Re: Squid 2.2STABLE2 and Conf

Bester Leon wrote:

> How can I quickly convert my squid.conf to accept all connection
> on port 80 as before

It is probably not reading the configuration file from where you think.
Try specifying -f /etc/squid.conf when starting Squid to tell it where
to look for the configuration file. Squid by default reads the
configuration file from <prefix>/etc/squid.conf, where <prefix> is the
--prefix argument to configure (/usr/local/squid if none).

Then you need to make some minor changes to your squid.conf to reflect
the updated syntax. See below.

> Here is a copy of squid.conf
>
> #squid.conf - a very basic config file for squid
>
> #Turn logging to it's lowest level
> debug_options ALL,1
>
> #Password authentication
> #Passwords have to be created using linuxconf
> authenticate_program /usr/local/squid/bin/ncsa_auth
> authenticate_options /usr/local/squid/etc/passwd

These two are one single option today.
authenticate_program /usr/local/squid/bin/ncsa_auth
/usr/local/squid/etc/passwd

> authenticate_children 5
>
> #LCB Port for access
> http_port 80
>
> #LCB Path for cachefiles
> cache_dir /var/spool/squid
>
> #LCB Path for Access Logfile
> cache_access_log /var/log/squid/access.log
>
> #LCB Path for Cache Logfile
> cache_log /var/log/squid/cache.log
>
> #LCB Path for Store Logfile
> cache_access_log /var/log/squid/store.log

Hmm... that should be cache_store_log, not cache_access_log..

> #LCB Memory used for squid
> cache_mem 8
>
> #LCB Disk space used for cache
> cache_swap 700

cache_swap directive no longer exists.
>
> #LCB Low Water and High Water marks for cache
> cache_mem_low 75
> cache_mem_high 90

Neither does cache_mem_low/high.

> #LCB Logging Client names in access.log
> log_fqdn on

Are you sure you really want this? It slows things down a considerable
amount.

> #LCB Client name lookup
> ident_lookup on

Same thing here. You probably does not want to have this on. And the
directive does no longer exists (replaced by other directives).

> #LCB Program used for FTP
> ftpget_program /usr/bin/ftpget

ftpget_program no longer exists.

> #LCB FTP User-id
> ftp_user squid@ael.co.za
>
> #LCB FTPget options
> ftpget_options -a -A -n 60

ftpget_options no longer exists.

> #defines a group (or Access Control List) that includes all IP
> #addresses
> acl ael src 168.80.0.0/168.80.0.0
> acl all src 0.0.0.0/0.0.0.0
> acl passwd proxy_auth

proxy_auth ACL format has changed somewhat.
acl passwd proxy_auth REQUIRED

> #allow all sites to use connect to us via HTTP
> http_access allow ael passwd
> http_access deny all
>
> #allow all sites to use us as a sibling
> icp_access allow ael
>
> #test the following sites to check that we are connected
> dns_testnames internic.net usc.edu ns1.iafrica.com ns2.iafrica.com
>
> #run as the squid user
> cache_effective_user squid squid
> #otherwise, you can uncomment the below line and comment the one out.
> # this will run as use "nobody" with the group "nogrtoup"
> cache_effective_user nobody nogroup

You should only have one cache_effective_user line, not two...

--
Henrik Nordstrom
Spare time Suqid hacker