Displaying 10 results from an estimated 10 matches for "httpd_accel_uses_host_header".
2007 Aug 10
1
TRANSEPARENT PROXY WITH SQUID 2.6
...LLOW ACCESS FROM YOUR CLIENTS
# Example rule allowing access from your local networks. Adapt
# to list your (internal) IP networks from where browsing should
# be allowed
acl mynet src 192.168.101.0/24
http_access allow mynet
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
I am ruunnig itables on the SAME BOX. I have added below rules for squid.
#Redirecting traffic destined to port 80 to port 3128
iptables -t nat -A PREROUTING -p tcp -i eth2 --dport 80 -j REDIRECT
--to-port 3128
#For squid traffic to Accept
iptables -A INPUT -i eth2 -d 192.168.101.254 -p tcp...
2004 Dec 18
9
Bridging and transparent proxy
Hi all,
is it possible configure Shorewall in bridge mode and,
in the same box, utilize Squid in transparent mode?
I''m triing to do this, but the REDIRECT rule doesn''t work.
I''ve already read http://www.shorewall.net/bridge.html
to configure the bridge and work fine for me, but
when I add the rule for transparent proxy
2006 Jul 21
1
Unable to configure squid transparent proxy on Centos4.0
...add the proxy settings in any browser for the
clients of network (192.168.1.0) but as I want to configure transparent
proxy I have added these lines to squid.conf
http_port 5678
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
iptables configuration Only one rule is there
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 5678
I can access the LAN servers from the Debian machine but I am not able to
access the internet.
Any pointers what can be the problem ?
Please let me know if you need any...
2006 Mar 26
6
Shorewall and squid not wokring together
...8
interfaces
net eth0 detect dhcp
rules
REDIRECT loc 3128 tcp www -
ACCEPT $FW net tcp www
zones
fw firewall
net ipv4
loc ipv4
policy
fw net ACCEPT
net all DROP info
all all REJECT info
squid.conf
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
cache_effective_user nobody
cache_effective_group nobody
acl my_firewall src 191.100.100.100/255.255.255.0
http_access allow my_firewall
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam
protection around
http://mail.yahoo...
2007 Feb 09
1
trouble https multiple uplinks... how?
...TROUTING -j SNAT -o eth2 --to-source 172.18.1.1
------------
squid config :
------------
visible_hostname my_isp.net
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
http_port 3128
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
cache_mem 512 MB
cache_replacement_policy heap GDSF
memory_replacement_policy heap GDSF
cache_dir ufs /cache 6000 14 256
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl localnet src 10.14.1.0/255.255.255.0
acl SSL_ports port 443 563
ac...
2007 Apr 18
0
[Bridge] bridge + squid
...a bridge
LAN - BRIGE -ROUTER
The bridge has a ip ( non public IP)
The bridge is working fine but y need to set up the Squid on the same machine where is installed the BRIDGE.
I was looking for the answers and say:
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
and put this rules with iptables
iptables #8722;t nat #8722;A PREROUTING #8722;i eth0 #8722;p tcp #8722;#8722;dport 80 #8722;j REDIRECT #8722;#8722;to#8722;port 3128
eth0 go to Router
eth1 go to LAN
iptables #8722;A INPUT #8722;i interface #8722;p tcp #8722;d your_bridge_ip #8722;s loca...
2007 Jun 12
1
How to setup both Transpaent Proxy and firewall on the same Machine.
...nf file, I have added below rules,
http_port 3128
cache_mem 64 MB
cache_dir ufs /var/spool/squid 100 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
And, Then, I did below command.
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT
--to-port 3128
But, When I browse Internet , request will not get ridirected to 3128 port.
So I can not use squid as a Transpaent Proxy.
Where have I gone wrong?
I reffered to below URL.
http...
2007 Feb 03
3
Shorewall and Squid 2.6
...s.
So anyone that would follow this guide for configure a transparent proxy
will receive an error 400.
Please modify the guide as follow (as in SQUID documentation):
Instead of put these variables in /etc/squid/squid.conf:
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
is needed that you put this:
http_port PROXY_SERVER_IP:PROXY_SERVER_PORT transparent
Then you can follow the rest of the above guide.
Ciao
Francesco
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, se...
2004 Oct 14
16
Squid as a transparent proxy
...-- ADSL router
192.168.1.0/24 192.168.1.92 (eth1) WAN.WAN.WAN.2
(gw = WAN.WAN.WAN.WAN (eth0)
192.168.1.92) (gw = WAN.WAN.WAN.2)
Linux Gateway config:
******
squid.conf:
http_port 3128
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
******
Apache2 is running on port 80.
******
/etc/shorewall/rules:
REDIRECT loc 3128 tcp 80 -
!WAN.WAN.WAN.WAN,192.168.1.92,WAN.WAN.WAN.2
(fw can access net)
******
At first, everything works fine. Client PCs from
192.168.1.0 can make HTTP requests transparently
through Squid (checked Squid&...
2005 Apr 05
0
Informal HOWTO - transparent authentication and optional outbound web filtering using Samba 3.0.13, Squid 2.5.STABLE7, SmartFilter 4.01, RedHat 9.0 in a Win2003 AD domain
...etwork
# And finally deny all other access to this proxy
http_access deny all
To Run Squid in a transparent mode, enable the following directives in
Squid.conf.
(See http://squid.visolve.com/white_papers/trans_caching.htm)
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
***************** Now from SmartFilter documentation
Make sure of these parameters:
cache_mem 8MB
cache_dir /usr/local/squid/cache 100 16 256
Change http_access deny all to http_access allow all. (May not need
this!)
Uncomment the cache_effective_user "username" statement and cha...