Mageia Bugzilla – Attachment 5765 Details for
Bug 14904
Share the Internet connection with other local machines: problems with squid and shorewall
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
Log In
[x]
|
New Account
|
Forgot Password
New internal squid.conf file
squid.conf.new (text/plain), 1.70 KB, created by
Bjarne Thomsen
on 2014-12-28 22:18:46 CET
(
hide
)
Description:
New internal squid.conf file
Filename:
MIME Type:
Creator:
Bjarne Thomsen
Created:
2014-12-28 22:18:46 CET
Size:
1.70 KB
patch
obsolete
>#http_port $squid_conf->{http_port}[0] intercept >http_port 3128 intercept ># forward proxy >http_port 3129 >acl localnet src 10.0.0.0/8 # RFC1918 possible internal network >acl localnet src 172.16.0.0/12 # RFC1918 possible internal network >acl localnet src 192.168.0.0/16 # RFC1918 possible internal network >#mynetwork src $intf->{NETWORK}/$prefix >acl mynetwork src 192.168.15.0/24 >acl SSL_ports port 443 >acl Safe_ports port 80 # http >acl Safe_ports port 21 # ftp >acl Safe_ports port 443 # https >acl Safe_ports port 70 # gopher >acl Safe_ports port 210 # wais >acl Safe_ports port 1025-65535 # unregistered ports >acl Safe_ports port 280 # http-mgmt >acl Safe_ports port 488 # gss-http >acl Safe_ports port 591 # filemaker >acl Safe_ports port 777 # multiling http >acl CONNECT method CONNECT >http_access deny !Safe_ports >http_access deny CONNECT !SSL_ports >http_access allow localhost manager >http_access deny manager >http_access allow mynetwork >http_access allow localnet >http_access allow localhost >http_reply_access allow all >icp_access allow all >#visible_hostname $squid_conf->{visible_hostname}[0] >visible_hostname myfirewall@mydomain.com >#append_domain .$internal_domain_name >append_domain .astronomy >#err_html_text $squid_conf->{admin_mail}[0] >err_html_text admin@mydomain.com >deny_info ERR_CACHE_ACCESS_DENIED all >#cache_dir ufs /var/spool/squid $squid_conf->{cache_size}[1] 16 256 >cache_dir ufs /var/spool/squid 100 16 256 >cache_store_log none >memory_pools off >coredump_dir /var/spool/squid >ie_refresh on >refresh_pattern ^ftp: 1440 20% 10080 >refresh_pattern ^gopher: 1440 0% 1440 >refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 >refresh_pattern . 0 20% 4320 >shutdown_lifetime 5 seconds >cache_effective_user squid >cache_effective_group squid
#http_port $squid_conf->{http_port}[0] intercept http_port 3128 intercept # forward proxy http_port 3129 acl localnet src 10.0.0.0/8 # RFC1918 possible internal network acl localnet src 172.16.0.0/12 # RFC1918 possible internal network acl localnet src 192.168.0.0/16 # RFC1918 possible internal network #mynetwork src $intf->{NETWORK}/$prefix acl mynetwork src 192.168.15.0/24 acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost manager http_access deny manager http_access allow mynetwork http_access allow localnet http_access allow localhost http_reply_access allow all icp_access allow all #visible_hostname $squid_conf->{visible_hostname}[0] visible_hostname myfirewall@mydomain.com #append_domain .$internal_domain_name append_domain .astronomy #err_html_text $squid_conf->{admin_mail}[0] err_html_text admin@mydomain.com deny_info ERR_CACHE_ACCESS_DENIED all #cache_dir ufs /var/spool/squid $squid_conf->{cache_size}[1] 16 256 cache_dir ufs /var/spool/squid 100 16 256 cache_store_log none memory_pools off coredump_dir /var/spool/squid ie_refresh on refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 shutdown_lifetime 5 seconds cache_effective_user squid cache_effective_group squid
View Attachment As Raw
Actions:
View
Attachments on
bug 14904
:
5765
|
5766
|
5772