Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 04-08-2006 Installation Manual page 806

Apache is running on the machine. Otherwise, enter rcapache start to start Apache
with the SUSE Linux Enterprise Server default settings. The last step to set it up is to
copy the file cachemgr.cgi to the Apache directory cgi-bin:
cp /usr/share/doc/packages/squid/scripts/cachemgr.cgi /srv/www/cgi-bin/
42.6.2 Cache Manager ACLs in
/etc/squid/squid.conf
There are some default settings in the original file required for the cache manager. First,
two ACLs are defined then http_access options use these ACLs to grant access from
the CGI script to Squid. The first ACL is the most important, because the cache manager
tries to communicate with Squid over the cache_object protocol.
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
The following rules give Apache the access rights to Squid:
http_access allow manager localhost
http_access deny manager
These rules assume that the Web server and Squid are running on the same machine.
If the communication between the cache manager and Squid originates at the Web
server on another computer, include an extra ACL as in Example 42.2, "Access Rules"
(page 806).
Example 42.2 Access Rules
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl webserver src 192.168.1.7/255.255.255.255 # webserver IP
Then add the rules in Example 42.3, "Access Rules" (page 806) to permit access from
the Web server.
Example 42.3 Access Rules
http_access allow manager localhost
http_access allow manager webserver
http_access deny manager
Configure a password for the manager for access to more options, like closing the cache
remotely or viewing more information about the cache. For this, configure the entry
806 Installation and Administration