Hot answers tagged

3

OK, I got it now. After a few check on the FreeBSD forum, I can now confirm that FreeBSD jails act a bit like some Swiss cheese as long as SHM objects are concerned. Indeed, FreeBSD does not provide any isolation at all for SHM objects: all jails can access all SHM objects, system-wide, with no way to prevent it. The error mentioned in this question is ...


2

By default the second column represents the time in milliseconds the request took: The native format for Squid The format is: time elapsed remotehost code/status bytes method URL rfc931 peerstatus/peerhost type See also http://wiki.squid-cache.org/Features/LogFormat for more details about the logformat.


2

TXT_DB error number 2 means DB_ERROR_INDEX_CLASH. You've tried to submit a certificate into the OpenSSL CA database with the same index twice. The cause of this is usually submitting a certificate to the database that contains the same Serial Number or same Common Name. For the latter, check for the unique_subject option in the intermediate/openssl.conf ...


1

According to the tutorial, I should be able to change the Common Name during this process That tutorial tells you to generate a new key with openssl genrsa AND new CSR with openssl req -new AND create the cert from the CSR with openssl ca. (Although like too many people it wrongly says a cert is created by 'sign[ing] the CSR'. The CA does not sign the CSR....


1

GateSentry generates the certificates of the host that you are accessing on-the-fly so that your browser believes that it is accessing the original site. That certificate has to be signed by a Certification Authority that your browser trusts otherwise you'll get error messages such as the one you've seen. GateSentry comes with a default CA certificate ...


1

Here you can find fine-tuned squid.conf for rpm caching: https://github.com/spacewalkproject/spacewalk/blob/master/proxy/installer/squid.conf You just should modify memory and port setting.


1

Three obvious things are wrong here. allow rules should come before deny. dstdom_regex only matches the hostname portion of the URL, everything else is ignored - you probably want a url_regex or urlpath_regex instead. dstdom_regex "/etc/squid/white.acl" does not do what you think it does. It does not load a file containing a bunch of acls. If you want to ...


1

Transparently proxying http traffic on port 80 is relatively simple - set up squid, and use iptables rules to direct all port 80 traffic to it. Works for other ports too. Transproxying encrypted https traffic is far more difficult. Impossible unless you performn a man-in-the-middle attack on the traffic and the certificate chain. You might want to look ...


1

In BSD netstat -p is protocol, whereas it is program in the netstat from net-tools, the BSD version appears to have no equivalent. man is almost always your friend in these cases. BSD has sockstat which gets you what you want but this is does not appear to be there on the OS X I have access to. As already mentioned lsof is probably your most cross ...


1

Listing the open files with -i should show you the ports in use lsof -i If there's too much output lsof -i | grep squid Works with Linux & OS X


1

I've been struggling to add this functionality as well. The problem with squish is, it's squishing users that is not supposed to be squished. The workaround that I used was to use the daily data from lightsquid stored in /var/lib/lightsquid/report/<date>/.total. Since lightsquid data is updated every 10 minutes, it also gave my squid setup the ...


1

After searching for more than a week, I found the solution in my way using html reports of sarg - Squid Analysis Report Generator, and extracting its data using simple bash script. sarg stores its data in /var/www/sarg directory. To generate monthly report we have to manually use this command: sarg -d 01/08/2015-31/08/2015. After this command I have ...


1

According to squid wiki page user data quota is under development (see below link). squish can be used to limit data per IP per month. (using squid) Features/Quota - Squid Web Proxy Wiki http://wiki.squid-cache.org/Features/Quota


1

Probably via a custom helper that squid would call, say http://wiki.squid-cache.org/Features/Redirectors that looks at the client IP, consults a database of how much bandwidth they've used (perhaps parsed from the squid logs by something else), and redirects them to a sorry page if over. This will probably require a bunch of coding, if such code does not yet ...



Only top voted, non community-wiki answers of a minimum length are eligible