Re: [squid-users] Making squid discrete when facing protocol error messages?

2016-07-01 Thread Amos Jeffries
On 2/07/2016 6:27 a.m., Kristopher Lalletti wrote: > I'm looking for the ACL / option / feature that will prevent SQUID > from presenting an error page for reasons like "ERR_INVALID_REQ" and > any other reasons. > > Basically, id's want something like this: > > acl 400 http_status 400 > deny_info

Re: [squid-users] Sometimes Squid goes to 99% CPU use

2016-07-01 Thread Amos Jeffries
On 1/07/2016 10:18 p.m., C. L. Martinez wrote: > On Fri 1.Jul'16 at 21:42:23 +1200, Amos Jeffries wrote: >> On 1/07/2016 8:39 p.m., C. L. Martinez wrote: >>> Hi all, >>> >>> I am seeing an abnormal behavior in my squid host (OpenBSD). From time to >>> time, CPU goes to 99%: >>> >>> load averages

[squid-users] Making squid discrete when facing protocol error messages?

2016-07-01 Thread Kristopher Lalletti
I'm looking for the ACL / option / feature that will prevent SQUID from presenting an error page for reasons like "ERR_INVALID_REQ" and any other reasons. Basically, id's want something like this: acl 400 http_status 400 deny_info TCP_RESET 400 But, it appears that the ACLs are not parsed when

Re: [squid-users] Force DNS queries over TCP?

2016-07-01 Thread reinerotto
You overlooked this one in my post: ... (assuming, all traffic from users is routed via squid box) Which is easy to be done in a local squid, serving as/in gateway to the internet. Whether personal or for a large LAN. My "iptables rules to redirect port 53" are not so easy to be implemented/achie

Re: [squid-users] Force DNS queries over TCP?

2016-07-01 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 cisco is just one of them. Let me explain to you why the conversation turned for Cisco. Squid (as by as another proxies) is used most frequently as a server for the user group. Each of them can set their own DNS settings. That may be completely d

Re: [squid-users] Force DNS queries over TCP?

2016-07-01 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 :) I'm moron too :) 01.07.2016 21:30, Antony Stone пишет: > On Friday 01 July 2016 at 17:25:49, Yuri Voinov wrote: > >> DNScrypt is offtopic here. > > ... says the man who has posted 11 of the 22 (now 23) emails in this thread... > > > Antony. >

Re: [squid-users] Force DNS queries over TCP?

2016-07-01 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 01.07.2016 20:27, reinerotto пишет: > Please, don't be so cryptic in your comments. The long quotations of the org DNScrypt is offtopic here. -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJXdot8AAoJENNXIZxhPexG1RMH/21m/r+SjV+MrE

Re: [squid-users] Force DNS queries over TCP?

2016-07-01 Thread Antony Stone
On Friday 01 July 2016 at 17:25:49, Yuri Voinov wrote: > DNScrypt is offtopic here. ... says the man who has posted 11 of the 22 (now 23) emails in this thread... Antony. -- "Black holes are where God divided by zero." - Steven Wright Plea

Re: [squid-users] Force DNS queries over TCP?

2016-07-01 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dont forget about legal issues. Using anti-ISP filtration/censorship crypto solutions can be completely out-of-law in some countries. 01.07.2016 20:27, reinerotto пишет: > Please, don't be so cryptic in your comments. The long quotations of the

Re: [squid-users] Force DNS queries over TCP?

2016-07-01 Thread reinerotto
Please, don't be so cryptic in your comments. The long quotations of the org post are also a bit annoying, but anyway: As you obviously do not understand the principle, how it works _without_ cisco, lemme explain: (assuming, all traffic from users is routed via squid box) - iptables rules (redirec

Re: [squid-users] Sometimes Squid goes to 99% CPU use

2016-07-01 Thread C. L. Martinez
On Fri 1.Jul'16 at 21:42:23 +1200, Amos Jeffries wrote: > On 1/07/2016 8:39 p.m., C. L. Martinez wrote: > > Hi all, > > > > I am seeing an abnormal behavior in my squid host (OpenBSD). From time to > > time, CPU goes to 99%: > > > > load averages: 2.20, 2.14, 2.09 > > 33 processes: 1 runn

Re: [squid-users] Sometimes Squid goes to 99% CPU use

2016-07-01 Thread Amos Jeffries
On 1/07/2016 8:39 p.m., C. L. Martinez wrote: > Hi all, > > I am seeing an abnormal behavior in my squid host (OpenBSD). From time to > time, CPU goes to 99%: > > load averages: 2.20, 2.14, 2.09 > 33 processes: 1 running, 31 idle, 1 on processor > CPU states: 79.2% user, 0.0% nice, 0.1%

[squid-users] Sometimes Squid goes to 99% CPU use

2016-07-01 Thread C. L. Martinez
Hi all, I am seeing an abnormal behavior in my squid host (OpenBSD). From time to time, CPU goes to 99%: load averages: 2.20, 2.14, 2.09 33 processes: 1 running, 31 idle, 1 on processor CPU states: 79.2% user, 0.0% nice, 0.1% system, 0.0% interrupt, 20.6% idle Memory: Real: 91M/263M act