LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 11-29-2010, 07:42 PM   #1
trscookie
Member
 
Registered: Apr 2004
Location: oxford
Distribution: gentoo
Posts: 463

Rep: Reputation: 30
Unhappy enabling squid proxy stuff:


Hello all,

I am trying to disable some sites based on various words in my restricted.conf, however for some reason it does not enforce this rule.

Also does anybody know how to enable spotify through proxy? I have configured the proxy settings in spotify however it reports that it cant connect.

Below is my squid.conf


Code:
#
########### squid.conf ###########
visible_hostname GlobalEntree
http_port 3128

# Authentication
auth_param basic program /usr/bin/php /usr/lib64/squid/sql_auth.php
auth_param basic children 5
auth_param basic realm GlobalEntree proxy, please enter your username and password
auth_param basic credentialsttl 1 hour
auth_param basic casesensitive off

## ports allowed
acl Safe_ports port 80
acl Safe_ports port 4070
http_access deny !Safe_ports

## ssl ports/method allowed
acl SSL_ports port 443
acl CONNECT method CONNECT
http_access deny CONNECT !SSL_ports

## protocols allowed
acl Safe_proto proto HTTP SSL
http_access deny !Safe_proto

## methods allowed
acl Safe_method method CONNECT GET HEAD POST
http_access deny !Safe_method

# Access Control Lists
acl class proxy_auth REQUIRED
acl BadSites url_regex "/etc/squid/restricted.conf"
acl all src 0.0.0.0/0
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8

http_access allow class
http_access deny BadSites

## timeouts
forward_timeout 30 seconds
connect_timeout 30 seconds
read_timeout 30 seconds
request_timeout 30 seconds
persistent_request_timeout 1 minute
client_lifetime 20 hours

## disable caching
cache deny all
cache_dir null /tmp

## logs
logformat combined [%tl] %>A %{Host}>h "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
access_log /var/log/squid/access.log combined
cache_store_log /var/log/squid/store.log
cache_log /var/log/squid/cache.log
logfile_rotate 2

## support files
coredump_dir /tmp
# pid_filename /tmp/squid.pid

########### END squid.conf ###########
#
Kind regards,
Adrian.
 
Old 12-01-2010, 04:36 AM   #2
trscookie
Member
 
Registered: Apr 2004
Location: oxford
Distribution: gentoo
Posts: 463

Original Poster
Rep: Reputation: 30
anybody?
 
Old 12-01-2010, 05:53 AM   #3
barghota
Member
 
Registered: Jul 2003
Location: Cairo, Egypt
Distribution: CentOS, RHEL, Debian, FreeBSD
Posts: 94

Rep: Reputation: 38
Replace:

Quote:
http_access allow class
http_access deny BadSites
With:

Quote:
http_access deny class BadSites
http_access allow class
http_access deny all
 
Old 12-01-2010, 10:45 AM   #4
trscookie
Member
 
Registered: Apr 2004
Location: oxford
Distribution: gentoo
Posts: 463

Original Poster
Rep: Reputation: 30
Nice work! That works perfectly! I dont suppose you to add access for spotify do you using this configuration? I've read other forums but most seem to be on either blocking spotify or turning squid into a transparent proxy :S

Thanks again,
trscookie
 
Old 12-02-2010, 12:34 AM   #5
chusmanarif
LQ Newbie
 
Registered: Dec 2009
Posts: 1

Rep: Reputation: 0
hi

i need ur help guys,..

i am running squid proxy server.. i want when ever user open the browser, our company default website is open
1st. what setting i have to done on over squid server
 
Old 12-02-2010, 12:58 AM   #6
prodev05
Member
 
Registered: Jul 2009
Location: Planet Earth
Distribution: Unix & Linux Variants
Posts: 304

Rep: Reputation: 20
I believe you have to start a new thread. Should not follow the tail of another thread. Moderator would bla bla bla.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
configure squid proxy with cc proxy as a parent proxy faisi Linux - Networking 1 08-10-2010 01:16 PM
squid proxy server configuration & distribution of internet without proxy gaurav_gupta082 Linux From Scratch 2 07-31-2010 11:25 AM
Using ISA Server as Parent Proxy and want to setup Squid as dwonstream proxy tauseef1 Red Hat 1 04-09-2008 01:03 AM
configure squid proxy with microsoft proxy as a parent proxy nintykola Linux - Software 1 08-28-2007 01:38 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 06:34 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration