![]() |
|
|
|
||||
|
__________ __________ (for DNS server) __________ (for DNS server) __________ Net-Qmail Installation Powerful Linux E-mail Server _________ To install webmin in fedora core 3 __________ INSTALLATION OF MRTG & RRD TOOL (Fedora Core2/ Redhat 8/ 9) __________ __________ _________ __________ ISP Servers IPtables firewall setup __________ _________ Linux Base POP/ POP3 and SMTP traffic Virus and Spam Scanning/ filtering Firewall _________ _________ _________ Bonding / Binding Multiple interfaces into single interface _________ Use more than 1 DSL modems without noticing disconnectivity
_________
|
All configuration are working fine in live/ LAB environments
This installation has been tested on Redhat 8, and its working fine for me on my live server.
SQUID
Installation Setup any ftp server in you LAN’s windows pc and download SQUID tar file “squid-2.5.STABLE5.tar.gz” from ftp://ftp.ccs.neu.edu/pub/mirrors/squid.nlanr.net/pub/squid-2/STABLE/ and save it in your windows ftp server and make a user and give access it on squid file directory. Now type these commands one by one in Redhat 8 server command prompt. Redhat8server# cd /usr/local/src redhat8server#wget ftp://ftp.ccs.neu.edu/pub/mirrors/squid.nlanr.net/pub/squid-2/STABLE/squid-2.5.STABLE5.tar.gz Now type this command on your Redhat 8 server prompt. Redhat8server# tar –zxvf squid-2.5.STABLE5.tar.gz (this command extract squid tar file and make
squid-2.5.STABLE5 named directory in Now go in, in this directory by typing. Redhat 8server# cd squid-2.5.STABLE5 (now conifigure squid server by this command ) redhat8server#
./configure --enable-delay-pools --enable-ipf-transparent –-disable-ident-lookups
--enable-snmp --enable-removal-policies (type this command in one line and press entre, (there should be no error in your compiling process.) ) when screen stops scrowlling and comeback to server prompt type this command # make then # make install when this process complete without any error go to your squid installted directory # cd /usr/local/squid/etc/ and configure your squid configuration file, from emacs text editor #pico squid.conf (pico is a text editor, use any text editor which you have installed) (here you change/ add these line as discribe bleow ) http_pot 8080 icp_port 3128 httpd_accel_host virtual httpd_accel_port 80 httpd_accel_uses_with_proxy on httpd_accel_uses_host_header on cache_mem 128 MB NOTE:-
##(cache_mem size depends on your RAM if
you install 128 MB RAM in your system ##then set cache_mem value
to 16 etc etc) cache_dir ufs /cache 2000 16 256 NOTE##here
“ /cache “ is your cache directory and 2000 is its space size on
disk(2000 MB = 2 GB) set this value whatever you want cache size) ##uncomments the below lines if you want to make log files cache_access_log /???/???/???/access.log cache_store_log /???/???/???/store.log cache_log /???/ ???/????/ cache_replacement_policy GDSF #
Modify this according to your network acl
all src 0.0.0.0/0.0.0.0 acl
manager proto cache_object acl
localhost src 127.0.0.1/255.255.255.255 acl
outgoing src 192.168.10.2/255.255.255.255 acl
SSL_ports port 443 563 acl
Safe_ports port 80
# http acl
Safe_ports port 21
# ftp acl
Safe_ports port 443 563
# https, snews acl
Safe_ports port 70
# gopher acl
Safe_ports port 210
# wais acl
Safe_ports port 1025-65535 #
unregistered ports acl
Safe_ports port 280
# http-mgmt acl
Safe_ports port 488
# gss-http acl
Safe_ports port 591
# filemaker acl
Safe_ports port 777
# multiling http acl
CONNECT method CONNECT http_access
allow manager http_access
allow localhost http_access
allow outgoing http_access
deny !Safe_ports http_access
deny CONNECT !SSL_ports http_access
deny all icp_access
allow localhost #
Avoid caching cgi scripts acl
QUERY urlpath_regex cgi-bin no_cache
deny QUERY (after changing/adding these line by emacs text editor press ctrl+x ctrl+c to save changes) Now create cache dir and create
swap
#
mkdir /cache #
chown nobody:nogroup cache #
/usr/local/squid/sbin/squid -k parse #
/usr/local/squid/sbin/squid -z (test good running Proxy server)
-------------Configuration Complete-------------
|
|
||
|
|
||||