Squid - Revision history

Leo at 22:03, 14 June 2020

2020-06-14T22:03:05Z

← Older revision		Revision as of 22:03, 14 June 2020
Line 116:		Line 116:

	{{Navbox Linux}}[[Category:Linux]]		{{Navbox Linux}}[[Category:Linux]]
			[[Category:LinuxUtilities]]

Leo: Text replacement - "Category:Linux{{Navbox Linux}}" to "{{Navbox Linux}}Category:Linux"

2019-09-01T06:21:01Z

Text replacement - "Category:Linux{{Navbox Linux}}" to "{{Navbox Linux}}Category:Linux"

← Older revision		Revision as of 06:21, 1 September 2019
Line 115:		Line 115:
	Alternatively, set the {{code\|http_proxy}} value in the environment.		Alternatively, set the {{code\|http_proxy}} value in the environment.

	[[Category:Linux]]~~{{Navbox Linux}}~~		{{Navbox Linux}}[[Category:Linux]]

Leo: Text replacement - "Category:Linux" to "Category:Linux{{Navbox Linux}}"

2019-09-01T05:07:28Z

Text replacement - "Category:Linux" to "Category:Linux{{Navbox Linux}}"

← Older revision		Revision as of 05:07, 1 September 2019
Line 115:		Line 115:
	Alternatively, set the {{code\|http_proxy}} value in the environment.		Alternatively, set the {{code\|http_proxy}} value in the environment.

	[[Category:Linux]]		[[Category:Linux]]{{Navbox Linux}}

Leo at 04:21, 24 June 2017

2017-06-24T04:21:35Z

← Older revision		Revision as of 04:21, 24 June 2017
Line 35:		Line 35:
	}}		}}

			=== Transparent Proxy ===
			To make the squid server a transparent proxy, put it on the gateway and create an IPtables rule that forwards all traffic destined to port 80 to the squid server.

			With the squid server above set up, set up the IPtable rules like so:

			{{highlight\|lang=bash\|code=
			#!/bin/sh

			# squid server IP
			SQUID_SERVER="192.168.1.1"

			# Interface connected to Internet
			INTERNET="eth0"

			# Interface connected to LAN
			LAN_IN="eth1"

			# Squid port
			SQUID_PORT="3128"


			# DO NOT MODIFY BELOW
			# Clean old firewall
			iptables -F
			iptables -X
			iptables -t nat -F
			iptables -t nat -X
			iptables -t mangle -F
			iptables -t mangle -X

			# Load IPTABLES modules for NAT and IP conntrack support
			modprobe ip_conntrack
			modprobe ip_conntrack_ftp

			# For win xp ftp client
			#modprobe ip_nat_ftp

			echo 1 > /proc/sys/net/ipv4/ip_forward

			# Setting default filter policy
			iptables -P INPUT DROP
			iptables -P OUTPUT ACCEPT

			# Allow loopback
			iptables -A INPUT -i lo -j ACCEPT
			iptables -A OUTPUT -o lo -j ACCEPT

			# Allow all existing connections through
			iptables -A INPUT -i $INTERNET -m state --state ESTABLISHED,RELATED -j ACCEPT

			# set this system as a router for Rest of LAN
			iptables --table nat --append POSTROUTING --out-interface $INTERNET -j MASQUERADE
			iptables --append FORWARD --in-interface $LAN_IN -j ACCEPT

			# unlimited access to LAN
			iptables -A INPUT -i $LAN_IN -j ACCEPT
			iptables -A OUTPUT -o $LAN_IN -j ACCEPT

			# DNAT port 80 request comming from LAN systems to squid 3128 ($SQUID_PORT) aka transparent proxy
			iptables -t nat -A PREROUTING -i $LAN_IN -p tcp --dport 80 -j DNAT --to $SQUID_SERVER:$SQUID_PORT

			# if it is same system
			iptables -t nat -A PREROUTING -i $INTERNET -p tcp --dport 80 -j REDIRECT --to-port $SQUID_PORT

			# DROP everything and Log it
			iptables -A INPUT -j LOG
			iptables -A INPUT -j DROP
			}}

	== Other ==		== Other ==

Leo at 03:30, 24 June 2017

2017-06-24T03:30:58Z

← Older revision		Revision as of 03:30, 24 June 2017
Line 35:		Line 35:
	}}		}}



			== Other ==
			=== Force Yum/DNF to use Squid ===
			Specify the {{code\|proxy}} option in {{code\|/etc/yum.conf}} or {{code\|/etc/dnf/dnf.conf}} with the URL of the HTTP proxy.

			Eg:
			{{highlight\|lang=text\|code=
			proxy=http://squid.home.steamr.com:3128
			}}

			Alternatively, set the {{code\|http_proxy}} value in the environment.

	[[Category:Linux]]		[[Category:Linux]]

Leo: Created page with "Squid is an open source caching and forwarding HTTP proxy server. == Quick Usage Guide == To quickly get Squid set up as a HTTP proxy server with caching enabled, install squ..."

2017-06-24T03:27:49Z

Created page with "Squid is an open source caching and forwarding HTTP proxy server. == Quick Usage Guide == To quickly get Squid set up as a HTTP proxy server with caching enabled, install squ..."

New page

Squid is an open source caching and forwarding HTTP proxy server.

== Quick Usage Guide ==
To quickly get Squid set up as a HTTP proxy server with caching enabled, install squid and configure it like so:

{{highlight|lang=terminal|code=
## Install squid
# yum -y install squid
}}

Configure squid. The configuration located at {{code|/etc/squid/squid.conf}} should have at least the following lines:
{{highlight|lang=text|code=
# Allow localhost and our local network
http_access allow localhost
http_access allow localnet

# Our local network IP subnet. Adjust this accordingly
acl localnetsrc 10.1.1.0/22

# Use DNS IPv4 lookups first
dns_v4_first on

# Amount of memory used for caching objects
cache_mem 1024 MB

# Maximum object size to cache
maximum_object_size 4096 MB

# Maximum size of cached objects in memory
maximum_object_size_in_memory 8192 KB

# Location of the cache directory
# 2nd parameter is the size of the cache. 10240 = 10 GB
cache_dir ufs /mnt/cache/squid 10240 16 256
}}

[[Category:Linux]]