Redhat Linux9.0 Squid agent installation notes

zhaozj2021-02-17  46

--- Talking about the graphical management software under Linux. The version of the Squid in Redhat Linux9.0 is 2.5.STABLE-2, which can be installed as an optional package when the Linux installation is installed, or after the system is installed, install it under the "Add / Remove Programs" section. Then open it in the "Services" of the system management. The Squid.conf file under the / etc / squid / directory is the configuration file of the Squid proxy server, with a few thousand lines of code, quite complex. Configuring Squid is a hard work by manually modifying it. Fortunately, Linux has developed to today, and a large number of manufacturers and enthusiasts have developed a lot of management tool software for it, where webmin is a system management tool based on the browser management interface, providing us to manage Linux to provide great Easy. The standard management module currently provided by Webmin has almost covered common Linux management, and third-party management modules are constantly being developed. At the same time, it also has international support, providing multi-language versions including Simplified Chinese, as long as simple settings, you can display the Chinese interface. Although Redhat Linux9.0 does not integrate this tool software, we can download it from the Internet, which is very good in redhat linux9.0. Webmin's official website is http: // www. Webmin.com, you can also download from my website to the 1.070 version of GZ compressed file: http://www.why100000.com/ftp-files/webmin-1.070.tar .gz. The installation process is: First decompress: [root @ mylinux] # tar xzvf webmin-1.070.tar.gz then execute the following command to install: [Root @ mylinux] # cd webmin-1.070 [root @ mylinux webmin-1.070] # ./setup.sh Most parameters can be default, when the operating system is required, the Redhat Linux 8.1 can be selected without affecting the installation and later use. The Webmin website uses a 10,000 port by default. After the installation is successful, you can open the Mozilla browser, enter the URL http: // [IP address]: 10000 login management interface, enter the username admin, the initial password is empty, enter the management interface. Above a small bend! Now introduce the settings of the Squid agent. Assuming the IP address of the machine as a proxy is 192.168.0.180/24. The IP address of the machine that needs to be online is 192.168.0.10/24, and the Windows2000 Professional is installed. "/ 24" indicates the number of bits of the subnet mask, which is 255.255.255.0 of the decimal. Before the proxy configuration, 2 machines should be able to communicate normally. Open the browser on any machine, go to http://192.168.0.180:10000, open the webmin management interface. Then enter the Squid service management page (Figure). Squid configurable parameters, but as a general application, only the necessary parameters are configured, it will work.

First click on the "Port and Network" chart, set the network port of the proxy server. "Agent Address and Port" select "Listed Below ..", you can set a new port, such as a commonly used 8080. If the default option "default" is used, the port is 3128. Click the "Save" button to save the new settings. Click "Back to the Squid Index" link to return to the settings as shown in the figure. Click the "Operation Control" icon for access control settings. This is one of the most important configurations of the Squid proxy server. Reasonable access rules can not only eliminate unauthorized access, but also filter out URL requests with special strings, such as disabling internal network users from accessing certain unhealthy sites. We can customize your "Access Control List" and "Add Agent Constraint Rules" to specify certain "action" to control specific users, addresses, and ports to proxy access. Let's click on the link in ALL under "Agent Constraint", then "Action" select "Allow", "Match ACL" to select "All", and then click the "Save" button. This allows us to allow all customer addresses specified in the "All" list in the Access Control List, access the external network through the Squid agent. The above settings can also be done in the Squid profile /etc/squid/squid.conf, ie, add the following statement in this file: HTTP_PORT 8080 HTTP_ACCESS ALLOW ALL After the above simple settings, the proxy server should be able to start service. Of course, the Squid service must first be started, the method is: Click the "Squid" button of the "Squid Proxy Server" interface. If you do parameter adjustments to Squid, you must click the "Change Effect" button to restart the Squid service. The command of manually restarting the Squid service is /etc/rc.d/init.d/squid reload. Testing whether the Squid agent really starts working, setting up a client, see if the client is really able to access the Internet via Squid. Prerequisites are that the Squid proxy server must be able to access the Internet, the client and the Squid proxy server must be in a network segment, physically connected correctly, and can ping the 192.168.0.180 URL. We connect a machine installed with Windows, IP addresses to 192.168.0.10, and "Add" "Address" in "Internet Options" "Local Area Network Settings" "Address" "Address" "Address" "Address" "Using Proxy Server" to 192.168.0.180 "Port" is set to 8080. After "OK, then use the IE browser to access the Internet. If the previous settings are correct, it should be able to access the Internet. You can also test the proxy server on the Mozilla browser in Linux. First start the Mozilla browser, then select the "Preference" command from the Edit menu, open the "Preference" window, select the Advanced "/" Agent "item from the category on the left, enter the proxy setting interface. First select the "Manual Configuration Agent" radio button in the window right book, then enter 192.168.0.180 and 8080 in "HTTP proxy" and "port". FTP and other services can also be set in the same way.

Finally, click the "OK" button to complete the setting. Then look at Mozilla or surf the Internet? The benefits of making a proxy with Squid are low cost, system stability, and is the best choice for enterprise users. But we found in practice, and for some MMS protocols that use Microsoft's MMS protocol, the WMV video on-demand site, is unacceptable through the Squid agent. It is estimated that some of the website of some formats such as playback RM is no exception. However, for videos on http: // /some.asf, using IE browser is accessible normally because in this case HTTP protocol. The protocol currently supported by the Squid agent is HTTP, HTTPS, FTP, SSL, GOPHER, etc. Zhang Qingzhangking@263.net http://soft.why100000.com Copyright Reprint, please indicate the author information 2003.12.1

转载请注明原文地址:https://www.9cbs.com/read-28922.html

New Post(0)