{"id":372,"date":"2010-05-08T02:20:13","date_gmt":"2010-05-08T00:20:13","guid":{"rendered":"http:\/\/www.shukko.com\/x3\/?p=372"},"modified":"2011-01-26T01:41:49","modified_gmt":"2011-01-25T23:41:49","slug":"anonymous-proxy-using-squid-3-on-ubuntu-9-04-server-with-web-based-auth-user-pass-soruyor-d","status":"publish","type":"post","link":"https:\/\/www.shukko.com\/x3\/2010\/05\/08\/anonymous-proxy-using-squid-3-on-ubuntu-9-04-server-with-web-based-auth-user-pass-soruyor-d\/","title":{"rendered":"Anonymous Proxy Using SQUID 3 On Ubuntu 9.04 Server – with web based auth!! (user pass soruyor :D)"},"content":{"rendered":"

Guncelleme
\nubuntu 10.04 32 bit minimal install icin yeniden duzenledim<\/p>\n

1- ubuntu 10.04 vpsimizi hazir edelim -iki adet ip adresi var
\n2- apt-get install squid3
\n3- kendi confum hazir o yuzden var olani yedekle lazim olursa
\ncp \/etc\/squid3\/squid.conf \/etc\/squid3\/squid.conf.yedek
\n4- nano \/etc\/squid3\/squid.conf
\n
\n#Recommended minimum configuration:
\nacl manager proto cache_object
\nacl localhost src 127.0.0.1\/32
\nacl to_localhost dst 127.0.0.0\/8
\nacl SSL_ports port 443
\nacl Safe_ports port 80 # http
\nacl Safe_ports port 21 # ftp
\nacl Safe_ports port 443 # https
\nacl Safe_ports port 70 # gopher
\nacl Safe_ports port 210 # wais
\nacl Safe_ports port 1025-65535 # unregistered ports
\nacl Safe_ports port 280 # http-mgmt
\nacl Safe_ports port 488 # gss-http
\nacl Safe_ports port 591 # filemaker
\nacl Safe_ports port 777 # multiling http
\nacl CONNECT method CONNECT
\nhttp_access allow manager localhost
\nhttp_access deny manager
\nhttp_access deny !Safe_ports
\nhttp_access deny CONNECT !SSL_ports
\nhttp_access allow localhost
\n#http_access deny all
\nicp_access deny all
\nhtcp_access deny all
\nhttp_port 3128
\nhierarchy_stoplist cgi-bin ?
\naccess_log \/var\/log\/squid3\/access.log squid
\nrefresh_pattern ^ftp: 1440 20% 10080
\nrefresh_pattern ^gopher: 1440 0% 1440
\nrefresh_pattern (cgi-bin|\\?) 0 0% 0
\nrefresh_pattern . 0 20% 4320<\/code><\/p>\n

auth_param basic program \/usr\/lib\/squid3\/ncsa_auth \/etc\/squid3\/squid_passwd
\nauth_param basic children 5
\nauth_param basic realm Squid proxy-caching web server
\nauth_param basic credentialsttl 2 hours<\/p>\n

acl ncsaauth proxy_auth REQUIRED
\nhttp_access allow ncsaauth<\/p>\n

forwarded_for off<\/p>\n

acl ip1 myip 178.63.148.7
\ntcp_outgoing_address 178.63.148.7 ip1<\/p>\n

request_header_access Allow allow all
\nrequest_header_access Authorization allow all
\nrequest_header_access WWW-Authenticate allow all
\nrequest_header_access Proxy-Authorization allow all
\nrequest_header_access Proxy-Authenticate allow all
\nrequest_header_access Cache-Control allow all
\nrequest_header_access Content-Encoding allow all
\nrequest_header_access Content-Length allow all
\nrequest_header_access Content-Type allow all
\nrequest_header_access Date allow all
\nrequest_header_access Expires allow all
\nrequest_header_access Host allow all
\nrequest_header_access If-Modified-Since allow all
\nrequest_header_access Last-Modified allow all
\nrequest_header_access Location allow all
\nrequest_header_access Pragma allow all
\nrequest_header_access Accept allow all
\nrequest_header_access Accept-Charset allow all
\nrequest_header_access Accept-Encoding allow all
\nrequest_header_access Accept-Language allow all
\nrequest_header_access Content-Language allow all
\nrequest_header_access Mime-Version allow all
\nrequest_header_access Retry-After allow all
\nrequest_header_access Title allow all
\nrequest_header_access Connection allow all
\nrequest_header_access Proxy-Connection allow all
\nrequest_header_access User-Agent allow all
\nrequest_header_access Cookie allow all
\nrequest_header_access All deny all
\nsave et bitti
\n5- touch \/etc\/squid3\/squid_passwd
\n6- htpasswd \/etc\/squid3\/squid_passwd proxykullaniciadi1
\n7- service squid3 restart<\/p>\n

oldu bitti masallah<\/p>\n

port 3128 iplerimiz yukaridaki ornekde oldugu gibi 178.63.148.7 bla bla
\ntabi serverdaki gercek ipleri yaz yerine<\/p>\n

————————————-<\/p>\n

————————————-<\/p>\n

CENTOS 5.x ICIN<\/p>\n

yum -y install rpm-build openjade linuxdoc-tools openldap-devel pam-devel openssl-devel httpd rpm-devel<\/p>\n

wget http:\/\/archives.fedoraproject.org\/pub\/archive\/fedora\/linux\/releases\/10\/Fedora\/source\/SRPMS\/squid-3.0.STABLE10-1.fc10.src.rpm<\/p>\n

mkdir \/usr\/src\/redhat\/<\/p>\n

rpm -ivh squid-3.0.STABLE10-1.fc10.src.rpm<\/p>\n

cd \/usr\/src\/redhat\/SPECS
\nrpmbuild -bb squid.spec<\/p>\n

hata vericek<\/p>\n

nano squid.spec diyip<\/p>\n

iconv satirini asagidaki sekilde degistir<\/p>\n

iconv -f ISO-8859-1 -t UTF-8 ChangeLog > ChangeLog.tmp<\/p>\n

sonra yeniden<\/p>\n

rpmbuild -bb squid.spec<\/p>\n

rpm build olduktan sonra kur<\/p>\n

rpm -Uvh \/usr\/src\/redhat\/RPMS\/x86_64\/squid-3.0.STABLE10-1.x86_64.rpm<\/p>\n

cd \/etc\/squid\/
\nmv squid.conf squid.conf.orig
\nnano squid.conf<\/p>\n

YAPISTIR<\/p>\n

#Recommended minimum configuration:
\nacl manager proto cache_object
\nacl localhost src 127.0.0.1\/32
\nacl to_localhost dst 127.0.0.0\/8
\nacl SSL_ports port 443
\nacl Safe_ports port 80 # http
\nacl Safe_ports port 21 # ftp
\nacl Safe_ports port 443 # https
\nacl Safe_ports port 70 # gopher
\nacl Safe_ports port 210 # wais
\nacl Safe_ports port 1025-65535 # unregistered ports
\nacl Safe_ports port 280 # http-mgmt
\nacl Safe_ports port 488 # gss-http
\nacl Safe_ports port 591 # filemaker
\nacl Safe_ports port 777 # multiling http
\nacl CONNECT method CONNECT
\nhttp_access allow manager localhost
\nhttp_access deny manager
\nhttp_access deny !Safe_ports
\nhttp_access deny CONNECT !SSL_ports
\nhttp_access allow localhost
\n#http_access deny all
\nicp_access deny all
\nhtcp_access deny all
\nhttp_port 3128
\nhierarchy_stoplist cgi-bin ?
\naccess_log \/var\/log\/squid\/access.log squid
\nrefresh_pattern ^ftp: 1440 20% 10080
\nrefresh_pattern ^gopher: 1440 0% 1440
\nrefresh_pattern (cgi-bin|\\?) 0 0% 0
\nrefresh_pattern . 0 20% 4320<\/code><\/p>\n

auth_param basic program \/usr\/lib64\/squid\/ncsa_auth \/etc\/squid\/squid_passwd
\nauth_param basic children 5
\nauth_param basic realm Squid proxy-caching web server
\nauth_param basic credentialsttl 2 hours<\/p>\n

acl ncsaauth proxy_auth REQUIRED
\nhttp_access allow ncsaauth<\/p>\n

forwarded_for off<\/p>\n

acl ip1 myip 178.63.148.7
\ntcp_outgoing_address 178.63.148.7 ip1<\/p>\n

request_header_access Allow allow all
\nrequest_header_access Authorization allow all
\nrequest_header_access WWW-Authenticate allow all
\nrequest_header_access Proxy-Authorization allow all
\nrequest_header_access Proxy-Authenticate allow all
\nrequest_header_access Cache-Control allow all
\nrequest_header_access Content-Encoding allow all
\nrequest_header_access Content-Length allow all
\nrequest_header_access Content-Type allow all
\nrequest_header_access Date allow all
\nrequest_header_access Expires allow all
\nrequest_header_access Host allow all
\nrequest_header_access If-Modified-Since allow all
\nrequest_header_access Last-Modified allow all
\nrequest_header_access Location allow all
\nrequest_header_access Pragma allow all
\nrequest_header_access Accept allow all
\nrequest_header_access Accept-Charset allow all
\nrequest_header_access Accept-Encoding allow all
\nrequest_header_access Accept-Language allow all
\nrequest_header_access Content-Language allow all
\nrequest_header_access Mime-Version allow all
\nrequest_header_access Retry-After allow all
\nrequest_header_access Title allow all
\nrequest_header_access Connection allow all
\nrequest_header_access Proxy-Connection allow all
\nrequest_header_access User-Agent allow all
\nrequest_header_access Cookie allow all
\nrequest_header_access All deny all<\/p>\n

save et<\/p>\n

sonra user pass olusturucaz<\/p>\n

5- touch \/etc\/squid\/squid_passwd
\n6- htpasswd \/etc\/squid\/squid_passwd proxykullaniciadi1
\n7- service squid restart<\/p>\n

oldu bitti masallah<\/p>\n

port 3128 iplerimiz yukaridaki ornekde oldugu gibi 178.63.148.7 bla bla
\ntabi serverdaki gercek ipleri yaz yerine<\/p>\n

————————————-<\/p>\n","protected":false},"excerpt":{"rendered":"

Guncelleme ubuntu 10.04 32 bit minimal install icin yeniden duzenledim 1- ubuntu 10.04 vpsimizi hazir edelim -iki adet ip adresi var 2- apt-get install squid3 3- kendi confum hazir o yuzden var olani yedekle lazim olursa cp \/etc\/squid3\/squid.conf \/etc\/squid3\/squid.conf.yedek 4- nano \/etc\/squid3\/squid.conf #Recommended minimum configuration: acl manager proto cache_object acl localhost src 127.0.0.1\/32 acl to_localhost […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-372","post","type-post","status-publish","format-standard","hentry","category-kategerisiz"],"_links":{"self":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/comments?post=372"}],"version-history":[{"count":4,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/372\/revisions"}],"predecessor-version":[{"id":433,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/372\/revisions\/433"}],"wp:attachment":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/media?parent=372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/categories?post=372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/tags?post=372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}