ちょっと脱線。squid をインストールするのでメモりながらやる。

www/squid31

# cd /usr/ports/www/squid31
# make config-recursive
# make install clean

オプションはデフォルトでインストールした。

===> post-installation information for squid-3.1.16:

     o You can find the configuration files for this package in the
       directory /usr/local/etc/squid.

     o The default cache directory is /var/squid/.
       The default log directory is /var/log/squid/.

       Note:
       You must initialize new cache directories before you can start
       squid.  Do this by running “squid -z” as ‘root’ or ‘squid’.
       If your cache directories are already initialized (e.g. after an
       upgrade of squid) you do not need to initialize them again.

     o The default configuration will deny everyone but the local host and
       local networks as defined in RFC 1918 for IPv4 and RFCs 4193 and
       4291 for IPv6 access to the proxy service.  Edit the “http_access
       allow/deny” directives in /usr/local/etc/squid/squid.conf
       to suit your needs.

     To enable Squid, set squid_enable=yes in either
     /etc/rc.conf, /etc/rc.conf.local or /etc/rc.conf.d/squid
     Please see /usr/local/etc/rc.d/squid for further details.

     Note:
     If you just updated your Squid installation from an earlier version,
     make sure to check your Squid configuration against the 3.1 default
     configuration file /usr/local/etc/squid/squid.conf.default.
    
     /usr/local/etc/squid/squid.conf.documented is a fully annotated
     configuration file you can consult for further reference.

     Additionally, you should check your configuration by calling
     ‘squid -f /path/to/squid.conf -k parse’ before starting Squid.

===>   Compressing manual pages for squid-3.1.16
===>   Registering installation for squid-3.1.16
===> SECURITY REPORT:
      This port has installed the following files which may act as network
      servers and may therefore pose a remote security risk to the system.
/usr/local/libexec/squid/squid_radius_auth
/usr/local/sbin/squid

      This port has installed the following startup scripts which may cause
      these network services to be started at boot time.
/usr/local/etc/rc.d/squid

      If there are vulnerabilities in these programs there may be a security
      risk to the system. FreeBSD makes no guarantee about the security of
      ports included in the Ports Collection. Please type ‘make deinstall’
      to deinstall the port if this is a concern.

      For more information, and contact details about the security
      status of this software, see the following webpage:

http://www.squid-cache.org/

とりあえず読みながらやってみる。

ローカル以外からのアクセすは DENY になっているとのこと。

設定ファイルは /usr/local/etc/squid/squid.conf  なので必要に応じて変更。

cache_dir ufs /var/squid/cache 1000 16 256

で、

# squid -z

これで、/var/squid/cache が作られた。

覚えておく部分のメモ

http_port 3128

このまま、/etc/rc.conf に追記する。

suqid_enable=”YES”

ここまでは、上記の説明に記載されているとおり。

で、squid を起動してみる。

/usr/local/etc/rc.d/squid start

OK。