here is the log for bbc.co.uk . first and last msg of log so you can see the time delay. 335205033.183 841 10.51.100.240 TCP_MISS/200 24506 GET http://www.bbc.co.uk/ - DIRECT/212.58.244.66 text/html 1335205057.936 328 10.51.100.240 TCP_REFRESH_HIT/304 435 GET http://static.bbci.co.uk/wwhomepage-3.5/1.0.41/img/broadcast-sprite.png - DIRECT/80.239.148.70 image/png On Mon, Apr 23, 2012 at 11:12 PM, Muhammad Yousuf Khan <sirtcp@xxxxxxxxx> wrote: > Here you go with my squid.conf > > acl all src all > acl manager proto cache_object > acl localhost src 127.0.0.1/32 > acl to_localhost dst 127.0.0.0/8 > acl localnet src 10.0.0.0/8 # RFC1918 possible internal network > acl localnet src 172.16.0.0/12 # RFC1918 possible internal network > acl localnet src 192.168.0.0/16 # RFC1918 possible internal network > acl SSL_ports port 443 # https > acl SSL_ports port 563 # snews > acl SSL_ports port 873 # rsync > acl Safe_ports port 80 # http > acl Safe_ports port 21 # ftp > acl Safe_ports port 443 # https > acl Safe_ports port 70 # gopher > acl Safe_ports port 210 # wais > acl Safe_ports port 1025-65535 # unregistered ports > acl Safe_ports port 280 # http-mgmt > acl Safe_ports port 488 # gss-http > acl Safe_ports port 591 # filemaker > acl Safe_ports port 777 # multiling http > acl Safe_ports port 631 # cups > acl Safe_ports port 873 # rsync > acl Safe_ports port 901 # SWAT > acl purge method PURGE > acl CONNECT method CONNECT > > # sqstat > acl manager proto cache_object > acl webserver src 10.51.100.206/255.255.255.255 > http_access allow manager webserver > http_access deny manager > > > > # Skype > acl numeric_IPs dstdom_regex > ^(([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)|(\[([0-9af]+)?:([0-9af:]+)?:([0-9af]+)?\])):443 > acl Skype_UA browser ^skype > acl validUserAgent browser \S+ > > # for cheetah only > > #acl usman src 10.51.100.107 > #delay_pools 1 > #delay_class 1 1 > #delay_parameters 1 22000/22000 > #delay_access 1 allow usman > > > > #-------------Allow All ACL------------- > acl aci_lan src 10.51.100.0/24 > acl aci_general src 10.51.100.0/24 > > > #----My ip > acl my_ip src 10.51.100.240 > http_access allow my_ip > > > > # Testing delay pool > delay_pools 1 > delay_class 1 1 > delay_parameters 1 22000/10240000 > delay_access 1 allow aci_general > > > > > #---------------------Assurety Whitelist--------------- > acl aci_whitelist dstdomain "/blocklist/aci_list/whitelist" > http_access allow aci_whitelist > > #--Senior Allow Domainlist------------------------------ > acl aci_seniors dstdomain "/blocklist/aci_list/whitelist_seniors" > #---------------------------------------------------------#See > implimentation in ACI implimentation section > > #--------------------Assurety Hard_Block-------------- > acl aci_hard_block dstdomain "/blocklist/aci_list/hard_block_domains" > http_access deny aci_hard_block > > #--------------------Hard_Block EXE and E.T.C--------------------- > #acl mime_block_hard rep_mime_type -i "/blocklist/aci_list/hard_mime_block" > #http_reply_access deny mime_block_hard > > > #--General------Streaming Block------------------------------ > acl mime_block rep_mime_type -i "/blocklist/aci_list/time_mime_block" > > #--General Domainlist------------------------------ > acl aci_dest dstdomain "/blocklist/aci_list/time_block_domains" > > #--Seniors MAC list mouting------------------------------ > acl aci_mac_seniors arp "/blocklist/aci_list/mac_list_seniors" > > #--General Timing------------ Normal Days Working hours-------------- > acl aci_working_hours time MTWH 10:04-13:04 > acl aci_working_hours time MTWH 14:04-18:04 > #--General Timing-------------Friday------------------------ > acl aci_working_hours time F 10:04-13:04 > acl aci_working_hours time F 15:04-18:04 > > #--General/Seniors-------------Implimentation------------------ > http_access allow aci_seniors aci_mac_seniors > http_access deny aci_dest aci_working_hours aci_general > http_reply_access deny mime_block aci_working_hours aci_general !my_ip > > #skype deny > http_access deny numeric_IPS aci_working_hours > http_access deny Skype_UA aci_working_hours > http_access deny !validUserAgent aci_working_hours > > > > > > #Error Directory by Ykhan > error_directory /usr/share/squid/errors/en-us/ > #------------------------TheEnd---------------------- > http_access allow aci_lan > > > > http_access allow manager localhost > http_access deny manager > http_access allow purge localhost > http_access deny purge > http_access deny !Safe_ports > http_access deny CONNECT !SSL_ports > http_access allow localhost > http_access deny all > icp_access allow localnet > icp_access deny all > http_port 3128 > hierarchy_stoplist cgi-bin ? > access_log /var/log/squid/access.log squid > refresh_pattern ^ftp: 1440 20% 10080 > refresh_pattern ^gopher: 1440 0% 1440 > refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 > refresh_pattern (Release|Package(.gz)*)$ 0 20% 2880 > refresh_pattern . 0 20% 4320 > acl shoutcast rep_header X-HTTP09-First-Line ^ICY\s[0-9] > upgrade_http0.9 deny shoutcast > acl apache rep_header Server ^Apache > broken_vary_encoding allow apache > extension_methods REPORT MERGE MKACTIVITY CHECKOUT > hosts_file /etc/hosts > coredump_dir /var/spool/squid > > ##ykhan squid redirection to squidguard > > #redirect_program /usr/bin/squidGuard > #url_rewrite_program /usr/bin/squidGuard > #url_rewrite_children 5 > > > On Mon, Apr 23, 2012 at 8:42 PM, Eliezer Croitoru <eliezer@xxxxxxxxxxxx> wrote: >> On 23/04/2012 18:38, Muhammad Yousuf Khan wrote: >>> >>> well i have been experiencing slow Internet browsing. not very slow >>> but comparatively slower then IPCOP firewall. i can not understand how >>> come i diagnose the issue. >>> i mean. i increase the RAM , i checked the DNS every thing is fine but >>> my browser stuck at "connecting" ones it start download it do it fast >>> but then stop for something then start. i am not getting the clear >>> picture. can anyone help >>> >>> i am suing debian 6.0.4 with 2.7 stable squid. >>> >>> Thanks, >>> >>> MYK >> >> what is your exact problem? slow downloads? >> what is your squid setup?transparent ?regular forward proxy? >> what browser are you using? >> do you have some squid logs? or squid.conf? >> what dns server are you using? >> >> Regards, >> Eliezer >> >> -- >> Eliezer Croitoru >> https://www1.ngtech.co.il >> IT consulting for Nonprofit organizations >> eliezer <at> ngtech.co.il
