[squid-users] squid-users Digest, Vol 37, Issue 50

Fri Sep 22 02:37:23 UTC 2017

Hello. Yesterday virus attack my squid proxy server. Lost my all config. Can you give me congfig file normal for Windows. 50gb size on hdd for cash, youtube, fb cashing, 8 gb ram. Forgot many command line for quick access. Forgot link for example.

Sent from Yahoo Mail for iPhone

On Friday, September 22, 2017, 9:03 AM, squid-users-request at lists.squid-cache.org wrote:

Send squid-users mailing list submissions to
    squid-users at lists.squid-cache.org

To subscribe or unsubscribe via the World Wide Web, visit
    http://lists.squid-cache.org/listinfo/squid-users
or, via email, send a message with subject or body 'help' to
    squid-users-request at lists.squid-cache.org

You can reach the person managing the list at
    squid-users-owner at lists.squid-cache.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of squid-users digest..."

Today's Topics:

  1. Re: When the redirect [301, 302, 307] is cached by Squid?
      (Amos Jeffries)
  2. time error problem (Alex Gutiérrez Martínez)
  3. Re: When the redirect [301, 302,    307] is cached by Squid?
      (kAja Ziegler)
  4. delay pool not workin (Alex Gutiérrez Martínez)
  5. Re: time error problem (Amos Jeffries)
  6. Re: delay pool not workin (Amos Jeffries)

----------------------------------------------------------------------

Message: 1
Date: Fri, 22 Sep 2017 00:24:11 +1200
From: Amos Jeffries <squid3 at treenet.co.nz>
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] When the redirect [301, 302, 307] is cached
    by Squid?
Message-ID: <5d9406a2-0192-de83-a2fc-2ca577b6c07b at treenet.co.nz>
Content-Type: text/plain; charset=utf-8; format=flowed

On 21/09/17 22:16, kAja Ziegler wrote:
>    Thats what the "must-revalidate" means. It should work better with
>    just max-age or Expires header - and with a longer value than 60 sec
>    since this is supposed to be a *permanent* situation.
> 
> 
> As I know "must-revalidate" mean "refuse to return stale responses to 
> the user even if they say that stale responses are acceptable" - cached 
> object must be revalidated.
> 
> Max-age=60 was only used for testing.
> 
> The results of my testing:
> 
> - redirect 302 or 307 - to be cached needs Cache-Control max-age > 0 or 
> Expires "access plus 1 seconds"
> - redirect 301 - to be cached needs Cache-Control max-age > 60 or 
> Expires "access plus 61 seconds"
> 

There is no >60 need on the 301. Just me suggesting that 60sec is too 
short caching time for a _permanent_ thing.

> This is strange because I thought that 301 is always cached without 
> Cache-Control or Expires headers. And I can't find any information in 
> the documentation which describes such behaviour.

It should be, so long as it is fresh so that means it does depend on 
refresh_pattern saying it is fresh when no controls are present.

Amos

------------------------------

Message: 2
Date: Thu, 21 Sep 2017 08:50:57 -0400
From: Alex Gutiérrez Martínez <alex at dvm.esines.cu>
To: squid-users at lists.squid-cache.org
Subject: [squid-users] time error problem
Message-ID: <5a4045a0-b19f-3fd0-677d-fa6f2bdb8ba8 at dvm.esines.cu>
Content-Type: text/plain; charset="utf-8"; Format="flowed"

Hello everyone, i have an ubuntu 14.04 configured for time zone "Havana" 
on meridian -5. But when i get an error page on my squid, for whatever 
reason, it puts the time zone as if it were in meridian 0. Any idea why?

Thanks in advance

-- 
Saludos Cordiales

Lic. Alex Gutiérrez Martínez

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170921/b2e55dac/attachment-0001.html>

------------------------------

Message: 3
Date: Thu, 21 Sep 2017 15:16:04 +0200
From: kAja Ziegler <ziegleka at gmail.com>
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] When the redirect [301, 302,    307] is cached
    by Squid?
Message-ID:
    <CAMuNeAuvGAPRg5cqzGjRVwtt3y03j4MXhu9ofhhOiYEs4op3ug at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

>
> There is no >60 need on the 301. Just me suggesting that 60sec is too
> short caching time for a _permanent_ thing.

There is - may be some misconfiguration in my squid.conf.

If I set max-age to values from interval <1;60> only 302 and 307 redirects
were cached (HIT) and no 301. When I increased the max-age value to 61 then
the 301 redirect was cached too.

But you are right, that the cause of no-caching the 301 redirect is the min
value of:

refresh_pattern .        0    20%    4320

But for redirects 302 and 307 the above-mentioned refresh_pattern is ignored.

My source server is Apache and the corresponding configuration is:

RewriteRule /img301.jpg /img.svg [R=301,L,E=rcache:1]

RewriteRule /img302.jpg /img.svg [R=302,L,E=rcache:1]
RewriteRule /img307.jpg /img.svg [R=307,L,E=rcache:1]

Header always set Cache-Control "max-age=3" env=rcache

zigi

On Thu, Sep 21, 2017 at 2:24 PM, Amos Jeffries <squid3 at treenet.co.nz> wrote:

> On 21/09/17 22:16, kAja Ziegler wrote:
>
>>    Thats what the "must-revalidate" means. It should work better with
>>    just max-age or Expires header - and with a longer value than 60 sec
>>    since this is supposed to be a *permanent* situation.
>>
>>
>> As I know "must-revalidate" mean "refuse to return stale responses to the
>> user even if they say that stale responses are acceptable" - cached object
>> must be revalidated.
>>
>> Max-age=60 was only used for testing.
>>
>> The results of my testing:
>>
>> - redirect 302 or 307 - to be cached needs Cache-Control max-age > 0 or
>> Expires "access plus 1 seconds"
>> - redirect 301 - to be cached needs Cache-Control max-age > 60 or Expires
>> "access plus 61 seconds"
>>
>>
> There is no >60 need on the 301. Just me suggesting that 60sec is too
> short caching time for a _permanent_ thing.
>
> This is strange because I thought that 301 is always cached without
>> Cache-Control or Expires headers. And I can't find any information in the
>> documentation which describes such behaviour.
>>
>
> It should be, so long as it is fresh so that means it does depend on
> refresh_pattern saying it is fresh when no controls are present.
>
> Amos
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170921/0d759f92/attachment-0001.html>

------------------------------

Message: 4
Date: Thu, 21 Sep 2017 17:07:28 -0400
From: Alex Gutiérrez Martínez <alex at dvm.esines.cu>
To: squid-users at lists.squid-cache.org
Subject: [squid-users] delay pool not workin
Message-ID: <0e306c67-faed-9b4d-56e3-14f546e626a8 at dvm.esines.cu>
Content-Type: text/plain; charset="utf-8"; Format="flowed"

Could someone be so kind  to explain to me why my rules do not work on 
my delays pools?

i got this acl "lento", in spanish means slow

acl lento url_regex -i "/etc/squid3/bloqueo/lento"

his format is the next:

.youtube.com

.facebook.com

My delay config is the next:

###############################################################################
#Delay#
###############################################################################
delay_pools 3

#Canal 1 extensiones.
delay_class 1 2
delay_parameters 1 32768/32768 32768/32768
delay_access 1 deny !sociales lento navegacion !extensiones
#delay_access 1 deny all

#Canal 2 para usuarios.
delay_class 2 2
delay_parameters 2 65536/65536 32768/32768
delay_access 2 deny !navegacion extensiones lento sociales
#delay_access 2 deny all

#Canal 2 para usuarios.
delay_class 3 1
delay_parameters 3 16384/16384
delay_access 3 deny extensiones navegacion sociales !lento
#delay_access 2 deny all

my problem is simple, on my sqstat show the url's of "lento" with 0 on 
delay parameter, i do not understand why it happens. the program should 
show 3

thanks in advance

-- 
Saludos Cordiales

Lic. Alex Gutiérrez Martínez

Tel. +53 7 2710327

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170921/02ee6868/attachment-0001.html>

------------------------------

Message: 5
Date: Fri, 22 Sep 2017 12:59:12 +1200
From: Amos Jeffries <squid3 at treenet.co.nz>
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] time error problem
Message-ID: <5a5eb457-9dd4-1fef-1c34-8442179c6ed4 at treenet.co.nz>
Content-Type: text/plain; charset=utf-8; format=flowed

On 22/09/17 00:50, Alex Gutiérrez Martínez wrote:
> Hello everyone, i have an ubuntu 14.04 configured for time zone "Havana" 
> on meridian -5. But when i get an error page on my squid, for whatever 
> reason, it puts the time zone as if it were in meridian 0. Any idea why?
> 

Because the Internet runs on UTC not your local timezone.
Error pages are sent to anyone trying to access your proxy regardless of 
location (eg denying external access through it).

Amos

------------------------------

Message: 6
Date: Fri, 22 Sep 2017 13:03:49 +1200
From: Amos Jeffries <squid3 at treenet.co.nz>
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] delay pool not workin
Message-ID: <7b5d9b7d-7280-1cd6-4d8c-3257c267c942 at treenet.co.nz>
Content-Type: text/plain; charset=utf-8; format=flowed

On 22/09/17 09:07, Alex Gutiérrez Martínez wrote:
> Could someone be so kind  to explain to me why my rules do not work on 
> my delays pools?
> 
> 
> i got this acl "lento", in spanish means slow
> 
> acl lento url_regex -i "/etc/squid3/bloqueo/lento"
> 
> his format is the next:
> 
> 
> .youtube.com
> 
> .facebook.com
> 

First problem: you are putting domains in dstdomain format into a 
full-URL regex ACL.

Use dstdomain ACL type for these. Much faster.

> 
> My delay config is the next:
> 
> 
> ###############################################################################
> #Delay#
> ###############################################################################
> delay_pools 3
> 
> #Canal 1 extensiones.
> delay_class 1 2
> delay_parameters 1 32768/32768 32768/32768
> delay_access 1 deny !sociales lento navegacion !extensiones
> #delay_access 1 deny all
> 
> #Canal 2 para usuarios.
> delay_class 2 2
> delay_parameters 2 65536/65536 32768/32768
> delay_access 2 deny !navegacion extensiones lento sociales
> #delay_access 2 deny all
> 
> #Canal 2 para usuarios.
> delay_class 3 1
> delay_parameters 3 16384/16384
> delay_access 3 deny extensiones navegacion sociales !lento
> #delay_access 2 deny all
> 
> 

Second problem: deny, deny all. Nothing allowed to use these pools.

Amos

------------------------------

Subject: Digest Footer

_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

------------------------------

End of squid-users Digest, Vol 37, Issue 50
*******************************************

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170922/1ce2c83d/attachment-0001.html>