Red Hat / Fedora :: Locking Down The Proxy Setting?
Feb 16, 2010
how to lock down individual users from setting a proxy server. Its a server not a WS so it should never go to the internet. I want to lock down the system side and firefox 5 settings. found this link but its a bit confusing. I want to lock the system and mozilla Locking preferences - MozillaZine Knowledge Base I tired this and put the local-setting.js in and now the firefox wont start at all. "failed to read the configuration file. Please contact your system administrator. well read several sites that all say to do the same thing but they are talking windows and mac so may be i am missing something being Linux...So what I did was create a file called
/usr/lib64/firefox-3.0.12/defaults/profile
more mozilla.txt
//
[code]...
Still get error.this link explains what the setting 0-5 are used for Network.proxy.type - MozillaZine Knowledge Base So i thought this might be a permission issue and did a 777 on the local-setting.js file. Still get the error.
I installed DansGuardian. In order for it to work I set the system wide proxy. However it is really easy to get around DansGuardian by going to preference proxy setting. How do I password protect this setting so it requires a password to change proxy setting? Preferably a different password than the normal sudo password if possible. If not I at least want the sudo password protecting it! I run multiple browsers so doing it via the system rather than the browser made the most since.
I want to lock down my server to allow only certain ip addresses and ports in. I was thinking of doing this through the iptables but someone sugguested I used the hosts.allow and deny files to allow who can access the system. What do people suggest? If I"m trying to ensure no ip's can access my system except the ones I want, how would I do this with just the allow and deny files?
is there anyway for me to dl a proxy or use a proxy on ubuntu? other than the web based ones. i looked into using system->preferences->network proxy, but that stuff went way over my head. can someone explain this to me? how would i go about setting up a proxy for the web and using it effectively?
Setting up an Internet proxy In the past I had set a computer to act as an Internet proxy. This would be multihomed, and running dansguardian, tinyproxy and firehol. Then webmin would be used as interface. By time I realised that this system is far from effective. Is there some other way to setup a proxy to be placed between users and the Internet? I would like (the admin) to be able to see in which sites users go and have a lot of control on access..
my linux box in the office has an a proxy server to access the internet. i can set this on my browsers. id like to know how i give my shell (bash) the proxy server settings so i can wget,yum install perl modules, etc. on my shell terminal without problems.
I am playing around with transparent proxies, unfortunately I do not have two machines to test it out with. The current way I am doing things is the program makes a request to a computer on port 80, I use
Code:
iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j REDIRECT --to-port 1234 to redirect to my proxy that is listening on port 1234. The proxy will send out a request to port 81 (as all outbound port 80 are being fed back in to the proxy and if it sent out to port 80 it would just be a infinite loop) so I want to do something like
Code:
iptables -t nat -A OUTPUT -p tcp --destination-port 81 -j DNAT --to-destination xxxx:80 The problem lies with the xxxx part. How do I change the destination port without changing changing the destination ip?
I have recently installed tor + vidalia + privoxy on my maverick system. What I was hoping to do was set up transparent routing through tor using the instructions here - [URL] But Ive had no luck with any of the examples given. When Vidalia tries to connect it stops at the point of generating a tor circuit and never gets any further.
i want to setup a proxy authentication on fedora 15 for minimum of 5 users using squid but i had successfully setup a proxy sever on my system and its working perfecly.# vi /etc/squid/squid.conf this was the output.
I was willing to create proxy in between the web app. and MySQL database so that I can do some modification before sending the query to the DB. But how to grep the query in the middle isn't working in the head yet. I found a tool named 'greensql' which captures the query in the middle but couldn't get how they are doing it.
Ubuntu 9.10 10.04 "software center" seems like a good idea compared to the previous implementation but it ignores proxy settings under system->preferences->network proxy and system->administration->synaptic package manager->settings->preferences->network.
Other sections of Ubuntu work fine through the proxy e.g. web browsers and using synaptic directly. However sudo apt-get install doesn't work through a terminal on Ubuntu 10.04 beta despite all updates. problem is definitely in Ubuntu as some parts of it recognize the proxy settings and other parts don't. This disconnection appears to be worse in U10.04 compared to U9.10 but earlier distributions (from memory) never had this problem. Is there a "fix" I can use to get Ubuntu 10.04 to recognize the proxy settings across all its features?
I used windows OS and installed Ubuntu 10.04 (amd64) in separate partition and works well but had a problem in internet connectivity. Likely reason may be the proxy setting that we used in college (currently). I used this commands to set up the IP address and gateway.
ifconfig -a | grep eth "eth0" sudo ifconfig eth0 192.168.5.209 netmask 255.255.255.0
[code]....
Then I manually set the proxy setting of HTTP which is given as proxy server 192.168.5.2 and port as 8000, further more there is a wins setting which is 192.168.1.178, really don't know where to put this number.
I think there is an application which lets you set the proxy settings for all applications. I remember seeing something like this in Gnome's network menu but now I'm using XFCE.
I have to set up a proxy for my work's network. No computer except the proxy has a direct internet connection. The proxy will NOT be transparent so it authenticates with Active Directory and allows or denies pages. The squid proxy is up, and working accordingly, denying and allowing what's needed to who's needed. BUT! Thunderbird and Outlook didn't work, so in less than 10 minutes I was forced to fall back.
I read googling a lot, and searching a bit here about socks, which seems to be what I need but also that squid is already a socks proxy. Web pages were the concern, it's not needed that other stuff is authenticated, it might as well be transparent for Outlook, Thunderbird and other programs *for example, it's not needed to block a Warcraft III game, though, allowing it explicitly is not the point either* but as of now, none can connect *haven't actually tried Warcraft though, but stuff like Adobe's updater didn't work either and I recall someone mentioned Windows Live messenger didn't either* The Squid Proxy is a CentOS.
I am trying to install a router on my CentOS 5 box, while i have properly configured IP address, Subnet, Default GW and DNS, I am at the point of trying to set up the Proxy. I have added a line: "proxy=http:ip_address:8080/" to the file of "/etc/yum.conf" The Proxy server here does not require any username nor password however I still cannot ping any website, while I tried to ping 74.125.45.100 (google.com) it returns the following message:
I've been trying to make myself anonymous, but I cant find 'Tor' anywhere, tried 'yum & kpackagekit' neither have it. I did find 'Privoxy', installed it, set proxy for HTTP and HTTPS in Firefox, but it says 'unknown proxy' when I try to use it! I've been to the Privoxy web site and read through the 'User manual', but most of it is 'geek' to me!
I got a problem about network proxy setting. With the graphics setting interface, I set auto proxy with the URL address but it is weird that the setting only work with eth1(wireless), doesn't work with etho(wired). however my wireless driver is always a problem for Linux. i also tried export http_proxy= XXXXX:8080 it still doesn't work at all.
how to lock down individual users from setting a proxy server. Its a server not a WS so it should never go to the internet. I want to lock down the system side and firefox 5 settings.
i must make this work with the use of virtual pc's. I have vm player and installed fedora ( the latest version ) and one xp . So i have 2 virtual pc's. I'm making it simple for start so i can add more pc's when i see that it is working. I have setup a dhcp server at the fedora virtual pc. The fedora virtual pc is like a soho router. The xp pc is getting ip from dhcp while the fedora one has a static one.
My pc is behind an adsl router. Both virtual pc's can see each other which means i have no connectivity issues.Im trying to setup a squid proxy ( transparent one ) so for example the xp pc can access porn sites and such. I used all required configuration for the squid to work and started the service. Ive also inserted with iptables the commands to forward all incoming port 80 packets to port 3128 ( the squid ). It doesnt seems to be working and i thik i know why but i dont know how to fix it.
Because the xp has a gateway at 192.168.1.1 ( the adsl router ) packets go directly to it and not to the soho router ( fedora virtual pc as i intend to do) What can i do to solve this problem ? How can i forward all packets to go to the fedora virtual pc first and then the fedora pc to forward them (if necessary) to the adsl router? PS. I used Bridged connection on the networking configutration on the vmware player ! If you also want i can post the code for squid or iptables if needed !
I am working on fc10. I connect to internet using two connections: with proxy and without proxy. Initially I had some problem in configuring yum for proxy and I resolved it by creating files proxy.sh and proxy.csh in /etc/profile.d with the required details (export_proxy).Now when I connect to my connection without proxy I have some problems .Whenever I try to do yum update I get the following error:
"[URL]: [Errno 12] Timeout: <urlopen error timed out> Trying other mirror. Error: failure: repodata/primary.xml.gz from adobe-linux-i386: [Errno 256] No more mirrors to try." what changes do I need to make in order to use yum in the connection without proxy?
I've recently installed F15 on my old thinkpad X41 to give it a go after sticking to ubuntu for quite a bunch of years now.
Somehow there seems to be a problem with the installation tho: the screen freezes up (as does the keyboard) after a while using it - not many programs open, a couple of workspaces enabled, no memory or CPU stress whatsoever - and all i'm left with is a moving mouse cursor. Ctrl + alt + F2 doesn't work and the only solution is to restart the laptop again.
Tried the fallback mode and same thing still happens, so maybe its not a graphic card issue.
My computer keep locking up when I try to open a new tab in Google Chrome. It locks up when I do other stuff too but it does not stay locked up. When it gets locked up from Chrome I have to fix it by doing Ctrl + Alt + Backspace. It only happens sometimes though. I can open new tabs sometimes without it locking up. I know it has something to do with my graphics driver (I have an ati). When it locks up I can't do anything and then like 10 seconds later I can move my mouse but that's it, everything else is still frozen. That's when I do Ctrl + Alt + Backspace. Here is what the messages log file says:
Quote:
Jun 22 17:47:31 hostname kernel: [12767.018056] radeon 0000:01:00.0: GPU lockup CP stall for more than 10000msec Jun 22 17:47:31 hostname kernel: [12767.018058] ------------[ cut here ]------------
[Code].....
I changed the real host name of my computer to hostname.
I'm happily running Fedora 13 as a guest OS in VMWare 3.0.1, except that it has one little issue.Sometimes the mouse would get terribly confused. It generally happens when I hit the mouse scroll wheel or when I move a window around very quickly. After that the left mouse button would stop working...
Anyway I found an easy workaround which I thought I'd share.Just hit 'enter unity' on the VMWare player menu. Then you can immediately exit unity again. This somehow resets the mouse into its normal state...
I added the rpmfusion repos so that I could install the nvidia drivers and downloaded whatever updates appeared. Initially after rebooting, I kept getting "No root device found" which I've managed to solve but now it keeps locking up after "Starting atd". That actually manages to load and then it locks so I'm guessing that it's "S99livesys" that is causing the problem.From googling, this appear to be a problem with certain kernels and can be resolved by either using an older kernel image or turning the process off in the command line. My problem is that this was a fresh install so there's only one kernel image so it's impossible for me to use a different one. For the same reason, I can't get into the command line.
Is there anyway to get around this without re-installing?I don't want to have the same issue if I re-install?Can I download the kernel images and just place them in /boot?
I upgraded from F12 i686 to F13 (I should say clean install). And now ever so often my computer locks up...... I will wait for an update or something this week but if it continues after I may have to go back to F12 (on another HDD)
