LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   Squid Configuration Questions 2 (https://www.linuxquestions.org/questions/linux-software-2/squid-configuration-questions-2-a-467683/)

SBN 07-25-2006 10:51 PM

Squid Configuration Questions 2
 
hello friends hope you can help me with my questions.

1. can anyone pls tell me if this code is good
acl mynetwork 192.168.0.0/24
http_access allow mynetwork
http_access deny !mynetwork

2. i tried to whitelist all websites and only allow google and when i start squid i cant really access any websites but my problem is even google is not accessible. i use these tags

acl ALLOWEDSITES dstdomain .google.com
http_access deny !ALLOWEDSITES

3. when i firs install squid i first run "./configure" with these parameter "./configure --prefix=/usr/local/squid --enable-removal-policy=heap. then when squid is installed i edited squid.conf and included these tags:

cache_replacement_policy heap LFUDA
memory_replacement_policy heap LFUDA

then when i run squid there is an error saying that i must specify those 2.

4. i used this tag

cache_dir diskd /usr/local/squid/var/cache 8000 16 256

but when i run squid there is an error pointing to this "fatal : bungled" but when i change diskd to ufs there is no error and squid runs normally.

5.how to turn squid to a firewall?

bombom 07-26-2006 02:14 AM

1. Yes, but i write the code like this
acl jaringanku src 192.168.1.0/24
http_access deny all (default)
http_access allow jaringanku

2.i think to block all websites except some websites it's not a good idea. I prefer to block all bad websites (examples: porn sites).

3.You can try one of these:
cache_replacement_policy heap GDSF
memory_replacement_policy heap GDSF

cache_replacement_policy heap lru
memory_replacement_policy heap lru

4. I like iptables or shorewall as firewalls, we use squid to control bandwith consumtions and limitting users to access bad sites

Thank's


All times are GMT -5. The time now is 10:05 AM.