LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 10-22-2007, 02:51 PM   #1
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,187

Rep: Reputation: 60
Squid/Proxy Server


I have read:

Quote:
A proxy server replaces a computer's configured address with its own address for Internet access. Private networks are typically configured with IP addresses that are not routable on the Internet. This will prevent computers on the network from accessing the Internet unless the configured private address is replaced by a routable IP address. This is done to help ensure the security of the network computers. Because only the proxy server address is exposed on the Internet, it is much harder for a hacker to break into the network.
This is my network:

Internet
|
|
|
Firewall Box (192.168.5.0)------------- DMZ
(192.168.6.0)
|
|
(192.168.6.0) |
Squid Box
(192.168.6.0)
|
|
|
LAN (192.168.6.0)


I have been having trouble with my users going into there web browser and bypassing my proxy settings and I have also setup transparent proxying and that is not working right as well. Could the problem be that I have is the placement of squid/dansguardian and it being on a separate box instead of having a proxing firewall or better said having a netfilter/squid/dansguardian running on as my firewall instead of having a proxy machine by itself. I have played around with IPTABLES and etc.. and I cant solve this issue! should my network be like such:

Internet
|
|
|
IPTABLES/Squid/Dansguardian (192.168.5.0)------------- DMZ
(192.168.6.0)
|
|
|
LAN (192.168.6.0)

Would this be better for security and would this solve my user from being able to bypass the browser settings pointing to my Proxy server?

Last edited by metallica1973; 10-22-2007 at 02:56 PM.
 
Old 10-22-2007, 03:46 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981
i'd be cautious about putting all my eggs in one basket really. transparent proxies are reasonably nice on a small scale but when things get bigger you need better more responsible way to do this. Whatever squid is doing, you should be preventing users accessing the internet directly. if this is a linux firewall then iptables will absolutely be able to do this for you with very standard rules.
 
Old 10-22-2007, 06:16 PM   #3
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,187

Original Poster
Rep: Reputation: 60
rock on ! I will take the iptables approach! thanks
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
squid proxy server configuration & distribution of internet without proxy gaurav_gupta082 Linux From Scratch 2 07-31-2010 11:25 AM
squid(proxy) server pankajkarde Linux - Server 2 03-08-2007 02:04 AM
proxy server using squid j0hnd0e Linux - Server 1 10-19-2006 12:05 AM
Squid Proxy server help win2Linux Linux - Server 3 09-03-2006 09:53 AM
squid proxy server msound Linux - Networking 4 06-01-2005 11:59 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 12:49 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration