I-squid lolunye uluhlu lokucoca ulwelo enokuncedisa iptables. I-squid ngumncedisi we-proxy wewebhu egciniweyo, ithandwa kakhulu kwaye isimahla, kwaye liqonga lomnqamlezo. Nangona inokusetyenziselwa ukuphucula ukusebenza konxibelelwano lwe-Intanethi, inokusetyenziselwa iinjongo zokhuseleko. Ukusukela iprojekthi iqale nge-90s, i-squid iqhubele phambili kakhulu kwaye ngoku siyiveza kuwe ukuze uyazi ukuyisebenzisa.
Ufakelo lwakho, unokufikelela kwi iwebhusayithi esemthethweni yeprojekthi kwaye ukhethe iiphakheji yokubini kwindlela yakho yokusebenza okanye ukuhanjiswa. Ukuba ufuna ukuyifaka kwikhowudi yemithombo ngokufaka, nayo unokukhetha. Ezi tarballs zikhona tar.gz, tar.bz2, kunye tar.xz. Ukuba awukwazi ukufaka, ungaya kwinqaku esilihlelayo kule bhlog malunga uyifaka njani nayiphi na iphakheji evela kwi-linux. Iliso! Ukuba une-Debian okanye isuselwe kuyo kwaye uyibonile ukuba ifakwe kwisudo "apt-get install squid", unokufumana impazamo, kuba kuya kufuneka ubeke endaweni ye "squid" nge "squid3" ukuze isebenze .. .
Ngoku siya ngokuthe ngqo kwisenzo esichazayo eminye imizekelo yokusebenzisa iSquid ukukhusela izixhobo zethu. Phambi kokuba ndingathanda ukucacisa ukuba i-squid isekwe kwii-ACLs, Oko kukuthi, kuLuhlu loLawulo lokuFikelela okanye kuluhlu lolawulo lofikelelo, oko kukuthi, luluhlu lweenkcukacha zemvume yokulawula kule meko ukuhamba kwenethiwekhi kunye nokuphumeza izihluzi ezifanayo nezo ze-iptables kodwa kwinqanaba lesicelo.
Ngokwesiqhelo, emva kofakelo, ifayile yoqwalaselo ifakiwe enokufumaneka kwi /etc/squid3/squid.conf kwaye yile nto kufuneka sihlele kunye nomhleli ofana nano okanye gedit. Kuyo sinako ukuvelisa imithetho yethu yokuhluza, nangona kukho iindlela ezikhethiweyo cache_dir, cache_mem kunye http_port, siya kusebenzisa le migaqo yokhuseleko. Enye inkcukacha kukuba le fayile ichaza izibuko elingagqibekanga elisetyenziswa yi-squid service, ethi yona ibe ngu-3128 (jonga umgca okanye umyalelo "http_port 3128" kwaye ususe # ukuyivula). Ukuba uyafuna, ungayitshintshela kwelinye izibuko njenge-8080 ... Kwaye enye into eyimfuneko kukumisela igama lenginginya, jonga uluvo "TAG: Visible_hostname" kwaye uyakubona umgca "visible_hostname" apho kufuneka ubeke khona igama lakho lenginginya.
Ukwazi igama lakho lenginginya, unokuchwetheza kwisiphelo sendlela:
hostname
Kwaye igama elibonakalayo uyalongeza kumgca ongafanele ukwandulelwa ngu # ukuze ungakhathalelwa njengamazwana. Oko kukuthi, kuya kubonakala ngathi:
igama_lomnini wegama lomninimzi_wena_uvele
Ukuba ubona ifayile yoqwalaselo, uya kubona ukuba iphawulwe kakhulu, ukuba ufuna ukubhala ngaphezulu komgaqo owenziweyo, ungaqala umgca nge # kwaye uyiguqula ibe luhlomlo, apho i-squid ingayikhathaleli khona, ukuyibeka kwakhona kwinkonzo, ucima # kwaye yiyo loo nto. Ngapha koko, mininzi imigaqo eyenziweyo kunye nezimvo onokuzisebenzisa ngokususa # kuyo. Ke akufuneki ucime kwaye uphinde ubhale imigaqo. Ewe, ukongeza umthetho othile okanye isihluzo, kufuneka sibe ne-ACL kunye nomyalelo obonisa into ekufuneka uyenzile.
Ngendlela, xa ususa # ukwenza umthetho, qiniseka ukuba awushiye izithuba ekuqaleni komgca. Umzekelo:
Indlela engalunganga:
http_port 3128
Indlela echanekileyo:
http_port 3128
Ngaba akuvanga nto? Ungakhathazeki, nge Umzekelo Uza kubona yonke into ibhetele ngakumbi. Khawufane ucinge:
acl ethintela i-url_regex njenge-facebook
http_access khanyela ukuvimba
Uthetha ntoni lo mthetho yeyokuba i-acl enegama "ukuvimba" iya kuthintela ukufikelela kwi-URL equlethe "facebook" (ke ngoko ukuba sizama ukungena kuFacebook iyatsiba impazamo kwisikhangeli). Ukuba endaweni yokuba "ukhanye" usebenzisa "vumela", ungavumela ukufikelela endaweni yokuyalela. Unokusebenzisa i! Ukukhuphela ngaphandle, umzekelo, masithi ufuna ukuvumela ukufikelela kuluhlu1 kodwa hayi uluhlu2:
http_access allow lista1 !lista2
Omnye umzekelo unokwenza ifayile / etc / squid3 / ips ivumelekile kwaye kuyo ugcine uluhlu lwee-IPs esifuna ukuvumela ukufikelela kuzo. Umzekelo, masithi umxholo weeps ezivunyelweyo zezi:
192.168.30.1
190.169.3.250
192.168.1.26
Kwaye emva koko senza i-acl ukuvumela ukufikelela kwezi IPs:
acl nuevaregla src "/etc/squid3/ipspermitidas"
Umzekelo osebenzayoKhawufane ucinge ukuba ikhompyuter yakho isetyenziswa ngabantwana abangaphantsi kwe-18 kwaye ufuna ukuthintela ukufikelela kwiindawo ezithile zabantu abadala. Into yokuqala kukwenza ifayile ebizwa / njl / squid3 / uluhlu olunomxholo:
abadala
porn
isini
iporinga
Kwaye ngoku ifayile squid.conf sibeka lo mthetho ulandelayo:
acl denegados url_regex "/etc/squid3/lista" http_access allow !denegados
Njengoko ubona sisebenzise vumela ngokomgaqo kukuvumela, kodwa ukuba ujonga songezile! ukwala, ke ngoko, kuya kulingana nokubeka:
acl denegados url_regex "/etc/squid3/lista" http_access deny denegados
Unokwenza uluhlu, hayi kuphela lwamagama esizinda okanye ii-IPs njengoko senzile, ungabeka iindawo kwaye umzekelo uthintele ukufikelela kwimimandla efana .xxx, .gov, njl. Makhe sijonge kumzekelo osekwe kumgaqo wangaphambili. Senza ifayile / njl / squid3 / imimandla ene:
.edu
.es
.org
Kwaye ngoku umthetho wethu, ukwala ukufikelela kuluhlu lweziza ezingavumelekanga esizenzayo, kodwa sivumela ukufikelela kwii-URL ezinale mimandla:
acl denegados url_regex "/etc/squid3/lista" acl permitidos dstdomain "/etc/squid3/dominios" http_access allow !denegados dominios
UKWANDISWA:
Uxolo, xa ndibona amagqabantshintshi ndiye ndayiqonda lonto Bendihlala ndilahlekile eyona nto iphambili. Ndisandula ukubeka imizekelo yendlela esetyenziswa ngayo kwaye ndilibale ukuyithetha loo nto ukuqala iserver yeScid:
sudo service squid3 start
Phambi kokuba iphakame "/etc/init.d/squid start", kodwa ngoku kufuneka usebenzise lo mgca ndiwubekileyo. Kanye njengokuba ifayile yoqwalaselo ingasekho kwi /etc/squid/squid.conf, kodwa kwi /etc/squid3/squid.conf. Kulungile, yakuba imigaqo-nkqubo yokuhluza yenziwe, kwaye ukuqala kwayo, kufuneka siqwalasele isikhangeli, umzekelo, ukuba usebenzisa iMozilla Firefox okanye ezinye izinto, ungaya kwimenyu yokumisela (uyazi, imivalo emithathu), emva koko Ukukhetha, Okuphambili, nakwithebhu yenethiwekhi, cofa kuqwalaselo kwicandelo loQhagamshelo. Apho, sikhetha ukucwangciswa kommeli osisikhokelo kwaye sibeke i-IP yethu kunye ne-squid esetyenziswayo, kule meko ngo-3128. Khetha kwakhona "Sebenzisa ummeli ofanayo kuyo yonke into" kwaye uphume ugcine utshintsho.
Ndiyacela, Ungalibali ukushiya izimvo zakho, amathandabuzo okanye nantoni na oyifunayo ... Nangona sisifundo ngaphezulu kwe-squid, ndiyathemba ukuba iyakunceda.
enkosi!, luncedo.
(~ # ~) Kwakhona (~ # ~) kakhulu ikhutshelwe kakuhle kwisifundo esintsonkothileyo, ndihlala ndisithi "inqanaba lomsebenzisi: eliphakathi", kuya kufuneka uyazi umbono othile malunga "neenethiwekhi"
NGOKUZITHOBAYO ndicinga ukuba ukhetho lokumisela isikhangeli sethu ukusebenzisa i "proxy" kufuneka longezwe, kodwa njengoko oku kungena "INTSHAYELELO kwi-squid" siya kuyazi elandelayo? ukuhanjiswa (okokugqibela, kwaye nasemngciphekweni wokundicaphukisa, KHUMBULA ukuba "ungabameli" amaphepha ewebhu asebhankini kunye / okanye amaziko emali owasebenzisayo ekhayeni lakho okanye kwinkampani).
Molo, enkosi ngezimvo. Ewe, I-IPTABLES kunye ne-squid zinzima kakhulu ukwenza inqaku elichaza nzulu kwaye kuya kufuneka uzinciphise ukubeka imizekelo yemihla ngemihla ...
Kodwa unyanisile, ndiyongezile ngoku ukumisela ummeleli, bendiyicwangcisile kwaye ndilibale. Ngenxa yam.
Ndiyabulisa kwaye ndiyabulela !!
Uffff "umboko" uxolisa ngokungayiqondi eyona nto iphambili:
QALA INKONZO :-( ngaphandle kwalonto "akekho umakazi wakho" -ndixolele ngentetho eqhelekileyo- UKWANDISWA KWEZEMPUMELELO! 8-)
{ukuyenza ilungiswe kwisiqalo ngasinye kukutshintsha i "/ sbin / init":
http: // www. ubuntu-es.org/node/ 13012 # .Vsr_SUJVIWw}
{enye indlela elula yokusebenzisa "uhlaziyo-lwe-rc.d"
https: // parbaedlo. wordpress.com/201/3/03 / ukuseta-ukuqala-kunye nokuyeka iinkonzo-ze-linux-uhlaziyo-rc-d /}
Ndongeze izithuba kwikhonkco, zisuse kwaye uza kuhamba ;-)
ENKOSI KAKHULU NGENKCAZO YAKHO.
IINKCUKACHA ZE-LINUX: Ukuhlaselwa kweLinux Mint: ukosulela abafaki kunye nokunciphisa iziqinisekiso zomsebenzisi
http://www.muylinux.com/2016/02/21/ataque-a-linux-mint
Sele ndiyipapashile, kodwa musa ukugaxekile amanye amaphepha apha nceda
Iindaba zeAndroid: GM Bot, i-Android iTrojan evela kuyo iMazar
http://www.redeszone.net/2016/02/21/gm-bot-el-troyano-para-android-del-que-deriva-mazar/
Molo uJimmy, uyenza njani into yokuba iskwidi singakhangeli la maphepha? Kuya kuba kuhle ukuba uphawule kukhetho oluselubala, olunqanda ukusilela kokumisela ummeleli kwikhompyuter nganye
Umbuzo olungileyo, ndiyifakile iCAPTCHA kwisoftware yasimahla kumaphepha ewebhu abaxhasi bam:
(http: // www. ks7000. net. ve / 2015/04/03 / un-captcha-kulula-kwaye-kulula-ukumilisela /
-Humily, ayisiyo "spam" okanye ukuzinyusa, kufanelekile
kwaye ndicinga ukuba xa usebenzisa i-squid le mifanekiso AKULAYI ukulayishwa kwakhona kuba ndibeka igama elifanayo kubo -ea, ndinokuvelisa amagama angacwangciswanga, khange ndiyicinge loo nto, kude kube ngoku- kwaye ngokuba negama elifanayo, i-squid ibuyisela oko inayo "cache."
Ngokucacileyo owona msebenzi uphambili we «proxy» kukugcina i-bandwidth kunye nemifanekiso-eyona inzima kwiphepha lewebhu- [i] ekucingeni ukuba le mifanekiso i-static, ayitshintshi ngokuhamba kwexesha, okuyinyani kwi-99% amatyala [/ i].
Kodwa kwii-CAPTCHA, ekubeni "kungabikho kusebenza", kufuneka sisuse ukugcinwa kwayo kwangaphambili kwaye sihlale sibuyisela umfanekiso omtsha.
NGOKUBA IBHANKI, ndiyayiqonda eyona inkulu eSpain yile «Caixa» kuba sizakwenza umgaqo:
I-acl caixa dstdomain .lacaixa.es
phi:
Umyalelo we-acl -> wokwenza umthetho (funda inqaku lika-Isaac, imihlathi engentla).
caixa -> lawula igama.
dtsdomain -> "uhlobo" ukhetho ukubonisa ukuba sibhekisa kwisizinda, IBALULEKILE ichaphaza ekuqaleni ( http://ww w. ukusombulula. com / squid / squid24s1 / ukufikelela_controls.php)
i-domain (s) -> Ndicinga ukuba sinokongeza imimandla esiyifunayo, eyahlulwe sisithuba; Ukuthetha ngezithuba ndizifakile kwiikhonkco zewebhu ezibonisiweyo, zisuse kwaye uya kuhambahamba (amaphepha esiNgesi).
Ndiyathemba ukuba ulwazi oluvezwe apha luluncedo kuwe, enkosi LinuxAdictos!
KULUNGILE, ukuphendula umbuzo we-TRANSPARENCY kwi-squid KWAKHONA ndinyanzelisa ukuba kufuneka ube nolwazi oluphakathi kwinqanaba kwaye ngenxa yezizathu zokuba ndiza kushwankathela inqaku elilandelayo (ngesiNgesi) endicinga ukuba lithetha kakuhle ngalo mbandela:
http: // ww w.deckle.co. uk / squid-abasebenzisi-isikhokelo /transparent-caching-proxy.html
Inqaku:
-Ndongeze izithuba kumakhonkco ukuphepha i-pingback kum (andinanto yakwenza neqela). Linux Adictos, ngoko ke andigunyaziswanga ukuba ndenze isenzo esixeliweyo).
-LOKU NGOKUSEBENZISWA KWEENKQUBO Bendingazi! (khange bandifundise, nditsho).
-Ndikunceda nina bantu ndiyazinceda nam, oku kupholile ngobungakanani! ?
Ewe, xa kuthiwe, masihle siye kwishishini:
NDICetyise nje Mnumzana u-Isaac ukuba andise ekuqwalaseleni izikhangeli zethu nge proxy efakiweyo kwaye wenza ngobubele (wow, lendoda ilifumana phi ixesha lokwenza izinto ezininzi kangaka?).
Ngaphantsi kwesi sikimu, ukusetyenziswa kwe-squid KUYAZIKHETHA: umsebenzisi ngamnye womnatha wengingqi yethu uya kuba noxanduva lokwenza umsebenzi wakhe, kodwa ungabheja «isilivere nzima ngokuchasene nepesetas yephepha» ukuba kukho «bash script» enokufakwa ngeSSH kwiikhompyuter ezahlukeneyo ezisebenzisa i-GNU / Linux.
IMFUNEKO: ukuba iserver yethu ye-squid isebenza njengoko u-Isaac efundisa kule posi, ukuba sele siyivavanyile kwaye sibeka "umthwalo womsebenzi" kuyo kwaye isebenza kakuhle, singaqhubeka ukuya phambili.
PHANTSI KWESIKIM SEZOTHUTHO:
YOKUQALA.- I-squid yethu kufuneka ibe yindlela emiselweyo "isango" kwi "eth0" yethu okanye "wlan0" - uyalikhumbula ulwazi olukumgangatho ophakathi?
http: // en.wikipe dia.org/wiki/ Dynamic_Host_Configuration_Protocol).
Kuya kufuneka sicwangcise ukumisela, kwimeko yokusilela, siphinde sihambise zonke izithuthi kwiimodem (zethu) ngokuthe ngqo ukuba i-squid- ikhompyuter apho ibaleka-igcwele ngumthwalo wayo-kwaye usebenzise imodem (s) uhlobo "ibhulorho" ukuze bayaphuma ngaphandle, oku kuphunyezwa ngokwenza "iscript" esikhutshiweyo kumsitho othe waqwalaselwa kwaye iseva yethu ye-DHCP -emele ukufakwa kwikhompyuter eyahlukileyo kuneyeScid- yethu.
QAPHELA: ikhompyuter yethu ene-squid iya kuhlala ixhomekeke kwidilesi ye-IP kwi-DHCP KODWA kwangaxeshanye iya kuba "nolawulo" kunye neseva ye-DHCP. Ukuba ufuna ukusebenza ngeedilesi ze-IP ezisisigxina, zamandla, unako, kodwa xa usongeza ezinye iikhompyuter OKANYE UTSHINTSHA ezinye kuyakufuneka uphinde uzilungiselele kwaye ayisiyongcamango (funda ngovuyo:
ht tps: // pheno barbital. wordpress.com/2012/07/23/the-12-reasons-by-who-a-administrator-of-systems-lazy-is-a-good-administrator/)
(~ # ~) Enye (~ # ~) QAPHELA (jonga inqaku lesibini): iimodem (s) zethu kunye / okanye izixhobo zerouter kufuneka zingasebenzi umsebenzi we-DHCP kwaye zilawulwa ngumncedisi wethu weDCHP (-Ndikuqinisekisa ukuba olunye ungeno luphuma kule nto ukusibonisa indlela enyuka ngayo uthe inkonzo-)
Okwesibini.- Kuya kufuneka sihluze ukugcwala kwiseva yethu ye-squid, oku ukuba sinemizila eliqela esasazekileyo egubungela indawo yenethiwekhi engenazingcingo "i-wifi", iseyinethiwekhi yendawo kodwa inobungakanani obuphakathi. Ngokuyintloko iyafana nenqaku lokuqala KODWA ukuba sinezixhobo ezahlukeneyo OKANYE IZINIKI, kufuneka sizilungiselele nazo, ke lumka kunye nathi basebenza "ukutyumza iintsimbi" kwiinkampani ezinkulu.
THIRD.- Kwi-GNU / Linux yethu ebamba i-squid kufuneka sihambise kwakhona amazibuko kwaye siqwalasele i "firewall" (funda inqaku elidlulileyo IPTables
http://www.linuxadictos.com/introduccion-a-iptables-configura-un-firewall-en-linux.html )
iptables -t nat -A UKUFUNDA -p TCP-ingxelo 80 -j REDIRECT-ukuya kwizibuko 3128
nakwi-IPFW:
/ sbin / ipfw yongeza 3 fwd 127.0.0.1,3128 tcp nakweyiphi na ukuya kuma-80
Akufuneki ukuba sithi, ASINAKUQHUBA ukuqhuba i-Apache okanye i-Ngix server kwelo zibuko 80 -izibuko elingagqibekanga lamaphepha ewebhu- IINKCUKACHA EZIQHELEKILEYO azibeki umthwalo ongaphezulu kwikhompyuter yethu nge-squid exhomekeke kwisithuba sediski se «cache».
LESINE.- Kuya kufuneka simisele iserver yethu yeSkid kwaye siyixelele ukuba isebenza kuloo ndlela ngokuguqula "/etc/squid/squid.conf" kunye nano okanye umhleli owuthanda kakhulu:
http_port 3128 elubala
Kufuneka senze ukuba ukuhanjiswa kwepakethi kusebenze "/etc/sysctl.conf":
net.ipv4.ip_forward = 1
net.ipv6.conf.all.forwarding = 1
Umgca wokugqibela ukuba sine-IPv6, kulungile ukuba siwuqwalasele kube kanye kwixesha elizayo.
Okokugqibela qala inkonzo ye-squid njengoko kucetyisiwe nguMnu u-Isaac apha ngasentla kwaye uqalise inkonzo yenethiwekhi:
/etc/init.d/procps.sh qala kwakhona
OLUNYE UKHOLO LWE-ERRATA (okanye ububhanxa bam) ndazise ngale ndlela inye, ukugxeka kwakho kunye nezimvo zamkelekile;
MR. UISAKU NGUYE U-MODERATOR oya kuba nelizwi lokugqibela kulo "mlo."
Kule vidiyo imfutshane sinokubona ukuba iMozilla ingasetyenziselwa njani ukusebenzisa iseva yommeleli, ngaphandle kokuba isebenzisa umatshini oqinisekileyo ngeReactOS, kodwa imfutshane kwaye ndicinga ukuba ILLUSTRA Yenza le nto ufuna ukuyenza apha (ikhonkco likhubazekile ngezithuba, zisuse kwaye ukhangele):
ht tps: / / www. Youtube. com / ukubukela? v = st47K5t7s-Q
Ndiqala nje ukulandela isikhululo sakho sikanomathotholo, bendineentsuku ezimbini ... kwaye ndinomxholo olungileyo ..
Imibuliso evela eMexico .. (Ndingutitshala kwaye ingqolowa yam yesanti isebenzisa izibonelelo)
Ndingathanda ukuba undincede ndifuna ukunika ilungelo kumsebenzisi ukuba abone i-Facebook kwaye abanye banemiqobo esele iqulunqiwe kunye nendlela yokwenza abasebenzisi be-Intanethi ngamanye amaxesha ndingathanda ukuba undicebise, enkosi
Ari, into abandicacisele yona ngayo kukuba umatshini owufunayo awuthintelwanga, kufuneka ushiywe ngaphandle, kodwa kude kube lelo xesha ndinenkcazo, ndinamava ngalo mbandela
Ubusuku obuhle, uxolo, mhlawumbi umbuzo wam usisiseko kodwa hey, ndiyifakile iskwidi kwaye ndiyilungiselele kwi-centos 5.4, ndifake iwayini kunye ne-ultrasurf, into endizimisele ukuyenza kukwabelana nge-intanethi kwi-ultrasurf ne-squid, ndenza okufanayo kumatshini wewindows XP ngeFreeProxy kunye ne-ultrasurf kwaye ndingabelana ngayo ngaphandle kwengxaki kodwa andazi ukuba ndenze njani kwi-linux
Ndiyakucebisa, ndinokucwangciswa okufana nokwakho, kwimeko yam ndihambisa i-port 80 ukuya kwi-8080 apho i-squid ibaleka khona. Ingxaki kukuba abanye abasebenzisi bayalushiya oloqwalaselo kwiikhompyuter zabo, bayarhoxisa kwaye bafikelele kwizibuko lama-80, nangona ingezizo zonke iinkonzo. Oku ngee-iptables. Ngaba unayo nayiphi na ingcamango apho ingxaki iya kuba khona?
Iluncedo kakhulu kwaye ichazwe kakuhle. Enkosi!
Ndinombuzo, xa ndifuna ukwenza i-acl, ndiyenza phi, oko kukuthi, ngowuphi umgca wefayile yoqwalaselo? Kwaye kufanelekile ukuba ndibeke imigca emi-2 ngezantsi komyalelo we-http_access njengoko ubonakalisa kwiposti yakho? Okanye phi?
Enkosi kwakhona!! Ndiyabulisa!