At the moment I am trying to move our Proxy server to connect to Internet from Win platform to Linux....but with some restriction to be implemented.
Practically we need:

i. We want windows NT computers and Linux computers to be able to browse the internet through the Linux computer
ii. We want to install a proxy server application on Linux, So that users can browse the internet through the Linux proxy application.Which proxy application can we use?
iii. We want to export user account from windows NT PDC server to a local group on the Linux machine
iv. We want to have a single login for each account that has been exported to the Linux machine. So that two users cannot use the same user account to browse. If USER A account is browsing on COMPUTER A, another user cannot use USER A account to browse on any system (practically disable the possibility of a double login for the proxy server).

I will be happy if someone could help me for some or all the topics, also by suggesting me which applications can perform the above mentioned tasks.


rgds
Emilio Ponti
RH9.0 newbie

u may use squid cache proxy server. visit http://www.squid-cache.org/ for detailed info.. also u may need to use iptables to enable internet access from local clients for other tcp and udp ports.. visit http://www.netfilter.org
u can choose transparent proxy. so u can use squid and iptables together..

if u want local win clients to login linux, u must configure samba server.. there r lots of differences between NT PDC and linux. linux doesnt work as a NT PDC. i dont know if it s possible to export users from NT PDC. if your clients have static ips u can configure squid to allow clients to access internet by checking clients ips.

maxut,

You seem to have a little experience or knowledge about the idea of creating a transparent caching proxy with iptables and squid... I'd love it if you'd be willing to share some links or resources you'd suggest that help explain how to do this. I've read squid-cache.org pretty thoroughly and netfilter.org to get a good sense of the two on their own, a concise guide to combine to create a transparent caching proxy would be lovely!

Thanks

transparent proxy is easy..
u must add following lines in "/etc/squid.conf"

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on


and redirect http request comes from LAN (192.168.0.0/24):

iptables -t nat -A PREROUTING -s 192.168.0.0/24 -p tcp --dport 80 -j REDIRECT --to-port 3128

lazlow69

actually i dont know links about transparent proxy. i have found some links at www.netfilter.org, thats all.. i wish i would know more, but unfortunatelly not.

wonderful, concise answers. Thank you kindly! I'll experiment with this great info!

your welcome.. we r here to help each other.