configuring a proxy server and access control lists

zebias · 11-08-2007, 12:26 AM

I would like to configure my machine runninng redhat 9 such that one of the machines on the same LAN im on will use my machine as its gateway or its proxy server address to use the internet. Im talking about specifying my ip address on the client machines browser settings under Lan settings.

I would then want to specify acces control lists in squid.conf to specify the particular machines i want to use mu machine their proxy server.

I hope my question is clear.
Making use of http_access allow or http_access deny

Dinithion · 11-09-2007, 12:48 PM

You could set up a dhcp-server that gives a standard gateway for some users and custom gateway for other users depending on mac-address, and then route the request from your client to your squid using iptables.

zebias · 11-13-2007, 11:51 PM

ok where do I set up the dhcp server. Remember ny machine is a client machine on a LAN but i just want to make it act as a proxy server for the other machines on the network.

I understand that in squid.conf is where i have to specify which ip addresses should be able to browse using my machine as their prxy server where they will specify my ip address as their proxy server.

homey · 11-14-2007, 05:16 AM

I'm more used to doing this for groups in active directory but, you may have success doing it for few machines by going to Start / Run / gpedit ...

On the Redhat box, I find it much easier to use webmin for managing squid acl lists. We block everything then, add allowed sites to the allow-access url_regexp.

Code:

# Edit Proxy Group Policy in domain
\\Server1 / Master.msc / Someplace.com / Sales / Properties / Group Policy tab
   Proxy Policy / Edit
      User Configuration / Windows Settings / IE Maintenance
         Connection / Connection Settings
             Do not customize Connection Settings
         Connection / Proxy Settings
             [X] Enable proxy settings
             Proxy Servers
                Address of proxy           Port
                10.0.1.95                  3128
             [X] Use the same proxy server for all addresses