Hi, I want to enable http proxy on my firewall/router which has 24 MB RAM and very limited HD space. Therefore I need a http proxy which is very small in the needs for RAM and HD space. I found tinyproxy to be one solution. Has anyone applied this or any other http proxy on a limited resources. TIA -- Togan Muftuoglu
On Friday 07 September 2001 07:36, Togan Muftuoglu wrote:
Andreas Baetz ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been scanned for the presence of computer viruses. **********************************************************************
Hi, * Andreas Baetz; <andreas.baetz@herma.de> on 07 Sep, 2001 wrote:
RAM amount is satisfactory then :-) What about the HD space tinyproxy needs at the minimum since the total HD capacity I have is 400 MB and as you may imagine not much left although all the man pages and teh documentation files are deleted and I have like 10 MB HD space left to play with :-( -- Togan Muftuoglu
Hi Togan, I'd be afraid using a www proxy with this little amount of hdd space. You could use squid and tell cron to clean up squids cache very often. But with that one of squids major advantages is lost possibly resulting in a slow connection. Don't forget that your 400MB hd runs with PIO Mode 0 or 1 which is *really* slow. Philipp
your internet connection (or rather what the remote end can serve if you got a lot of bandwidth) is still going to be a lot slower then any harddrive, even something 5 years old. Squid is also good for blocking ads (sites load much faster). Kurt
squid is good but it's a resource hog, so you might want to think twice before installing it ---------------------------------------------------------------------------------------------------------------------------------------- Andreas Baetz <andreas.baetz@herma.de> wrote: On Friday 07 September 2001 07:36, Togan Muftuoglu wrote:
Andreas Baetz ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been scanned for the presence of computer viruses. ********************************************************************** -- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com --------------------------------- Terrorist Attacks on U.S. - How can you help? Donate cash, emergency relief information inYahoo! News.
Hi Togan, A long time ago I used an Apache as a http proxy, and it works fine and uses minimal resources. I don't remember at this time, but I think it was a Pentium 166 with 16Mb of RAM and a litle HD. Agustin Togan Muftuoglu wrote:
Hi, First thx for quick responses. As Kurt suggests I know Squid is one of the best options. Yet as Phillip mentions with the amount of HD space I have, using Squid in combination of the cron jobs to regain HD space I agree the loss of performance will be less then the gain of control :-(. For the add blocking I thought of using ipchains as it mentions in the HOW-TO to gain space. For the Internet connection it is currently ADSL with 256/64 serving 4 PC's and in about 2 weeks time cable modem with 1024/256 will be added, expect more questions on firewalling dual routes :-), That was one of my condiderations of thinking about "tinyproxy". I never thought about Apache and I will have a look into it. What about Dante to be used for http proxying? -- Togan Muftuoglu
Yup, On 07-Sep-01 Togan Muftuoglu wrote:
Squid has several options for tuning physical and memory-resident caches so you shouldn't really need any cron jobs. However, if you want to speed up access to certain files/downloads by creating a generous cache you may run out of disk space... Why not putting in another HD, they're not too expensive at the mo! ;) And what goes for blocking ads with ipchains, I wish you plenty of fun with that... You will end up inserting new rules endlessly because most bigger banner exchanger/direct marketer have many different IPs, and some sites can't even be accessed when blocking connections from, say, valueclick.com or doubleclick.net/.com . Unfortunately, the same applies to blocking ads/banners with squid's ACLs.
Dante... It's more of a firewalling thing, and IMHO too overblown to act as a pure proxy. If your main intention is to block ads or prevent access to some sites you may use junkbuster as well. It's easy to configure, quite efficient and uses minimal ressources, although it lacks some of the more sophisticated squid features.
-- Togan Muftuoglu
--- Boris Lorenz <bolo@lupa.de> System Security Admin *nix - *nux ---
Er? for example: acl deny-18 dstdomain .iadnet.com acl deny-19 dstdomain .admonitor.com acl deny-20 dstdomain .admonitor.net http_access deny deny-18 http_access deny deny-19 http_access deny deny-20 I got about 300 rules now, and basically see no ads in my regular surfing. Squidguard can also be used if you got really large honking sets of acl's. Kurt Seifried, kurt@seifried.org PGP Key ID: 0xAD56E574 Fingerprint: A15B BEE5 B391 B9AD B0EF AEB0 AD63 0B4E AD56 E574 http://www.seifried.org/
participants (7)
-
Agustin Muñoz -
Andreas Baetz -
Boris Lorenz -
david lubowa -
Kurt Seifried -
Philipp Snizek -
Togan Muftuoglu