Hi! That's a dansguardian issue: I had something similar, but specially with SSL sites. I just got tired of dansguardian (I made it "work", but from time to time the problem would come back), and started to use plain squid ACLs for small lists, and squidguard. I hope this helps, Ildefonso Camargo On Thu, Aug 19, 2010 at 10:18 AM, Johnson, S <sjohnson@xxxxxxxxxxxxxxx> wrote: > > I put a new squid/dansguardian in place duplicating what I had for a couple of other networks. The proxy is configured for everyone going through one of two groups with the ability in the 2nd group to elevate their privileges to bypass the filter by clicking on a link in the denied page. The authentication is done to our AD server using winbind. > > All of that worked great in testing with fewer than 10 people using it... > > However, when deployed to 50-100 people, I was getting sporadic page drops when browsing. Sometimes there would be a long pause then a page would be displayed: "Unable to connect" in firefox. Other times it would immediately drop into that "Unable to connect" page. By clicking refresh the page would then open up. There seemed to be no rhyme or reason why sometimes it would drop. Even very low browse sites like google would sometimes do this. When this happens, there is absolutely ZERO in the log files that the user even tried to browse a site. > > The utilization on the server is very low (under 5% for proc) and there's plenty of RAM (~4gb). > > I examined Squid for performance / proc / memory adjustments but nothing really jumped out at me as a potential issue. Do you think that this may be an issue with Squid or perhaps winbind not able to do the authentication? > > Thanks. >
