Re: [squid-users] minor issues with squid

From: Leonardo Carneiro <lscarneiro_at_veltrac.com.br>
Date: Thu, 28 May 2009 09:38:54 -0300

RoLaNd RoLaNd escreveu:
> Hello all,
>
Hello Roland,
> i'm facing minor problems with squid as i newly configured it.
> hope you could help me with the following issues:
>
> 1- certain extensions are blocked without any reason. i havent blocked them in any ACL. for example .zip and .dmg
>
> 2- complete URL's for a certain page arent opened though the main domain could.
> for example www.hp.com opens normaly.. though http://www.hp.com/support/BatteryReplacement if clicked would be denied.
>
> 3- downloaded files arent cached (please correct me if i'm wrong). the same file downloaded at two different pcs using squid takes the same amount of time to be retrieved off the internet. even though one user finished the download before the other has started it.
>
Squid does not cache large files (at least in the default config). You
can configure to hold larger objects in disk, or even in memory, but
this can have a high cost in terms of resources.
> 4- streaming still occurs even though i've set the following config access lists:
>
>
> acl webRadioReq1 req_mime_type -i ^video/x-ms-asf$
> acl webRadioReq2 req_mime_type -i ^application/vnd.ms.wms-hdr.asfv1$
> acl webRadioReq3 req_mime_type -i ^application/x-mms-framed$
> acl webRadioRep1 rep_mime_type -i ^video/x-ms-asf$
> acl webRadioRep2 rep_mime_type -i ^application/vnd.ms.wms-hdr.asfv1$
> acl webRadioRep3 rep_mime_type -i ^application/x-mms-framed$
> acl WMP browser Windows-Media-Player/*
> http_access deny blockfiles
> http_access deny WMP all
> http_access deny webRadioReq1 all
> http_access deny webRadioReq2 all
> http_access deny webRadioReq3 all
>
> http_reply_access deny webRadioRep1 all
> http_reply_access deny webRadioRep2 all
> http_reply_access deny webRadioRep3 all
>
> # streaming download
> acl fails rep_mime_type ^.*mms.*
> acl fails rep_mime_type ^.*ms-hdr.*
> acl fails rep_mime_type ^.*x-fcs.*
> acl fails rep_mime_type ^.*x-ms-asf.*
> acl fails2 urlpath_regex dvrplayer mediastream mms://
> acl fails2 urlpath_regex \.asf$ \.afx$ \.flv$ \.swf$
> acl deny_rep_mime_flashvideo rep_mime_type -i video/flv
> acl deny_rep_mime_shockwave rep_mime_type -i ^application/x-shockwave-flash$
> acl x-type req_mime_type -i ^application/octet-stream$
> acl x-type req_mime_type -i application/octet-stream
> acl x-type req_mime_type -i ^application/x-mplayer2$
> acl x-type req_mime_type -i application/x-mplayer2
> acl x-type req_mime_type -i ^application/x-oleobject$
> acl x-type req_mime_type -i application/x-oleobject
> acl x-type req_mime_type -i application/x-pncmd
> acl x-type req_mime_type -i ^video/x-ms-asf$
>
> acl x-type2 rep_mime_type -i ^application/octet-stream$
> acl x-type2 rep_mime_type -i application/octet-stream
> acl x-type2 rep_mime_type -i ^application/x-mplayer2$
> acl x-type2 rep_mime_type -i application/x-mplayer2
> acl x-type2 rep_mime_type -i ^application/x-oleobject$
> acl x-type2 rep_mime_type -i application/x-oleobject
> acl x-type2 rep_mime_type -i application/x-pncmd
> acl x-type2 rep_mime_type -i ^video/x-ms-asf$
> http_reply_access deny deny_rep_mime_flashvideo
> http_reply_access deny deny_rep_mime_shockwave
> #streaming files
> http_access deny fails
> http_reply_access deny fails
> http_access deny fails2
> http_reply_access deny fails2
> http_access deny x-type
> http_reply_access deny x-type
> http_access deny x-type2
> http_reply_access deny x-type2
>
> _________________________________________________________________
> Windows Live�: Keep your life in sync. Check it out!
> http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t1_allup_explore_012009
>

-- 
*Leonardo de Souza Carneiro*
*Veltrac - Tecnologia em Log�stica.*
lscarneiro_at_veltrac.com.br <mailto:lscarneiro_at_veltrac.com.br>
http://www.veltrac.com.br <http://www.veltrac.com.br/>
/Fone Com.: (43)2105-5601/
/Av. Higien�polis 1601 Ed. Eurocenter Sl. 803/
/Londrina- PR/
/Cep: 86015-010/
	
Received on Thu May 28 2009 - 12:39:08 MDT

This archive was generated by hypermail 2.2.0 : Thu May 28 2009 - 12:00:01 MDT