Denied pages for HTTPS requests

Hello all

With a deny acl https://toto.com Does not return an access denied page but leads to an error message in the
browser, just "Cannot display the website".
So, I'm trying something like 

acl toto dstdomain .toto.com
http_access deny toto
deny_info 307:http://mypage.com toto

Without more success, any idea ?

Regards Fred

question about negotiate wrapper

Hello,

Is it possible to specify an order on which negotiate_wrapper will
attempt to authenticate (ntlm first, then kerberos;or kerberos first,
then ntlm) or it is based on the client's behaviour?

thanks,

Carlos

vary obkect loop when activating SMP

Hello all,

I am trying out squid with SMP. I am using squid version 3.3.4.

Squid works fine without "workers" directive i.e. without SMP.

For SMP, all I do is add is these two lines on top of squid.conf, rest of squid.conf is exactly same.

workers 2
cpu_affinity_map process_numbers=1,2 cores=1,2

After this I see these lines in cache.log every 12-15 seconds. (sometimes kid1 sometimes kid2)

2013/05/13 20:36:21 kid2| varyEvaluateMatch: Oops. Not a Vary object on  second attempt,
'http://www.espncricinfo.com/netstorage/598060.html'  'accept-encoding="gzip,%20deflate"'
2013/05/13 20:36:21 kid2| clientProcessHit: Vary object loop!

Squid works fine though. (from just 5-10minutes testing)

Any idea what is the issue? Can it make squid unstable? Or its just a warning of some sort which can be ignored safely?

Thanks and regards,

Amm.

Looking for squid spec file

Since I had a little trouble and my old spec file to create RPM for 
CentOS I am looking for one.
I remember a nice guy from here that had a SPEC file.

If you do have one please post it or send it to my personal email.

Thanks,
Eliezer

Re: Fwd: config squid to set specific acl delay pools for username and then set it to the ip addr of username

What do you mean by 'pushing the proxy settings over' ?
How can I accomplish what you are saying ?

On Mon, May 13, 2013 at 1:39 PM, Daniyal Khorashadi Zadeh
<daniyal.khorashadizadeh <at> gmail.com> wrote:
> What do you mean by 'pushing the proxy settings over' ?
> How can I accomplish what you saying ?
> And Thank you very much for your concern guys :)
>
>
> On Mon, May 13, 2013 at 1:13 PM, Amos Jeffries <squid3 <at> treenet.co.nz> wrote:
>>
>> On 13/05/2013 8:26 p.m., Alex Domoradov wrote:
>>>
>>> On Mon, May 13, 2013 at 11:18 AM, Amos Jeffries <squid3 <at> treenet.co.nz>
>>> wrote:
>>>>
>>>> On 13/05/2013 5:54 p.m., Alex Domoradov wrote:
>>>>>
>>>>> You can use acl apr, for example
>>>>>
>>>>> acl BIG_BOSS arp 01:02:03:04:05:06
>>>>>
>>>>> On Mon, May 13, 2013 at 8:11 AM, Daniyal Khorashadi Zadeh wrote:
>>>>>>
>>>>>> Assume your executive of corporation, sit on his clerk desk PC, and
>>>>>> login to his username on the network (authenticate with Active
>>>>>> Directory), of course he wants his full access to internet, but he
>>>>>> can't because his IP address is different from what we set in squid
>>>>>> for his PC.

Re: what is best method to connect two squid servers on the same router?

On 13/05/2013 11:34, Amos Jeffries wrote:
> On 13/05/2013 2:26 a.m., Fix Nichols wrote:
>> Heh if you are running Debian and lazy, you could 'apt-get install 
>> squid -y ; apt-get install squid3 -y' Youd have squid 2.7 and squid3 
>> both installed.
> And wont work for much longer. We are in the process of replacing
> "squid" with a transitional package to squid3.
>> But I know, thats just being lazy, you can install two squids just 
>> change the name and location of your binaries on one of them, and its 
>> cache directories, as well. Assuming squid is resident on a pc and 
>> not a router that is. It should be pretty straight forward.
> Or do it properly and install Squid once. Just start it twice with two
> squid.conf files containing different settings. Ta-Dah!
>
>
> If, I'm understanding the original poster right though it sounds like
> traffic is leaving the Squid and being diverted back into them in a
> forwarding loop. Or that the traffic flows are getting mixed up somehow
> in other ways.
>
> Amos

While you are busy with the deb packages, how about not putting in a 
squid.conf and rather calling it squid.conf.default, or do "include" 
configs like Apache ? Pretty please ? :)

Cheers,

Pieter

Question about forward.cc and possible patch

Hi there!

Last week we had a problem that a cache peer's DNS resolved to 13 v6 and
13 v4 addresses but the system lacked IPv6 connectivity at all. While
debugging the problem (the solution was just to increase
forward_max_tries) I stumbled over a line in forward.cc where n_tries is
always checked against the constant value of 10 (which is the default
for forward_max_tries). At another line of code n_tries is checked
against the value for forward_max_tries from the configuration file.
The attached patch fixes the first line so that the check is also done
against the configured forward_max_tries value.

Greetings,
Matthias

--- src/forward.cc.orig	Tue May  7 08:08:31 2013
+++ src/forward.cc	Tue May  7 08:24:41 2013
 <at>  <at>  -514,7 +514,7  <at>  <at>  FwdState::checkRetry()
     if (!entry->isEmpty())
         return false;

-    if (n_tries > 10)
+    if (n_tries > Config.forward_max_tries)
         return false;

     if (origin_tries > 2)

Fwd: config squid to set specific acl delay pools for username and then set it to the ip addr of username

Assume your executive of corporation, sit on his clerk desk PC, and
login to his username on the network (authenticate with Active
Directory), of course he wants his full access to internet, but he
can't because his IP address is different from what we set in squid
for his PC.

we authenticate users in Active Directory, and set their gateways to
squid server so we have a Transparent squid. we don't want our users
to be authenticate for second time in Browser...

Somehow I want to set acl to be 'username base' and then set the delay
pools and classes we define to the IP of his computer, Is there a
solution to this problem?

Cache compression

Can Squid be made to compress its on-disk cache storage at all?

Assuming that's not readily available, how hard is it to use a
custom/alternative storage backend with Squid?  I searched for a bit
and didn't see anything that suggested Squid has any helpful
infrastructure for alternative pluggable backend stores, but thought
it wouldn't hurt to ask here in case I missed anything.  Thanks!

why some ssl sites dont open on squid

Hi,
why some sites dont open when redirected through squid ?? Mostly
secure sites. I'm using snat redirection of iptables.

thanks
--

ssd hardsik to the operation system , does it make difference ?

hi ,
i want to ask about ssd hardsik to the squid opersting system

does it make difference with squid performance ?? "" im asking about the os
hardsik not cache hardsiks "

or  ssd make performance just with cache drivers ?
--=========================================
is  it better to change all drivers to ssd ??
or

os hardsik to ssd ??
or  only 

cache disk to ssd ?
=========================================
also ,
should i buy big capacity ssd or low  capacity ssd ??

regards

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/ssd-hardsik-to-the-operation-system-does-it-make-difference-tp4659930.html
Sent from the Squid - Users mailing list archive at Nabble.com.