Paranoid Penguin - Building a Secure Squid Web Proxy, Part I
I've explained (at a high level) how Web proxies work, described some of their security benefits and shown how they might fit into one's perimeter network architecture. What, exactly, will we be doing in subsequent articles?
First, we'll obtain and install Squid and create a basic configuration file. Next, we'll “harden” Squid so that only our intended users can proxy connections through it.
Once all that is working, we'll add SquidGuard for blacklisting, and DansGuardian for content filtering. I'll at least give pointers on using other add-on tools for Squid administration, log analysis and other useful functions.
Next month, therefore, we'll roll up our sleeves and plunge right in to the guts of Squid configuration and administration. Until then, be safe!
“Configuring and Using an FTP Proxy” by Mick Bauer, LJ, December 2002: www.linuxjournal.com/article/6333
The Squid home page, where you can obtain the latest source code and binaries for Squid: www.squid-cache.org
The Squid User's Guide: www.deckle.co.za/squid-users-guide/Main_Page
The SquidGuard home page—SquidGuard allows you to enforce blacklists with Squid: www.squidguard.org
The DansGuardian home page, a free content-filtering engine that can be used in conjunction with Squid: dansguardian.org
Mick Bauer (firstname.lastname@example.org) is Network Security Architect for one of the US's largest banks. He is the author of the O'Reilly book Linux Server Security, 2nd edition (formerly called Building Secure Servers With Linux), an occasional presenter at information security conferences and composer of the “Network Engineering Polka”.
- Readers' Choice Awards 2013
- Mars Needs Women
- IBM Will Minimize Impact of Future Disasters
- Sublime Text: One Editor to Rule Them All?
- December 2013 Issue of Linux Journal: Readers' Choice
- Raspberry Pi: the Perfect Home Server
- RSS Feeds
- Tech Tip: Really Simple HTTP Server with Python
- Linux Systems Administrator
- Senior Perl Developer
- Mixtapes Community
3 hours 43 min ago
- KDE is one true DE
4 hours 18 min ago
- Command Line Shells (Bash, Zsh, etc.) are 2nd place
4 hours 46 min ago
6 hours 41 min ago
- yes it's Jupiter Broadcasting
8 hours 1 min ago
- nice to see PClinuxOS finally
10 hours 34 min ago
- Personally, I am no longer a
11 hours 31 min ago
- It's Jupiter
1 day 1 hour ago
- GIMP is certainly a graphic
1 day 2 hours ago
- Thanks For Your Sharing
1 day 7 hours ago