Squid 2.6 Proxy

Squid 2.6 Proxy

Squid es un servidor Proxy

Comunmente se puede Habilitar desde la Instalacion de nuestra maquina CentOS .X

Aquí esta su configuración Basica:

[root@proxy]#nano -w /etc/squid/squid.conf

# WELCOME TO SQUID 2.6.STABLE21

# ----------------------------

#Recommended minimum configuration:

acl all src 0.0.0.0/0.0.0.0

acl manager proto cache_object

acl localhost src 127.0.0.1/255.255.255.255

#acl todalared src 192.168.1.0/255.255.255.0 ##----------toda la red----

acl permitidos src "/etc/squid/permitidos"

acl sitiosmalos url_regex "/etc/squid/sitiosmalos" ## deniega los sitios

acl to_localhost dst 127.0.0.0/8

acl SSL_ports port 443

acl Safe_ports port 80 # http

acl Safe_ports port 21 # ftp

acl Safe_ports port 443 # https

acl Safe_ports port 70 # gopher

acl Safe_ports port 210 # wais

acl Safe_ports port 1025-65535 # unregistered ports

acl Safe_ports port 280 # http-mgmt

acl Safe_ports port 488 # gss-http

acl Safe_ports port 591 # filemaker

acl Safe_ports port 777 # multiling http

acl CONNECT method CONNECT

# Only allow cachemgr access from localhost

http_access allow manager localhost

http_access deny manager

# Deny requests to unknown ports

http_access deny !Safe_ports

# Deny CONNECT to other than SSL ports

http_access deny CONNECT !SSL_ports

#

#http_access deny to_localhost

#

# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS

# And finally deny all other access to this proxy

#-----------------------------------------------------------------Mis Accesos-----------

http_access allow localhost

#http_access allow todalared

http_access allow permitidos !sitiosmalos

http_access deny all

#Allow ICP queries from everyone

icp_access allow all

#http_port 3128 transparent-------------------------------- la seguridad no es tan alta.

http_port 3128

fin del script

[root@proxy]#service squid restart

Ahora configuramos los clientes...Basta solo con colocar la direccion IP de Nuestro

servidor Proxy y el Puerto asignado

A continuacion veremos como una maquina windows 2003 server sale a Internet a traves del proxy squid CentOS54

Atentamente:

Franklin Campo

Hasta Pronto......!!!!!