No squid is not bypassed. The order flow is:
Browser -> Dansguardian -> Squid -> Internet
If you're wanting to limit access via squid ACLs, that's another aspect
altogether.
acl myLan src 10.0.4.0/24
http_access deny myLan all
Do you have something like that in squid.conf?
On 10/7/2013 5:00 PM, Stefano Malini wrote:
I'm sorry Dave, but, in this way squid proxy doesn't affect browsing.
Trying to deny the access to all my network (deny myLan) on
squid.conf, it doesn't stop me and i can browse as i want!
At the moment every http request (dport 80) is redirected --to-port
8080 (dansguardian). Is squid bypassed?
2013/10/7 Stefano Malini <stefano.malini@xxxxxxxxx>:
Thank you Dave! it's running
Eliezer, with your answer i have known the usefulness of cache_peer directive!
2013/10/7 Dave Burkholder <dave@xxxxxxxxxxxxxxxxxxxx>:
If you want filtering, iptables should redirect to port 8080 instead of
3128.
Also, squid's 3128 should not be in transparent mode.
If you make those two changes, you should be operational.
-Dave
On 10/6/2013 12:59 PM, Stefano Malini wrote:
Dear all,
this is my first message because i'm having some diffuculties
configuring a proxy server on a raspberry with raspbian distro.
I installed Squid 3.1.20 and Dansguardian.
Squid is listen on port 3128, in transparent mode and it runs. I set
iptables to redirect http requests to port 3128.
The http requests are registered on squid cache/access logs files so it
runs
I installed Dansguardian also and configured to listen on port 8080
but it seems that Squid doesn't communicate with Dansguardian.
In dansguardian.conf file i set the proxy ip on 127.0.0.1, port 3128.
I think it's very easy to solve it but until now is still unsolved.
Do you have any idea about?
Thanks
