LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 06-10-2004, 07:56 PM   #1
mchitrakar
Member
 
Registered: Mar 2004
Posts: 93
Blog Entries: 1

Rep: Reputation: 15
how squid find ips


my curiosity question:

In normal windows proxy server, we have to specify from which ip (eth0) we connect to internet and to which ip (eth1) we connect to clients. But how squid automatically finds out to connect to ips.

hoping for ur help.
 
Old 06-11-2004, 07:27 AM   #2
maxut
Senior Member
 
Registered: May 2003
Location: istanbul
Distribution: debian - redhat - others
Posts: 1,188

Rep: Reputation: 50
as i know squid listents to all interfaces by the defaults. u must define clients (acl) and allow them to access internet. squid allow only localhost by the default.

do u ask differencies between M$ ISA and squid?
squid is a only cache proxy server. it is not complex as ISA.

if u wanna do like M$ ISA configuration, i can advice u to use squid in transparent mode. so u can configure iptables and squid together. also u wont have to configure browsers of clients.

here is necessary lines for squid.conf for transparent proxy:
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

here is iptables redirect command for transparent proxy:
iptables -t nat -A PREROUTING -s local_net/subnet -p tcp --dport 80 -j REDIRECT --to-port 3128

by the default squid listents to port 3128.
all http requests come from local network will be redirected to the 3128 port of linux. squid will check only http requests in transparent modes. other protocols must be controlled by iptables.

and another advice. use squidGuard to block addware warez porn and etc... it works well here.

www.squid-cache.org
www.squidguard.org
www.netfilter.org
 
Old 06-11-2004, 07:32 AM   #3
linuxxed
Member
 
Registered: Feb 2004
Posts: 273

Rep: Reputation: 30
This is normally achieved by (asssuming two interfaces):-

starting squid on localhost, configuring iptables to accept and deny on eth0 and eth1

or to be a bit more secure

starting squid by binding to the IP address of the interface. Your netstat output will look like xx.xx.xx.xx:PORT and not *.* LISTEN. Configure IPtables.


squid-users mailing list is your best bet.
 
Old 06-11-2004, 07:50 AM   #4
maxut
Senior Member
 
Registered: May 2003
Location: istanbul
Distribution: debian - redhat - others
Posts: 1,188

Rep: Reputation: 50
linuxxed
you still say sendmail??
we say qmail here.

i love linux because of this. u dont have to choose only one software. there are lots of choices.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid can listen in 2 different Ips xrtc Linux - Networking 1 11-15-2005 12:32 AM
Squid: acl'ing range of IPs ivanatora Linux - Software 4 05-05-2005 02:43 AM
how to define a specific range of IPs and/or multiple IPs in an iptables rule?... TheHellsMaster Linux - Security 9 09-20-2004 10:06 AM
find online user with squid in redhat8 netman_af Linux - Networking 1 08-11-2004 05:50 AM
Squid proxy and real IPs ivanatora Linux - Networking 2 07-19-2004 01:08 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 10:54 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration