Squid es un servidor Proxy
Comunmente se puede Habilitar desde la Instalacion de nuestra maquina CentOS .X
Aquí esta su configuración Basica:
[root@proxy]#nano -w /etc/squid/squid.conf
# WELCOME TO SQUID 2.6.STABLE21
# ----------------------------
#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
#acl todalared src 192.168.1.0/255.255.255.0 ##----------toda la red----
acl permitidos src "/etc/squid/permitidos"
acl sitiosmalos url_regex "/etc/squid/sitiosmalos" ## deniega los sitios
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
#
#http_access deny to_localhost
#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
# And finally deny all other access to this proxy
#-----------------------------------------------------------------Mis Accesos-----------
http_access allow localhost
#http_access allow todalared
http_access allow permitidos !sitiosmalos
http_access deny all
#Allow ICP queries from everyone
icp_access allow all
#http_port 3128 transparent-------------------------------- la seguridad no es tan alta.
http_port 3128
fin del script
[root@proxy]#service squid restart
Ahora configuramos los clientes...Basta solo con colocar la direccion IP de Nuestro
servidor Proxy y el Puerto asignado
A continuacion veremos como una maquina windows 2003 server sale a Internet a traves del proxy squid CentOS54
Atentamente:
Franklin Campo
Hasta Pronto......!!!!!