Linux Manual Book

Grant, squid proxy on a Mac Address

2009-09-28T23:43:00.000-07:00

Edit the squid configuration file is usually located in "/ etc / squid.conf"
Then input the command line below

acl macrule arp "/path/to/mac-list/maclist"
http_access allow macrule #allow/deny

Create a file its list of mac address

touch /path/to/mac-list/maclist

Enter the list of his mac address

echo "00:C0:26:2A:8E:8D" >> /path/to/mac-list/maclist

Reload squid

service squid reload

Install VPN with PPTPD in cenots / RHEL 5

2009-09-10T21:14:00.000-07:00

VPN (Virtual Provate Network) is a computer network that allows someone into a different local network. This time I tried to install vpn using pptp and with os Centos / RHEL 5.
Installation PPTPD

1. Install the Yum Repositories

rpm -Uvh http://pptpclient.sourceforge.net/yum/stable/rhel5/pptp-release-current.noarch.rpm

2. Then proceed with installing ppp & pptpd

yum install ppp
yum --enablerepo=pptp-stable install pptp

3. After installation finnish open /etc/pptpd.conf and change the configuration for localip & remoteip

localip 10.0.0.2
remoteip 10.0.0.200-220

4. After that open the file / etc / ppp / options.pptpd and change sesuia ms-dns dns server / isp you (I filled in with open dns ip)

ms-dns 208.67.222.222
ms-dns 208.67.220.220

5. Then make your VPN use

echo "username pptpd password *">> / etc / ppp / chap-secrets

IP Forwarding & Nat
1. Set IPForward
echo 1 > /proc/sys/net/ipv4/ip_forward
2. Set Nat

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Start PPTPD

service pptpd start

Squid proxy authentication with ncsa_auth

2009-04-02T18:31:00.000-07:00

ncsa_auth is a function of the squid in the squid to perform authentication by using the NCSA / Apache httpd-style password. The first thing to do is be in mengistal squid and configuration. If the installation process is complete then the squid suah do in addition to its configuration file. Phase ² which needs to be done is:

Make ncsa_auth user
# htpasswd /etc/squid/passwd user1
Results will be like this:
New password:
Re-type new password:
Adding password for user user1
Make sure squid can read the file
# chmod o+r /etc/squid/passwd
Add Squid configuration
# vi /etc/squid/squid.conf
Then enter this in the squid.conf configuration
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
Also add the command below
acl ncsa_users proxy_auth REQUIRED
http_access allow ncsa_users
Then Restart squid
# /etc/init.d/squid restart

DHCP Server Configuration

2008-10-07T18:52:00.000-07:00

Instal your dhcp server using
#yum -y install dhcp
Configure the dhcp.conf
#vi /etc/dhcpd.conf
ddns-update-style interim;
ignore client-updates;

#Network For DHCP
subnet 192.168.0.0 netmask 255.255.255.0 {

# — Router IP
option routers 192.168.0.1;
option subnet-mask 255.255.255.0;

#Option For Domain
option nis-domain “domain.org”;
option domain-name “domain.org”;
#Option for DNS Server
option domain-name-servers 192.168.1.1;

option time-offset -18000; # Eastern Standard Time

# Range Ip For DHCP
range dynamic-bootp 192.168.0.128 192.168.0.254;
default-lease-time 21600;
max-lease-time 43200;
}
}

Transparent Proxy With Squid

2008-10-07T18:28:00.000-07:00

http_port 3128 8080

cache_mem 32 MB

cache_dir ufs /cache 1600 4 256

ftp_user ftp@xxx.com

reference_age 1 month

acl [NetName] src 192.168.1.0/255.255.255.0

http_access allow [NetName]

http_access deny all

httpd_accel_host virtual

cache_mgr email@TheAdmin.com

visible_hostname host.proxy

httpd_accel_port 80

httpd_accel_with_proxy on

httpd_accel_uses_host_header on

Bloking mac Address with iptables

2008-10-05T19:37:00.000-07:00

Example:

Blocking FORWARD mac addres To Web Server
iptables -A FORWARD -p tcp -m mac –mac-source 0C-80-10-34-28-54 –dport 80 -j DROP

Blocking INPUT mac addres To Web Server
iptables -A INPUT -p tcp -m mac –mac-source 0C-80-10-34-28-54 –dport 80 -j DROP

Delay Pools On Squid

2008-10-05T18:32:00.000-07:00

acl magic_words1 url_regex -i 192.168
acl magic_words2 url_regex -i ftp .exe .mp3 .vqf .tar.gz .gz .rpm .zip .rar.avi .mpeg .mpe .mpg .qt .ram .rm .iso .raw .wav delay_pools 2
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_access 1 allow magic_words1
delay_class 2 2
delay_parameters 2 5000/5000 1000/120000
delay_access 2 allow magic_words2