SetupSquidTransparentProxy - Revision history

Pgl: made the link to my site readable :)

2011-05-25T16:12:54Z

made the link to my site readable :)

Pgl: added &mimetype=plaintext to the URL - avoids having to strip out HTML + blank lines; also made the output file from wget the blockfile directly so you don't have to redirect output

2011-05-25T16:10:53Z

added &mimetype=plaintext to the URL - avoids having to strip out HTML + blank lines; also made the output file from wget the blockfile directly so you don't have to redirect output

MarcT: Undo revision 10442 by Bleach23 (Talk) - Spam

2010-07-24T06:19:34Z

Undo revision 10442 by Bleach23 (Talk) - Spam

Bleach23 at 00:49, 7 July 2010

2010-07-07T00:49:55Z

Debilater: /* Make your root disk read-only again */

2010-02-17T18:39:17Z

Make your root disk read-only again

Debilater: /* Configure network to startup squid if WIFI comes up */

2010-02-17T18:37:49Z

Configure network to startup squid if WIFI comes up

Debilater: /* Configure network to startup squid if WLAN comes up */

2010-02-17T18:36:23Z

Configure network to startup squid if WLAN comes up

Debilater: /* Add the rules to the squid startup file */

2010-02-17T18:35:03Z

Add the rules to the squid startup file

Debilater: /* Starting squid */

2010-02-17T18:34:09Z

Starting squid

Debilater: /* Installing Squid */

2010-02-17T18:31:07Z

Installing Squid

@@ Line 272: / Line 272: @@
 === Obtain a block list ===
-An excellent ad block list is maintained at [http://pgl.yoyo.org/as/].  We need to download it in a suitable format for squid, which can be done by running the following command:
+An excellent ad block list is maintained at http://pgl.yoyo.org/as/.  We need to download it in a suitable format for squid, which can be done by running the following command:
 <source lang="text">

@@ Line 275: / Line 275: @@
 <source lang="text">
-wget -q -O - 'http://pgl.yoyo.org/as/serverlist.php?hostformat=squid-dstdom-regex;showintro=0'  | grep -v ">" | grep "." > /opt/etc/squid/blocklist
+wget -q -O/opt/etc/squid/blocklist 'http://pgl.yoyo.org/as/serverlist.php?hostformat=squid-dstdom-regex;showintro=0&nohtml=true&mimetype=plaintext > /opt/etc/squid/blocklist
 </source>

← Older revision		Revision as of 06:19, 24 July 2010
Line 311:		Line 311:

	For further details of filtering URLs using squid, please refer to the [http://www.squid-cache.org/Doc/ excelent documentation of the squid cache project].		For further details of filtering URLs using squid, please refer to the [http://www.squid-cache.org/Doc/ excelent documentation of the squid cache project].
−
−	~~==Related Links==~~
−
−	~~[http://www.hvacinstaller.com/hvac-technician/ '''hvac technician''']~~

← Older revision		Revision as of 00:49, 7 July 2010
Line 311:		Line 311:

	For further details of filtering URLs using squid, please refer to the [http://www.squid-cache.org/Doc/ excelent documentation of the squid cache project].		For further details of filtering URLs using squid, please refer to the [http://www.squid-cache.org/Doc/ excelent documentation of the squid cache project].
		+
		+	==Related Links==
		+
		+	[http://www.hvacinstaller.com/hvac-technician/ '''hvac technician''']

@@ Line 256: / Line 256: @@
 <source lang="text">
 root@palm-webos-device: # cd / && mount -v -o remount,ro /
-</source
+</source>
 == See it working ==

@@ Line 210: / Line 210: @@
 In the file '''if-up''' modify this part:
-<source lang="text"
+<source lang="text">
   if [ "$ISPPP" -ne 4 ] &amp;&amp; [ "$ISRMNET" -ne 6 ] &amp;&amp; [ "$ISTUN" -ne 4 ] &amp;&amp; [ "$ISCSCOTUNVPN" -ne 8 ]; then
      NetCfgSetAddr
@@ Line 219: / Line 219: @@
 to
-<source lang="text"
+<source lang="text">
   if [ "$ISPPP" -ne 4 ] &amp;&amp; [ "$ISRMNET" -ne 6 ] &amp;&amp; [ "$ISTUN" -ne 4 ] &amp;&amp; [ "$ISCSCOTUNVPN" -ne 8 ]; then
      NetCfgSetAddr
@@ Line 230: / Line 230: @@
 In the file '''if-down''' modify this part:
-<source lang="text"
+<source lang="text">
   if [ ${CMINTERFACE} = ${CMBTINTERFACENAME} ] || [ ${CMINTERFACE} = ${CMBRINTERFACENAME} ]; then
      ${LOG} "${IPTABLES} -t nat -D POSTROUTING -s  $CMNETADDR/$CMPREFIXLEN -j MASQUERADE"
@@ Line 241: / Line 241: @@
 to:
-<source lang="text"
+<source lang="text">
   if [ ${CMINTERFACE} = ${CMBTINTERFACENAME} ] || [ ${CMINTERFACE} = ${CMBRINTERFACENAME} ]; then
      ${LOG} "${IPTABLES} -t nat -D POSTROUTING -s  $CMNETADDR/$CMPREFIXLEN -j MASQUERADE"
@@ Line 251: / Line 251: @@
   fi
 </source>
 == See it working ==

@@ Line 157: / Line 157: @@
 Now comes the ugly part. I'll not explain it in detail: we install some iptable Rules. We tell iptables to forward any traffic destined to tcp port 80 to localhost port 3128 (this is where squid listens for incoming connections). To avoid that the requests of the proxy itself are forwarded to localhost (which would create a loop), we add a rule telling iptables to not forward web traffic if it were generated by user nobody (the user squid runs as).
-To do that, edit B</opt/etc/init.d/S80squid> so that it looks like this:
+To do that, edit '''/opt/etc/init.d/S80squid''' so that it looks like this:
 <source lang="text">
 #! /bin/sh

← Older revision		Revision as of 18:34, 17 February 2010
Line 146:		Line 146:

	If you see a google textmode site, it works.		If you see a google textmode site, it works.
		+
		+	Turn it off if everything is ok:
		+
		+	<source lang="text">
		+	/opt/etc/init.d/S80squid stop
		+	</source>

	== Add the rules to the squid startup file ==		== Add the rules to the squid startup file ==

@@ Line 11: / Line 11: @@
 == Installing Squid ==
-Make your root disk writable:
+Login to the pre console and make your root disk writable:
 <source lang="text">
-cd / && mount -v -o remount,rw /
+root@palm-webos-device: # cd / && mount -v -o remount,rw /
 </source>
-Login to the pre console and type this command to install the squid optware package
+Type this command to install the squid optware package
 <source lang="text">