Differences between version 11 and predecessor to the previous major change of SquidNotes.
Other diffs: Previous Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 11 | Last edited on Wednesday, November 9, 2005 11:16:40 am | by RichardCrimp | Revert |
| Older page: | version 8 | Last edited on Saturday, December 18, 2004 4:31:59 pm | by DanielLawson | Revert |
@@ -22,8 +22,14 @@
As of mid December 2004, Windows Update (under XP at least) changed the way it works. It ignores proxy settings, and attempts to make direct connections to a pool of servers. This is fairly annoying, as if you have no default route set on your workstations (a sensible security measure), you can no longer run windows update.
The subnets in question are: 207.46.0.0/16 and (I think) 64.2.21.0/24. It seems that the only solution is to allow these direct access via your firewall.
+
+To use windows update via a proxy you must configure it using proxycfg as below
+
+proxycfg -u
+
+will import your proxy server setting from Internet Explorer.
!!Add-on utilities for Squid
@@ -49,8 +55,9 @@
Investigate the following blacklists:
* DansGuardian (http://dansguardian.org) (GPL, but commercial users are asked to pay for DL)
* SquidGuard (http://www.squidguard.org) (GPL but you can't sell it)
+* [ufdbGuard] (http://www.urlfilterdb.com) (GPL but you can't sell it)
(Note from Daniel Barron, DG author: the SG clause is in violation of the GPL and thus is invalid. The DG license is fully 100% within the GPL. What is asked for is that commercial users pay to __download__ DG. I just thought I'd clarify the [FUD].)
@@ -97,8 +104,14 @@
host.domain.com
# or
.domain.com
# for everything in domain.com
+</pre>
+
+Alternatively, an external redirector such as [ufdbGuard] is used to block URL categories.
+<pre>
+ redirect_program /local/squid/bin/ufdbGuard -c /local/squid/etc/ufdbGuard.conf
+ redirect_children 2
</pre>
!!Proxy Auth with [NTLM]
