Files....

The squid.conf file

This file controls the behaviour of the proxy server and tells it where to find its parent caches and things like that.

The following changes have been made to the squid.conf file (as of Mon Jun 25 16:30:51 EST 2001):

131a132,134
>
> cache_peer proxy.monash.edu.au parent 80 3130 default no-query
>
1173a1177,1207
> acl monash dstdomain   monash.edu.au
> acl monash_ip dst      130.194.0.0/255.255.0.0
> acl earthsci_staff src      130.194.168.0-130.194.168.240/255.255.255.0
> acl earthsci_staff2 src      130.194.169.128-130.194.169.239/255.255.255.0
> acl earthsci_lab src      130.194.168.0-130.194.169.0/255.255.255.0
> acl earthsci_all src      130.194.168.0-130.194.169.239/255.255.254.0
> acl bifrost  src      130.194.168.238
> acl worktime time     MTWHF 9:00-17:00
> acl hotmail dstdomain   hotmail.com
> acl hotmail2 dstdomain   hotmail.passport.com
> acl hotmail3 dstdomain   hotmail.msn.com
> acl georef dstdomain   georef.cos.com
> acl yahoo dstdomain   yahoo.com
> acl mymail dstdomain   mymail.com.au
> acl gmx dstdomain   gmx.net
>
> http_access deny  !earthsci_all
> http_access allow earthsci_staff
> http_access allow earthsci_staff2
> http_access allow earthsci_lab worktime
> http_access allow monash
> http_access allow hotmail
> http_access allow hotmail2
> http_access allow hotmail3
> http_access allow mymail
> #http_access allow darkqueen
> http_access allow gmx
> http_access allow georef
> http_access allow yahoo
> http_access allow monash_ip
>
1210c1244,1246
< icp_access allow all
---
> #icp_access allow all
> icp_access allow earthsci_all
> icp_access deny all
1271a1308
> cache_mgr cameron@mail.earth.monash.edu.au
1717a1755,1763
> acl local-servers dstdomain earth.monash.edu.au
> acl all src 0.0.0.0/0.0.0.0
> always_direct allow monash_ip
> always_direct allow monash
> always_direct allow SSL_ports
> never_direct deny monash
> never_direct deny monash_ip
> never_direct deny SSL_ports
> never_direct allow all

The proxy.pac file

The proxy.pac file is used by netscape to determine how to find a web page.

The one used by our network (as of Mon Jun 25 16:19:20 EST 2001) is listed below.

//
// Earth science proxy.pac file.
//
function FindProxyForURL(url, host) {

//  THE cache fetches it directly now.
//  if ( url.substring(0, 6) == "https:" )
//     return "DIRECT";

  if ( isPlainHostName(host) || dnsDomainIs(host, ".earth.monash.edu.au") || dnsDomainIs(host, ".virtualexplorer.com")  )
     return "DIRECT";

// Proxys for earth science are
//  proxy/proxy3 (s3.earth)  which is blue cable connected at 100Mb
//  proxy2       (s2.earth)  which is cisco conencted
//  proxy1       (usally s2) the box with the raid
//
   return "PROXY proxy.earth.monash.edu.au:3128; PROXY proxy1.earth.monash.edu.au:3128; DIRECT";
}

This file will go directly to the host if

the host is a local host (isPlainHostName)
the host is in our earth science domain (dnsDomainIs)
the host is in virtualexplorer (dnsDomainIs) which is hosted on our network.

Otherwise it will access the page via the proxy.

Dispite the fact that only http and not https (secure web) is blocked, 169 hosts must use the proxy to get outside.