[squid-users] Access denied using mskutil

2022-03-29 Thread Alberto Montes de Oca
Hi, I´m trying to set up squid authentication with a Windows AD domain controller, and everything goes well until I try to check if the host account updates successfully, using the following commands: msktutil --auto-update --verbose --dont-expire-password \ -b "CN=SQUIDPROXY,OU=OU_NAME,,DC=MYDOMA

[squid-users] Dynamic delay pools in squid?

2022-03-16 Thread Alberto Montes de Oca
Hi guys, I´d like to implement some bandwidth management using squid delay pools, but so far I can´t find any solution/example to do it dynamically, in my case what I want to accomplish is this: I have a 10Mb/s Internet connection, I want to use let´s say 6Mb/s for the standard users, and reserve

Re: [squid-users] FATAL: mimeLoadIcon: cannot parse internal URL

2020-06-01 Thread Alberto Senni
Il 01/06/20 17:29, Alberto Senni ha scritto: Il 01/06/20 16:15, Amos Jeffries ha scritto: On 2/06/20 1:45 am, Alberto Senni wrote: Hi to  all, on my linux Devuan configured as transparent router, squid 4 exit with FATAL error (from syslog): May 31 14:36:02 beofw (squid-1): FATAL

[squid-users] FATAL: mimeLoadIcon: cannot parse internal URL

2020-06-01 Thread Alberto Senni
intercept mode. What is the problem ? Thanks to all Alberto Senni my squid.conf is: acl reteInterna src 192.168.100.0/24 # RFC 1918 local private network (LAN) acl SSL_ports port 443 # RFC 4291 link-local (directly plugged) machines acl Safe_ports port 80 acl Safe_ports port 21 # http acl

[squid-users] Too many AD group and squid kerberos auth problem

2016-08-30 Thread alberto
uth_param basic realm Internet Proxy auth_param basic credentialsttl 1 minute Thank you for your help, Alberto ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Squid proxy return gzip responses when I don't include Accept-Encoding

2016-03-01 Thread Bermejo Gil, Alberto (EXT - ES)
4.x can't help you? 29.02.16 21:25, Bermejo Gil, Alberto (EXT - ES) пишет: > There are something that can I do in the server side in order to prevent this > behavior? > > I mean, I want to cache different responses, one with gzip and another without gzip. > > -M

Re: [squid-users] varyEvaluateMatch

2016-02-29 Thread Alberto Perez
I have a lot of these too. I rebuild the entire cache dir after I start seeing this, it was right after I upgrade squid to 3.5.12, and I remember also I remove ignore-no-cache parameter from refresh_pattern directives as "squid3 -k parse" instructed to do. ' 2016/02/29 21:50:41| varyEvaluateMatch:

Re: [squid-users] Squid proxy return gzip responses when I don't include Accept-Encoding

2016-02-29 Thread Bermejo Gil, Alberto (EXT - ES)
Jeffries Enviado el: lunes, 29 de febrero de 2016 12:47 Para: squid-users@lists.squid-cache.org Asunto: Re: [squid-users] Squid proxy return gzip responses when I don't include Accept-Encoding On 1/03/2016 12:08 a.m., Bermejo Gil, Alberto (EXT - ES) wrote: > Hi, > > In the squid proxy (

[squid-users] Squid proxy return gzip responses when I don't include Accept-Encoding

2016-02-29 Thread Bermejo Gil, Alberto (EXT - ES)
Hi, In the squid proxy (3.3.3), if the first request is with the Accept-Encoding: gzip header then all the next responses will also be in gzip, whether I request with a specific Accept-Encoding or not. I need something special in the squid.conf? This is a rule for my domain: refresh_pattern ^

Re: [squid-users] Delay Pools and HTTPS on Squid 3.x

2016-02-17 Thread Alberto Perez
days. Kind regards Alberto On 2/17/16, FredB wrote: > There was a know bug about delay pool and HTTPS, but as far as I know it's > fixed now > you did a test with 3.5.x ? > > Fred > ___ > squid-users mailing list > squi

[squid-users] Help with cachemgr and nginx

2015-04-21 Thread Alberto Perez
Hi everyone, I am trying to setup cachemgr.cgi in my squid 3.5.2 box with nginx as web server. I was able to server first page of cachemgr but I can't get further this page, every credentials I try shows me the same page with no errors. (attach image) in my squid.conf file cache_mgr al

Re: [squid-users] how to realize (external_acl_type) logout without squid -k reconfigure

2015-04-18 Thread Alberto Perez
Hi, john To be able to make the logout action "instantly" effective you should change your external acl ttl to a lower value, for example 3, in which case logout will be effective after 3 sec (reasonable value I think). You should also worry about performance of credentials check because squid wil

[squid-users] help with tcp_outgoing_address trying to balace traffic based on username

2015-04-06 Thread Alberto Perez
Hi everyone I've been trying to make a traffic load balancing between two links based on username using tcp_outgoing_address My squid setup only use authorization with an external_acl which returns the username based on the client ip. In my first failure trying to setup this, I found (with the he

[squid-users] issue with tcp_outgoing_address, trying to balace traffic based on username

2015-04-04 Thread Alberto Perez
the correct balancing is made only when squid checks de acl and mark the request, but this mark isnt persistent. Please, any help with this will be appreciated. Thanks Alberto ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] WARNING: 1 swapin MD5 mismatches and BUG 3279: HTTP reply without Date:

2015-03-19 Thread Alberto Perez
Another one here not using SMP, and using aufs. I stopped seen this issue frequently when I reduced my cache size, from 70 GB to 30 GB now. Regards On 3/19/15, Dan Charlesworth wrote: > Hey Eliezer > > I don't actually use SMP. I could be wrong about the aufs thing; I haven't > personally teste

Re: [squid-users] WARNING: 1 swapin MD5 mismatches and BUG 3279: HTTP reply without Date:

2015-03-19 Thread Alberto Perez
I read once in this list a response to this same question, each time I see this in my cache logs I stop squid, remove swap.state file and run squid3 -z, after that start squid again and the issue its gone. Regards On 3/19/15, Dan Charlesworth wrote: > Hi John > > This bug has been affecting me o

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Alberto Perez
I did this once, with external acl, you can specify a ttl of each external acl and also make your acl reload the list any time you want. My external acl loaded users (in your case domains) from a list in hard disk to memory, and then each time squid asked acl verify for a preset elapsed time to r

Re: [squid-users] squid intercept config

2015-03-13 Thread Alberto Perez
Thanks a lot Yuri, I made some merge with my config and some of this options, I will see now how HIT rate it goes, my squid run so limited of bandwidth that I need to be as much aggressive as I can caching the content. Thanks again for sharing, very appreciated Alberto On Fri, Mar 13, 2015 at 4

Re: [squid-users] squid intercept config

2015-03-13 Thread Alberto Perez
Can you share more details about "Agressive dynamic content caching requires some special tweaks" I am very interested. Thanks On 3/13/15, Yuri Voinov wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > > 13.03.15 23:33, Amos Jeffries пишет: >> On 14/03/2015 5:47 a.m., Monah Baki wr

Re: [squid-users] issue with tcp_outgoing_address and external acl

2015-03-05 Thread Alberto Perez
Thank you Amos, As always you hit it, it worked fine with note acl. I really appreciate your time to support this community, great help today. Thanks a lot God Bless you Alberto On 3/5/15, Amos Jeffries wrote: > On 6/03/2015 10:35 a.m., Alberto Perez wrote: >> Thanks Amos for th

Re: [squid-users] issue with tcp_outgoing_address and external acl

2015-03-05 Thread Alberto Perez
:25 p.m., Alberto Perez wrote: >> Hi and thanks to all members in this community for the great support. >> >> >> Im trying to send traffic for some users through a faster link using >> tcp_outgoing_address, I found this directive very usefull and suitable >> for this

[squid-users] issue with tcp_outgoing_address and external acl

2015-03-04 Thread Alberto Perez
d. Thanks a lot in advance Alberto ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Receiving blank input in External ACL

2015-02-11 Thread Alberto Perez
Hi to all and thanks for the time given to read and reply these emails I am having an strange issue with my external ACL, ocassionally im getting blank inputs from squid to by proccessed by the external ACL, for those cases I am returning ERR but squid is complainting showing in cache.log errors

Re: [squid-users] External ACL TTL not working as expected

2015-01-31 Thread Alberto Perez
_log stdio:/var/log/squid3/access.log squid Because I will be skipping logging for other ACLs Thanks a lot for your help. Good Bless you. Have a nice weekend. Alberto On 1/31/15, Amos Jeffries wrote: > On 31/01/2015 5:14 p.m., Alberto Perez wrote: >> Amos, >> You rock it,

Re: [squid-users] External ACL TTL not working as expected

2015-01-31 Thread Alberto Perez
Thank you Amos for your response, Sorry to say this solution gives me the same result. Any other idea? Thanks a lot Alberto On 1/31/15, Amos Jeffries wrote: > On 31/01/2015 5:14 p.m., Alberto Perez wrote: >> Amos, >> You rock it, >> Thanks a lot, now its working pre

Re: [squid-users] External ACL TTL not working as expected

2015-01-30 Thread Alberto Perez
wapdir=/var/spool/squid3' '--with-logdir=/var/log/squid3' '--with-pidfile=/var/run/squid3.pid' '--with-filedescriptors=65536' '--with-large-files' '--with-default-user=proxy' Again, thanks a lot for this great support, I read a lot of your answ

[squid-users] External ACL TTL not working as expected

2015-01-30 Thread Alberto Perez
o check the external acl each 1 second or just for every request without reloading configuration. I've tried all for over a month and you are my last resort, please help, and forgive my english also. Grateful Alberto ___ squid-users mailing lis

Re: [squid-users] Centralized Squid - design and implementation

2014-11-17 Thread alberto
On Mon, Nov 17, 2014 at 3:04 AM, Marcus Kool wrote: > Let me start to say that I am biased since I am the author of ufdbGuard. > If you have worked with squidGuard than you will find that ufdbGuard is an > excellent replacement since ufdbGuard was forked in 2005 from squidGuard > and has since ga

Re: [squid-users] Centralized Squid - design and implementation

2014-11-16 Thread alberto
uth and do not have issues. You have to pay attention to > the details with kerberos auth (dns name and principals need to match, > specific options set in squid configs), but it is working very well for me > On Nov 16, 2014 12:32 PM, "alberto" wrote: > >> Hi Brendan

Re: [squid-users] Centralized Squid - design and implementation

2014-11-16 Thread alberto
Hi Brendan On Sun, Nov 16, 2014 at 5:51 PM, Brendan Kearney wrote: > i use HAProxy to load balance based on the least number of connections > Do you use kerberos/AD authentication? Any issues with HAPROXY in front of the squid nodes? Thx, a. ___ squi

[squid-users] Centralized Squid - design and implementation

2014-11-16 Thread alberto
Hello everyone, first of all thanks to the community of squid for such a great job. I'm writing because I have to revise the current implementation of squid in my company so I would like to share with you some design ideas and possibly have some suggestions from you. The group I work for has six

[squid-users] mgr:info question

2014-11-12 Thread Alberto Klocker
Looking at the squidclient mgr:info command output I was wondering what the difference between these two entries are? Cache information for squid: Hits as % of all requests: 5min: 0.7%, 60min: 0.3% Hits as % of bytes sent:5min: 51.3%, 60min: 25.5% I can guess the fir