Squid-Howto: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 9: Zeile 9:
 
==save default==
 
==save default==
 
  cp squid.conf squid.conf.org
 
  cp squid.conf squid.conf.org
==clean config from comments==
+
==bereinige config von kommentaren==
 
  grep "^[^#]" squid.conf.org > squid.conf
 
  grep "^[^#]" squid.conf.org > squid.conf
 +
==bereinigte squid.conf==
 +
<pre>
 +
acl localnet src 10.0.0.0/8    # RFC1918 possible internal network
 +
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
 +
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
 +
acl localnet src fc00::/7      # RFC 4193 local private network range
 +
acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines
 +
acl SSL_ports port 443
 +
acl Safe_ports port 80          # http
 +
acl Safe_ports port 21          # ftp
 +
acl Safe_ports port 443        # https
 +
acl Safe_ports port 70          # gopher
 +
acl Safe_ports port 210        # wais
 +
acl Safe_ports port 1025-65535  # unregistered ports
 +
acl Safe_ports port 280        # http-mgmt
 +
acl Safe_ports port 488        # gss-http
 +
acl Safe_ports port 591        # filemaker
 +
acl Safe_ports port 777        # multiling http
 +
acl CONNECT method CONNECT
 +
http_access deny !Safe_ports
 +
http_access deny CONNECT !SSL_ports
 +
http_access allow localhost manager
 +
http_access deny manager
 +
http_access allow localnet
 +
http_access allow localhost
 +
http_access deny all
 +
http_port 3128
 +
coredump_dir /var/cache/squid
 +
refresh_pattern ^ftp:          1440    20%    10080
 +
refresh_pattern ^gopher:        1440    0%      1440
 +
refresh_pattern -i (/cgi-bin/|\?) 0    0%      0
 +
refresh_pattern .              0      20%    4320
 +
</pre>
 +
 
=First run=
 
=First run=
 
==läuft squid?==
 
==läuft squid?==

Version vom 12. November 2014, 10:25 Uhr

Installion

Ubuntu

apt-get install squid

Arch

pacman -S squid

Firststeps

Configdir

cd /etc/squid

save default

cp squid.conf squid.conf.org

bereinige config von kommentaren

grep "^[^#]" squid.conf.org > squid.conf

bereinigte squid.conf

acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7       # RFC 4193 local private network range
acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 3128
coredump_dir /var/cache/squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320

First run

läuft squid?

netstat -lntp | grep 3128

starten im vordergrund

squid -DNX