|
|
|
Squid is a proxy caching web server. We use squid to run Firefox on our private network (LCLSCA) to read web pages on the SLAC public network. Squid is running on lcls-prod03. |
LCLS-PROD03 Production version of Squid
NOTES:
OpenOffice:
SLAC Phone Search:
Security check cronjob:
How to find biggest objects in your cache:
To Speed up firefox:
To remove "start a new session" dialog:
Differences in the squid.config files: < # LCLS- increased cache memory < cache_mem 64 MB < # LCLS - increased the amount of diskspace to 200MB < cache_dir ufs /var/squid/cache 200 16 256 < # LCLS - DNS < dns_nameservers 134.79.18.45 134.79.151.11 134.79.151.15 < # LCLS - Allow only LCLSCA network < acl localnet src 172.27.8.0/22 < # LCLS - Setup acl's < acl GoodSites dstdomain "/etc/squid/squid-noblock.acl" < acl BadSites dstdomain "/etc/squid/squid-block.acl" < acl BadWords url_regex -i "/etc/squid/squid-BlockWords.acl" < acl deny_rep_mime_flashvideo rep_mime_type video/flv < < #LCLS: Allow localnet - which is defined in acl's as 172.27.8.0/22 < http_access deny BadWords < http_access deny BadSites < http_access allow localnet < http_access allow GoodSites < # < #LCLS-uncommented < http_access deny to_localhost --- > #http_access deny to_localhost < < # LCLS - deny MIME type (Flash video) < http_reply_access deny deny_rep_mime_flashvideo < # LCLS - Send Mail to sysadmins < cache_mgr controls-system-admins < # LCLS - user squid < cache_effective_user squid < # LCLS - define name < visible_hostname LCLS-Proxy < # LCLS - Domain < append_domain .slac.stanford.edu < #LCLS - private error pages < error_directory /usr/share/squid/errors/lcls
Enabling the proxy web server in Firefox
Turn off the confirmation of certificates:
Install NoScript add-on to Firefox
These web sites are all subject to change:
Took the defaults:
|
||
Author: Ken Brobeck
Modified:
17-Apr-2012