Specifications

B
Proxy Server: Squid
Kernel Configuration
First, make sure that the proxy server’s kernel has support for transparent
proxies. Otherwise, add this option to the kernel and compile it again.
In the entry corresponding to Networking Options, select ‘Network Firewalls’
then the options ‘IP: firewalling’ and ‘IP: Transparent proxying’. Now, save
the new configuration, compile the new kernel, install it, reconfigure LILO if
necessary, and restart the system.
Configuration Options in /etc/squid.conf
The options that need to be activated in the /etc/squid.conf file to get
the transparent proxy up and running are:
httpd_accel_host virtual
httpd_accel_port port 80, where the actual HTTP server listens
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
The default configuration as defined by the file /etc/squid.conf gives
access to the proxy only from localhost. Therefore, it may be necessary to
define additional access rules. See Section B on page 176.
Squid and Other Programs
In the following section, we will see how other applications interact with
Squid. cachemgr.cgi enables the system administrator to check the amount
of memory needed for caching objects, squidgrd filters web pages, and
Calamaris is a report generator for Squid.
SquidGuard
This section is not intended to go through an extensive configuration of
SquidGuard, only to introduce it and give some advice on using it. For
more in-depth configuration issues, refer to the SquidGuard web site at
http://www.squidguard.org
179SuSE Linux – Firewall on CD2