Re: [squid-users] Getting Squid Worked.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi. I chopped up your questions for individual answers, I hope this helps:

> Is there anything that I can do on this side to get my Squid giving direct
> access to the Internet without having to use our ISP?

Nope. You are using your ISP to get to the Internet, there is no way to pull
them out of the middle.

> If not, what does my ISP need to do on its side?

You have two options:

1) Use their proxy as a parent cache. Then you will have access to your local
proxy, but ultimately your ISP will still filter your access. You will not
have to make changes at the ISP though, just add the following to your
squid.conf:

        cache_peer 10.0.0.1 parent 8080 0 no-query

Just replace the 10.0.0.1 with the IP address of the ISP's proxy server.

2) Request that the ISP open access to your proxy server from their firewall.
That way, your proxy will no longer rely on the parent cache at the ISP, and
they will not be able to filter your access. BUT, remember that you need to
secure your machine and make absolutely certain that you limit access to your
proxy to only local IP addresses. The RPMs of squid for RH7.3 are pretty
solid at the default, surprisingly enough :^)

> My question in that regard is, how would you be able to connect to and
> Outside parent proxy if you're sitting behind a firewall?

There is only one way, and that is to let your proxy through the firewall.
And at that point, you will probably not need the parent proxy.

Good luck, and write back if you still need help!

- --
Mit freundlichen Gruessen / best regards

Mitch Pirtle
"The mind is a terrible thing to, um, uhh, oh nevermind." -- me
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9Wgqep6W2bojYwv4RAowMAKCkf6fZFOM7XC53yGSgG+Ef7EQ1yQCdGgwj
Z/p2AoULRonhUyjgvZo1qko=
=+N4N
-----END PGP SIGNATURE-----
Received on Wed Aug 14 2002 - 01:53:17 MDT