Hello,
Thanks for your reply.
The hardware that the squid setup is running on is a p4 2 ghz box with a
gig of ram. The flow right now is client to squid transparent proxy, squid
redirects to wrapzap which is adzap's redirector wrapper i guess you'd say.
That in turn calls the various programs for banner and add filtering, av is
out for now squidclam keeps core dumping, after all that the request goes to
the internet. Here's the most relevant parts of my squid configuration:
icp_port 0
cache_vary off
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 8 MB
cache_swap_low 94
cache_swap_high 95
maximum_object_size 50 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 50 KB
ipcache_size 1024
ipcache_low 90
ipcache_high 95
fqdncache_size 1024
cache_replacement_policy heap LFUDA
memory_replacement_policy heap LFUDA
cache_dir aufs /var/squid/cache 15000 16 256
client_netmask 255.255.255.255
quick_abort_min 0 KB
quick_abort_max 0 KB
icp_access deny all
memory_pools off
forwarded_for off
log_icp_queries off
client_db off
buffered_logs on
# Path to the redirector program
redirect_program /usr/local/libexec/wrapzap
# Number of redirector processes to spawn
redirect_children 10
# To prevent loops, don't send to the redirector requests from localhost
redirector_access deny localhost
Any other information needed let me know.
Thanks.
Dave.
----- Original Message -----
From: "Tek Bahadur Limbu" <teklimbu@xxxxxxxxxxxx>
To: "Dave" <dmehler26@xxxxxxxxxx>
Cc: <squid-users@xxxxxxxxxxxxxxx>
Sent: Saturday, January 05, 2008 11:22 PM
Subject: Re: squid banner zapping and antivirus filtering
Hi Dave,
Dave wrote:
Hello,
I'm setting up a box for a friend, a FreeBSD machine that does
firewall and nat for his local lan. I've added squid as a transparent
proxy so i can also add in adzapping and antivirus and later if the
situation calls for it content filtering with dansguardian.
I'm using squid 2.6.17 i believe the version is and this time it's not
working.
Squid-2.6.17 will work. It's your configuration which seems to be not
working.
I'm wondering if one of my squid parameters is wrong,
should a redirector be called with redirect_program or
url_rewrite_program?
Can you post your relevant parts of your squid.conf?
I'm using adzap's zapchain as the squid redirector
and running suqidguard, bannerfilter chained off of it, i tried to run
squidclam for av but that program kept core dumping. For such a setup
would raising the number of redirector processes from 5 to 10 be
advisable? I don't want to go out of memory with this setup. If anyone is
doing this with other programs i'd like to hear experiences as well.
Thanks.
What's your hardware setup?
Probably the best setup will be:
Client --> Dansguardian --> Squid
Thanking you...
Dave.
--
With best regards and good wishes,
Yours sincerely,
Tek Bahadur Limbu
System Administrator
(TAG/TDG Group)
Jwl Systems Department
Worldlink Communications Pvt. Ltd.
Jawalakhel, Nepal
http://www.wlink.com.np
http://teklimbu.wordpress.com
