<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1450254399383_48245"><span>Hi </span></div><div id="yui_3_16_0_1_1450254399383_48244"><span><br></span></div><div id="yui_3_16_0_1_1450254399383_48032"><span id="yui_3_16_0_1_1450254399383_48220">thanks for you response. I compiled squid on debian jessie</span></div> <br><div class="qtdSeparateBR" id="yui_3_16_0_1_1450254399383_48097"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_1_1450254399383_48065" style="display: block;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_1_1450254399383_48064"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_1_1450254399383_48063"> <div dir="ltr" id="yui_3_16_0_1_1450254399383_48088"><font size="2" face="Arial" id="yui_3_16_0_1_1450254399383_48087"> On Wednesday, December 16, 2015 6:38 AM, Amos Jeffries <squid3@treenet.co.nz> wrote:<br></font></div> <br><br> <div class="y_msg_container" id="yui_3_16_0_1_1450254399383_48186">On 16/12/2015 12:53 a.m., behrad eslami wrote:<br clear="none">> Hi I add simple rule to ecap module and deny some url. I forground<br clear="none">> (squid -N -d10) all things work well. when i run service wtih mutiple<br clear="none">> workers, after a while some url not filter and user can open them in<br clear="none">> browsers. I compile Squid 3.5.12 and libecpa 1.0.0. squid compiled<br clear="none">> with below options:<br clear="none">> '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--libexecdir=${prefix}/lib/squid3' '--srcdir=.' '--disable-maintainer-mode' '--disable-dependency-tracking' '--disable-silent-rules' '--datadir=/usr/share/squid3' '--sysconfdir=/etc/squid3' '--mandir=/usr/share/man' '--enable-inline' '--disable-arch-native' '--enable-async-io=8' '--enable-storeio=aufs,rock' '--enable-removal-policies=lru,heap' '--enable-delay-pools' '--enable-cache-digests' '--enable-follow-x-forwarded-for' '--enable-eui' '--enable-icmp' '--enable-zph-qos' '--enable-ecap' '--disable-auto-locale' '--disable-translation' '--with-swapdir=/var/spool/squid3' '--with-logdir=/var/log/squid3' '--with-pidfile=/var/run/squid3.pid' '--with-filedescriptors=65536' '--with-large-files' '--with-default-user=proxy' '--enable-build-info= linux' '--enable-linux-netfilter' 'build_alias=x86_64-linux-gnu<br clear="none">' 'CFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wall' 'LDFLAGS=-fPIE -pie -Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security' '--disable-ipv6' '--disable-wccp' '--disable-auth-basic' '--disable-auth-digest' '--disable-auth-negotiate' '--disable-auth-ntlm' '--disable-external-acl-helpers' '--disable-url-rewrite-helpers' '--disable-storeid-rewrite-helpers' '--without-mit-krb5' '--without-heimdal-krb5' '--without-gnugss' '--disable-unlinkd' '--disable-ident-lookups' '--disable-esi' '--disable-select' '--disable-poll' '--disable-kqueue' '--disable-devpoll' '--enable-epoll'<br clear="none">> <br clear="none"><br clear="none">This looks like Debian based build settings. With a bunch of extra<br clear="none">things disabled. What OS is this being used on?<br clear="none"><br clear="none">NP: you can use --disable-auth to do all of the --disable-auth-*<br clear="none">settings in one simpler option.<br clear="none"><br clear="none"><br clear="none">> and my ecap config is:<br clear="none">> icap_enable on<br clear="none">> icap_send_client_ip on<br clear="none">> icap_client_username_encode on<br clear="none"><br clear="none">None of that is eCAP configuration. The 'i' (not 'e') at the start of<br clear="none">the directive names should give it away.<br clear="none"><br clear="none">This is the eCAP part:<div class="yqt9236524475" id="yqtfd51334"><br clear="none"><br clear="none">> loadable_modules /usr/local/lib/ecap_adapter_MY_processing.so<br clear="none">> ecap_enable on<br clear="none">> ecap_service ecapModifier respmod_precache \<br clear="none">> uri=ecap://www.deltaglobal.net/adapter_My_processing \<br clear="none">> victim=sadeghsalehi\<br clear="none">> replacement=***<br clear="none">> adaptation_access ecapModifier allow all<br clear="none">> loadable_modules /usr/local/lib/ecap_adapter_My_request.so<br clear="none">> ecap_enable onecap_service eReqmod reqmod_precache bypass=1 ecap://e-cap.org/ecap/services/My/request<br clear="none">> adaptation_access eReqmod allow all</div><br clear="none"><br clear="none">Looks correct, and should be working.<br clear="none"><br clear="none">Notice that you have "bypass=1" configured, so any problem down to just<br clear="none">a long delay in processing time can cause the second eCAP module to be<br clear="none">bypassed and do nothing.<br clear="none"><br clear="none">Your config looks fine. You will need to dig down into what the module<br clear="none">is actually doing and what it is having trouble with.<br clear="none"><br clear="none">NP: -N is no just foreground, but also disables all multi-process<br clear="none">activity by the workers. Perhapse there is a problem with the ecap<br clear="none">module being either loaded and/or used by multiple processes simultaneously.<br clear="none"><br clear="none">Amos<br clear="none"><br clear="none">_______________________________________________<br clear="none">squid-users mailing list<br clear="none"><a shape="rect" ymailto="mailto:squid-users@lists.squid-cache.org" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br clear="none"><a shape="rect" href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><div class="yqt9236524475" id="yqtfd71390"><br clear="none"></div><br><br></div> </div> </div> </div></div></body></html>