Hi Again,

I have now got it all successfully working. I found a thread on the Squid
mailing list that outlined a similar situation which I have found works for
my configuration.


FYI
The following settings need to be added to the squid.conf file of the child
proxy:

# OPTIONS WHICH AFFECT THE NEIGHBOR SELECTION ALGORITHM
cache_peer <ip_address_of_parent> parent 8080 3130 default no-query

# ACCESS CONTROLS
acl users src 10.20.10.0/255.255.255.0
cache_peer_access <ip_address_of_parent> allow users
never_direct allow users
http_access allow users


The ACL for 'users' should be modified to use the IP range of your network
etc..
This config is at it's simplest form and extra steps could be undertaken to
tighten up the security of Squid, but that is out of the scope of this
message. For more info check out the Squid docs etc..

All the requests now go from my non-SquidGuard child cache to my parent
SquidGuard cache where SquidGuard qualifies the URL against my lists.

Hope this helps people in the future.

Regards
Jay

-----Original Message-----
From: Stewart James [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, 5 June 2002 11:39 AM
To: Jay Turner
Cc: [EMAIL PROTECTED]
Subject: Re: Cascading Proxy and SquidGuard



I only manage a cluster of proxies which run squidGuard, but several
groups around the university run their own proxy, which must go through
our proxy to get access to the internet. They doin;t have any issues,
apart from all requests coming from their proxy server which gives them
hell when we bill them ;)

Perhaps I could help more if you outlined the problems your having.

Cheers,

Stewart

On Wed, 5 Jun 2002, Jay Turner wrote:

> Date: Wed, 5 Jun 2002 10:26:11 +0800
> From: Jay Turner <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Cascading Proxy and SquidGuard
>
>
> Hi All,
>
> I was wondering if anyone has tried cascading a proxy to become a child of
a
> SquidGuard proxy?
>
> What I would be interested in doing is having a SquidGuard proxy
configured
> as a Parent and then a number of non SquidGuard proxies acting as children
> of this parent cache.
> The idea being that these children send all their requests to the
SquidGuard
> parent which then runs the request through SquidGuard and either allows or
> disallows it.
>
> Has anyone successfully achieved this? I am currently experimenting with
it,
> but am not having a lot of luck at this stage.
>
> Thanks
>
> Regards
> Jay
>
>



Reply via email to