Re: trying to run Squid behind firewall

At 14:31 20/10/98 -0500, you wrote:
>
>I am trying to configure SquidPatch2 to operate behind a firewall by
>defining "inside_firewall" parameter in squid.conf and also by trying to
>define a parent (Netcache) cache which is connected to internet directly by
>using "cache_host proxy.test.deere.com parent 8000 3130 no-query default"
>parameter setting. But gets following error on any external URL like:

I went through something similar yesterday.
inside_firewall is not valid for V2.0

>1998/10/20 14:13:45| parseConfigFile: line 180 unrecognized: 'cache_host
>proxy.test.deere.com parent 8000 3130 no-query default'

I think cache_host was a V1.1 option, where cache_peer is the V2.0 config.

You're better off going through the new squid.conf.default file
and modifying that to suit, rather than using your old v1 config file.

>1998/10/20 14:13:45| parseConfigFile: line 1664 unrecognized:
>'inside_firewall deere.com'

see line 1416 of squid.conf.default that comes with V2.0patch2

# or if squid is inside a firewall and there is local intranet
# servers inside the firewall then use something like:
#
# acl local-intranet dstdomain foo.net
# acl local-external dstdomain external.foo.net
# always_direct deny local-external
# always_direct allow local-intranet
# never_direct allow all
#
# This option replaces some v1.1 options such as inside_firewall
# and firewall_ip.

Just uncomment these 5 lines, and define acl's if required.

>Are these parameters supported on SQUIDPATCH2, these are listed on
>http://squid.nlanr.net/Squid/FAQ/

The FAQ is more a Version 1.1 FAQ, than a Version 2.0 FAQ.
Some of the references are no longer valid for version 2.0

.----------------------------------------------.------------------------.
| Mark Reynolds <mark@rts.com.au> | Phone 08 9474 1211 |
| Network Manager, Reynolds Technology Pty Ltd | Fax 08 9474 4772 |
| 8 Preston Street Como 6152 Western Australia | Pager 08 9480 5884 |
| PO Box 120 Como 6952 Western Australia | http://www.rts.com.au/ |
`----------------------------------------------^------------------------'
Received on Tue Oct 20 1998 - 18:06:32 MDT