Re: [squid-users] squid with dansguardian

From: Dave Burkholder <dave_at_thinkwelldesigns.com>
Date: Mon, 07 Oct 2013 19:58:53 -0400

No squid is not bypassed. The order flow is:

Browser -> Dansguardian -> Squid -> Internet

If you're wanting to limit access via squid ACLs, that's another aspect
altogether.

acl myLan src 10.0.4.0/24

http_access deny myLan all

Do you have something like that in squid.conf?

On 10/7/2013 5:00 PM, Stefano Malini wrote:
> I'm sorry Dave, but, in this way squid proxy doesn't affect browsing.
>
> Trying to deny the access to all my network (deny myLan) on
> squid.conf, it doesn't stop me and i can browse as i want!
>
> At the moment every http request (dport 80) is redirected --to-port
> 8080 (dansguardian). Is squid bypassed?
>
> 2013/10/7 Stefano Malini <stefano.malini_at_gmail.com>:
>> Thank you Dave! it's running
>> Eliezer, with your answer i have known the usefulness of cache_peer directive!
>>
>> 2013/10/7 Dave Burkholder <dave_at_thinkwelldesigns.com>:
>>> If you want filtering, iptables should redirect to port 8080 instead of
>>> 3128.
>>>
>>> Also, squid's 3128 should not be in transparent mode.
>>>
>>> If you make those two changes, you should be operational.
>>>
>>> -Dave
>>>
>>>
>>> On 10/6/2013 12:59 PM, Stefano Malini wrote:
>>>> Dear all,
>>>> this is my first message because i'm having some diffuculties
>>>> configuring a proxy server on a raspberry with raspbian distro.
>>>>
>>>> I installed Squid 3.1.20 and Dansguardian.
>>>>
>>>> Squid is listen on port 3128, in transparent mode and it runs. I set
>>>> iptables to redirect http requests to port 3128.
>>>> The http requests are registered on squid cache/access logs files so it
>>>> runs
>>>>
>>>> I installed Dansguardian also and configured to listen on port 8080
>>>> but it seems that Squid doesn't communicate with Dansguardian.
>>>> In dansguardian.conf file i set the proxy ip on 127.0.0.1, port 3128.
>>>>
>>>> I think it's very easy to solve it but until now is still unsolved.
>>>>
>>>> Do you have any idea about?
>>>>
>>>> Thanks
>>>
Received on Mon Oct 07 2013 - 23:58:54 MDT

This archive was generated by hypermail 2.2.0 : Tue Oct 08 2013 - 12:00:21 MDT