Date: Thu, 13 Oct 2005 20:39:39 +0400 From: "Andrew P." <infofarmer@gmail.com> To: Dave <dmehler26@woh.rr.com> Cc: FreeBSD Questions <questions@freebsd.org> Subject: Re: proxy server Message-ID: <cb5206420510130939o62f47159o2b594f6d833d295c@mail.gmail.com> In-Reply-To: <000b01c5d000$9f269350$0900a8c0@satellite> References: <WorldClient-F200510121734.AA34210049@dhl.co.cu> <cb5206420510122135l4bc3dcfbr3dcec6a111fffec8@mail.gmail.com> <000b01c5d000$9f269350$0900a8c0@satellite>
next in thread | previous in thread | raw e-mail | index | archive | help
On 10/13/05, Dave <dmehler26@woh.rr.com> wrote: > Hi, > I've been checking out this thread on squid. I've got squid right now doi= ng > transparent proxying with pf and that is working reat! But i'd like to > extend it to do what your doing: > ftp-proxying, currently i use ftp-proxy out of inetd and only passive cli= ent > connections from behind the nat work, active doesn't > addblocking, i'll take your suggestion and use adzap > and i'd like to use dansguardian for content filtering, but it requires > apache on the gateway box i don't know if i like that, is there a way aro= und > that dependency? > Do you have a howto or notes for setting all this up? > Thanks. > Dave. > Not really. In fact it wasn't me who set this all up, I just happen to manage it all now. You'll have to read through all squid faqs to make it shine. Adzap doesn't require anything at all (except for perl, of course), but it doesn't harm if you have a local webserver to serve some static content. thttpd is the right solution for this, but Apache won't hurt even on a very loaded production server. You'll also want to process squid logs. If you have a spare box - that's fine, you can do it all there. But we've found it quite comfortable to do all processing on the proxy itself, in the night. We use calamaris and sarg (and it helps to have apache on the proxy, to the results), and we're looking at other analyzers, too. I don't remember any major problem with our proxy (except for some failing hardware), there's nothing tricky in setting it up and maintaining it. If you'll have a specific issue, I'll be very glad to try and help you out. Cheerz, Andrew P.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cb5206420510130939o62f47159o2b594f6d833d295c>