[squid-users] 3.5.2 Basic LDAP auth is missing

2015-02-26 Thread Donny Vibianto
is there any change in 3.5.2 regarding basic ldap auth? i cant find ldap helpder in my helper list. Squid Cache: Version 3.5.2 Service Name: squid configure options: '--enable-basic=LDAP' --enable-ltdl-convenience even i try to enable all basic helpder, that ldap helper still missing. in 3.5.1 e

Re: [squid-users] Unable to get TPROXY working with squid

2015-02-26 Thread Amos Jeffries
On 27/02/2015 12:41 p.m., Carvaka Guru wrote: > I am building a simple linux firewall router with eth1 LAN port and eth0 > WAN port. I have squid3 running on it that I have built with netfilter > enabled. The linux version running on the firewall is debian wheezy which > has iptables with TPROXY an

Re: [squid-users] Squid in transparent

2015-02-26 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 27/02/2015 7:44 a.m., Yuri Voinov wrote: > And if you seen this: > > --enable-ipfw-transparent --enable-pf-transparent > > I think this is xBSD. ;) And on FreeBSD also --with-nat-devpf Amos -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22

Re: [squid-users] Authentication Passthrough Failing

2015-02-26 Thread Amos Jeffries
On 27/02/2015 7:38 a.m., Curtis.M wrote: > Hi all, > > I have squid 2.7 setup on a Win2012R2 DC used for caching purposes. The main > use is for caching Apple iOS updates but is also starting to be used for > general web browsing. > > The issue I have is there is a web filtering system being us

[squid-users] Unable to get TPROXY working with squid

2015-02-26 Thread Carvaka Guru
I am building a simple linux firewall router with eth1 LAN port and eth0 WAN port. I have squid3 running on it that I have built with netfilter enabled. The linux version running on the firewall is debian wheezy which has iptables with TPROXY and socket support. By setting up the iptables to send

Re: [squid-users] assertion failed: client_side.cc:1515: "connIsUsable(http->getConn())

2015-02-26 Thread Dan Charlesworth
Alright I got abrtd on board, finally.Here’s a a backtrace from this morning (bt and bt full versions included separately):#0 0x00397e232625 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 #1 0x00397e233e05 in abort () at abort.c:92 #2 0x005656ef in xassert (msg=0

Re: [squid-users] Squid in transparent

2015-02-26 Thread Eliezer Croitoru
On 26/02/2015 20:53, Yuri Voinov wrote: Parity Check?;) You need better RAM with ECC;) I have used ECC for couple month(7-8) but it used too much Watts. Thanks, Eliezer ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squ

[squid-users] Different squid-3.5.2 compile error on OpenBSD 5.6

2015-02-26 Thread Alan Palmer
While waiting with baited breath for --with-libressl support, I installed openssl-1.02 on openbsd-5.6 to get squid to compile, but got this error in the final linking: MemStore.o(.text+0x4fe0): In function `MemStore::copyFromShm(StoreEntry&, int, Ipc::StoreMapAnchor const&)': : undefined refer

Re: [squid-users] Squid in transparent

2015-02-26 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 : Parity Check? ;) You need better RAM with ECC ;) 27.02.15 0:52, Eliezer Croitoru пишет: > On 26/02/2015 20:43, Yuri Voinov wrote: >> Directly, Eliezer:) >> >> His installation doesn't work. Somebody have forgotten about >> NAT;) > > I

Re: [squid-users] Squid in transparent

2015-02-26 Thread Eliezer Croitoru
On 26/02/2015 20:43, Yuri Voinov wrote: Directly, Eliezer:) His installation doesn't work. Somebody have forgotten about NAT;) It happen to me many times and still happen to me here and there when the memory is getting old. Eliezer ___ squid-users

[squid-users] Authentication Passthrough Failing

2015-02-26 Thread Curtis.M
Hi all, I have squid 2.7 setup on a Win2012R2 DC used for caching purposes. The main use is for caching Apple iOS updates but is also starting to be used for general web browsing. The issue I have is there is a web filtering system being used in this environment that relies on AD usernames to f

Re: [squid-users] Squid in transparent

2015-02-26 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 And if you seen this: - --enable-ipfw-transparent - --enable-pf-transparent I think this is xBSD. ;) 27.02.15 0:36, Eliezer Croitoru пишет: > On 26/02/2015 19:12, Monah Baki wrote: >> Hi all, >> >> I have client who has his Policy Based Routing as:

Re: [squid-users] Squid in transparent

2015-02-26 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Directly, Eliezer :) His installation doesn't work. Somebody have forgotten about NAT ;) 27.02.15 0:36, Eliezer Croitoru пишет: > On 26/02/2015 19:12, Monah Baki wrote: >> Hi all, >> >> I have client who has his Policy Based Routing as: >> >> inte

Re: [squid-users] Squid in transparent

2015-02-26 Thread Eliezer Croitoru
On 26/02/2015 19:12, Monah Baki wrote: Hi all, I have client who has his Policy Based Routing as: interface GigabitEthernet0/0/1.1 (route policy on the LAN interface) ip policy route-map CFLOW Hey Monah, How is it all related to squid? What OS are you using for squid? Eliezer _

Re: [squid-users] Interesting problem

2015-02-26 Thread Eliezer Croitoru
On 25/02/2015 06:18, Alex Samad wrote: Hi I am running squid on Centos 6.5 squid-3.1.10-29.el6.x86_64 Hey Mike, Can you share your squid.conf? It's unreal that you will have the feature you might want in 3.1.10. Are you trying to intercept ssl traffic or just use it as a reverse proxy? Elie

Re: [squid-users] Squid in transparent

2015-02-26 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 http://wiki.squid-cache.org/ConfigExamples/Intercept 26.02.15 23:12, Monah Baki пишет: > Hi all, > > I have client who has his Policy Based Routing as: > > interface GigabitEthernet0/0/1.1 (route policy on the LAN > interface) > > ip policy route-m

[squid-users] Squid in transparent

2015-02-26 Thread Monah Baki
Hi all, I have client who has his Policy Based Routing as: interface GigabitEthernet0/0/1.1 (route policy on the LAN interface) ip policy route-map CFLOW ip access-list extended REDIRECT (Redirect of my IP www) deny tcp host 10.0.0.24 any eq www permit tcp host 10.0.0.23 any eq www r

Re: [squid-users] Remote configuration management software for managing Squid proxies?

2015-02-26 Thread Yuri Voinov
Yep, this is very funny. :) https://www.google.com/search?q=Squid+gui+management+tool First result is yours. :) 26.02.15 18:26, Greg пишет: On 26 February 2015 at 11:57, Yuri Voinov wrote: :))) Why is this funny? :/ I'd like to make one step ahead. Even though I'm noob, that doe

Re: [squid-users] Remote configuration management software for managing Squid proxies?

2015-02-26 Thread Greg
On 26 February 2015 at 11:57, Yuri Voinov wrote: > :))) Why is this funny? :/ I'd like to make one step ahead. Even though I'm noob, that doesn't mean I'm happy to manage 10+ Squid boxes manually, and I'd be happy if there was a tool easing that, that plays well with our many differen

Re: [squid-users] Remote configuration management software for managing Squid proxies?

2015-02-26 Thread Yuri Voinov
:))) 26.02.15 17:39, Greg пишет: Hi all, I'm a ~beginner sysadmin starting managing a flock of (10+) existing Squid proxies in different VPS companies. Right now it's a mix of different OSes and Squid versions, some of them are rather old, and all is managed manually over SSH - I'd

[squid-users] Remote configuration management software for managing Squid proxies?

2015-02-26 Thread Greg
Hi all, I'm a ~beginner sysadmin starting managing a flock of (10+) existing Squid proxies in different VPS companies. Right now it's a mix of different OSes and Squid versions, some of them are rather old, and all is managed manually over SSH - I'd very much like to roll out a better set of proxi

Re: [squid-users] Tracking down cache MISSes

2015-02-26 Thread Greg
On 25 February 2015 at 10:48, Yuri Voinov wrote: > > 25.02.15 16:46, Greg пишет: > >> On 25 February 2015 at 03:30, Amos Jeffries wrote: >>> >>> On 2015-02-25 05:31, Greg wrote: >> >> so, there's my proxy problem I couldn't crack, even after spending >> 2+ days tweaking-googling-debug

Re: [squid-users] cache peer load balancing round robin problem

2015-02-26 Thread snakeeyes
Wt do u think Mr Amos ? From: snakeeyes [mailto:ahmed.za...@netstream.ps] Sent: Monday, February 16, 2015 2:55 PM To: squid-users@lists.squid-cache.org Subject: cache peer load balancing round robin problem Hi , I have many account from same provider and I would like to use those acco

Re: [squid-users] derive HTTP/HTTPS upload traffic to a secondary interface.

2015-02-26 Thread Josep Borrell
Hi Amos, We are a school. Our Internet connection are 4 ADSL (8/0.8Mb) and 1 SDSL (4/4Mb) We are doing session balancing in the firewall appliance. The problem is when the students save this work, they are using Google Apps for Education, so is very easy to saturate the upload channel of the ADSL