Re: squid-users-digest Digest V99 #458

what could I do to make squid work as a transparent proxy??

Renato Gallo

> squid-users-digest Digest Volume 99 : Issue 458
>
> Today's Topics:
> Re: SGML Squid FAQ [ Curt Johnson
<cjohnson@arrayservice
> ]
> Re: SGML Squid FAQ [ Henrik Nordstrom
<hno@hem.passagen.
> ]
> Block some clients. [ Marcelo Carneiro Rodrigues
<marcelo
> ]
> Re: SGML Squid FAQ [ Duane Wessels
<wessels@ircache.net>
> ]
> Chaining Problem [ John Doe <sysmatic@usa.net> ]
> Re: SGML Squid FAQ [ Clifton Royston
<cliftonr@lava.net>
> ]
> Re: The real deal on the Linux 2.2.x [ list-squid@news.cistron.nl
(Miquel
> ]
> Re: Block some clients. [ visolve cache
<visolve_cache@yahoo.
> ]
> delay pools and cachemgr [ "Yuriy Kouznetsov"
<yuriy@uni-svish
> ]
> squid on dec alpha [ Jeff Beley <jeffb@cameron.edu>
]
> Re: squid on dec alpha [ Henrik Nordstrom
<hno@hem.passagen.
> ]
> Re: squid on dec alpha [ Duane Wessels
<wessels@ircache.net>
> ]
> Suggestions wanted for Squid Log "da [ "Miguel A.L. Paraz"
<map@iphil.net>
> ]
> Re: delay pools and cachemgr [ david@luyer.net ]
> Problems using firewall parent [ Graham Maltby
<gmaltby@iig.com.au>
> ]
> 304 Not Modified errors, Henrik's pa [ Andre Albsmeier
<andre.albsmeier@mc
> ]
> delay parameters [ Milos Prudek <prudek@nembv.cz>
]
> Re: Suggestions wanted for Squid Log [ "Jens-S. Voeckler"
<voeckler@rvs.un
> ]
> Re: delay parameters [ "Panagiotis Malakoudis"
<pmal@space
> ]
> Re: delay parameters [ david@luyer.net ]
> PROBLEM WITH SQUID.CONF [ "JIM ALIFANTIS"
<jimalif@hotmail.co
> ]
> Transparent proxy with SSL [ Vignesa Moorthy
<vignesa@viewintern
> ]
> A question about refresh pattern [ Kim JooYong
<jykim@oslab.snu.ac.kr>
> ]
> Re: delay parameters [ Milos Prudek <prudek@nembv.cz>
]
> RE: Transparent proxy with SSL [ Dave J Woolley <DJW@bts.co.uk>
]
>
> Dave J Woolley wrote:
>
> > > From: Curt Johnson [SMTP:cjohnson@arrayservices.com]
> > >
> > > SGML tool like sgml2lyx don't like HTML. Also I can't seem to find
even a
> > > tarred copy of the HTML for download.
> > >
> > General SGML tools like nsgmls are very happy with valid HTML
> > (~98% of real world HTML is invalid).
> >
> > sgml2lyx appears not to be a general tool, but a tool for
> > documents conforming to the linuxdoc DTD much in the same
> > way as html2ps, or even Internet Explorer are tools for
> > converting files which comply with the HTML DTD.
> >
> > What you were really asking for is a linuxdoc version of the
> > documentation, not an arbitrary SGML version. SGML is
> > a framework which covers many formats, including linuxdoc,
> > HTML, XML etc.
>
> I was assuming the FAQ was written using either linuxdoc or docbook,
since
> the
> HTML version is similar to the HTML output of linuxdoc sgml run through
> sgml2html and the request contained in the FAQ for additions to be
written in
> sgml. I really didn't mean to get a discussion started, I just wanted a
local
> copy that I could edit in lyx :). BTW, what DTD is the FAQ written in?
>
> --
> Curt Johnson cjohnson@arrayservices.com
> Array Services, Inc. http://www.arrayservices.com
> "Open Source, Open Standards"
> Unix and Internet Applications development, integration and
administration
>
> Curt Johnson wrote:
> >
> > Could anyone point me to the location of the Squid FAQ in SGML form or
> > a tarred copy of the HTML docs?
>
> LinuxDoc SGML format can be found at
>
> http://www.squidcache.org/Doc/FAQ/FAQ.sgml
> or
> rsync www.squid-cache.org::http-files/Doc/FAQ/FAQ.sgml
>
> There is also a .txt format if so perferred.
>
> The whole FAQ in LinuxDoc SGML + HTML + txt format and assorted
> files/images can be downloaded by
> rsync www.squid-cache.org::http-files/Doc/FAQ/ FAQ
>
> --
> Henrik Nordstrom
> Squid hacker
>
> I have a big problem here, (or i think it is) :
>
> i need to allow some specific clients to access my squid proxy. and deny
> all the rest of the network.
>
> ex. network: 10.9.0.0, needed to be blocked, except hosts 10.9.1.5 and
> 10.9.1.20.
>
>
> how to implement it in my squid,
>
>
>
> thanks,
>
>
>
> Marcelo.
>
> On Fri, 3 Dec 1999, Curt Johnson wrote:
>
> > Could anyone point me to the location of the Squid FAQ in SGML form or
> > a tarred copy of the HTML docs?
>
> http://www.squid-cache.org/Doc/FAQ/FAQ.sgml
>
> Hello all
> I am using my squid 2.2 stable4 running on Solaris 2.7 chained to an
> asymetric
> receive only circuit running parent winproxy on NT and am getting these
logs
> at cache.log constantly.
>
> 1999/12/03 16:34:08| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:08| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:08| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:08| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:30| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:30| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:31| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:31| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:31| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:31| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:38| TCP connection to parent_ip/8080 succeeded
> 1999/12/03 16:34:43| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:43| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:43| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:44| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:47| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:50| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:52| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:53| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:53| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:34:54| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:35:13| TCP connection to parent_ip/8080 succeeded
> 1999/12/03 16:35:50| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:35:50| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:36:15| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:36:15| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:36:15| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:36:19| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:36:19| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:36:20| TCP connection to parent_ip/8080 succeeded
> 1999/12/03 16:36:22| TCP connection to parent_ip/8080 failed
> 1999/12/03 16:36:22| TCP connection to parent_ip/8080 failed
>
> Could there be an issue with the delay involved with the asymetric
circuit or
> some prob with the squid configuration or too many requests at the
Winproxy
> end. Any Help would be welcome as this is slowing my squid's response
> considerably.
> Regards
> John Doe
>
>
> ____________________________________________________________________
> Get free email and a permanent address at
http://www.netaddress.com/?N=1
>
> On Fri, Dec 03, 1999 at 07:11:54PM -0000, Dave J Woolley wrote:
> > > From: Curt Johnson [SMTP:cjohnson@arrayservices.com]
> > >
> > > SGML tool like sgml2lyx don't like HTML. Also I can't seem to find
even a
> > > tarred copy of the HTML for download.
> > >
> > General SGML tools like nsgmls are very happy with valid HTML
> > (~98% of real world HTML is invalid).
>
> FYI, the Squid FAQ is HTML generated from a specific SGML DTD, as I
> found when i contributed some info to it.
>
> -- Clifton
>
> --
> Clifton Royston -- LavaNet Systems Architect -- cliftonr@lava.net
> "An absolute monarch would be absolutely wise and good.
> But no man is strong enough to have no interest.
> Therefore the best king would be Pure Chance.
> It is Pure Chance that rules the Universe;
> therefore, and only therefore, life is good." - AC
>
> In article <cistron.3847DEDB.14638462@hem.passagen.se>,
> Henrik Nordstrom <hno@hem.passagen.se> wrote:
> >Miquel van Smoorenburg wrote:
> >Parts of Squid relies on FD_SETSIZE (or actually fd_set) even when
> >poll() is used
>
> It does? Sorry, I missed that.
>
> >so only changing SQUID_MAXFD may get you in trouble.
>
> Yes, ofcourse. I'll have to fix my Debian package then not to
> blindly set SQUID_MAXFD to 3000. Thanks.
>
> Mike.
> --
> The From: and Reply-To: addresses are internal news2mail gateway
addresses.
> Reply to the list or to miquels@cistron.nl (Miquel van Smoorenburg)
>
> Hi
> In your squid.conf define the following
>
> acl allowclients src 10.9.1.5 10.9.1.20
> http_access allow allowclients
> http_access deny all
>
> regards
> visolve cache
>
> > I have a big problem here, (or i think it is) :
> >
> > i need to allow some specific clients to access my
> squid proxy. and deny
> > all the rest of the network.
> >
> > ex. network: 10.9.0.0, needed to be blocked, except
> hosts 10.9.1.5 and
> > 10.9.1.20.
> > how to implement it in my squid,
> >
> > thanks,
> > Marcelo.
>
> __________________________________________________
> Do You Yahoo!?
> Thousands of Stores. Millions of Products. All in one place.
> Yahoo! Shopping: http://shopping.yahoo.com
>
> Sorry for repeating this question.... But when I post message DavidL
changes
> in this moment his
> location:)))
>
> What mean - in current state in delay pools levels? Big overrun or ...?
>
> Pool: 1
> Class: 1
>
> Aggregate:
> Max: 8000
> Restore: 8000
> >>????>>> Current: -18
>
>
> TIA
>
> I've compiled and installed squid 2.2-STABLE5 on my alpha system and I
get
> this message on startup:
>
> Dec 5 14:37:47 alpha squid[239]: assertion failed: StatHist.c:91:
> "statHistBin(H, max) == H->capacity - 1"
>
> What does this mean, and how do I fix it?
>
> --Jeff
>
> Jeff Beley wrote:
> >
> > I've compiled and installed squid 2.2-STABLE5 on my alpha system and I
get
> > this message on startup:
> >
> > Dec 5 14:37:47 alpha squid[239]: assertion failed: StatHist.c:91:
> > "statHistBin(H, max) == H->capacity - 1"
> >
> > What does this mean, and how do I fix it?
>
> If I am not mistaken in means that you are trying to run Linux on an old
> Alpha processor model no longer supported by the Linux kernel. I don't
> know why, but another Alpha Linux user discovered that emulation of a
> some math instructions not present on older Alpha processors is no
> longer in the current Linux-2.2 kernels and that this caused statHistBin
> errors in Squid.
>
> --
> Henrik Nordstrom
> Squid Hacker
>
> On Sun, 5 Dec 1999, Jeff Beley wrote:
>
> > I've compiled and installed squid 2.2-STABLE5 on my alpha system and I
get
> > this message on startup:
> >
> > Dec 5 14:37:47 alpha squid[239]: assertion failed: StatHist.c:91:
> > "statHistBin(H, max) == H->capacity - 1"
> >
> > What does this mean, and how do I fix it?
>
> It means there is some strange compiler bug.
>
> What operating system and version do you use?
>
> What C compiler did you use? Try a different one if you can.
>
> Duane W.
>
> Hi,
>
> I'm planning to write an Open Source "data mining" script for Squid logs.
> This will go through access.log (and maybe even store.log), parse them
and
> store the relevant info in a SQL database. To create reports we go
through
> this SQL data to build "custom views" of the data. Another possibility
is to
> let it easily accumulate data from multiple logfiles (different dates or
> from different caches).
>
> Any suggestions?
> I plan to make it very extensible (in other words: I won't write it in a
> hurry)
> so that other folks can customize it easily.
>
> Thanks for listening,
> ---m
>
> --
> Miguel "Migs" A.L. Paraz IPhil Communications Network, Inc.
> http://www.iphil.net Business Development/Training
> Group
> 5/F 116 Herrera St., Legaspi Village, Makati City, Philippines
+63-2-750-2288
>
>
> > Sorry for repeating this question.... But when I post message DavidL
> changes
> > in this moment his
> > location:)))
> >
> > What mean - in current state in delay pools levels? Big overrun or ...?
> >
> > Pool: 1
> > Class: 1
> >
> > Aggregate:
> > Max: 8000
> > Restore: 8000
> > >>????>>> Current: -18
>
> OK, negative values mean the pool is currently being delayed. Due to
the way
> squid works, if a pool has 19 active clients and a balance of 1 byte, it
will
> select all these clients for reading. Then, when it reads from the
clients,
> it will never ask for less than 1 byte, so it would read 1 byte from each
> client connection. Hence the balance can be negative. If the balance is
> zero or negative, requests are at this instant not being selected for
> reading.
>
> David.
> --
> David Luyer . . www.zipworld.net
> Network Engineer . zipworld Zip World is
> Phone: +61 2 9253 5755 . . proudly part of the
> Fax: +61 2 9247 5276 . . Pacific Internet Group
>
> Hi all,
>
> I have a problem with accessing web sites that are redirects to another
URL
> (ie. 302 Moved Temporarily). It is easiest to explain by example.
>
> Example:
>
> 1. Client contacts local proxy, proxy goes direct to origin - everything
is
> fine.
>
> 2. Client contacts remote parent directly - everything is fine.
>
> 3. Client contacts local proxy, request is forwarded to parent
> (never_direct allow all) - client waits (2mins +) but finally gets the
page
> requested.
>
> In the above examples, this only effects URL redirects not normal
> requests. The problems only occurs using MSIE and only when the request
is
> forwarded to a parent cache. It does not effect Netscape in any
> configuration.
>
> Looking at the debug produced, the only difference between MSIE and
> Netscape for the same request is:
>
> IE:
> 1999/12/05 16:01:06| clientProcessMiss: 'GET http://www.hotmail.com/'
> 1999/12/05 16:01:08| clientSendMoreData: http://www.hotmail.com/, 233
bytes
> 1999/12/05 16:01:08| clientSendMoreData: FD 9 'http://www.hotmail.com/',
> out.offset=0
> 1999/12/05 16:01:08| clientSendMoreData: Appending 0 bytes after 233
bytes
> of headers
> 1999/12/05 16:01:08| clientWriteComplete: FD 9, sz 291, err 0, off 233,
len
> -1
>
> Netscape:
> 1999/12/05 16:02:53| clientProcessMiss: 'GET http://www.hotmail.com/'
> 1999/12/05 16:02:54| clientSendMoreData: http://www.hotmail.com/, 452
bytes
> 1999/12/05 16:02:54| clientSendMoreData: FD 9 'http://www.hotmail.com/',
> out.offset=0
> 1999/12/05 16:02:54| clientSendMoreData: Appending 230 bytes after 222
> bytes of headers
> 1999/12/05 16:02:54| clientWriteComplete: FD 9, sz 519, err 0, off 452,
len
> 452
> 1999/12/05 16:02:54| clientWriteComplete: FD 9 transfer is DONE
>
> Versions Used:
>
> MSIE NT v5.01
> Netscape 4.7
> Squid 2.2.STABLE5 and 2.3DEVEL3
>
> Parent caches are either NetCaches or other Squid boxes.
>
> Can anyone else confirm this?
>
>
> Regards,
Received on Tue Dec 07 1999 - 05:22:03 MST