Koozali.org formerly Contribs.org

Using squid to cache windows, mcafee, ad-aware updates

Using squid to cache windows, mcafee, ad-aware updates
« on: December 08, 2006, 01:53:27 AM »
Hi again.
The thought of building another server to put WSUS was just a bit much for me and an idea came to use squid to do this.  Unfortunatly my efforts have resulted in failure.  Im sure squid should be able to do this.

I have searched the forums and found the following thread that looked promising.
http://forums.contribs.org/index.php?topic=30776.0
after editing my templates and expanding I now have the following /etc/squid/squid.conf file
#------------------------------------------------------------
#              !!DO NOT MODIFY THIS FILE!!
#
# Manual changes will be lost when this file is regenerated.
#
# Please read the developer's guide, which is available
# at http://wiki.contribs.org/development/
#
# Copyright (C) 1999-2006 Mitel Networks Corporation
#------------------------------------------------------------
# 05refreshpattern
# cp 05refreshpattern /etc/e-smith/templates/etc/squid/squid.conf/
# expand-template /etc/squid/squid.conf
# squid -k reconfigure

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 16 MB
maximum_object_size 1280096 KB
cache_dir ufs /var/spool/squid 3000 16 256

# various windows versions
refresh_pattern http://.*\.windowsupdate\.microsoft\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://.*\.update\.microsoft\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://download\.microsoft\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://windowsupdate\.microsoft\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://office\.microsoft\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://w?xpsp[0-9]\.microsoft\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://w2ksp[0-9]\.microsoft\.com/ 0 80% 20160 reload-into-ims

# and some other windows updaters
refresh_pattern http://download\.macromedia\.com/ 0 80% 20160 reload-into-ims
refresh_pattern ftp://ftp\.nai\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://ftp\.software\.ibm\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://.*\.grisoft\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://download\.lavasoft\.de*/ 0 80% 20160 reload-into-ims
refresh_pattern ftp://ftp\.nai\.com/ 0 80% 20160 reload-into-ims

# repositories
refresh_pattern http://.*\.archive\.ubuntu\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://www\.getautomatix\.com/ 0 80% 20160 reload-into-ims
refresh_pattern http://wine\.budgetdedicated\.com/ 0 80% 20160 reload-into-ims


acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localsrc src 127.0.0.1 192.168.0.0/255.255.252.0
acl localdst dst 127.0.0.1 192.168.0.0/255.255.252.0
acl SSL_ports port 443 563
acl Safe_ports port 21 70 80 81 119 210 443 563 980 1024-65535
acl CONNECT method CONNECT
acl webdav method PROPFIND TRACE PURGE PROPPATCH MKCOL COPY MOVE LOCK UNLOCK
pid_filename /var/log/squid/squid.pid
append_domain .suncoastcc.qld.edu.au
cache_mgr admin@suncoastcc.qld.edu.au
ftp_user nobody@suncoastcc.qld.edu.au
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
http_access allow manager localsrc
http_access deny manager

http_access deny CONNECT !SSL_ports
http_access allow localsrc
http_access deny all

httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
icp_access allow all
miss_access allow all

store_avg_object_size 3 KB
always_direct allow webdav
always_direct allow all
---end of file---

I have used the following commands to rebuid squid
squid -k
no success

service squid stop
squid -z
service squid start
still nothing.

I am using windows update as the test.

thanks for taking a look at this.

Regards Brad
.........

Using squid to cache windows, mcafee, ad-aware updates
« Reply #1 on: December 08, 2006, 02:23:37 AM »
Hold the phone, it looks like it is working now.  Just getting windows update message to install ie7 (yuk)

Brad
.........

Using squid to cache windows, mcafee, ad-aware updates
« Reply #2 on: December 09, 2006, 10:55:05 AM »
please add feedback to the bug,

this value maybe a little high ?
maximum_object_size 1.2 GB

if you can try with and without the refresh_pattern as well to see if they are required