Shorewall users - Jan 2003 - Squid ports to open

Hello,
    Have a question I am new to squid, although I have about 100~150 hours of
study in the last month to move up quickly. I have set up rh 7.1 on a 300 mgz
intell celeron
128mb ram 8gb hd. shorewall 1.2.9 running webmin with openssl access and
squidGuard filter. I set it up this weekend to work with  a fairly small network
that masquerades through shorewall. It serves 60 windows boxs most win98 maybe 8
win2k a few XP. It seems to be doing good only one phone call today.
    My question is I have learned that I hardly everlet fw to net rules until
squid except dns rules. I have the local port forward command that redirects 80
to 3128.
along with 
"accept fw to net 443"
"accept fw to net 80"
    I am unsure of any other ports that squid might need above 1000 to open and
I of course want to open what is neccessary.
I also included all the hardward info for squid guru''s to tell me if I
have any underated hardware for this.

Thanks

Mike

--On Tuesday, January 28, 2003 2:29 PM -0800 landers@lanlinecomputers.com 
wrote:
> Hello,
>     Have a question I am new to squid, although I have about 100~150
> hours of study in the last month to move up quickly. I have set up rh 7.1
> on a 300 mgz intell celeron 128mb ram 8gb hd. shorewall 1.2.9 running
> webmin with openssl access and squidGuard filter. I set it up this
> weekend to work with  a fairly small network that masquerades through
> shorewall. It serves 60 windows boxs most win98 maybe 8 win2k a few XP.
> It seems to be doing good only one phone call today.      My question is
> I have learned that I hardly everlet fw to net rules until squid except
> dns rules. I have the local port forward command that redirects 80 to
> 3128. along with
> "accept fw to net 443"
> "accept fw to net 80"
That''s all you need for web caching.

-Tom
--
Tom Eastep   \ Shorewall - iptables made easy
Shoreline,    \ http://www.shorewall.net
Washington USA \ teastep@shorewall.net