[squid-users] Muitple ISP client hashing

2015-09-04 Thread Lee Brown
Hello, I have multiple ISP's configured, working really nicely, snippet from config: acl service_RLO src 10.1.10.175/32 acl service_RLG src 10.1.10.0/24 acl service_RLG src 10.1.200.0/24 acl service_Guest src 10.1.3.0/24 [cut] tcp_outgoing_address 10.1.248.1 service_RLO tcp_outgoing_address 10.1.

Re: [squid-users] stoping after rotate

2015-09-04 Thread Jorgeley Junior
Thanks Amos, i will increase the swap Em 04/09/2015 17:22, "Amos Jeffries" escreveu: > On 5/09/2015 7:16 a.m., Jorgeley Junior wrote: > > Thanks Amos, my swap is 32GB, so that's causing the error as you said. > > Which is the better choice: increase the swap size or reduce the > > cache_mem??? >

Re: [squid-users] Safesearch: blocking Google images error

2015-09-04 Thread Stanford Prescott
Thanks for catching that regex error. I will change it to what you suggest. SNI not providing the needed server info would explain the problem I guess I will just wait for any improvements to the SNI acl. Stan On Fri, Sep 4, 2015 at 3:59 PM, Amos Jeffries wrote: > On 5/09/2015 8:37 a.m., Stanf

Re: [squid-users] Safesearch: blocking Google images error

2015-09-04 Thread Amos Jeffries
On 5/09/2015 8:37 a.m., Stanford Prescott wrote: >> acl s1_tls_connect at_step SslBump1 >> acl s2_tls_client_hello at_step SslBump2 >> acl s3_tls_server_hello at_step SslBump3 >> >> acl tls_server_name_is_ip ssl::server_name_regex \ >> ^[0-9]+.[0-9]+.[0-9]+.[0-9]+n > > You have a letter 'n' on the

Re: [squid-users] Safesearch: blocking Google images error

2015-09-04 Thread Stanford Prescott
> acl s1_tls_connect at_step SslBump1 > acl s2_tls_client_hello at_step SslBump2 > acl s3_tls_server_hello at_step SslBump3 > > acl tls_server_name_is_ip ssl::server_name_regex \ > ^[0-9]+.[0-9]+.[0-9]+.[0-9]+n You have a letter 'n' on the end there is that intentional? It would seem so. I copied

Re: [squid-users] stoping after rotate

2015-09-04 Thread Amos Jeffries
On 5/09/2015 7:16 a.m., Jorgeley Junior wrote: > Thanks Amos, my swap is 32GB, so that's causing the error as you said. > Which is the better choice: increase the swap size or reduce the > cache_mem??? > Both probably. 128 GB swap I suspect you will need. Increase the swap so the system lets Squ

[squid-users] Custom external acl helpers in PHP

2015-09-04 Thread Walter (NIF)
Hi! I wrote a PHP script to authenticate users in a postgresql server and it's working perfectly. The question is that we have some groups with different privileges. We had a LDAP base where the users were authenticated with the ldap_group external acl. I'd like to write my own external helper

Re: [squid-users] stoping after rotate

2015-09-04 Thread Jorgeley Junior
Thanks Amos, my swap is 32GB, so that's causing the error as you said. Which is the better choice: increase the swap size or reduce the cache_mem??? 2015-09-04 13:55 GMT-03:00 Amos Jeffries : > On 4/09/2015 11:32 p.m., Jorgeley Junior wrote: > > Hi guys, I suspect my squid stop to serve request a

Re: [squid-users] Safesearch: blocking Google images error

2015-09-04 Thread Amos Jeffries
On 5/09/2015 5:48 a.m., Stanford Prescott wrote: > I have tried to enable safe searching with Squid 3.5.7 using ssl-bump > splice but when I enable it, browsing to https://google.com generates a > Squid error page saying there is no valid certificate. Browsing to all > other https sites loads the p

[squid-users] Safesearch: blocking Google images error

2015-09-04 Thread Stanford Prescott
I have tried to enable safe searching with Squid 3.5.7 using ssl-bump splice but when I enable it, browsing to https://google.com generates a Squid error page saying there is no valid certificate. Browsing to all other https sites loads the pages correctly and all other SSL-bump sites get bumped an

Re: [squid-users] stoping after rotate

2015-09-04 Thread Amos Jeffries
On 4/09/2015 11:32 p.m., Jorgeley Junior wrote: > Hi guys, I suspect my squid stop to serve request after rotate, in the > morning, after I restarted it, everything goes to normal. > here is the log: > 2015/09/04 00:00:01 kid1| storeDirWriteCleanLogs: Starting... > 2015/09/04 00:00:01 kid1| Finis

Re: [squid-users] cache_dir still rebuilding

2015-09-04 Thread Amos Jeffries
On 5/09/2015 4:12 a.m., Amos Jeffries wrote: > On 5/09/2015 2:59 a.m., Ulises Nicolini wrote: >> Hello >> >> In my cache.log there are a lot of messages: >> >> 2015/09/04 12:03:29 kid4| 1 cache_dir still rebuilding. Skip GC for >> /cache/squidstorage2 >> >> Who are these messages ? There are proble

Re: [squid-users] cache_dir still rebuilding

2015-09-04 Thread Amos Jeffries
On 5/09/2015 2:59 a.m., Ulises Nicolini wrote: > Hello > > In my cache.log there are a lot of messages: > > 2015/09/04 12:03:29 kid4| 1 cache_dir still rebuilding. Skip GC for > /cache/squidstorage2 > > Who are these messages ? There are problems in my cache_dir ? This is the new output in 3.5.

[squid-users] cache_dir still rebuilding

2015-09-04 Thread Ulises Nicolini
Hello In my cache.log there are a lot of messages: 2015/09/04 12:03:29 kid4| 1 cache_dir still rebuilding. Skip GC for /cache/squidstorage2 Who are these messages ? There are problems in my cache_dir ? Thanks Ulises ___ squid-users mailing lis

Re: [squid-users] cache file format

2015-09-04 Thread Amos Jeffries
On 4/09/2015 11:06 p.m., Xen wrote: > I was assuming the files saved to the cache dir would just be plain > files as they were fetched. Am I mistaken? It seems weird that when I > run a 'file' on them, most of them are reported as "data" without > discrimination. > > I remember from Squid 3.5 on W

[squid-users] stoping after rotate

2015-09-04 Thread Jorgeley Junior
Hi guys, I suspect my squid stop to serve request after rotate, in the morning, after I restarted it, everything goes to normal. here is the log: 2015/09/04 00:00:01 kid1| storeDirWriteCleanLogs: Starting... 2015/09/04 00:00:01 kid1| Finished. Wrote 39639 entries. 2015/09/04 00:00:01 kid1| Too

[squid-users] cache file format

2015-09-04 Thread Xen
I was assuming the files saved to the cache dir would just be plain files as they were fetched. Am I mistaken? It seems weird that when I run a 'file' on them, most of them are reported as "data" without discrimination. I remember from Squid 3.5 on Windows that I could take a file and open it

Re: [squid-users] best practices for setting up large proxy server

2015-09-04 Thread Amos Jeffries
On 4/09/2015 3:42 p.m., Jason Enzer wrote: > not a popular topic i guess. can anyone point in the right direction > for setting up multiple squid instances on centos 6.6? Oh its fairly popular. I imagine those types just dont like to talk about their configs much in public. Anonymity and all that