I have installed Fedora 14 on one of my computer's on network, to act as Gateway and also Cache.
eth0 -> Is connected to internet (ADSL Modem LAN Port)
eth1 -> Is connected to my lan
configuration of firewall is as follow:
Code:
iptables -A POSTROUTING -t nat -o eth0 -j ACCEPT
iptables -A PREROUTING -t nat -i eth1 -p tcp --dport http -j REDIRECT --to-port 3128
and configuration of squid.conf is as follow:
Code:
#
# Recommended minimum configuration:
#
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7 # RFC 4193 local private network range
acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl lan src 192.168.1.0/24
#
# Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# Deny requests to certain unsafe ports
http_access deny !Safe_ports
# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports
# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost
#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#
# Example rule allowing access from your local networks.
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
http_access allow localnet
http_access allow localhost
http_access allow lan
# And finally deny all other access to this proxy
http_access deny all
# Squid normally listens to port 3128
http_port 3128 transparent
# We recommend you to use at least the following line.
hierarchy_stoplist cgi-bin ?
# Uncomment and adjust the following to add a disk cache directory.
cache_dir ufs /var/spool/squid 5000 16 256
# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid
# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern (cgi-bin|\?) 0 0% 0
refresh_pattern . 0 20% 4320
refresh_pattern -i \.gif$ 180 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mime$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-dirup$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-dir$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-link$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-menu$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-text$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-index$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-image$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-sound$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-movie$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-telnet$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-binary$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-unknown$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-view$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^internal-download$ 180 20% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.bin$ 10080 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.oda$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.exe$ 10080 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.pdf$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ai$ 10080 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.eps$ 10080 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ps$ 10080 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.rtf$ 10080 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.Z$ 10080 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.gz$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.bz2$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.rar$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.bz$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.tgz$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.csh$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.dvi$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.hdf$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.latex$ 10080 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.lsm$ 10080 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.nc$ 10080 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.cdf$ 10080 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.sh$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.tcl$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.tex$ 10080 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.texi$ 10080 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.texinfo$ 10080 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.t$ 10080 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.roff$ 10080 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.tr$ 10080 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.man$ 10080 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.me$ 10080 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ms$ 10080 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.src$ 10080 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.zip$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.bcpio$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.cpio$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.gtar$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.rpm$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.deb$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.shar$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.sv4cpio$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.sv4crc$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.tar$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ustar$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.au$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.snd$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mp2$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mp3$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mpga$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.aif$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.aiff$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.aifc$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.wav$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.bmp$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ief$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.jpeg$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.jpg$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.jpe$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.tiff$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.tif$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ras$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.pnm$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.pbm$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.pgm$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ppm$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.rgb$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xbm$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xpm$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xwd$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.html$ 1440 20% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.htm$ 1440 20% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.css$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.js$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.c$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.h$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.cc$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.cpp$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.hh$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.m$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.f90$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.txt$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.asc$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.rtx$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.tsv$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.etx$ 1440 40% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mpeg$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mpg$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mpe$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.qt$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mov$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.avi$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.movie$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.cpt$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.hqx$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mwrt$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.msw$ 1440 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.doc$ 1440 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xls$ 1440 40% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ppt$ 14400 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.wk[s1234]$ 14400 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mif$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.sit$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.pict$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.pic$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.arj$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.lzh$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.lha$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.zlib$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i ^core$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.core$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.png$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.cab$ 14400 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xpi$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.class$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.java$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.dcr$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.dir$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.dxr$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.djv$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.djvu$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.dll$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.dms$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ez$ 14400 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ice$ 14400 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.iges$ 14400 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.igs$ 14400 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.kar$ 14400 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mid$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.midi$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mesh$ 14400 60% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.silo$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mxu$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.pdb$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.pgn$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ra$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ram$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.rm$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.sgml$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.sgm$ 1440 50% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.skd$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.skm$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.skp$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.skt$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.smi$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.smil$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.so$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.spl$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.swf$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.vcd$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.vrml$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.wbmp$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.wbxml$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.wmlc$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.wmlsc$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.wmls$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xht$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xhtml$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xml$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xsl$ 1440 60% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xyz$ 14400 70% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.3gp$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.data$ 14400 80% 43200 override-expire override-lastmod reload-into-ims
all thing's seems to be ok, but nothing cached, and when i monitor access.log file i see only the following output (TCP_MISS/200):
Code:
1292738435.606 942 192.168.56.2 TCP_MISS/200 8675 GET http://www.gnu.org/ - DIRECT/140.186.70.148 text/html
1292738436.004 723 192.168.56.2 TCP_MISS/200 2332 GET http://www.gnu.org/combo.css - DIRECT/140.186.70.148 text/css
1292738436.138 857 192.168.56.2 TCP_MISS/200 3779 GET http://www.gnu.org/layout.css - DIRECT/140.186.70.148 text/css
1292738436.160 858 192.168.56.2 TCP_MISS/200 1330 GET http://www.gnu.org/mini.css - DIRECT/140.186.70.148 text/css
1292738436.222 926 192.168.56.2 TCP_MISS/200 865 GET http://www.gnu.org/graphics/gnu-head-mini.png - DIRECT/140.186.70.148 image/png
1292738436.245 941 192.168.56.2 TCP_MISS/200 1326 GET http://www.gnu.org/print.css - DIRECT/140.186.70.148 text/css
1292738436.688 430 192.168.56.2 TCP_MISS/200 491 GET http://www.gnu.org/graphics/bullet.gif - DIRECT/140.186.70.148 image/gif
1292738436.790 1183 192.168.56.2 TCP_MISS/200 30641 GET http://www.gnu.org/graphics/t-desktop-4-small.jpg - DIRECT/140.186.70.148 image/jpeg
1292738436.993 743 192.168.56.2 TCP_MISS/200 6326 GET http://www.gnu.org/graphics/topbanner.png - DIRECT/140.186.70.148 image/png
1292738437.704 1877 192.168.56.2 TCP_MISS/200 31259 GET http://static.fsf.org/nosvn/appeal2010/fsf-1.png - DIRECT/140.186.70.30 image/png
1292738450.724 982 192.168.56.2 TCP_MISS/200 8675 GET http://www.gnu.org/ - DIRECT/140.186.70.148 text/html
what's the problem? is my configuration wrong?
thank's a lot
