https://github.com/nitrocode/working-with-squid-proxy

https://github.com/nitrocode/working-with-squid-proxy

Last synced: 5 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/nitrocode/working-with-squid-proxy
• Owner: nitrocode
• Created: 2018-10-15T05:11:36.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2018-10-15T05:11:49.000Z (over 7 years ago)
• Last Synced: 2025-07-22T04:47:20.913Z (6 months ago)
• Language: Shell
• Size: 2.93 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# Squid Test Blocking ACLs

Work in progress.

Simple Vagrant vm to test squid blocking acls.

## Setup

Start squid 3.3

    vagrant up trusty

Start squid 3.5

    vagrant up xenial

## Configure

1. Modify or add regex to `squid_sites.txt`

2. Restart squid

    Without debug

        vagrant ssh trusty

        sudo service squid restart

    With debug

        sudo squid3 -k debug

3. Or restart

## Test ACL

Example of blocked url:

    $ ./test_acl.sh http://www.google.com

    Server: squid/3.3.8

    X-Squid-Error: ERR_ACCESS_DENIED 0

    Via: 1.1 vagrant-ubuntu-trusty-64 (squid/3.3.8)

Example of allowed url:

    $ ./test_acl.sh http://www.github.com

    Via: 1.1 vagrant-ubuntu-trusty-64 (squid/3.3.8)

## Squid logs

For access and deny summaries

    /var/log/squid*/access.log

For more in depth

    /var/log/squid*/cache.log

## References

* https://wiki.squid-cache.org/SquidFaq/SquidAcl#How_can_I_block_access_to_porn_sites.3F

* http://www.squid-cache.org/Versions/v3/3.5/cfgman/

* http://www.squid-cache.org/Versions/v3/3.3/cfgman/

* https://wiki.squid-cache.org/SquidFaq/BugReporting#Debugging_Squid

* https://github.com/chef-cookbooks/squid

## TODO

* find out what configuration sets a granular whitelist using regexes and denies everything else

* find out how chef uses it - where the script is, what version cookbook, elc