Control Web Access With Squid - Revision history

Vang4450: moved HOW TO CONTROL WEB ACCESS WITH SQUID to Control Web Access With Squid

2010-05-10T23:58:17Z

moved HOW TO CONTROL WEB ACCESS WITH SQUID to Control Web Access With Squid

← Older revision	Revision as of 23:58, 10 May 2010
(No difference)

Vang4450: /* HOW TO CONTROL WEB ACCESS WITH SQUID */

2010-05-10T23:56:47Z

HOW TO CONTROL WEB ACCESS WITH SQUID

← Older revision		Revision as of 23:56, 10 May 2010
Line 1:		Line 1:
	~~==HOW TO CONTROL WEB ACCESS WITH SQUID==~~

	We are going to learn how to install and configure Squid on Ubuntu to restrict or allow web access on a network.		==Introduction==


			We are going to learn how to install and configure Squid on Ubuntu to restrict or allow web access on a network.

	== What is Squid? ==		== What is Squid? ==

Vang4450: moved Squid to HOW TO CONTROL WEB ACCESS WITH SQUID

2010-05-10T23:56:01Z

moved Squid to HOW TO CONTROL WEB ACCESS WITH SQUID

← Older revision	Revision as of 23:56, 10 May 2010
(No difference)

Vang4450: moved User:Vang4450 to Squid

2010-05-10T23:55:19Z

moved User:Vang4450 to Squid

← Older revision	Revision as of 23:55, 10 May 2010
(No difference)

Vang4450 at 02:37, 8 May 2010

2010-05-08T02:37:38Z

← Older revision		Revision as of 02:37, 8 May 2010
Line 3:		Line 3:
	We are going to learn how to install and configure Squid on Ubuntu to restrict or allow web access on a network.		We are going to learn how to install and configure Squid on Ubuntu to restrict or allow web access on a network.

	== I. What is Squid? ==		== What is Squid? ==

	Squid is a software that was developed by Duane Wessels as the Harvest object cache, part of the Harvest project at the University of Colorado at Boulder. The software was designed to run on Unix-like system, but it can also run on Windows-based system.		Squid is a software that was developed by Duane Wessels as the Harvest object cache, part of the Harvest project at the University of Colorado at Boulder. The software was designed to run on Unix-like system, but it can also run on Windows-based system.
	Squid is a proxy server and web cache daemon. It can be used to speed up a web server by caching repeated requests and aiding security by filtering traffic (Control when and which IP adresses can access the web). It is primarily used for HTTP and FTP but has limited support for TLS, SSL, Internet Gopher and HTTPS.		Squid is a proxy server and web cache daemon. It can be used to speed up a web server by caching repeated requests and aiding security by filtering traffic (Control when and which IP adresses can access the web). It is primarily used for HTTP and FTP but has limited support for TLS, SSL, Internet Gopher and HTTPS.

	== ~~II.~~ Install Squid on Ubuntu. ==		== Install Squid on Ubuntu. ==

	What can be done before installing Squid is to search for the software on your machine. To do so, log in as root, and enter the following commands:		What can be done before installing Squid is to search for the software on your machine. To do so, log in as root, and enter the following commands:
Line 31:		Line 31:


	== ~~III.~~ Starting Squid ==		== Starting Squid ==
	The chkconfig squid on command can be used to configure squid to start at boot.		The chkconfig squid on command can be used to configure squid to start at boot.

Line 63:		Line 63:


	== ~~IV.~~ The main configuration file ==		== The main configuration file ==
	The main configuration file for squid is squid.conf. This is where you would want to make changes so squid will behave the way you want. To access this file, enter the following command:		The main configuration file for squid is squid.conf. This is where you would want to make changes so squid will behave the way you want. To access this file, enter the following command:

Line 72:		Line 72:


	== V. Restricting Web access ==		== Restricting Web access ==
	You can create access control lists with time parameters. For example, you can allow only business hour access from the home network, while always restricting access to host 192.168.1.23.		You can create access control lists with time parameters. For example, you can allow only business hour access from the home network, while always restricting access to host 192.168.1.23.
	Enter the lines that begin with ACL at the bottom of the ACL section to restrict hour access.		Enter the lines that begin with ACL at the bottom of the ACL section to restrict hour access.
Line 88:		Line 88:


	== ~~VI.~~ Restricting access to specific web sites or domain ==		== Restricting access to specific web sites or domain ==

	We are going create 2 lists in files named /usr/local/etc/allowed-sites.squid and /usr/local/etc/restricted-sites.squid.		We are going create 2 lists in files named /usr/local/etc/allowed-sites.squid and /usr/local/etc/restricted-sites.squid.
Line 118:		Line 118:


	== ~~VI.~~ Restrict Web Access by IP Address ==		== Restrict Web Access by IP Address ==
	We can also create an access control list that restricts web access to user on certain networks. In this case, it's an ACL that defines a home network of 192.168.1.0		We can also create an access control list that restricts web access to user on certain networks. In this case, it's an ACL that defines a home network of 192.168.1.0

Vang4450 at 02:29, 8 May 2010

2010-05-08T02:29:45Z

← Older revision		Revision as of 02:29, 8 May 2010
Line 2:		Line 2:

	We are going to learn how to install and configure Squid on Ubuntu to restrict or allow web access on a network.		We are going to learn how to install and configure Squid on Ubuntu to restrict or allow web access on a network.


	== I. What is Squid? ==		== I. What is Squid? ==
Line 14:		Line 13:

	''root@ubuntu:~# '''aptitude search squid'''''		''root@ubuntu:~# '''aptitude search squid'''''


	If the command was successful, you should have a similar screen shot.		If the command was successful, you should have a similar screen shot.
Line 27:		Line 25:

	''root@ubuntu:~# '''aptitude install squid'''''		''root@ubuntu:~# '''aptitude install squid'''''


	The next screen shot assures us that Squid was installed successfully		The next screen shot assures us that Squid was installed successfully
Line 67:		Line 64:

	== IV. The main configuration file ==		== IV. The main configuration file ==

	The main configuration file for squid is squid.conf. This is where you would want to make changes so squid will behave the way you want. To access this file, enter the following command:		The main configuration file for squid is squid.conf. This is where you would want to make changes so squid will behave the way you want. To access this file, enter the following command:


	'''root@ubuntu:~# ''nano /etc/squid/squid.conf'''''		'''root@ubuntu:~# ''nano /etc/squid/squid.conf'''''


	*note that I am viewing the .conf file with nano.		*note that I am viewing the .conf file with nano.
Line 92:		Line 86:

	[[File:6.PNG]]		[[File:6.PNG]]


	== VI. Restricting access to specific web sites or domain ==		== VI. Restricting access to specific web sites or domain ==
Line 121:		Line 116:

	[[File:7.PNG]]		[[File:7.PNG]]


	== VI. Restrict Web Access by IP Address ==		== VI. Restrict Web Access by IP Address ==

Vang4450: /* VI. Restrict Web Access by IP Address */

2010-05-08T02:27:56Z

VI. Restrict Web Access by IP Address

← Older revision		Revision as of 02:27, 8 May 2010
Line 126:		Line 126:

	We just have to insert these lines below:		We just have to insert these lines below:

			acl home_network src 192.168.1.0/255.255.255.0

			http_access allow home_network



	[[File:8.PNG]]		[[File:8.PNG]]

Vang4450: /* VI. Restricting access to specific web sites or domain */

2010-05-08T02:26:49Z

VI. Restricting access to specific web sites or domain

← Older revision		Revision as of 02:26, 8 May 2010
Line 110:		Line 110:
	'''Step 3'''		'''Step 3'''
	We finally get to the part where you will use the files created to restrict or allow access. For that, include these highlighted lines at the end of the ACL part. (We kept the same parameters as before, just added the lines to restrict the sites/domain).		We finally get to the part where you will use the files created to restrict or allow access. For that, include these highlighted lines at the end of the ACL part. (We kept the same parameters as before, just added the lines to restrict the sites/domain).

			acl home_network src 192.168.1.0/24
			acl business_hours time M T W H F 9:00-17:00
			acl GoodSites dstdomain "/usr/local/etc/allowed-sites.squid"
			acl BadSites dstdomain "/usr/local/etc/restricted-sites.squid"

			http_access deny BadSites
			http_access allow home_network business_hours GoodSites


	[[File:7.PNG]]		[[File:7.PNG]]

Vang4450: /* VI. Restricting access to specific web sites or domain */

2010-05-08T02:25:22Z

VI. Restricting access to specific web sites or domain

← Older revision		Revision as of 02:25, 8 May 2010
Line 99:		Line 99:

	These will be the steps:		These will be the steps:

	'''Step 1'''		'''Step 1'''
	Create the 2 file lists that will include what site or domain we want to restrict (can be created by using touch).		Create the 2 file lists that will include what site or domain we want to restrict (can be created by using touch).
Line 111:		Line 112:

	[[File:7.PNG]]		[[File:7.PNG]]


	== VI. Restrict Web Access by IP Address ==		== VI. Restrict Web Access by IP Address ==

Vang4450: /* V. Restricting Web access */

2010-05-08T02:24:48Z

V. Restricting Web access

← Older revision		Revision as of 02:24, 8 May 2010
Line 82:		Line 82:
	Enter the lines that begin with ACL at the bottom of the ACL section to restrict hour access.		Enter the lines that begin with ACL at the bottom of the ACL section to restrict hour access.
	To restricT access to host 192.168.1.23, enter the lines that begin with HTTP at the top of the HTTP section (See screen shot).		To restricT access to host 192.168.1.23, enter the lines that begin with HTTP at the top of the HTTP section (See screen shot).

			acl home_network src 192.168.1.0/24
			acl business_hours time M T W H F 9:00-17:00
			acl RestrictedHost src 192.168.1.23

			http_access deny RestrictedHost
			http_access allow home_network business_hours


	[[File:6.PNG]]		[[File:6.PNG]]


	== VI. Restricting access to specific web sites or domain ==		== VI. Restricting access to specific web sites or domain ==