Re: Sqid Problem from fatemi on 2000-07-27 (squid-users)

From: fatemi <fatemi@dont-contact.us>
Date: Thu, 27 Jul 2000 13:09:13 +0430

Hi,
you've found a speaking book ya!

its not common and a standard way to set proxy work on port 80,
but if you wish to,you must disable any application running on port 80
such as httpd.

explain your 2nd problem more i didn't get the problem

Best Regards

Mehrdad Fatemi
R&D Director

< AFRANET Co. ---------------------------- R&D Dept. >

-----Original Message-----
From: Jos_Pedro_Ribeiro <JRI@mail.nbporto.novabase.pt>
To: fatemi@kafsa.com <fatemi@kafsa.com>; fatemi@afranet.com
<fatemi@afranet.com>
Date: Wednesday, July 26, 2000 9:20 PM
Subject: RE: Sqid Problem

Hi again!One other problem, squid can't open the http port (80). How can i
solve this?
If you could tell me how to force access through one proxy server, because i
which people to use the new one (192.168.7.253) and so i have to alter the
squid.conf file in 192.168.7.254 to allow http access only to 192.168.7.253
requests.
Thanks

Pedro Ribeiro

-----Original Message-----
From: fatemi [mailto:fatemi@afranet.com]
Sent: quarta-feira, 26 de Julho de 2000 14:31
To: José Pedro Ribeiro
Cc: squid
Subject: Re: Sqid Problem

hi,
use as follow in order to let clients mentioned in myacl go directly :
acl myacl my.domain
never_direct allow !myacl

if you wish not to cache my.domain.com try
no_cache deny my.domain.com
be sure to purge objects of that domain first, 'cause it wont work if you
dont do that

it is possible in the case your clients internet access is only through a
proxy otherwise you should
setup a firewall (you can also do it on the same machine with
ipchains,iptables,... but it requires some changes in your network routing )

Hello again! Meanwhile i've altered the cache_peer to 192.168.7.254 parent
80 3130 and added the never_direct allow all line to the squid.conf file and
the server is working fine. When you email me the squid.conf with the
changes, i'll make all the changes you suggest.
Also could you tell me about an intranet and local domain access. I wish the
access to the intranet and the company's site to be direct not through the
proxy, and so i added the following lines to the squid.con file:

acl novabase dstdomain .novabase.pt
always_direct allow novabase

Shoudn't this make the proxy forward directly all the requests to the domain
.novabase.pt ( eg: www.novabase.pt ).
And about blocking access to certains hosts, it's poossible to use the ip
address of a certain host and block the access to the internet, isn't it?
Thanks once again. Cheers.

Pedro Ribeiro

-----Original Message-----
From: fatemi [mailto:fatemi@afranet.com]
Sent: quarta-feira, 26 de Julho de 2000 13:50
To: José Pedro Ribeiro
Subject: Re: Sqid Problem

Hi,
you should identify cachemgr users and hosts as "manager" tag in acls also
you should
use it as follow http://my.squid.cache:3128/cgi-bin/cachemgr.cgi
another way is to install webmin and use it for the purpose.

Best Regards

Mehrdad Fatemi
R&D Director

< AFRANET Co. ---------------------------- R&D Dept. >

Just one more thing, i can't seem to use the cachemgr.cgi. I don't
understand what to do to use it

Pedro Ribeiro

-----Original Message-----
From: fatemi [mailto:fatemi@afranet.com]
Sent: terça-feira, 25 de Julho de 2000 18:09
To: José Pedro Ribeiro
Cc: squid-users@ircache.net
Subject: Re: Sqid Problem

next step:
let me know the configuration you wish to have between your 2 proxies:
e.g:
I want to all queries be forwarded to proxy.ip.pt
i should mention that I think your problem arises in your parent definition,
also you didn't enable the never_direct tag,
answer the above question and I'll send you the correct squid.conf

Best Regards

Mehrdad Fatemi
R&D Director

< AFRANET Co. ---------------------------- R&D Dept. >

-----Original Message-----
From: Jos_Pedro_Ribeiro <JRI@mail.nbporto.novabase.pt>
To: fatemi@kafsa.com <fatemi@kafsa.com>; fatemi@afranet.com
<fatemi@afranet.com>
Date: Tuesday, July 25, 2000 9:19 PM
Subject: RE: Sqid Problem

Hi again! Thanks for the quick reply. Here's my squid.conf file and also the
message in cache.log.
By the way, i got a dns_children unreognized error in the squid.out file
when i tried to change this parameter to dns_children 7. Also if i use top
to see the memory usage of squid it appears to be still ( using oinly 2,1%
of the memory and 0% of cpu) even when i use as a proxy server. One last
thing, when i installed squid, stpe by step according to the manual, i
noticed that there was not script in /etc/rc.d/ini.t, so if i shutdown the
machine it won't restart automatically.
Cheers.

Pedro Ribeiro

-----Original Message-----
From: fatemi [mailto:fatemi@afranet.com]
Sent: terça-feira, 25 de Julho de 2000 17:19
To: José Pedro Ribeiro
Cc: squid-users@ircache.net
Subject: Re: Sqid Problem

lets go step by step,
let me know your cache.log messages when squid is starting up
also let me have your squid.conf,

Best Regards

Mehrdad Fatemi
R&D Director

< AFRANET Co. ---------------------------- R&D Dept. >

-----Original Message-----
From: José Pedro Ribeiro <JRI@mail.nbporto.novabase.pt>
To: 'fatemi@kafsa.com' <fatemi@kafsa.com>
Date: Tuesday, July 25, 2000 8:34 PM
Subject: Sqid Problem

>Hi! I'm a squid users list member and i'm only using a different email to
>contact you because i've sent some emails lately to the list and got no
>response. I've set up a proxy server using squid-2.3.STABLE3, Redhat6.2 and
>it's meant to substitute the one we're using now, but i can' t procceed to
>this before i garantee that it's working fine; so i tried using some hosts
>to test the new server but, the results are awful. Most of the pages take
to
>long to load and the connection gets timed out. I don't know if this is a
>DNS problem, or if it's because i'm using a proxy server to access data
>through another proxy server ( also running squid ), but i was looking
>through the emails on the list and saw your answer to nazila and decided to
>contact you. I also tired using top to see how much memory was being use by
>squid, but to my surprise there's no record of a squid proccess running (
>maybe it's because no host is accessing through it). Can you help on this
>transmition problem?
>Thanks in advance.
>
> Pedro Ribeiro
Received on Thu Jul 27 2000 - 02:46:05 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:54:36 MST