Re: [squid-users] MS update woes

2016-01-25 Thread Alex Samad
Hi Sorry I had redacted some " auth_param negotiate program /usr/bin/ntlm_auth --helper-protocol=gss-spnego --configfile /etc/samba/smb.conf-squid auth_param negotiate children 20 startup=0 idle=3 auth_param negotiate keep_alive on auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squi

Re: [squid-users] MS update woes

2016-01-24 Thread Amos Jeffries
On 25/01/2016 11:20 a.m., Alex Samad wrote: > Hi > > Seems like I getting a bit confused in my conf now .. with > never_direct, always_direct. and miss_access > never_direct and always_direct determine whether cache_peer are required or allowed to be used on that connection respectively. You don

Re: [squid-users] MS update woes

2016-01-24 Thread Alex Samad
Hi Seems like I getting a bit confused in my conf now .. with never_direct, always_direct. and miss_access # ## # acl # ## acl sblMal dstdomain -i "/etc/squid/lists/squid-malicious.acl" acl sblPorn dstdomain -i "/etc/squid/lists/squid-porn.acl" acl localnet src 10.32.80.0/24 acl localnet_auth sr

Re: [squid-users] MS update woes

2016-01-19 Thread Amos Jeffries
On 20/01/2016 1:56 p.m., Alex Samad wrote: > Oh > > I am missing something. your saying the actualy get include more past > the ? and that squid logging isn't recording it ! Yes. There is part of the URL that is not logged by default. Sometimes that part is very big by many KB, and/or wrongly con

Re: [squid-users] MS update woes

2016-01-19 Thread Alex Samad
Oh I am missing something. your saying the actualy get include more past the ? and that squid logging isn't recording it ! So what I really need to do is modify the original to exclude any urls that have ? something like ? "windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip)[^?]"

Re: [squid-users] MS update woes

2016-01-18 Thread Amos Jeffries
On 19/01/2016 7:11 p.m., Alex Samad wrote: > Hi > > Think I answered my own on this > refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 > > > Does the last refresh_pattern config win ? > No, this one does: "windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip)" The problem is pr

Re: [squid-users] MS update woes

2016-01-18 Thread Alex Samad
Hi Think I answered my own on this refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 Does the last refresh_pattern config win ? On 19 January 2016 at 17:08, Alex Samad wrote: > On 19 January 2016 at 16:59, Amos Jeffries wrote: >>> refresh_pattern -i >>> microsoft.com/.*\.(cab|exe|ms[i|u|f]|[a

Re: [squid-users] MS update woes

2016-01-18 Thread Alex Samad
On 19 January 2016 at 16:59, Amos Jeffries wrote: >> refresh_pattern -i >> microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% >> 129600 reload-into-ims >> refresh_pattern -i >> windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 >> 80% 129600 reload-into-ims >>

Re: [squid-users] MS update woes

2016-01-18 Thread Alex Samad
On 19 January 2016 at 16:59, Amos Jeffries wrote: > > Hmm. Are you using the exact same HTTP headers as WU tools on the other > machines do to prefetch the URL into the cache ? I have a script that checks the squid logs and then does a download of the files through the cache -- for now > >> >> S

Re: [squid-users] MS update woes

2016-01-18 Thread Amos Jeffries
On 18/01/2016 1:58 p.m., Alex Samad wrote: > Hi > > so I have this in place now > > This works well for delaying YAY > > # > # Delay Pools > # http://wiki.squid-cache.org/Features/DelayPools > # > http://www.serverwatch.com/tutorials/article.php/3357241/Reining-in-Bandwidth-With-Squid-Proxying.

[squid-users] MS update woes

2016-01-17 Thread Alex Samad
Hi so I have this in place now This works well for delaying YAY # # Delay Pools # http://wiki.squid-cache.org/Features/DelayPools # http://www.serverwatch.com/tutorials/article.php/3357241/Reining-in-Bandwidth-With-Squid-Proxying.htm delay_pools 1 delay_class 1 1 # 10Mb/s fille rate , 20Mb/s r