Squid intercepting proxy on bridging PC

cantab · 03-22-2010, 08:40 AM

I am trying to set up squid as an intercepting proxy on a bridging (as opposed to NAT/routing) PC. I followed this guide on freshmeat - however, when I started squid it said the httpd_accel_* lines were unrecognized, so I commented them.

I have the bridging side working alright, but when I try to access a website from a machine using the bridge, Squid gives an error saying it cannot find the site, and only listing the non-domain part of the URL.

For example, if I try to go to www.linuxquestions.org/questions/ , the Squid error page says it cannot find the server /questions/

I'm using Squid 3 on Ubuntu Karmic. (I don't have any reason for using Squid 3 over 2.whatever, I just picked the newer one).

Anyone know what is going wrong?

Also, a side-question - since no doubt someone will ask for my squid config file, what's an easy way to strip the comments so it's not half a mile long when I post it?

mario.almeida · 03-22-2010, 12:20 PM

Hi,

Answer to your side-question

egrep -v '(#|^$)' squid.conf > new_squid.conf

better you post squid.conf someone might help you

cantab · 03-23-2010, 10:36 AM

OK, here's my /etc/squid3/squid.conf

Code:

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 192.168.1.0/24
acl SSL_ports port 443
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access deny all
icp_access deny all
htcp_access deny all
http_port 3128
hierarchy_stoplist cgi-bin ?
access_log /var/log/squid3/access.log squid
refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern (cgi-bin|\?)	0	0%	0
refresh_pattern .		0	20%	4320
icp_port 3130
coredump_dir /var/spool/squid3