电脑技术学习

FreeBSD 6.2Release+Squid-2.6架设上网二级代理服务器

dn001

  newproxy# cp GENERIC funpower

  newproxy# ee funpower

  修改内核配置文件,将不需要的选项(如网卡)之类的前面打#,然后按esc并按a保存退出,再执行:

  newproxy# /usr/sbin/config funpower

  newproxy# cd ../compile/funpower

  newproxy# make cleandepend

  newproxy# make depend

  newproxy# make

  newproxy# make install

  2、squid的安装

  (1)安装perl

  newproxy# cd /usr/ports/lang/perl5

  newproxy# make install

  (2)下载并安装squid

  从http://www.squid-cache.org/Versions/v2/2.6/下载squid-2.6.STABLE16.tar.gz并通过FTP放置服务器目录中/home/funpower,然后开始解压安装:

  newproxy# cd /home/funpower

  newproxy# tar zxvf squid-2.6.STABLE16.tar.gz

  newproxy# cd squid-2.6.STABLE16

  newproxy# ./configure –prefix=/usr/local/squid

  newproxy# make

  newproxy# make install

  (3)配置squid.conf

  newproxy# cd /usr/local/squid/etc

  newproxy# ee squid.conf

  内容如下:

  acl web src 192.168.21.0/24
  acl all src 0.0.0.0/0.0.0.0
  acl manager proto cache_object
  acl localhost src 127.0.0.1/255.255.255.255
  acl to_localhost dst 127.0.0.0/8
  acl SSL_ports port 443
  acl Safe_ports port 80 # http
  acl Safe_ports port 21 # ftp
  acl Safe_ports port 443 # https
  acl Safe_ports port 70 # gopher
  acl Safe_ports port 210 # wais
  acl Safe_ports port 1025-65535 # unregistered ports
  acl Safe_ports port 280 # http-mgmt
  acl Safe_ports port 488 # gss-http
  acl Safe_ports port 591 # filemaker
  acl Safe_ports port 777 # multiling http
  acl CONNECT method CONNECT
  http_access allow manager localhost
  http_access deny manager
  http_access deny !Safe_ports
  http_access deny CONNECT !SSL_ports
  http_access allow web
  http_access deny all
  icp_access allow all
  http_port 3128
  hIErarchy_stoplist cgi-bin ?
  acl QUERY urlpath_regex cgi-bin ?
  cache deny QUERY
  cache_mem 64 MB
  cache_dir ufs /usr/local/squid/cache 7000 16 256
  access_log /dev/null
  cache_log /dev/null
  cache_store_log none
  refresh_pattern ^ftp: 1440 20% 10080
  refresh_pattern ^gopher: 1440 0% 1440
  refresh_pattern . 0 20% 4320
  acl apache rep_header Server ^Apache
  broken_vary_encoding allow apache
  cache_mgr webmaster@www.com
  cache_effective_user squid
  cache_effective_group squid
  visible_hostname one.www.com

标签: