Networking :: Test Lab Setup With Squid And 2 NICs
Oct 13, 2010
My current setup is a slack based distro with Squid 3.0 running in transparent mode with WCCP. Web filtering and AV scanning works great but we need to go a step further and introduce port filtering into the setup. I can easily accomplish this with iptable entries but only if I point to the proxy directly; the goal is to do this completely by interception. So far I've had no luck doing this with iptable entries or with squid ACL's and I am wondering if there's something that I am missing or just not doing correctly. So far during testing I've just been testing with common IM chat ports such as MSN and Yahoo. I am currently trying to setup a test lab with squid and 2 NICs with one NIC connected directly to the internet but this is not a route I would like to go.
View 1 Replies
ADVERTISEMENT
Jun 29, 2010
I'm trying to setup a Centos box to act as a backup server for our intranet between stores. I have two interfaces in it, the first one is currently connected to my local network and is using dhcp to get its ip address and such, the second one is set to a static ip address and is connected to an independent network that just has a DigiBoard Portserver hooked to it and no connection to the regular network. What I am doing is using ssh to portforward the telnet port on this box to the main server so when you telnet into the box from the second interface using the portserver you get connected to the main server.
I plan on using this over DSL lines as a backup when our main dervice goes out to allow the portservers at the remote locations to seemlessly connect to the main server by just moving the network cable from the local net to the backup server. My problem is that when I have the everything working I am able to ping the second interface ip address from the normal network even though the secondary card does not in anyway externally connect to the network, this is a problem.
Eventually I want to duplicate the main server address so that the normal portservers and other terminals on the remote site will not have to be reconfigured to access the backup server. All I want is to be able to tell the managers is to switch a cable while the main connection is down and not have to manage a bunch of config files to get the store back up. Right now if I duplicate the main server ip address and it is accessible through the first interface I'm guessing I'll see all kinds of problems relating to duplicate ip addresses on the network. I've tried some routing and iptable stuff but I'm not real familiar with either so I had no luck. Is there someway to block the internal connection between the two interfaces so the only thing that sees the duplicate ip address is the second interface?
View 1 Replies
View Related
Sep 13, 2009
I have 1 root-server with 2 NICs, both having their own internet IP addresses:
Code: eth0 = 8x.x.x.183
eth2 = 8x.x.x.205 We only have one gateway on that network:
Code: gateway = 8x.x.x.1 We want to use eth2 for postfix + http, and eth0 for all the other stuff.
How can this be setup ? With route / ip route / iptables ?
View 1 Replies
View Related
May 6, 2011
I have set up squid3 and dhcp server on my Ubuntu 10.04 box with IP address of 192.168.0.160. Single network card.Squid runs on port 3148. Everything works fine for the users provided that I set up the proxy details manually on each client pc.I want to set up the Squid to run as a transparent proxy and after reading around I have done the following.In the Squid3 conf file I have entered http_port 3148 transparent.Dropping to Root ( sudo -i )However the transparent proxy does not work and if I enter iptables -L I can see that the rule above has not been retained. The default rules in iptables only show up.
View 5 Replies
View Related
Jul 6, 2010
After following the below how to im no longer able to browse the internet.
[URL]
This happened after issueing the command:
sudo update-rc.d tproxy defaults
View 2 Replies
View Related
Aug 4, 2010
I'm learning via baptism by fire method here, and need to test PHP connectivity to a local postgresql 8.3.9 setup. (CentOS 5.5 x86_64). I have got PHP and Postgres both working; I can pull up a test PHP page via web browser, and I can login to postgres via the command line. What I can't figure out is how to test PHP connectivity to the local DB.
I found this test script:
Code:
<?php
$conn = pg_connect ('dbname=template1');
?>
Which I've named, testdb.php - when I run ./testdb.php from the CLI though, I get:
Code:
./testdb.php: line 2: ?php: No such file or directory
./testdb.php: line 3: syntax error near unexpected token '"dbname=template1"'
./testdb.php: line 3: `$database=pg_connect ("dbname=template1");'
I've seen a LOT of pages describing the internal code of the PHP file, but as a newb to this, I don't know how to execute this test. I've ran chmod 755 against the file to verify permissions, but this didnt effect the results. I've also done a "chmod +x testdb.php"
Code:
PHP 5.1.6 (cli) (built: Mar 31 2010 02:39:17)
I realized I wasn't doing this:
Code:
php testdb.php
but when I do, I get this error message now:
"PHP Fatal error: Call to undefined function pg_connect() in /var/www/html/testdb.php on line 3"
View 9 Replies
View Related
Mar 17, 2010
I'm designing a multi-machined system that is supposed to resemble a failover redundant web&&databaseserver. I think I have the theory pretty well figured out (which means I'll run into a lot of unexpected problems )... but my concern is this:
I need some extra hardware, and I can buy three PII's for almost no money, or a couple of PIII's that cost apiece what the PII's cost in total. Is there a good reason to choose one over the other? One day in the distant future the setup will go live on x64 hardware. So I'm hoping to transport as much of the configuration of the test setup to the new setup. Would that be a concern somehow?
EDIT: Maybe I should explain, it does not really have to perform in any sense, but prove workload gets evenly distributed between two (or more) machines and that it can handle it if the plug gets pulled from a machine.
View 2 Replies
View Related
Mar 10, 2011
What is the command for installing squid?
Which distribution is needed? linux server?
View 3 Replies
View Related
Aug 11, 2010
I have downloaded the Apache web server so I can set up a local web server to test my PHP pages. The download automatically went into the default "Downloads" folder instead of the /opt folder where the Apache instructions said to download the file to. I have tried to move the file from the Downloads folder to the /opt folder but am denied access - says I don't have enough privileges (or some such thing?). Bummer.
So I tried to use the terminal to install the file that I downloaded from Apache (following their instructions - actually copied/pasted the command line so there would be no typo problem) - no joy.
The first thing I was instructed to do was to enter the su command, which I did, and was asked for a password. I have tried every password I have ever used on this system and I receive the following:
su: Authentication failure
and it returns me to the prompt. What is my password?
I checked the archives for similar problems and came up with zero relevant hits.
View 9 Replies
View Related
May 1, 2009
to configure squid as a non-transparent proxy? I understand https cannot be filtered using squid as a transparent proxy. So i need to find out how to configure squid for https filtering.
View 1 Replies
View Related
Jul 22, 2009
I have 2 pc connected to a HP officejet j6480 1 pc connect by usb the other is eth via a router. The eth pc will not print anything but a test page. It it open a print box but won't give a option to print. The other pc is also on the same router. USB print fine.
View 1 Replies
View Related
Jun 5, 2009
I have attached a diagram to show the layout, but basically I have a server that has 2 nics. I use NIC1 for the server and its services. Im using VirtualBox to run VMs and want to use NIC2 for the VMs exclusively and I want the VMs on a different network completely from the host.Ive tried setting up NIC2 on the other network but I end up with networking problems on network1. Also I cant figure out how to tell VirtualBox to bind to the host NIC2.
View 2 Replies
View Related
Jan 8, 2010
I have 2 x PCs and a NAS. Both PCs have 2x NICS. PC connectivity to Internet is via an ADSL router. Current config: Thus far (by choice) I've used static IPs in the 192.168.168.x range for my internal network, connecting all PCs and NAS via a jumbo frame enabled gigabit switch. This has facilitated moving data between the PCs and the NAS at high-speed. As both PCs also required Internet access from time to time, both are also connected to the ADSL router using the 2nd NIC and using subnet 192.168.1.x. I'm sure some of you are shaking your heads by now, but it works well and has been entirely hassle free.
However, I've an app running on the NAS that I'm keen to get Internet connected also. As my existing network devices are not using DHCP I figured the simplest method would be to change my ADSL router configuration such that it is in the same 192.168.168.x subnet, change its DHCP server settings to serve IPs in the same subnet (but in a restricted range I know won't cause any conflicts with the static IPs) and problem solved. On changing the ADSL router confiruration with all machines already booted up and configured as described above, everything worked. All devices could see one another, and access the Internet. On later rebooting the system this no longer works
- Internet access is fine but PCs don't see one another or the NAS. If I disconnect the ADSL Router from the PCs then all devices see one another again.
- Does having 2x NICS on a single device each assigned unique IPs in the same subnet create an issue and can it be overcome? I'd like to overcome it because making one of my PCs the gateway forces me to have it on anytime another device needs access.
- If I'm forced to use Internet connection sharing with one PC on the network connected to the router, how do I best configure this?
- One of the things I need to retain is gigabit connectivity between the PCs and PCs and the NAS (currently achieved by 192.168.168.x subnet being linked via gigabit switch).
View 4 Replies
View Related
Jun 4, 2010
My brother has a Ubuntu server attached to a LAN with Windows PCs. I set up an openVPN tun service on the server, let's call this VPN1, so that I can connect remotely from my Ubuntu desktop. The server has one NIC and the LAN has a router that is the gateway to the internet.
My brother would like to remotely access his windows network when roaming with his Windows laptop.
Therefore, I would like to set up a second VPN service, this time tap, that is bridged with his LAN. Let's call this VPN2.
The LAN subnet is 192.168.1.0/24. The internet gateway is 192.168.1.1
The NIC has a fixed IP set by the router of 192.168.1.150
How do I set up VPN2 so as not to trash VPN1? That is, if I bridge eth0 with tap0 how will that impact VPN1's tun0 that is using eth0? Do I need a separate NIC for the VPN2 bridge?
View 1 Replies
View Related
May 27, 2010
I am considering moving to a software (ebox/pfSense/Zeroshell etc) based router.
It fits well to have 1 NIC connecting to your modem & the other to your switch & network. It seems to make sense it is more secure, but is it?
If I assign the 1 NIC in my router 2 IPs, a subnet for the modem and a subnet for the LAN, how is the different?
I can't think exactly what it is. I am no network guru and probably missing something down at a lower networking level, but for a home router, does 1 or 2 NICs make any difference?
View 6 Replies
View Related
Mar 10, 2011
I have a pc with debian 6 (without GUI) installed on it and want to use it as server at home. It has 2 ethernet nics. Now i want to configure the routing process. Searched internet for a long time found something but couldn't get it work.
View 8 Replies
View Related
Jun 17, 2010
My server has 2 network cards. I have SLES 10 SP2 installed on this server. I had configured Ethernet bonding on this machine using 2 NICs. Now I want to assign 2 different IP's to 2 different NICs. I am able to do this without any issue using yast. ifconfig command shows that eth0 has 192.168.1.10 and eth1 has 192.168.1.12. Rest all networking details are same (netmask, gateway, DNS)
Strange thing: When I unplug only eth0, (eth1 is plugged in correctly) I am not able to ping any IP.
If I unplug only eth1, (eth0 is plugged in) I am able to ping both IP's.
[Code]...
View 3 Replies
View Related
Apr 25, 2010
My PC has 2 NICs Eth0 has 3 virtual NICs:
My every PC (172.16.1.1 to 172.16.1.4) has installed webmin and listen on port 10000
When browse from LAN http://202.1.2.3:10000 .. it goes to the webmin page of 202.1.2.1 .. why?
This problem ONLY occurs when browse the site from LAN! and it works properly if we access it from Internet.
View 3 Replies
View Related
Jan 13, 2016
I need to setup a squid 3 proxy with https bumping. Unfortunately I'm not very familiar with squid and https in general.
I already perfomed the following steps:
1.) compile from source
Code: Select all./configure --with-openssl --enable-ssl-crtd
make
make install
2.) configuration (http)
I used this guide: [URL]
3.) configuration (https)
[URL]
The server is now working for http and https, but is the server secure, too? Is the default config already secure or do I need to configure additional security features? (e.g. things like cert validation, cert pinning, [dont know what's importend], ...)
View 0 Replies
View Related
Aug 2, 2011
I am trying to set up a SQUID server on my Red Hat Linux 7.3. to act as a cache server.
The machine has 2 network interface:
eth0 172.30.254.4/23
eth1 172.3.254.65/23
Default gateway is 172.30.254.19/23
The hostname is "amelie".
[Code].....
View 2 Replies
View Related
Mar 12, 2010
I have dedicated LAMP server running and I was wondering if I am able to run a dev/testing zone on it so to speak?...That way, I can have my come back soon, site is being constructed page live, and develop elsewhere on the server. I was trying a virtualhost, but since that is name based, the web browsers don't know what to do with it. I know the safest way is to develop on this machine then move to web server but I'm just seeing if what I was trying to do is possible.
View 4 Replies
View Related
Jul 14, 2011
I need the complete reference guide to set up my own SQUID transparent proxy Server with Gateway support. I am using Fedora 14. Please help me with LINKS/REFERENCE. I am a learner in Squid.
View 1 Replies
View Related
May 17, 2011
I would like to use my Ubuntu server machine as a proxy so I can browse a little more securely/privately while I am traveling. I connect to a lot of open Wi-FI networks.I have Squid setup on an old laptop running Ubuntu Server 10.10 at home, and the main machine I will be using to connect to the proxy is a computer running Windows Vista.I am able to connect and use the Ubuntu Server machine as a proxy while traveling with the squid config file modified with http access set to 'allow all'.
Obviously this isn't the ideal setting.After lots of reading and Googling I can't figure out how to allow only my Vista laptop to use the proxy.I'm a little lost with the ACL settings required.
View 7 Replies
View Related
May 18, 2011
Ok so I'm gonna try and explain this easily. I installed 11.04 32bit on an older HP P4 machine. Boots up and goes to classic desktop.. But networking looks like a wifi devices rather than a wired connection. I installed another NIC rather than the onboard but had the same result.. I also tried yet another PCI NIC and a USB NIC with the same result. I also tried to set my connection to manual and give myself a static IP, but had no such luck.
I know my internet connection works because I'm on another machine typing this to you all.. All the NICs also work in W7 on the dualboot setup I did.
View 1 Replies
View Related
Jun 15, 2011
I have 2 NICs on my ubuntu server.... eth0 has its IP address....but eth1 doesnt.
How do I assign an IP address to eth1 using only commands on the command line?
And I need it to be permanently...
View 2 Replies
View Related
Jan 12, 2010
I have a MB with 2 NICs and on 1 I would like to have a static IP, on the other a DHCP for a local network.The problem is the DHCP provided gateway is made default vs the one for the static IP and resolv.conf is overwritten.Any suggestions how could this be resolved? I can tweak both the DHCP server settings and the box settings.
View 14 Replies
View Related
Mar 11, 2010
I have two NIC's interfaces on my linux machine(eth1 and eth2). Each have different IP addresses(10.0.0.1, 10.67.7.1). These two interfaces are connected together through hub. Here is the my question?
1) If I 'ping 10.0.0.1', it should go out through network interface eth2 and through hub and enter on eth1 and response also travel through similar direction.
2) If I 'ping 10.67.7.1', it should go out through network interface eth1 and through hub and enter on eth2.
How can setup routing table for this,I have tried setting up routing and iptables, etc.. nothing helped.
If any one good router/networking guy, you should know this one.I am doing a project, I want this way to handle this.
View 9 Replies
View Related
Aug 2, 2010
I'm trying to work out how to route all traffic destined for the internet from all devices connected to eth0 to a wireless router access point via wlan0 on my Slackware box. I also have dhcpd providing ip addresses on the same subnet to any device connected to both eth0 and wlan0.
Diagram:
Code:
____________ ____________
[ ]=============> (wifi) ==============>[ Router / ]
|Workstations| __________ |Access Point| 192.168.2.1
[____________]==>(eth0)==>[ ]<==(wlan0)==>[____________]
192.168.2.253| Server |192.168.2.254
[__________]
If I connect to the router/access point via wireless or directly to the Server via a crossover cable I can obtain an ip address from dhcpd, so that works. As far as I can see I just need to how to route between eth0 and wlan0 then I can provide internet access to those devices!
ifconfig:
Code:
eth0 Link encap:Ethernet HWaddr **:**:**:**:**:**
inet addr:192.168.2.253 Bcast:192.168.2.255 Mask:255.255.255.0
inet6 addr: fe80::201:2eff:fe27:aea3/64 Scope:Link
UP BROADCAST MULTICAST MTU:1500 Metric:1
[code].....
View 10 Replies
View Related
Jul 6, 2011
I currently have Samba working properly using the eth0 interface on my notebook computer. More importantly, I can browse the network and see the shares set up in Samba. If I disconnect and go wireless using the wlan0 interface I can no longer browse the shares on Samba via name. I can however browse via IP address of the wlan0 interface. How can I make it so that Samba is accessible by name when I switch between interfaces?
Code:
[global]
workgroup = startrek
server string = NCC-1701 Enterprise
bind interfaces only = yes
[code]...
View 4 Replies
View Related
Feb 25, 2011
I'm running 2 asterisk box (Centos) ,and the two servers are connected through 2 iax trunks.on one server i have 2 nics ,each one is connected to internet,now i want to use isp 1 for the first trunk and isp 2 for the second trunk.
iax 1 is listening on 12345
iax 2 is listening on 11223
is there a way to split traffic on both nic using ports (netfilter iptables)?
View 1 Replies
View Related
