====== Installation instructions for SQUID proxy cache ======

**If needed, [[https://twiki.cern.ch/twiki/bin/view/Frontier/InstallSquid | the official CERN instructions]] for this installation are available.**

After you login as root, follow these steps carefully:

  - Create the squid user and squid group<code>groupadd squid
useradd -g squid -d /var/cache/squid -s /sbin/nologin squid</code>
  - Mount the partition /var/cache/squid
  - Make the partition owned by squid<code>chown squid:squid /var/cache/squid</code>
  - Install the yum repository from CERN<code>wget -O /etc/yum.repos.d/cern-frontier.repo http://frontier.cern.ch/dist/rpms/cern-frontier.repo</code>
  - Check to see if you can see the repository:<code>yum list frontier-squid</code>
  - Install the frontier-squid package<code>yum install frontier-squid</code>

===== Local configuration steps =====

  - The file: **/etc/squid/customize.sh** must be modified before the squid cache server is started. 
    * Change the line:<code>setoption("acl NET_LOCAL src", "10.0.0.0/8 172.16.0.0/12 192.168.0.0/16")</code>to be:<code>setoption("acl NET_LOCAL src", "146.139.52.0/24 146.139.180.0/25 146.139.30.0/25 146.139.116.0/25 130.202.8.0/24 130.202.237.0/25 130.202.173.0/25 146.139.33.0/25 130.202.96.0/22 130.202.24.0/22 130.202.134.0/24 130.202.131.0/24")</code>
  - The firewall for the squid server should have port 3128 opened :
  - Add to file **/etc/sysconfig/iptables**  the line:<code>-A INPUT -m state --state NEW -m tcp -p tcp --dport 3128 -j ACCEPT</code>
  - Remember the squid server will only serve requests from network masks as listed in customize.sh
  - Restart iptables<code>/sbin/service iptables restart</code>
  - Restart squid server<code>/sbin/service frontier-squid restart</code>

===== Testing the squid server =====



===== Starting/ stopping Squid server =====

  * Start the server <code>/sbin/service frontier-squid start</code>
  * Stop the server <code>/sbin/service frontier-squid stop</code>
  * Turn on runlevels 3, 4, and 5: <code>/sbin/chkconfig --levels 345 frontier-squid on</code>