_log is IP of the loadbalancer, I want there an IP of the user that is accessing the web pages (we use webalizer fo

[squid-users] Squid 3.1.x and Kemp loadbalancer.

2012-06-20 Thread Josef Karliak
Hi there, we use Kemp loadbalancer for balancing proxy (active-backup). All users has set IP of kemp loadbalancer. But in the squid access_log is IP of the loadbalancer, I want there an IP of the user that is accessing the web pages (we use webalizer for analyzing top browsing users).

Re: [squid-users] Squid 3.1 and https ssl aes256 issue

2012-06-04 Thread Amos Jeffries
On 03.06.2012 22:23, alextouch wrote: Hi this is my first post... last month I installed a linux ubuntu server 12.04 LTS machine with Squid3 in my organization. This machine works as a proxy (not transparent proxy) for the web access from clients. Proxy is connected to a gateway for internet

[squid-users] Squid 3.1 and https ssl aes256 issue

2012-06-03 Thread alextouch
Hi this is my first post... last month I installed a linux ubuntu server 12.04 LTS machine with Squid3 in my organization. This machine works as a proxy (not transparent proxy) for the web access from clients. Proxy is connected to a gateway for internet connection. Clients are configured so th

Re: [squid-users] Squid 3.1 and TPROXY 4 Problems

2012-05-05 Thread Amos Jeffries
On 5/05/2012 7:58 p.m., Dave Blakey wrote: Hi all, I'm busy working on a tproxy setup with the latest squid on Ubuntu 12.04; tproxy is enabled, squid is compiled with tproxy support etc. The difference with this setup is that traffic is being sent to the host using route-map on a cisco as oppos

[squid-users] Squid 3.1 and TPROXY 4 Problems

2012-05-05 Thread Dave Blakey
Hi all,  I'm busy working on a tproxy setup with the latest squid on Ubuntu 12.04; tproxy is enabled, squid is compiled with tproxy support etc. The difference with this setup is that traffic is being sent to the host using route-map on a cisco as opposed to WCCP but it seems that should work. Unfo

[squid-users] Squid 3.1 and TPROXY 4 Problems

2012-05-04 Thread Dave
Hi all,  I'm busy working on a tproxy setup with the latest squid on Ubuntu 12.04; tproxy is enabled, squid is compiled with tproxy support etc. The difference with this setup is that traffic is being sent to the host using route-map on a cisco as opposed to WCCP but it seems that should work. Unfo

[squid-users] Squid 3.1 + Accel conf + ETag = ignoring ETag

2012-04-27 Thread Daniele Segato
Hi, I'm experimenting with squid and a service I'm writing. my service compute ETag and return it along with other Http headers: Headers returned by a request to my service: HTTP/1.1 200 OK Content-Language: it Cache-Control: public, max-age=60, s-maxage=60 ETag: "32b71ecde17592a1d6ef696f5ae78

[squid-users] Squid 3.1: access.log did not log authenticated members

2012-04-20 Thread David Touzeau
Dear I have tested all log formats on my squid 3.1.19 and member information still "IP - - " eg: 192.168.1.212 - - [ Is it normal ? I notice that using squid 3.2 log correctly members uid in access.log Best regards

Re: [squid-users] squid 3.1 and HTTPS (and probably ipv6)

2012-03-13 Thread Amos Jeffries
On 13.03.2012 22:10, Eugene M. Zheganin wrote: Hi. I'm using squid 3.1.x on FreeBSD. Squid is built from ports. Recently I was hit by a weird issue: my users cannot open HTTPS pages. This is not something constant - if they hit the F5 button in browser, the pages are loading, sometimes showing

[squid-users] squid 3.1 and HTTPS (and probably ipv6)

2012-03-13 Thread Eugene M. Zheganin
Hi. I'm using squid 3.1.x on FreeBSD. Squid is built from ports. Recently I was hit by a weird issue: my users cannot open HTTPS pages. This is not something constant - if they hit the F5 button in browser, the pages are loading, sometimes showing the message like 'Unable to connect. Firefox

Re: [squid-users] squid 3.1 - endless loop IIS webserver

2012-03-12 Thread Amos Jeffries
On 12/03/2012 6:53 p.m., kadvar wrote: Hi, I have searched for other posts with the same problem but the workarounds that worked for them did'nt work for me. I am trying to configure a squid reverse proxy with ssl support. I have squid on 192.168.124.41 with apache on 127.0.0.1 on the same box.

[squid-users] squid 3.1 - endless loop IIS webserver

2012-03-11 Thread kadvar
Hi, I have searched for other posts with the same problem but the workarounds that worked for them did'nt work for me. I am trying to configure a squid reverse proxy with ssl support. I have squid on 192.168.124.41 with apache on 127.0.0.1 on the same box. I also have two other webservers (1 apach

Re: [squid-users] Squid 3.1.x and detect/disable http tunneling over proxe web sites

2012-03-08 Thread Helmut Hullen
Hallo, Josef, Du meintest am 08.03.12: >is it able to detect somehow (and disable) tunneling http regular > web thru proxy web sites ? For example porn web site thru > "hidemyass.com". There are a lot of web proxies, couldn't locate > everyone and disable it :). How do you solve it ? I use

Re: [squid-users] Squid 3.1.x and detect/disable http tunneling over proxe web sites

2012-03-08 Thread Amos Jeffries
On 9/03/2012 1:01 a.m., Josef Karliak wrote: Good afternoon, is it able to detect somehow (and disable) tunneling http regular web thru proxy web sites ? For example porn web site thru "hidemyass.com". There are a lot of web proxies, couldn't locate everyone and disable it :). How do you

[squid-users] Squid 3.1.x and detect/disable http tunneling over proxe web sites

2012-03-08 Thread Josef Karliak
Good afternoon, is it able to detect somehow (and disable) tunneling http regular web thru proxy web sites ? For example porn web site thru "hidemyass.com". There are a lot of web proxies, couldn't locate everyone and disable it :). How do you solve it ? Thanks and best regards J.K

Re: [squid-users] squid 3.1.x with IIS SharePoint as back-end.

2012-01-12 Thread 巍俊葛
Thanks Amos, Currently, we use a VM ( vmware) to host a RHEL with squid running. I change the back-end site with only an IIS test web site which is hosted on the same IIS system. And it's just a png image file. And it seem working. On RHEL side, there is no limitations on outgoing on iptables rul

Re: [squid-users] squid 3.1.x with IIS SharePoint as back-end.

2012-01-11 Thread Amos Jeffries
On 12.01.2012 02:28, kimi ge wrote: Hi Amos, Really appreciate your help. I did changes with your sugguestion. Some debug logs are here: 2012/01/11 13:21:58.167| The request GET http://ids-ams.elabs.eds.com/ is ALLOWED, because it matched 'origin_servers' 2012/01/11 13:21:58.168| client_si

Re: [squid-users] squid 3.1.x with IIS SharePoint as back-end.

2012-01-11 Thread 巍俊葛
Hi Amos, Really appreciate your help. I did changes with your sugguestion. Some debug logs are here: 2012/01/11 13:21:58.167| The request GET http://ids-ams.elabs.eds.com/ is ALLOWED, because it matched 'origin_servers' 2012/01/11 13:21:58.168| client_side_request.cc(547) clientAccessCheck2: N

Re: [squid-users] squid 3.1.x with IIS SharePoint as back-end.

2012-01-11 Thread Amos Jeffries
On 11/01/2012 8:46 p.m., kimi ge(巍俊葛) wrote: Thanks Amos. I did the lynx test on back-end web site on squid system like this: sudo lynx http://wtestsm1.asiapacific.hpqcorp.net First, it show the message: Alert!: Invalid header 'WWW-Authenticate: NTLM' Then it show the following message. Show t

[squid-users] R: [squid-users] squid 3.1.x with IIS SharePoint as back-end.

2012-01-11 Thread Guido Serassio
8.47 > A: Amos Jeffries > Cc: squid-users@squid-cache.org > Oggetto: Re: [squid-users] squid 3.1.x with IIS SharePoint as back-end. > > Thanks Amos. > > I did the lynx test on back-end web site on squid system like this: > sudo lynx http://wtestsm1.asiapacific.hpqcorp.net &g

Re: [squid-users] squid 3.1.x with IIS SharePoint as back-end.

2012-01-10 Thread 巍俊葛
Thanks Amos. I did the lynx test on back-end web site on squid system like this: sudo lynx http://wtestsm1.asiapacific.hpqcorp.net First, it show the message: Alert!: Invalid header 'WWW-Authenticate: NTLM' Then it show the following message. Show the 401 message body? (y/n) For the domain auth

Re: [squid-users] squid 3.1.x with IIS SharePoint as back-end.

2012-01-10 Thread Amos Jeffries
On 11/01/2012 6:28 p.m., kimi ge(巍俊葛) wrote: Hi, I have an issue to make squid 3.1.x to work with IIS SharePoint as the back-end. The details are listed below. 1. squid 3.1.x is running as a reverse-proxy. 2. The back-end is IIS SharePoint Site with domain authentication required. That me

[squid-users] squid 3.1.x with IIS SharePoint as back-end.

2012-01-10 Thread 巍俊葛
Hi, I have an issue to make squid 3.1.x to work with IIS SharePoint as the back-end. The details are listed below. 1. squid 3.1.x is running as a reverse-proxy. 2. The back-end is IIS SharePoint Site with domain authentication required. That means only the valid domain user could access this S

Re: [squid-users] Squid 3.1.x and authentification against AD Windows 2008R2

2011-12-19 Thread Amos Jeffries
On 19/12/2011 9:00 p.m., Josef Karliak wrote: Hi there, We may plan to active authorization for users to the internet against Windows AD, running on Windows server 2008R2. I'm running squid on opensuse 11.4 64-bit. I've found some how-to, many of them solve it by ntlm-auth (not in opensuse

[squid-users] Squid 3.1.x and authentification against AD Windows 2008R2

2011-12-19 Thread Josef Karliak
Hi there, We may plan to active authorization for users to the internet against Windows AD, running on Windows server 2008R2. I'm running squid on opensuse 11.4 64-bit. I've found some how-to, many of them solve it by ntlm-auth (not in opensuse, but there is a similar named "ntlm_smb_l

Re: [squid-users] Squid 3.1.x and right configuration parameters for tmpfs 8GB

2011-12-02 Thread Amos Jeffries
On 2/12/2011 11:10 p.m., Josef Karliak wrote: Hi, I use 64-bit machine, HP DL380 G7. I thought that it should be better to use tmpfs (part of the memory). After reboot it is clean and empty, squid creates directories again automaticaly. So you recommend use a few of disk capacity and set

Re: [squid-users] Squid 3.1.x and right configuration parameters for tmpfs 8GB

2011-12-02 Thread Josef Karliak
Hi, I use 64-bit machine, HP DL380 G7. I thought that it should be better to use tmpfs (part of the memory). After reboot it is clean and empty, squid creates directories again automaticaly. So you recommend use a few of disk capacity and set caching to memory only ? Thanks J.K. Ci

Re: [squid-users] Squid 3.1.x and right configuration parameters for tmpfs 8GB

2011-12-01 Thread Amos Jeffries
On 2/12/2011 5:13 a.m., Matus UHLAR - fantomas wrote: On 01.12.11 15:05, Josef Karliak wrote: I wanna use tmpfs for squid cache, is 8GB enough or too big ? We've about 3000 computers behind squid, for OS is 16GB sufficient, that's why I used 8GB for squid tmpfs. what is the point of using tm

Re: [squid-users] Squid 3.1.x and right configuration parameters for tmpfs 8GB

2011-12-01 Thread Matus UHLAR - fantomas
On 01.12.11 15:05, Josef Karliak wrote: I wanna use tmpfs for squid cache, is 8GB enough or too big ? We've about 3000 computers behind squid, for OS is 16GB sufficient, that's why I used 8GB for squid tmpfs. what is the point of using tmpfs as squid cache? I think using only memory cache wo

[squid-users] Squid 3.1.x and right configuration parameters for tmpfs 8GB

2011-12-01 Thread Josef Karliak
Hi there, I wanna use tmpfs for squid cache, is 8GB enough or too big ? We've about 3000 computers behind squid, for OS is 16GB sufficient, that's why I used 8GB for squid tmpfs. Thanks for answers. J.K. -- Ma domena pouziva zabezpeceni a kontrolu SPF (www.openspf.org) a DomainKeys

Re: [squid-users] Squid 3.1 NTLM Passthrough (SSO) to IIS with Firefox

2011-11-08 Thread E.S. Rosenberg
directory /usr/share/squid/errors/de > always_direct allow local-intranet > icap_enable off > icap_preview_enable on > icap_preview_size 128 > icap_send_client_ip on > dns_nameservers 127.0.0.1 212.202.215.1 212.202.215.2 > ignore_unknown_nameservers off > forwarded_for off

Re: [squid-users] Squid 3.1 NTLM Passthrough (SSO) to IIS with Firefox

2011-11-08 Thread Bartschies, Thomas
nameservers off forwarded_for off pipeline_prefetch off ignore_expect_100 on Regards, Thomas -Ursprüngliche Nachricht- Von: Amos Jeffries [mailto:squ...@treenet.co.nz] Gesendet: Dienstag, 8. November 2011 13:45 An: squid-users@squid-cache.org Betreff: Re: [squid-users] Squid 3.1 NTLM Passthrou

Re: [squid-users] Squid 3.1 NTLM Passthrough (SSO) to IIS with Firefox

2011-11-08 Thread Amos Jeffries
On 9/11/2011 1:11 a.m., Bartschies, Thomas wrote: Hi, our setup is: Firefox 7.0.1, Squid 3.1.16 and Sharepoint Server on IIS. In Firefox we've set already: network.automatic-ntlm-auth.trusted-uris to the server address network.automatic-ntlm-auth.allow-proxies = true (default) in squid.conf, we

[squid-users] Squid 3.1 NTLM Passthrough (SSO) to IIS with Firefox

2011-11-08 Thread Bartschies, Thomas
Hi, our setup is: Firefox 7.0.1, Squid 3.1.16 and Sharepoint Server on IIS. In Firefox we've set already: network.automatic-ntlm-auth.trusted-uris to the server address network.automatic-ntlm-auth.allow-proxies = true (default) in squid.conf, we've tried some combinations of the following settin

Re: [squid-users] squid 3.1 (w/ TPROXY/WCCP) and increased 502 and 206 codes

2011-07-22 Thread Amos Jeffries
holas [mailto:nicholas.rit...@americantv.com] Sent: Friday, July 22, 2011 11:16 AM To: squid-users@squid-cache.org Subject: [squid-users] squid 3.1 (w/ TPROXY/WCCP) and increased 502 and 206 codes I am doing extended testing of a CentOS v6 TPROXY/SQUID3/WCCP setup and I noticing higher than usual TCP

RE: [squid-users] squid 3.1 (w/ TPROXY/WCCP) and increased 502 and 206 codes

2011-07-22 Thread Ritter, Nicholas
Sent: Friday, July 22, 2011 11:16 AM To: squid-users@squid-cache.org Subject: [squid-users] squid 3.1 (w/ TPROXY/WCCP) and increased 502 and 206 codes I am doing extended testing of a CentOS v6 TPROXY/SQUID3/WCCP setup and I noticing higher than usual TCP_MISS/502 codes. I am also seeing some 206

[squid-users] squid 3.1 (w/ TPROXY/WCCP) and increased 502 and 206 codes

2011-07-22 Thread Ritter, Nicholas
I am doing extended testing of a CentOS v6 TPROXY/SQUID3/WCCP setup and I noticing higher than usual TCP_MISS/502 codes. I am also seeing some 206 codes, but it is the 502s that are much higher than normal. I think it is transport related inside the TPROXY/SQUID side of things but I am not sure. I

Re: [squid-users] Squid 3.1 failover problem from IPv6 to IPv4?

2011-06-22 Thread Amos Jeffries
On 23/06/11 01:44, Peter Olsson wrote: Hello! We use Squid 3.1.12 on a couple of servers with IPv4 and IPv6. The servers are FreeBSD 8.1. Squid is installed from ports. This works fine, except for this web: www.informator.se www.informator.se has an address, but it doesn't seem to listen t

[squid-users] Squid 3.1 failover problem from IPv6 to IPv4?

2011-06-22 Thread Peter Olsson
Hello! We use Squid 3.1.12 on a couple of servers with IPv4 and IPv6. The servers are FreeBSD 8.1. Squid is installed from ports. This works fine, except for this web: www.informator.se www.informator.se has an address, but it doesn't seem to listen to it. Eventually the browser times out wi

Re: [squid-users] squid 3.1.

2011-06-11 Thread Amos Jeffries
On 12/06/11 06:28, Shenavandeh wrote: Hi Amos, Thanks for your time and nice comments on the config file It is impossible for me to use "debug_options ALL,6" under such load. log file grows wildly and easily eats the whole hard disk ! Any other solutions to capture the log? There are two tr

Re: [squid-users] squid 3.1.

2011-06-11 Thread Shenavandeh
Hi Amos, Thanks for your time and nice comments on the config file It is impossible for me to use "debug_options ALL,6" under such load. log file grows wildly and easily eats the whole hard disk ! Any other solutions to capture the log? Yours Faithfully, --- Amir H Shenavandeh On 11 June 20

Re: [squid-users] squid 3.1.

2011-06-10 Thread Amos Jeffries
On 11/06/11 05:39, Shenavandeh wrote: Hi, I have a squid installation that crashes twice a day under the load of 7 Mbps bandwidth with the following message in squid.out with no specific traces in cache.log Startup: Fri Jun 10 15:46:20 dying from an unhandled exception: !theConsumer terminate c

[squid-users] squid 3.1.

2011-06-10 Thread Shenavandeh
Hi, I have a squid installation that crashes twice a day under the load of 7 Mbps bandwidth with the following message in squid.out with no specific traces in cache.log Startup: Fri Jun 10 15:46:20 dying from an unhandled exception: !theConsumer terminate called after throwing an instance of 'Tex

Re: [squid-users] squid 3.1 android ebuddy

2011-04-25 Thread Amos Jeffries
On 26/04/11 12:19, Gerson Barreiros wrote: Hi, I'm using Squid 3.1.12.1 (Amos ppa-maverick) and i got some weird problem. Users with Android2 can't get 'ebuddy' to work, but for iPhone users, it works. (?) I've made an exception on firewall (for 38.99.73.0/24) to ebuddy connections skip squid,

[squid-users] squid 3.1 android ebuddy

2011-04-25 Thread Gerson Barreiros
Hi, I'm using Squid 3.1.12.1 (Amos ppa-maverick) and i got some weird problem. Users with Android2 can't get 'ebuddy' to work, but for iPhone users, it works. (?) I've made an exception on firewall (for 38.99.73.0/24) to ebuddy connections skip squid, now it works for both. Anyone know anything

Re: [squid-users] Squid 3.1.x do not open certain sites

2011-03-24 Thread Francesco
> * do they get an HTTP error message from squid loading the base page > HTML object? > * does the flash object get pulled in okay? >- we can look at these and see what is broken if either is a bad > transfer. Hi Amos, and thank you again! The answer is generated by squid and it is: Zero

Re: [squid-users] Squid 3.1.x do not open certain sites

2011-03-24 Thread Amos Jeffries
On 24/03/11 23:44, Francesco wrote: Site looks okay from here. http://redbot.org/?descend=True&uri=http://itinerari.mondodelgusto.it/ Of course, there is no page content. Just a flash media object and a stat counter. So there could be something broken in the site code where the HTTP

Re: [squid-users] Squid 3.1.x do not open certain sites

2011-03-24 Thread Francesco
> Site looks okay from here. > http://redbot.org/?descend=True&uri=http://itinerari.mondodelgusto.it/ > > Of course, there is no page content. Just a flash media object and a > stat counter. > So there could be something broken in the site code where the HTTP > tools can't identify. Hi Amos

Re: [squid-users] Squid 3.1.x do not open certain sites

2011-03-21 Thread Amos Jeffries
On Mon, 21 Mar 2011 13:42:47 +0100 (CET), Francesco wrote: Hello, some website, perhaps not compliant with W3C standard?, are not accessible by users with Squid proxy set into browser's connection. For example, one of this is: http://itinerari.mondodelgusto.it It waits for some seconds, and t

[squid-users] Squid 3.1.x do not open certain sites

2011-03-21 Thread Francesco
Hello, some website, perhaps not compliant with W3C standard?, are not accessible by users with Squid proxy set into browser's connection. For example, one of this is: http://itinerari.mondodelgusto.it It waits for some seconds, and then the connections hangs... Is there a workaroung, bugfix? T

[squid-users] Squid 3.1 and winbind 3.4.7 permissions issue on winbindd_privileged

2011-03-18 Thread Go Wow
Hi, I'm trying squid 3.1.10 with ntlm and kerberos. The kinit, klist process works good even net join is working. The problem im facing is when trying to start winbind service and using wbinfo. Always the service is not starting giving the error message lib/util_sock.c:1771(create_pipe_sock) i

Re: [squid-users] Squid 3.1 SSL bump and tarnsparent mode

2011-03-08 Thread Amos Jeffries
On Tue, 8 Mar 2011 17:10:43 +0100 (CET), Francesco wrote: Hello, by activating SSL bump in Squid 3.1, is it possible to transparent proxy https request? No. It is not. I have read some documentation and posts, but i have not clear if it possible, with browser warning, or not... Any worka

[squid-users] Squid 3.1 SSL bump and tarnsparent mode

2011-03-08 Thread Francesco
Hello, by activating SSL bump in Squid 3.1, is it possible to transparent proxy https request? I have read some documentation and posts, but i have not clear if it possible, with browser warning, or not... Any workaround/ideas? Thank you! Francesco

Re: [squid-users] Squid 3.1 reverse proxy to OWA on IIS7

2011-03-01 Thread Gordon McKee
worked a treat with version 2.6, but 2.7, 3.0 and 3.1 all make the reverse proxy really slow. Many thanks Gordon -Original Message- From: Amos Jeffries Sent: Monday, February 28, 2011 9:38 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Squid 3.1 reverse proxy to OWA on IIS7

Re: [squid-users] Squid 3.1 reverse proxy to OWA on IIS7

2011-02-28 Thread Amos Jeffries
On Mon, 28 Feb 2011 16:18:27 -, Gordon McKee wrote: Hi The "GET / HTTP/1.1" returns: GET / HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */* Accept-Language: en-us Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Host: www

Re: [squid-users] Squid 3.1 reverse proxy to OWA on IIS7

2011-02-28 Thread Gordon McKee
every. Not sure what is going wrong. Many thanks Gordon -Original Message- From: Amos Jeffries Sent: Monday, February 28, 2011 12:19 AM To: squid-users@squid-cache.org Subject: Re: [squid-users] Squid 3.1 reverse proxy to OWA on IIS7 On Sun, 27 Feb 2011 17:19:33 -, Gordon McKee wro

Re: [squid-users] Squid 3.1 reverse proxy to OWA on IIS7

2011-02-27 Thread Amos Jeffries
On Sun, 27 Feb 2011 17:19:33 -, Gordon McKee wrote: Hi I had FreeBSD 6.3 and squid 2.6 running fine reverse proxying my OWA server. I have now upgraded to FreeBSD 8 and squid 3.1 as the old software was getting rather old. I have copied the config file off the old server on the the new serv

[squid-users] Squid 3.1 reverse proxy to OWA on IIS7

2011-02-27 Thread Gordon McKee
Hi I had FreeBSD 6.3 and squid 2.6 running fine reverse proxying my OWA server. I have now upgraded to FreeBSD 8 and squid 3.1 as the old software was getting rather old. I have copied the config file off the old server on the the new server. All is working except OWA. The images come down

RE: [squid-users] Squid 3.1 youtube caching

2011-02-02 Thread Amos Jeffries
On Thu, 3 Feb 2011 10:03:03 +0530, Saurabh Agarwal wrote: > Hi Luis > > I have recently successfully cached youtube videos using Squid-2.7.Stable7 > and posted the solution on squid mailing list as well. I tested it > yesterday and youtube videos were still being cached. AFAICT your 23rd Nov 201

RE: [squid-users] Squid 3.1 youtube caching

2011-02-02 Thread Saurabh Agarwal
Re: [squid-users] Squid 3.1 youtube caching Le mercredi 2 février 2011 12:29:58, Hasanen AL-Bana a écrit : > No need for ICAP , storeurl script should be enough. > The problem is that youtube internal links are changing from time to > time, so we need to update our scripts from time to time.

Re: [squid-users] Squid 3.1 youtube caching

2011-02-02 Thread Luis Daniel Lucio Quiroz
Le mercredi 2 février 2011 12:29:58, Hasanen AL-Bana a écrit : > No need for ICAP , storeurl script should be enough. > The problem is that youtube internal links are changing from time to > time, so we need to update our scripts from time to time. > > On Wed, Feb 2, 2011 at 8:23 PM, Clemente Agui

Re: [squid-users] Squid 3.1 youtube caching

2011-02-02 Thread Hasanen AL-Bana
No need for ICAP , storeurl script should be enough. The problem is that youtube internal links are changing from time to time, so we need to update our scripts from time to time. On Wed, Feb 2, 2011 at 8:23 PM, Clemente Aguiar wrote: > > Qua, 2011-02-02 às 10:01 -0600, Luis Daniel Lucio Quiroz e

Re: [squid-users] Squid 3.1 youtube caching

2011-02-02 Thread Clemente Aguiar
Qua, 2011-02-02 às 10:01 -0600, Luis Daniel Lucio Quiroz escreveu: > Le mercredi 2 février 2011 09:49:23, Clemente Aguiar a écrit : > > I am running squid 3.1.9, and I would like to know if this version is > > able to cache youtube content? > > > > I did check the wiki > > (http://wiki.squid-cache

Re: [squid-users] Squid 3.1 youtube caching

2011-02-02 Thread Luis Daniel Lucio Quiroz
Le mercredi 2 février 2011 09:49:23, Clemente Aguiar a écrit : > I am running squid 3.1.9, and I would like to know if this version is > able to cache youtube content? > > I did check the wiki > (http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube) > and I must say that it is not cle

[squid-users] Squid 3.1 youtube caching

2011-02-02 Thread Clemente Aguiar
I am running squid 3.1.9, and I would like to know if this version is able to cache youtube content? I did check the wiki (http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube) and I must say that it is not clear what bits applies to version 3.1. Can somebody give me some pointers to

Re: [squid-users] squid-3.1 couldn't be installed.

2010-12-27 Thread Orestes Leal R.
I think that you must just install the package Perl::DBI and you're done. LeaL Dear all, I have a problem of installing of squid-3.1.8-1 when I installed 'squid' on Redhat 5.2, I had the erre message in cache.log, "Failed dependencies: per (DBI) is needed by squid-3.1.8-1.el5.x86_64. Please

[squid-users] squid-3.1 couldn't be installed.

2010-12-27 Thread Seok Jiwoo
Dear all, I have a problem of installing of squid-3.1.8-1 when I installed 'squid' on Redhat 5.2, I had the erre message in cache.log, "Failed dependencies: per (DBI) is needed by squid-3.1.8-1.el5.x86_64. Please, let me know its reason. best regards. J.

Re: [squid-users] squid-3.1 client POST buffering

2010-12-02 Thread Graham Keeling
On Wed, Dec 01, 2010 at 11:40:52AM +, Graham Keeling wrote: > Hello, > > I am convinced that this is a serious bug, so I have entered a proper bug > report. > > It is bug 3113: > > http://bugs.squid-cache.org/show_bug.cgi?id=3113 I have created a simple patch that seems to fix the problem f

Re: [squid-users] squid-3.1 client POST buffering

2010-12-01 Thread Graham Keeling
Hello, I am convinced that this is a serious bug, so I have entered a proper bug report. It is bug 3113: http://bugs.squid-cache.org/show_bug.cgi?id=3113

Re: [squid-users] squid-3.1 client POST buffering

2010-11-30 Thread Graham Keeling
On Tue, Nov 30, 2010 at 11:31:45AM +, Graham Keeling wrote: > On Tue, Nov 30, 2010 at 09:46:47PM +1300, Amos Jeffries wrote: > > On 30/11/10 21:23, Oguz Yilmaz wrote: > >> On Tue, Nov 30, 2010 at 10:05 AM, Amos Jeffries > >> wrote: > >>> On 30/11/10 04:04, Oguz Yilmaz wrote: > > Gra

Re: [squid-users] squid-3.1 client POST buffering

2010-11-30 Thread Graham Keeling
On Tue, Nov 30, 2010 at 09:46:47PM +1300, Amos Jeffries wrote: > On 30/11/10 21:23, Oguz Yilmaz wrote: >> On Tue, Nov 30, 2010 at 10:05 AM, Amos Jeffries wrote: >>> On 30/11/10 04:04, Oguz Yilmaz wrote: Graham, This is the best explanation I have seen about ongoing upload probl

Re: [squid-users] squid-3.1 client POST buffering

2010-11-30 Thread Oguz Yilmaz
-- Oguz YILMAZ On Tue, Nov 30, 2010 at 10:46 AM, Amos Jeffries wrote: > On 30/11/10 21:23, Oguz Yilmaz wrote: >> >> On Tue, Nov 30, 2010 at 10:05 AM, Amos Jeffries >>  wrote: >>> >>> On 30/11/10 04:04, Oguz Yilmaz wrote: Graham, This is the best explanation I have seen about

Re: [squid-users] squid-3.1 client POST buffering

2010-11-30 Thread Amos Jeffries
On 30/11/10 21:23, Oguz Yilmaz wrote: On Tue, Nov 30, 2010 at 10:05 AM, Amos Jeffries wrote: On 30/11/10 04:04, Oguz Yilmaz wrote: Graham, This is the best explanation I have seen about ongoing upload problem in proxy chains where squid is one part of the chain. On our systems, we use Squid

Re: [squid-users] squid-3.1 client POST buffering

2010-11-30 Thread Oguz Yilmaz
On Tue, Nov 30, 2010 at 10:05 AM, Amos Jeffries wrote: > On 30/11/10 04:04, Oguz Yilmaz wrote: >> >> Graham, >> >> This is the best explanation I have seen about ongoing upload problem >> in proxy chains where squid is one part of the chain. >> >> On our systems, we use Squid 3.0.STABLE25. Before

Re: [squid-users] squid-3.1 client POST buffering

2010-11-30 Thread Amos Jeffries
On 30/11/10 04:04, Oguz Yilmaz wrote: Graham, This is the best explanation I have seen about ongoing upload problem in proxy chains where squid is one part of the chain. On our systems, we use Squid 3.0.STABLE25. Before squid a dansguardian(DG) proxy exist to filter. Results of my tests: 1- DG

Re: [squid-users] squid-3.1 client POST buffering

2010-11-29 Thread Oguz Yilmaz
Graham, This is the best explanation I have seen about ongoing upload problem in proxy chains where squid is one part of the chain. On our systems, we use Squid 3.0.STABLE25. Before squid a dansguardian(DG) proxy exist to filter. Results of my tests: 1- DG+Squid 2.6.STABLE12: No problem of uploa

Re: [squid-users] squid-3.1 client POST buffering

2010-11-26 Thread Amos Jeffries
On 27/11/10 05:10, Graham Keeling wrote: On Thu, Nov 25, 2010 at 04:36:49PM +, Graham Keeling wrote: Hello, I have upgraded to squid-3.1 recently, and found a change of behaviour. I have been using dansguardian in front of squid. It appears to be because squid now buffers uploaded POST dat

Re: [squid-users] squid-3.1 client POST buffering

2010-11-26 Thread Graham Keeling
On Thu, Nov 25, 2010 at 04:36:49PM +, Graham Keeling wrote: > Hello, > > I have upgraded to squid-3.1 recently, and found a change of behaviour. > I have been using dansguardian in front of squid. > > It appears to be because squid now buffers uploaded POST data slightly > differently. > In v

[squid-users] squid-3.1 client POST buffering

2010-11-25 Thread Graham Keeling
Hello, I have upgraded to squid-3.1 recently, and found a change of behaviour. I have been using dansguardian in front of squid. It appears to be because squid now buffers uploaded POST data slightly differently. In versions < 3.1, it would take some data, send it through to the website, and then

Re: [squid-users] Squid 3.1 with MRTG, Not able to get Graphs- squid upgraded to 3.1.8 ( Resolved at last)

2010-10-11 Thread Babu Chaliyath
Hi List, At last I could get the MRTG running with squid 3.1.8, though it took much time. Will be writing a howto soon regarding how to set up mrtg on FreeBSD. It was the SNMP_util.pm gave all the trouble as the port maintainers did some changes of merging. Those who are breaking head with mrtg kin

Re: [squid-users] Squid 3.1 with MRTG, Not able to get Graphs- squid upgraded to 3.1.8

2010-10-04 Thread Babu Chaliyath
> It's well worth upgrading to 3.1.8. Many of the 3.1 betas had broken SNMP. > > Also check that the squid.mib being loaded came from the 3.1 install. > > We now have a full map of what the OID are and what versions they work > for. You may find this useful: > http://wiki.squid-cache.org/Features/S

Re: [squid-users] Squid 3.1 with MRTG, Not able to get Graphs

2010-09-09 Thread Amos Jeffries
On 09/09/10 21:38, Babu Chaliyath wrote: 2010/9/9 Henrik Nordström: tor 2010-09-09 klockan 11:36 +0530 skrev Babu Chaliyath: Hi List, I am trying to get mrtg graphing of my squid box running freebsd 7.2 with squid 3.1.0.13, I was able to get the mrtg while running 2.6 version of squid, but once

Re: [squid-users] Squid 3.1 with MRTG, Not able to get Graphs

2010-09-09 Thread Babu Chaliyath
2010/9/9 Henrik Nordström : > tor 2010-09-09 klockan 11:36 +0530 skrev Babu Chaliyath: >> Hi List, >> I am trying to get mrtg graphing of my squid box running freebsd 7.2 >> with squid 3.1.0.13, I was able to get the mrtg while running 2.6 >> version of squid, but once  moved to 3.1 version, I am n

Re: [squid-users] Squid 3.1 with MRTG, Not able to get Graphs

2010-09-09 Thread Henrik Nordström
tor 2010-09-09 klockan 11:36 +0530 skrev Babu Chaliyath: > Hi List, > I am trying to get mrtg graphing of my squid box running freebsd 7.2 > with squid 3.1.0.13, I was able to get the mrtg while running 2.6 > version of squid, but once moved to 3.1 version, I am not able to get > the mrtg graph at

[squid-users] Squid 3.1 with MRTG, Not able to get Graphs

2010-09-08 Thread Babu Chaliyath
Hi List, I am trying to get mrtg graphing of my squid box running freebsd 7.2 with squid 3.1.0.13, I was able to get the mrtg while running 2.6 version of squid, but once moved to 3.1 version, I am not able to get the mrtg graph at all, I would greatly appreciate if any suggestions/clues what migh

Re: [squid-users] Squid 3.1 supporting NTLMv1 and v2 using negotiate

2010-06-21 Thread Henrik Nordström
mån 2010-06-21 klockan 19:11 +1000 skrev Rob Price: > I have authentication via negotiate_kerb_auth working a charm, with a > secondary helper for basic via ntlm_auth > > This works a charm. However the negotiate_kerb_auth helper only supports > NTLMv2 and this causes some applications, mostly We

[squid-users] Squid 3.1 supporting NTLMv1 and v2 using negotiate

2010-06-21 Thread Rob Price
I have authentication via negotiate_kerb_auth working a charm, with a secondary helper for basic via ntlm_auth This works a charm. However the negotiate_kerb_auth helper only supports NTLMv2 and this causes some applications, mostly Web Conferencing applications, Live Meeting, WebEx etc, to fail

Re: [squid-users] Squid 3.1 and strange "Bad header encountered" error

2010-06-08 Thread David B.
Le 08/06/2010 11:12, Amos Jeffries a écrit : > David B. wrote: >> Hi Squid users, >> >> I think I need some help to understand a new error with squid. :( >> I've got several squid boxes, all in 3.0 branch (reverse proxy cache). >> All is ok. >> >> Now, I've tried to upgrade one (and only one boxe)

Re: [squid-users] Squid 3.1 and strange "Bad header encountered" error

2010-06-08 Thread Amos Jeffries
David B. wrote: Hi Squid users, I think I need some help to understand a new error with squid. :( I've got several squid boxes, all in 3.0 branch (reverse proxy cache). All is ok. Now, I've tried to upgrade one (and only one boxe) to 3.1 branch (Starting Squid Cache version 3.1.3 for x86_64-pc-

  1   2   >