Escuela Episcopal Bilingüe Santísima Trinidad wrote:
Am trying to set up a separate box (with two NICs) as a firewall/filter using the following configuration. When Squid was running without Dansguardian, and I connected a laptop to the second NIC and pointed the laptop to Squid, everything worked fine. With the iptables set and Dansguardian running (and the laptop configured just normally), however, when I enter anything into the laptop's browser, I get an error message, from Squid, saying the URL is invalid, and the URL that it says it is trying to use is the URL I typed, without the domain info. Thus, if I ask for "www.google.com/" it shows "/" instead. If I try something like "search.lycos.com/?query=test&x=0&y=0" it shows "/?query=test&x=0&y=0" instead. I have seen some chatter about this type of thing on Squid's mail list, but, again, the Squid-only operation did not encounter this problem, so it could be something to do with Dansguardian, but I'm asking here, as well as in the Dansguardian group, in case anyone here could be of assistance (and because nobody has responded, at all, in the Dansguardian group). The configuration I am trying to use is listed below, but here are a couple of notes, before I just paste it all there. First, the main set of instructions I was trying to use for this were from: http://www.spencerstirling.com/computergeek/dansguardian.html However, it appears to be a bit older, and mentions Squid options that no longer appear to be valid (e.g. "httpd_accel_host virtual"). It also says to use "http_port 127.0.0.1:3128" but the discussion of the "invalid URL" problem in the Squid mail list suggests "http_post 127.0.0.1:3128 transparent" instead. Thus, I'm sure that the mismash of settings I am using is, somehow, the cause of the problem, but I lack the networking experience to tell just WHERE the problem occurs. Here, then, is the rest of the configuration information: Linux: Debian 4.0 r3 i386 iptables: 1.3.6 Squid: 3.0.PRES Dansguardian: 2.8.0.6-antivirus-6.4.4.1-2 (Squid and Dansguardian installed via Synaptic Package Manager)
Please upgrade your Squid, we have been in STABLE cycle for several months now. The current production release is available form the Debian 'unstable' repositories.
Since the configuration files are large enough that their full text would cause the list server to truncate this message, I have posted them to MediaFire. Here they are: firewall.sh: http://www.mediafire.com/?zvb2gjj99d9 dansguardian.conf: http://www.mediafire.com/?gucyirxttdb squid.conf: http://www.mediafire.com/?22txgzjdcez Thanks!
Amos -- Please use Squid 2.7.STABLE1 or 3.0.STABLE6
