Datasheet

“main” (Installation and Administration) — 2004/6/25 — 13:29 — page 614 — #640

Example 25.2: Access Rules

acl manager proto cache_object

acl localhost src 127.0.0.1/255.255.255.255

acl webserver src 192.168.1.7/255.255.255.255 # webserver IP

Then add the rules in Example 25.3.

Example 25.3: Access Rules

http_access allow manager localhost

http_access allow manager webserver

http_access deny manager

Conﬁgure a password for the manager for access to more options, like clos-

ing the cache remotely or viewing more information about the cache. For

this, conﬁgure the entry cachemgr_passwd with a password for the man-

ager and the list of options to view. This list appears as a part of the entry

comments in /etc/squid/squid.conf.

Restart Squid every time the conﬁguration ﬁle is changed. Do this easily

with rcsquid reload.

Viewing the Statistics

Go to the corresponding web site — http://webserver.example.

org/cgi-bin/cachemgr.cgi. Press ‘continue’ and browse through the

different statistics. More details for each entry shown by the cache man-

ager is in the Squid FAQ at http://www.squid-cache.org/Doc/FAQ/

FAQ-9.html.

25.3.8 squidGuard

This section is not intended to explain an extensive conﬁguration of squid-

Guard, only to introduce it and give some advice for using it. For more

in-depth conﬁguration issues, refer to the squidGuard web site at http:

//www.squidguard.org.

squidGuard is a free (GPL), ﬂexible, and fast ﬁlter, redirector, and access

controller plug-in for Squid. It lets you deﬁne multiple access rules with

different restrictions for different user groups on a Squid cache. squid-

Guard uses Squid’s standard redirector interface.

614 25.3. Proxy Server: Squid