Re: squid-users-digest Digest V99 #444

how about a graphical easy-to-use interface to configure squid???
I don't have the knowledge to make it but... Could we possibly talk about
it??

Renato Gallo

> squid-users-digest Digest Volume 99 : Issue 444
>
> Today's Topics:
> Re: IE 4 && HTTP/1.1 through proxy [ "T. Esting"
<t_esting@excite.com> ]
> only-if-cached [ "Federico E. Petronio"
<petronio@if
> ]
> Re: Blocking access except through p [ Henrik Nordstrom
<hno@hem.passagen.
> ]
> Re: high CPU usage [ Henrik Nordstrom
<hno@hem.passagen.
> ]
> Re: IE 4 && HTTP/1.1 through proxy [ Henrik Nordstrom
<hno@hem.passagen.
> ]
> Re: only-if-cached [ Alex Rousskov
<rousskov@ircache.net
> ]
> Re: Safe_ports - how to deal with on [ Henrik Nordstrom
<hno@hem.passagen.
> ]
> Re: PROXY-AUTH !!! [ Henrik Nordstrom
<hno@hem.passagen.
> ]
> Re: only-if-cached [ Henrik Nordstrom
<hno@hem.passagen.
> ]
> Re: IE 4 && HTTP/1.1 through proxy [ [ Henrik Nordstrom
<hno@hem.passagen.
> ]
> delay pool problems [ Craig Heading
<tasdevil@winsoft.net
> ]
> Re: Safe_ports - how to deal with on [ "Miguel A.L. Paraz"
<map@iphil.net>
> ]
> Setup for optimizing satellite link [ "Miguel A.L. Paraz"
<map@iphil.net>
> ]
> Re: delay pool problems [ david@luyer.net ]
> Re: help for squid newbie [ Dancer
<dancer@zeor.simegen.com> ]
> Re: high CPU usage [ "Francis A. Vidal"
<francis@usls.ed
> ]
> Re: high CPU usage [ "Francis A. Vidal"
<francis@usls.ed
> ]
> unsubscribe [ "Jun Armirola"
<reaj@i-quest.com> ]
> Re: high CPU usage [ "Francis A. Vidal"
<francis@usls.ed
> ]
> Re: help for squid newbie [ "Steve Snyder"
<swsnyder@home.com>
> ]
> cache-digests [ "Francis A. Vidal"
<francis@usls.ed
> ]
> Re: help for squid newbie [ Dancer
<dancer@zeor.simegen.com> ]
> Re: cache-digests [ Alex Rousskov
<rousskov@ircache.net
> ]
> Re: high CPU usage [ "Jean M. Vandette"
<vandj@securenet
> ]
>
> Just a little more follow-up...
>
> src/client_side.c reads:
>
> /*
> * Clear keepalive for NON-HEAD requests with invalid content length
> */
> if (request->method != METHOD_HEAD)
> if (http->entry->mem_obj->reply->content_length < 0)
> request->flags.proxy_keepalive = 0;
> /* Signal keep-alive if needed */
> httpHeaderPutStr(hdr,
> http->flags.accel ? HDR_CONNECTION : HDR_PROXY_CONNECTION,
> request->flags.proxy_keepalive ? "keep-alive" : "close");
>
> What should ...reply->content_length be for a TCP_IMS_HIT reply?
>
>
>
>
> ________________________________________________________________
> Get FREE voicemail, fax and email at http://voicemail.excite.com
> Talk online at http://voicechat.excite.com
>
> What do this means? Who can I solve it?
>
> - Valid document was not found in the cache and only-if-cached
> directive was specified.
>
> - You have issued a request with a only-if-cached cache control
> directive. The document was not found in the cache, or it required
> revalidation prohibited by only-if-cached directive.
>
>
> This happens when trying to use 'neighbor_type_domain' to treat a
> sibling as a parent for certain domains.
>
> Thanks
>
> --
> Federico Petronio
> petronio@ifeva.edu.ar
> Linux User #129974
>
> Awais Riaz wrote:
> >
> >
> > ipchains -A forward -p TCP -d proxy ip/32 80 -j ACCEPT
> >
> > (I guess you may want to accept other ports if you want to do
> > something apart from browsing)
> > ipchains -A forward -p TCP -d 0/0 -j DENY
>
>
> Shouldn't ACCEPT and DENY be rewersed in that? The question was blocking
> port 80, not blocking all except port 80.
>
> --
> Henrik Nordstrom
> Squid hacker
>
> Francis A. Vidal wrote:
> >
> > hi all,
> >
> > i'm running squid2.2-stable4 (async-io enabled) on a FreeBSD 3.3-stable
> > (w/ softupdates) machine with 16GB cache space and 256MB of RAM. my
system
> > is experiencing 97-98% CPU usage with 5-6 clients accessing it. any
> > related experiences?
>
> Unless you have installed support for kernel threads to your FreeBSD
> kernel and libraries, async-io is only going to waste a lot of CPU
> cycles if it at all works. To my knowledge FreeBSD does not yet support
> kernel threads.
>
> --
> Henrik Nordstrom
> Squid hacker
>
> T. Esting wrote:
> > The catch:
> > squid seems to send Proxy-Connection: close after TCP_IMS_HIT replies.
> > This begs the question: is this behavior configurable or is it part
> > of HTTP protocol compliance?
>
> It is more like a bug/misfeature in Squids implementation of persistent
> connections.
>
> I'll look into it.
>
> --
> Henrik Nordstrom
> Squid hacker
>
> On Wed, 24 Nov 1999, Federico E. Petronio wrote:
>
> >
> > What do this means? Who can I solve it?
> >
> > - Valid document was not found in the cache and only-if-cached
> > directive was specified.
> >
> > - You have issued a request with a only-if-cached cache
control
> > directive. The document was not found in the cache, or it required
> > revalidation prohibited by only-if-cached directive.
> >
> >
> > This happens when trying to use 'neighbor_type_domain' to treat a
> > sibling as a parent for certain domains.
>
> Apparently your sibling-parent does not know you are using it as a
> parent and hence allow you to fetch misses.
>
> Alex.
>
> Miguel A.L. Paraz wrote:
>
> > So I'm wondering, is the Safe_ports list still relevant?
> > What if we replace it with a list of Unsafe ports instead?
>
> It is up to you to define your network policy. Using a list of unsafe
> ports is fine if it agrees with your policy.
>
> --
> Henrik Nordstrom
> Squid hacker
>
> Heinz Ahrens wrote:
>
> > Is there a possibility to restrict all my MySQL-Users to one IP-address
> > at one time ??? The ip-address is variable. I don' t know the addresses
> > of our users. With such a proxy another user can not use the username
> > from another surfing user. So every user really needs an own user-id.
>
> I have a patch for discouraging people from sharing their password. See
> my Squid page <http://hem.passagen.se/hno/squid/> or wait for Squid-2.3.
>
> --
> Henrik Nordstrom
> Squid hacker
>
> Federico E. Petronio wrote:
> >
> > What do this means? Who can I solve it?
> >
> > - Valid document was not found in the cache and only-if-cached
> > directive was specified.
>
> This is part of a "internal" error message used to resolve false sibling
> hits. You are not supposed to ever see this in the browser.
>
> > This happens when trying to use 'neighbor_type_domain' to treat a
> > sibling as a parent for certain domains.
>
> Hmm..
>
> What Squid version are you running?
>
> Are you using never_direct?
>
> --
> Henrik Nordstrom
> Squid hacker
>
> Thanks for showing me the correct lokation of one part of the bug.
>
> The bug was in that Squid no longer sends a content-length header on
> IMS-HIT replies (as per RFC2616), and this caused the reply validity
> check below to fail. Squid-2.2 patch attached.
>
> --
> Henrik Nordstrom
> Squid hacker
>
> T. Esting wrote:
> >
> > Just a little more follow-up...
> >
> > src/client_side.c reads:
> >
> > /*
> > * Clear keepalive for NON-HEAD requests with invalid content
length
> > */
> > if (request->method != METHOD_HEAD)
> > if (http->entry->mem_obj->reply->content_length < 0)
> > request->flags.proxy_keepalive = 0;
> > /* Signal keep-alive if needed */
> > httpHeaderPutStr(hdr,
> > http->flags.accel ? HDR_CONNECTION : HDR_PROXY_CONNECTION,
> > request->flags.proxy_keepalive ? "keep-alive" : "close");
> >
> > What should ...reply->content_length be for a TCP_IMS_HIT reply?
> >
> > ________________________________________________________________
> > Get FREE voicemail, fax and email at http://voicemail.excite.com
> > Talk online at http://voicechat.excite.com
>
> Wed Nov 24 22:19:16 CET 1999
> Modified Files in squid/src
> client_side.c
>
> Oum.. there were more to it than I first thought. Not even HEAD worked as
> it should.
Received on Thu Nov 25 1999 - 01:59:26 MST