Topic: How to configure Squid on SME server 7.4

[thianb]

Hi All

I need to configure squid so that all the users can connect through the proxy. At the moment the server manager only allows me to enable squid but not to configure it. Is there an rpm that you can download that will give me more configuration options in server manager. Please help?

Thian

[Daniel B.]

If you use SME in server & gateway, all your users will automatically use the proxy as it's configured to be transparent (all requests on port 80 will be redirected to 3128, where squid listen to)

You can change some default configuration with db commands: http://wiki.contribs.org/DB_Variables_Configuration#Squid_Proxy_.28squid.29

And if you need more advanced customizations, you'll need to create custom templates.

Regards.

[thianb]

Hi VIP

On the client machines do you then set their web browsers to use the proxy with the IP address of the server and port 80 or do you use port 3128?

Please let me know?

Thian

[thianb]

Do you also need to set the server to point to the default gatway that points to the Iburst internet router?

[Daniel B.]

Hi VIP

On the client machines do you then set their web browsers to use the proxy with the IP address of the server and port 80 or do you use port 3128?

If the SME server is the default gateway for your clients (used in server & gateway), you don't have to configure the proxy, the redirection is automatic and transparent.

If your SME server is in server-only mode, you need to configure the web browser on your clients to use your SME server as proxy on port 3128

[thianb]

Hi VIP

When I set my laptop's default gateway to 192.168.1.17 which is the SME server it says website found waiting for reply but nothing happens. I configured the default gateway of the SME server to point directly to the Iburst router and I allowed the SME server to connect through the Iburst router but it doesnt want to work.

Please help

Thian

[Daniel B.]

Is your SME Server configured as server & gateway, or server only ?

If it's in server only, it cannot route anything. You need to configure your Iburst router (not sure what it is, I guess it's your ISP router) as default gateway for your clients, and then configure the web browser of your clients to use your SME (192.168.1.17) as proxy, on port 3128.

Regards.

[thianb]

Hi VIP

My SME server is configured as Server and Gateway.

Regards

Thian

[Stefano]

ok.. so, please, tell us the ip of eth0 and eth1 (lan and wan)

thank you

[thianb]

The IP address of eth0 is 192.168.1.17 and eth1 is 192.168.1.18.

The SME server has a default gateway of 192.168.1.8 which points to our Iburst router for internet.

Regards

Thian

[Daniel B.]

It cannot work: you have the same subnet on both side (lan and wan). When your SME Server need to send a packet to 192.168.1.8, it cannot know if it should send on the lan or on the wan NIC.

You should change one of the subnet address. Eg: replace 192.168.1.X with 192.168.2.X on the wan side

Regards

[thianb]

Hi VIP

I changed the eth1 IP to 192.168.0.100 but its still not working. Do you need to assign the ip statically or dynamically? Does it need to point to the ISP or how do I need to configure it?

Regards

Thian

[Daniel B.]

Well, you can use static or dynamic IP if your ISP's router provide DHCP. You also need to change the IP of your ISP's router to be on the same subnet as eth1 of your SME Server. Eg:

[clients: 192.168.1.0/255.255.255.0] <-> [SME eth0 192.168.1.17 / SME eth1 192.168.0.100] <-> [ISP Router 192.168.0.1]

[thianb]

Ok VIP

I changed the eth0 IP to 10.10.1.1 mask 255.255.255.0 and my laptop ip to 10.10.1.2 255.255.255.0. The eth1 IP is 192.168.1.17 255.255.255.0 and the gateway is 192.168.1.8 which is the Iburst router. It still doesnt want to work. I set the default gateway on my laptop to 10.10.1.1 but when I opet Internet Explorer it says website found waiting for reply but nothing happens.

Regards

Thian

[Jáder]

Try to ping any IP address from internet.
#ping 200.176.3.142

if it works so your problem is DNS resolution. In this case post your /etc/resolv.conf file here.

Thanks

Jáder