Proxy

Information for Linux System Administration

Squid Proxy HowTo: Listen Pandora to In Europe

vote

I have Pandora Internet Radio One subscription, and recently I moved to Europe for a few months as part of my work schedule. The service fully available only in the United States. How do I access Pandora one service in Europe? Can I get around it by using a proxy server installed on my own server located in USA at home or ISP data center? read more...

permapage | score:9420 | -nixcraft, November 22, 2012

ssh: Use Linux as a SOCKS5 proxy

vote

Did you know you could use ssh to create a SOCKS5 server?

This article explains how to create a SOCKS5 server in 1 command and how to add ip-based access control to it via iptables and tcp forwarder. read more...

permapage | score:9156 | -pkrumins, May 7, 2010

Tutorial: Squid proxy server with DansGuardian, ClamAV, WPAD on Ubuntu 9.04

vote

This tutorial will demonstrate how to set up a Squid Proxy server on Ubuntu 9.04 Server with DansGuardian (for content filtering) and ClamAV (for Virus scanning); in addition, we will set up Web Proxy AutoDetection (WPAD) through DHCP (in this case, the Windows Server 2003 DHCP server) or DNS so that the only configuration necessary on the client side is to check "Auto-detect proxy settings for this network" in Firefox or Internet Explorer. At the end of the tutorial, users will have a fully functional and secure proxy for HTTP access. read more...

mail this link | permapage | score:9062 | -falko, July 3, 2009

Tutorial: nginx as a reverse proxy for Apache2 on Ubuntu 12.04

vote

nginx (pronounced "engine x") is a free, open-source, high-performance HTTP server. nginx is known for its stability, rich feature set, simple configuration, and low resource consumption. This tutorial shows how you can set up nginx as a reverse proxy on front of an Apache2 web server on Ubuntu 12.04. read more...

permapage | score:9058 | -falko, October 7, 2012

Using an ISA Proxy server in Linux

vote

NTLM (NT LAN Manager) is a Microsoft authentication protocol. It is used extensively in older versions of Windows, and Microsoft has embedded the NTLM authentication into several communication protocols, such as HTTP, POP3 and SMTP. One benefit of NTLM authentication is that Windows users can get transparent access through an ISA proxy server. While the proxy does require a username and password, IE will happily send the users current credentials without any additional prompt.

Linux users don't tend to be so lucky. Most web browsers will support NTLM authentication when using an ISA proxy, but there are some cases, like when using the proxy settings in OpenSuse 11.2, where the lack of support for NTLM can effectively prevent internet access.

Fortunately there is a fairly simple way around this limitation. A small Python utility called NTLM Authorization Proxy Server can be used to ferry internet traffic between the OS and a ISA proxy server. read more...

mail this link | permapage | score:8793 | -mcasperson, July 7, 2010

SQUID Proxy on RHEL5/CentOS

vote

The main feature or duty of a proxy server could be a gateway that receives HTTP requests from clients and forwards the request to the destination and relays the answer back to the requestor. Squid is most popular open-source software that brings this to us. It also has some excellent features for doing something else such as web access controlling, bandwidth controlling, restriction policies, and content caching and filtering. Actually people install SQUID to pursuit 2 goals: first reduce the bandwidth charges by content caching and second for restricting access to particular contents. The following guide explains advantages of using Squid and will show you how to install, configure, control, and maintain the Squid Proxy Server on RHEL5 and CentOS Linux. read more...

mail this link | permapage | score:8733 | -falko, December 21, 2011

HA load balancer with HAProxy/Keepalived on Debian

vote

This article explains how to set up a two-node load balancer in an active/passive configuration with HAProxy and keepalived on Debian Lenny. The load balancer sits between the user and two (or more) backend Apache web servers that hold the same content. Not only does the load balancer distribute the requests to the two backend Apache servers, it also checks the health of the backend servers. If one of them is down, all requests will automatically be redirected to the remaining backend server. In addition to that, the two load balancer nodes monitor each other using keepalived, and if the master fails, the slave becomes the master, which means the users will not notice any disruption of the service. HAProxy is session-aware, which means you can use it with any web application that makes use of sessions (such as forums, shopping carts, etc.). read more...

mail this link | permapage | score:8647 | -falko, June 17, 2009

Set up an HA load balancer with HAProxy, Wackamole, Spread on Debian

vote

This article explains how to set up a two-node load balancer in an active/passive configuration with HAProxy, Wackamole, and Spread on Debian Etch. The load balancer sits between the user and two (or more) backend Apache web servers that hold the same content. Not only does the load balancer distribute the requests to the two backend Apache servers, it also checks the health of the backend servers. If one of them is down, all requests will automatically be redirected to the remaining backend server. In addition to that, the two load balancer nodes monitor each other using Wackamole and Spread, and if the master fails, the slave becomes the master, which means the users will not notice any disruption of the service. HAProxy is session-aware, which means you can use it with any web application that makes use of sessions (such as forums, shopping carts, etc.). read more...

mail this link | permapage | score:8496 | -falko, January 6, 2009

Web Filtering on Squid Proxy

vote

This HOWTO describes how to protect your home / small enterprise network users from objectionable internet contents with help of HTTP proxy. Our goal is to set up a free Linux based server running Squid and deploy web filtering application on it saving bandwidth, speeding up web access and blocking obsessive and potentially illegal and malicious web files. read more...

permapage | score:8454 | -falko, April 16, 2012

Apt-Cacher-NG: HTTP download proxy

vote

Apt-Cacher-ng is a software package that keeps a cache, on the disk, of Debian/Ubuntu Packages and Release files. When an apt-get like client issues a request for a file, Apt-Cacher intercepts it and if the file is already cached it serves it to the client immediately, otherwise it fetches the file from the Internet, saves it on the cache, and then serves it to the client. This means that several Debian machines can be upgraded but each package need to be downloaded only once. read more...

permapage | score:8434 | -gg234, February 25, 2009

Configuring and Using an FTP Proxy

vote

Need an ftp server but don't want to open a hole through your firewall into your network?

One important technique is to run an FTP proxy on your firewall. Whereas the standard Netfilter code in the Linux kernel only inspects packets, an FTP proxy lets your firewall act as an intermediary in all FTP transactions. This increases your protection against buffer overflows and many other kinds of FTP attacks. It also allows you to restrict which FTP commands are executed by FTP clients.

This month I explain how to run SuSE's free (and non-SuSE-Linux-specific) Proxy-Suite FTP proxy on your Linux firewall, adding transparent but strong protection to all your FTP transactions.

Use eBox as a Gateway: Firewall, Traffic Shaping, HTTP Proxy

vote

eBox Platform is the Linux small business server that allows you to manage all your network services like firewall, DHCP, DNS, VPN, proxy, IDS, mail, file and printer sharing, VoIP, IM and much more. These functionalities are tightly integrated, automating most tasks, avoiding mistakes and saving time for system administrators. This article will show you step by step how to use eBox as a Gateway, featuring network configuration, load balancing between two Internet connections with WAN failover and multigateway rules for policy routing, traffic shaping, DHCP and DNS cache for the LAN network and HTTP proxy with different content filtering policies and antivirus. read more...

mail this link | permapage | score:8363 | -falko, June 11, 2010

Howto: Squid reverse proxy

vote

This article explains how you can set up a caching reverse proxy with Squid 2.6 in front of your web server on Debian Etch. If you have a high-traffic dynamic web site that generates lots of database queries on each request, you can decrease the server load dramatically by caching your content for a few minutes or more (that depends on how often you update your content).

(here's a bit of dramatic digital art) read more...

mail this link | permapage | score:8281 | -falko, December 28, 2008 (Updated: April 24, 2012)

Tiny web proxy and content filtering virtual machine on CentOS 6

vote

This small HOWTO will show you how to set up a small virtual machine to speed up and secure your home / small enterprise web surfing network using CentOS 6, Squid 3.1 and QuintoLabs Content Security 1.4 applications deployed in a VMware Virtual Player running on Windows 7 x64 as a host operating system. This howto is targeted at novice users and may sometimes seem too thorough for more advanced gurus. read more...

permapage | score:8068 | -falko, September 21, 2011

Set up a Load Balancer with Failover using HAProxy / Heartbeat on Debian

vote

This article explains how to set up a two-node load balancer in an active/passive configuration with HAProxy and heartbeat on Debian Etch. The load balancer sits between the user and two (or more) backend Apache web servers that hold the same content. Not only does the load balancer distribute the requests to the two backend Apache servers, it also checks the health of the backend servers. If one of them is down, all requests will automatically be redirected to the remaining backend server. In addition to that, the two load balancer nodes monitor each other using heartbeat, and if the master fails, the slave becomes the master, which means the users will not notice any disruption of the service. HAProxy is session-aware, which means you can use it with any web application that makes use of sessions (such as forums, shopping carts, etc.). read more...

mail this link | permapage | score:8041 | -falko, November 7, 2007

Tutorial: Run a File, Print, Proxy, DHCP, and Time server on Linux

vote

This article shows how to run a file-, print-, HTTP proxy- DHCP-, and time server for small and medium enterprises (SME) on one single Debian Sarge system. It is very easy to set up, and management is done with an easy-to-use web interface called eBox so once the system is set up, you can forget about the command line. eBox was developed to administrate advanced services for corporate networks, and it was created for Debian Sarge. read more...

permapage | score:7922 | -falko, October 19, 2006

Setup a transparent proxy with Squid on Linux

vote

Main benefit of setting transparent proxy is you do not have to setup up individual browsers to work with proxies. This nice and simple guide explains how to setup a transparent proxy with Squid and iptables (DNAT) firewall in three easy steps. read more...

permapage | score:7909 | -nixcraft, May 28, 2006

Use SSH via HTTP Proxy with Corkscrew

vote

If you want to ssh your vps server or your home computer from your work place (assuming you are using http proxy). You need to use Corkscrew. Corkscrew is a simple tool to tunnel TCP connections through an HTTP proxy supporting the CONNECT method. It reads stdin and writes to stdout during the connection, just like netcat. read more...

permapage | score:7848 | -gg234, December 29, 2008

Run ISPConfig on port 80 with Apache Reverse Proxy

vote

This article shows how you can configure a Debian Etch system that has the webhosting control panel ISPConfig installed so that ISPConfig can be accessed on port 80. By default ISPConfig uses port 81 which is a non-standard port and is blocked by some firewalls and ISPs. By using Apache's mod_proxy module, we can avoid this problem. It lets us create a reverse proxy that can fetch the pages from ISPConfig on port 81. read more...

permapage | score:7825 | -falko, May 26, 2007

Anonymous Squid Proxy on CentOS 5.x

vote

This howto describes a method to install a Squid 3 server as an anonymous proxy. An anonymous proxy is a tool that attempts to make activity on the Internet untraceable. It accesses the Internet on the user's behalf, protecting personal information by hiding the source computer's identifying information. Simply say to hide your IP. read more...

permapage | score:7783 | -falko, November 21, 2008

More articles...

Tallahassee Abstract Art

Recent headlines

A backdoor in all Internet products and services?

Upgrade Ubuntu 12.10 to 13.04

Using Multiple PHP Versions (PHP-FPM FastCGI) With ISPConfig 3 (Ubuntu 12.04)

Lynis: Security and system auditing tool

ARM-based EMB-2500: Like Raspberry Pi, but much better

Tutorial: Build an Ubuntu 13.04 Server (Apache2, BIND, Dovecot)

Tutorial: Ubuntu 13.04 Samba Server with tdbsam

Find wasted disk space with the Agedu Unix utility