Squid tweaks? any suggestions?

[surfgatinho]

Hi
I've just set up a Linux (Mandrake) box as a caching server for our mostly windows based network. Firstly, are there any obvious, simple tweaks for Squid.
Secondly, it seems a bit of a waste having a Linux box do nothing except caching.

The Network setup is we have a ADSL router NATting a public IP to local IP. Nearly all machines use the Linux box as a proxy now.
Are there any security enhancements or other utilities I could take advantage of using this setup.

Thanks in advance
Chris

http://a-connect.co.uk

 

[ady2k]

What security did you mean it ? and what advantage do you want from Squid ?
Did you mean user authentication or tranparent proxy from squid??? Your question is very general.

 

[surfgatinho]

It is a rather vague question. Basically I've got a Linux box running nothing but Squid. I was just wondering whether anyone had any other suggestions what I might do with it eg. firewall etc.

http://a-connect.co.uk

 

[jasen001]

Hi

If u r having a very slow machine with 32MB RAM then u should do nating on that.

# iptables -t nat -F POSTROUTING
# iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
# echo "1">/proc/sys/net/ipv4/ip_forward

But i think Squid is best because u can restrict the users for something or all things for browsing,downloading, using bandwidth.
All u need to know is ACL
I found acl in squid can be better used to allow/deny users for whatever we want
Also configure squid as a Transperant Proxy so that users can not bypass the proxy server.
Read total squid.conf file, it will be very benificial for u.