I am configuring Squid as a Reverse Proxy With caching Enable For remote apache server.

Buts Hits Are Going to Main Apache Server.
How can i enable caching For that Remote Server.

Below is the details of scenario:

proxy.com this is the server where i have configured proxy machine (10.0.0.1)

And My Apache is installed on (10.0.0.1) with site name (main.com)

But unable to caching ..

Any Help Will Be appreciate.

Thanks,
Bipin Bahuguna

i want to setup a proxy server plz setup setup by setup command mail me.

mashuk

And i want to monitor all the logs (i.e. ftp, p2p softwares,IM etc.. ) under my squid server.

How it is possible ?

Thanks,

Authentication doesn’t work with Transparent proxy….
Is there any other way ?

Thanks,

Step 1. Install the Ubuntu Server 10, include LAMP if you want

Step 2. Change the network interfaces from dhcp to static

Sudo nano /etc/network/interfaces

auto eth0
iface eth0 inet static
address 192.168.1.250
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.88

post-up iptables-restore < /etc/iptables.up.rules

auto eth1
iface eth1 inet static
address 192.168.2.1
netmask 255.255.255.0
network 192.168.2.0
broadcast 192.168.2.255

Step 3. Install Web Admin (webmin) (Optional)

wget http://prdownloads.sourceforge.net/webadmin/webmin_1.510-2_all.deb
dpkg --install webmin_1.510-2_all.deb
sudo apt-get -f install

https://localhost-IP ADDRES:10000

*Note Make sure you give permission to the IPTABLES ruleset to for you to access webmin over the net.

Step 4. Install ClamAV and ClamAV-freshclam

sudo apt-get install clamav clamav-freshclam

Step 5. The first step is to install squid 3

apt-get install squid3

edit the squid 3 configuration file in your favorite editor

sudo nano /etc/squid3/squid.conf

and set the transparency and the allowed hosts

http_port 3128 transparent
acl our_networks src 192.168.2.0/24
acl localnet src 127.0.0.1/255.255.255.255
http_access allow our_networks
http_access allow localnet

where 192.168.2.0/24 is the IP range of local network. Probably you need to adjust the swap size

cache_dir ufs /var/spool/squid3 7000 16 256

where the first number denotes the size of cache in megabytes. Save you changes and restart the squid proxy by

sudo /etc/init.d/squid3 restart

Step 6. Edit the /etc/sysctl.conf

Sudo nano /etc/sysctl.conf

Uncomment the line that enable packet forwarding for IPv4 and IPv6
Net.ipv4.ip_forward = 1
Net.ipv6.conf.all.forwarding = 1

Step 7. Edit the IPTABLE ruleset of NAT and FILTER

Sudo nano /etc/iptables.up.rules

*nat

-A PREROUTING –i eth1 –p tcp –m tcp --dport 80 –j DNAT --to-destination 192.168.2.1:3128
-A PREROUTING –i eth1 –p tcp –m tcp --dport 80 –j REDIRECT --to-ports 3128
-A POSTROUTING –s 192.168.2.0/24 –o eth0 –j MASQUERADE

*filter

-A INPUT –i lo –j ACCEPT
-A INPUT –m state –i eth0 –state REALATED,ESTABLISHED –j ACCEPT
-A INPUT eth1 –j ACCEPT
-A INPUT –p tcp –m tcp --dport 22 –j ACCEPT # permit ssh using putty
-A INPUT –p tcp –m tcp --dport 10000 –j ACCEPT # permit webmin access
-A INPUT –j LOG
-A INPUT –j DROP
-A FORWARD –i eth1 –j ACCEPT
-A OUTPUT –o lo –j ACCEPT
-A OUTPUT –o eth1 –j ACCEPT
-A FOWARD –o eth1 –j ACCEPT
-A FORWARD –s 192.168.2.0/24 –o eth0 –j ACCEPT
-A FORWARD –d 192.168.2.0/24 –m state --state ESTABLISHED,REALTED –I eth0 –j ACCEPT

STEP 8. Edit rc.local

Sudo nano /etc/rc.local

iptables -t nat -A POSTROUTING -s 192.168.2.0/24 –o eth0 -j MASQUERADE

Step 9. reboot the server

Step 10. Configure the workstation for static IP Address making the LAN IP of the Ubuntu box as the gateway. Make sure that the IP Address of the work station is within the network you setup.

# Squid normally listens to port 3128
http_port 3128 transparent

I can ssh the machine on which the proxy runs, but I cannot access the backend servers(machines) via ssh.

Let’s say the proxy machine itself has the ssh 22xx
and the other three machines in the back end have each a different SSH port number example.

Proxy machine SSH 2222 works
Machine1 SSH 2223 doesn’t work
Machine2 SSH 2224 doesn’t work
Machine3 SSH 2225 doesn’t work

I mean the access is refused
Even though through my router Cisco/Linksys I have forwarded SSH requests to each of these machines

I even added the above ports as Safe_ports in my squid config but still can’t access them.

Any suggestions or ideas would be very much appreciated.

I have posted on the userssquid mailing list but nobody replied or even tried to help me with it.

Thank you all

with squid v2.7 you just need to add “transparent” to http_port.

squid.conf:
# Squid normally listens to port 3128
http_port 3128 transparent

Working on lucid.

Setting up proxy server. All windows box in LAN have proxy settings to 192.168.0.1:3128

My iptables rule to share internet connection is:
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

if i want to do transparent proxy? do i have to edit that rule? or add a new rule(without touching my current iptables rule)?

I then decided to use a proxy server on one machine, and use three other machine each will hold it’s own website, domain name, and database.

meaning serving three different websites from three different machines on the same network.

My confusion is this:
I hear that the proxy server listens on port 3128
Now let’s say I have websites A, B, C on M1, M2, M3

How can serve these three websites with the proxy server??
people can’t type http://mydomain-name.com:3128 every-time, I am sure we can configure it so people will access the website by simply typing http://www.mysite.com etc… any ideas please?

Thank you guys

iptables -t nat -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.10.1:5050
iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 5050

i want to configure the squid proxy server.
now i tried to install the squid in my server. its installed. i have made the changes but its not working properly.below i have mentioned the error message. help me

root@srv1:~# /etc/init.d/squid restart
* Restarting Squid HTTP proxy squid * Waiting… * … * … * … * … * … * … [ OK ]
2009/07/11 13:28:03| decode_addr: Invalid IP address ’80′
2009/07/11 13:28:03| squid.conf line 18: acl www_ports src 80 443
2009/07/11 13:28:03| aclParseIpData: Ignoring invalid IP acl entry: unknown first address ’80′
2009/07/11 13:28:03| decode_addr: Invalid IP address ’443′
2009/07/11 13:28:03| squid.conf line 18: acl www_ports src 80 443
2009/07/11 13:28:03| aclParseIpData: Ignoring invalid IP acl entry: unknown first address ’443′
2009/07/11 13:28:03| aclParseAclLine: WARNING: empty ACL: acl www_ports src 80 443
2009/07/11 13:28:03| aclParseIpData: WARNING: Netmask masks away part of the specified IP in ’192.168.1.2/192.168.1.253′
2009/07/11 13:28:03| parseConfigFile: squid.conf:33 unrecognized: ‘HTTP’
2009/07/11 13:28:03| aclParseIpData: WARNING: Netmask masks away part of the specified IP in ’192.168.1.2/192.168.1.253′
2009/07/11 13:28:03| parseConfigFile: squid.conf:38 unrecognized: ‘FTP’
2009/07/11 13:28:03| aclParseIpData: WARNING: Netmask masks away part of the specified IP in ’192.168.1.2/192.168.1.25′
2009/07/11 13:28:03| WARNING: ’192.168.1.0/192.168.1.253′ is a subnetwork of ’0.0.0.0/0.0.0.0′
2009/07/11 13:28:03| WARNING: because of this ’0.0.0.0/0.0.0.0′ is ignored to keep splay tree searching predictable
2009/07/11 13:28:03| WARNING: You should probably remove ’192.168.1.0/192.168.1.253′ from the ACL named ‘all’
2009/07/11 13:28:03| WARNING: ’192.168.1.0/255.255.255.0′ is a subnetwork of ’192.168.1.0/255.255.255.0′
2009/07/11 13:28:03| WARNING: because of this ’192.168.1.0/255.255.255.0′ is ignored to keep splay tree searching predictable
2009/07/11 13:28:03| WARNING: You should probably remove ’192.168.1.0/255.255.255.0′ from the ACL named ‘internal_network’
2009/07/11 13:28:03| WARNING: ’127.0.0.1′ is a subnetwork of ’127.0.0.1′
2009/07/11 13:28:03| WARNING: because of this ’127.0.0.1′ is ignored to keep splay tree searching predictable
2009/07/11 13:28:03| WARNING: You should probably remove ’127.0.0.1′ from the ACL named ‘localhost’
[ OK ]

if.you.really.use.squid.version.2,6.x.above
try.this one…add.-------->>”transparent” beside your http_port
##########################################
# Squid normally listens to port 3128
http_port 3128 transparent
##########################################

and.dont.use.this.script
##########################################
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
##########################################

coz.i.knew.that.work.only.on.squid.ver.2.5.x.x