Squid-Howto: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Thomas (Diskussion | Beiträge) |
Thomas (Diskussion | Beiträge) |
||
| Zeile 9: | Zeile 9: | ||
==save default== | ==save default== | ||
cp squid.conf squid.conf.org | cp squid.conf squid.conf.org | ||
| − | == | + | ==bereinige config von kommentaren== |
grep "^[^#]" squid.conf.org > squid.conf | grep "^[^#]" squid.conf.org > squid.conf | ||
| + | ==bereinigte squid.conf== | ||
| + | <pre> | ||
| + | acl localnet src 10.0.0.0/8 # RFC1918 possible internal network | ||
| + | acl localnet src 172.16.0.0/12 # RFC1918 possible internal network | ||
| + | acl localnet src 192.168.0.0/16 # RFC1918 possible internal network | ||
| + | acl localnet src fc00::/7 # RFC 4193 local private network range | ||
| + | acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines | ||
| + | acl SSL_ports port 443 | ||
| + | acl Safe_ports port 80 # http | ||
| + | acl Safe_ports port 21 # ftp | ||
| + | acl Safe_ports port 443 # https | ||
| + | acl Safe_ports port 70 # gopher | ||
| + | acl Safe_ports port 210 # wais | ||
| + | acl Safe_ports port 1025-65535 # unregistered ports | ||
| + | acl Safe_ports port 280 # http-mgmt | ||
| + | acl Safe_ports port 488 # gss-http | ||
| + | acl Safe_ports port 591 # filemaker | ||
| + | acl Safe_ports port 777 # multiling http | ||
| + | acl CONNECT method CONNECT | ||
| + | http_access deny !Safe_ports | ||
| + | http_access deny CONNECT !SSL_ports | ||
| + | http_access allow localhost manager | ||
| + | http_access deny manager | ||
| + | http_access allow localnet | ||
| + | http_access allow localhost | ||
| + | http_access deny all | ||
| + | http_port 3128 | ||
| + | coredump_dir /var/cache/squid | ||
| + | refresh_pattern ^ftp: 1440 20% 10080 | ||
| + | refresh_pattern ^gopher: 1440 0% 1440 | ||
| + | refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 | ||
| + | refresh_pattern . 0 20% 4320 | ||
| + | </pre> | ||
| + | |||
=First run= | =First run= | ||
==läuft squid?== | ==läuft squid?== | ||
Version vom 12. November 2014, 10:25 Uhr
Installion
Ubuntu
apt-get install squid
Arch
pacman -S squid
Firststeps
Configdir
cd /etc/squid
save default
cp squid.conf squid.conf.org
bereinige config von kommentaren
grep "^[^#]" squid.conf.org > squid.conf
bereinigte squid.conf
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network acl localnet src 172.16.0.0/12 # RFC1918 possible internal network acl localnet src 192.168.0.0/16 # RFC1918 possible internal network acl localnet src fc00::/7 # RFC 4193 local private network range acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost manager http_access deny manager http_access allow localnet http_access allow localhost http_access deny all http_port 3128 coredump_dir /var/cache/squid refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320
First run
läuft squid?
netstat -lntp | grep 3128
starten im vordergrund
squid -DNX