View
214
Download
0
Category
Preview:
Citation preview
Homework Proxy server with IPTABLE
Requirement
Server 2003 (DNS,DHCP,AD,ip 192.168.1.1) Proxy server with iptable linux (2 interface vmnet1
192.168.1.2/24,vmnet2 172.16.1.212/23) Xp client for test(ip range 192.168.1.10=>192.168.1.30/24)
Task to do
1. Clients use services of server 2. Clients access internet using proxy only3. Block website facebook.com, youtube.com, dap-news.com
Proxy Server
Assing ip for proxy server have two interface Assing defautgateway
Prepare by CHAN Sarat SNA2012B
Teacher : KIM Bunthoun
Student : CHAN Sarat
Class : SNA2012B
Prepare by CHAN Sarat SNA2012B
Assign DNS cist.lan
Test by ping ip dns cist.lan
Prepare by CHAN Sarat SNA2012B
Ping defaut gateway cist.lan
Server2003 Assign ip and defaut gateway
Prepare by CHAN Sarat SNA2012B
Forwarder dns
Test by ping dns cist.lan
Prepare by CHAN Sarat SNA2012B
Test ping google.com
Prepare by CHAN Sarat SNA2012B
Create rule iptables to allow client & server access internet throw router-proxy
Test proxy server ping google.com
Prepare by CHAN Sarat SNA2012B
XP client
clients use dns “sarat.com”
Prepare by CHAN Sarat SNA2012B
Proxy Server
Install sqid
File configure squid “vim/etc/squid/squid.conf”
Default port squid 3128 and 8080
Prepare by CHAN Sarat SNA2012B
Cache file
Create acl (acl client src 192.168.1.0/24) Disable some options
Prepare by CHAN Sarat SNA2012B
Disable “icp_access allow localnet”
Prepare by CHAN Sarat SNA2012B
Restart services squid
Create acl for lan client and domain
Create rule for allow (clients range 192.168.1.0/24) and deny (domain like facebook.com,youtue.com,dap-news.com)
Prepare by CHAN Sarat SNA2012B
XP test
Access don’t use proxy server
Prepare by CHAN Sarat SNA2012B
Access use proxy server IP interface router connect to server(192.168.1.2) Port use default port proxy server 3128
Result can access internet
Prepare by CHAN Sarat SNA2012B
Test website that we block
We access facebook.com
We access dap-news.com
Prepare by CHAN Sarat SNA2012B
We access youtube.com
squidGuard
Prepare by CHAN Sarat SNA2012B
Prepare by CHAN Sarat SNA2012B
Prepare by CHAN Sarat SNA2012B
Prepare by CHAN Sarat SNA2012B
Prepare by CHAN Sarat SNA2012B
Prepare by CHAN Sarat SNA2012B
Prepare by CHAN Sarat SNA2012B
Recommended