grep -v -e ^\s*$ -e ^# /etc/squid3/squid.conf

Hi Acid,

Hope you've had a nice weekend. Here are is the contents of my .CONF file.

http_port 3128
icp_port 3130
cache_peer proxy1.eu.webscanningservice.com parent 3128 3130 proxy-only
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
access_log /var/log/squid3/squid3.log
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl WrkAll src 192.168.1.1-192.168.1.254
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow WrkAll
http_access allow localhost
http_reply_access allow all
icp_access allow all
coredump_dir /var/spool/squid3

can you use the proxy directly? that service requires a known ip address for connectivity and such like.

I've allowed my whole workstation range for now. I actually managed to get it to serve 1 or 2 pages on Friday, it was very very slow but it did work.

Well if there was nothing in the squid.out and access logs, *I* would be looking at getting a traffic capture of a failing connection, you'll quite possibly instantly see what's gone awry if you look at the http level stuff in wireshark.

Hi Chris,

Bearing in mind I use Message Labs, am I right in thinking that I need to point to the Message Labs server in "Other Caches" - I've done this and set it as proxy only. I guess what I'm asking is, if I don't set this up. How does Squid know how to find Message Labs and ultimately internet connectivity. We don't have a direct connection to the net, it's all done through Message Labs.

Cheers.

Hi Chris,

I've now tested my Squid server with a direct line to the Internet and it works perfectly. I've had a word with Message Labs and they have told me they don't support ICP. Would this be why my server when using Message Labs as parent proxy only is not working?

Cheers.

I'm not that famliar with icp to be hoenst, suggests in the directives for cache_peer to set the icp port as 7 for a non-icp peer. alternatively set it to port 0. additionally i think it's a default, but explicitly set "prefer_direct off" to encourage the use of the upstream cache.