Squid-Howto

Installion

Ubuntu

apt-get install squid

Arch

pacman -S squid

Firststeps

Configdir

cd /etc/squid

save default

cp squid.conf squid.conf.org

bereinige config von kommentaren

grep "^[^#]" squid.conf.org > squid.conf

bereinigte squid.conf

acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7       # RFC 4193 local private network range
acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 3128
coredump_dir /var/cache/squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320

Konfigurationseinstellungen

Grundlegende Direktiven

Filter anlegen

acl localnet src 192.168.0.0/16 

• acl Schlüsselwort
• localnet Bezeichner (beliebig)
• src filterkriterium (es gibt viele)
• 192.168.0.0/16 Bereich (Variable)

Anwenden der Filter=

http_access allow localnet

• http_access Schlüsselwort
• allow (erlauben oder verbieten (deny)
• localnet anzuwendeter Filter

Coredumpdir

coredump_dir /var/cache/squid

• wenn squid abstürzt wird dort ein Abbild geschrieben

• refresh_pattern

First run

läuft squid?

netstat -lntp | grep 3128

starten im vordergrund

squid -DNX