Squid Configuration

Hope someone can help me out here.

I'm running diskless workstations with Mandrake 9.1. I want to set up
a proxy server so I can control what sites the stations have access
to. I installed squid and kept most of the defaults, just specifying
the network in the control lists and putting my hostname in. Squid
runs, and I set my http proxy in mozilla to my IP address and port
3128. But whenever I try to go to a web page, the proxy refuses the
connection. I really have no idea what I need to change from default.

Another thing that I'm sure I'll have to deal with is the company
proxy server. How do I send the requests that squid approves off to
the other proxy? That one is set up with an automatic configuration
script, ie 'http://ourdomain.com/autoproxy.pac'). Does this need to
be set as a parent? I could really use a step by step how-to on this
program, a lot of it is over my head.

If there's a simpler way to do what I want - tell the stations that
they may visit sites A, B, and C, but nowhere else, I'll take that as
well.

Thanks again!

On 15 Aug 2003, maddman wrote:

> Hope someone can help me out here.
>
>
> Another thing that I'm sure I'll have to deal with is the company
> proxy server. How do I send the requests that squid approves off to
> the other proxy? That one is set up with an automatic configuration

Configure the other proxy as a "parent". Look for cache_peer in the config
file. You can have multiple parents.

> script, ie 'http://ourdomain.com/autoproxy.pac').

You would need to download this file and examine it. It is a script, but
you should be able to figure out how to configure squid from it.

> Does this need to be set as a parent?

Not the URL that you posted, but as said before the URL when downloaded
has a script from which you can extract the relevent information.

"maddman" wrote
> I'm running diskless workstations with Mandrake 9.1. I want to set up
> a proxy server so I can control what sites the stations have access
> to. I installed squid and kept most of the defaults, just specifying
> the network in the control lists and putting my hostname in. Squid
> runs, and I set my http proxy in mozilla to my IP address and port
> 3128. But whenever I try to go to a web page, the proxy refuses the
> connection.
This may be moronic, but are you sure your mandrake security isn't
doing this? Check the tail of /var/log/messages or whatever {sorry,
I'm a redhat kinda guy} in case you get lucky and the firewall logs the
dropped packets. If you briefly load apache and set a workstation to
not proxy, can you browse the mandrake-hosted demo web page?
If you load up X or lynx can you browse out of mandrake to the web?
{I suppose a guru could just telnet to port 80 of a web site to test
that bit instead...}

"Frank Winans" wrote
> "maddman" wrote
> > Squid runs,
> > and I set my http proxy in mozilla to my IP address and port
> > 3128. But whenever I try to go to a web page, the proxy refuses the
> > connection.
> This may be moronic, but are you sure your mandrake security isn't
> doing this?
It was! It was moronic! Edit /etc/squid/squid.conf and create a new acl
statement mentioning your lan address range {like 192.168.0.0/255.0.0.0}
and later about where you see the accept localhost line plop in another
for accept mylan or whatever you called it in your new acl above.
Restart squid or the whole server and you should be able to web browse
via squid. Note that on my redhat other server I can lynx using squid on the
firewall by sticking this line in /root/.bashrc to provide suitable http_proxy variable;
export http_proxy='http://192.168.0.1:3128/'
where 192.168.0.1 is the firewall box.