LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-29-2014, 07:20 AM   #1
mnraghu
LQ Newbie
 
Registered: Aug 2014
Posts: 5

Rep: Reputation: Disabled
Internet Security and Proxy Server


Hi All,

I am planning to configure a Server in my network to share my Internet connectivity and also to be able to manage the users access. I am expecting to know what is the correct solution such as the name of the software that suits to my requirement.

Thanks to all.

MN
 
Old 08-29-2014, 05:27 PM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 17,934

Rep: Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692
Quote:
Originally Posted by mnraghu View Post
Hi All,
I am planning to configure a Server in my network to share my Internet connectivity and also to be able to manage the users access. I am expecting to know what is the correct solution such as the name of the software that suits to my requirement.
What you're talking about is Squid, a proxy server which is the 'standard' for Linux. And if you're planning on configuring something before you even know what it is, it would seem you have a good bit more research to do first. And telling people in a volunteer forum you EXPECT an answer is fairly rude.
 
1 members found this post helpful.
Old 08-30-2014, 08:46 AM   #3
mnraghu
LQ Newbie
 
Registered: Aug 2014
Posts: 5

Original Poster
Rep: Reputation: Disabled
Firstly, I apologise for my mistake. I am not really good in English, so please forgive me for mistakes in my language or expression. Believe me, I am very humble and I promise to be very careful from now.

I need to do research from basics and that is the reason I asked for what to start with. Thank you for your kind reply. I would now do research on Squid. I am new to Linux and I do not even know anything. Hope this is the right place for me.

Thank you!

MN
 
Old 08-30-2014, 09:27 AM   #4
VitalkaDrug
LQ Newbie
 
Registered: Aug 2014
Location: Russia, Far East, Komsomolsk-on-Amur
Distribution: Debian
Posts: 5

Rep: Reputation: Disabled
Quote:
Originally Posted by mnraghu View Post
I am planning to configure a Server in my network to share my Internet connectivity and also to be able to manage the users access.
There are a few methods to share your Internet connections and manage users:
1. Use HTTP proxy like Squid. Users can get access to the Internet after authorization by login and password.
2. Use SOCKS server.
3. Use iptables and NAT (Network Address Translation). Users can be authorized by IP address, or by IP/MAC pair.
4. Use VPN (PPTP, PPPoE, LP2TP, OpenVPN, or something else) server. Users can get access to the Internet after establishing VPN-connection to your server.
You could mix different methods also. All depends from your wishes. But all methods have own specificity. To choose you have to know more before to start to configure.
 
1 members found this post helpful.
Old 08-30-2014, 11:12 AM   #5
mnraghu
LQ Newbie
 
Registered: Aug 2014
Posts: 5

Original Poster
Rep: Reputation: Disabled
Thank you VitalkaDrug!
Your answer is very helpful. I would like to give a clear picture of what my plan is.
I have a Static Public IP and it is configured to a firewall. My LAN has a domain server to authenticate users. However, not all users should have internet. So, firstly, I need to give internet access to few groups of users with active directory authentication. Secondly, I need web filtering for different groups. and finally I should be able to check the logs of every user of their internet activity. I don't know if my requirement is simple or complicated, but I hope Squid would do my job. So first I would like to know which Linux OS is best suitable for Squid, and then I will do research on OS and Squid.
Thanks a lot!
MN
 
Old 08-30-2014, 05:27 PM   #6
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 17,934

Rep: Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692
Quote:
Originally Posted by mnraghu View Post
Thank you VitalkaDrug!
Your answer is very helpful. I would like to give a clear picture of what my plan is.
I have a Static Public IP and it is configured to a firewall. My LAN has a domain server to authenticate users. However, not all users should have internet. So, firstly, I need to give internet access to few groups of users with active directory authentication. Secondly, I need web filtering for different groups. and finally I should be able to check the logs of every user of their internet activity. I don't know if my requirement is simple or complicated, but I hope Squid would do my job. So first I would like to know which Linux OS is best suitable for Squid, and then I will do research on OS and Squid.
ANY version of Linux would be fine for squid. You don't say whether this is for your home or office, or how many users you're talking about. If it's a server, then CentOS 7 would be a good choice.

There is MUCH easily-found documentation about squid and active directory. Web filtering is again done through squid and/or something like Dansguardian. The internet logs will be handled through squid, and there are many different reporting tools available, or you can easily write your own.
 
1 members found this post helpful.
Old 08-31-2014, 01:20 AM   #7
mnraghu
LQ Newbie
 
Registered: Aug 2014
Posts: 5

Original Poster
Rep: Reputation: Disabled
Thank you TBOne!
I want to implement this solution for my office network.
There are 3 to 4 teams who need internet access and the rest does not need. Our environment has 100 workstations and runs on two shift timings. There are around 40 internet users per shift of 100 users. So, 40 users should be able to access internet and 60 users should not.
Any user can sit on any workstation, that means a workstation is not permanently allot to any one user only for the sake of convenience. Say if X is an internet user and Y is not, then on any workstation X sits, should be able to access internet and on any workstation Y sits should NOT have internet. This means that the access should NOT be on IP address basis, but on user authentication basis. So the Squid should be a part of the Activity Directory.
One of the teams should not have filtering (no restriction) but the server should have the log of every activity of the team and every individual user of that team. Other teams would have different levels to restrictions and the admin should be able to view the logs and prepare a report of the activity of each user.
You mentioned about Dansguardian, does that mean that it need to be installed on Squid server?
Once again thanks for your kind guidance.
MN
 
Old 08-31-2014, 05:17 PM   #8
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 17,934

Rep: Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692
Quote:
Originally Posted by mnraghu View Post
Thank you TBOne!
I want to implement this solution for my office network. There are 3 to 4 teams who need internet access and the rest does not need. Our environment has 100 workstations and runs on two shift timings. There are around 40 internet users per shift of 100 users. So, 40 users should be able to access internet and 60 users should not. Any user can sit on any workstation, that means a workstation is not permanently allot to any one user only for the sake of convenience. Say if X is an internet user and Y is not, then on any workstation X sits, should be able to access internet and on any workstation Y sits should NOT have internet. This means that the access should NOT be on IP address basis, but on user authentication basis. So the Squid should be a part of the Activity Directory.
Again, all easily done. And again, a bit of research on your part will get you the answers you're looking for. If you tried putting "how to integrate squid with active directory" into Google, you get lots. And reading the documentation on Squid is a good place to start:
http://wiki.squid-cache.org/ConfigEx...ctiveDirectory

There are also many other how-to guides you can find. Doing research on your own is a good first step for ANY problem, before posting questions.
Quote:
One of the teams should not have filtering (no restriction) but the server should have the log of every activity of the team and every individual user of that team. Other teams would have different levels to restrictions and the admin should be able to view the logs and prepare a report of the activity of each user. You mentioned about Dansguardian, does that mean that it need to be installed on Squid server?
Again, research on your own. The Dansguardian page is easy to find, and has much information:
http://dansguardian.org/?page=whatisdg

It filters content, as you said you wanted. It works in CONJUNCTION with your Squid server. There are MANY tools to let you report on internet activity, web sites visited, etc. Again, as said before, squid keeps track of these things in its logs.
 
1 members found this post helpful.
Old 09-01-2014, 12:04 AM   #9
mnraghu
LQ Newbie
 
Registered: Aug 2014
Posts: 5

Original Poster
Rep: Reputation: Disabled
Thanks again TB0ne!

Now I have a direction and information for doing research for my requirement. Doing research without proper direction would be difficult for me to fulfil the goal. Though my questions might be silly, I thank you for your kindness and coming forward to guide me.

MN
 
Old 09-01-2014, 10:03 AM   #10
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 17,934

Rep: Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692
Quote:
Originally Posted by mnraghu View Post
Thanks again TB0ne!
Now I have a direction and information for doing research for my requirement. Doing research without proper direction would be difficult for me to fulfil the goal. Though my questions might be silly, I thank you for your kindness and coming forward to guide me.
The point of research IS to ask questions. That said, going to Google and putting in "how do I build a proxy server on Linux" would give you plenty of starting points. Just like putting in "how do I filter web content on a linux proxy server", or "how do I generate reports from squid logs".
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
The security of proxy server? frankkky General 1 10-28-2010 07:01 AM
squid proxy server configuration & distribution of internet without proxy gaurav_gupta082 Linux From Scratch 2 07-31-2010 12:25 PM
How to configure squid proxy server with basic user security. hocheetiong Linux - Server 5 03-17-2008 09:59 PM
Internet Proxy Server JRago Linux - Networking 11 03-11-2003 03:08 PM


All times are GMT -5. The time now is 10:31 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration