Re: [squid-users] detect 'youtube.com' url

2014-10-01 Thread Squid
Hi Team, We have go with following commands in the squid configuration for blocking particular sites(youtube.com) and also blocking keywords. Blocking both the website and keyword. # ACL block sites acl blocksites dstdomain .youtube.com # ACL block keywords acl blockkeywords url_regex -i .y

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-01 Thread Steve Hill
On 01.10.14 13:19, Michele Bergonzoni wrote: I have an external ACL defined as: external_acl_type preauth cache=0 children-max=1 concurrency=100 ttl=0 negative_ttl=0 %SRC %>{User-Agent} %URI %METHOD /usr/sbin/squid-preauth It is well known that external ACLs with ttl=0 and cache=0 leak RAM: I h

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-01 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2/10/2014 1:19 a.m., Michele Bergonzoni wrote: >> I have an external ACL defined as: external_acl_type preauth >> cache=0 children-max=1 concurrency=100 ttl=0 negative_ttl=0 %SRC >> %>{User-Agent} %URI %METHOD /usr/sbin/squid-preauth > > It is well

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-01 Thread Michele Bergonzoni
I have an external ACL defined as: external_acl_type preauth cache=0 children-max=1 concurrency=100 ttl=0 negative_ttl=0 %SRC %>{User-Agent} %URI %METHOD /usr/sbin/squid-preauth It is well known that external ACLs with ttl=0 and cache=0 leak RAM: I had this problem and discovered the reason onl

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-01 Thread Steve Hill
On 29.09.14 10:04, Steve Hill wrote: I _think_ I have narrowed it down to something ICAP related Looks like I was wrong - it actually seems to be external ACL related. I have an external ACL defined as: external_acl_type preauth cache=0 children-max=1 concurrency=100 ttl=0 negative_ttl=0 %SR

[squid-users] R: Re: R: Re: detect 'youtube.com' url

2014-10-01 Thread Riccardo Castellani
That's all right! Few minutes ago infact I found out my problems: Youtube content is coming from several site, as you told me, so my Squid denies access to these one and other times my redirect program (jesres) redirects these url. It's possible to know exactly what sites are involved into sho

Re: [squid-users] Transparent proxy with squid and Dansguardian

2014-10-01 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Please post a new thread email to the list instead of replying to an existing topic. This has nothing to do with YouTube access control. On 1/10/2014 11:23 p.m., Darren B. wrote: > > HI > > I am trying to set up a router that allows a group of devi

Re: [squid-users] R: Re: detect 'youtube.com' url

2014-10-01 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/10/2014 10:34 p.m., Riccardo Castellani wrote: > By this ACL I can see only https streaming video but not http, that > is I open page but video is black (no audio, no video), saying > loading How can I debug this problem? My scope is to see video

[squid-users] Transparent proxy with squid and Dansguardian

2014-10-01 Thread Darren B.
HI I am trying to set up a router that allows a group of devices on a network to access the internet via Dansguardian and squid. I am setting it up as a transparent proxy and locking down the ports with IPtables. I am using IPtables to redirect connections on port 80 from the client and r

[squid-users] Transparent proxy with squid and Dansguardian

2014-10-01 Thread Darren B.
HI I am trying to set up a router that allows a group of devices on a network to access the internet via Dansguardian and squid. I am setting it up as a transparent proxy and locking down the ports with IPtables. I am using IPtables to redirect connections on port 80 from the client and r

[squid-users] R: Re: Re: detect 'youtube.com' url

2014-10-01 Thread Riccardo Castellani
I'm visiting http://www.youtucomand I can see the page but video is not able to start while if I'm visiting https://www.youtuIcan see video. My squid.conf 'head' : http_access allow myip http_access allow CONNECT myip I don't know how to find out if it's Squid which is blocking my vid

[squid-users] R: Re: detect 'youtube.com' url

2014-10-01 Thread Riccardo Castellani
By this ACL I can see only https streaming video but not http, that is I open page but video is black (no audio, no video), saying loading How can I debug this problem? My scope is to see video streming for specific users Why my acl will not work ?! >Messaggio originale >Da: esr+sq...@

Re: [squid-users] detect 'youtube.com' url

2014-10-01 Thread Squid
Spam detection software, running on the system "master.squid-cache.org", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content p

Re: [squid-users] detect 'youtube.com' url

2014-10-01 Thread Visolve Squid
Spam detection software, running on the system "master.squid-cache.org", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content p

Re: [squid-users] detect 'youtube.com' url

2014-10-01 Thread E.S. Rosenberg
acl dstdomain .youtube.com will match all visits to youtube, it will not detect youtube in the path but your regex won't either. 2014-10-01 11:10 GMT+03:00 Riccardo Castellani : > I need to detect every client request (http/s) which contains the url > 'youtube. > com' so i thought to use acl url_

[squid-users] detect 'youtube.com' url

2014-10-01 Thread Riccardo Castellani
I need to detect every client request (http/s) which contains the url 'youtube. com' so i thought to use acl url_regex expression. What do you think about it ? acl url_regex -i ^(http|https):\/\/*.youtube\.com*. ___ squid-users mailing list squid-users

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-01 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/10/2014 8:45 p.m., Victor Sudakov wrote: > Amos Jeffries wrote: > > You have 200 MB of RAM locked up in IDENT lookups. > > Probably http://bugs.squid-cache.org/show_bug.cgi?id=3803 I have temporarily disabled IDENT-rel

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-01 Thread Victor Sudakov
Amos Jeffries wrote: > >>> > >>> You have 200 MB of RAM locked up in IDENT lookups. > >>> > >>> Probably http://bugs.squid-cache.org/show_bug.cgi?id=3803 > >> > >> I have temporarily disabled IDENT-related acls. Squid still grows > >> in memory, but more slowly. So IDENT was certainly one of the