Re: squid-users-digest Digest V00 #214

From: Assi Akafou Eric Désiré <assie@dont-contact.us>
Date: Thu, 13 Apr 2000 17:50:30 +0100

Hi all,

I have installed and configured squid.2.2.STABLE but i can't run it
when the system boot.
Any help with be appreciated

squid-users-digest-request@ircache.net wrote:

> Subject:
>
> squid-users-digest Digest Volume 00 : Issue 214
>
> Today's Topics:
> Squid & Advfs disks [ Regis.Carlier@univ-valenciennes.fr ]
> question regarding access.log file [ "K.DEEPAK" <kdeepak@india.adventnet ]
> Forwarding requests to another proxy [ Andrew Wilson <WilsonA@sapo.co.za> ]
> Re: chroot greedy! [ "=?iso-8859-1?Q?Jos=E9?= M. =?iso-8 ]
> Re: Forwarding requests to another p [ "Jens-S. Voeckler" <voeckler@rvs.un ]
> RE: patch error [ "R.Ilker Gokhan" <IlkerG@sumerbank. ]
> Firewall-Problem [ Heinz Ahrens <xf01070@gmx.de> ]
> AW: Firewall-Problem [ "Haag, Elmar" <haag@integraliscenta ]
> ACL 'included files' with no entries [ Bob Franklin <r.c.franklin@reading. ]
> subscribe [ "Daniel Malmgren" <midde.admin@klos ]
> Re: Multihomed Squid and others... [ Tilman Schmidt <Tilman.Schmidt@sema ]
> [Fwd: question regarding access.log [ "K.DEEPAK" <kdeepak@india.adventnet ]
> squid stats and log analysis [ "Ryan" <rklett@iafrica.com> ]
> AW: [Fwd: question regarding access. [ "Haag, Elmar" <haag@integraliscenta ]
>
> ----------------------------------------------------------------
>
> Subject: Squid & Advfs disks
> Date: Wed, 12 Apr 2000 11:04:43 +0200
> From: Regis.Carlier@univ-valenciennes.fr (Regis Carlier)
> To: squid-users@ircache.net
>
> Hello ,
>
> I'm going to install squid on a new machine ( digital alpha server )
>
> as cache disks , I have 6 disks of equal size .
>
> what is the best way to have the best performances ? :
>
> 1: 6 separates disks in UFS .
>
> 2: 6 seperates disk in differents advfs domains .
>
> 3: the 6 disks in 1 advfs domain with 6 filesets
>
> 4: the 6 disks in 1 advfs domain with 1 fileset ????
>
>
> TIA , Regis/
>
>
> --
> Carlier Regis, Service Informatique, Universite de Valenciennes
> Le Mont Houy , 59313 Valenciennes Cedex 9, FRANCE
> Tel : 03.27.51.13.31, mailto:Regis.Carlier@univ-valenciennes.fr
> PGP 2.6.2 Public Key is available on Keyservers
>
> ----------------------------------------------------------------
>
> Subject: question regarding access.log file
> Date: Wed, 12 Apr 2000 14:53:18 +0530
> From: "K.DEEPAK" <kdeepak@india.adventnet.com>
> To: Squid Users Mailing List <squid-users@ircache.net>
>
> Hi all,
>
> I just recently installed squid in my office. I have installed
> it in a linux RedHat 5.2 pc. Everything is working is fine. and Squid is
> really great in performance and cherrs to the developers who have
> developed it.
>
> But now i have got one question to ask. Can anyone tell me how to modify
> the access.log file in the /var/spool/squid/access.log location so that
> the access.log even logs the time . Presently my access.log file says
> something like this :
>
> ------------------------------------------------------------------------------------------------------------------------------------
>
> 955526205.308 100 192.168.1.99 TCP_IMS_HIT/304 159 GET
> http://192.168.1.45:8080/ - NONE/- -
>
> 955526206.108 2 192.168.1.99 TCP_IMS_HIT/304 157 GET
> http://192.168.1.45:8080/our_icons/ground.gif - NONE/- -
> 955526206.137 100 192.168.1.99 TCP_IMS_HIT/304 159 GET
> http://192.168.1.45:8080/our_icons/logo_small.gif - NONE/- -
> 955526208.359 1744 192.168.1.19 TCP_MISS/302 206 GET
> http://adforce.imgis.com/ - DIRECT/adforce.imgis.com -
> 955526208.368 2 192.168.1.19 TCP_HIT/200 2905 GET
> http://ak.cache.imgis.com/images/Ad185967St1Sz1Sq1Id1.gif - NONE/-
> image/gif
> 955526208.419 1798 192.168.1.19 TCP_MISS/302 429 GET
> http://w12.hitbox.com/wc3/G23382889.cgi - DIRECT/w12.hitbox.com
> text/html
> 955526210.620 231 192.168.1.54 TCP_REFRESH_HIT/200 39767 GET
> http://192.168.1.45:8080/javastuff/java_docs/jdk1.2/docs/api/javax/swing/package-summary.html
>
> - DIRECT/192.168.1.45 text/html
> 955526210.707 11 192.168.1.66 TCP_REFRESH_HIT/200 2894 GET
> http://192.168.1.45:8080/index.html - DIRECT/192.168.1.45 text/html
> --------------------------------------------------------------------------------------------------------------------------
>
> i think the first field of this file denotes the time . but this is in
> some other format ( I think it is the UTC format)
>
> I would like to know whether i can modify the first field of this file
> to say the time something like this
>
> Apr 12 14:00:27 . I want the time to get printed in the IST format. or
> in the format as the date command prints the date in a linux system.
>
> Can Anyone can help in this !!!!!!!!!!!!!!!!!!!!!!!
>
>
> I would be grateful enough................
>
>
> Eagerly waiting for the reply
>
>
> Thanks and Regards
>
> K.Deepak
> Network Engineer
> AdventNet Development Centre (India) Pvt. Ltd
>
> email : kdeepak@india.adventnet.com
>
>
>
>
>
>
>
>
> ----------------------------------------------------------------
>
> Subject: Forwarding requests to another proxy server
> Date: Wed, 5 Apr 2000 15:01:53 +0200
> From: Andrew Wilson <WilsonA@sapo.co.za>
> To: "'Squid Mailing List'" <squid-users@ircache.net>
>
> Hi
>
> How does one forward requests to another proxy server that does not support
> ICP?
>
> What if one want's to forward requests to more than 1 other proxy server?
> i.e. load balance between 2 other proxy servers?
>
>
> Regards,
> Andrew
>
>
> The information contained in this e-mail including any attachments is
> privileged and/or confidential. If you are not the intended recipient
> please reply immediately and delete this message. Please do not make use of
> it, nor disclose it's contents in any way. Thank you.
>
> ----------------------------------------------------------------
>
> Subject: Re: chroot greedy!
> Date: Wed, 12 Apr 2000 12:39:39 +0200
> From: "José M. Fandińo" <jm.fandino@fadesa.es>
> To: squid-users@ircache.net
>
> H.,
>
> Henrik Nordstrom wrote:
> >
> > That line traces bash/echo, not dnsserver.
>
> OOPPSSS!!! Mea culpa
> thanks Henrik
>
> > echo www.yahoo.com | strace dnsserver
> yes I found two missing libraries
> libnss_dns.so.1 and libresolv.so.2
> nsswitch.conf is ignored
>
>
> > You should consider seriously cutting down on the amount of binaries in
> > chroot/bin. Of the ones you have listed only unlinkd and dnsserver is
> > required. The rest belongs only in the "normal" system.
>
> shell's binariea and any utils will disappear in the ultimate clean.
> Their purpose is only for debug.
>
> Regards,
>
>
> --
> -----BEGIN GEEK CODE BLOCK-----
> Version: 3.1
> GCS d- s+: a- C+++ UL++++ P+ L+++ E--- W++ N+ o K- w---
> O+ M+ V- PS PE+ Y PGP+>+++ t+ 5 X+++ R- !tv b+++ DI-- D+++
> G e- h++ !r !z
> ------END GEEK CODE BLOCK------
>
> ----------------------------------------------------------------
>
> Subject: Re: Forwarding requests to another proxy server
> Date: Wed, 12 Apr 2000 12:49:19 +0200 (CEST)
> From: "Jens-S. Voeckler" <voeckler@rvs.uni-hannover.de>
> To: Andrew Wilson <WilsonA@sapo.co.za>
> CC: "'Squid Mailing List'" <squid-users@ircache.net>
>
> On Wed, 5 Apr 2000, Andrew Wilson wrote:
>
> ]How does one forward requests to another proxy server that does not support
> ]ICP?
>
> No problem, if it uses cache digests. Append the "no-query" option to your
> "cache_peer" line in order to avoid sending ICP.
>
> ]What if one want's to forward requests to more than 1 other proxy server?
> ]i.e. load balance between 2 other proxy servers?
>
> Append the "round-robin" option to all your "cache_peer" line which are to
> be load-balanced. Grouping will be done by "cache_peer_access" or
> "cache_peer_domain". See the documentation to "cache_peer" in
> squid.conf.default.
>
> Le deagh dhůrachd,
> Dipl.-Ing. Jens-S. Vöckler (voeckler@rvs.uni-hannover.de)
> Institute for Computer Networks and Distributed Systems
> University of Hanover, Germany; +49 511 762 4726
>
> ----------------------------------------------------------------
>
> Subject: RE: patch error
> Date: Wed, 12 Apr 2000 15:56:28 +0300
> From: "R.Ilker Gokhan" <IlkerG@sumerbank.com.tr>
> To: "'Henrik Nordstrom '" <hno@hem.passagen.se>
> CC: "''squid-users@ircache.net' '" <squid-users@ircache.net>
>
> Hi Henrik,
> Thanks for your reply.I have tried to manually add the failing lines
> to my cf.data.pre and I have compiled again the squid. But i received
> an error when i have run my squid. Anyway, So how can i set the ip
> authenticaion with my smb_auth so that userA can't use internet
> browser on a seperate computer when userA login to the squid before.
>
> Thanks again...
> Ilker G.
>
> -----Original Message-----
> From: Henrik Nordstrom
> To: R.Ilker Gokhan
> Cc: 'squid-users@ircache.net'
> Sent: 4/11/00 11:51 PM
> Subject: Re: patch error
>
> The patch is failing because some of the surrounding squid.conf
> (cf.data.pre) lines was changed by another patch.
>
> If you take a look in cf.data.pre.rej it isn't that hard to manually
> add
> in the failing lines to your cf.data.pre.
>
> Actually the binary will probably work even if you don't change
> cf.data.pre, but it might be a bit confusing to not have the correct
> documentation in squid.conf.default and I cannot guarantee it works
> (depends on time_t and int having the same size).
>
> --
> Henrik Nordstrom
> Squid hacker
>
> R.Ilker Gokhan wrote:
> >
> > Hi Henrik and all,
> >
> > I've got the following error while i was appling the
> > squid-2.3.STABLE1.strict_ip_authenticate_ttl.patch on my squid.
>
> >
> > #cd /usr/local/squid/src
> > # patch -p0 < patchfile
> > #patching file 'squid/src/cf.data.pre'
> > #Hunk #1 FAILED at 995
> > #Hunk #2 FAILED at 1018
> >
> > In addition I haven't got any error for acl.c and struct.h.
> >
> > Thank in advance..
> >
> > Ilker G.
> > Project Leader
> > NDD
> > Istanbul / Turkey
> ----------------------------------------------------------------
>
> Subject: Firewall-Problem
> Date: Wed, 12 Apr 2000 15:33:05 +0200 (MEST)
> From: Heinz Ahrens <xf01070@gmx.de>
> To: squid-users@ircache.net
>
> Hallo Squid-Users,
>
> i use Squid on a firewall, works fine.
> Now i want to use squid on an intern-proxy-cache in my LAN over phttpd
> (FW-Software from IBM)
>
> That works fine, too. But my firewall is slow and there are too many
> users.
>
> The problem is phttpd. Sometimes there is no connections from my
> intern-squid-cache to:
>
> telnet firewall 8080
>
>
> (i modified the 4 parameters with no success)
>
>
> What can i do:
>
> 1. Use another version of phttpd ?
> 2. Use SOCKS ?
> 3. Use NAT ?
> 4. Use extern IPs in my LAN ?
> 5. Squid on the Firewall without caching (what about performance)
> 6. Squid in my DMZ over squid-gw
> 7. something else
>
> Isnt there someone who has got the same configuration. A small firewall
> and too many users.
>
>
> Greeting
>
> Heinz Ahrens
>
>
>
>
> --
>
>
>
> Sent through GMX FreeMail - http://www.gmx.net
>
> ----------------------------------------------------------------
>
> Subject: AW: Firewall-Problem
> Date: Wed, 12 Apr 2000 15:39:49 +0200
> From: "Haag, Elmar" <haag@integraliscentaur.de>
> To: "'Heinz Ahrens'" <xf01070@gmx.de>, squid-users@ircache.net
>
> Never use a WWW-proxy or any other applications directly on a firewall
> system. It is against all security rules. Place the proxy on a seperate
> machine into a DMZ. Establish a proxy chain (next_proxy) from internal
> caching-Proxy to DMZ proxy.
>
> Greetings,
>
>
> Elmar
>
>
> > -----Ursprüngliche Nachricht-----
> > Von: Heinz Ahrens [mailto:xf01070@gmx.de]
> > Gesendet: Mittwoch, 12. April 2000 15:33
> > An: squid-users@ircache.net
> > Betreff: Firewall-Problem
> >
> >
> > Hallo Squid-Users,
> >
> > i use Squid on a firewall, works fine.
> > Now i want to use squid on an intern-proxy-cache in my LAN over phttpd
> > (FW-Software from IBM)
> >
> > That works fine, too. But my firewall is slow and there are too many
> > users.
> >
> > The problem is phttpd. Sometimes there is no connections from my
> > intern-squid-cache to:
> >
> > telnet firewall 8080
> >
> >
> > (i modified the 4 parameters with no success)
> >
> >
> > What can i do:
> >
> > 1. Use another version of phttpd ?
> > 2. Use SOCKS ?
> > 3. Use NAT ?
> > 4. Use extern IPs in my LAN ?
> > 5. Squid on the Firewall without caching (what about performance)
> > 6. Squid in my DMZ over squid-gw
> > 7. something else
> >
> > Isnt there someone who has got the same configuration. A
> > small firewall
> > and too many users.
> >
> >
> > Greeting
> >
> > Heinz Ahrens
> >
> >
> >
> >
> > --
> >
> >
> >
> > Sent through GMX FreeMail - http://www.gmx.net
> >
>
> ----------------------------------------------------------------
>
> Subject: ACL 'included files' with no entries
> Date: Wed, 12 Apr 2000 14:56:41 +0100 (GMT Daylight Time)
> From: Bob Franklin <r.c.franklin@reading.ac.uk>
> To: squid-users@ircache.net
>
> Hi,
>
> [Using Squid 2.2-stable3 + patches.]
>
> I have some files of entries referenced in an ACL, e.g.:
>
> acl blocked-hosts src "/opt/squid/etc/blocked-hosts"
> ...
> http_access deny blocked-hosts
>
> However, when I have no entries in 'blocked-hosts', I get an error when
> [re-]starting Squid - presumably you can't have empty included files (the
> file had comments, but no 'active' entries).
>
> Can this be 'fixed' so you can have empty files - or is there a
> workaround? Some of these files are built automatically, so it would be
> awkward commenting out the corresponding 'http_access' line (or whatever).
>
> Thanks in advance,
>
> - Bob
>
>
> --
> Bob Franklin <r.c.franklin@reading.ac.uk> Tel. +44 (0)118 931 8432
> Systems and Communications, IT Services, The University of Reading, UK
>
> ----------------------------------------------------------------
>
> Subject: subscribe
> Date: Wed, 12 Apr 2000 16:06:23 +0200
> From: "Daniel Malmgren" <midde.admin@klostergardsskolan.lund.se>
> To: "'Squid-users'" <squid-users@ircache.net>
>
> subscribe
>
> ----------------------------------------------------------------
>
> Subject: Re: Multihomed Squid and others...
> Date: Wed, 12 Apr 2000 16:20:27 +0200
> From: Tilman Schmidt <Tilman.Schmidt@sema.de>
> To: Hans Akerman <akerman@spektr.eu.org>
> CC: squid-users@ircache.net
>
> At 21:14 11.04.00 +0200, Hans Akerman wrote:
>
> > > Stephen Amadei wrote:
> > >
> > > I was wondering if there was some sort of way to make put two interfaces
> > > on a Linux system, one for each BGP4 announced route, and force Squid to
> > > divide up the outgoing source address so that half the squid traffic comes
> > > back on each of my T1's?
> >
> >route add -net 0.0.0.0 netmask 128.0.0.0 gw isp1router
> >route add -net 128.0.0.0 netmask 128.0.0.0 gw isp2router
>
> I doubt that IP addresses are evenly distributed between MSB 0 and 1.
> A netmask of 0.0.0.1 might work better.
>
> >;-)
>
> Anyway.
>
> --
> Tilman Schmidt E-Mail: Tilman.Schmidt@sema.de (office)
> Sema Group Koeln, Germany tilman@schmidt.bn.uunet.de (private)
>
> ----------------------------------------------------------------
>
> Subject: [Fwd: question regarding access.log file]
> Date: Wed, 12 Apr 2000 20:00:18 +0530
> From: "K.DEEPAK" <kdeepak@india.adventnet.com>
> To: jm.fandino@fadesa.es
> CC: Squid Users Mailing List <squid-users@ircache.net>,
> voeckler@rvs.uni-hannover.de
>
> Hi all,
> can anyone help me by answering out my queries.
>
>
> thanks
>
> k.deepak
>
> ----------------------------------------------------------------
>
> Subject: question regarding access.log file
> Date: Wed, 12 Apr 2000 14:53:18 +0530
> From: "K.DEEPAK" <kdeepak@india.adventnet.com>
> Organization: AdventNet Inc.
> To: Squid Users Mailing List <squid-users@ircache.net>
>
> Hi all,
>
> I just recently installed squid in my office. I have installed
> it in a linux RedHat 5.2 pc. Everything is working is fine. and Squid is
> really great in performance and cherrs to the developers who have
> developed it.
>
> But now i have got one question to ask. Can anyone tell me how to modify
> the access.log file in the /var/spool/squid/access.log location so that
> the access.log even logs the time . Presently my access.log file says
> something like this :
>
> ------------------------------------------------------------------------------------------------------------------------------------
>
> 955526205.308 100 192.168.1.99 TCP_IMS_HIT/304 159 GET
> http://192.168.1.45:8080/ - NONE/- -
>
> 955526206.108 2 192.168.1.99 TCP_IMS_HIT/304 157 GET
> http://192.168.1.45:8080/our_icons/ground.gif - NONE/- -
> 955526206.137 100 192.168.1.99 TCP_IMS_HIT/304 159 GET
> http://192.168.1.45:8080/our_icons/logo_small.gif - NONE/- -
> 955526208.359 1744 192.168.1.19 TCP_MISS/302 206 GET
> http://adforce.imgis.com/ - DIRECT/adforce.imgis.com -
> 955526208.368 2 192.168.1.19 TCP_HIT/200 2905 GET
> http://ak.cache.imgis.com/images/Ad185967St1Sz1Sq1Id1.gif - NONE/-
> image/gif
> 955526208.419 1798 192.168.1.19 TCP_MISS/302 429 GET
> http://w12.hitbox.com/wc3/G23382889.cgi - DIRECT/w12.hitbox.com
> text/html
> 955526210.620 231 192.168.1.54 TCP_REFRESH_HIT/200 39767 GET
> http://192.168.1.45:8080/javastuff/java_docs/jdk1.2/docs/api/javax/swing/package-summary.html
>
> - DIRECT/192.168.1.45 text/html
> 955526210.707 11 192.168.1.66 TCP_REFRESH_HIT/200 2894 GET
> http://192.168.1.45:8080/index.html - DIRECT/192.168.1.45 text/html
> --------------------------------------------------------------------------------------------------------------------------
>
> i think the first field of this file denotes the time . but this is in
> some other format ( I think it is the UTC format)
>
> I would like to know whether i can modify the first field of this file
> to say the time something like this
>
> Apr 12 14:00:27 . I want the time to get printed in the IST format. or
> in the format as the date command prints the date in a linux system.
>
> Can Anyone can help in this !!!!!!!!!!!!!!!!!!!!!!!
>
>
> I would be grateful enough................
>
>
> Eagerly waiting for the reply
>
>
> Thanks and Regards
>
> K.Deepak
> Network Engineer
> AdventNet Development Centre (India) Pvt. Ltd
>
> email : kdeepak@india.adventnet.com
>
>
>
>
>
>
>
>
> ----------------------------------------------------------------
>
> Subject: squid stats and log analysis
> Date: Wed, 12 Apr 2000 16:40:32 +0200
> From: "Ryan" <rklett@iafrica.com>
> To: "Squid Users Mailing List" <squid-users@ircache.net>
>
> Hello everyone I wonder if anyone can recommend any good tools whereby
> I can run stats on the different log files, and obtain information
> oertaining to:-user stats-cache stats and performance
> issues-performance stats-site stats Any recommendations would be
> greatly appreciated. King RegardsRyan
> ----------------------------------------------------------------
>
> Subject: AW: [Fwd: question regarding access.log file]
> Date: Wed, 12 Apr 2000 16:49:42 +0200
> From: "Haag, Elmar" <haag@integraliscentaur.de>
> To: "'kdeepak@india.adventnet.com'" <kdeepak@india.adventnet.com>
> CC: Squid Users Mailing List <squid-users@ircache.net>
>
> See the FAQ about how to change the elapsed time in milliseconds to
> "readable" format using perl.
>
> greetings
>
> Elmar Haag
>
> > -----Ursprüngliche Nachricht-----
> > Von: K.DEEPAK [mailto:kdeepak@india.adventnet.com]
> > Gesendet: Mittwoch, 12. April 2000 16:30
> > An: jm.fandino@fadesa.es
> > Cc: Squid Users Mailing List; voeckler@rvs.uni-hannover.de
> > Betreff: [Fwd: question regarding access.log file]
> >
> >
> > Hi all,
> > can anyone help me by answering out my queries.
> >
> >
> > thanks
> >
> > k.deepak
> >
>
Received on Thu Apr 13 2000 - 11:52:43 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:52:56 MST