[Chilli] Coovachilli and Squid Transparent on the same host

Mohsen Saeedi mohsen.saeedi at gmail.com
Wed May 16 20:02:44 UTC 2012


It doesn't work for me too! but iptables rules works very well.

what is your idea?


/*Germano Paciocco <germano.paciocco at gmail.com>*/ wrote on Wed, 16 May 
2012 21:54:20 +0200:
> /*Venkatesh K<kaevee at gmail.com>*/ wrote:
>
>> I suspect your squid is not started?
> Squid is started, working and listening on 127.0.0.1:3128. I tried with
>
> terminal1 ->  hotspot$ export http_proxy=http://localhost:3128&&  lynx
> terminal2 ->hotspot# tail -f /var/log/squid3/access.log
>
> squid is proxing and I can surf the web.
>
> and btw:
>
> hotspot# ps aux | grep squid
> proxy      895  0.0  0.3  13068  6732 ?        Ss   21:30   0:00
> /usr/sbin/squid3 -N -YC -f /etc/squid3/squid.conf
> hotspot# ps aux | grep chilli
> root      2134  0.0  0.0   7712  1104 ?        Ss   21:34   0:00
> /sbin/chilli -c /etc/chilli.conf
>
> here's my config:
>
> [main.conf]
> cmdsocket       /var/run/chilli.eth1.sock
> unixipc         chilli.eth1.ipc
> pidfile         /var/run/chilli.eth1.pid
> net		10.0.0.0/255.255.255.0
> uamlisten	10.0.0.1
> uamport         3990
> dhcpif		eth1
> uamallowed	"www.coova.org,10.0.0.1,www.coova.org"
> uamanydns
> statip 10.0.0.1/255.255.255.0
> domain "lan"
> dns1 "10.0.0.1"
> dns2 "192.168.196.1"
> uamhomepage http://10.0.0.1:3990/www/coova.html
> wwwdir /etc/chilli/www
> wwwbin /etc/chilli/wwwsh
> uamuiport 4990
> locationname "GePs Spot"
> radiuslocationname "GePs_Spot"
> radiuslocationid "isocc=,cc=,ac=,network=Coova,"
>
> [hs.conf]
> radiusserver1	"localhost"
> radiusserver2	"localhost"
> radiussecret	"testing123"
> radiusauthport  1812
> radiusacctport  1813
> uamserver	"http://10.0.0.1:4990/www/login.chi"
> radiusnasid	"nas01"
> papalwaysok
> uamaliasname "chilli"
> adminupdatefile "/etc/chilli/local.conf"
> uamsecret "uamsecret"
> postauthproxy 127.0.0.1
> postauthproxyport 3128
>
> [squid.conf]
> acl manager proto cache_object
> acl localhost src 127.0.0.1/32 ::1
> acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
> #acl localnet src 10.0.0.0/8
> acl SSL_ports port 443
> acl Safe_ports port 80
> acl Safe_ports port 21
> acl Safe_ports port 443
> acl Safe_ports port 70
> acl Safe_ports port 210
> acl Safe_ports port 1025-65535
> acl Safe_ports port 280
> acl Safe_ports port 488
> acl Safe_ports port 591
> acl Safe_ports port 777
> acl CONNECT method CONNECT
> http_access allow manager localhost
> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> #http_access allow localnet
> http_access allow localhost
> http_access deny all
> always_direct allow all
> http_port 3128 transparent
> coredump_dir /var/spool/squid3
> refresh_pattern ^ftp:		1440	20%	10080
> refresh_pattern ^gopher:	1440	0%	1440
> refresh_pattern -i (/cgi-bin/|\?) 0	0%	0
> refresh_pattern (Release|Packages(.gz)*)$      0       20%     2880
> refresh_pattern .		0	20%	4320
>
> --
> GP
> _______________________________________________
> Chilli mailing list
> Chilli at coova.org
> http://lists.coova.org/cgi-bin/mailman/listinfo/chilli


More information about the Chilli mailing list