Specifications

B
Proxy Server: Squid
cache_store_log /var/squid/logs/store.log path for log message
These three entries specify the path where Squid will log all of its ac-
tions. Normally, nothing is changed here. If Squid is experiencing a
heavy usage burden, it might make sense to distribute the cache and
log files over several disks.
emulate_httpd_log off If the entry is set to on, obtain readable log files.
Some evaluation programs cannot interpret this, however.
client_netmask 255.255.255.255 With this entry, mask the logged IP ad-
dresses in the log files to hide the clients’ identity. The last digit of the
IP address will be set to zero if you enter 255.255.255.0 here.
ftp_user Squid@ With this, set the password which Squid should use for the
anonymous FTP login. The login anonymous and your e-mail address
as password are generally used to access public FTP servers, which
saves the trouble of entering your user name and password each time
you download FTP. Squid@ without the domain is the default, because
the clients can originate from any domain. It can still make sense, how-
ever, to specify a valid e-mail address here, because some FTP servers
can check these for validity.
cache_mgr webmaster An e-mail address to which Squid sends a message if
it unexpectedly crashes. The default is webmaster.
logfile_rotate 0 If you call up squid -k rotate, Squid can rotate se-
cured log files. The files will be enumerated in this process and af-
ter reaching the specified value, the oldest file at that point will be
overwritten. This value here normally is 0, because archiving and
deleting log files in SuSE Linux is carried out by a cronjob in the
configuration file /etc/logfiles. The period of time after which
the files are deleted is defined in the /etc/rc.config file via the
MAX_DAYS_FOR_LOG_FILES entry.
append_domain <domain> With append_domain, specify which domain
will automatically be appended when none is given. Usually, your own
domain is entered here, so entering www in the browser suffices to guar-
antee access to your own web server.
forwarded_for on If you set the entry to off, Squid will remove the IP ad-
dress and the system name of the client from the HTTP requests.
negative_ttl 5 minutes; negative_dns_ttl 5 minutes
Normally, you do not need to change these values. If you have a dial-
up connection, however, the Internet may, at times, not be accessible.
175SuSE Linux – Firewall on CD2