[squid-users] New Setup help

From: Jim Lawrence <jim_at_pointnclickpcs.com>
Date: Mon, 23 Feb 2009 11:33:06 -0500

Cisco1720 router --> 4 windows based servers 1 centos virtual server 1 centos squid server.
Client computers (8)

Would like to have all web traffic blocked except websites defined in a allowed_sites.squid config file.  
My squid.conf file

Should my squid server have 2 network cards or can I leave it with the one ?

+++++++
[root_at_VIRT1 ~]# cat /etc/squid/squid.conf | sed '/ *#/d; /^ *$/d'
http_port 192.168.31.3:3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
 cache_dir ufs /var/spool/squid 1000 16 256
access_log /var/log/squid/access.log squid
dns_nameservers 192.168.31.11
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl CONNECT method CONNECT
acl good_url dstdomain "/etc/squid/allowed_sites.squid"
acl pnc_network src 192.168.31.0/255.255.255.0
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow good_url
http_access deny pnc_network
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
visible_hostname VIRT1
coredump_dir /var/spool/squid
++++++++

client's cannot access anything. 

Any help would be appreciated

Jim
Received on Mon Feb 23 2009 - 16:25:51 MST

This archive was generated by hypermail 2.2.0 : Tue Feb 24 2009 - 12:00:01 MST