+ Post New Thread
Results 1 to 9 of 9
Internet Related/Filtering/Firewall Thread, Squid + Dansguardian? No internet through proxy. in Technical; Hi, I've just re-installed Ubuntu after i had finished playing with squid and dansguardian to start from fresh and i ...
  1. #1

    Join Date
    Nov 2011
    Posts
    628
    Thank Post
    87
    Thanked 21 Times in 19 Posts
    Rep Power
    10

    Squid + Dansguardian? No internet through proxy.

    Hi,

    I've just re-installed Ubuntu after i had finished playing with squid and dansguardian to start from fresh and i cant get it working now.

    We have a proxy provided by the LEA that we must connect to so squid is going to be inbetween.

    I've set it up following this guide
    The Daily Admin: How-to install Virtual Machine with Ubuntu/Squid/Dansguardian/Clam AV/Bannerfilter/SARG

    I've also added the following to squid.conf
    Code:
    cache_peer 10.*.*.* parent 8080 0 no-query proxy-only
    never_direct allow all
    (* replaces IP Address numbers)

    I have obviously missed something as it was working before i reinstalled.

    Any ideas?

    Thanks
    Last edited by dany2010; 7th November 2012 at 11:58 AM.

  2. #2

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,816
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Are you literally putting 10.*.*.*?

    this has to be a full hostname or IP address.

  3. #3

    Join Date
    Nov 2011
    Posts
    628
    Thank Post
    87
    Thanked 21 Times in 19 Posts
    Rep Power
    10
    Sorry, had to change as the Coucncil probably wont want it published. WIll update the original post to say this.

    If i change the port on the test computer to 3128 and type the server ip address in i get the "It works!" page.

    So squid must be up.
    Last edited by dany2010; 7th November 2012 at 11:59 AM.

  4. #4

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,816
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Quote Originally Posted by dany2010 View Post
    Sorry, had to change as the Coucncil probably wont want it published. WIll update the original post to say this.

    If i change the port on the test computer to 3128 and type the server ip address in i get the "It works!" page.

    So squid must be up.
    No your it works it loading an Apache page the default is it works I think. Will the squid proxy send things normally without the upstream proxy?

  5. Thanks to glennda from:

    dany2010 (7th November 2012)

  6. #5

    Join Date
    Nov 2011
    Posts
    628
    Thank Post
    87
    Thanked 21 Times in 19 Posts
    Rep Power
    10
    Found out what makes it works.

    If i uncomment
    http_access allow all

    SHould you do this? Is it safe to do this?

  7. #6

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,816
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Quote Originally Posted by dany2010 View Post
    Found out what makes it works.

    If i uncomment
    http_access allow all

    SHould you do this? Is it safe to do this?
    Have you specified a local Subnet which is allowed to be proxied?

    normally you have http_access 192.168.10.0/24 etc so that it only proxies machines with that IP i think. Not used squid for a while.

  8. #7

    Join Date
    Nov 2011
    Posts
    628
    Thank Post
    87
    Thanked 21 Times in 19 Posts
    Rep Power
    10
    I havnt no.

    Is that something that is recommended? If they are outside the IP range does it just deny their internet? Everything in the domain will probably end up going through the filter i would guess.

    Is there any security issues leaving it open to all?

  9. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    That would depend on how your network is setup.

  10. #9

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,816
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Quote Originally Posted by dany2010 View Post
    I havnt no.

    Is that something that is recommended? If they are outside the IP range does it just deny their internet? Everything in the domain will probably end up going through the filter i would guess.

    Is there any security issues leaving it open to all?
    As mentioned above - depends on your network setup. You simple need to change it to http_access xx.xx.xx.0/xx for whatever your internal subnet is. You can then restrict it even further - for example I used to have a second squid proxy running over an unfiltered ADSL line in the school before we took on the leased line.

    enabling this feature meant we could restrict it to purely the static addresses of our machines in the office rather then everybody.

SHARE:
+ Post New Thread

Similar Threads

  1. Windows 7 No Internet Access Through Proxy
    By nathanbowes in forum Windows 7
    Replies: 7
    Last Post: 13th August 2012, 11:18 AM
  2. CC3 to Vanilla now cant connect to internet through proxy
    By sadams1980 in forum Internet Related/Filtering/Firewall
    Replies: 11
    Last Post: 3rd August 2012, 05:58 PM
  3. Replies: 2
    Last Post: 25th June 2012, 10:44 AM
  4. Smoothwall- No internet access through Terminal Server
    By ChrisH in forum Internet Related/Filtering/Firewall
    Replies: 8
    Last Post: 16th March 2010, 11:13 AM
  5. Browsing internet through explorer shell
    By woody in forum Windows
    Replies: 2
    Last Post: 28th September 2006, 09:31 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •