1. Squid Proxy CentOS 6.4 Prepared by : Mr. Sopheap Position : IT Support Location : Deam Computer Date : 24/July/2013

2. Infrastructure

3. Requirement Squid Proxy Server = CentOS 6.4  IP = 192.168.1.123/24 ; Eth0 = WAN  IP = 10.10.10.1/24 ; Eth1 = LAN Client Windows XP  IP = 10.10.10.2/24 – 10.10.10.254/24

4. What Type of Proxy Server? Transparent Proxy This type of proxy server identifies itself as a proxy server and also makes the original IP address available through the http headers. These are generally used for their ability to cache websites and do not effectively provide any anonymity to those who use them. However, the use of a transparent proxy will get you around simple IP bans. They are transparent in the terms that your IP address is exposed, not transparent in the terms that you do not know that you are using it (your system is not specifically configured to use it.) Anonymous Proxy This type of proxy server identifies itself as a proxy server, but does not make the original IP address available. This type of proxy server is detectable, but provides reasonable anonymity for most users. Distorting Proxy This type of proxy server identifies itself as a proxy server, but make an incorrect original IP address available through the http headers. High Anonymity Proxy This type of proxy server does not identify itself as a proxy server and does not make available the original IP address.

5. Anonymous Proxy & Transparent Proxy Now I will choose two type of proxy server for show everyone  Anonymous Proxy  Transparent Proxy

6. Anonymous Proxy Hostname

7. Anonymous Proxy

8. IP address WAN Anonymous Proxy

9. IP Address WAN Anonymous Proxy

10. IP Address LAN Anonymous Proxy

11. Stop Service Iptables Anonymous Proxy

12. Install Squid Proxy Anonymous Proxy

13. Enable Service Squid Anonymous Proxy

14. Copy default configure squid Anonymous Proxy

15. Edit file squid configuration Anonymous Proxy

16. Edit file squid configuration Anonymous Proxy

17. Edit file squid configuration Anonymous Proxy

18. Edit file squid configuration Anonymous Proxy

19. Save and Start service squid Anonymous Proxy

20. Enable IP address Squid Proxy on Client Anonymous Proxy

21. Client access internet Anonymous Proxy

22. Create blacklist website for block on client Anonymous Proxy

23. Create blacklist website for block on client Anonymous Proxy

24. Create rule in squid for block blacklist website on client Anonymous Proxy

25. Client access blacklist website Anonymous Proxy

26. Create rule unlimited access for specific ip address Anonymous Proxy

27. Create rule unlimited access for specific ip address Anonymous Proxy

28. Create rule unlimited access for specific ip address

29. Client use unlimited ip address access blacklist website Anonymous Proxy

30. Create rule for block file torrent Anonymous Proxy

31. Client access website torrent Anonymous Proxy

32. Create rule for block image url Anonymous Proxy

33. Client access website that image url block Anonymous Proxy

34. Create rule for authentication with squid proxy Anonymous Proxy

35. Create rule for authentication with squid proxy

36. Install service httpd Anonymous Proxy

37. Edit file /etc/hosts Anonymous Proxy

38. Restart service httpd Anonymous Proxy

39. Create user htpasswd Anonymous Proxy

40. Client access internet by authenticated with squid proxy Anonymous Proxy

41. After client type user name and password Anonymous Proxy

42. Create file for block extension Anonymous Proxy

43. Create rule for block video content; extension and video reply Anonymous Proxy

44. Client access website that have video content Anonymous Proxy

45. Client download file that have extension.exe Anonymous Proxy

46. Limited speed download for client and unlimited ip address Anonymous Proxy

47. Client use unlimited ip address download unlimited speed Anonymous Proxy

48. Client Lan ip address download speed Anonymous Proxy

49. Create file index.htm for redirect blacklist website Anonymous Proxy

50. Create file index.htm for redirect blacklist website Note for this file we can create by our self or we can download file html

51. Type command redirect this file Anonymous Proxy

52. When access blacklist website it will redirect to 192.168.1.123/index.htm Anonymous Proxy

53. Create rule for authenticated specific time Anonymous Proxy

54. Client access internet during 3:20 PM so client do not authentication with squid proxy. Anonymous Proxy

55. Edit file squid on http_port 3128 intercept or http_port 3128 transparent Transparent Proxy

56. Enables port forwarding in /etc/sysctl.conf Transparent Proxy

57. Delete all rule in /etc/sysconfig/iptables Transparent Proxy

58. After delete all rule in /etc/sysconfig/Iptables we need to restart service Iptables and save service iptables Transparent Proxy

59. After we restart service iptables already we need to create file iptables for create new rule and restart service iptables like above. Transparent Proxy

60. Restart service iptables and new file be create (sh flush.sh) Transparent Proxy

61. Client access internet by do not put ip address and port of squid proxy Transparent Proxy

62. Client access internet by do not put ip address and port of squid proxy

63. Client still cannot access website blacklist Transparent Proxy

64. We can monitor client access blacklist by type tail –f /var/log/squid/access.log Transparent Proxy

65. Squid Proxy Preparation by Mr. Sopheap The End