I want to bypass my isp web content filtering with squid. i know i have to encrypt my connection between my browser and squid server.how can i do that without using such Putty or Stunnel?which configuration i have to do on squid?
View 1 RepliesI received stunnel 4.40-0.6.1 as an update from "zypper up" (openSUSE 11.4).After a reboot, stunnel does not work anymore for the programs that need it.Symptom: the program (emacs+mew) hangs for ever, telling me
"Creating an SSL/TLS connection..."
/var/log/messages does not contain a clue and restarting stunnel via
"rcstunnel restart" looks fine:
[code]....
I have already developed file type filtering functions through squid. Now I want to deal with content filtering aspects... What tools are available there for so in linux?
View 6 Replies View RelatedI've been using an old Fortigate-60 at home for the kids for some time but now the license is expired again. Are there any free or inexpensive alternatives? I'd like something I can run on a linux firewall and share against multiple users, with different profiles. In the past I ran squid and I whitelisted sites each kid was allowed to use but this becomes tedious as the kids get older and need access to more. I'd love something that could check a website rating or category list, let the user through for certain categories, and block bad or unrated sites. I don't really need virus checking or email scanning or the like.
View 1 Replies View RelatedI work at a cybercafe and i am currently plagued by users who, despite the warning not to, continue to watch porn and use p2p software on my connection. I have done some preliminary research on how to filter the web content as well as to reduce the bandwidth used by p2p software on my network. I found that a solution that has worked for many with regard to web content control is danguardian + squid or privoxy in conjunction with a firewall like firehol or something of the sort. Others use an os like untangle or clear os and install it on a stand alone server. then others use open dns. although i would like the open dns solution, i will need to install a dns client, ddclient and i am a linux newbie so and ddclient requires some compiling or so, and i'm not yet into that. I am also currently not in the mood to dabble into untangle or clear os bcos it will cost me a lot do download the iso's. Internet access is costly over here.
Before i go ahead to implement the steps in any of the tutorials i have seen, i am wondering if such a measure will even help at all.You see, at my cafe, i use my server to share the connection to all my clients. I connect to the internet using a gsm modem. then i have two nic's. nic1 is set to share my connection and my router connects to that nic1. nic2 connects to my router using a static ip to enable communicate with my clients. If i implement something like dansguardian on my server, will it solve the problem for me, that is, do i have to also re-implement the steps i took to configure dansguardian on all the other pc's, that is, my clients?
My network is:
ISP --> SonicWALL--> Proxy --> LAN
Currently Sonicwall is running VPN, DHCP, port forwarding etc.. in a range of 10.0.0.0/24 and I have tried to configure Squid Proxy for content filtering (using squid 3 Transparent mode on Fedora 10 and Iptables). Now I need to implement the proxy over my network without changing the SonicWALL current settings (VPN, Port forwarding and DHCP).
I am trying to setup a putty session to putty from one Ubuntu machine to another. I know how to setup to connect to the machine from Windows and I am using the same settings for the one I am trying on the Ubuntu machine but it fails to connect. It fails immediately so I believe that putty is not able to find ssh. Is there some configuring that I need to do.
View 7 Replies View RelatedHow do I fix this stunnel error in Fedora 15(LoveLock)? I previously have been able to run stunnel in Fedora 14 and had stunnel up and running. Just recently moved to Fedora 15 LoveLock and now stunnel returns the following fail mesage when I try to restart stunnel.# /etc/init.d/stunnel startStarting stunnel (via systemctl): Job failed. See system logs and 'systemctl status' for details.Does anyone know What changed or how to fix this fail error?
View 4 Replies View RelatedFrom what I understand Postfix doesn't support SMTPS or SSL without the use of a tool called STUNNEL. [URL]
So I have embarked on a path and have run into stumbling block. I followed several articles: [URL] or [URL].
Neither one worked and I cannot figure out what it could be. Can someone give me a simple explanation on how to set this up?
how to install stunnel (patch I think ) with haproxy. I guess I would need clear cut instructions because I will be doing this on a production server and dont wanna make any mistakes.
View 6 Replies View RelatedI am using find to search for .tgz files modified more than 7 days ago and delete them.find /directory/ -iname backup*.tgz -daystart -mtime +7 -exec rm -rf {} My problem is that find will go through the content of tarball as well and list all content. I want to only search main tarball and delete it if older than 7 days.
View 4 Replies View RelatedI have 2 services registered one for HAProxy and one for stunnel. When I type service start haproxy or service start stunnel they start and everything works fine. I ran ntsysv and they are set as autostart, and I have init.d scripts that work. I have checked the runlevel and using chkconfig runlevel 3, 4 and 5 are :on. And I also added service haproxy start and service stunnel start to inittab. But when I restart the computer haproxy and stunnel fail to autostart. I am a fedora novice and I have no idea why this isn't working...
View 4 Replies View RelatedI have been trying to get command line email working for cron email reports and such. I have set up stunnel for ssl and this works with thunderbird (set to route through stunnel with no ssl in thunderbird). I am trying to use ssmtp as I don't need all the complexity of sendmail - just trying to use an [URL]..account It complains that my address is not verified. I think the from line is not set up properly but I have been unable to see this in the stunnel logs and ssmtp doesn't seem to have logs. Is there a way to get more logs from stunnel. How do I make sure I am sending the right email and not something like "localhost"?
View 1 Replies View RelatedIf you have the value 100 in File1 and the value 5 in File2, how do you write a script to divide the 100 in File1 by the 5 in File2 in Linux Bash Shell?The operating system I am using is Ubuntu 10 and object is to write a script to accomplish this task.
View 5 Replies View RelatedI did a recursive search using grep in a list of files for lines containing a specific word. It brought everything up ok but now I need to filter it out and print the results to a file with
* Path Name
* A section of the line
The path ends in a colon and after it could be any number of words, spaces, and punctuation which the one phrase I need being somewhere in there - I need the phrase to be filtered out and merged with the path like this
"path/to/file: phrase"
I'm guessing awk is the best way to do this but I don't know anything at all about awk except it specializes in filtering.
Let's say I have a few hosts on the same subnet, and they are all connected to a central Linux box running a filtering bridge. If I tightly control the communications between the hosts using the filtering bridge, is this just as good as seperating hosts into different subnets (e.g. DMZ and Internal) ?
View 6 Replies View Relatedwhat is the acl type is used to bypass a website where to implement the rule?
View 3 Replies View RelatedI pay for wifi usage. The access points are using mac address filtering. I know this because I can spoof the mac of another computer of mine and get it online. I'd like to get both the computer's online. I've been trying to do ip masquerading. It hasn't been working so far. I am not sure if the computer connected to mine through a cross over cable is revealing its mac address to the access points when communicating. If so, how does one get around this? ping shows connectivity between the two computers.
View 4 Replies View RelatedI have a question regarding the use of iptables as sort of a firewall I suppose? Using a linux router which has a server machine connected to it. The router is also acting as a PPTP VPN server, which I would like to allow some friends to connect to so that they can VPN to my LAN.
The question I have is how I might be able to use iptables to apply restrictions to the VPN traffic to only access 1 IP? The server is on the LAN with an IP of lets say 192.168.1.25, and the VPN given IP range is 192.168.1.51-55. The router has the .1 IP, but the PPTP server on that router uses an IP of 192.168.1.50. How might I restrict the traffic from the VPN connections to only be able to access the .25 server, and possibly only on certain ports? I don't want to allow the VPN connections full access to everything on the LAN and especially not to WAN.
I am using IWSS on RHEL-5 for web filtering and want to use Squid proxy at the same system . I can configure Squid behing of IWSS .
View 1 Replies View RelatedHow do i filter the daemoms list for just 1 letter and then turn off certain run levels for that daemon?
View 2 Replies View RelatedI want filter some sites on my network by squid .
My Distribution is suse server 11 squid 2.7
I have made linux raid array, named it md1 and it can be found under /dev/md1. I have created single partition (whole disk) of type LVM (8e) and it can be found under /dev/md1/md1p1.
When I run: pvcreate /dev/md1/md1p1
I get this message: Device /dev/md1/md1p1 not found (or ignored by filtering).
But if I run pvcreate /dev/md1
Everything went OK. I can create volume group and logical groups after that.
I haven't found anything specifically on net, except that partition for LVM to work should be of type 8e. Does this doesn't have to be true when we use whole disk as a VG? Should I expect any problems since this is going to be iSCSI target disk?
Is there any way to filter the output of a command based on the values on the output columns. For example i execute du -h on directory with many files. Now I want to filter the output based on the size (i.e. M or G or K ). The filtered o/p should contain only M(megabytes) or G(gigabytes) and also all columns.
20K ./fload/temp/20000101/Pam
15K ./fload/temp/20000101/NAVEX
29K ./fload/temp/20000101/Avenge
[code]....
I have slackware 13.0 on my HP 520 laptop.My machine is connected to the internet and it also act as a gateway for other machine of mine.
I want to use mac filtering options of iptables.But i am getting following error
iptables v1.4.3.2: Couldn't load match `ac-source':/usr/libexec/xtables/libipt_ac-source.so: cannot open shared object file: No such file or directory
I have installed Suse 11.3 on /dev/sdc which is a hard drive connected to a usb port. Windows 7 lives on /dev/sdb in the box. Another drive sda is in the box also. I configured bios to boot the usb drive first. Grub is installed on /dev/sdc mbr. My scheme is to allow me to boot directly to Windows if the usb drive is not powered up, and directly to Suse if it is powered up. That all works. However, I would like to bypass the grub menu and boot right into Suse, like what happens with Windows, not having to select an entry from that pesky grub menu.
What is the best way to configure the system so that this can work? I've done a lot of searching but there are too many grub horror stories in the haystack to find this particular needle. Also, I've had my share of problems recently after losing control of the boot process somehow and not being able to boot into Suse at all. All of the postings I found on the net about recovering from that turned out to be phoney in some way and I had to reinstall to bet better. I'd like not to repeat that scenario.
I upgraded my Ubuntu to 10.4 and when I boot it stops for 24 seconds at the boot menu then loads. This is the same menu you get on boot when you press Esc. How do I get Ubuntu to boot normal?
View 2 Replies View RelatedI have a persistent installation of 10.10 on a USB thumb drive installed with the Universal USB Installer. When I boot, it always brings up the welcome screen, with the languages on the left side, the big "Try Ubuntu" button in the center, and an "Install Ubuntu" button on the right. I just want to run ubuntu from the USB stick. When I click on "Try Ubuntu" the system hangs for 2-3 minutes, requires a force-quit and then brings up the desktop.
If, at the beginning of the boot process, I interrupt it bringing up the initial menu, I can select "English" then "Run Ubuntu from this USB", and it boots very quickly directly to the desktop. Before this install I was running 9.04 and later 10.04 from the same USB stick and had no issue with it booting directly to the desktop. Ideally I'd like to not need to intervene and just have load to the desktop. Do I need to make some changes to grub?
I realise that passwords are a good thing but I'm getting fed up having to enter a password just to get my wireless network to work every time I switch on Ubuntu or when I log out and back in again.
Seeing as there is nobody in the house that I want to keep away from the computer, is there a way to automatically sign-in to my wireless network without having that annoying key-chain popping up every time?
I currently use 4 keyboard maps in my session (Russian, Ukrainian, Polish and French). I'd like to use one more : Sweddish, but it seems that I can't have more than 4. Does anybody knows a way to bypass this limit?
View 1 Replies View Related