Question

  Asked: Apr 11 2008   9:24 PM GMT
  Asked by: Sheldon.sc


Squid filtering with FC8


Fedora Linux, FC8, Squid, Proxy, ACL

I am trying to setup a squid proxy server. Squid 2.6.stable 17 .I have looked through various documentations but have not managed to get it work. I can start it up but it wont filter on the localhost (all web sites open up, even if I’ve set an acl to clowck it). if I try a remote computer on the same domain it gives me an error Internet Explorer cannot display the webpage. Ping from another computer works to the fedora server. I have port 3128 open.

This is the squid.conf file that I have.
-----------------------------------------
http_port 3128

maximum_object_size 32768 KB
maximum_object_size_in_memory 128 KB

cache_mem 256 MB
cache_dir ufs /var/spool/squid 70000 32 512

cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl our_network src 192.168.10.0/24
acl to_localhost dst 127.0.0.0/8

acl SSL_ports port 443 # SSL
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 563 70
acl CONNECT method CONNECT

acl custom_allowed_domains dstdomain "/etc/squid/allowed_domains.acl"
acl custom_denied_domains dstdomain "/etc/squid/denied_domains.acl"

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow our_network
http_access deny all
icp_access allow all
#miss_access allow all

http_access allow custom_allowed_domains
http_access deny custom_denied_domains
--------------------
Any help will be appreciated.
Thanks in advance.

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window

Answer Wiki (Improve, edit or add to this answer)


Start this Answer and Earn your Knowledge Points!

By clicking "Create Answer", you can write the answer to this question that can be improved upon by your peers using the Answer Wiki.

Browse more Questions and Answers on Linux, Networking and Security.

Looking for relevant Linux Whitepapers? Visit the SearchEnterpriseLinux.com Research Library.


Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register