[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: squid verdoppelt die Dateigröße...



Hmmm komisch...

verdoppelt jetzt Squid auch die E-Mails?

Am 2008-12-16 08:41:17, schrieb Andreas Kretschmer:
> - in Deinem Falle scheint der Proxy dafür verantwortlich zu sein

So irgendwie...

> - um das genauer zu untersuchen, wäre vielleicht mal eine kleine
>   Testdatei nötig, die mit/ohne Proxy geladen wird und dann mal schauen,
>   das da der Unterschied ist. Ist Byte für Byte oder gar Bit für Bit
>   jeweils verdoppelt, steht eine Kopie der Datei am Ende nochmals (oder
>   gar am Anfang?) oder ist der Platz mit Bibelversen gefüllt?

Also wenn ich PDFs von

    <http://www.national.com/>
oder
    <http://www.maxim-ic.com/>

runterlade, verdoppelt sich die größe.  Wenn ich jedoch von meiner
eigenen Domain

    <http://electronica.tamay-dogan.net/>

runterlade, ist alles ok...

> - eine Kopie der squid.conf wäre auch nicht schlecht.

Sei froh, das ich dieses monster gestriped habe:

----[ '/etc/squid/squid.conf' ]-----------------------------------------
# -----------------------------------------------------------------------------
# NETWORK OPTIONS
# -----------------------------------------------------------------------------

http_port 192.168.0.65:3128 transparent

# -----------------------------------------------------------------------------
# OPTIONS WHICH AFFECT THE NEIGHBOR SELECTION ALGORITHM
# -----------------------------------------------------------------------------

hierarchy_stoplist cgi-bin ?

acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY

acl apache rep_header Server ^Apache
broken_vary_encoding allow apache

# -----------------------------------------------------------------------------
# OPTIONS WHICH AFFECT THE CACHE SIZE
# -----------------------------------------------------------------------------

cache_mem 8 MB

cache_swap_low 90
cache_swap_high 95

maximum_object_size 16384 KB
minimum_object_size 0 KB

maximum_object_size_in_memory 16 KB

# -----------------------------------------------------------------------------
# LOGFILE PATHNAMES AND CACHE DIRECTORIES
# -----------------------------------------------------------------------------

cache_dir ufs /var/spool/squid 100 16 256

access_log /var/log/squid/access.log squid

cache_log /var/log/squid/cache.log

cache_store_log /var/log/squid/store.log

emulate_httpd_log off

debug_options ALL,1

log_fqdn off

# -----------------------------------------------------------------------------
# OPTIONS FOR EXTERNAL SUPPORT PROGRAMS
# -----------------------------------------------------------------------------

ftp_user Squid@
ftp_passive on
ftp_sanitycheck on
ftp_telnet_protocol on

check_hostnames on

allow_underscore off

hosts_file /etc/hosts

authenticate_cache_garbage_interval 1 hour
authenticate_ttl 1 hour
authenticate_ip_ttl 0 seconds


# -----------------------------------------------------------------------------
# OPTIONS FOR TUNING THE CACHE
# -----------------------------------------------------------------------------

refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern .		0	20%	4320

quick_abort_min 32 KB
quick_abort_max 128 KB
quick_abort_pct 80

range_offset_limit 0 KB

collapsed_forwarding on

refresh_stale_hit 0 seconds

# -----------------------------------------------------------------------------
# TIMEOUTS
# -----------------------------------------------------------------------------

forward_timeout 4 minutes
connect_timeout 1 minute
peer_connect_timeout 30 seconds
read_timeout 15 minutes
request_timeout 5 minutes
persistent_request_timeout 1 minute
client_lifetime 1 day

half_closed_clients on

pconn_timeout 120 seconds
ident_timeout 10 seconds
shutdown_lifetime 30 seconds

# -----------------------------------------------------------------------------
# ACCESS CONTROLS
# -----------------------------------------------------------------------------

#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443		# https
acl SSL_ports port 563		# snews
acl SSL_ports port 873		# rsync
acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443		# https
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
acl Safe_ports port 631		# cups
acl Safe_ports port 873		# rsync
acl Safe_ports port 901		# SWAT
acl purge method PURGE
acl CONNECT method CONNECT

# Only allow cachemgr access from localhost
http_access deny  manager !localhost
http_access allow manager localhost

# Only allow purge requests from localhost
http_access allow purge localhost
http_access deny  purge

# Deny requests to unknown ports
http_access deny  !Safe_ports

# Deny CONNECT to other than SSL ports
http_access deny  CONNECT !SSL_ports

# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost

########################################################################
########################################################################
#                                                                      #
#    INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS    #
#                                                                      #
########################################################################
acl our_networks src 192.168.0.0/24
http_access allow our_networks
http_access allow localhost

acl michelle.konzack proto cache_object
http_access allow michelle.konzack

########################################################################
########################################################################

http_access allow all

http_reply_access allow all

icp_access allow all

# -----------------------------------------------------------------------------
# ADMINISTRATIVE PARAMETERS
# -----------------------------------------------------------------------------

cache_mgr admin@tamay-dogan.net

mail_from squid@router.private.tamay-dogan.net

mail_program mail

cache_effective_user proxy

cache_effective_group proxy

httpd_suppress_version_string off

visible_hostname router.private.tamay-dogan.net

umask 027

# -----------------------------------------------------------------------------
# MISCELLANEOUS
# -----------------------------------------------------------------------------

logfile_rotate 0

append_domain .private.tamay-dogan.net

memory_pools on
memory_pools_limit 0

via on

forwarded_for on

log_icp_queries on

cachemgr_passwd warumbistdusoneugierig all
#cachemgr_passwd hihihisagiiiiiichnicht info stats/objects
#cachemgr_passwd disable all

store_avg_object_size 13 KB

store_objects_per_bucket 50

client_db on

netdb_low 900
netdb_high 1000

netdb_ping_period 5 minutes

buffered_logs off

reload_into_ims off

icon_directory /usr/share/squid/icons

global_internal_static on

short_icon_urls off

error_directory /usr/share/squid/errors/English

maximum_single_addr_tries 1

retry_on_error off

snmp_port 0
snmp_access deny all
snmp_incoming_address 192.168.0.65
snmp_outgoing_address 255.255.255.255

as_whois_server whois.ra.net

wccp_router 0.0.0.0
wccp_version 4
wccp_address 0.0.0.0

# -----------------------------------------------------------------------------
# DELAY POOL PARAMETERS (all require DELAY_POOLS compilation option)
# -----------------------------------------------------------------------------

delay_pools 0

max_open_disk_fds 0

offline_mode off

uri_whitespace strip

strip_query_terms on

coredump_dir /var/spool/squid

redirector_bypass off

ignore_unknown_nameservers on

digest_generation on

client_persistent_connections on
server_persistent_connections on

persistent_connection_after_error off

detect_broken_pconn off

balance_on_multiple_ip on

request_entities off

high_response_time_warning 0
high_page_fault_warning 0
high_memory_warning 0

store_dir_select_algorithm least-load

ie_refresh off

vary_ignore_expire off

sleep_after_fork 0

minimum_expiry_time 60 seconds

relaxed_header_parser on

------------------------------------------------------------------------


Thanks, Greetings and nice Day/Evening
    Michelle Konzack
    Systemadministrator
    24V Electronic Engineer
    Tamay Dogan Network
    Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack   Apt. 917                  ICQ #328449886
+49/177/9351947    50, rue de Soultz         MSN LinuxMichi
+33/6/61925193     67100 Strasbourg/France   IRC #Debian (irc.icq.com)

Attachment: signature.pgp
Description: Digital signature


Reply to: