Squid – More Geek Fun

So now that Rosalyn has proven that she can’t be trusted to surf unfettered it’s time to setup the Squid Proxy server again.

I had the kids computer running through it before with a whitelist of sites they could visit, but now they are using Mom’s conputer a lot to surf and it doesn’t get proxied.

I needed to setup the proxy server so that the kids could only go to the whitelisted sites, but Liz could go anywhere. So I set it up to ask for authorization to visit anything not on the whitelist.

Here are the relevant lines in the conf file:

auth_param basic program /usr/lib/squid/ncsa_auth /usr/etc/passwd
auth_param basic children 5
auth_param basic realm Dad says NO
auth_param basic credentialsttl 2 hours

acl whitelist dstdomain “/etc/squid/whitelist”
acl password proxy_auth REQUIRED
http_access allow whitelist
http_access allow password

# And finally deny all other access to this proxy
http_access allow localhost
http_access deny all

So this reads in a list of domains from a file and allows access to them. If the domain is not in the file, then it password prompts you for access.