RE: [squid-users] Squid NTLM -> dansguardian -> Squid

Thanks Alex, this worked really well.

One thing to point out for other people who might want to do this is a lot of ports conflict, I had to disable a lot for example:

Snmp_port 0

You can easily figure out most probs by tailing the cache.log and (in my case) cache-passed.log.

Jamie

-----Original Message-----
From: Alex Carlos Braga Antao [mailto:alex@fnde.gov.br]
Sent: 29 June 2004 13:28
To: squid-users@squid-cache.org
Subject: Re: [squid-users] Squid NTLM -> dansguardian -> Squid

Jamie,

    Insert the parent directive:
                cache_peer 127.0.0.1 parent 8080 7 proxy-only no-query no-netdb-exchange login=*:nopassword default

     Then, tell squid to forward ALL REQUESTS TO IT:
                acl DOMAIN1 dstdomain .domain.to.direct.request
                always_direct allow DOMAIN1
                always_direct deny all
       (this will tell squid do forward all requests to your dansguardian except those to DOMAIN1)
     Also comment the line;
                 hierarchy_stoplist cgi-bin ?
       or every reques witha cgi-bin word will be direct also....

      This way, you squid will also direct requests if it cannot contact your dansguardian. It is usefull if your DG stops and you want to ensure your service does not stop. To make squid FORWARD ALL REQUESTS even if DG IS DOWN (this way if DG stops, squid will not be able to access the pages), then add this line:
        never_direct allow all

Alex.

Jamie Heckford wrote:

>Hi,
>
>After getting NTLM auth working fine I am now trying to get it working
>with dansguardian..... Bleh.
>
>To do this im going to do Squid NTLM non caching -> dansguardian ->
>Squid caching all on the same box.
>
>How do I make my NTLM Squid forward all request to a proxy on
>127.0.0.1:8080???? I've looked at the neighbour proxy bits in the
>config but this looks a bit more than what I need to do.
>
>Thanks,
>
>--
>Jamie Heckford
>Network Manager
>Trident Microsystems Ltd.
>
>t: +44(0)1737-780790
>f: +44(0)1737-771908
>w: http://www.tridentmicrosystems.co.uk/
>
>
>
>

--
------------------------------------------------------------------------
    --    	*Alex C. B. Antão*
Analista de Sistemas e Suporte
*ICQ: 5144629* 	
* http://motoviagens.pagina.de
ClubeVirago <http://br.groups.yahoo.com/group/clubevirago> *