Scribd Logo
Upload

Welcome to Scribd!

  • 33 views

    Proxy Transparente 111

    Uploaded by

    Carlos Ruiz
    This document provides instructions for configuring a transparent proxy server on a Debian system using Squid. It describes installing Squid, configuring iptables to redirect port 80 traffic, creating a blacklist of blocked sites, and configuring Squid's access controls, ports, and other settings. The network configuration of the server and clients on the 192.168.1.0/24 subnet is also outlined.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Proxy Transparente 111

    Uploaded by

    Carlos Ruiz
    33 views2 pages
    This document provides instructions for configuring a transparent proxy server on a Debian system using Squid. It describes installing Squid, configuring iptables to redirect port 80 traffic, creating a blacklist of blocked sites, and configuring Squid's access controls, ports, and other settings. The network configuration of the server and clients on the 192.168.1.0/24 subnet is also outlined.

    Original Description:

    proxy

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document provides instructions for configuring a transparent proxy server on a Debian system using Squid. It describes installing Squid, configuring iptables to redirect port 80 traffic, creating a blacklist of blocked sites, and configuring Squid's access controls, ports, and other settings. The network configuration of the server and clients on the 192.168.1.0/24 subnet is also outlined.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    33 views2 pages

    Proxy Transparente 111

    Uploaded by

    Carlos Ruiz
    This document provides instructions for configuring a transparent proxy server on a Debian system using Squid. It describes installing Squid, configuring iptables to redirect port 80 traffic, creating a blacklist of blocked sites, and configuring Squid's access controls, ports, and other settings. The network configuration of the server and clients on the 192.168.1.0/24 subnet is also outlined.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 2

    Com muntar un servidor proxy transparent

    (provat en un servidor Debian GNU/Linux Lenny 5.0 RC2)

    # apt-get install squid


    # nano /etc/rc2.d/S30firewall
    echo "1" > /proc/sys/net/ipv4/ip_forward
    # proxy transparent
    iptables -t nat -A PREROUTING -i eth0 -s 192.168.1.0/24
    -d ! 192.168.1.0/24 -p tcp --dport 80 -j REDIRECT --toport 3128
    # chmod 755 /etc/rc2.d/S30firewall
    # nano /etc/squid/denegats
    # llistat de pgines web que no es podran visitar
    http://www.youtube.com
    http://www.elpais.com
    # chmod 644 /etc/squid/denegats
    # nano /etc/squid/squid.conf
    acl
    acl
    acl
    acl
    acl
    acl
    acl

    all src all


    manager proto cache_object
    localhost src 127.0.0.1/32
    to_localhost dst 127.0.0.0/8
    localnet src 10.0.0.0/8 # RFC1918 possible internal network
    localnet src 172.16.0.0/12 # RFC1918 possible internal network
    localnet src 192.168.0.0/16 # RFC1918 possible internal network

    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl
    acl

    SSL_ports port 443 # https


    SSL_ports port 563 # snews
    SSL_ports port 873 # rsync
    Safe_ports port 80 # http
    Safe_ports port 21 # ftp
    Safe_ports port 443 # https
    Safe_ports port 70 # gopher
    Safe_ports port 210 # wais
    Safe_ports port 1025-65535 # unregistered ports
    Safe_ports port 280 # http-mgmt
    Safe_ports port 488 # gss-http
    Safe_ports port 591 # filemaker
    Safe_ports port 777 # multiling http
    Safe_ports port 631 # cups
    Safe_ports port 873 # rsync
    Safe_ports port 901 # SWAT
    purge method PURGE
    CONNECT method CONNECT

    icp_access allow localnet


    icp_access deny all
    http_port 3128 transparent
    hierarchy_stoplist cgi-bin ?

    access_log /var/log/squid/access.log squid


    refresh_pattern
    refresh_pattern
    refresh_pattern
    refresh_pattern
    refresh_pattern

    ^ftp:
    1440 20%
    ^gopher:
    1440 0%
    -i (/cgi-bin/|\?) 0 0%
    (Release|Package(.gz)*)$
    .
    0
    20%
    4320

    10080
    1440
    0
    0
    20%

    2880

    acl apache rep_header Server ^Apache


    acl denegats url_regex "/etc/squid/denegats"
    http_access deny denegats
    http_access allow localnet
    http_access allow manager localhost
    http_access deny manager
    http_access allow purge localhost
    http_access deny purge
    http_access deny !Safe_ports
    http_access deny CONNECT !SSL_ports
    http_access allow localhost
    http_access deny all
    broken_vary_encoding allow apache
    extension_methods REPORT MERGE MKACTIVITY CHECKOUT
    hosts_file /etc/hosts
    coredump_dir /var/spool/squid

    # /etc/init.d/squid reload
    # /etc/init.d/squid restart

    Configuraci de la xarxa en el servidor i els clients:

    Router 192.168.1.1

    Servidor
    iface eth0 inet static
    address 192.168.1.2
    netmask 255.255.255.0
    gateway 192.168.1.1
    auto eth0

    Client
    iface eth0 inet static
    address 192.168.1.3
    netmask 255.255.255.0
    gateway 192.168.1.2
    auto eth0

    You might also like

    pFad - Phonifier reborn

    Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

    Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


    Alternative Proxies:

    Alternative Proxy

    pFad Proxy

    pFad v3 Proxy

    pFad v4 Proxy