Sqiub help



  • new to squib. running on server 2008r2 running winsnort. set up server as proxy for local lan testing. I want to capture traffic going out to wan from local win7 test box. and have way to test for web injection on traffic to win7 box.

    seems like squib is running. and snort is capturing traffic.

    had some questions about squib.conf file…

    acl localnet src 192.168.0.0/16 # RFC1918 possible internal network

    my dfg is 192.168.1.1 so my file should be:
    acl localnet src 192.168.1.0/16 # RFC1918 possible internal network

    or leave it alone as
    acl localnet src 192.168.0.0/16 # RFC1918 possible internal network

    covers all the subnets of 192.168.xxx.xxx?


    any tricks i can use in squid to try and get familiar with options? not sure what im doing... so any help appreciated. maybe some things i can do to check if squib is working?

    i set up win8 pc to use squid server for proxy. yet saw this article, said to test vpn go to http://whatismyipaddress.com/ and it should say "vpn detected"   ...

    and when i tested, and it sees my actual external ip address from comcast so im not sure if did something wrong?

    any help/thoughts appreciated.....


Locked