Re: Squid&RH 7.0

Article View: comp.os.linux.security

Article #18

Back to comp.os.linux.security Previous Next

#18

From: Jeremy Lunn
Date: Sat, 28 Apr 2001 04:23

25 lines
2544 bytes

In article <LPky6.7727$mA.2347044@newsrump.sjc.telocity.net>, KW wrote:
> We didn't have to change our firewall rules..   as long as you can get
> out on the masq you should be ok..   far as setting up squid, you can
> pretty much install the RPMS and goto the squid.conf file and go through
> it.  The .conf explains itself pretty well.  If you want to run  it as a
> transparent proxy... you simply use prerouting to grab all packets on 80
> and send them to 3128 on squid... ;)

Transparent proxying is pretty pointless because for larges sites that
have many A records (most popular sites will), your hit rate will be
divided by the number of A records they have.

My suggestion would be to redirect to a webpage that explains how to
setup your proxy server or just block port 80.

As for firewall rules, just make sure squid can access outside sites.
And also make sure squid isn't listening on an outside interface.  I
think you do this with tcp_incoming_address and upd_incoming_address (in
squid.conf).  Set those to the IP address that your clients will access
the proxy server as (the IP address of eth0 in most cases).

-- 
Jeremy Lunn
ICQ: 19255837
http://jeremy.austux.net/

Technical Details

Message-ID: <slrn9ekhdu.14k.spammers-will-die@amalthea.dark.net>

Path:

arc1-ca.pugleaf.net!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!news.mel.connect.com.au!news1.optus.net.au!optus!news0.optus.net.au!news.iprimus.com.au!spammers-will-die

References: <9acjfg$80u$1@perki.connect.com.au> <LPky6.7727$mA.2347044@newsrump.sjc.telocity.net>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f9b51,601f652b2a7b255f
X-Google-Attributes: gidf9b51,public
X-Google-Thread: 102983,601f652b2a7b255f
X-Google-Attributes: gid102983,public
X-Google-Thread: 106e9e,601f652b2a7b255f
X-Google-Attributes: gid106e9e,public
X-Google-ArrivalTime: 2001-04-27 21:23:28 PST
Path: arc1-ca.pugleaf.net!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!news.mel.connect.com.au!news1.optus.net.au!optus!news0.optus.net.au!news.iprimus.com.au!spammers-will-die
Newsgroups: comp.os.linux.security,comp.os.linux.setup,aus.computers.linux
From: spammers-will-die@austux.net (Jeremy Lunn)
Subject: Re: Squid&RH 7.0
References: <9acjfg$80u$1@perki.connect.com.au> <LPky6.7727$mA.2347044@newsrump.sjc.telocity.net>
Followup-To: aus.computers.linux
Message-ID: <slrn9ekhdu.14k.spammers-will-die@amalthea.dark.net>
User-Agent: slrn/0.9.7.0 (Linux)
X-Original-NNTP-Posting-Host: 203.134.171.32
X-Original-Trace: 28 Apr 2001 14:23:28 +1000, 203.134.171.32
Lines: 25
Date: 28 Apr 2001 14:23:28 +1000
NNTP-Posting-Host: 203.134.64.67
X-Trace: news0.optus.net.au 988431808 203.134.64.67 (Sat, 28 Apr 2001 14:23:28 EST)
NNTP-Posting-Date: Sat, 28 Apr 2001 14:23:28 EST
Organization: CWO Customer - reports relating to abuse should be sent to abuse@cwo.net.au

Reply to Parent Message