[Chilli] Coovachilli and Squid Transparent on the same host

[Germano Paciocco]

/*Venkatesh K <kaevee at gmail.com>*/ wrote:

> I suspect your squid is not started?

Squid is started, working and listening on 127.0.0.1:3128. I tried with

terminal1 -> hotspot$ export http_proxy=http://localhost:3128 && lynx
terminal2 ->hotspot# tail -f /var/log/squid3/access.log

squid is proxing and I can surf the web.

and btw:

hotspot# ps aux | grep squid
proxy      895  0.0  0.3  13068  6732 ?        Ss   21:30   0:00
/usr/sbin/squid3 -N -YC -f /etc/squid3/squid.conf
hotspot# ps aux | grep chilli
root      2134  0.0  0.0   7712  1104 ?        Ss   21:34   0:00
/sbin/chilli -c /etc/chilli.conf

here's my config:

[main.conf]
cmdsocket       /var/run/chilli.eth1.sock
unixipc         chilli.eth1.ipc
pidfile         /var/run/chilli.eth1.pid
net		10.0.0.0/255.255.255.0
uamlisten	10.0.0.1
uamport         3990
dhcpif		eth1
uamallowed	"www.coova.org,10.0.0.1,www.coova.org"
uamanydns
statip 10.0.0.1/255.255.255.0
domain "lan"
dns1 "10.0.0.1"
dns2 "192.168.196.1"
uamhomepage http://10.0.0.1:3990/www/coova.html
wwwdir /etc/chilli/www
wwwbin /etc/chilli/wwwsh
uamuiport 4990
locationname "GePs Spot"
radiuslocationname "GePs_Spot"
radiuslocationid "isocc=,cc=,ac=,network=Coova,"

[hs.conf]
radiusserver1	"localhost"
radiusserver2	"localhost"
radiussecret	"testing123"
radiusauthport  1812
radiusacctport  1813
uamserver	"http://10.0.0.1:4990/www/login.chi"
radiusnasid	"nas01"
papalwaysok
uamaliasname "chilli"
adminupdatefile "/etc/chilli/local.conf"
uamsecret "uamsecret"
postauthproxy 127.0.0.1
postauthproxyport 3128

[squid.conf]
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
#acl localnet src 10.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
#http_access allow localnet
http_access allow localhost
http_access deny all
always_direct allow all
http_port 3128 transparent
coredump_dir /var/spool/squid3
refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern -i (/cgi-bin/|\?) 0	0%	0
refresh_pattern (Release|Packages(.gz)*)$      0       20%     2880
refresh_pattern .		0	20%	4320

--
GP