install & configure squid in ubuntu _ linux fundamentals.pdf

5

Click here to load reader

Upload: ardan-aras

Post on 29-Nov-2015

54 views

Category:

Documents


3 download

DESCRIPTION

cara memblokir alamat website dengan squid

TRANSCRIPT

Page 1: Install & Configure Squid in Ubuntu _ Linux Fundamentals.pdf

11/6/13 Install & Configure Squid in Ubuntu | Linux Fundamentals

www.danscourses.com/Linux-Fundamentals/install-a-configure-squid-in-ubuntu.html 1/5

Home About | Contact Info Lab Hours YouTube/DansCourses

Forum Downloads Games

Dans Weekly College Blog

Share

Home Linux Fundamentals Install & Configure Squid in Ubuntu

Install & Configure Squid in Ubuntu

Squid in Ubuntu Overview

A proxy server is a very useful tool for a

network. It is commonly used in

computer networks to protect the

network from attack, to filter nefarious

web content and pages requested by

local users, and to speed up the

delivery of web pages and web content

by caching (storing) commonly

requested web pages, documents, and

media. Proxy servers are typically

implemented on private, local area

networks, to filter, protect and cache

content requested by users on that

network, this is called "proxy" or

"transparent proxy." Proxy servers can

also be implemented on the remote side

"in-front-of" destination webservers in order to protect those servers by filtering requests, speeding up

web page delivery, and caching frequently requested files, this is called "reverse proxy."

Types of Proxy Servers

Proxy Server

The web browser on the client is configured to point to the proxy server's IP address.

The client can bypass the proxy server by removing or altering the proxy address

configuration. An administrator could prevent this by creating a GPO in Active

Directory that blocks access to the web browser settings. A proxy server can also

function as a caching server.

Transparent

Proxy Server

The router sends all traffic on defined ports, to the transparent proxy server, this way

clients cannot bypass the proxy server. A transparent proxy server can also function

as a caching server.

Reverse Proxy

Server (Cache)

The reverse proxy server or cache server is placed in-front-of or prior-to the web server

in order to speed up delivery of frequently requested pages and to protect the web

server by creating a layer of separation and redundancy.

CCNA 1

CCNA 2

CCNA 3

CCNA 4

CCNA Security

Computer Maintenance

CMS Joomla &

WordPress

Flash Web Design

Flash Game

Programming

Flash Multiplayer Prog

Linux Fundamentals

Maya and 3D Modeling

Network Security+

Network Penetration

Testing

Photoshop

Windows Server 2008

Windows 7 & 8

Windows Server 2008

Part 2

SSCP

Windows Exchange

Server

USER LOGIN

Username

Password

Remember Me

LOGIN

Google の新型7インチタブレット

play.google.com

映画も高画質で持ち歩けるGoogle の タブレット Nexus 7。詳細はこちら?

Like 15

► Install ► Squid Proxy ► Ubuntu User ► Squid Linux

Page 2: Install & Configure Squid in Ubuntu _ Linux Fundamentals.pdf

11/6/13 Install & Configure Squid in Ubuntu | Linux Fundamentals

www.danscourses.com/Linux-Fundamentals/install-a-configure-squid-in-ubuntu.html 2/5

Squid is one of the most popular and most used proxy servers in the world. It is free to download,

easy to install and it can be implemented on any distribution of Linux. Here are the steps to install

and configure Squid on an Ubuntu distribution of Linux.

Steps to install andconfigure Squid

Open a terminal, and type in the

following commands to install Squid

sudo apt-get update

sudo apt-get install squid

squid-common

Ways to start and stop Squid

sudo service squid start

(stop|restart|status)

sudo /usr/sbin/squid (launch

program directly)

sudo pkill -9 squid

Navigate to the Squid folder to find the squid.conf configuration file

cd /etc/squid

ls (you should see the squid.conf file)

Create a backup of the squid.conf file

sudo cp squid.conf squid.conf.bak

For testing purposes open Firefox and set it to send web requests to the Squid Proxy Server (You

will need to know your ip address)

ifconfig (write down your inet address e.g. 192.168.1.100)

Open Firefox

Edit > Preferences, Advanced > Network Tab > Connection-Settings:

Manual Proxy Configuration:

HTTP Proxy: your IP address or loopback address 127.0.0.1, Port: 3128

Click Ok and Close

Forgot your password?

Forgot your username?

TUTORIALPLAYLISTS

Cisco CCNA-1

Cisco CCNA-2

Cisco CCNA-3

Cisco CCNA-4

CCNA Security

Photoshop

Joomla

Flash

Game Programming

SmartFox Server

LATEST ARTICLES

Week 8 - Network

Addressing

Week 10 - Windows

Firewall and Security

Week 6 - Applications

Part 1

Week 5 - Hardware

Management Part 2

Week 3 - Install

Windows 8

Asteroids Game Stage

5 - Adding Waves and

Scoring

Asteroids Game Stage

4 - Collision Detection

Asteroids Game Stage

3 - Creating and

Moving Rocks

Asteroids Game Stage

2 - Moving Projectiles

Asteroids Game Stage

1 - The Spaceship

WHO'S ONLINE

We have 87 guests online

Page 3: Install & Configure Squid in Ubuntu _ Linux Fundamentals.pdf

11/6/13 Install & Configure Squid in Ubuntu | Linux Fundamentals

www.danscourses.com/Linux-Fundamentals/install-a-configure-squid-in-ubuntu.html 3/5

Now if you try and go to a website like google you should see an ERROR - Access Denied message

from Squid (see bottom line). This means that Squid is working by actively denying the traffic.

Now we need to configure Squid to allow web traffic through the proxy server. Open squid.conf in

your favorite text editor like gedit, nano, or vi

sudo nano squid.conf

or

sudo gedit squid.conf & (If gedit does not open from the terminal you

can open it as root user)

sudo su

gedit squid.conf &

To switch out of root user

su your-username (if you are root user the prompt is a "#" switch back

to your user account privilege)

If you chose to open with squid.conf

with gedit, then turn on line numbering

(Edit > Preferences > View >Display

Line Numbers)

Change the name of your Squid Proxy

Server, around line 3399, change:

# TAG: visible_hostname

to

visible_hostname YourNameProxyServer

You can configure access rules for your Squid proxy server (lines 331 to 831 are for Access Control).

Notice that on lines 606 to 630 the local networks and usable ports (services) are defined. Active

configuration lines, are the lines that are not commented out, i.e. they do not start with a # sign.

To re-enable web access uncomment line 676

#http_access allow localnet

to

http_access allow localnet

To verify the Web is now working, save your changes to the squid.conf file and restart your Squid

server.

service squid restart (or "sudo service squid restart" if you are no

longer root)

Now resfresh your Firefox web browser and your homepage should be visible.

Now we can practice writing a custom ACL (access list) in the squid.conf file to block specific

domains and websites. We can write our custom ACL at the end of the acl lines around line

631. From an empty line write the following lines to test domain blocking:

acl blocked_websites dstdomain .msn.com .yahoo.com

http_access deny blocked_websites

Now restart your Squid server, and test to see if Squid denies access to your blocked

domains/websites in Firefox.

► Squid Linux ► Server 2008 ► Ubuntu One ► Proxy Lists

Page 4: Install & Configure Squid in Ubuntu _ Linux Fundamentals.pdf

11/6/13 Install & Configure Squid in Ubuntu | Linux Fundamentals

www.danscourses.com/Linux-Fundamentals/install-a-configure-squid-in-ubuntu.html 4/5

Video Tutorials

In this series of videos, I go through the same process outlined above, to install and configure a

Squid proxy server in Ubuntu .

In part 1, I install Squid in Ubuntu, start and stop it, backup the configuration file,

and configure Firefox to use Squid as a proxy server

Install & Configure Squid Proxy Server in Ubunt...

In part 2, I discuss editing the configuration file

Install & Configure Squid Proxy Server in Ubunt...

?

Page 5: Install & Configure Squid in Ubuntu _ Linux Fundamentals.pdf

11/6/13 Install & Configure Squid in Ubuntu | Linux Fundamentals

www.danscourses.com/Linux-Fundamentals/install-a-configure-squid-in-ubuntu.html 5/5

SearchComments (0)

Last Updated on Wednesday, 11 September 2013 12:39

In part 3, I write a custom ACL in the squid.conf file

Install & Configure Squid Proxy Server in Ubunt...

< Prev Next >

Only registered users can write comments!

Powered by Compojoom comment 4.2.1

?