LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 04-22-2006, 11:53 AM   #1
kayodea
LQ Newbie
 
Registered: Dec 2005
Posts: 6

Rep: Reputation: 0
Question My Config


I want to do all of the following on my Fedore core 4 box.

1. Gateway to the Internet. (4 Network Cards)
eth0 = local LAN
eth1 = VOIP
eth2 = Internet
eth3 = Wireless Access Point
2. DNS caching only server
3. Firewall (shorewall)
4. squid proxy server.
5. DHCP server (on eth0)
6. Network Management and monitoring (ntop)
7. Bandwidth Metering (MRTG)

Is there anyone that have done this b4? if yes a link to doing all of this or a sample working config file to do all of this will be highly appreciably.

Although, I have implemented all in my box, but I am having issue with just my squid proxy server. I am running squid-2.5.STABLE9-7 (that comes with Core 4)which I then upgraded to squid-2.5.STABLE13. the issues are as follows;

a. my web pages are opening slowly.
b. I discovered that even when I stopped squid, I can still browse slowly. (is squid working at all?)
c. I tried accessing cache manager, i keep getting Access denied.
d. I have act as a router as YES on my network config with the IP address of my modems gateway on eth2 as my default route. (is this ok?)
e. I did not specify any IP address in my "dynamic route" and "static route". (what will I put here is any? if I have eth0 = 192.168.200.254, eth1 = 192.168.50.254, eth2 = ISP public IP. and eth3 = 192.168.50.254 as explained above).

As of this writing every other config is working fine except that my squid is acting slowly.

I look forward to sharing knowledge with any one on this.

Cheers.
 
Old 04-24-2006, 05:22 AM   #2
kayodea
LQ Newbie
 
Registered: Dec 2005
Posts: 6

Original Poster
Rep: Reputation: 0
Any one can help me pls...
 
Old 04-25-2006, 05:26 AM   #3
kayodea
LQ Newbie
 
Registered: Dec 2005
Posts: 6

Original Poster
Rep: Reputation: 0
I need help pls...
 
Old 04-25-2006, 08:22 AM   #4
ssscan
LQ Newbie
 
Registered: Apr 2006
Posts: 8

Rep: Reputation: 0
I think you need specify static route for 4 Network Cards.(only one static route).

and I have other suggestion to change your design. you can use VMware to create several dummy-servers.(one for DHCP server,other for squid proxy server.....)
I think it is easy to maintain this servers in one box.
 
Old 05-21-2006, 11:28 AM   #5
kayodea
LQ Newbie
 
Registered: Dec 2005
Posts: 6

Original Poster
Rep: Reputation: 0
Hi all,

Thanks for that advice (ssscan). After hours of browsing thru so many configs, i found some working solution. But the issue remaining now is this.

My squid is working but not allowing users to login with either their yahoo ID at mail.yahoo.com and hotmail.com. What I also noticed immediately is that my squid proxy is not allowing https to pass thru. I have tried "Allow CONNECT" in my acl, but it still didn't solve it. Please what can can i do regarding this.

Cheers.
 
Old 05-22-2006, 08:55 AM   #6
ssscan
LQ Newbie
 
Registered: Apr 2006
Posts: 8

Rep: Reputation: 0
Quote:
Originally Posted by kayodea
Hi all,

Thanks for that advice (ssscan). After hours of browsing thru so many configs, i found some working solution. But the issue remaining now is this.

My squid is working but not allowing users to login with either their yahoo ID at mail.yahoo.com and hotmail.com. What I also noticed immediately is that my squid proxy is not allowing https to pass thru. I have tried "Allow CONNECT" in my acl, but it still didn't solve it. Please what can can i do regarding this.

Cheers.
Squid2.4 on linux7.2 with degist auth:
groupadd squid
adduser -g squid -d /dev/null -s /sbin/nologin squid
rpm -ivh squid-2.4.STABLE1-5.i386.rpm
chkconfig squid on
in /etc/squid.conf:
http_port 3128
cache_mem 20 MB
maximum_object_size 4096 KB
maximum_object_size_in_memory 30 KB
dns_nameservers 172.16.240.221 61.177.7.1
authenticate_children 5
acl password proxy_auth REQUIRED
authenticate_program /usr/bin/ncsa_auth /etc/squid/passwd
http_access allow password
http_access deny all
cache_mgr robinsonl@sz.webex.com
error_directory /var/log/squid/errors
cp /usr/lib/squid/ncsa_auth /usr/bin/
cp htpasswd /usr/bin (from apapche on linux7.2)
htpasswd -c /etc/squid/passwd test
squid -z
service squid start
 
Old 05-22-2006, 10:55 AM   #7
kayodea
LQ Newbie
 
Registered: Dec 2005
Posts: 6

Original Poster
Rep: Reputation: 0
sorry ssscan, I didn't get that. What I need is what acl will allow my https to login/yahoo.com and hotmail.com.

Cheers.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Sendmail - Config for IP Block's & Config Issues Thom_Redhat Linux - Software 1 04-07-2006 01:29 PM
REDHAT 6.2 config / modules : usb storage, wired network, x config audan Linux - Hardware 2 02-18-2006 05:23 PM
I have an XF86 config file for video, how do I turn it into XORG config lowpingnoob Linux - Newbie 18 06-12-2005 12:07 PM
Webmin cannot handle Samba config files that use the config or include directives allelopath Linux - Networking 3 01-18-2005 09:36 AM
krfb --config; Format of config file? Need to allow ports below 1024. SavvyPlayer Linux - Software 0 10-16-2004 08:28 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 05:48 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration