Squid for the smallest
Around the time comes, and every novice sysadmin examines new software packages to work. That time has come for Squid, I think you should not explain what it is, if you read it, then you already have an idea of ​​what a squid is and why it is needed!
Here once I also had to study these jungle of a config ... At first I thought that it simply couldn’t be configured, due to the large number of parameters. But over time, I realized that everything is already set up for normal operation. To distribute the Internet you just need to add
So these two magic points will do the following:
The first line Will create acl (Access Control List) with the name all for absolutely all ip-addresses.
The second will allow acl all access.
That's all, now everyone who will break into our proxy will be able to break into the Internet with impunity, although you can see who, where, and how much, but this topic is of a different article. But this can be avoided. Suppose you have a network 192.168.0.0/24. A server with a squid weighs on the address 192.168.1.1 it is generally not recommended to use in alllow !!!) and create, for example like this:
')
Now, everyone who is connected to the acl my_network can access the Internet.
If this is of interest to you, then wait for new articles from the series “Notes of a good-for-nothing admin” :)
Crosspost from my blog
Here once I also had to study these jungle of a config ... At first I thought that it simply couldn’t be configured, due to the large number of parameters. But over time, I realized that everything is already set up for normal operation. To distribute the Internet you just need to add
- acl all src 0.0.0.0/24
- http_access allow all
So these two magic points will do the following:
The first line Will create acl (Access Control List) with the name all for absolutely all ip-addresses.
The second will allow acl all access.
That's all, now everyone who will break into our proxy will be able to break into the Internet with impunity, although you can see who, where, and how much, but this topic is of a different article. But this can be avoided. Suppose you have a network 192.168.0.0/24. A server with a squid weighs on the address 192.168.1.1 it is generally not recommended to use in alllow !!!) and create, for example like this:
')
- acl my_network src 192.168.0.0/24
- acl all src 0.0.0.0/24
- http_access allow my_network
- http_access deny all
Now, everyone who is connected to the acl my_network can access the Internet.
If this is of interest to you, then wait for new articles from the series “Notes of a good-for-nothing admin” :)
Crosspost from my blog
Source: https://habr.com/ru/post/53542/
All Articles