Re: Squid&RH 7.0

Article View: comp.os.linux.security

Article #20

Back to comp.os.linux.security Previous Next

#20

From: Elem103
Date: Tue, 10 Apr 2001 00:02

50 lines
3087 bytes

"Theng Ung" <pung1@bigpond.net.au> wrote in message news:3AD1F8E7.5A9CF70F@bigpond.net.au...
> Hi,
> 
> I manage to get it to work now. by using ipchains rules below (modify to suit
> my LAN) and also reading this site
> http://rpmfind.net/linux/mdw/HOWTO/mini/TransparentProxy-4.html . Elem103
> mention most of it but the site mention something that I don't know before.
> like
> 1. squid -z # run first time
> 2. http_access allow all  #in httpd.conf

I think you meant squid.conf, but anyway, be careful with that directive.  That means that everyone can use your proxy especially if you bind it to every interface (ie including the one to the internet).  If they find out that you have a proxy, they might decide to use it, just to annoy you :)

A better way would be to use ACL:

eg.
acl mylocallan src 192.168.88.1-192.168.88.254/255.255.255.255
http_access allow mylocallan
http_access_deny all

Another way would be just to bind squid on your local LAN interface only.

http_port 192.168.88.1:3128

> Regarding the ipchains rules belows I simply just run it on top of the rules
> generated by the firewall (firestarter).

> Right now anyone can browse from my LAN (192.168.0.0/24)either using the proxy
> or without the proxy that I set up.
> I want to restrict everyone in my LAN to user the proxy server (192.168.0.3).
> Any help is much appreciated.
> 
> Anway many thanks to Elem103 for his kind contributions.

Welcome.

Cheers,
Elem103

Technical Details

Message-ID: <84sA6.752$s34.22438@ozemail.com.au>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!cyclone-sf.pbi.net!63.208.208.143!feed2.onemain.com!feed1.onemain.com!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!news.mel.connect.com.au!news.netspace.net.au!newsfeed.ozemail.com.au!ozemail.com.au!not-for-mail

References:

<9acjfg$80u$1@perki.connect.com.au> <LPky6.7727$mA.2347044@newsrump.sjc.telocity.net> <3ACA8FB2.ADA69A68@mimos.my> <pguy6.1920$MM.85195@ozemail.com.au> <3AD1F8E7.5A9CF70F@bigpond.net.au>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 106e9e,601f652b2a7b255f
X-Google-Attributes: gid106e9e,public
X-Google-Thread: f9b51,601f652b2a7b255f
X-Google-Attributes: gidf9b51,public
X-Google-Thread: 102983,601f652b2a7b255f
X-Google-Attributes: gid102983,public
X-Google-ArrivalTime: 2001-04-09 17:04:02 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!cyclone-sf.pbi.net!63.208.208.143!feed2.onemain.com!feed1.onemain.com!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!news.mel.connect.com.au!news.netspace.net.au!newsfeed.ozemail.com.au!ozemail.com.au!not-for-mail
From: "Elem103" <elem103@smokey.aic.net.au-nospam>
Newsgroups: comp.os.linux.security,comp.os.linux.setup,aus.computers.linux
References: <9acjfg$80u$1@perki.connect.com.au> <LPky6.7727$mA.2347044@newsrump.sjc.telocity.net> <3ACA8FB2.ADA69A68@mimos.my> <pguy6.1920$MM.85195@ozemail.com.au> <3AD1F8E7.5A9CF70F@bigpond.net.au>
Subject: Re: Squid&RH 7.0
Lines: 51
MIME-Version: 1.0
Content-Type: text/plain;
 charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Message-ID: <84sA6.752$s34.22438@ozemail.com.au>
NNTP-Posting-Host: h94.unit21.ozemail.com.au
X-Trace: ozemail.com.au 986860932 203.108.13.94 (Tue, 10 Apr 2001 10:02:12 EST)
NNTP-Posting-Date: Tue, 10 Apr 2001 10:02:12 EST
Organization: OzEmail Ltd, Australia
Distribution: world
Date: Tue, 10 Apr 2001 10:02:12 +1000

Reply to Parent Message