Re: [squid-users] Squid FreeBSD 6.2 and PF

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Mostafa Faridi,

On Sat, 29 Sep 2007 12:05:03 +0330
mostafa faridi <mostafafaridi@gmail.com> wrote:

> Tek Bahadur Limbu wrote:
> > Hi Mostafa Faridi,
> >
> >
> > mostafa faridi wrote:
> >> I am new user in squid I want use squid , my firewall is PF and my OS
> >> is FreeBSD I want make my system for NAT.
> >>
> >> I would be grateful if someone help my I do this .
> >
> > You can check out the following URL to use Squid with PF.
> >
> > http://www.benzedrine.cx/transquid.html
> >
> > Which version of FreeBSD are you using? What kind of proxy server do
> > you want to use squid for? Transparent or just a normal forward proxy?
> >
> > Since you will be using PF, remember to include the following
> > parameter while compiling Squid either from source or from ports:
> >
> > "--enable-pf-transparent"
> >
> > Go for the latest stable release of Squid which is Squid-2.6.STABLE16
> > currently.
> >
> > You can find the source package from the URL below:
> >
> > http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE16.tar.gz
> >
> >
> > To achieve NATing using PF, the following tutorial will help:
> >
> > http://www.section6.net/wiki/index.php/Setting_up_a_Firewall_NAT_using_PF
> >
> >
> > Personally for me, I am using IPFW over PF because I was introduced to
> > IPFW first.
> >
> > However, both should do the job fine.
> >
> > Hope that helps.
> >
> >
> > Thanking you...
> >
> >
> >
> >>
> >>
> >>
> >
> >
> I go to http://www.benzedrine.cx/transquid.html and do everything but
> when I type in termianl
>
> squid -k reconfigure I see this result
>
> [root@squid /home/mostafa]# squid -k reconfigure
> 2007/09/29 09:43:39| parseConfigFile: line 4515 unrecognized:
> 'httpd_accel_host virtual'
> 2007/09/29 09:43:39| parseConfigFile: line 4516 unrecognized:
> 'httpd_accel_port 80'
> 2007/09/29 09:43:39| parseConfigFile: line 4517 unrecognized:
> 'httpd_accel_with_proxy on'
> 2007/09/29 09:43:39| parseConfigFile: line 4518 unrecognized:
> 'httpd_accel_uses_host_header on'
>

The transparent config has changed in Squid-2.6 in comparsion to Squid-2.5.

In fact it has been made easy!

Instead of using:

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

Simply use:

http_port 3128 transparent

After changing the above lines, do "squid -k reconfigure". It should work out fine.

Hope that helps.

Thanking you...

- --

With best regards and good wishes,

Yours sincerely,

Tek Bahadur Limbu

System Administrator

(TAG/TDG Group)
Jwl Systems Department

Worldlink Communications Pvt. Ltd.

Jawalakhel, Nepal
http://wlink.com.np/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (FreeBSD)

iD8DBQFG/2VFfpE0pz+xqQQRAkI2AKC9+k41lMXa4SmPzdPwyT0PJa47UQCgix+2
82FbNZyUDBYxzWfInuNaVW0=
=st4/
-----END PGP SIGNATURE-----
Received on Sun Sep 30 2007 - 02:59:07 MDT