Re: firewall auth.

Adrian Eurell wrote:

> I am in the process of looking at using squid at the slower sites to access
> corporate intranet/internet services. Is it possible to setup squid to
> cache local intranet servers and connect onto proxy authentication/firewall
> when the request is destined for the internet. Has anyone hit this problem
> before? Is it possible to do this?

Yes.

Nothing special needed, other than an always_direct rule to tell Squid
not to use parents/siblings for fetching intranet servers.

acl intranet dstdomain intranet.example.com
always_direct allow intranet
newer_direct allow all

If the firewall is doing proxy authentication then you do not need to
configure proxy auth at the child caches.

--
Henrik Nordstrom
Spare time Squid hacker