Proxy Client configuration in Linux

[IzzaT NaHi]

I have recently started using Linux as a proxy server. So I am many doubts regarding it. You members must be knowing that proxy server is not only to avoid unnecessary traffic and the associated costs. Properly configured, it also provides added security and higher user productivity. While the use of a firewall to protect the local network against attacks from the internet is already standard, administrators, many waving at the thought of a proxy - servers, so I am. And for that I want to know about the proxy client configuration and thought that you people will help me. I am expecting some detailed information from your side.

[Michael25]

While the use of a firewall to protect the local network against attacks from the internet is already standard, administrators, many waving at the thought of a proxy - servers

Many proxy-servers, are like a firewall between corporate network and Internet-working camera buffer. To configure its an expensive, hard to manage and are unreliable proxy server, all these are the common statements. Admittedly, quite simply the right configuration of a proxy is not feasible but all times and as a reward the effort wave functions that go far beyond the pure suspensions already retrieved web content. Thus, requests can to block unwanted Web sites, user groups set up with different rights and regulate even the available bandwidth effectively. By the way, the proxy server provides for a reduced course still transfer volume, as it serves requests for already locally cached information. This not only saves transmission time and frees up bandwidth for other applications. When billed by volume Internet connections, the beats often also reflected in significantly reduced costs. It is also favorable to the proxy itself - if you own a computer running under Linux. For this is with Squid is a powerful proxy server available, the source project will be developed as open and under the terms of the GNU Public License (GPL) is free to use.

[Adler]

Since the version 3.0 of Squid currently under development and is therefore sometimes a bit unstable. With its help we set up a proxy server that all users of the local network is available, while at the same time it blocks access to known warez sites. For specific user groups is also an unlimited access to the Internet possible. Since many offers - especially in a business environment - now a request by SSL encryption, secure communications, this is also supported.

[Vitus]

I would like to explain you about installing Squid. Only someone who has Suse Linux 9.1, Squid gets the same 2.5-Stable5 delivered with its distribution. However, the developers at SuSE, not all functions in the deployed version took over. In addition to some authentication modules are missing, especially the more modern virtual file systems and the various methods for cache management in RAM and on disk. In short: The best way to translate the software using the same source code archive. This not only has the advantage that the software is optimized by the compiler the same for the processor in your computer. In addition, can also customize the layout to suit your directory. In the following, we assume that you - unless otherwise noted - run all these steps as user root on the command line. First download the archive containing the source files download and unpack it for example in the / root / soft:

 
cd ~ 
mkdir-p sof 
softt cd 
wget http://www.squid-cache.org/Versions/v2/2.5/squid-2.5.STABLE5.tar.gz 
tar xvzf squid-2.5.STABLE5.tar.gz

[Gonzo]

Squid has a number of options that are already set when compiling the sources. They should therefore be better used to configure a batch file. This has the advantage that changes can perform testing quickly and without having to keep entering endless long command lines. You'll probably never need all the features enabled here. Why are we here still want almost every option is free, easy to explain: If you want to experiment on the scope with Squid, then all modules are immediately available. So once something works, it is almost certain not to a disabled option or a missing tool.

[Benito]

It is best to put the script in the previously created directory / root / soft off and call it cfg-squid. Thus it is completed you need it via chmod 777 cfg-squid to assign the right attributes. Call it by now ./cfg-squid on, first configuration of the source files attempt to start an order. However, the probability is high that the configuration routine criticized some missing Linux components. This you need to install through the package manager of your distribution before you can finally translate Squid. Since the missing packages vary depending on the existing Linux installation, we can not provide the required list archives. It should be noted that for each requested packages usually the development version (indicated by <paketname>-level-<versionsnummer>) to install.

[Alondra]

In order for the clients on the network immediately, no direct connection to the Internet, but from requests through the proxy will forward your, you need to tell them where the proxy server can be found. You need the IP address of the computer on which Squid is running and the port on which it receives requests. The latter is the default configuration, 3128, in the example, Squid is working on the computer with the IP address 192.168.1.250. In Windows 2000 and XP, the setting for all Microsoft products, the central control system over. Double-clicking on the "Internet Options" brings to light the appropriate tab. The tab content server to locate the configuration options for the proxy - hidden well behind the Settings button under the "LAN Settings". Here you enter the IP address of the proxy server and port 3128 and check the box for "Bypass proxy server for local addresses". Suse Linux, the dialogue is to set the proxy parameters in Yast2 under the heading Network services. There, the Proxy access is the parameter input. To speak directly to local targets, you have to either the domain or IP subnet used in the field under "No proxy domains registered".