Note: You must initialize new cache directories before you can start squid. If your cache directories are already initialized e. Note: If you just updated your Squid installation from 2. Most options are self explanatory.

Author:Gur Arashir
Language:English (Spanish)
Published (Last):28 September 2008
PDF File Size:16.12 Mb
ePub File Size:9.91 Mb
Price:Free* [*Free Regsitration Required]

The "filterip" and "filterport" directives define, respectively, the ip address and port of the proxy server. Set filterip to equal the ip that this machine has on your LAN, and filterport equal to the port you want the proxy to have; a good default is Important: If you want to be able to access this proxy remotely via an SSH server on the same machine, add another "filterip" line, and use the IP The "proxyip" directive is the IP address of the Squid proxy and "proxyport" is the port that the proxy listens on.

If you have been following this guide, leave it at Similarly, if you used the default Squid port suggested earlier, you can leave proxyport as This will mess them up. Simply adapt whatever other firewall method you are using to take into account the following. Alternately, you could explicitly block with: sudo ufw DENY But I chose the first way to make the system more secure overall. Setting up Web Proxy Auto Detection WPAD At this point, if everything has succeeded, you should be able to go into the proxy settings of your web browser and input the address and port of the proxy server we have just set up, and have a proxied connection protected by DansGuardian and ClamAV.

We want this information to be provided automatically for users, so we must proceed with the following steps to set up Auto Detection; note that this procedure still requires you to set up the web browser initially i. Essentially, WPAD works by serving a script to the browsers on your network via an http server.

Since I want this machine to be an all-in-one solution, I will go ahead with installing a web server now no fancy configuration is necessary, since users will not be interacting with the web server directly.

If you have a web server already existing on your network, and clients can connect to it locally, you can also adapt this configuration to place the WPAD script on that server instead. First, install lighttpd: sudo apt-get install lighttpd We need to associate the proper mime-type to the configuration script. Now in a web browser navigate to the IP address of your server and you should be greeted with the lighttpd default page, letting you know that the server is working!

Creating the Autoconfiguration Script "wpad.


Installing and configuring Squid and DansGuardian on FreeBSD



Dansguardian Internet Content Filtering





Related Articles