LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 10-11-2013, 01:40 AM   #1
anggraeni.pratiwi
LQ Newbie
 
Registered: Sep 2013
Location: indonesia
Distribution: ubuntu server
Posts: 7

Rep: Reputation: Disabled
Squid Proxy Server (Squid3)


Brothers.... would u mind to give me a complete squid configuration?? I need your help..
 
Old 10-11-2013, 01:51 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
squid will come with a default configuration out of the box. we can't help you without you actually giving us specific information about your environments and requriements.
 
Old 10-11-2013, 01:58 AM   #3
anggraeni.pratiwi
LQ Newbie
 
Registered: Sep 2013
Location: indonesia
Distribution: ubuntu server
Posts: 7

Original Poster
Rep: Reputation: Disabled
ya, squid has default configuration.
i will make content filtering project using squidguard.
But before configuring squidguard, i should configuring squid proxy.
the squid configuration include access control, cache location, log, port configuration, tuning cache & object, refresh pattern, etc..
 
Old 10-11-2013, 02:06 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
yes, correct. So did you want to ask a question or not?
 
Old 10-11-2013, 02:09 AM   #5
anggraeni.pratiwi
LQ Newbie
 
Registered: Sep 2013
Location: indonesia
Distribution: ubuntu server
Posts: 7

Original Poster
Rep: Reputation: Disabled
do you have a squid configuration?
i already have. But the result, all content are blocked, include google, gmail, etc.
i confused.
 
Old 10-11-2013, 02:27 AM   #6
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
As above, we can't just give you "a config" that makes NO SENSE. That's for you to decide how you want YOU system to work.
 
Old 10-11-2013, 02:34 AM   #7
anggraeni.pratiwi
LQ Newbie
 
Registered: Sep 2013
Location: indonesia
Distribution: ubuntu server
Posts: 7

Original Poster
Rep: Reputation: Disabled
acl anggiserver src 192.168.103.1

acl bigfile url_regex -i\.exe
acl bigfile url_regex -i\.mp3
acl bigfile url_regex -i\.vgf
acl bigfile url_regex -i\.gz
acl bigfile url_regex -i\.rpm
acl bigfile url_regex -i\.zip
acl bigfile url_regex -i\.rar
acl bigfile url_regex -i\.avi
acl bigfile url_regex -i\.mpeg
acl bigfile url_regex -i\.mpe
acl bigfile url_regex -i\.mpg
acl bigfile url_regex -i\.qt
acl bigfile url_regex -i\.ram
acl bigfile url_regex -i\.iso
acl bigfile url_regex -i\.rm
acl bigfile url_regex -i\.raw
acl bigfile url_regex -i\.wav

### Limiting Bandwidth
delay_pools 1

delay_class 1 1
delay_parameters 1 32000/32000 16000/16000 6000/64000
delay_access 1 allow anggiserver

delay_access 1 deny all

### Pembatasan akses
acl noakses url_regex "/etc/squid3/forbidden.txt"
acl noakses url_regex "/etc/squid3/forbiddenfrase.txt"
##acl waktu_pagi time M T W H F 07:15-11:30
##acl waktu_sore time M T W H F 13:30-16:00

##http_access deny noakses waktu_pagi
##http_access deny noakses waktu_sore

### Access Control
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl purge method PURGE
acl CONNECT method CONNECT

cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF

### Cache Location
cache_dir aufs /cache1 40000 94 256
cache_dir aufs /cache2 40000 94 256
cache_dir aufs /cache3 40000 94 256
cache_dir aufs /cache4 40000 94 256

### LOG
access_log /var/log/squid3/access.log
cache_log /var/log/squid3/cache.log

http_access allow anggiserver
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
http_reply_access allow all
icp_access allow all

### Konfigurasi Port
http_port 8080
cache_mgr support@unirow.ac.id
visible_hostname proxy1.unirow.ac.id

### Tuning Cache & Object
cache_mem 6 MB
cache_swap_low 98
cache_swap_high 99
maximum_object_size 128 MB
maximum_object_size_in_memory 32 KB

ipcache_size 2048
ipcache_low 98
ipcache_high 99

### Refresh Pattern
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

refresh_pattern -i \.(class|css|js|gif|jpg)$ 10080 100% 43200
refresh_pattern -i \.(jpe|jpeg|png|bmp|tif)$ 10080 100% 43200
refresh_pattern -i \.(tiff|mov|avi|qt|mpeg)$ 10080 100% 43200
refresh_pattern -i \.(mpg|mpe|wav|au|mid)$ 10080 100% 43200
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 100% 43200
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200

##refresh_pattern ^http://*.google.*/.* 720 100% 4320
refresh_pattern ^http://*.facebook.*/.* 720 100% 4320
refresh_pattern ^http://*.yahoo.*/.* 720 100% 4320
refresh_pattern ^http://*.gmail.*/.* 720 100% 4320
refresh_pattern ^http://*.detik.*/.* 720 100% 4320
refresh_pattern ^http://*.viva.*/.* 720 100% 4320

negative_ttl 2 minutes


that's my configuration. is that true??
But why all site are blocked?
 
Old 10-11-2013, 03:18 AM   #8
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
Offhand I'd guess it's becuase you're not coming from "anggiserver", but there's all sorts of stuff in there that could be affecting it. You've given ZERO logs or debug output here, so our advice is limited.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: How to Setup Squid3 as Transparent Proxy on Ubuntu Server 12.04 LXer Syndicated Linux News 0 06-10-2012 04:30 AM
LXer: How to Install and Configure Proxy Server with Squid3 on Ubuntu Server 12.04 LTS LXer Syndicated Linux News 0 05-31-2012 10:40 AM
transparent proxy with squid3 proxy help wanted to get it working keevill Linux - Newbie 11 02-21-2011 02:59 AM
squid proxy server configuration & distribution of internet without proxy gaurav_gupta082 Linux From Scratch 2 07-31-2010 11:25 AM
Using ISA Server as Parent Proxy and want to setup Squid as dwonstream proxy tauseef1 Red Hat 1 04-09-2008 01:03 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 04:43 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration