Novell LINUX ENTERPRISE SERVER 11 - ADMINISTRATION Administration Manual page 442

overwritten. The default value is 0 because archiving and deleting log files in SUSE
Linux Enterprise Server is carried out by a cron job set in the configuration file
/etc/logrotate/squid.
append_domain <domain>
With append_domain, specify which domain to append automatically when none
is given. Usually, your own domain is entered here, so entering www in the
browser accesses your own Web server.
forwarded_for on
If you set the entry to off, Squid removes the IP address and the system name of
the client from HTTP requests. Otherwise it adds a line to the header like
X-Forwarded-For: 192.168.0.1
negative_ttl 5 minutes; negative_dns_ttl 5 minutes
Normally, you do not need to change these values. If you have a dial-up connection,
however, the Internet may, at times, not be accessible. Squid makes a note of the
failed requests then refuses to issue new ones, although the Internet connection has
been reestablished. In a case such as this, change the minutes to seconds. Then,
after clicking Reload in the browser, the dial-up process should be reengaged after
a few seconds.
never_direct allow acl_name
To prevent Squid from taking requests directly from the Internet, use the above
command to force connection to another proxy. This must have previously been
entered in cache_peer. If all is specified as the acl_name, force all requests to
be forwarded directly to the parent. This might be necessary, for example, if you
are using a provider that strictly stipulates the use of its proxies or denies its firewall
direct Internet access.
29.4.2 Options for Access Controls
Squid provides a detailed system for controlling the access to the proxy. By implement-
ing ACLs, it can be configured easily and comprehensively. This involves lists with
rules that are processed sequentially. ACLs must be defined before they can be used.
Some default ACLs, such as all and localhost, already exist. However, the mere defini-
tion of an ACL does not mean that it is actually applied. This only happens in conjunction
with http_access rules.
428 Administration Guide