Configuring Squid Proxy server & Transparent Proxy

[Ricky]

Well squid uses too much of RAM when it runs in caching mode i think same for simple proxy but not sure. Smoothwall is preconfigured.. give that a look.

[kmashraf]

Will surely in future keep Smoothwall in mind.
Am going to try my luck with a simple Squid setup, if that is possible.
Thanks.

[Ricky]

Ya. simple proxy is possible , you can also make caching proxy. that will also enhance ur performance..  just keep cache_mem 4 MB and cache dir  around 200 mb not more..

[efren_rio]

How do I use Squid Proxy to point to an ISP's Proxy?

[Ricky]

Simply add following lines to ur squid.conf

Code: [Select]


cache_peer <parent IP> parent 3128 3130 Change parent ip to the ip address of the main proxy server or u can used domain also instead of IP.

[carrguerr]

I have squid running on RH9, as a server for windoze. The windoze pc's have dreamweaver installed but DW cant access remote files. I tried to use cuteFTP, wsFTP, etc and they cant connect to my ftp server. How do I set up squid so that DW and the rest of the FTP clients have access to an outside ftp server?

Thnx

[Ricky]

mostly ftp clients works. problem occur with only mail clients..
Try to use passive modes in ftp clients..

[carrguerr]

OK ... the only ftp server I get to is the Linux box. I still cant get out to a remote server with any ftp client.
I have some web sites that I want to work with thru ftp but squid wont let me thru.

How does one log in to a ftp site?
ftp.site.com/user/pass

dreamweaver still wont connect.

[kmashraf]

I am having a problem. When I run the sample squid.conf given by Ricky as well as the default squid.conf. I run into a 'FATAL: Failed to make swap directory /usr/local/squid/var/cache/00: 13 permission denied' problem.
My Linux is Vector Linux 4.0. I am also using the firewall script from http://projectfiles.com on this box. I have installed squid from the tar.gz available at the squid site. Is the problem related to ownership of the /usr/local/squid/var/cache directory ? By the way there is no default 'squid' user created in Vector Linux. I have to create one. What kind of permissions should this directory have for it to create the cache ?
 :?

[Ricky]

Ya this is the permission problem, You can have to make squid as the owner of the cache directory then have to give proper permission to them. It is like this.
Say we have a user squid of group squid..

Code: [Select]

chown squid:squid <ur cache directory>then set permission to read, write execute to group and user..

Code: [Select]

chmod 770 <ur cache dir> Then initialize chaze using -z

Also then you have to set same permission for log directory of squid ie.. /usr/local/squid/var/log

[tomamodi]

i try this squid step by step same failed need help
[root@tomamodi squid-2.4.STABLE6]# /usr/local/squid/bin/squid -z
2004/06/28 09:12:54| Creating Swap Directories
FATAL: Failed to make swap directory /usr/local/squid/cache/00: (13) Permission
denied
Squid Cache (Version 2.4.STABLE6): Terminated abnormally.
CPU Usage: 0.000 seconds = 0.000 user + 0.000 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 8

[Ricky]

hmm..
Did you saw my last post in this Thread ? Well that is the solution to your problem. Simply learn litlle more about chown and chmod and follow my last post.

[lakshmi]

I have a problem in starting the squid service.  Getting error message "starting squid...... FAILED".

I have configured squid.conf file as mentioned in the tutorial. I am successfull in creating the swap directories but unable to start the service. Can any one help me. I am new to linux.

Thanks

[kmashraf]

Hi thanks for the info and I've got squid running now. I have a problem though
I am unable to deny sites from a file.
This is the relevant portion of my squid.conf

#Recommended minimum configuration:
acl banned dstdomain "/usr/local/squid/etc/block"
acl all src 0.0.0.0/0.0.0.0
acl localnet src 192.168.0.0/255.255.255.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT

http_access allow localnet
http_access allow manager localhost
http_access deny banned
http_access deny all
Can you tell me what I doing wrong !

Thanks for all your help without which I would not have got this far.
Ashraf

[Ricky]

Hey.. !! Kmashraf..

SOrry for late reply.. Actually what i suggest to see few last post of mine about proxy .. If still it don't work then we will sort it out !