Squid Proxy Server For SBM

You might also like

Download as pdf or txt
Download as pdf or txt
You are on page 1of 5

#######Squid Proxy Server#######

Squid is a caching proxy server sharing internet from one machine to several machine.
It supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching
and reusing frequently-requested web pages. Squid has extensive access controls and makes a great
server accelerator. It runs on most available operating systems, including Windows.
Features:

1.
2.
3.
4.

Caching Server
Filters access to the Net
Efficient bandwidth usage
Supports a wide criteria of ACLs (dstdomain, src_IP, Time of day, etc.)

Estimated Completed Time:

85 Minutes

Tasks:
1. Install Squid Proxy Server:-

a. root@boss[~]#yum y install squid


Or

b. root@boss[~]#rpm ivh

squid-2.6.STABLE6-3.el5.i386.rpm

Package: squid
/etc/squid

-- primary configuration container

/etc/squid/squid.conf

-- primary configuration file

/usr/sbin/squidclient

-- used to test Squid Proxy Server

/var/log/squid

-- primary log directory

/var/spool/squid

-- cache directory container

2. Stat Squid, and ensure that it starts when the system reboots:-

a. service squid start or /etc/init.d/squid


b. checkconfig

--level

35

squid

start

on

Note:

Ensure that ample/fast disk storage is available for: /var/spool squid

Note:

Squid defaults Port is (TCP):3128

3. Configure Firefox browser and Internet Explorer to use Squid Proxy Server.
4. Configure Squid to

a. vim

b. acl

allow LAN access through, to resources

/etc/squid/squid.conf

lan_users

c. http_access

src
allow

192.168.60.0/24
lan_users

5.

Deny 192.168.60.10, but allow ALL other users from the local subnet:
a. acl

lan_bad_users

b. http_access
6.

deny

src

192.168.60.10

lan_bad_users

Other Important Configurations:

acl

blockfiles

urlpath_regex

acl

blockweb dstdomain

acl

workdays time

"/etc/squid/blocks.files.acl"

"/etc/squid/blockweb"

M T W H F

http_access

deny

blockweb workdays

http_access

deny

blockfiles

deny_info

ERR_BLOCKED_FILES

blockfiles

7. In Squid Directory:
a. Squid content filtering: Block / download of music MP3, mpg, mpeg, exec files

#/etc/squid/blocks.files.acl

\.[Ee][Xx][Ee]$
\.[Aa][Vv][Ii]$
\.[Mm][Pp][Gg]$
\.[Mm][Pp][Ee][Gg]$
\.[Mm][Pp]3$
\.[Tt][Oo][Rr][Rr][Ee][Nn][Tt]$

# vi ERR_BLOCKED_FILES
<HTML>
<HEAD>
<TITLE>ERROR: Blocked file content</TITLE>
</HEAD>
<BODY>
<H1>File is blocked due to new IT policy</H1>
<p>Please contact helpdesk for more information:</p>
Phone: 555-12345 (ext 080)<br>
Email: ithelpdesk@hp.com<br>

b. Squid Deny Users Accessing a Website

#/etc/squid/blockweb
-i sex.*\.avi$
-i orkut.*\.avi$
.orkut.com
.naukri.com
.jobsahead.com
.monster.com
.shaadi.com

.timesjobs.com
.bharatmatrimony.com
.matrimonialsindia.com
.jeevansathi.com
.simplymarry.com
.kproxy.com
.bittorrent.com
.torrentz.com

8. SARG is a Squid Analysis Report Generator is a tool that allows you to view "where" your
users are going to on the Internet means users activities, times, bytes, sites, etc...
Package : sarg-2.3.1.tar

Prepared by :
Shishir Kumar Sahu

You might also like