Squid Configuration for a Server which is also under Proxy

hepfpklk · 06-08-2009, 02:31 AM

hello,
Can anyone give me the step by step SQUID configuration of a server which is also under a proxy:

i have
eth0 = connected to DHCP server for availing internet connectivity thru a proxy=http://user

asswd@IPADDRESS

ort

eth1 = connected to a Lab Switch for sharing internet through pvt addie 192.168.XXX.XXX:3128....etc.

i am using RHEL 5.

thnx

chitambira · 06-08-2009, 03:35 AM

http://www.visolve.com/squid/Squid_tutorial.php

pliqui · 06-09-2009, 03:54 PM

What you need is to check is the cache_peer option, right now i'm running a squid that need to connect to another proxy

For example

Code:

	                                        proxy  icp
	          hostname             type     port   port  options
	          -------------------- -------- ----- -----  -----------
	cache_peer parent.foo.net       parent    3128  3130  proxy-only default

mine looks like

Code:

intranet:~#cat /etc/squid3/squid.conf |grep cache_peer
cache_peer xxx.xxx.xxx.xxx parent 80 3130 no-query login=USER:PASSWORD name=isa

Check this page for more information on cache peer

hepfpklk · 06-10-2009, 04:37 AM

am very sorry... cant seem to work with that code too

but still i do wanna ask if theres any extra configuration somewhere other than the squid.conf maybe in cachemgr.conf or any part in the squid.conf itself????

hepfpklk · 06-10-2009, 04:38 AM

ohhh let me first download the new version of squid... because now am using 2.6 perhaps 3 might work

hepfpklk · 06-10-2009, 06:55 AM

not working

pliqui · 06-10-2009, 07:30 AM

do a

Code:

egrep -v '(^$|^#)' /etc/squid3/squid.conf

and then post the output to see your configuration

hepfpklk · 06-11-2009, 02:27 AM

hey dude am using proxy without any authentication required.

[root@ccnehu ~]# egrep -v '(^$|^#)' /etc/squid/squid.conf
http_port 192.168.0.1:80
http_port 80
cache_peer 172.16.1.4 parent 3128 3130 proxy-only no-query
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
access_log /var/log/squid/access.log squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl LABTWO src 192.168.0.0/24 192.168.1.0/24
http_access allow LABTWO
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
coredump_dir /var/spool/squid
https_port 3128
[root@ccnehu ~]#

pliqui · 06-11-2009, 11:49 AM

Post some part of the access.logs ( /var/log/squid/access.log) to see what happens when you try to connect. And you said you tried squid3, wich version is are you using now?