I am working in a office where only one internet connection available. I have configured 5 other client machines to use internet through squid proxy server. Now I want to restrict the total data usage/transfer (upload+download) to say 1 GB during a calender month. How can I achieve this setting.
View 1 RepliesI am working in a office where only one internet connection available. I have configured 5 other client machines to use internet through squid proxy server. Now I want to restrict the total data usage/transfer (upload+download) to say 1 GB during a calender month. How can I achieve this setting.
View 1 Replies View RelatedI've set up a transparrent squid box with two nics. Eth1 = Internet eth0= LAN +Dchp my question is, can I log the data usage of a skype call. My proxy server already records all http an https requests but doesn't record some programs like skype. I know that it is not http traffic, but can I tell my system to record data use by an ip address over a nic with the help of iptables for example?
View 1 Replies View RelatedIs there something which can act as a fully fledged proxy (exactly like squid) but which can also monitor data usage?
At the moment what I do is I log data usage of IP addresses (allocated by DHCP) by using IPFM. Obviously getting a new IP address from a DHCP server isn't hard and this could be abused.
So I was thinking if I require proxy authentication and log usage that way, there is no way for anyone to abuse the system.
Does anyone know of a proxy server capable of logging data usage?
I have configured my squid that have a limited access to websites but still some website were accessable vis https so I removed transparent from squid. Now what changes do I have to make in iptbles
View 1 Replies View RelatedI have run into a problem with my desktop using roughly 50% RAM (w/o buffers or cache) while running a limited set of applications (fbterm, tmux, weechat, ncmpc, rtorrent) on the command line. This usage only increases roughly 5-10% when starting X (an addition of xcompmgr, awesome wm, zim, parcellite, 2x conky (one replacing root-tails functionality), plus firefox and other apps that may or may not be running from time to time). (h)top is reporting programs only using roughly .1-.2% per proccess and roughly 100 processes (current look at top shows 120 processes, only 32 of which are registering any usage over 0.0%) The RAM usage when in the console (which I will add is about 150MB after boot) is totally unreasonable and I need some direction on trying to find out what is using all of this RAM.
System:
Distro: Arch Linux
RAM: 2G
CPU: AMD 64 x2 4800+
HDD: 3x WD Black 750G (RAID 5 on partition 2 (swap) and 3 (root), RAID 1 on partition 1 (boot). LVM over root partition)
GPU: Nvidia 8400 GS
My Squid is working. But I do not know how to unblock a proxy for two users on my network. My configuration
Code:
acl work src 192.168.16.0/24
acl sites dstdomain "/etc/squid/sites.acl"
acl files urlpath_regex "/etc/squid/files.acl"
acl boss src 192.168.16.12
[Code]....
How to enable blocked sites and files for boss and it_user?
I have this happening on my vaio laptop and FC11- top shows /usr/share/scripts/shared/onlyservice or /usr/share/logwatch/scripts/shared/onlyservice running %100 of one core of my CPU. It takes 30 to 40 min to stop. Same thing happens when I go to a GUI log-viewer. This, of course wouldn't matter on a desktop, but with a laptop it's kinda expensive. On boot up after the grub I get error: Invalid TSD data!
View 11 Replies View RelatedI would like to ask some help and tutorial for setting up and how to configure squid proxy server in my (Home PC Server). I am a newbie in Linux Centos. I already installed in my system the CentOS 5.5 . Now, I want to configure it as my internet server, all of my 4 system running in Windows including the laptop I want to connect through my CentOS pc with username authentication. I assign all IP address by static. see tthe attachement in my set up. [url] I just want to know what I need to change and add in my squid config file. And how can I configure properly my CentOS with 2 LAN card as internet server.
View 1 Replies View Relatedhow to get image of server with all configuration files and data. Without data loss.
View 5 Replies View RelatedI'm about to have a web server at home for the first time. I've always missed having full control and not having to contact my hosting company when I need to do some specific changes - and some changes they won't do for you at all.I've chosen the non-GUI Ubuntu Server with LAMP, and nothing more is installed really except for a couple of command line tools from the repository. The LAMP software has been locked down as good as I can by following some guides on the net and using common sense. Like Apache 2 don't have access to the file system except for the www folder, and setting the headers to Prod. MySQL has skip-networking and I've commented out the listen string to localhost. PHP has a truckload of functions that I've disabled in the php.ini, also by following some guides on the net, among some other security enhancing php.ini editing.
The only thing the server will serve is a well known PHP forum and some html docs, and that's all. Nothing advanced or complicated stuff, and I'm definitely not programming PHP myself or letting anyone do it for me.But I do want to sleep well at night knowing that my server is always on and sitting on the edge of my home network! And can I do that? I've heard that you don't need to be worried about getting your Linux server box hacked, but you should be worried about anyone getting root access to it. But is it really that simple? Ubuntu is shipped without root account and you must have the sudo password, right? What's the odds for anyone to get full access to my system?An issue: I've heard that Apache never must run as root. When I do a ps -ef, I see that there are several www-data processes running apache, but there's one root process running apache too. Is this normal and is it safe?An issue: I've heard that PHP can fail pretty easily. But isn't PHP running under apache 2 and limited by the www-data filesystem access?An issue: MySQL is running as a MySQL user, and I guess that's an unprivileged user right?
top says there's only 12MB free (out of 1GB), but I can't figure out what's using all the RAM. rtorrent is using 13MB, and the rest are in bytes. (ran top as root)
[Code]...
Having major problems with mysqld causing CPU usage to rocket to 100% on one core for a short time, which usually drops back down again to 1-7%, though sometimes it can last an extended period of time. This is a problem because things using mysql become unresponsive in this time.
[Code]...
Is anyone here fluent with the usage of the .htaccess file? Is it the way to go to deter search bots or is there a better method? Never mind. I already have a thread about .htaccess here.
View 1 Replies View RelatedI am running fedora 10 and webmin squid proxy server, after power failure the squid fails to start. i have tried to start it from command line but failed
[root@ ~]# /etc/init.d/squid start
Starting squid: .................... [FAILED]
[root@ ~]# /etc/init.d/squid reload
[code]....
I have squid running on F12 fully updated. Pretty much stock config except bigger cache size.
Over time it seems to start lagging and occupying more memory. Currently using ~400Mb after a couple of months. I'm sure its causing some lag / refreshes because if I turn if off and go direct to internet the same site I had to hit refresh on, loads instantly.
Going through the logs in /var/log/squid I don't see anything suspicious with the untrained eye, whats a better way of debugging it to see where/why the delays are happening? Its a single user setup (for fun really lol) so theres a lot of misses in access.log. cache.log just has a handful of bad img headers which does not line up with lagging websites.code...
I have 4 servers running squid/3.1.1 proxy server. Since the latest version I can no longer FTP. I have posted this problem in multiple places but have received almost no response. I've found several other post to this problem throughout the Internet which have also gone unanswered. So, once again, I thought I'd give it a try. As I said "I have 4 servers running the newest version of Squid". When I try to access an ftp, any ftp, I receive an error (check attached image). This was never a problem until just recently. Squid should work perfectly find with ftp, it is not a strictly http proxy.
I turned my firewall off just to make sure, still had the same issue. If I jump directly on the server itself with no proxy settings set in the browser it will work fine. As soon as I set the browser setting to access the Squid software I get the same error. I've included my squid config (which is unchanged from the default settings), maybe somebody better versed than myself can point out an obvious flaw. Everything else seem to work just fine, it's only FTP that's a problem.
I have a reverse proxy set up with squid. I'm going to try and explain what it's doing and I apologize for it being confusing, I'll do the best I can to describe my problem. First, it's for our phone system. We run a ShoreTel Voip system. The owner has decided he wants me to setup MCM (Mobile Call Manager), which from what I can see is an under developed, and almost impossible to get help with Shoretel software. But he's convinced he needs it for his Iphone. It's supposed to, in a nutshell, turn his Iphone into his work phone with all the advantages and doodads that come with it. Apparently, "they have an app for that". On the server side, I need to setup a reverse proxy back into the network on our phone server. Simple enough, I did this with squid. I used the following lines:
Code:
http_port 80 accel defaultsite=172.17.137.7
cache_peer http://172.17.137.7 parent 80 0 no-query originserver name=myAccel
acl our_sites dstdomain http://172.17.137.7
[code]....
Code:
always_direct allow all It most definitely is allowing traffic back to the phone server, the problem is, it hands out my internal server address to the outside client. So for instance, if I connect to the outside routable address with my phone, it will immediately change the url to http://172.17.137.7 which is the inside nat address of my phone server. Which of course doesn't work, since I couldn't browse to that address from the outside. It does however work from the inside of the network, obviously because 172.17.137.7 is accessible from the inside.
I want to configure squid server with SSL so that users send clear text username/password and also data in encrypted mode. i googled but all of the configuration is for reverse proxy not requests from users to proxy server in LAN for example.
View 5 Replies View RelatedI have finished reconfiguring my 1st PC Centos 5.5 with Squid and Dansguarian. Works fine the configuration is basic.lets name it to 1st PCeth0 - modem ip (public)eth1 - 172.16.1.1 (LAN)Then I've decided to change and add another Centos 5.5 for Firewall Service that is directly connected to the modem and then shares internet connection and some ports to 1st PC.
lets name it to 2nd PC, it also has two NICSeth0 - modem ip (public)eth1 - 10.0.0.1 (ip to connect to the 1st pc with squid services)so I changed the ip of the 1st PC with theseeth0 - 10.0.0.2eth1 - 172.16.1.1 (LAN)and connects the eth0 (10.0.0.2) of the 1st PC to the eth2 (10.0.0.1) of the 2nd PCthen I've tried browsing on the network but it does not work...is there a simple iptables command for the 1st PC and 2nd PC?ere are the iptables script and lists of my 1st and 2nd PC 2nd PC (firewall to be)
#vi /home/user1/fw.sh
#!/bin/sh
123=/sbin/iptables
[code]....
I need the complete reference guide to set up my own SQUID transparent proxy Server with Gateway support. I am using Fedora 14. Please help me with LINKS/REFERENCE. I am a learner in Squid.
View 1 Replies View Relatedso my server is doing fine, but there is one odd thing I would like to fix. When I start and stop services, the CPU is maxed out for about five seconds each time. The services start the same speed, but it still does this. Small things like lm_sensors don't do this, just things like httpd and sendmail. THis server was upgraded to Fedora 11 with a netinstall CD a few months ago.
View 4 Replies View RelatedI have configured router(192.168.1.2) to serve only one machine with IP - '192.168.1.6' and set up SQUID proxy on '192.168.1.6'. I have defined some rules(ACL) regarding connections to internet on SQUID proxy.
I changed the Gateway of rest of machine (192.168.1.60 - 192.168.1.69) from '192.168.1.2' to '192.168.1.6'.
The policies which I defined in SQUID is working properly but 'Linux Evolution mail' client is not fetching mails.
Is I have to do any other settings on 'Linux System' or 'Evolution mail client'.
I'd like to setup an Ubuntu LAMP server, and provide limited access to it for our in-house web developers/designers. I'm not quite sure how to go about the permissions side of things. Which user/group should "own" the /var/www directory? Is it www-data?
How do I create user accounts (for our developers) that have access to the /var/www directory - do I create accounts then add them to the www-data group? Or should I make a special 'webdev' group and give it access somehow?
it is possible if i can have sub-users in my server and can i allocate a limited amount of space only. For example i am the root of server and now i can add another user with name john and he should be able to use only of 2GB out of my total hard-disk.
View 4 Replies View RelatedI have SSH running on a computer I use as a server at home and login to it for my own purposes but am needing to share access to this server with someone else, and I'd like to do it in a way so that when they sign in all they see is the contents of one folder and nothing outside of it. So I'd like them to have full access to this folder and do anything they want with it, but not be able to browse outside of it at all via something like WinSCP (they're using Windows). I'm thinking I need to create a new account for them to sign in with but beyond that I'm not sure what I need to do. The only other special thing is that the folder I'd like them to be presented with is actually on an external hard drive. We're going to be doing a lot of online music collaboration and I need to give him lots of free space to drop files and the internal hard drive doesn't have a lot to spare right now.
View 6 Replies View RelatedI'm running into a problem where my system is running out of disk space on the root partition, but I can't figure out where the runaway usage is. I've had a stable system for a couple of years now, and it just ran out of space. I cleaned some files up to get the system workable again, but can't find the big usage area, and I'm getting conflicting results.For example, when I do a df it says I'm using 44GB out of 58 GB:
Code:
[root@Zion ~]# df -h
Filesystem Size Used Avail Use% Mounted on
[code]....
I want to share files over the web with only a few people and limiting them to certain folders. I have been doing a remote access (ssh) to my server to access it from a pc on the local network. I later found out the same program doing ssh (open_ssh) was also doing sftp, great I could do both with one system account. Problem I couldn't find away to configure another user to go over the web with limited folder access without messing up my user to access the pc. I tried ftps by using vsftpd, I couldn't get chroot set up correctly or even log in. So my question is what program and/or protocol should I use to do secure ftp over the web?
OS: Ubuntu 64bit 10.04
I install redhat server at virt-manger and i configure my rpms and others tasks and it works fine.
My question is how to get all configuration and data from this virt-manager server to use it at another PC virt-manager ?
I configured squid with authentication required. I have 10 client using WinXP operating system. I want these clients can share their data, DVDwriter and printer.
View 1 Replies View Related