Free Proxy Server using Squid Proxy on Linux Ubuntu Server Step by Step Guide


Free Proxy Server using Squid Proxy on Linux Ubuntu Server

Article about Intalling The Best Free Squid Proxy on Linux Ubuntu Server that can Optimising Web Delivery, reduces bandwidth and improves response times by caching. Find Premium Squid Proxy Server for Optimising Web Delivery, this article will explain How to Install Squid on your Ubuntu Machine

Why using Free Proxy Server using Squid Proxy on Linux Ubuntu Server and how to configure or instal it step by step, Like we know that squid proxy enable us to make internet access on our network more effectively and we can control an bandwith for our internet performance
  1. Why Installing Free Proxy Server using Squid Proxy on Linux Ubuntu Server Step by Step Guide
    1. How to Installing Free Proxy Server using Squid Proxy on Linux Ubuntu Server Step by Step Guide
    2. What is Access Control List (ACL) and How to Configure it
    3. Recomendation Free Proxy Server using Squid Proxy on Linux Ubuntu Server

-----------------------------------------------------------------------------------------------------------------------------
  1. Why Installing Free Proxy Server using Squid Proxy on Linux Ubuntu Server

    Squid Proxy is a caching and forwarding HTTP web proxy server. a reason variety of uses, including speed up a web server by caching repeated requests, caching web, DNS and other computer network lookups for a group of people sharing network resources.

    Squid is free open source proxy solution with premium solution, easy to use and maintenance. When you collaborate between squid proxy and linux ubuntu, it can save your IT budget and a great solution for your organization
    1. How to Installing Free Proxy Server using Squid Proxy on Linux Ubuntu Server Step by Step Guide

      In this section, i will show you step by step on how to configure or instal squid proxy on your linux ubuntu server. below for step by step :
      1. Open your ubuntu server terminal and run command
        sudo apt-get install squid
        then type "y" when prompt "do you want to continue?"

      2. If the process above has been finished, open your squid configuration file by run
        sudo nano /etc/squid3/squid.conf
        or
        sudo nano /etc/squid/squid.conf
        for makesure that your squid proxy has been instal on your linux ubuntu machine

      3. Last test For makesure your squid has been run, just configure your browser by fill an proxy server IP Address or FQDN (need to register on DNS) and port to 3128 (default squid proxy port number), on screenshoot below run on Mozilla Firefox

      4. If you can browse to internet or getting error message from your squid proxy machine. Congratulation, you had finish intal squid proxy on your linux ubuntu server

      5. The next step you we will learn about Access Control List (ACL) for create policy on your squid proxy server
    2. What is Access Control List (ACL) and How to Configure it

      ACL or Access Control List is configuration code where give you ability for controlling as your policy on organization, whatever you need to controll just create and ACL and declare it. Below a little sample for introduction :
      1. Open your squid proxy configuration file by run command
        sudo nano /etc/squid3/squid.conf

      2. Sample of ACL Configuration Parameter

        • ACL by IP Address
          This sample used Class A IP Address, you will configure which IP will allow used squid network, by default format for acl is acl your-acl-name src your-ip-address/whatever-subnet-you-need  see picture below for detail :



          Then configure for open access to these IP by running below command, by default command format http_access deny acl_name / http_access allow acl_name


        • ACL by Office Hour
          This method will prevent accessing internet from proxy on weekdays and spesific hour



          scenario is prevent social media access as per acl above, on this scenario we need created file where list which site will prevent access on acl above, below script creating file and format file


          Next, activate acl by running below command

        • ACL Port
          By Default acl port show below, but you can customize as you needed :

          acl SSL_ports port 443
          acl Safe_ports port 80 # http
          acl Safe_ports port 21 # ftp
          acl Safe_ports port 443 # https
          acl Safe_ports port 70 # gopher
          acl Safe_ports port 210 # wais
          acl Safe_ports port 1025-65535 # unregistered ports
          acl Safe_ports port 280 # http-mgmt
          acl Safe_ports port 488 # gss-http
          acl Safe_ports port 591 # filemaker
          acl Safe_ports port 777 # multiling http
          acl CONNECT method CONNECT


          Below declare parameter :
          http_access deny !Safe_ports (all port will denied for access except acl name "safe_ports", argument "!" as exception)

        • ACL Mac Address
        • Below sample paramater and argument
          acl block_mac arp 01:23:45:AB:CD:EF
          http_access deny block_mac

      Below my sample code :
      ######################################
      #
      # Sample Script
      # Created by http://www.diarysysadmin.com
      # SQUID PROXY CONFIGURATION
      #                      
      ######################################
      # ACL BASED ON IP ADDRESS
      acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
      acl localnet src fc00::/7       # RFC 4193 local private network range
      acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines
      #
      # >> ACL BASED ON WORKDAYS AND WORKTIME
      acl jam_kerja time MTWHF 07:00-11:30
      acl jam_kerja time MTWHF 13:00-16:00
      #
      # >> ACL BASED ON PORT
      acl SSL_ports port 443
      acl Safe_ports port 80          # http
      acl Safe_ports port 21          # ftp
      acl Safe_ports port 443         # https
      acl Safe_ports port 70          # gopher
      acl Safe_ports port 210         # wais
      acl Safe_ports port 1025-65535  # unregistered ports
      acl Safe_ports port 280         # http-mgmt
      acl Safe_ports port 488         # gss-http
      acl Safe_ports port 591         # filemaker
      acl Safe_ports port 777         # multiling http
      acl CONNECT method CONNECT
      #
      # >> ACL Deskripsi MAC Address
      acl boss arp B8-CA-3A-C7-E5-7E    # Format Mac Address
      #
      # >> ACL Deskripsi Content
      acl temporary dstdomain "/etc/squid3/deny_temporary.txt"
      acl permanen dstdomain "/etc/squid3/deny_permanen.txt"
      #
      # ALL ARGUMENT START HERE
      #
      # >> ACL PORT ARGUMENT
      http_access deny !Safe_ports
      #
      # >> DEFAULT SQUID PORT
      http_port 3128
      #
      # >> SQUID ACCESS ARGUMENT
      http_access allow localnet #OPEN ACL IP ADDRESS
      http_access allow boss #OPEN ACL MAC ADDRESS
      http_access deny temporary jam_kerja #OPEN ACL ON WORKDAYS
      #
      # >> End Rule Semua Content Yang Tidak Dijelaskan Diatas
      http_access deny all #ALL NOT DEFINED ABOVE WILL BLOCK ACCESS TO SQUID
      #
      ######################################
      #
      # Sample Script
      # Created by http://www.diarysysadmin.com
      # SQUID PROXY CONFIGURATION
      #                          
      ######################################
    3. Recomendation Free Proxy Server using Squid Proxy on Linux Ubuntu Server

      Using squid as proxy server is very recommended, free tools with a great feature and advantages. Below a few advantages using squid as your proxy server :
      • Economic
        You can save your budget, you can save your cost since squid proxy is a free tools
      • Monitoring
        You can monitor what user most visited and how much bandwith you needed at your company
      • Availability
        Since a resource is very small and simple, you can create second squid proxy server as backup. When your old server damage, just un-plug your old server network cable and re-plug to your backup server
      • User Experience
        Your user would think "amazing !!! an connection very fast !!!" since squid proxy do caching system on background
      • Security
        You can configure an policy as your organization needed related internet connection access
Very easy enough, if you liked this article please share and subscribe for get update a new article. If you have any questions please leave your message through the comments form below, I will respond as soon as possible

** Note : Pay attention to every detail steps that informed, failure or damage to your system or data is not my responsibility "Do With Your Own Risk" or you can do research through the Lab to minimize your system failure

Comments

  1. Thanks so much with this fantastic new web site. very fired up to show it to anyone. It makes me so satisfied your vast understanding and wisdom have a new channel for trying into the world. privacyonline

    ReplyDelete
  2. The most effective means bring in some form of e-book and enjoy this almost from anywhere is during the entire fascinating process involving mp 3 mp3 audio books. The true sound e-book outlets that always one thinks of as rapidly as. privacyenbescherming

    ReplyDelete
  3. I am happy to find your distinguished way of writing the post. Now you make it easy for me to understand and implement the concept. Thank you for the post. weneedprivacy

    ReplyDelete
  4. Great write-up, I am a big believer in commenting on blogs to inform the blog writers know that they’ve added something worthwhile to the world wide web!. schweiz vpn

    ReplyDelete
  5. Most of the proxies are used in daytime to browse anonymously. Anonymous browsing feature encourages working men to chat and participate in social websites during their working hours. proxy service

    ReplyDelete
  6. Thank you again for all the knowledge you distribute,Good post. I was very interested in the article, it's quite inspiring I should admit. I like visiting you site since I always come across interesting articles like this one.Great Job, I greatly appreciate that.Do Keep sharing! Regards, bezoek website

    ReplyDelete
  7. A key element of web based business is the comfort of having buys conveyed legitimately https://prywatnoscwsieci.pl

    ReplyDelete
  8. I like this post,And I figure that they having a great time to peruse this post,they might take a decent site to make an information,thanks for sharing it to me. internetet securite website

    ReplyDelete

Post a Comment

Popular posts from this blog

Article Configure VMware vCenter Appliance 5.5 (VCSA) Step by Step Guide using OVF Template

Overview VMware vCenter Converter Standalone Step by Step Guide