Displaying 10 results from an estimated 10 matches for "httpd_accel_host".
2007 Aug 10
1
TRANSEPARENT PROXY WITH SQUID 2.6
...store_log /var/log/squid/store.log
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
# Example rule allowing access from your local networks. Adapt
# to list your (internal) IP networks from where browsing should
# be allowed
acl mynet src 192.168.101.0/24
http_access allow mynet
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
I am ruunnig itables on the SAME BOX. I have added below rules for squid.
#Redirecting traffic destined to port 80 to port 3128
iptables -t nat -A PREROUTING -p tcp -i eth2 --dport 80 -j REDIRECT
--to-port 3128...
2004 Dec 18
9
Bridging and transparent proxy
Hi all,
is it possible configure Shorewall in bridge mode and,
in the same box, utilize Squid in transparent mode?
I''m triing to do this, but the REDIRECT rule doesn''t work.
I''ve already read http://www.shorewall.net/bridge.html
to configure the bridge and work fine for me, but
when I add the rule for transparent proxy
2006 Jul 21
1
Unable to configure squid transparent proxy on Centos4.0
...eth0: 192.168.2.83/24 gateway: 192.168.2.126/24 (eth1 of Centos)
Squid works fine if I manually add the proxy settings in any browser for the
clients of network (192.168.1.0) but as I want to configure transparent
proxy I have added these lines to squid.conf
http_port 5678
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
iptables configuration Only one rule is there
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 5678
I can access the LAN servers from the Debian machine but I...
2006 Mar 26
6
Shorewall and squid not wokring together
...s -t nat -A PREROUTING -i eth0 -p tcp --dport
80 -j REDIRECT --to-port 3128
interfaces
net eth0 detect dhcp
rules
REDIRECT loc 3128 tcp www -
ACCEPT $FW net tcp www
zones
fw firewall
net ipv4
loc ipv4
policy
fw net ACCEPT
net all DROP info
all all REJECT info
squid.conf
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
cache_effective_user nobody
cache_effective_group nobody
acl my_firewall src 191.100.100.100/255.255.255.0
http_access allow my_firewall
__________________________________________________
Do You Yaho...
2007 Feb 09
1
trouble https multiple uplinks... how?
...STROUTING -j SNAT -o eth1 --to-source 172.17.1.1
iptables -t nat -A POSTROUTING -j SNAT -o eth2 --to-source 172.18.1.1
------------
squid config :
------------
visible_hostname my_isp.net
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
http_port 3128
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
cache_mem 512 MB
cache_replacement_policy heap GDSF
memory_replacement_policy heap GDSF
cache_dir ufs /cache 6000 14 256
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255...
2007 Apr 18
0
[Bridge] bridge + squid
Hi Srs
I have a linux like a bridge
LAN - BRIGE -ROUTER
The bridge has a ip ( non public IP)
The bridge is working fine but y need to set up the Squid on the same machine where is installed the BRIDGE.
I was looking for the answers and say:
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
and put this rules with iptables
iptables #8722;t nat #8722;A PREROUTING #8722;i eth0 #8722;p tcp #8722;#8722;dport 80 #8722;j REDIRECT #8722;#8722;to#8722;port 3128
eth0 go to Router
eth1 go to LAN...
2007 Jun 12
1
How to setup both Transpaent Proxy and firewall on the same Machine.
...in addition to that, There are many rules , ALL work fine.
in squid.conf file, I have added below rules,
http_port 3128
cache_mem 64 MB
cache_dir ufs /var/spool/squid 100 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
And, Then, I did below command.
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT
--to-port 3128
But, When I browse Internet , request will not get ridirected to 3128 port.
So I can not use sq...
2007 Feb 03
3
Shorewall and Squid 2.6
...n''t support anymore the ''httpd_accel''
directives.
So anyone that would follow this guide for configure a transparent proxy
will receive an error 400.
Please modify the guide as follow (as in SQUID documentation):
Instead of put these variables in /etc/squid/squid.conf:
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
is needed that you put this:
http_port PROXY_SERVER_IP:PROXY_SERVER_PORT transparent
Then you can follow the rest of the above guide.
Ciao
Francesco
------------------------------------------------------...
2004 Oct 14
16
Squid as a transparent proxy
...ux gateway. My net
is as follows:
loc subnet --- fw Linux Gateway --- ADSL router
192.168.1.0/24 192.168.1.92 (eth1) WAN.WAN.WAN.2
(gw = WAN.WAN.WAN.WAN (eth0)
192.168.1.92) (gw = WAN.WAN.WAN.2)
Linux Gateway config:
******
squid.conf:
http_port 3128
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
******
Apache2 is running on port 80.
******
/etc/shorewall/rules:
REDIRECT loc 3128 tcp 80 -
!WAN.WAN.WAN.WAN,192.168.1.92,WAN.WAN.WAN.2
(fw can access net)
******
At first, everything works fine. Client PCs...
2005 Apr 05
0
Informal HOWTO - transparent authentication and optional outbound web filtering using Samba 3.0.13, Squid 2.5.STABLE7, SmartFilter 4.01, RedHat 9.0 in a Win2003 AD domain
...acl greg_network src 10.10.10.0/24 127.0.0.1/32
http_access allow greg_network
# And finally deny all other access to this proxy
http_access deny all
To Run Squid in a transparent mode, enable the following directives in
Squid.conf.
(See http://squid.visolve.com/white_papers/trans_caching.htm)
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
***************** Now from SmartFilter documentation
Make sure of these parameters:
cache_mem 8MB
cache_dir /usr/local/squid/cache 100 16 256
Change http_access deny all to http_access allow all. (May not...