Zvakanaka zvakanaka. Pano ndinokuunzira squid 3.5 (yakagadzikana) paCentOS, oh wow !!!, kana vakandiudza kuti ndaifanira kutaura nezve CentOS uye Ini ndakaudzwa nevaverengi vangu kuti squid 3.5 yakanga isisiri kuburitsa https y mumwe munhu akandinyorera tsamba email achikumbira kusefa nemapoka uye zvemukati. Saka ndinokuunzira ongororo kuti iwe uone kuti ndakazviita sei uye iwe unogona kuzviita.
ok kutanga zvinhu zvekutanga, squid ichaziva sei muCentOS iyi vhezheni ndeyei? 3.3.8, zvakanaka yechinyakare, asi inoshanda. Nekudaro kune avo vanofarira kugara mune zvazvino, chinhu chekutanga kuwedzera squid repository (ehe, unogona kurodha tar.gz uye kuumbiridza, asi hei hatisi kuzodzosera vhiri pano, mumwe munhu atozvinyora mune rpm package, hahaha). MuDebian ine akateedzana emabhugi, kusanganisira kusefa uye anofanirwa kushandisa Stretch repositories
Semazuva ese, ini handisi kukuudza iwe kuti uise malware, izvi zvinobva kune official squid wiki, tarisa HERE
vi /etc/yum.repo.d/squid.repo
[squid] zita = Squid repo yeCentOS Linux - $ basearch#IL girazi
baseurl = http: //www1.ngtech.co.il/repo/centos/$releasever/$basearch/
# baseurl = http: //www1.ngtech.co.il/repo/centos/7/$basearch/
failovermethod = kutanga
simba = 1
gpgcheck = 0
yum update
yum install squid3
Zvino, kana iwe waverenga zvimwe zvangu zvinyorwa zvekumisa squid haizove dambudziko. Saka pfupiso HERE uye cache HERE. Zvimwe zvinhu zvinoshanduka? Asi kuti usazoti ndiri munhu akaipa, ichi ndicho chidiki chaunofanira kuisa
acl localnet src 172.16.0.0/21 # RFC1918 inogoneka yemukati network
http_access tendera localnet
http_port 172.16.5.110: 3128
mhanya unotevera kuraira kuti ugadzire yako cache nzvimbo
squid -z
Ipapo inotevera yekutarisa kuti iyo yekumisikidza faira iri chaiyo
squid -k parse
pakupedzisira tinotangazve sevhisi
systemctl squid restart
Zvino sezvo isu tinosefa http uye https, uye tichigadzira akareruka maacls, mhinduro ndeye--> SquidGuard, murume uyu ndeye zvemukati firita uye traffic redirector, parizvino kune vanhu vazhinji vanofarira dansguardian, haisi yangu nyaya. Kunyangwe, squidguard haichasimudzirwi nechero munhu mune yakatarwa, inochengetwa nekugovaniswa kumwechete uye ini handina kana zano diki kana chero rakasarudzika sangano rakakumikidzwa mupakeji iyi, zvisinei, chokwadi ndechekuti inoshanda uye ichiri kuchengetwa ichigadziriswa .
yum install squidGuard
Sezvandambotaura, ne squidguard unogona kusefa traffic kuburikidza neye nhema rondedzero (blacklist) kana kubvumidza kuburikidza nechena zvinyorwa (whitelist)
Iwe unofanirwa kuwedzera inotevera mitsara ku squid.conf:
Izvi zvinoratidza kuti ndechipi chirongwa chinenge chiri kutarisira kusefa traffic, panowanikwa bhanari uye faira rekumisikidza.
url_rewrite_program / usr / bin / squidGuard -c /etc/squid/squidGuard.conf
Izvi zvinoratidza kuti mangani anodzoreredza madirector achange aripo (150) kuti apinde zvikumbiro, mangani madiki anotanga ne squid (120), mangani achachengetwa (1), kana vachigona kuenda kunopfuura chikumbiro chimwe panguva imwe chete (1)
url_rewrite_children 150 startup = 120 idle = 1 concurrency = 0
Kana pasina kana redirector iripo, munhu wacho haazokwanisi kufamba, zvinova zvakanaka, hatidi kuti chero munhu afambe akasununguka. Mune irogi ichati chikanganiso kana izvi zvikaitika uye iwe unofanirwa kuongorora kuwedzera nhamba yevanodzosera
url_rewrite_bypass yabviswa
Maitiro ekuita Acl uye kusefa?
Chinhu chekutanga kurodha pasi rakazara runyorwa kutanga kubva HERE, iwe unogona zvakare kugadzira uye ini ndichatsanangura kuti, unzip mu / var / squidGuard / izvi zvinowanzoitika mumasentos, asi kune vamwe iri / var / lib / squidguard /
tar -xvzf bigblacklist.tar.gz /var/squidGuard/
chown -R squid. /var/squidGuard/
Iwe unofanirwa kupinda squidguard.conf:
Zivisa kuti pane zvinyorwa zvacho uye kupi matanda achachengetedzwa.
dbhome / var / squidGuard / blacklists
logdir / var / danda / squidGuard /
Zvino squid muchengeti anobatwa aine matatu maaki src, dest, acl.
Ngatiti ini ndoda kugadzira "rakatemerwa" boka mu src, ini ndinozivisa iro boka pacharo uye ese ma ip ari eboka iro
Src zvishoma {
ip 172.168.128.10 # pepito perez informatica
ip 172.168.128.13 # andrea perez informatica
ip 172.168.128.20 # carolina perez informatica
}
Zvino zva gadzira uye zivisa zvinyorwa, iri pamwe neyekupedzisira tag. Zvakakosha!, Iwe unofanirwa kunzwisisa kuti ungavharira sei peji
- -Semuenzaniso domain: facebook.com, iyo yese domeini ichavharwa
- -Semuenzaniso urllist: facebook.com/juegos izvi zvinoreva kuti chete iyo url yakavharwa kubva kune vamwe vese ini ndinogona kufamba ese facebook
- -Mhedzisiro expressionlist muenzaniso facebook, ipapo chero peji rine facebook rakanyorwa kunyangwe iri peji renhau rinoreva kuchinyorwa uye rinotaura facebook mumuviri wayo rinozovharwa.
dest porn
domainlist porn / domains
urllist porn / urls
expressionlist porn / zvirevo
}
Iye zvino tava kuzivisa kuti uri kuzovharira kana kuti kwete uye danho rauchatora kana zvikaitika. Izvo zvese zvinotanga neyechiratidzo ACL, mukati mune 'n' nhamba yemapoka. Kuenderera mberi neiyo "limited" muenzaniso, iyo yekupasa tag kureva kune zvinyorwa uye traffic, kana iro kiyi izwi riine Chirevo chekudaidzira (!) pakutanga chinoreva kuti hazvitenderwe, zvikasadaro hongu, kunyangwe kana iri pane yakambonyimwa runyorwa.
Mumuenzaniso uyu, isu tine boka rakashomeka, mune iro whitelist kana chena runyorwa kubvumira imwe traffic inogona kuvharirwa mune mamwe matema zvinyorwa (!), Wobva wapedzisa mutongo ne «ani»Kuratidza kuti kana yanga isingaenderane nechero runyorwa zvino inobvumira iwo traffic. Kana ikapera nechiratidzo «hapana»Haingatenderi traffic iyoyo. Pakupedzisira chitaridzi redirect, kuratidza chiito chekutora kana uchivhara peji mune ino kesi tinoitumira kugoogle.
Heino muenzaniso ini ndinoisa akawanda akawanda akavharirwa rondedzero, asi yeuka kuti iwo anofanirwa kuziviswa mu dest, zvakare kwete ese runyorwa ane urllist, expressionlist kana domainlist saka iwe unofanirwa kutarisa mushe.
acl {
shoma {
pfuura whitelist! porn! munhu mukuru! zvepabonde! proxy! spyware! malware! kugura! mixed_adult! naturism! sect! marketingware! virusinfected! warez! zvombo! kuvhima! updatesites! kubheja! filehosting! ! desktopsillies! sexityeducation! mhirizhonga! remote-control! jobsearch! maserura! kidstimewasting! ecommerce! beerliquorsale! radio! socialnetworking! social_networks! instantmessaging! chat! odhiyo-video! ! nguo dzemukati! magazini! manga! arjel! fodya! frencheducation! mukurumbira! bitcoin! blog chero
redirect http://google.com?
} #kupedzisa
} #kupedzisira acl
Isu tinodzoreredza zvese zvinyorwa
squidGuard -b -C ALL
Kana squidguard akagadzirira chikumbiro achionekwa murogi, saka isu takagadzirira kutanga ne
systemctl squid restart
Kutenda nezvese zvinhu, ndinovimba unoramba uchinyora mumakomenti, uye unoteerera kune zvese zvandatumira
waedza kuramba mifananidzo yezvinonyadzisira uye zvese zvirevo mu https uye kunyanya kana uchitsvaga neGoogle
apo sarg bhuku rekutsigira squid imwe
apo sarg bhuku rekuzadzisa squid,
Yakashanda kwauri ne https?
Ruoko ndinoda rubatsiro rwako, kana iwe uchikwanisa kundinyorera ndiPedroza
ICHI CHINOGONESESA CHEMAHARA BHUKU KANA KUTI ZVINOTAURA?
ICHI CHINOGONESESA CHEMAHARA BHUKU KANA KUTI ZVINOTAURA?
Wakaisa riinhi squidguard !!!!