Topic: [Contrib update] Squid_cache & Squid_allow_ip

[MasterSleepy]

Hello everyone,

Some time ago, I publish some updated versions of 2 contribs I made for old sme-server version.
I adapt it so now it can be used on last version of sme-server .
Rpms have been renamed to fit with the new notation.

RPMs:
smeserver-squid_cache_mgt-1.0-1.noarch.rpm
smeserver-squid_restrict_ip-1.0-1.noarch.rpm

Source:
smeserver-squid_cache_mgt-1.0-1.src.rpm
smeserver-squid_restrict_ip-1.0-1.src.rpm

@+

[Franco]

How about the options to enter sites to bypass squid? Gone in this version?

[MasterSleepy]

Hello,

That option never exist in those contribs.

Regards.

[Franco]

I'm sorry, I confused with the squidproperties contrib that I use on SME 6:
http://www.tech-geeks.org/contrib/loveless/SMEServer/contribs/squidProperties/

[cool34000]

Thanks for your work MasterSleepy !

I have a little question about Squid Restrict IP : can it work with dansguardian ?
I tried to configure but still anyone can access Internet.

It should be because dansguardian send all web traffic to squid, so the IP seen by squid is 127.0.0.1 (witch of course can access to the www)
Is there any file/config I can tweak to make it work with dansguardian ?


Thanks !


__________________________________
Un ptit merci en francais, je sais que ca fait toujours plaisir, et tu le mérites au vue du temps passé à contribuer à faire évoluer cette communauté. C'est grace à des gens comme toi qu'une alternative est possible ! Longue vie au monde libre !!!

[MasterSleepy]

Hello cool34000,

You are right, you couldn't use squid to restrict internet access.
In dansguardian, you should have a file bannediplist that should be in /etc/dansguardian/list/ where you can put all ips you want to restrict internet access.

Regards.

[Tib]

stuntshell

If you want squidproperties from tech-geeks ... for SME7 ... I have modified it to suit.

May want to test it on a test server but it seems to work fine for me.

Let me know and I'll send it to you ... it's still in a zip format like they had it.

I left a message for tech-geeks to see if there going to update it but have had no reply as yet.

Regards,

Tib

[Franco]

Tib,
That would be very very cool  

stuntshell [] gmail.com

Thanks,

[cool34000]

Thanks for your reply MasterSleepy. I already use the bannediplist file... I was hoping about a tweak that would have allow me to do it from your panel Better luck for me next time !

[Tib]

MasterSleepy

I put a bug report in for your squid cache rpm ... on uninstall it fails to re-start squid.

Bug 1931

Correct comand that it should be now is: /etc/rc7.d/S90squid restart not /etc/init.d/squid restart.

Very nice addons .... although some ppl might not want to ban all ppl from access from the worg go ... would you be interested in adding a ban by ip but allow all others by default section as well to yours to give ppl a choice.

I have looked at and fixed tech-geeks addon for this and thought it would be cool to give ppl a choice to what they want all in one contrib.

If your interested I can send you the fixed files and you can have a look at it and see if you want to add the features into yours.

I tried to contact Tech-geeks with the update but have had no luck so I though you might want to have a look and see if it will suit you.

Regards,

Tib

[uomonet]

Hello everibody!
yesterday I installed the 2 contribs, but nothing changed, maybe I don't understand how they work...

As for the restricted Allow IP: all my computers in the LAN still HAVE INTERNET ACCESS. No difference for the IP I'm using if it is or if it is not in the list...

As for the cache settings, i'v done somrthing like this:

Squid cache size in MB     2000     ufs
Squid cache path    /var/spool/squid    
Number of first level directories    16    
Number of second level directories    256    
Max cached size object    100    MB
Maximum request headers size         KB
Maximum cache time         minute

i tried to download a 92Mb file from 1 PC, then I tried in another PC and nothing changed....

????

[MasterSleepy]

MasterSleepy

I put a bug report in for your squid cache rpm ... on uninstall it fails to re-start squid.

Bug 1931

Correct comand that it should be now is: /etc/rc7.d/S90squid restart not /etc/init.d/squid restart.

Very nice addons .... although some ppl might not want to ban all ppl from access from the worg go ... would you be interested in adding a ban by ip but allow all others by default section as well to yours to give ppl a choice.

I have looked at and fixed tech-geeks addon for this and thought it would be cool to give ppl a choice to what they want all in one contrib.

If your interested I can send you the fixed files and you can have a look at it and see if you want to add the features into yours.

I tried to contact Tech-geeks with the update but have had no luck so I though you might want to have a look and see if it will suit you.

Regards,

Tib

Hello Tib,

Here is a new version of squid_cache_mgt, regarding your feedback.
Source RPM:
http://www.vanhees.cc/modules.php?op=modload&name=CmodsDownload&file=index&req=viewdownloaddetails&lid=305&ttitle=smeserver-squid_cache_mgt-1.0-2.src.rpm
RPM:
http://www.vanhees.cc/modules.php?op=modload&name=CmodsDownload&file=index&req=viewdownloaddetails&lid=308&ttitle=smeserver-squid_cache_mgt-1.0-2.noarch.rpm

Can someone closed the bug http://bugs.contribs.org/show_bug.cgi?id=1913

Sure you can send me you fixed files, so I'll package with the rest, thanks to you. My eMail address is in the rpm.

Regards.

[MasterSleepy]

Hello everibody!

Hello uomonet,

yesterday I installed the 2 contribs, but nothing changed, maybe I don't understand how they work...

As for the restricted Allow IP: all my computers in the LAN still HAVE INTERNET ACCESS. No difference for the IP I'm using if it is or if it is not in the list...

Witch masq did you enter?? Because, most of error come from error in masq. The masq asked here is the masq for ip the can acces internet.
If you want to restrict one ip to have acces to internet enter 255.255.255.255 as masq.

As for the cache settings, i'v done somrthing like this:

Squid cache size in MB     2000     ufs
Squid cache path    /var/spool/squid    
Number of first level directories    16    
Number of second level directories    256    
Max cached size object    100    MB
Maximum request headers size         KB
Maximum cache time         minute

i tried to download a 92Mb file from 1 PC, then I tried in another PC and nothing changed....

????

For cache setting, I'll check for that problem.

Regards,

[uomonet]

Thanks a lot for your answare MasterSleepy!

Witch masq did you enter?? Because, most of error come from error in masq. The masq asked here is the masq for ip the can acces internet.
If you want to restrict one ip to have acces to internet enter 255.255.255.255 as masq.

You're right! I used a 255.255.255.0 mask!
- Is it possible to enter a range of addresses to restrict access for example from xxx.xxx.xxx.50 to xxx.xxx.xxx.100?

Another question for the squid cache settings:
In SME server 6.5 I used to install the "windows_update" contrib wich I found fantastic!! The contribs was created to cache all windows/office updates sites, (very useful)
- Is there something similar for SME 7?
- is it possible to add in you squid cache control panel a feature to enter a web site address to cache?

[MasterSleepy]

Thanks a lot for your answare MasterSleepy!

Witch masq did you enter?? Because, most of error come from error in masq. The masq asked here is the masq for ip the can acces internet.
If you want to restrict one ip to have acces to internet enter 255.255.255.255 as masq.

You're right! I used a 255.255.255.0 mask!
- Is it possible to enter a range of addresses to restrict access for example from xxx.xxx.xxx.50 to xxx.xxx.xxx.100?

Yes it's possible, that's the raison why I put the masq. Calculate the masq required for the range you want to allow.

Another question for the squid cache settings:
In SME server 6.5 I used to install the "windows_update" contrib wich I found fantastic!! The contribs was created to cache all windows/office updates sites, (very useful)
- Is there something similar for SME 7?
- is it possible to add in you squid cache control panel a feature to enter a web site address to cache?

I didn't look to add this functionnality, but it's a good idea.
First I have to solved the problem, and after I'll try to add this functionnality.

Regards.