Re: [K12OSN] Squid and SquidGuard help

[Eric Harrison <eharrison mail mesd k12 or us>]

On Tue, 26 Mar 2002, David Trask wrote:

>Hi all,
>
>Been awhile, but I'm at it again.  Many of you may have heard that the
>State of Maine is giving laptops to every single 7th and 8th grader
>statewide beginning this fall.  That means a whole lotta' computers are
>dropping in on my network in a hurry.  I need a proxy server...and bad!  I
>also currently run a redirected filtering service from N2H2 (Bess).  I
>unfortunately didn't take the added computers into account when I budgeted
>for the Bess filtering service (simply a proxy server offsite that
>provides our filtering).  
>
>Today I used my K12lLTSP 2.0 discs to install (custom) RH 7.2 and Squid
>w/SquidGuard on a PIII 667mhz with 128mb RAM and a 10gb HDD   (one
>NIC...do I need two?...I just want it to sit somehwere on my network...not
>like a gateway).  After a lot of friggin' around I finally got Squid to
>work (I think...I set my browser to proxy to the IP of the machine and
>port 3128...and it went out OK), but not SquidGuard.

If squid is working, you're 99% of the way there. The squid ACL's are the
toughest part, everything else is cake ;-)

First-things-first, was this a K12LTSP-2.0.0 or a K12LTSP-2.0.1 disc?
I put in a couple small fixes to my squidGuard package in 2.0.1.

Run:

	rpm -q squidGuard

if rpm reports you have vesion squidGuard-1.2.0-3, you're good to go. If not,
run:

	rpm -Uhv ftp://k12linux.mesd.k12.or.us/pub/distributions/K12LTSP-rpms/2.0.1/squidGuard-1.2.0-3.i386.rpm

to upgrade it to the latest build.


Once that's out of the way, edit /etc/squid.conf. Around line 880 (the
squid config file is overly verbose!), there is the section for 
"redirect_program". Add in squidGuard as the redirect program:

	redirect_program /usr/sbin/squidGuard -c /etc/squid/squidGuard.conf

and restart squid

	/sbin/service squid restart


Now you be able to run "ps auxw | grep squidGuard" and see a number of
squidGuard processes running.

If everything checks out ok, try going to "www.123456789.com" (an used
URL that I use as a test "bad" site") and see if it works.

If it does not work... well write back to the list and we'll do a little
bit of debugging.

-Eric