I-squid esinye isihlungi sezinga lohlelo lokusebenza engagcwalisa ama-iptables. I-squid yiseva yommeleli wewebhu efakwe kunqolobane, ithandwa kakhulu futhi imahhala, futhi iyi-platform yesiphambano. Yize ingasetshenziselwa ukuthuthukisa ukusebenza koxhumano lwe-Intanethi, ingasetshenziselwa nezinhloso zokuphepha. Selokhu iphrojekthi yaqala ngama-90s, iSquid ibisithuthuke kakhulu futhi manje sesiyethula kuwe ukuze wazi ukuthi ungayisebenzisa kanjani.
Okokufaka kwakho, ungafinyelela ifayela le- iwebhusayithi esemthethweni yephrojekthi bese ukhetha amaphakheji kanambambili wohlelo lwakho lokusebenza noma ukusatshalaliswa. Uma ufuna ukuyifaka kusuka kwiphakethe lekhodi yomthombo ngokuhlanganisa, futhi unenketho leyo. Ama-tarballs atholakalayo yi-tar.gz, tar.bz2, ne-tar.xz. Uma ungazi ukuthi ungafaka kanjani, ungaya ku-athikili esiyihlela kule blog mayelana ungayifaka kanjani noma iyiphi iphakethe kusuka ku-linux. iso! Uma une-Debian noma isuselwe futhi ubonile ukuthi ifakiwe ngeSudo "apt-get install squid", ungathola iphutha, ngoba kufanele ufake u- "squid" ufake "squid3" ukuze iqale ukusebenza .. .
Manje siya ngqo esenzweni sichaza ezinye izibonelo zendlela yokusebenzisa i-Squid ukuvikela imishini yethu. Ngaphambi kokuthi ngithande ukuchaza ukuthi i-squid isuselwa kuma-ACL, okusho ukuthi, ku-Access Control List noma kuhlu lokulawula ukufinyelela, okungukuthi, lubala imininingwane yezimvume zokulawula kuleli cala ukugeleza kwenethiwekhi nokusebenzisa izihlungi ezifana nalezo ze-iptables kodwa ezingeni lesicelo.
Imvamisa, ngemuva kokufakwa, kufakwa ifayela lokumisa elingatholwa ku- /etc/squid3/squid.conf futhi yilokhu okumele sikuhlele ngomhleli ofana nano noma gedit. Kuyo singakhiqiza imithetho yethu yokuhlunga, noma kukhona izinketho cache_dir, cache_mem kanye http_port, sizosebenzisa eyokugcina kwimithetho yethu yokuphepha. Enye imininingwane ukuthi leli fayela licacisa imbobo ezenzakalelayo esetshenziswa isevisi ye-Squid, ngokuzenzakalela engu-3128 (bona ulayini noma inkomba "http_port 3128" bese ususa i- # ukuyenza isebenze). Uma ufuna ungayishintshela kwelinye itheku elifana no-8080 ... Futhi enye into edingekayo ukulungiselela igama lomethuleli, funa ukuphawula "TAG: Visible_hostname" futhi uzobona umugqa "visible_hostname" lapho kufanele ubeke khona igama lakho igama lomethuleli.
Ukwazi igama lakho lomethuleli, ungathayipha ukuphela:
hostname
Futhi igama elivelayo uyalifaka kulayini okungafanele landulelwe ngu- # ukuze linganakwa njengamazwana. Okusho ukuthi, kungabonakala kanjena:
igama_ligama lomethuleli_lokuvela_lakho
Uma ubona ifayela lokumisa, uzobona ukuthi liphawulwe kakhulu, uma ufuna ukubhala ngaphezulu umthetho owenziwe, ungaqala umugqa ngo- # bese uyiguqula ibe ngamazwana, lapho i-squid iwushaya indiva ngayo, ukuyibuyisela ekusebenzeni, ususa i- # futhi yilokho kuphela. Eqinisweni, kunemithetho eminingi edaliwe futhi ephawuliwe ongayisebenzisa ngokususa i- #. Ngakho-ke akudingeki ususe futhi ubhale kabusha imithetho. Yebo, ukufaka umthetho noma isihlungi esithile, kufanele kube ne-ACL kanye nomhlahlandlela okhombisa ukuthi wenzeni.
Ngendlela, lapho ususa i- # ukwenza kusebenze umthetho, qiniseka ukuthi awushiyi izikhala ekuqaleni kolayini. Isibonelo:
Indlela engalungile:
http_port 3128
Indlela elungile:
http_port 3128
Awuzwanga lutho na? Ungakhathazeki, nge Isibonelo uzobona konke kangcono kakhulu. Cabanga ngalokhu:
i-acl ivimba i-url_regex njenge-facebook
http_access ukuphika ukuvimba
Kusho ukuthini lo mthetho ukuthi i-acl enegama elithi "ukuvimba" izovimbela ukufinyelela ku-URL equkethe "i-facebook" (ngakho-ke uma sizama ukungena ku-Facebook izokweqa iphutha kusiphequluli). Uma esikhundleni sokuthi "uphike" usebenzisa "vumela", uzovumela ukufinyelela esikhundleni sokukuvimbela. Ungasebenzisa futhi i-! Ukukhipha, ngokwesibonelo, ake sithi ufuna ukuvumela ukufinyelela kuhlu1 kepha hhayi uhlu2:
http_access allow lista1 !lista2
Esinye isibonelo kungaba ukudala ifayili / njll / squid3 / ips kuvunyelwe futhi kuyo ugcine uhlu lwama-IP esifuna ukuvumela ukufinyelela kuwo. Isibonelo, ake sithi okuqukethwe kwama-ips avunyelwe yilawa:
192.168.30.1
190.169.3.250
192.168.1.26
Futhi-ke sakha i-acl ukuvumela ukufinyelela kulawa ma-IP:
acl nuevaregla src "/etc/squid3/ipspermitidas"
Isibonelo esisebenzayoCabanga ukuthi ikhompyutha yakho isetshenziswa yizingane ezingaphansi kweminyaka engu-18 futhi ufuna ukunqanda ukufinyelela kumasayithi athile wokuqukethwe kwabantu abadala. Into yokuqala ukudala ifayili elibizwa nge- / etc / squid3 / list Okuqukethwe:
omdala
porn
sex
i-poringa
Futhi manje ku ifayela le-squid.conf sibeka umthetho olandelayo:
acl denegados url_regex "/etc/squid3/lista" http_access allow !denegados
Njengoba ubona sisebenzise i-allow okuwumgomo ukuvumela, kepha uma ubheka sengeze! ukwenqaba, ngakho-ke, kuzolingana nokubeka:
acl denegados url_regex "/etc/squid3/lista" http_access deny denegados
Ungakha futhi uhlu, hhayi kuphela lwamagama wesizinda noma ama-IP njengoba senzile, ungabeka futhi izizinda futhi ngokwesibonelo khawulela ukufinyelela ezizindeni ezinjenge .xxx, .gov, njll. Ake sibheke isibonelo esisuselwa kumthetho odlule. Sakha izizinda zefayela / etc / squid3 /
.edu
.es
.org
Futhi manje umthetho wethu, ukwenqaba ukufinyelela kuhlu lwamasayithi angavumelekile esiwakhayo, kepha sivumela ukufinyelela kuma-URL analezi zizinda:
acl denegados url_regex "/etc/squid3/lista" acl permitidos dstdomain "/etc/squid3/dominios" http_access allow !denegados dominios
UKWANDA:
Uxolo, lapho ngibona imibono ngakubona lokho Kade ngiphuthelwa into esemqoka. Ngizilinganisele ekubekeni izibonelo zokuthi isetshenziswa kanjani futhi ngikhohliwe ukusho lokho ukuqala iseva ye-squid:
sudo service squid3 start
Ngaphambi kokuthi ivuke ne "/etc/init.d/squid start", kepha manje kufanele usebenzise lo omunye umugqa engikubekele wona. Njengoba nefayela lokumisa lingasekho ku- /etc/squid/squid.conf, kepha ku- /etc/squid3/squid.conf. Kulungile, uma izinqubomgomo zokuhlunga sezenziwe, futhi siziqala, kufanele futhi silungiselele isiphequluli, isibonelo, uma usebenzisa iMozilla Firefox noma okuphuma kukho, ungaya kwimenyu yokumisa (uyazi, imigoqo emithathu), bese Okuncamelayo, Okuthuthukile, nakwithebhu Yenethiwekhi, chofoza Ukucushwa kusigaba Sokuxhuma. Lapho, sikhetha ukumiswa kommeleli we-Manual bese sibeka i-IP yethu kanye nechweba elisetshenziswa yi-Squid, kulokhu 3128. Futhi khetha "Sebenzisa ummeleli ofanayo kuyo yonke into" bese uphuma ulondoloza ushintsho.
Ngiyacela Ungakhohlwa ukushiya imibono yakho, ukungabaza noma yini oyifunayo ... Yize kuyisifundo kude ne-squid, ngithemba ukuthi iyakusiza.
ngiyabonga!, usizo.
FUTHI sifingqiwe kahle isihloko esicishe sibe yinkimbinkimbi, ngilokhu ngithi "ileveli yomsebenzisi: ephakathi", kufanele wazi eminye imibono mayelana "namanethiwekhi".
NGITHOBEKILE ngicabanga ukuthi inketho yokulungiselela isiphequluli sethu ukusebenzisa i- "proxy" kufanele ingezwe, kepha njengoba lokhu kungena "ISINGENISO ku-squid", sizokwazi okulandelayo? ukulethwa (ekugcineni, nangokuzibeka engcupheni yokungicasula, KHUMBULA ukuthi 'ungammeleli' amakhasi ewebhu asebhange kanye / noma izikhungo zezezimali ozisebenzisa ekhaya lakho noma enkampanini).
Sawubona, ngiyabonga ngemibono. Yebo, i-IPTABLES ne-squid zikhulu kakhulu ukwenza i-athikili ebachaza ngokujulile futhi kufanele uzilinganisele ekubekeni izibonelo zansuku zonke ...
Kepha uqinisile impela, ngingeze manje ukumisa ummeleli, bengikuhlelile ngakhohlwa. Iphutha lami.
Sanibonani futhi ngiyabonga !!
Uffff "trunk" ngiyaxolisa ngokungaboni into esemqoka:
QALA INKONZO :-( ngaphandle kwalokho «akekho ubabekazi wakho» -ingixolele ngenkulumo evamile- UKWANDA OKUPHUMELELAYO! 8-)
{ukukwenza kulungiswe ebhuthini ngalinye ngokuguqula "/ sbin / init":
http: // www. ubuntu-es.org/node/ 13012 # .Vsr_SUJVIWw}
{enye indlela elula ukusebenzisa i- "update-rc.d":
https: // parbaedlo. wordpress.com/201/3/03 / ukusetha-ukuqala-nokuma-kwezinsizakalo-linux-update-rc-d /}
Ngingeze izikhala kuzixhumanisi, zisuse futhi uzozulazula ;-)
NGIBONGA KAKHULU NGOKUNAKEKELA KWAKHO.
IZINDABA ZE-LINUX: Ukuhlaselwa kweLinux Mint: ukuthelela abafaki nokuyekethisa iziqinisekiso zomsebenzisi
http://www.muylinux.com/2016/02/21/ataque-a-linux-mint
Sengivele ngiyishicilele, kepha ngicela ungabi ugaxekile amanye amakhasi lapha
IZINDABA ZE-ANDROID: GM Bot, iTrojan le-Android okususelwa kulo iMazar
http://www.redeszone.net/2016/02/21/gm-bot-el-troyano-para-android-del-que-deriva-mazar/
Sawubona Jimmy, Wenza kanjani ukuze i-squid ingakusheli lawo makhasi? Kungaba kuhle uma uphawula kunketho esobala, evikela isicefe sokumisa ummeleli kukhompyutha ngayinye
Umbuzo omuhle, ngifake i-CAPTCHA kwisoftware yamahhala kumakhasi ewebhu amaklayenti ami:
(http: // www. ks7000. net. ve / 2015/04/03 / un-captcha-easy-and-simple-to-implement /
-Humily, AKUSIYO "ugaxekile" noma ukuzinyusa, kufanele-)
futhi ngicabanga ukuthi lapho ngisebenzisa i-squid lezi zithombe AKULAYISHIWE kabusha ngoba ngifaka igama elifanayo kuzo -ea, ngingakhipha namagama angahleliwe, bengingakacabangi ngalokho, kuze kube manje- nangokuba negama elifanayo, i-squid ibuyisa lokho inayo "kunqolobane."
Ngokusobala umsebenzi oyinhloko we- «proxy» ukusindisa umkhawulokudonsa nezithombe -isona sikhulu sekhasi lewebhu- [i] ngokucabanga ukuthi lezi zithombe zimile, aziguquki ngokuhamba kwesikhathi, okuyiqiniso ku-99% we amacala [/ i].
Kepha eCAPTCHA, njengoba "kungasekho ukugijima", kufanele siqede isitoreji sayo sangaphambilini futhi sihlale sibuyisa isithombe esisha.
MAYELANA NAMabhange, ngiyaqonda ukuthi enkulu kunazo zonke eSpain yi- «Caixa» ngoba sizokwakha umthetho oyisibonelo:
i-acl caixa dstdomain .lacaixa.es
kuphi:
acl -> umyalo wokwenza umthetho (funda indatshana kaMnu. Isaac, izigaba ezingenhla).
i-caixa -> igama lomthetho.
dtsdomain -> "thayipha" inketho ukukhombisa ukuthi sibhekisa kusizinda, OKUBALULEKILE ichashazi ekuqaleni ( http://ww w. ziphendule. com / squid / squid24s1 / access_controls.php)
ama-domain (ama) -> Ngicabanga ukuthi singangeza izizinda esizidingayo, ezihlukaniswe isikhala; ngikhuluma ngezikhala engizifakile kuzixhumanisi ezibonisiwe zewebhu, zisuse futhi uzozulazula (amakhasi ngesiNgisi).
Ngethemba ukuthi ulwazi olwethulwe lapha luwusizo kuwe, ngiyabonga LinuxAdictos!
KAHLE, ukuphendula umbuzo we-TRANSPARENCY ku-Squid FUTHI ngiyagcizelela ukuthi kufanele ube nolwazi olusezingeni eliphakathi futhi ngenxa yezizathu ezithile ngizofingqa ngangokunokwenzeka i-athikili elandelayo (ngesiNgisi) engicabanga ukuthi ikhuluma kahle ngale ndaba:
http: // ww w.deckle.co. uk / squid-abasebenzisi-umhlahlandlela /transparent-caching-proxy.html
Amanothi:
-Ngingeze izikhala kuzixhumanisi ukuze ngigweme ukungibuyisela emuva (angihlangene nhlobo neqembu). Linux Adictos, ngakho-ke angigunyaziwe ukwenza isenzo esishiwo).
- LOKHU MAYELANA NE-TRANSPARENCY BENGINGAZI! (abazange bangifundise, ngithi).
-Ukusiza nina bantu nami ngiyazisiza, lokhu kupholile ngobuningi! ?
Ngokusho lokho, ake siqale ibhizinisi:
NGIMPhakamise nje kuMnu u-Isaac ukuthi anwebe ekulungiseleleni iziphequluli zethu nge-proxy efakiwe futhi wenza ngomusa omkhulu (wow, lendoda isitholaphi isikhathi sokwenza izinto eziningi kangaka?).
Ngaphansi kwalolu hlelo, ukusetshenziswa kwe-squid KUYAKHETHA: umsebenzisi ngamunye wenethiwekhi yendawo yethu uzophatha ukwenza umsebenzi wakhe, kepha ungabheja «isiliva kanzima ngokumelene nepesetas yephepha» ukuthi kukhona «bash script» okungafakwa ngeSSH kumakhompyutha ahlukahlukene asebenzisa i-GNU / Linux.
OKUFANELE KWENZIWE: ukuthi iseva yethu ye-squid isebenza njengoba uMnu u-Isaac efundisa kulokhu okuthunyelwe, uma sesivele sikuhlolile sabeka "umthwalo womsebenzi" kuso futhi senza kahle, singaqhubeka siye phambili.
NGAPHANSI KWESIKIMU SOKUTHUTHA:
OKOKUQALA.- I-squid yethu kufanele ibe yindlela ezenzakalelayo "isango" ku- "eth0" yethu noma i- "wlan0" - uyalikhumbula ulwazi olusezingeni eliphakathi nendawo? -, siyalusungula lapho (kwenziwa ngokuzenzakalela ne-DHCP NGAKHO-ke futhi lungiselela iseva yensiza enjalo:
http: // en.wikipe dia.org/wiki/ Dynamic_Host_Configuration_Protocol).
Kumele sihlele ukumisa, uma kwenzeka kwehluleka, siqondise kabusha wonke amathrafikhi kumamodemu (ama) ethu ngqo uma i-Squid - ikhompyutha lapho isebenza khona - igcwele umthwalo wayo wokusebenza - bese usebenzisa uhlobo lwemodemu (ama) uhlobo "ibhuloho" ukuze baphumela ngaphandle, lokhu kutholakala ngokwenza "iskripthi" esivele kumcimbi osetshenzisiwe futhi silungiselela iseva yethu ye-DHCP -okufanele ifakwe kukhompyutha ehlukile kuneye-Squid- yethu.
QAPHELA: ikhompyutha yethu ye-squid izohlala incike kukheli layo le-IP kusuka ku-DHCP KODWA ngasikhathi sinye izoba nokulawula okuthile neseva ye-DHCP. Uma ufuna ukusebenza ngamakheli we-IP angaguquki, wamandla, ungakwazi, kepha uma ungeza amanye amakhompyutha NOMA UFAKA AMANYE amanye kuzofanele uphinde umise futhi akuwona umqondo (funda ngokujabula:
ht tps: // pheno barbital. wordpress.com/2012/07/23/the-12-reasons-by-who-a-administrator-of-systems-lazy-is-a-good-administrator/)
OLUNYE QAPHELA (bona iphuzu lesibili): amamodemu ethu kanye / noma amadivayisi we-router kufanele enze kungasebenzi ukusebenza kwe-DHCP nokuthi aphethwe yiseva yethu ye-DCHP (- engikuqinisekisa ukuthi okunye okufakwayo kuvela kulokhu ukusikhombisa kusho isevisi-)
SECOND.- Kumele sihlunge ithrafikhi ebheke kwiseva yethu ye-squid, lokhu uma sinemizila eminingi ehlakazekile emboza indawo yenethiwekhi engenantambo "i-wifi", kuseseyinethiwekhi yendawo kodwa ngosayizi ophakathi nendawo. Empeleni iyafana nephoyinti lokuqala KODWA uma sinamadivayisi ahlukile NOMA NGOKWENZANA ama-subnet, nathi kufanele siwamise, ngakho-ke qaphela nalabo bethu abasebenza "ukuchoboza izinsimbi" ezinkampanini ezinkulu.
I-THIRD.- Ku-GNU / Linux yethu ebamba i-squid kufanele siqondise kabusha amachweba futhi silungiselele i- «firewall» (funda i-athikili edlule IPTables
http://www.linuxadictos.com/introduccion-a-iptables-configura-un-firewall-en-linux.html )
iptables -t nat -A PRREOUTING -p TCP -dport 80 -j REDIRECT -ukuya ethekwini 3128
naku-IPFW:
/ sbin / ipfw engeza i-3 fwd 127.0.0.1,3128 tcp kusuka kunoma iyiphi kunoma iyiphi i-80
Akudingeki ukuthi sisho ukuthi, ASikwazi ukusebenzisa iseva ye-Apache noma ye-Ngix kulelo port 80 -okuzenzakalelayo kwembobo yamakhasi ewebhu- I-COMMON SENSE INDICATES ukungafaki umthwalo omningi kukhompyutha yethu nge-squid -kuncike esikhaleni sediski se- "cache» -.
FOURTH.- Kufanele silungiselele iseva yethu ye-squid bese siyitshela ukuthi isebenza kuleyo modi ngokushintsha i- "/etc/squid/squid.conf" nge-nano noma isihleli osithanda kakhulu:
http_port 3128 okusobala
Kufanele futhi sikwazi ukunika amandla ukudluliselwa kwepakethe ku - "/etc/sysctl.conf":
net.ipv4.ip_forward = 1
net.ipv6.conf.all.forwarding = 1
Lo mugqa wokugcina uma sine-IPv6, kuhle ukuyilungisa kanye ngokuzayo.
Ekugcineni qala kabusha insizakalo ye-Squid njengoba kunconywe nguMnu. Isaac ngenhla bese uqala kabusha insiza yenethiwekhi:
/etc/init.d/procps.sh qala kabusha
OLUNYE UKHOLO LWE-ERRATA (noma umbhedo othile kimi) ungazise ngalo mzila ofanayo, ukugxeka kwakho nokuphawula kwakho kwamukelekile;
Mnu. U-ISAKU NGU-MODERATOR ozoba nezwi lokugcina kule "mpi."
Kule vidiyo emfushane singabona ukuthi singamisa kanjani iMozilla ukuthi isebenzise isiphakeli sommeleli, ngaphandle kokuthi isebenzisa umshini obonakalayo oneReactOS, kepha mfushane futhi ngicabanga ukuthi IMIFANEKISO ofuna ukuyilungisa lapha (isixhumanisi sikhutshazwe ngezikhala, basuse bese ubhekabheka):
ht tps: / / www. I-Youtube. com / watch? v = st47K5t7s-Q
Ngisanda kuqala ukulandela isiteshi sakho somsakazo, nginezinsuku ezi-2 .. nokuqukethwe okuhle kakhulu ..
Ukubingelela okuvela eMexico .. (Ngiwuthisha futhi inhlamvu yami yesihlabathi ukusebenzisa insiza evulekile)
Ngingathanda ungisize Ngifuna ukunika ilungelo kumsebenzisi ukuthi abone i-Facebook nokuthi abanye banemikhawulo esivele isilungisiwe nokuthi bangabanika kanjani amandla abasebenzisi be-Intanethi ngezikhathi ezithile engingathanda ungiluleke ngayo, ngiyabonga
Ari, abangichazele ngakho ukuthi umshini owufunayo awukhawulelwe, kufanele ushiywe ngaphandle, kodwa kuze kube yileso sikhathi ngiba nencazelo, nami anginalo ulwazi ngale ndaba
Ubusuku obuhle, ngiyaxolisa, mhlawumbe umbuzo wami uyinto eyisisekelo kepha hey, ngifake i-squid futhi ngiyilungiselele ku-centos 5.4, ngafaka iwayini ne-ultrasurf, engihlose ukukwenza ukwabelana nge-inthanethi kusuka ku-ultrasurf ne-squid, ngenza okufanayo Kumshini wewindows XP ngeFreeProxy ne-ultrasurf futhi ngiyakwazi ukuwabelana ngaphandle kwenkinga kepha angazi ukuthi ngikwenza kanjani ku-linux
Ngiyakuthinta, nginokucushwa okufana nokwakho, kimi ngithumela i-port 80 iye ku-8080 lapho kugijima khona i-squid. Inkinga ukuthi abanye abasebenzisi bashiya lokho kumiswa kumakhompyutha abo, futhi bafinyelele nge-port 80, noma kungezona zonke izinsiza. Lokhu ngama-iptables. Ngabe unawo umbono wokuthi inkinga ingaba kuphi?
Iwusizo kakhulu futhi ichazwe kahle. Ngiyabonga!
Nginombuzo, lapho ngifuna ukudala i-acl, ngiyenza kuphi, okungukuthi, ngikuluphi umugqa wefayela lokumisa? Futhi kufanele ngifake ngokushesha imigqa emi-2 ngaphansi komyalo we-http_access njengoba ukhombisa kokuthunyelwe kwakho? Noma kuphi?
Ngiyabona futhi!! Sanibonani!