Re: [squid-users] deny cache of all .asp dynamic pages

> thx a lot again !
>
> it works now, but I have other question.
>
> is this correct:
>
> hierarchy_stoplist cgi-bin ? \.asp

 (prevents peers being asked for anything matchign \.asp)

> acl QUERY urlpath_regex cgi-bin \? \.asp
> cache deny QUERY
>
> and can I leave this with the code above you suggested or I should comment
> out?
>

The latter QUERY acl content you may as well remove again.

Amos

>
>
>
> On Mon, Feb 16, 2009 at 2:34 AM, Amos Jeffries <squid3_at_treenet.co.nz>
> wrote:
>>> you mean this:
>>>
>>> acl ASP urlpath_regex .asp$
>>> cache deny .mydomain ASP
>>>
>>> then I get errors, restarting squid.
>>>
>>> or you mean:
>>>
>>> acl mydomain dstdomain .mydomain.net
>>> cache deny mydomain ASP
>>> always_direct allow mydomain
>>>
>>>
>>
>> I mean this:
>>
>> acl mydomain dstdomain .mydomain.net
>> acl ASP urlpath_regex .asp$
>> cache deny mydomain ASP
>>
>>
>> Amos
>>
>>>
>>>
>>>
>>>
>>> On Mon, Feb 16, 2009 at 2:08 AM, Amos Jeffries <squid3_at_treenet.co.nz>
>>> wrote:
>>>>> I've tried:
>>>>>
>>>>> acl mydomain dstdomain .mydomain.net
>>>>> cache deny mydomain
>>>> (denies caching of EVERYTHING at "mydomain.net" and "*.mydomain.net")
>>>>
>>>>> always_direct allow mydomain
>>>>
>>>> (forces proxy to nedver use peers when retrieving data for
>>>> "mydomain.net"
>>>> and "*.mydomain.net")
>>>>
>>>>
>>>> What I suggested was using:
>>>> cache deny mydomain ASP
>>>>
>>>>
>>>> Amos
>>>>
>>>>>
>>>>> but it doesn't help !
>>>>>
>>>>>
>>>>> the code in my first posting seems to help, but I need some more
>>>>> tests.
>>>>>
>>>>>
>>>>> I'd like to try refresh_pattern for .asp as well.
>>>>> how is the code for refresh_pattern according to .asp?
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> On Mon, Feb 16, 2009 at 1:01 AM, Amos Jeffries <squid3_at_treenet.co.nz>
>>>>> wrote:
>>>>>>> thx,
>>>>>>> the problem is my lines deny all .asp webpages, but howto configure
>>>>>>> to
>>>>>>> deny asp only from the one certain domain?
>>>>>>
>>>>>> create another acl ... dstdomain line listing the domain. then
>>>>>> combine
>>>>>> them together on the "cache deny" line. Preferrably with the faster
>>>>>> dstdomain ACL first/leftmost.
>>>>>>
>>>>>>>
>>>>>>> btw. could you pls post lines howto use acl, and "refresh_pattern"
>>>>>>> for
>>>>>>> .asp?
>>>>>>
>>>>>> refresh_pattern does not support ACLs. It's a global regex matcher.
>>>>>>
>>>>>>>
>>>>>>> greetings
>>>>>>> Piotr
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> On Sun, Feb 15, 2009 at 11:54 PM, Amos Jeffries
>>>>>>> <squid3_at_treenet.co.nz>
>>>>>>> wrote:
>>>>>>>>> hi
>>>>>>>>>
>>>>>>>>> I have Squid-3.0.PRE5 installed on debian etch and we have
>>>>>>>>> problems
>>>>>>>>
>>>>>>>> Please use the squid3 version from Lenny, its much more stable and
>>>>>>>> less
>>>>>>>> buggy than the beta.
>>>>>>>>
>>>>>>>>> with some .asp webpages:
>>>>>>>>> DOUBLE click the Login button, page cannot be found etc.
>>>>>>>>>
>>>>>>>>> Howto configure squid.conf to deny cache of all dynamic .asp
>>>>>>>>> webpages?
>>>>>>>>>
>>>>>>>>> I've added to my squid.conf the following lines:
>>>>>>>>>
>>>>>>>>> hierarchy_stoplist \.asp ?
>>>>>>>>> acl QUERY1 urlpath_regex \.asp \?
>>>>>>>>> cache deny QUERY1
>>>>>>>>>
>>>>>>>>> I've found something like:
>>>>>>>>>
>>>>>>>>> acl ASP urlpath_regex .asp$
>>>>>>>>> cache deny ASP
>>>>>>>>>
>>>>>>>>> as well, but I'm not sure which lines are correct?
>>>>>>>>
>>>>>>>> They both are. Pick the one that you like the look of most.
>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> should I put both to squid.conf?
>>>>>>>>>
>>>>>>>>
>>>>>>>> To meet your stated request either will do.
>>>>>>>>
>>>>>>>> However I'd urge you to consider carefully WHY, you need to do
>>>>>>>> this.
>>>>>>>> If the nature of the .asp pages is breaking your Squid, then its
>>>>>>>> breaking
>>>>>>>> everyones elses' cache as well.
>>>>>>>>
>>>>>>>> Squid will cache what it is allowed to, the asp web app should be
>>>>>>>> giving
>>>>>>>> it correct Cache-Control and Expires headers. If these are missing
>>>>>>>> squid
>>>>>>>> will estimate based on last-change.
>>>>>>>>
>>>>>>>> For dynamic pages we currently recommend dropping the old default
>>>>>>>> QUERY
>>>>>>>> acl, and using "refresh_pattern -i (/cgi-bin/\?) 0 0% 0" as the
>>>>>>>> second
>>>>>>>> to
>>>>>>>> last pattern. This makes squid discard all dynamic objects without
>>>>>>>> working
>>>>>>>> expiry info immediately, while also letting those good sites that
>>>>>>>> provide
>>>>>>>> expiry to work.
>>>>>>>>
>>>>>>>> Amos
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>
>>
>>
>>
>
Received on Mon Feb 16 2009 - 02:41:15 MST