Security :: Monitoring Tools For Squid Proxy Server
Feb 9, 2010is someone can guide the best open source tools to monitor as webbase,gui,shell prompt
View 1 Repliesis someone can guide the best open source tools to monitor as webbase,gui,shell prompt
View 1 RepliesI have setup a squid server on Rhel5.4. I would like to know how I can configure my squid server to block anon proxy sites.
View 3 Replies View RelatedI am currently running a 64-bit Fedora 14 server which hosts a game server, a voice server, and remote desktop functionality, each on a distinct TCP port. I am currently using the built-in firewall to deny all traffic other than ICMP ping/pong and TCP traffic on those specific ports.I am looking for a graphical application which will let me monitor any connections being made to my server in order to keep an eye out for possible security concerns. To be more specific, I'd like to be able to see the source IP addresses, TCP/UDP ports, and individual bandwidth in use by external connections being made to the server, along with any other information that might be helpful in identifying a possible intrusion attempt.
View 3 Replies View RelatedMy squid server works fine in fedora 11 system . Is there any web like interface for admins to create,change,modify users of squid and to view their logs.
View 1 Replies View RelatedI would like to ask some help and tutorial for setting up and how to configure squid proxy server in my (Home PC Server). I am a newbie in Linux Centos. I already installed in my system the CentOS 5.5 . Now, I want to configure it as my internet server, all of my 4 system running in Windows including the laptop I want to connect through my CentOS pc with username authentication. I assign all IP address by static. see tthe attachement in my set up. [url] I just want to know what I need to change and add in my squid config file. And how can I configure properly my CentOS with 2 LAN card as internet server.
View 1 Replies View RelatedCurrently my DHCP Server is working now what i want to have is auto detection of squid proxy in any browser but I still got an error in my dhcp server when I restart it.
My Config:
# DHCP configuration generated by Firestarter
ddns-update-style interim;
ignore client-updates;
[code]....
I am looking for some monitoring tools (such as disk usage,memory usage, cpu,etc) for my linux machines. I came across two tools, cacti and splunk.Which one is better ? It will be nice if you can also let me know the reason.
View 8 Replies View RelatedI have a scenario where I want to monitor at disk performance (cpu and memory also if possible) on a RHEL 5 server functioning as a NAS. I have several machines that backup content to this server via scheduled cronjobs and I'm curious to see if the machine is hitting a bottleneck under load.I attempted to setup cacti on one of our LAMP servers and had a miserable time due to running PHP 5.3 and deprecated function issues.Can anyone recommend an alternative keeping in mind I have only very basic experience with SNMP?
View 1 Replies View RelatedI have a problem with sites or domain blocking by squid proxy server in rehl 5. I have trying lots of time but i'm not succed.pls help me how to block sites or domain in rhel 5.
View 3 Replies View RelatedI want to monitor the bandwidth used by each user in my proxy server.
View 1 Replies View RelatedI want to know that squid in 5 min ago and 1 hour ago how much traffic transferred for monitoring purposes?? where can I get this info from running squid? of course I get I have to note that access.log is disabled for some reasons.
View 3 Replies View RelatedWe have few servers and we need to monitor mysql and ping (port 80) on our servers to send us email notification and also we need sms notification when something is wrong, we can ask our developer to write sms notification (which is very important for us) because we already have the API and only need a output from a good monitoring tools to show to our developer and ask him to write the notification program.
Our primary sever is centos with WHM installation and hosts about 600 websites.(need to monitor mysql & port 80 on this.)The secondary one is windows server with virtuzzu installation and host about 15 windows VPS (The server crashing some times and we need to findout its out of service ASAP .)Should we use monitoring websites such as hypersins.com or siteuptime.com (which is a little expensive for us especially because of international sms rates.) or there is nice tools we can easily configure and use !
I have configured the proxy server. I want to observer users's download information. What should I need to do? Shall I install squint? what is the process? How do I monitor the users?
View 1 Replies View Relatedi want to setup squid proxy server at my home. my service provider has ISA server install on its machine. in windows as a client we have to enter proxy settings manually to IE and firefox. but now in squid where i have to define to use this proxy settings. and what about /etc/resolv.conf . my service provider's connection settings are stated as under.:
IP ADDR= 192.168.1.x
subnet mask=255.255.255.0
Proxy= 192.168.1.1 port= 8080
we having more than 5000 users and will have 7 squid proxy servers with high end configuration upto 4gb ram n 320*5 HD in rhel4&5 most of them complaining that at peak hours their browsing speed is slow but we are having 1gbpgs link at peak hours i.e when established connections r flowing more than 550 browsing gets slow how to do fine tuning are squid is only responsible to access upto 600 connections
View 2 Replies View RelatedI want to make a transparent squid proxy server in centos. The squid proxy version is 2.6 stable. I made a normal squid server but want to make it transparent so that users do not need to enter the proxy settings in web browser. Even i searched about this on google but not getting it properly.I have two lan cards on centos system. ETH1 used for LAN and ETH2 used for WAN. And in this squid.conf i written "http_port 172.16.31.1:3128 transparent" and i also added a rule in iptables which is "iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128" but still i have to enter proxy settings at client's web browser to use internet
View 4 Replies View RelatedI have 4 servers running squid/3.1.1 proxy server. Since the latest version I can no longer FTP. I have posted this problem in multiple places but have received almost no response. I've found several other post to this problem throughout the Internet which have also gone unanswered. So, once again, I thought I'd give it a try. As I said "I have 4 servers running the newest version of Squid". When I try to access an ftp, any ftp, I receive an error (check attached image). This was never a problem until just recently. Squid should work perfectly find with ftp, it is not a strictly http proxy.
I turned my firewall off just to make sure, still had the same issue. If I jump directly on the server itself with no proxy settings set in the browser it will work fine. As soon as I set the browser setting to access the Squid software I get the same error. I've included my squid config (which is unchanged from the default settings), maybe somebody better versed than myself can point out an obvious flaw. Everything else seem to work just fine, it's only FTP that's a problem.
I followed this guide: [URL] and restart the Squid Server with no errors but when I try to SSH into it:
Code:
ssh -L 8080:squidserver:8080 user@squidserver
It just hangs there for a long time, not timing out and eventually (after a long wait) I get this:
Code:
ssh_exchange_identification: Connection closed by remote host
What could be the problem? I can SSH normally into the computer, but not into the proxy server. Do I need to forward the 8080 port on that network?
We have two offices suppose A and B. At office A, we use centos 5.3 computer as router and squid proxy server. At office B we use a cisco router to connect to Internet. Computers at office A that has direct access to Internet can access computers behind cisco router at office B using vnc viewer. But computers at office A that can use internet only through squid proxy can't access computers behind cisco router at office B. Is there any way so that I could allow squid clients to access computer behind cisco router at office B using vnc viewer.
View 3 Replies View RelatedI am a newbie to SQUID.How to configure it and make it active in my system?
View 1 Replies View RelatedI am using squid server. I want to redirect one perticular url request to other squid proxy server .
View 1 Replies View RelatedI am trying to install Squid 2.6 as Transparent proxy server.Can anyone provide the step by step configuration details
View 8 Replies View Relatedi am monitoring access log messages in squid proxy server,can it possible to get date,time,day in access logs is it possible
View 2 Replies View Relatedi just implemented ur instruction n got success but i have one problem that i want to provide only two or three web sites access to groups in squid.
View 1 Replies View RelatedI have configured Squid proxy on RHEL 5. Now I want all squid clients to use default website which is set by Squid Proxy Server. So whenever user opens their browser they will visit same website automatically.
View 3 Replies View RelatedI am starting to get bottlenecks in the loading of webpages via squid. It is not the actual playback of video that has performance issues, this is very good. However, when a webpage is first requested, it is the initial response that takes more than a few seconds to load the page. I am wondering how to troubleshoot the issue as I don't know whether it is squid, the dns lookup, the number of users, RAM, or the bandwidth. Bandwidth seems to be the least likely since the server has a high bandwidth and video streaming appears to have no problems. I do not have caching turned on yet, which would certainly help because I do not want to cache flb, mp3, etc. files and the last time I turned on caching the performance was actually worse. The slow loading of pages has only just beguin to creep into the performance, it wasn't an issue before.
View 5 Replies View RelatedCentos 5.4 distro using on remote machine. I have remote site where internet access given via squid proxy. So when we enter in browser it start working internet fine. But on command line (bash shell prompt terminal) like wget, ping, nslookup, traceroute etc., these commands does not work.
View 6 Replies View RelatedI'm doing a research for my MSc analyzing the patterns in squid proxy logs. for that I need sample squid proxy log files which are freely avaliable to refer. provide some proxy log files or providing links to download them.
View 5 Replies View RelatedI have installed and tried both squid version as transparent proxy but they just don't work.
I have eth0 which is where my internet comes in and eth1 which is my local network 192.168.1.0/255.255.255.0.
My default firewall policy is to drop input output and forward, i have already set my firewall to accept and workout the squid and it is working.
Here is the relevant rules i have on my firewall:
Code:
Here is the sample conf i am using for squid:
Code:
Always_direct allow all When using version 2.7.x i was able to make it transparent when i used the below rules:
Code:
I readed the Docs on the squid page but the above rules can't be reproduced to 3.1 and i don't wish to use such rules to make it transparent or hidden so i want some help to figure out why it inst transparent.
I've been using squid-cache for a long time for authentication/authorization. It has work fine for years, but now it starts working too slow only in one computer (the others, works fine).
It's configured as a reverse proxy.
I see it can be a DNS problem, but the computer is configured with the same dns servers in resolv.conf that the other computers have.
I use squid 2.6.stable14 on RHEL 4.4.
If I restart the service (service squid restart) it works fine, but 15-20 minutes later, the problem repeats.