SOLARIS + squid + ipf + TRANSPARENT

os:solaris9
author:llzqq
from:www.chinaunix.net

1.建立用户和组

# groupadd squid
# useradd -g squid -d /dev/null -s /bin/false squid

2．安装SQUID

# gzip –d squid-2.5.STABLE6.tar.gz
# tar –vxf squid-2.5.STABLE6.tar
# cd squid-2.5.STABLE6
# ./configure
--prefix=/usr/local/squid
--sysconfdir=/etc/squid
--enable-default-err-language=Simplify_Chinese
--enable-ipf-transparent
--disable-hostname-checks
--disable-internal-dns

# make
# make install

3.配置SQUID.CONF

# vi /usr/local/squid/etc/squid.conf
===================== squid.conf ====================
http_port 192.168.0.1:3128 
cache_mgr [email]llzqq@nero.3322.org[/email]
error_directory /usr/local/squid/share/errors/Simplify_Chinese
dns_nameservers 202.99.160.68 202.99.168.8
visible_hostname nero.3322.org
httpd_accel_uses_host_header on
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_single_host off
httpd_accel_with_proxy on
cache_mem 48 MB
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 30 KB
minimum_object_size_in_memory 0 KB
cache_swap_low 85
cache_swap_high 90 
cache_dir ufs /opt/sfw/squid/var/cache
cache_effective_user squid
cache_effective_group squid
acl our_networks src 192.168.100.0/24
http_access allow our_networks
===================== squid.conf ====================

# chown –R squid:squid /usr/local/squid/var
# /usr/local/squid/sbin/squid -z

4. SQUID启动脚本

# vi /etc/rc3.d/S78squid
====================== S78squid =====================
#!/sbin/sh
#
# Copyright (c) 2005 by llzqq Inc
# All rights reserved.
#
#ident  "@(#)squid    1.1     04/05/24 SMI"

case "$1" in
start)
        /usr/local/squid/sbin/squid -D
        ;;
stop)
        /usr/local/squid/sbin/squid -k shutdown
        pkill squid
        ;;
restart)
        /usr/local/squid/sbin/squid –k reconfigure
        ;;
*)
        echo "Usage: $0 { start | stop | restart }"
        exit 1
        ;;

论坛热门帖子:	[lch203] 写得蛮好的linux学习笔记(10-21) [黑马制造] 学习java的30个目标(10-19) [笑傲股林] 做测试半年了，有点迷茫，应该再学些什么提高自己的测试水平和测试能力呢？(10-19) [udp8589] 大家用google的来吱一声? 用百度的~~也来报道下?(10-18) [沂偌掳兆] 本人总结的一些认为C++比较经典的书籍，希望对大家有用(10-18)
TAG标签:	安装 回复 passinonhme0prototcpfromanytoanyport make