Re: [squid-users] novice quest

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 05 Apr 2002 22:04:50 +0200

Aman Raheja wrote:
>
> I have linux box1 with external interface eth0 with IP a.b.c.d connected to
> a cable modem and internal interface eth1 192.168.0.1 connected to internal
> n/w.
> I have added the following 2 line in the default squid.conf file.
>
> acl amannet src 192.168.0.0/255.255.255.0
> http_access allow amannet
>
> Do I need to do smthg else on my system so that I can access Internet
> through my internal network interface eth1.

No, this is usually sufficient.

For security reasons you might want consider to make Squid only listen
on your internal interface as well.. see the http_port directive. (in
such case, see also icp_port, htcp_port, snmp_port and
udp_incoming_address).

firewalling the Linux box is probably also a good idea. See "iptables"
(or "ipchains" if you are running a older Linux version using
linux-2.2.X kernels)

Regards
Henrik Nordström
Squid Developer
Received on Fri Apr 05 2002 - 14:06:06 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:07:28 MST