-----Ursprungliche Nachricht----- Von: Togan Muftuoglu [mailto:toganm@users.sourceforge.net] Gesendet: Freitag, 7. September 2001 08:12 An: Suse-Security Betreff: Re: [suse-security] http proxy

Hi,

...

I've set up and running a system with 16 MB RAM and one 4GB HD with squid. It is built on SuSE 7.1, minimal Installation, using ipchains as firewall. It works ok when left alone, but is somewhat slow when new

* Andreas Baetz; on 07 Sep, 2001 wrote: processes are

...

started (login, maintenance etc.)

RAM amount is satisfactory then :-) What about the HD space tinyproxy needs at the minimum since the total HD capacity I have is 400 MB and as you may imagine not much left although all the man pages and teh documentation files are deleted and I have like 10 MB HD space left to play with :-(

Hi Togan, I'd be afraid using a www proxy with this little amount of hdd space. You could use squid and tell cron to clean up squids cache very often. But with that one of squids major advantages is lost possibly resulting in a slow connection. Don't forget that your 400MB hd runs with PIO Mode 0 or 1 which is *really* slow. Philipp

-- Togan Muftuoglu

-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com

squid is good but it's a resource hog, so you might want to think twice before installing it ---------------------------------------------------------------------------------------------------------------------------------------- Andreas Baetz wrote: On Friday 07 September 2001 07:36, Togan Muftuoglu wrote:

Hi,

I want to enable http proxy on my firewall/router which has 24 MB RAM and very limited HD space. I've set up and running a system with 16 MB RAM and one 4GB HD with squid. It is built on SuSE 7.1, minimal Installation, using ipchains as firewall. It works ok when left alone, but is somewhat slow when new processes are started (login, maintenance etc.)

Andreas Baetz ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been scanned for the presence of computer viruses. ********************************************************************** -- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com --------------------------------- Terrorist Attacks on U.S. - How can you help? Donate cash, emergency relief information inYahoo! News.

And what goes for blocking ads with ipchains, I wish you plenty of fun with that... You will end up inserting new rules endlessly because most bigger banner exchanger/direct marketer have many different IPs, and some sites can't even be accessed when blocking connections from, say, valueclick.com or doubleclick.net/.com . Unfortunately, the same applies to blocking ads/banners with squid's ACLs.

Er? for example: acl deny-18 dstdomain .iadnet.com acl deny-19 dstdomain .admonitor.com acl deny-20 dstdomain .admonitor.net http_access deny deny-18 http_access deny deny-19 http_access deny deny-20 I got about 300 rules now, and basically see no ads in my regular surfing. Squidguard can also be used if you got really large honking sets of acl's. Kurt Seifried, kurt@seifried.org PGP Key ID: 0xAD56E574 Fingerprint: A15B BEE5 B391 B9AD B0EF AEB0 AD63 0B4E AD56 E574 http://www.seifried.org/