HTTP Anti-Virus Proxy

This question may not fit perfectly here, but maybe someone has solved this already.

Is it possible to configure one Squid-instance to listen on two ports where one port
has HAVP as parent and the other one is directly connected to the internet?

Thanks,
Matt

It's very simple.. acl has "myport".

http://squid.visolve.com/squid/squid30/ ... s.html#acl

http_port 8080
http_port 8090
acl CLIENT_PORT myport 8080
acl HAVP_PORT myport 8090
...
cache_peer_access havp.xxx.com deny CLIENT_PORT
cache_peer_access havp.xxx.com allow HAVP_PORT
...

Cheers,
Henrik

Perfect!

Thanks,
Matt

Hi.

Does this mean that with this setup you can run a squid sandwich on one machine ?

USERS =>( SQUID1 => HAVP => SQUID2 ) => INTERNET

I mean having squid1, havp and squid2 all running on a single pc ?

Thanks

Naturally you can.. it would be strange if you couldn't run multiple software on single computer.

Either you run two squid instances with separate config files, or create a single config with acls enabling HAVP usage from users but not from localhost (but that logs all requests twice).

Cheers,
Henrik

Ok, thanks.

I knew it was possible to run 2 different instances of squid but it didn't seem really easy to maintain since you need to have 2 separate binaries & 2 different configs...

I prefer the idea of having one squid instance listening on 2 ports...
Will try to make it work.

Thanks for your quick feeedback

Jean-Baptiste

Anyways, it seems that access_log parameters can use ACL too. So you can define what you log. That eliminates all the drawbacks, so yes go with one Squid..

I put quick example for this to Usage, maybe it helps.

Cheers,
Henrik

Oops it seems only Squid 3 can use acl with access_log .. I guess you have to live with duplicate logs. Unless you want to patch Squid 2.5 with this: http://devel.squid-cache.org/cgi-bin/diff2/customlog-2_5?s2_5

Cheers,
Henrik