Question:

I am fairly new to this, so please explain this fairly elementary question.

I am trying to configure squid on XP (squid-2.7.STABLE7-bin) in the following 2 ways. Can I have a sample squid.conf for each configuration

My existing configuration (squid.conf default ) is attached. Please note domains on both the questions are NOT the same – I am using this so that I can tell them apart.

1)  What do I need to add to my conf file so that all web-sites are BLOCKED except paypal.com, www.google.com, *.microsoft.com ( meaning the entire microsoft domain ), *.ibm.com ( all of ibm )

2) What do I need to add to my conf file so that all websites are ALLOWED except paypal.com, www.google.com , *.microsoft.com ( meaning the entire microsoft domain ), *.hp.com (all of hp )

3) Do I need two nics when my router can be configured to accept only connections from one ip ?
4) How to prevent the squid proxy hosts  bypassing the proxy based filtering by directly giving an ip-address in these configurations?

Thanks
rg

Solution:

Hello there!

Open your conf file up and go to find > “YOUR CLIENT”
Just under this section add in your rules.

First of all there are many ways to go about this. However I prefer to setup access lists (create a file in the same folder and name them .acl)

Inside your acls (create at least 2 something like squid-block.acl, squid-safe.acl and maybe another like squid-bypass.acl)

Now in the .conf file

First start by identifying your networks

acl src our_networks 192.168.1.0/24 (for example)
http_access allow our_networks

Now you can either add in the info in here or do use the access lists.

e.g

acl src our_networks 192.168.1.0/24
acl pp dstdomain .paypal.
http_access allow pp
http_access deny
http_access allow our_networks

or

acl src our_networks 192.168.1.0/24
http_access deny

Look here for more examples www.squid-cache.org

There is so much more you can do here, especially if you call the access lists outside of the .conf that way you can easily add to the list and the rules are already in place.