LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 08-09-2011, 08:11 AM   #1
dramacox
LQ Newbie
 
Registered: Jun 2011
Posts: 13

Rep: Reputation: Disabled
Proxy Server and Authentication


Am using Fedora 15, in which i was able to configure the proxy server and authentication. i confirmed this by configuring web broswer and it works. Now the problem is that i want to deploy it out to other computer system(client) i dont want to use the transparent proxy because the Proxy Authentication will not work.
I even tried to configure a DHCP server if it will work but i cant still configure for other computer system to work. pls i really need u guys help.
Thanks in anticipation.
Dramacox
 
Old 08-09-2011, 08:20 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
don't use transparent proxying, it's never as good as you think it is. Also authentication not working has *nothing* to do with transparency. Just don't use authentication and explicitly define the proxy in your browser.
 
Old 08-09-2011, 10:10 AM   #3
dramacox
LQ Newbie
 
Registered: Jun 2011
Posts: 13

Original Poster
Rep: Reputation: Disabled
Thanks for your advice..pls i will confirmed dat my DHCP server is working after configuration and also to specify the listening interface(eth0, eth1). Thanks
 
Old 08-09-2011, 10:40 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
what does DHCP have to do with this?
 
Old 08-09-2011, 10:42 AM   #5
dramacox
LQ Newbie
 
Registered: Jun 2011
Posts: 13

Original Poster
Rep: Reputation: Disabled
Am tryin to setup a DHCP server and Proxy server for clients..
 
Old 08-09-2011, 10:44 AM   #6
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
OK, good for you, but proxy servers have nothing to do with DHCP.
 
Old 08-10-2011, 02:39 AM   #7
dramacox
LQ Newbie
 
Registered: Jun 2011
Posts: 13

Original Poster
Rep: Reputation: Disabled
U not have answer my problem. A squid proxy server is setup up on a server that has 2 NICs how will i configure the second NIC(eth1) so that my clients connected to the NIC will be proxied. Thanks

Last edited by dramacox; 08-10-2011 at 02:47 AM.
 
Old 08-10-2011, 06:55 AM   #8
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
OK, I misread your question a bit there, sorry. You should have to do nothing for it to work on eth2. if squid is running it would be listening on eth2, you might need to adjust iptables to allow connections to 3128, but other than that there is nothing to do.
 
Old 08-11-2011, 07:34 AM   #9
dramacox
LQ Newbie
 
Registered: Jun 2011
Posts: 13

Original Poster
Rep: Reputation: Disabled
Thank Cris, your advice maybe helpful, below is the iptable configuration.
eth0 is on dhcp and its connected to the internet
eth1 is on dhcp also.
i have tried various solution but its not just working out but the whole processes are working well on the server itself.

# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type echo-reply -j REJECT --reject-with icmp-host-prohibited
-A INPUT -p icmp -m icmp --icmp-type echo-request -j REJECT --reject-with icmp-host-prohibited
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 3128 -j ACCEPT
-A INPUT -J ACCEPT -p all -s 172.16.0.0/12 -i eth1
-A OUTPUT -J ACCEPT -p all -s 172.16.0.0/12 -i eth1
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT

thanks.
 
Old 08-11-2011, 08:38 AM   #10
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
ok, so the firewall rules look fine. does "netstat -plnt" show squid listening on that port on all interfaces? can you telnet to that port from a client?
 
Old 08-11-2011, 09:47 AM   #11
dramacox
LQ Newbie
 
Registered: Jun 2011
Posts: 13

Original Poster
Rep: Reputation: Disabled
when i issued the command the out was listed below. all my client are using windows. pls do u know anything on routing from outside interface( NIC1) to inside interface NIC2?

Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:56943 0.0.0.0:* LISTEN 1000/rpc.statd
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 850/rpcbind
tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN 1070/perl
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1031/sshd
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 1027/cupsd
tcp 0 0 :::52490 :::* LISTEN 1000/rpc.statd
tcp 0 0 :::111 :::* LISTEN 850/rpcbind
tcp 0 0 :::22 :::* LISTEN 1031/sshd
tcp 0 0 ::1:631 :::* LISTEN 1027/cupsd
tcp 0 0 :::3128 :::* LISTEN 2838/(squid)
 
Old 08-11-2011, 11:17 AM   #12
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
routing? Are these clients on directly on the same subnet as eth2?

Squid is a proxy. there is no routing on a proxy service. the client talks to the proxy, the proxy talks to the remote web servers, nothing is ever routed directly between the two endpoints.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
proxy server with SQL table user authentication venkateven Linux - Newbie 1 06-16-2010 12:43 AM
domain user authentication for squid proxy server for internet access manabJyoti Linux - General 1 05-10-2008 09:08 AM
Squid Proxy Server With Ncsa Authentication kool_kid Linux - Enterprise 0 08-07-2007 04:40 AM
user authentication in proxy server pankajkarde Linux - Server 3 03-16-2007 10:50 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 07:47 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration