How to configure Proxy Server on RHEL 6.3 or Scientific Linux 6.3 or CentOS 6.3

Tweet

[root@server1 ~] vim /etc/sysctl.con net.ipv4.ip_forward = 1 [root@server1 ~]iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE your client will be internet via Proxy ############################################## Transparent Proxy ################################################### # vim /etc/squid/squid.conf visible_hostname murad http_port 3128 transparent ############## Inser Acl Section ######################## # Allow My Networks acl mynetworks src 192.168.0.0/24 # from where browsing should be allowed http_access allow mynetworks [root@server1 ~]# iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 3128 -j ACCEPT [root@server1 ~]# iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-ports 3128 [root@server1 ~]# iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-ports 3128 [root@server1 ~]# service squid restart Stopping squid: ................                           [  OK  ] Starting squid: .                                          [  OK  ] ############################ Block Website ################################ # vim /etc/squid/badsite.conf www.facebook.com www.google.com www.yahoo.com # Allow My Networks acl mynetworks src 192.168.0.0/24 ##Add acl Badsites## acl badsite dstdomain "/etc/squid/badsite.conf" # Deny IP Address Range acl denyip src 192.168.0.14 # Allow IP Address Range acl allowip src 192.168.0.1-10 # Download Limit acl Group1 src 192.168.0.1-192.168.0.10/24 reply_body_max_size 64 KB Group1 # # Recommended minimum Access Permission configuration: # # Only allow cachemgr access from localhost http_access allow manager http_access deny manager # Deny IP Address Range http_access deny denyip # Allow IP Address Range http_access allow allowip ##Deny access to badsites## http_access deny badsite Read More

[root@server1 ~] vim /etc/sysctl.con
net.ipv4.ip_forward = 1

[root@server1 ~]iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

your client will be internet via Proxy

############################################## Transparent Proxy ###################################################
# vim /etc/squid/squid.conf
visible_hostname murad
http_port 3128 transparent
############## Inser Acl Section ########################

# Allow My Networks
acl mynetworks src 192.168.0.0/24

# from where browsing should be allowed
http_access allow mynetworks

[root@server1 ~]# iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 3128 -j ACCEPT
[root@server1 ~]# iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-ports 3128
[root@server1 ~]# iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-ports 3128

[root@server1 ~]# service squid restart
Stopping squid: ................                           [  OK  ]
Starting squid: .                                          [  OK  ]

############################ Block Website ################################
# vim /etc/squid/badsite.conf

www.facebook.com
www.google.com
www.yahoo.com

# Allow My Networks
acl mynetworks src 192.168.0.0/24

##Add acl Badsites##
acl badsite dstdomain "/etc/squid/badsite.conf"
# Deny IP Address Range
acl denyip src 192.168.0.14
# Allow IP Address Range
acl allowip src 192.168.0.1-10
# Download Limit
acl Group1 src 192.168.0.1-192.168.0.10/24
reply_body_max_size 64 KB Group1
#
# Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager
http_access deny manager
# Deny IP Address Range
http_access deny denyip
# Allow IP Address Range
http_access allow allowip
##Deny access to badsites##
http_access deny badsite

Read More