Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Oct 2005 20:39:39 +0400
From:      "Andrew P." <infofarmer@gmail.com>
To:        Dave <dmehler26@woh.rr.com>
Cc:        FreeBSD Questions <questions@freebsd.org>
Subject:   Re: proxy server
Message-ID:  <cb5206420510130939o62f47159o2b594f6d833d295c@mail.gmail.com>
In-Reply-To: <000b01c5d000$9f269350$0900a8c0@satellite>
References:  <WorldClient-F200510121734.AA34210049@dhl.co.cu> <cb5206420510122135l4bc3dcfbr3dcec6a111fffec8@mail.gmail.com> <000b01c5d000$9f269350$0900a8c0@satellite>

next in thread | previous in thread | raw e-mail | index | archive | help
On 10/13/05, Dave <dmehler26@woh.rr.com> wrote:
> Hi,
> I've been checking out this thread on squid. I've got squid right now doi=
ng
> transparent proxying with pf and that is working reat! But i'd like to
> extend it to do what your doing:
> ftp-proxying, currently i use ftp-proxy out of inetd and only passive cli=
ent
> connections from behind the nat work, active doesn't
> addblocking, i'll take your suggestion and use adzap
> and i'd like to use dansguardian for content filtering, but it requires
> apache on the gateway box i don't know if i like that, is there a way aro=
und
> that dependency?
>     Do you have a howto or notes for setting all this up?
> Thanks.
> Dave.
>

Not really. In fact it wasn't me who set this all up,
I just happen to manage it all now. You'll have
to read through all squid faqs to make it shine.

Adzap doesn't require anything at all (except for
perl, of course), but it doesn't harm if you have
a local webserver to serve some static content.
thttpd is the right solution for this, but Apache
won't hurt even on a very loaded production
server.

You'll also want to process squid logs. If you
have a spare box - that's fine, you can do it
all there. But we've found it quite comfortable
to do all processing on the proxy itself,
in the night. We use calamaris and sarg
(and it helps to have apache on the proxy,
to the results), and we're looking at other
analyzers, too.

I don't remember any major problem with
our proxy (except for some failing hardware),
there's nothing tricky in setting it up and
maintaining it. If you'll have a specific
issue, I'll be very glad to try and help you out.


Cheerz,
Andrew P.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cb5206420510130939o62f47159o2b594f6d833d295c>