Configuring the Squid service

These instructions are applicable if Kaspersky Web Traffic Security was installed from an RPM or DEB package to a ready-to-use operating system. If Kaspersky Web Traffic Security was installed from an ISO file, configuration files for the built-in proxy server cannot be manually changed.

To configure the Squid service:

1. Add the following strings to the beginning of the /etc/squid/squid.conf file:

   auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --domain=<NetBIOS name of the Active Directory domain>

   auth_param ntlm children 100 startup=0 idle=10

   auth_param ntlm keep_alive off

   acl authenticated_user proxy_auth REQUIRED

   http_access deny !authenticated_user

2. To enable event logging in debug mode, in the /etc/squid/squid.conf file, add the --diagnostics parameter to the following string:

   auth_param ntlm program /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --domain=<NetBIOS name of the Active Directory domain>

   Debug events will be written to the file /var/log/squid/cache.log.

3. Restart the Squid service. To do so, execute the command:

   service squid restart

Configuration of the Squid service will be complete.