[K12OSN] Squid / SquidGuard architecture

[Mike Rambo]

bear2bar at netscape.net wrote:
> Hi Mike,
> 
> Thanks for the response, here goes...
> OS .. k12ltsp 4.2.0
> Squid-2.5.STABLE9-1.FC3.4
> Squidguard-1.2.0-8.k12ltsp.2.4.2

Ok.

> webmin-1.190-1
> 
> Current setup
> Cable modem -> k12ltsp server ->switches-> thin clients (all 10/100)
> 

So is squid running on the same server that runs the thin clients? If so 
this is part of the problem unless you have made adjustments to the 
usual configuration to take this into account. Usually the squid server 
will be a separate box that would sit between the ltsp server and your 
broadband source. I suspect you probably can run it all on the same 
server if the server is fast enough and you make the right adjustments 
to the config but it most likely won't work that way out of the box 
(unless Eric has changed the way he has the distro configured).

> Config files are squid.conf
> squidguard.conf
> squid-squidguard.conf

Well, I was actually referring to the relevant parts (content) of these 
files :-). I'm interested in whether you're trying to run a transparent 
proxy etc. I have to admit that I haven't used the default config since 
Eric implemented the squid-squidguard thing however. Is the new config 
built to assume running all on one box? Are you starting the correct 
service (probably squid-squidguard)?

> httpd.conf
> and cache setup with squid -z
> 
> http listens on port 8080
> a redirect at boot up redirect http traffic to squid on 3128
> 

Ok. But how is this actually being done?

/sbin/iptables -L -n -v
/sbin/iptables -L -n -v -t nat

> hope that this makes it a little easier
> 
> thks
> norbert
> 


-- 
Mike Rambo
mrambo at lsd.k12.mi.us

Microsoft model for lawn care: Provide free mowing until the other
lawn services go under, then create a license agreement that says
Microsoft owns the dirt and grass but it's up to you to get rid
of the weeds. And don't try to plant apple trees -- the soil is
incompatible...
     -Bryce A.