Re: [squid-users] Removing cache credentials

2014-11-17 Thread Victor Sudakov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Amos Jeffries wrote: [dd] > > > > As far as I understood you, there would be a "407 Proxy > > Authentication Required" and "Proxy-Authorization: Negotiate" pair > > in each TCP connection between browser and proxy. > > 407 is repeated as many times

Re: [squid-users] Centralized Squid - design and implementation

2014-11-17 Thread alberto
On Mon, Nov 17, 2014 at 3:04 AM, Marcus Kool wrote: > Let me start to say that I am biased since I am the author of ufdbGuard. > If you have worked with squidGuard than you will find that ufdbGuard is an > excellent replacement since ufdbGuard was forked in 2005 from squidGuard > and has since ga

Re: [squid-users] RFC2616 headers in bumped requests

2014-11-17 Thread Steve Hill
On 04/11/14 13:59, Amos Jeffries wrote: >> I've just come across a web server that throws its toys out of the >> pram when it sees a Via header in an HTTPS request, and >> unfortunately it's quite a big one - Yahoo. See this request: > >> - GET /news/degrees-lead-best-paid-careers-141513989.

[squid-users] WARNING: deny_mime_type ACL is used in context without an HTTP response. Assuming mismatch.

2014-11-17 Thread navari.lore...@gmail.com
hello, in my cache.log i have many of these ==> /var/log/squid/cache.log <== 2014/11/17 12:08:07 kid1| WARNING: deny_mime_type ACL is used in context without an HTTP response. Assuming mismatch. 2014/11/17 12:08:07 kid1| WARNING: deny_mime_type ACL is used in context without an HTTP response. As

Re: [squid-users] Centralized Squid - design and implementation

2014-11-17 Thread Carlos Defoe
Use a load balancer. HAproxy will do the trick, if you don't want to spend some money on a professional load balancer like F5 big-ip. Don't drop the use of wpad. You can send the balancer name (eg. proxy.your.domain) as a default for every client, and send the names of the proxy nodes as a failove

[squid-users] Please do not send any email on this email address.

2014-11-17 Thread Shaheen
Hi Please do not send me any email on this email id. I feel boring. I dont know why lot of emails come to my inbox. Please do not send me any Sent from my iPhone ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.o

Re: [squid-users] Centralized Squid - design and implementation

2014-11-17 Thread Alexander Samad
Why haproxy instead of a pacemaker. I have 2 dmz boxes I setup in a cluster. so I have 2 vips for the squid proxies. and dns setup to round robin to the vip's. I see sort of even distribution but I don't have a single point of failure. if 1 node failes the vip moves over to the other node.. O

Re: [squid-users] Centralized Squid - design and implementation

2014-11-17 Thread Antony Stone
On Monday 17 November 2014 at 22:01:29 (EU time), Alexander Samad wrote: > Why haproxy instead of a pacemaker. I have 2 dmz boxes I setup in a > cluster. so I have 2 vips for the squid proxies. and dns setup to > round robin to the vip's. > > I see sort of even distribution but I don't have a sin

Re: [squid-users] Centralized Squid - design and implementation

2014-11-17 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/11/2014 12:39 a.m., Carlos Defoe wrote: > Use a load balancer. HAproxy will do the trick, if you don't want > to spend some money on a professional load balancer like F5 > big-ip. Or even, taddah ... Squid! see cache_peer for the many load bala

Re: [squid-users] WARNING: deny_mime_type ACL is used in context without an HTTP response. Assuming mismatch.

2014-11-17 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/11/2014 12:09 a.m., navari.lore...@gmail.com wrote: > hello, > > in my cache.log i have many of these > > ==> /var/log/squid/cache.log <== 2014/11/17 12:08:07 kid1| WARNING: > deny_mime_type ACL is used in context without an HTTP response. > As

Re: [squid-users] RFC2616 headers in bumped requests

2014-11-17 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/11/2014 11:25 p.m., Steve Hill wrote: > On 04/11/14 13:59, Amos Jeffries wrote: > >>> I've just come across a web server that throws its toys out of >>> the pram when it sees a Via header in an HTTPS request, and >>> unfortunately it's quite a

[squid-users] Squid 3.4.9 RPM release

2014-11-17 Thread Eliezer Croitoru
HTML version at: http://www1.ngtech.co.il/repo/release-3.4.9.html I am happy to release the new RPMs of squid 3.4.9 and 3.5.0.2 beta for Centos 6.6 64bit. The new release includes couple bug fixes and improvements. The links to the RPMs are at the bottom of the article. “The sales man” You get int

[squid-users] using request_header_replace option

2014-11-17 Thread Fernandez-Touzon, Carlos E (CTR)
I have two instances of Squid running: -Squid v3.3.13 on Fedora 20 -Squid v3.1.10-29 on RHEL 6.6 Both instances are configured with the following options: request_header_access User-Agent deny all request_header_replace User-Agent someagent; (squid proxy header rewrite DID-IT)

Re: [squid-users] using request_header_replace option

2014-11-17 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/11/2014 11:34 a.m., Fernandez-Touzon, Carlos E (CTR) wrote: > I have two instances of Squid running: > > > -Squid v3.3.13 on Fedora 20 > > -Squid v3.1.10-29 on RHEL 6.6 > > Both instances are configured with the following opti

Re: [squid-users] using request_header_replace option

2014-11-17 Thread Fernandez-Touzon, Carlos E (CTR)
Amos, Thanks! You probably saved me a day of trying to track that down. I am going to try to use the 3.4 release that Eliezer Croitoru maintains. Carlos -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeffries Sent: Monday, N

Re: [squid-users] Centralized Squid - design and implementation

2014-11-17 Thread Carlos Defoe
I don't meant to use wpad as a load balancer. I would not do it, wpad and pac are not designed for doing that, although it is (roughly) possible to do it. The load balancer device, if there is one, have one and only name, eg, "proxy.your.domain". All the clients must point to that very same name,

Re: [squid-users] Centralized Squid - design and implementation

2014-11-17 Thread Jason Haar
On 18/11/14 16:07, Carlos Defoe wrote: > As for my scenario, I also use wpad to configure some exceptions, some > clients that will use a completely different proxy, etc... Our "wpad.dat" is actually a PHP script which tests that the "official" proxy (per client subnet) is actually working (with ca