{"id":194,"date":"2010-06-19T00:23:58","date_gmt":"2010-06-18T23:23:58","guid":{"rendered":"http:\/\/simkin.org\/wordpress\/?p=194"},"modified":"2010-06-19T00:47:05","modified_gmt":"2010-06-18T23:47:05","slug":"squid-on-ubuntu","status":"publish","type":"post","link":"http:\/\/simkin.org\/wordpress\/?p=194","title":{"rendered":"Squid on Ubuntu"},"content":{"rendered":"

I want to build a transparent squid proxy for home to play around with wccp configs. First step is to get a working squid proxy:<\/p>\n

cd ~
\nwget http:\/\/www.squid-cache.org\/Versions\/v3\/3.1\/squid-3.1.4.tar.gz
\ntar zxf squid-3.1.4.tar.gz
\ncd squid-3.1.4<\/p>\n

sudo .\/configure –prefix=\/usr –localstatedir=\/var –libexecdir=\/usr\/lib\/squid –srcdir=. –datadir=\/usr\/share\/squid –sysconfdir=\/etc\/squid –with-logdir=\/var\/log –with-pidfile=\/var\/run\/squid.pid –enable-wccp<\/p>\n

make
\nmake install<\/p>\n

cd \/etc\/squid
\nsudo vi squid.conf<\/p>\n

squid.conf:<\/p>\n

<\/p>\n

\n
http_port 3128<\/pre>\n
hierarchy_stoplist cgi-bin ?<\/pre>\n
refresh_pattern ^ftp:\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>1440\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>20%\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>10080<\/pre>\n
refresh_pattern ^gopher:\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>1440\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>0%\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>1440<\/pre>\n
refresh_pattern -i (\/cgi-bin\/|\\?) 0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>0%\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>0<\/pre>\n
refresh_pattern .\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>20%\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span>4320<\/pre>\n
acl manager proto cache_object<\/pre>\n
acl localhost src 127.0.0.1\/32<\/pre>\n
acl to_localhost dst 127.0.0.0\/8<\/pre>\n
acl localnet src 10.0.0.0\/8\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span># RFC 1918 possible internal network<\/pre>\n
acl localnet src 172.16.0.0\/12\u00c2\u00a0 <\/span># RFC 1918 possible internal network<\/pre>\n
acl localnet src 192.168.0.0\/16 # RFC 1918 possible internal network<\/pre>\n
acl SSL_ports port 443<\/pre>\n
acl Safe_ports port 80\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span># http<\/pre>\n
acl Safe_ports port 21\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span># ftp<\/pre>\n
acl Safe_ports port 443\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span># https<\/pre>\n
acl Safe_ports port 70\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span># gopher<\/pre>\n
acl Safe_ports port 210\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span># wais<\/pre>\n
acl Safe_ports port 1025-65535\u00c2\u00a0 <\/span># unregistered ports<\/pre>\n
acl Safe_ports port 280\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span># http-mgmt<\/pre>\n
acl Safe_ports port 488\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span># gss-http<\/pre>\n
acl Safe_ports port 591\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span># filemaker<\/pre>\n
acl Safe_ports port 777\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 <\/span># multiling http<\/pre>\n
acl CONNECT method CONNECT<\/pre>\n
http_access allow manager localhost<\/pre>\n
http_access deny manager<\/pre>\n
http_access deny !Safe_ports<\/pre>\n
http_access deny CONNECT !SSL_ports<\/pre>\n
http_access allow localhost<\/pre>\n
http_access allow localnet<\/pre>\n
http_access deny all<\/pre>\n<\/div>\n
start squid with: sudo squid -z<\/p>\n
check it is running: ps -el | grep squid<\/p>\n
Check the access log: cat \/etc\/access.log<\/p>\n
Next step is getting WCCP configured:<\/p>\n
http:\/\/wiki.squid-cache.org\/Features\/Wccp\u00c2\u00a0 & http:\/\/wiki.squid-cache.org\/ConfigExamples\/Intercept\/LinuxDnat<\/p>\n","protected":false},"excerpt":{"rendered":"
I want to build a transparent squid proxy for home to play around with wccp configs. First step is to … More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":""},"categories":[3],"tags":[213,211,140,212],"jetpack_featured_media_url":"","_links":{"self":[{"href":"http:\/\/simkin.org\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/194"}],"collection":[{"href":"http:\/\/simkin.org\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/simkin.org\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/simkin.org\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/simkin.org\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=194"}],"version-history":[{"count":0,"href":"http:\/\/simkin.org\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/194\/revisions"}],"wp:attachment":[{"href":"http:\/\/simkin.org\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/simkin.org\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=194"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/simkin.org\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}