Squid Server Configuration: Part-2

<div dir="ltr" style="text-align: left;" trbidi="on"> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPr76rRefYQYNy3H3YV-RJBoH3S5zlD_tzYJD7Fol_NCJ9_TXYaZGAXFPle80xeHourAdT4VuTtutKfdV4k5SesTw0dU91sAdGLIi-zGprhG9BZcX2D0xH6V1rcfyvrjYfZfBHlI9e9sfj/s1600/Squid-Server-conifg-part-2-700x454.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPr76rRefYQYNy3H3YV-RJBoH3S5zlD_tzYJD7Fol_NCJ9_TXYaZGAXFPle80xeHourAdT4VuTtutKfdV4k5SesTw0dU91sAdGLIi-zGprhG9BZcX2D0xH6V1rcfyvrjYfZfBHlI9e9sfj/s1600/Squid-Server-conifg-part-2-700x454.jpg" /></a></div> <h2 style="text-align: left;"> <br /></h2> <div class="wpb_row row-fluid"> <h2 style="text-align: left;"> </h2> <div class="span12 wpb_column column_container"> <div class="wpb_wrapper"> <div class="td_block_wrap td_text_with_title"> <h2 class="block-title" style="text-align: left;"> <b><span style="font-weight: normal;">How to block flash videos using Squid ? : rep_mime_type</span></b></h2> <h2 class="block-title" style="text-align: left;"> <b><span style="font-weight: normal;"> </span></b></h2> <div class="td_mod_wrap"> To block certain content types. Squid currently can not do “content inspection” to decide on the file type based on the contents, but it is able to block HTTP replies based on MIME  ( file extension type) Block flash video<br /> The MIME type for such content is “video/x-flv”.   Edit /etc/squid/squid.conf<br /> Create an ACL<br /> <strong>acl  block-flashvideos  rep_mime_type  video/x-flv</strong><br /> Set Action<br /> <strong>http_reply_access  deny  block-flashvideos</strong><br /> It will block flash videos</div> </div> </div> </div> </div> <div class="wpb_row row-fluid"> <div class="span12 wpb_column column_container"> <div class="wpb_wrapper"> <div class="td_block_wrap td_text_with_title"> <h2 class="block-title" style="text-align: left;"> <span> </span></h2> <h2 class="block-title" style="text-align: left;"> <span>How to Block Internet Explorer Browser With Squid ?</span></h2> <div class="td_mod_wrap"> acl syntax :<br /> acl <strong><acl name></strong> browser  <strong><UserAgent></strong> Edit squid.conf for<br /> <br /> <strong>acl block_browser browser MSIE</strong><br /> <strong>http_access deny block_browser</strong><br /> is also possible to block specific version or other browsers too:<br /> <strong>acl block_bad_browser browser MSIE.9</strong><br /> <strong>acl block_bad_browser browser MSIE.10</strong><br /> <strong>acl block_bad_browser browser Firefox</strong><br /> <strong>acl block_bad_browser browser Chrome/38</strong><br /> <strong>http_access deny block_bad_browser</strong></div> </div> </div> </div> </div> <div class="wpb_row row-fluid"> <div class="span12 wpb_column column_container"> <div class="wpb_wrapper"> <div class="td_block_wrap td_text_with_title"> <h2 class="block-title" style="text-align: left;"> <span> </span></h2> <h2 class="block-title" style="text-align: left;"> <span>How to configure squid to use multiple outgoing IP addresses ?</span></h2> <div class="td_mod_wrap"> We have a  Linux PC with multiple IP Address  and  Squid Proxy Server  configured, Our  browser to use that proxy on one of these IP and go out from that server with the same IP and not with the default ip .<br /> This is very useful if you have services that require 1 specific IP to be allowed, or if you want to give the proxy server to different people and still be able to trace what they do. To implement this follow the steps<br /> <br /> Use multiple IP addresses based on the squid’s IP being used as proxy server<br /> <strong> </strong><br /> <strong>acl  IPADDRESS-1  myip  192.168.0.20</strong><br /> <strong>acl  IPADDRESS-1   myip  192.168.0.21</strong><br /> <strong>acl  IPADDRESS-1   myip  192.168.0.23</strong><br /> <strong>tcp_outgoing_address 192.168.0.20  IPADDRESS-1  </strong><br /> <strong>tcp_outgoing_address 192.168.0.21  IPADDRESS-2  </strong><br /> <strong>tcp_outgoing_address 192.168.0.23  IPADDRESS-3 </strong><br /> <br /> </div> </div> </div> </div> </div> <div class="wpb_row row-fluid"> <div class="span12 wpb_column column_container"> <div class="wpb_wrapper"> <div class="td_block_wrap td_text_with_title"> <h2 class="block-title" style="text-align: left;"> <span>How to Clear Squid Proxy Cache Directory and Re-create ?</span></h2> <div class="td_mod_wrap"> We can clear cache by deleting these, and recreate , follow steps <strong># squid -k shutdown</strong><br /> or<br /> <strong># service squid stop</strong><br /> <strong># cd   /var/spool/squid</strong>  <span style="color: red;"> <—This is cache dir</span><br /> <strong># rm -rf *</strong><br /> <strong># squid -z</strong><br /> 2015/06/13 12:13:24| Creating Swap Directories<br /> Note: this will recreate cache directories again<br /> <strong># ls</strong><br /> 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F<br /> <strong># service squid start</strong><br /> Note : Its better to use ‘squid -k reconfigure’ rather thant restarting squid as it wont have to stop the cache, so its almost instant.<br /> <strong>Verify Squid for up and running</strong><br /> <br /> <strong># netstat -tulpn | grep :3128</strong><br /> <strong># tail -f /var/log/squid/access.log</strong><br /> <strong># tail -f /var/log/squid/cache.log</strong></div> </div> </div> </div> </div> <div class="wpb_row row-fluid"> <div class="span12 wpb_column column_container"> <div class="wpb_wrapper"> <div class="td_block_wrap td_text_with_title"> <h3 class="block-title" style="text-align: left;"> <span>About Squid Logs </span></h3> <div class="td_mod_wrap"> <strong>/var/log/squid/</strong> is the default directory for squid logs there are three logs<br /> <strong>/var/log/squid/access.log : </strong>Surfing details, we can view who is doing what in this log.<br /> <strong> /var/log/squid/cache.log :</strong> The cache.log file contains the debug and error messages that squid generates<br /> <strong> /var/log/squid/store.log :</strong> The store.log file covers the objects currently kept on disk or removed ones.<br /> <h3 style="text-align: left;">  </h3> <h3 style="text-align: left;"> </h3> <h3 style="text-align: left;"> <strong>Disable logging in Squid Proxy</strong></h3> If we have any requirements of disabling logs of squid proxy service. Follow these simple steps to disable all kind of logging by squid service.<br /> To disable access log, edit <strong>/etc/squid/squid.conf</strong><br /> ​access_log none<br /> To disable store log, edit <strong>/etc/squid/squid.conf</strong><br /> cache_store none<br /> To disable cache log, edit /<strong>etc/squid/squid.conf</strong><br /> cache_log /dev/null<br /> logfile_rotate 0</div> </div> </div> </div> </div> </div>

Squid Server Configuration: Part-2

How to block flash videos using Squid ? : rep_mime_type   To block certain content types. Squid currently can not ...

Read more »