Squid

From SME Server
Revision as of 18:52, 2 September 2007 by Mmccarn (talk | contribs) (Add Squid, Dansguardian, Squidguard info)
Jump to navigation Jump to search

Squid Proxy Server Settings

  Incomplete:
This article or section needs to be expanded. Please help to fill the gaps or discuss the issue on the talk page


SARG: Squid Analysis Report Generator

"Squid Analysis Report Generator is a tool that allow you to view "where" your users are going to on the Internet."

SARG Homepage: http://sarg.sourceforge.net/

SME SARG HowTo: Sarg This section should contain links to the various Squid modifiers - Squidguard, Dansguardian, Sarg, etc.

DansGuardian: true web content filtering for all

"DansGuardian is an award winning web content filtering proxy(1) for Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris that uses Squid(2) to do all the fetching. It filters using multiple methods. These methods include URL and domain filtering, content phrase filtering, PICS filtering, MIME filtering, file extension filtering, POST limiting."

DansGuardian Homepage: http://dansguardian.org/

SME DansGuardian HowTo: Dansguardian

SuidGuard

"SquidGuard is a URL redirector used to use blacklists with the proxysoftware Squid."

Squidguard Homepage: http://www.squidguard.org/

SME SquidGuard Howto: SquidGuard

ProxyPass

Despite the name, ProxyPass has nothing to do with the Squid proxy and is actually an Apache directive designed to allow a given URL on your server to return the content of some other webserver - either internal (behind your SME) or external.

Apache proxypass Documentation: http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxypass

SME proxypass Howto: SME_Server:Documentation:FAQ#Proxy_Pass

Customizing Squid

Bypass the Proxy Server Without Disabling Your Transparent Proxy

     mkdir -p /etc/e-smith/templates-custom/etc/rc.d/init.d/masq
     cd /etc/e-smith/templates-custom/etc/rc.d/init.d/masq
     wget -O 35transproxy http://bugs.contribs.org/attachment.cgi?id=1191
     wget -O 90adjustTransProxy http://bugs.contribs.org/attachment.cgi?id=1192
     config setprop squid BypassProxyTo a.b.c.d
     expand-template /etc/rc.d/init.d/masq
     service masq restart
  • Replace a.b.c.d with the IP or network address for which you wish to bypass the proxy server.
  • Use config setprop squid BypassProxyFrom a.b.c.d to configure a specific local host or network that should bypass the proxy server
  • Note that 'signal-event remoteaccess-update' does not seem to completely rebuild /etc/rc.d/init.d/masq
  • Be sure to check the bug for changes to the attachments: http://bugs.contribs.org/show_bug.cgi?id=2374)


Disable squid proxy bypass using:

config delprop squid BypassProxyFrom
config delprop squid BypassProxyTo
expand-template /etc/rc.d/init.d/masq
service masq restart