Squid Proxy CentOS 6.4 Prepared by : Mr. Sopheap Position : IT Support Location : Deam Computer Date : 24/July/2013

Infrastructure

Requirement Squid Proxy Server = CentOS 6.4  IP = /24 ; Eth0 = WAN  IP = /24 ; Eth1 = LAN Client Windows XP  IP = /24 – /24

What Type of Proxy Server? Transparent Proxy This type of proxy server identifies itself as a proxy server and also makes the original IP address available through the http headers. These are generally used for their ability to cache websites and do not effectively provide any anonymity to those who use them. However, the use of a transparent proxy will get you around simple IP bans. They are transparent in the terms that your IP address is exposed, not transparent in the terms that you do not know that you are using it (your system is not specifically configured to use it.) Anonymous Proxy This type of proxy server identifies itself as a proxy server, but does not make the original IP address available. This type of proxy server is detectable, but provides reasonable anonymity for most users. Distorting Proxy This type of proxy server identifies itself as a proxy server, but make an incorrect original IP address available through the http headers. High Anonymity Proxy This type of proxy server does not identify itself as a proxy server and does not make available the original IP address.

Anonymous Proxy & Transparent Proxy Now I will choose two type of proxy server for show everyone  Anonymous Proxy  Transparent Proxy

Anonymous Proxy Hostname

Anonymous Proxy

IP address WAN Anonymous Proxy

IP Address WAN Anonymous Proxy

IP Address LAN Anonymous Proxy

Stop Service Iptables Anonymous Proxy

Install Squid Proxy Anonymous Proxy

Enable Service Squid Anonymous Proxy

Copy default configure squid Anonymous Proxy

Edit file squid configuration Anonymous Proxy

Edit file squid configuration Anonymous Proxy

Edit file squid configuration Anonymous Proxy

Edit file squid configuration Anonymous Proxy

Save and Start service squid Anonymous Proxy

Enable IP address Squid Proxy on Client Anonymous Proxy

Client access internet Anonymous Proxy

Create blacklist website for block on client Anonymous Proxy

Create blacklist website for block on client Anonymous Proxy

Create rule in squid for block blacklist website on client Anonymous Proxy

Client access blacklist website Anonymous Proxy

Create rule unlimited access for specific ip address Anonymous Proxy

Create rule unlimited access for specific ip address Anonymous Proxy

Create rule unlimited access for specific ip address

Client use unlimited ip address access blacklist website Anonymous Proxy

Create rule for block file torrent Anonymous Proxy

Client access website torrent Anonymous Proxy

Create rule for block image url Anonymous Proxy

Client access website that image url block Anonymous Proxy

Create rule for authentication with squid proxy Anonymous Proxy

Create rule for authentication with squid proxy

Install service httpd Anonymous Proxy

Edit file /etc/hosts Anonymous Proxy

Restart service httpd Anonymous Proxy

Create user htpasswd Anonymous Proxy

Client access internet by authenticated with squid proxy Anonymous Proxy

After client type user name and password Anonymous Proxy

Create file for block extension Anonymous Proxy

Create rule for block video content; extension and video reply Anonymous Proxy

Client access website that have video content Anonymous Proxy

Client download file that have extension.exe Anonymous Proxy

Limited speed download for client and unlimited ip address Anonymous Proxy

Client use unlimited ip address download unlimited speed Anonymous Proxy

Client Lan ip address download speed Anonymous Proxy

Create file index.htm for redirect blacklist website Anonymous Proxy

Create file index.htm for redirect blacklist website Note for this file we can create by our self or we can download file html

Type command redirect this file Anonymous Proxy

When access blacklist website it will redirect to /index.htm Anonymous Proxy

Create rule for authenticated specific time Anonymous Proxy

Client access internet during 3:20 PM so client do not authentication with squid proxy. Anonymous Proxy

Edit file squid on http_port 3128 intercept or http_port 3128 transparent Transparent Proxy

Enables port forwarding in /etc/sysctl.conf Transparent Proxy

Delete all rule in /etc/sysconfig/iptables Transparent Proxy

After delete all rule in /etc/sysconfig/Iptables we need to restart service Iptables and save service iptables Transparent Proxy

After we restart service iptables already we need to create file iptables for create new rule and restart service iptables like above. Transparent Proxy

Restart service iptables and new file be create (sh flush.sh) Transparent Proxy

Client access internet by do not put ip address and port of squid proxy Transparent Proxy

Client access internet by do not put ip address and port of squid proxy

Client still cannot access website blacklist Transparent Proxy

We can monitor client access blacklist by type tail –f /var/log/squid/access.log Transparent Proxy

Squid Proxy Preparation by Mr. Sopheap The End