<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Nineteen Labs &#187; Squid</title>
	<atom:link href="http://www.nineteenlabs.com/category/squid/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.nineteenlabs.com</link>
	<description></description>
	<lastBuildDate>Wed, 16 Dec 2009 14:55:48 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Squid : Ports Restrictions</title>
		<link>http://www.nineteenlabs.com/2007/09/17/squid-ports-restrictions/</link>
		<comments>http://www.nineteenlabs.com/2007/09/17/squid-ports-restrictions/#comments</comments>
		<pubDate>Mon, 17 Sep 2007 14:05:12 +0000</pubDate>
		<dc:creator>Kate</dc:creator>
				<category><![CDATA[Squid]]></category>
		<category><![CDATA[freeBSD]]></category>

		<guid isPermaLink="false">http://www.nineteenlabs.com/2007/09/17/squid-ports-restrictions/</guid>
		<description><![CDATA[Add this to squid.conf
#Port Lists
acl SSL_ports port 443 563
acl Safe_ports port 80  # http
acl Safe_ports port 21  # ftp
acl Safe_ports port 443  # https
acl Safe_ports port 70  # gopher
acl Safe_ports port 210  # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280  # http-mgmt
acl Safe_ports port 488  [...]]]></description>
			<content:encoded><![CDATA[<p>Add this to squid.conf<br />
<code>#Port Lists<br />
acl SSL_ports port 443 563<br />
acl Safe_ports port 80  # http<br />
acl Safe_ports port 21  # ftp<br />
acl Safe_ports port 443  # https<br />
acl Safe_ports port 70  # gopher<br />
acl Safe_ports port 210  # wais<br />
acl Safe_ports port 1025-65535 # unregistered ports<br />
acl Safe_ports port 280  # http-mgmt<br />
acl Safe_ports port 488  # gss-http<br />
acl Safe_ports port 591  # filemaker<br />
acl Safe_ports port 777  # multiling http<br />
acl CONNECT method CONNECT<br />
# Deny requests to unknown ports<br />
http_access deny !Safe_ports<br />
# Deny CONNECT to other than SSL ports<br />
http_access deny CONNECT !SSL_ports</code></p>
<p>or<br />
<code># Port Lists<br />
acl SSL_ports port 443 563<br />
acl Safe_ports port 80 21 443 70 210 1025-65535 280 488 591 777<br />
# Deny requests to unknown ports<br />
http_access deny !Safe_ports<br />
# Deny CONNECT to other than SSL ports<br />
http_access deny CONNECT !SSL_ports</code></p>
<p>If users in your network access remote servers on non standard HTTP/S ports not listed in squid.conf, your browser will show an error page :</p>
<p><em>ERROR</p>
<p>The requested URL could not be retrieved</p>
<p>_____</p>
<p>While trying to retrieve the URL: http://xxx.xxx.xxx.xxx:1000 (this is an example)</p>
<p>The following error was encountered:</p>
<p>* Access Denied.</p>
<p>Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.</p>
<p>Your cache administrator is webmaster.</em></p>
<p><strong>This ports restriction help limit unauthorized request.</strong></p>
                        <p><center>&copy; Kate Mag - visit the <a href="http://www.nineteenlabs.com">Nineteen Labs</a> for more great content.</center></p>                  ]]></content:encoded>
			<wfw:commentRss>http://www.nineteenlabs.com/2007/09/17/squid-ports-restrictions/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>After reboot, squid -k can not send stop signal again</title>
		<link>http://www.nineteenlabs.com/2007/09/09/after-reboot-squid-k-can-not-send-stop-signal-again/</link>
		<comments>http://www.nineteenlabs.com/2007/09/09/after-reboot-squid-k-can-not-send-stop-signal-again/#comments</comments>
		<pubDate>Sun, 09 Sep 2007 15:14:58 +0000</pubDate>
		<dc:creator>Kate</dc:creator>
				<category><![CDATA[Squid]]></category>
		<category><![CDATA[freeBSD]]></category>

		<guid isPermaLink="false">http://www.nineteenlabs.com/2007/09/09/after-reboot-squid-k-can-not-send-stop-signal-again/</guid>
		<description><![CDATA[If reboot and squid -k says it can not send stop signal again, means that squid.pid is missing
Check squid.pid in the system and if missing, here is what i can suggest :
Look into a previous post in this website, then shutdown squid
squid -k shutdown
Create squid.pid (usually squid.pid located in the same directory with log files)
touch [...]]]></description>
			<content:encoded><![CDATA[<p>If reboot and squid -k says it can not send stop signal again, means that squid.pid is missing<br />
Check squid.pid in the system and if missing, here is what i can suggest :<br />
Look into a <a href="http://www.nineteenlabs.com/2007/09/09/squid-k-problem-can-not-send-stop-signal/">previous post</a> in this website, then shutdown squid<br />
<code>squid -k shutdown</code></p>
<p>Create squid.pid (usually squid.pid located in the same directory with log files)<br />
<code>touch squid.pid</code></p>
<p>squid.pid chmod permission<br />
<code>-rw-r--r--</code></p>
<p>squid.pid chown permission<br />
<code>root : squid</code></p>
<p>Since it&#8217;s empty, we must make Squid to rewrite a squid.pid file<br />
Create Squid swap directories<br />
<code>squid -z</code></p>
<p>Run Squid<br />
<code>squid</code></p>
<p>then try reboot</p>
                        <p><center>&copy; Kate Mag - visit the <a href="http://www.nineteenlabs.com">Nineteen Labs</a> for more great content.</center></p>                  ]]></content:encoded>
			<wfw:commentRss>http://www.nineteenlabs.com/2007/09/09/after-reboot-squid-k-can-not-send-stop-signal-again/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Squid -k problem : can not send stop signal</title>
		<link>http://www.nineteenlabs.com/2007/09/09/squid-k-problem-can-not-send-stop-signal/</link>
		<comments>http://www.nineteenlabs.com/2007/09/09/squid-k-problem-can-not-send-stop-signal/#comments</comments>
		<pubDate>Sun, 09 Sep 2007 15:00:57 +0000</pubDate>
		<dc:creator>Kate</dc:creator>
				<category><![CDATA[Squid]]></category>
		<category><![CDATA[freeBSD]]></category>

		<guid isPermaLink="false">http://www.nineteenlabs.com/2007/09/09/squid-k-problem-can-not-send-stop-signal/</guid>
		<description><![CDATA[The squid.pid file is missing or unreadable makes squid -k command don&#8217;t work (says it can not send stop signal). We kill Squid manually by finding the process ID with ps. 
ps ax &#124; grep squid
If there are more than one Squid process, be sure to kill the one that shows up as (squid).
example
500  [...]]]></description>
			<content:encoded><![CDATA[<p>The squid.pid file is missing or unreadable makes squid -k command don&#8217;t work (says it can not send stop signal). We kill Squid manually by finding the process ID with ps. </p>
<p><code>ps ax | grep squid</code></p>
<p>If there are more than one Squid process, be sure to kill the one that shows up as (squid).<br />
example<br />
<code>500  ??  Is     0:00.01 squid -sD<br />
505  ??  S      0:00.27 (squid) -sD (squid)</code></p>
<p>then kill it<br />
<code>kill -TERM 505</code></p>
<p>How to fix this? I learn that with a help from <a href="http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-fa2a8d93db2ab1c414c4d0e71106ce871d2087e1">Squid Faq</a><br />
Run squid again<br />
<code>squid</code></p>
<p>then do ps again<br />
<code>ps ax | grep squid</code></p>
<p>find squid process that shows up as (squid)<br />
example : if the process id 82675 (remember this is example)<br />
Create the PID file and put the process id number there<br />
<code>echo 82675 > /usr/local/squid/logs/squid.pid</code><br />
note : /usr/local/squid/logs/squid.pid (location of squid.pid, this is probably different in your computer)</p>
<p>Then find the Squid process id. Send the process a HUP signal, which is the same as squid -k reconfigure<br />
<code>kill -HUP 82675</code><br />
The reconfigure process creates a new PID file automatically.</p>
                        <p><center>&copy; Kate Mag - visit the <a href="http://www.nineteenlabs.com">Nineteen Labs</a> for more great content.</center></p>                  ]]></content:encoded>
			<wfw:commentRss>http://www.nineteenlabs.com/2007/09/09/squid-k-problem-can-not-send-stop-signal/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>4 things about Squid Swap Directories</title>
		<link>http://www.nineteenlabs.com/2007/09/08/4-things-about-squid-swap-directories/</link>
		<comments>http://www.nineteenlabs.com/2007/09/08/4-things-about-squid-swap-directories/#comments</comments>
		<pubDate>Sat, 08 Sep 2007 13:43:03 +0000</pubDate>
		<dc:creator>Kate</dc:creator>
				<category><![CDATA[CentOS/RHEL]]></category>
		<category><![CDATA[Squid]]></category>
		<category><![CDATA[freeBSD]]></category>

		<guid isPermaLink="false">http://www.nineteenlabs.com/2007/09/08/4-things-about-squid-swap-directories/</guid>
		<description><![CDATA[A few things you need to know about Squid Swap Directories
1. Do not erase or delete using linux delete command. It can cause Swap Directories DIRTY.
2. You do not need to erase or delete Squid Swap Directories if you have no_cache deny (an instruction in squid for no-cache proxy) in squid.conf. Squid need that Swap [...]]]></description>
			<content:encoded><![CDATA[<p>A few things you need to know about Squid Swap Directories<br />
1. Do not erase or delete using linux delete command. It can cause Swap Directories DIRTY.<br />
2. You do not need to erase or delete Squid Swap Directories if you have no_cache deny (an instruction in squid for no-cache proxy) in squid.conf. Squid need that Swap Directories<br />
3. Shutdown Squid before recreates Swap Directories.<br />
4. If you recreates Swap Directories, disconnect any request to Squid. It can cause you a problem, in my experience, i can&#8217;t shutdown Squid properly in next event</p>
                        <p><center>&copy; Kate Mag - visit the <a href="http://www.nineteenlabs.com">Nineteen Labs</a> for more great content.</center></p>                  ]]></content:encoded>
			<wfw:commentRss>http://www.nineteenlabs.com/2007/09/08/4-things-about-squid-swap-directories/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Disable Cache in Squid 2.5</title>
		<link>http://www.nineteenlabs.com/2007/08/25/disable-cache-in-squid-25/</link>
		<comments>http://www.nineteenlabs.com/2007/08/25/disable-cache-in-squid-25/#comments</comments>
		<pubDate>Sat, 25 Aug 2007 16:47:44 +0000</pubDate>
		<dc:creator>Kate</dc:creator>
				<category><![CDATA[Squid]]></category>
		<category><![CDATA[freeBSD]]></category>

		<guid isPermaLink="false">http://www.nineteenlabs.com/2007/08/25/disable-cache-in-squid-25/</guid>
		<description><![CDATA[Add/modify squid.conf :
#no local caching
maximum_object_size 0 KB
minimum_object_size 0 KB
# specify uncachable requests
acl all src 0.0.0.0/0.0.0.0
no_cache deny all

or
# caches nothing based on time
acl Working time 08:00-16:00
no_cache deny Working

# avoid having a cache directory
cache_dir null /tmp 
or
cache_dir null /null
                   [...]]]></description>
			<content:encoded><![CDATA[<p>Add/modify squid.conf :</p>
<p>#no local caching<br />
<code>maximum_object_size 0 KB<br />
minimum_object_size 0 KB</code></p>
<p># specify uncachable requests<br />
<code>acl all src 0.0.0.0/0.0.0.0<br />
no_cache deny all<br />
</code><br />
or<br />
# caches nothing based on time<br />
<code>acl Working time 08:00-16:00<br />
no_cache deny Working<br />
</code></p>
<p># avoid having a cache directory<br />
<code>cache_dir null /tmp </code><br />
or<br />
<code>cache_dir null /null</code></p>
                        <p><center>&copy; Kate Mag - visit the <a href="http://www.nineteenlabs.com">Nineteen Labs</a> for more great content.</center></p>                  ]]></content:encoded>
			<wfw:commentRss>http://www.nineteenlabs.com/2007/08/25/disable-cache-in-squid-25/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>High Anonymous Proxy (squid 2.5) : header_replace User-Agent</title>
		<link>http://www.nineteenlabs.com/2007/08/24/high-anonymous-proxy-squid-25-header_replace-user-agent/</link>
		<comments>http://www.nineteenlabs.com/2007/08/24/high-anonymous-proxy-squid-25-header_replace-user-agent/#comments</comments>
		<pubDate>Sat, 25 Aug 2007 00:33:47 +0000</pubDate>
		<dc:creator>Kate</dc:creator>
				<category><![CDATA[Squid]]></category>
		<category><![CDATA[freeBSD]]></category>

		<guid isPermaLink="false">http://www.nineteenlabs.com/2007/08/24/high-anonymous-proxy-squid-25-header_replace-user-agent/</guid>
		<description><![CDATA[UPDATED
We can&#8217;t see the latest yahoo pages if &#8216;header_replace User-Agent&#8217; set to &#8216;unknown&#8217; or anonymous User-Agent. To avoid this, change into :
header_replace User-Agent Mozilla/5.0 (en) Gecko/20070515 Firefox/2.0.0.4
or
header_access User-Agent allow all
before
header_access Deny deny all 
                      [...]]]></description>
			<content:encoded><![CDATA[<p><strong>UPDATED</strong></p>
<p>We can&#8217;t see the latest yahoo pages if &#8216;header_replace User-Agent&#8217; set to &#8216;unknown&#8217; or anonymous User-Agent. To avoid this, change into :</p>
<p><strong>header_replace User-Agent Mozilla/5.0 (en) Gecko/20070515 Firefox/2.0.0.4</strong></p>
<p>or</p>
<p><code>header_access User-Agent allow all</code></p>
<p>before</p>
<p><code>header_access Deny deny all </code></p>
                        <p><center>&copy; Kate Mag - visit the <a href="http://www.nineteenlabs.com">Nineteen Labs</a> for more great content.</center></p>                  ]]></content:encoded>
			<wfw:commentRss>http://www.nineteenlabs.com/2007/08/24/high-anonymous-proxy-squid-25-header_replace-user-agent/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>High Anonymous Proxy (squid 2.5)</title>
		<link>http://www.nineteenlabs.com/2007/08/24/high-anonymous-proxy-squid-25/</link>
		<comments>http://www.nineteenlabs.com/2007/08/24/high-anonymous-proxy-squid-25/#comments</comments>
		<pubDate>Fri, 24 Aug 2007 07:10:06 +0000</pubDate>
		<dc:creator>Kate</dc:creator>
				<category><![CDATA[CentOS/RHEL]]></category>
		<category><![CDATA[Squid]]></category>
		<category><![CDATA[freeBSD]]></category>

		<guid isPermaLink="false">http://www.nineteenlabs.com/2007/08/24/high-anonymous-proxy-squid-25/</guid>
		<description><![CDATA[UPDATED
I manage squid 2.5 to become high anonymous proxy.
# cd /usr/local/etc/squid
# vi squid.conf
Change this in #Miscellanous
forwarded_for off
[client ip won't recognize]
Add this to #Miscellanous
header_access Allow allow all
header_access Authorization allow all
header_access Cache-Control allow all
header_access Content-Encoding allow all
header_access Content-Length allow all
header_access Content-Type allow all
header_acccess Date allow all
header_access Expires allow all
header_access Host allow all
header_access If-Modified-Since allow all
header_access Last-Modified allow [...]]]></description>
			<content:encoded><![CDATA[<p><strong>UPDATED</strong></p>
<p>I manage squid 2.5 to become high anonymous proxy.</p>
<p><code># cd /usr/local/etc/squid<br />
# vi squid.conf</code></p>
<p>Change this in #Miscellanous<br />
<code>forwarded_for off</code><br />
[client ip won't recognize]</p>
<p>Add this to #Miscellanous<br />
<code>header_access Allow allow all<br />
header_access Authorization allow all<br />
header_access Cache-Control allow all<br />
header_access Content-Encoding allow all<br />
header_access Content-Length allow all<br />
header_access Content-Type allow all<br />
header_acccess Date allow all<br />
header_access Expires allow all<br />
header_access Host allow all<br />
header_access If-Modified-Since allow all<br />
header_access Last-Modified allow all<br />
header_access Location allow all<br />
header_access Pragma allow all<br />
header_access Accept allow all<br />
header_access Accept-Enncoding allow all<br />
header_access Accept-Language allow all<br />
header_access Content-Language allow all<br />
header_access Mime-Version allow all<br />
header_access Cookie allow all<br />
header_access Set_Cookie allow all<br />
header_access Retry-After allow all<br />
header_access Title allow all<br />
header_access Connection allow all<br />
header_access Proxy-Connection allow all<br />
header_access All deny all</p>
<p>header_replace User-Agent anonymous</code><br />
[browser will be identify as anonymous]</p>
<p>Save and reboot server<br />
<code># reboot</code></p>
<p>or Re-read squid.conf without restarting<br />
<code># squid -k reconfigure</code></p>
<p>Restore proxy to previous setting<br />
add # besides header_replace to turn off.</p>
<p>Visit <a href="http://www.proxyblind.org">Proxy Blind</a> to check proxy results</p>
<p>They will identify as no proxy or highly anonymous.<br />
Proxy types according to Proxy Blind (description from their site)</p>
<p>No proxy : In this case (the majority of internet users), http requests are sent directly  from your machine to the server. There is no privacy or caching benefits. A non-proxied system will display the following information:<br />
REMOTE_ADDR = Your IP<br />
HTTP_VIA = blank<br />
HTTP_X_FORWARDED_FOR = blank</p>
<p>Transparent Proxy : A transparent proxy anounces to the world that it&#8217;s a proxy, and passes on  your information. It provides no privacy improvements (except against poorly  coded sites that only look at REMOTE_ADDR and not HTTP_X_FORWARDED_FOR). It can  provide a benefit by caching frequently accessed pages; many companies also use  this system for filtering purposes. A transparent proxy will display the following information:<br />
REMOTE_ADDR = Proxy&#8217;s IP<br />
HTTP_VIA = Proxy&#8217;s IP<br />
HTTP_X_FORWARDED_FOR = Your IP</p>
<p>Anonymous Proxy :An anonymous proxy offers the caching benefits of a transparent proxy, while  hiding your IP address (by replacing with either the proxies IP, or a random  address. The downside to this approach is that sites that use address detection  to establish unique users (online games, voting, some logins) will not be able  to distinguish you from others in your domain. Of course, that might be a bonus  sometimes. An anonymous proxy will display the following information:<br />
REMOTE_ADDR = Proxy&#8217;s IP<br />
HTTP_VIA = Proxy&#8217;s IP<br />
HTTP_X_FORWARDED_FOR = Proxy&#8217;s IP, or random  </p>
<p> Highly Anonymous : A highly anonymous (often known as an elite proxy) makes your system look the  same as a non-proxied system (with the proxy servers IP address). This provides  the best security; however, all the caveats of an anonymous proxy are still  present. In addition, an anonymous proxy&#8217;s existance can be detected, and the  server can suggest workarounds, but there&#8217;s no way to detect an elite proxy.  Again, that may be your goal. A highly anonymous proxy will display the following information:<br />
REMOTE_ADDR = Proxy&#8217;s IP<br />
HTTP_VIA = blank<br />
HTTP_X_FORWARDED_FOR = blank</p>
                        <p><center>&copy; Kate Mag - visit the <a href="http://www.nineteenlabs.com">Nineteen Labs</a> for more great content.</center></p>                  ]]></content:encoded>
			<wfw:commentRss>http://www.nineteenlabs.com/2007/08/24/high-anonymous-proxy-squid-25/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>

