Selvstudium SQUID 4 - Konfigurer basisgodkendelsen af proxyen [ Trin for trin ]

Vil du vide mere om, hvordan du konfigurerer basisgodkendelsen af Squid-proxyen? I denne vejledning vil vi vise dig, hvordan du konfigurerer basisgodkendelsen på proxyserveren Squid.

• Ubuntu 18
• Ubuntu 19
• Ubuntu 20

Liste over udstyr

Her kan du finde listen over udstyr, der bruges til at oprette denne tutorial.

Liste over udstyr

Dette link viser også den softwareliste, der bruges til at oprette dette selvstudium.

Selvstudium SQUID 4 - Konfigurer basisgodkendelsen

Installer de nødvendige pakker.

Copy to Clipboard

Søg efter konfigurationsfilen til proxyserveren.

Copy to Clipboard

Rediger konfigurationsfilen Til blæksprutter.

Copy to Clipboard

Her er filens indhold, før vores konfiguration.

Copy to Clipboard

acl localnet src 0.0.0.1-0.255.255.255  # RFC 1122 "this" network (LAN)
acl localnet src 10.0.0.0/8             # RFC 1918 local private network (LAN)
acl localnet src 100.64.0.0/10          # RFC 6598 shared address space (CGN)
acl localnet src 169.254.0.0/16         # RFC 3927 link-local (directly plugged) machines
acl localnet src 172.16.0.0/12          # RFC 1918 local private network (LAN)
acl localnet src 192.168.0.0/16         # RFC 1918 local private network (LAN)
acl localnet src fc00::/7               # RFC 4193 local private network range
acl localnet src fe80::/10              # RFC 4291 link-local (directly plugged) machines
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
include /etc/squid/conf.d/*
http_access allow localhost
http_access deny all
http_port 3128
coredump_dir /var/spool/squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern \/(Packages|Sources)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims
refresh_pattern \/Release(|\.gpg)$ 0 0% 0 refresh-ims
refresh_pattern \/InRelease$ 0 0% 0 refresh-ims
refresh_pattern \/(Translation-.*)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims
refresh_pattern .               0       20%     4320

Her er filens indhold, efter vores konfiguration.

Copy to Clipboard

auth_param basic program  /usr/lib/squid/basic_ncsa_auth /etc/squid/passwd
auth_param basic children 5 startup=5 idle=1
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
include /etc/squid/conf.d/*
acl BASIC_AUTHENTICATION proxy_auth REQUIRED
http_access allow BASIC_AUTHENTICATION
http_access allow localhost
http_access deny all
http_port 3128
coredump_dir /var/spool/squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern \/(Packages|Sources)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims
refresh_pattern \/Release(|\.gpg)$ 0 0% 0 refresh-ims
refresh_pattern \/InRelease$ 0 0% 0 refresh-ims
refresh_pattern \/(Translation-.*)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims
refresh_pattern .               0       20%     4320

Disse linjer blev brugt til at aktivere basisgodkendelsen af proxyen.

Copy to Clipboard

Opret proxygodkendelsesfilen.

Copy to Clipboard

Opret flere konti.

Copy to Clipboard

Konfigurer de korrekte filtilladelser.

Copy to Clipboard

Stop SQUID-tjenesten.

Copy to Clipboard

Start proxytjenesten.

Copy to Clipboard

I vores eksempel har vi konfigureret SQUID-serverens basisgodkendelse.

Konfigurer browserens proxyindstillinger på en lokal computer.

Browseren anmoder om brugergodkendelse på proxyserveren.

Tillykke! Du lærte at konfigurere basisproxygodkendelsen på SQUID-serveren.

SQUID 4 - Konfigurer basisgodkendelsen af proxyen

SQUID 4 - Konfigurer basisgodkendelsen af proxyen

Liste over udstyr

Selvstudium SQUID 4 - Konfigurer basisgodkendelsen

Related Posts

SQUID 4 - Installation på Ubuntu Linux