INSTALLING DHCP SERVER ON UBUNTU 14.04.2 LTS | FOR TRANSPARENT PROXY SQUID 3.5.7

<div class="separator" style="clear: both; text-align: center;"> <span style="font-family: "verdana" , sans-serif;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmMl2CUZ3cOL_K_0KfOGg__DgUP1pXGR6sC7PjitvE10YGdbr2uX3vb-b5fWqu7pCDkHwQ6-D2RvFn761XltclDxP-q8D3K98GN6uUhDj8B8ir35esldNYSgdaj52yBKuYrAMsib8LaQ/s1600/cbs-DHCP-SERVER.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmMl2CUZ3cOL_K_0KfOGg__DgUP1pXGR6sC7PjitvE10YGdbr2uX3vb-b5fWqu7pCDkHwQ6-D2RvFn761XltclDxP-q8D3K98GN6uUhDj8B8ir35esldNYSgdaj52yBKuYrAMsib8LaQ/s1600/cbs-DHCP-SERVER.png" /></a></span></div> <div style="text-align: justify;"> <br /></div> <span style="font-family: "verdana" , sans-serif;">DHCP Server provides an automatic IP leases for DHCP client in the network. The benefits are we don't need to configure Computer's client an IP one by one. Especially we need to make proxy server as main gateway that can make proxy server true transparent in previous <a href="http://www.cyberscie.com/2015/08/installing-squid-357-as-transparent.html" rel="nofollow" target="_blank"><i><b>article</b></i></a>.</span> <br /> <div style="text-align: justify;"> <br /></div> <div class="separator" style="clear: both; text-align: center;"> <span style="font-family: "verdana" , sans-serif;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjx2eKIavSYxVzQNBsv7aBtLePq8-HUCM5LMTvQnBLGO4cwFzYsTrzyEwcFmL4n-waW-Slvk6aWc3LGCquM8azI8g-SAI9bssOB_tutmr4jbOhYm5wapVqaExrLeH8DfUptuVputJSFTQ/s1600/cbs-TOPOLOGY-DHCP-SERVER.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjx2eKIavSYxVzQNBsv7aBtLePq8-HUCM5LMTvQnBLGO4cwFzYsTrzyEwcFmL4n-waW-Slvk6aWc3LGCquM8azI8g-SAI9bssOB_tutmr4jbOhYm5wapVqaExrLeH8DfUptuVputJSFTQ/s1600/cbs-TOPOLOGY-DHCP-SERVER.png" /></a></span></div> <span style="font-family: "verdana" , sans-serif;"></span> <br /> <div style="text-align: justify;"> <br /></div> <ol> <li><span style="font-family: "verdana" , sans-serif;"><b>INSTALLING DHCP SERVER</b><br />Type following command to install DHCP Server:<br /><br /> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"># apt-get install isc-dhcp-server</span><span style="font-size: x-small;"><span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"></span></span></span></span></div>  </span></li> <li><span style="font-family: "verdana" , sans-serif;"><b>CONFIGURING DHCP SERVER</b></span><span style="font-family: "verdana" , sans-serif;"><br />I Use a static IP for known clients eg. client 1, and client 2.</span><span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;"><br /></span></span><br /> <div style="text-align: justify;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <i><span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;"># mv /etc/dhcp/dhcpd.conf /etc/dhcp/dhcpd.conf.old<br /># nano /etc/dhcp/dhcpd.conf</span></span></i></div> <i><span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;"><br /></span></span></i></div> <i>(</i><span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;"><i>Change according your need. These are for example:)</i></span> <div style="text-align: justify;"> <br /></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">ddns-update-style none;</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">update-static-leases on;</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">authoritative;</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <br /></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">allow unknown-clients;</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">use-host-decl-names on;</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">default-lease-time 604800; #86400=24  hours</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">max-lease-time 604800; #86400=24 hours</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">log-facility local7;</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">option subnet-mask 255.255.255.0;</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">option broadcast-address 192.168.2.255;</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">option routers 192.168.2.50;</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">option domain-name-servers 192.168.2.50;</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">option domain-name "midnet.com";</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">option netbios-name-servers 192.168.2.50; </span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;">subnet 192.168.1.0 netmask 255.255.255.0 {</span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;">range 192.168.2.3 192.168.2.23;</span></span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;">}</span></span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;">host MID1 {</span></span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;">hardware ethernet 00:1E:37:3F:B6:20;</span></span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;">fixed-address 192.168.2.1;}</span></span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;">host mid2 {</span></span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;">hardware ethernet B8:97:5A:AC:3B:FC;</span></span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;">fixed-address 192.168.2.2;</span></span></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-family: "verdana" , sans-serif;">}</span></span></div> </span></span><span style="font-family: "verdana" , sans-serif;"></span></li> <div style="text-align: justify;"> <br /></div> <li><span style="font-family: "verdana" , sans-serif;"><b>FINISHING STEP</b><br />Start your DHCP Server <br /> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"># service isc-dhcp-server start</span></div> <br />If you want to restart your DHCP Server later, use this command:</span></li> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"># service isc-dhcp-server restart</span></div> </ol> <div style="text-align: justify;"> <span style="font-family: "verdana" , sans-serif;">Building a DHCP Server done. If you want to speed up your local network, complete with DNS Sever. You can install later on your Ubuntu Server Many programs, like <a href="http://www.cyberscie.com/2015/08/installing-squid-357-as-transparent.html" target="_blank">Squid Proxy Server</a>, <a href="http://www.cyberscie.com/2015/08/installing-dhcp-server-on-ubuntu-14042.html" target="_blank">DHCP Server</a>, Router, DNS Server, and DNS Crypt Proxy for bypass DNS Hijacking by ISP Providers that crowded at this time.</span></div> <span style="font-family: "verdana" , sans-serif;"></span>

INSTALLING DHCP SERVER ON UBUNTU 14.04.2 LTS | FOR TRANSPARENT PROXY SQUID 3.5.7

DHCP Server provides an automatic IP leases for DHCP client in the network. The benefits are we don't need to configure Computer...

Read more »

INSTALLING SQUID 3.5.7 AS TRANSPARENT PROXY CACHING HTTPS On UBUNTU SERVER 14.04.2 LTS

<div class="separator" style="clear: both; text-align: center;"> <span style="font-family: "verdana" , sans-serif;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhopTTy-SmIBAi85qfeKva5HGiUwYGDAXUHkqQWb2wk9bnqqfECAbqLnof2LDlvsOpJbe85Lc8mq79KRIAfCEwOhKMfAO7l5xuunn1kOCYP-gJ8OjXVjsk4i28fhJViKJ_RNBrnhoQSVA/s1600/cbs-Squid-3.5.7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhopTTy-SmIBAi85qfeKva5HGiUwYGDAXUHkqQWb2wk9bnqqfECAbqLnof2LDlvsOpJbe85Lc8mq79KRIAfCEwOhKMfAO7l5xuunn1kOCYP-gJ8OjXVjsk4i28fhJViKJ_RNBrnhoQSVA/s1600/cbs-Squid-3.5.7.png" /></a></span></div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> <span style="font-family: "verdana" , sans-serif;"><b><i><i><b>NETWORK TOPOLOGY</b></i></i></b></span></div> <div style="text-align: justify;"> <span style="font-family: "verdana" , sans-serif;">Client with network address (192.168.2.0) access the internet via eth1 (192.168.2.50) on Ubuntu Server machine, eth0 (192.168.1.50) will represent the client connection to modem / gateway (192.168.1.200). This typology requires client to make proxy as a gateway that can make proxy true transparent. The easiest way to make proxy as the main gateway is installing dhcp server on Ubuntu machine. <span style="color: #073763;"><i>See How to configure Ubuntu as Dhcp Server</i></span>.</span></div> <div style="text-align: justify;"> <br /></div> <div class="separator" style="clear: both; text-align: center;"> <span style="font-family: "verdana" , sans-serif;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6JBkfVca7h5ZFiMJ5KFBsG1Sx-A2e3uCqDPn5N49D-wW4JAOBMgk1az4ToLU96jngX0vULbMgRJCcfAMHy8ySArS9LAS4EHgcA0xbaik4c64SlROP5OrzhezhZVL3EksEGHUbz6PiJQ/s1600/cbs-Illustration.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6JBkfVca7h5ZFiMJ5KFBsG1Sx-A2e3uCqDPn5N49D-wW4JAOBMgk1az4ToLU96jngX0vULbMgRJCcfAMHy8ySArS9LAS4EHgcA0xbaik4c64SlROP5OrzhezhZVL3EksEGHUbz6PiJQ/s1600/cbs-Illustration.png" /></a></span></div> <div style="text-align: center;"> <span style="font-family: "verdana" , sans-serif;"><b><i>Illustration </i></b></span></div> <div style="text-align: justify;"> <span style="font-family: "verdana" , sans-serif;"><br /></span></div> <div style="text-align: left;"> <span style="font-family: "verdana" , sans-serif;"><b>FOLLOW THE STEPS BELOW TO INSTALL SQUID 3.5.7:</b></span></div> <div style="text-align: justify;"> <span style="font-family: "verdana" , sans-serif;"></span></div> <div style="text-align: justify;"> <div style="text-align: justify;"> <ol> <li><span style="font-family: "verdana" , sans-serif;"><b>INSTALL ADDITIONAL PROGRAMS THAT REQUIRED BY SQUID 3.5.7</b></span><span style="font-family: "verdana" , sans-serif;"><br />Login as root:</span><span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-size: x-small;"> <div style="background-color: #f3f3f3; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-size: small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"># sudo su</span></span></div> </span></span><span style="font-family: "verdana" , sans-serif;"> <i><b>Note:</b></i><br /><i>"For prevent some errors on adding programs do these step, skip if your Ubuntu Server has been updated."</i></span> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-size: x-small;"><span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: small;"><span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-size: x-small;"># </span></span><span style="font-size: x-small;"><span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;">nano /etc/apt/sources.list</span></span></span></span></span></span></span></span></div> <span style="font-size: x-small;"><span style="font-family: "georgia" , "times new roman" , serif;"> <br /> </span></span><ul> </ul> <div style="border: 3px solid #809FFE; height: 100px; overflow: auto; padding: 10px; width: 96%;"> <span style="font-size: x-small;"><span style="font-family: "georgia" , "times new roman" , serif;">deb http://us.archive.ubuntu.com/ubuntu/ trusty main restricted<br />deb-src http://us.archive.ubuntu.com/ubuntu/ trusty main restricted<br />deb http://us.archive.ubuntu.com/ubuntu/ trusty-updates main restricted<br />deb-src http://us.archive.ubuntu.com/ubuntu/ trusty-updates main restricted<br />deb http://us.archive.ubuntu.com/ubuntu/ trusty universe<br />deb-src http://us.archive.ubuntu.com/ubuntu/ trusty universe<br />deb http://us.archive.ubuntu.com/ubuntu/ trusty-updates universe<br />deb-src http://us.archive.ubuntu.com/ubuntu/ trusty-updates universe<br />deb http://us.archive.ubuntu.com/ubuntu/ trusty multiverse<br />deb-src http://us.archive.ubuntu.com/ubuntu/ trusty multiverse<br />deb http://us.archive.ubuntu.com/ubuntu/ trusty-updates multiverse<br />deb-src http://us.archive.ubuntu.com/ubuntu/ trusty-updates multiverse<br />deb http://us.archive.ubuntu.com/ubuntu/ trusty-backports main restricted universe multiverse<br />deb-src http://us.archive.ubuntu.com/ubuntu/ trusty-backports main restricted universe multiverse<br />deb http://security.ubuntu.com/ubuntu trusty-security main restricted<br />deb-src http://security.ubuntu.com/ubuntu trusty-security main restricted<br />deb http://security.ubuntu.com/ubuntu trusty-security universe<br />deb-src http://security.ubuntu.com/ubuntu trusty-security universe<br />deb http://security.ubuntu.com/ubuntu trusty-security multiverse<br />deb-src http://security.ubuntu.com/ubuntu trusty-security multiverse<br />deb http://download.webmin.com/download/repository sarge contrib<br />deb http://webmin.mirror.somersettechsolutions.co.uk/repository sarge contrib</span></span></div> <span style="font-family: "verdana" , sans-serif;"> </span></li> <div style="text-align: justify;"> <br /></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: justify;" width:="100%"> <span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: small;"><span style="text-align: left;"><span style="font-size: x-small;"># </span></span><span style="font-size: x-small; text-align: left;"><span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;">apt-get update</span></span></span></span><br /><span style="text-align: left;"><span style="font-size: x-small;"># </span></span><span style="font-size: x-small; text-align: left;"><span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;">apt-get</span></span></span></span> install devscripts build-essential openssl libssl-dev fakeroot libcppunit-dev libsasl2-dev cdbs ccze libfile-readbackwards-perl libcap2 libcap-dev libcap2-dev libnetfilter-conntrack-dev -y</span></span></div> <div style="text-align: justify;"> <br /></div> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: justify;" width:="100%"> <span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># apt-get install ccze sysv-rc-conf -y</span></span></div> <div style="text-align: justify;"> <br /></div> <li><span style="font-family: "verdana" , sans-serif;"><b>INSTALLING SQUID 3.5.7 (<span style="color: red;">Latest 3.5.13</span>)</b></span><span style="font-family: "verdana" , sans-serif;"><br />a. Download and Extract, <span style="color: red;">choose one</span>!</span><span style="font-size: x-small;"><span style="font-family: "georgia" , "times new roman" , serif;"><br /></span></span><span style="font-family: "verdana" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># </span><span style="font-size: small;">wget -O - http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.7.tar.gz | tar zxfv -</span><span style="font-size: small;"><br /># </span><span style="font-size: small;">cd squid-3.5.7<br /><span style="color: red;"><b><i>Or The Latest Version Of Squid.</i></b></span><br /><span style="font-size: small;"># </span><span style="font-size: small;">wget -O - http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.13.tar.gz | tar zxfv -<br /><span style="font-size: small;"># </span><span style="font-size: small;">cd squid-3.5.13</span></span></span></span></div> <div style="text-align: justify;"> <div style="text-align: justify;"> <br /></div> b. Compile and Install Squid 3.5.x</div> </span><span style="font-family: "verdana" , sans-serif;">(<i>for lines 2-4, adjust your processor specifications to maximize the number of cores that will be used to handle Squid proxy process , eg core2duo . Guidelines for other processors <a href="https://wiki.gentoo.org/wiki/Safe_CFLAGS" rel="nofollow" target="_blank">here..</a></i>)</span><span style="font-family: "georgia" , "times new roman" , serif;"> <div style="border: 3px solid #809FFE; height: 100px; overflow: auto; padding: 10px; width: 96%;"> <span style="font-size: x-small;"><span style="font-family: "georgia" , "times new roman" , serif;">./configure \<br />CHOST="x86_64-pc-linux-gnu" \<br />CFLAGS="-march=core2 -O2 -pipe" \<br />CXXFLAGS="${CFLAGS}" \<br />--build=x86_64-linux-gnu \<br />--prefix=/usr \<br />--exec-prefix=/usr \<br />--bindir=/usr/bin \<br />--sbindir=/usr/sbin \<br />--libdir=/usr/lib \<br />--sharedstatedir=/usr/com \<br />--includedir=/usr/include \<br />--localstatedir=/var \<br />--libexecdir=/usr/lib/squid \<br />--srcdir=. \<br />--datadir=/usr/share/squid \<br />--sysconfdir=/etc/squid \<br />--infodir=/usr/share/info \<br />--mandir=/usr/share/man \<br />--x-includes=/usr/include \<br />--x-libraries=/usr/lib \<br />--with-default-user=proxy \<br />--with-logdir=/var/log/squid \<br />--with-pidfile=/var/run/squid.pid \<br />--enable-err-languages=English \<br />--enable-default-err-language=English \<br />--enable-storeio=ufs,aufs,diskd \<br />--enable-linux-netfilter \<br />--enable-removal-policies=lru,heap \<br />--enable-gnuregex \<br />--enable-follow-x-forwarded-for \<br />--enable-x-accelerator-vary \<br />--enable-zph-qos \<br />--enable-delay-pools \<br />--enable-snmp \<br />--enable-underscores \<br />--with-openssl \<br />--enable-ssl-crtd \<br />--enable-http-violations \<br />--enable-async-io=24 \<br />--enable-storeid-rewrite-helpers \<br />--with-large-files \<br />--with-libcap \</span></span><br /> <span style="font-size: x-small;"><span style="font-family: "georgia" , "times new roman" , serif;">--with-netfilter-conntrack \<br />--with-included-ltdl \<br />--with-maxfd=65536 \<br />--with-filedescriptors=65536 \<br />--with-pthreads \<br />--without-gnutls \<br />--without-mit-krb5 \<br />--without-heimdal-krb5 \<br />--without-gnugss \<br />--disable-icap-client \<br />--disable-wccp \<br />--disable-wccpv2 \<br />--disable-dependency-tracking \<br />--disable-auth --disable-epoll \<br />--disable-ident-lookups \<br />--disable-icmp</span></span></div> <div style="text-align: justify;"> <br /></div> </span></li> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-size: small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"># make && make install</span></span></div> <div style="text-align: justify;"> <br /></div> <li><b><span style="font-family: "verdana" , sans-serif;">CUSTOMIZING Of SQUID 3.5.x CONFIGURATION</span></b><span style="font-family: "verdana" , sans-serif;"><br />a. Squid.conf </span> <span style="font-size: x-small;"><span style="font-family: "verdana" , sans-serif;"><br /><br /> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-size: small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"># </span></span><span style="font-size: x-small;"><span style="font-family: "verdana" , sans-serif;"><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;">mv /etc/squid/squid.conf /etc/squid/squid.conf.backup</span></span></span></span><br /> <span style="font-size: x-small;"><span style="font-family: "verdana" , sans-serif;"><span style="font-size: small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"># wget --no-check-certificate -O /etc/squid/squid.conf https://raw.githubusercontent.com/cyberscie/cyberscie.com/master/server/squid-3.5.5/step1/squid.conf</span></span></span></span><span style="font-size: x-small;"><span style="font-family: "verdana" , sans-serif;"><br /></span></span></div> </span></span><span style="font-family: "verdana" , sans-serif;"><br />(<i>Adjust with Your Network Conditions</i>)</span> <span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-size: x-small;"><br /><span style="font-family: "arial" , "helvetica" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-size: x-small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># nano /etc/squid/squid.conf</span></span></span></span><i><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"> </span></span><span style="font-family: "verdana" , sans-serif;"><br /></span></i></div> </span></span></span><i><span style="font-family: "verdana" , sans-serif;"><br />(Check if there are missed configuration)</span></i><span style="font-family: "verdana" , sans-serif;"><span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-size: x-small;"><br /><span style="font-family: "arial" , "helvetica" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-size: x-small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># squid -k parse</span></span></span></span></span><span style="font-family: "verdana" , sans-serif;"><br /></span></div> </span></span></span></span><span style="font-family: "verdana" , sans-serif;"><br />b. Store-id.pl</span><span style="font-family: "verdana" , sans-serif;"><br />Store-id.pl is cache key used by squid. Please download store-id.pl configuration!</span><span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-size: x-small;"><br /><span style="font-size: small;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "georgia" , "times new roman" , serif;"><span style="font-size: x-small;"><span style="font-size: small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"># wget --no-check-certificate -O /etc/squid/store-id.pl https://raw.githubusercontent.com/cyberscie/cyberscie.com/master/server/squid-3.5.5/store-id.pl</span></span></span></span></div> <div style="text-align: justify;"> <br /></div> </span></span></span><span style="font-size: small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"></span></span></li> <li> <span style="font-family: "verdana" , sans-serif;"><b>MAKING CACHE DIRECTORY And SQUID 3.5.x CERTIFICATES</b></span><br /><span style="font-family: "verdana" , sans-serif;">a. Make Directory of Cache. eg:</span><br /><span style="font-family: "arial" , "helvetica" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># mkdir /cache/cache</span></span></div> </span><span style="font-family: "verdana" , sans-serif;"><br />b. Make Certificates</span><br /><span style="font-family: "arial" , "helvetica" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># cd /etc/squid<br /># mkdir ssl_certs</span></span></div> <span style="font-size: small;"></span></span><br /><span style="font-family: "verdana" , sans-serif;">(<i><b>Note!</b></i> <i>fill in the data as you want</i>)</span><br /><span style="font-family: "arial" , "helvetica" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># openssl genrsa -out squid.key 2048<br /># openssl req -new -key squid.key -out squid.csr -nodes<br /># openssl x509 -req -days 3652 -in squid.csr -signkey squid.key -out squid.crt</span></span></div> </span><br />c. <span style="font-family: "verdana" , sans-serif;">Make Cache Directory of Certificate that Using by Squid</span><br /><span style="font-size: small;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-size: small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"># mkdir /var/lib/squid<br /># chown -R nobody /var/lib/squid/<br /># /usr/lib/squid/ssl_crtd -c -s /var/lib/squid/ssl_db</span></span></div> </span><span style="font-family: "verdana" , sans-serif;">(<i><span style="color: red;"><b>be sure that there are no errors</b></span></i>)</span></li> <div style="text-align: justify;"> <br /></div> <li><span style="font-family: "verdana" , sans-serif;"><b>MAKING A SQUID 3.5.x START UP FILE</b></span><br /><span style="font-family: "arial" , "helvetica" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># wget --no-check-certificate -O /etc/init.d/squid https://raw.githubusercontent.com/cyberscie/cyberscie.com/master/server/squid-3.5.5/squid</span></span></div> </span><span style="font-family: "verdana" , sans-serif;"><br />Customize squid start up file as your needs</span><br /><span style="font-family: "arial" , "helvetica" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># nano /etc/init.d/squid</span></span></div> </span><br /><i><b><span style="font-family: "verdana" , sans-serif;">Note:</span></b></i><br /><span style="font-family: "verdana" , sans-serif;"><i>Find this words </i>"<i>cache_dir=`find_cache_dir cache_dir /cache/cache`</i>"<br />"<i><b>/cache/cache</b></i>" Change this path of folder according your cache directory</span><br /><span style="font-family: "verdana" , sans-serif;"><br />Making auto start up squid programs on boot.</span><br /><span style="font-family: "arial" , "helvetica" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># update-rc.d squid defaults</span></span></div> </span></li> <div style="text-align: justify;"> <br /></div> <li><span style="font-family: "verdana" , sans-serif;"><b>CREATING Of SQUID 3.5.x FOLDER And FILE ACCESS RIGHTS</b></span><br /><span style="font-family: "verdana" , sans-serif;">Type or copy on command line. (<i><b>Note!</b></i> User Name: proxy)</span><br /><span style="font-size: small;"> </span><div style="text-align: justify;"> <span style="font-size: small;"></span><br /> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: justify;" width:="100%"> <span style="font-size: small;"><span style="font-size: small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"># chown -R proxy:proxy /etc/squid/squid.conf | chown -R proxy:proxy /usr/lib/squid | chown -R proxy:proxy /var/lib/squid/ssl_db/certs | chown -R proxy:proxy /etc/squid/store-id.pl | chown -R proxy:proxy /cache/cache | chown -R proxy:proxy /var/log/squid | chown -R proxy:proxy /var/log/squid/access.log | chmod 777 /cache/cache | chmod 777 /var/log/squid | chmod 777 /var/log/squid/access.log | chmod 755 /var/lib/squid/ssl_db/certs | chmod +x /etc/init.d/squid</span></span></span></div> <span style="font-size: small;"> </span></div> <span style="font-size: small;"> </span></li> <div style="text-align: justify;"> <br /></div> <li><span style="font-family: "verdana" , sans-serif;"><b>STARTING SQUID 3.5.x</b></span><br /><span style="font-family: "verdana" , sans-serif;">Making caches directories and starting squid 3.5.x</span><br /><span style="font-size: small;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-size: small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"># squid -f /etc/squid/squid.conf -z</span></span></div> </span><span style="font-family: "verdana" , sans-serif;"><br />Whait a while.., hit ctrl+c for get back to main terminal (command line). Restart Squid 3.5.x</span><br /><span style="font-size: small;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-size: small;"><span style="font-family: "arial" , "helvetica" , sans-serif;"># squid restart</span></span></div> </span><span style="font-family: "verdana" , sans-serif;"><br />Make sure that there are many errors appears.</span><br /><span style="font-family: "arial" , "helvetica" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: small;"># /etc/init.d/squid status</span></span></div> </span></li> <div style="text-align: justify;"> <br /></div> <li><span style="font-family: "verdana" , sans-serif;"><b>CONFIGURE SQUID 3.5.x As TRANSPARENT PROXY</b></span><br /><i><span style="font-family: "verdana" , sans-serif;">See illustration at upper side of this article!</span></i><br /><span style="font-family: "verdana" , sans-serif;"><br />Configure rc.local file</span><br /><span style="font-family: "verdana" , sans-serif;"> <div style="background-color: #f3f3f3; border: 1px dashed gainsboro; padding: 0px; text-align: left;" width:="100%"> <span style="font-family: "verdana" , sans-serif;"><span style="font-size: small;"># nano /etc/rc.local</span></span></div> </span><span style="font-family: "verdana" , sans-serif;"><br /><b>Add these lines!</b></span><br /> <div style="text-align: justify;"> </div> <div style="border: 3px solid #809FFE; height: 100px; overflow: auto; padding: 10px; width: 96%;"> <span style="font-size: x-small;"><span style="font-family: "georgia" , "times new roman" , serif;">iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<br />iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -j MASQUERADE<br />iptables -I INPUT -p tcp -m tcp --dport 3129 -j ACCEPT<br />modprobe xt_TPROXY<br />modprobe xt_socket<br />modprobe xt_mark<br />modprobe nf_nat<br />modprobe nf_conntrack_ipv4<br />modprobe nf_conntrack<br />modprobe nf_defrag_ipv4<br />modprobe ipt_REDIRECT<br />modprobe iptable_nat<br />echo 1 > /proc/sys/net/ipv4/ip_forward<br />echo 0 > /proc/sys/net/ipv4/conf/default/rp_filter<br />echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter<br />echo 0 > /proc/sys/net/ipv4/conf/lo/rp_filter<br />ip rule add fwmark 1 lookup 100<br />ip route add local 0.0.0.0/0 dev lo table 100<br />iptables -t mangle -F<br />iptables -t mangle -X<br />iptables -t mangle -N DIVERT<br />iptables -t mangle -A DIVERT -j MARK --set-mark 1<br />iptables -t mangle -A DIVERT -j ACCEPT<br />iptables -t mangle -A INPUT -j ACCEPT<br />iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT<br />iptables -t mangle -A PREROUTING -d 192.168.1.50 -p tcp -m multiport --dports 22,80,443,3127,3128,3129,8000,8080,10000 -j ACCEPT<br />iptables -t mangle -A PREROUTING ! -d 192.168.1.50 -p tcp -m multiport --dports 80,8080,8000 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 3127<br />iptables -t mangle -A PREROUTING ! -d 192.168.1.50 -p tcp -m multiport --dports 443 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 3129<br />exit 0</span></span></div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> <span style="font-family: "verdana" , sans-serif;"><i><b>Note: </b></i></span><br /> <div style="text-align: justify;"> </div> <span style="font-family: "verdana" , sans-serif;">As you see, port 3128 not configured. This to left port 3128 for http traffic, and use for individual setting. eg. for trading software that not working with transparent https proxy.</span></div> </li> <div style="text-align: justify;"> <br /></div> <li><span style="font-family: "verdana" , sans-serif;"><b>FINISHING STEP</b></span><br /><span style="font-family: "verdana" , sans-serif;">Restart Server.</span><br /><span style="font-family: "verdana" , sans-serif;">Copy Squid.crt in "/etc/squid/ssl_certs" to the browser (Eg. Mozilla /Chrome/ Opera)</span></li> </ol> <span style="font-family: "verdana" , sans-serif;">Done.</span></div> </div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <iframe allowfullscreen="" class="YOUTUBE-iframe-video" data-thumbnail-src="https://i.ytimg.com/vi/HmWX10uF72U/0.jpg" frameborder="0" height="280" src="https://www.youtube.com/embed/HmWX10uF72U?feature=player_embedded" width="670"></iframe></div> </div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> <span style="font-family: "verdana" , sans-serif;">Result Hits</span><br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmxydVIWlMlNzbf2qSD5a6nDyTFOUtehzDbOCktJzCSBG2qYTh-z_E_XcSJKojSN8rH7EQV86SgqopyswhKDt6znal5LkMmvVA_BZ0ai5GDeATh_AsO3Kcl1gAcy7WY7G_4pj5P3ZDdA/s1600/cbs-squid-3.5.7-Hit.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmxydVIWlMlNzbf2qSD5a6nDyTFOUtehzDbOCktJzCSBG2qYTh-z_E_XcSJKojSN8rH7EQV86SgqopyswhKDt6znal5LkMmvVA_BZ0ai5GDeATh_AsO3Kcl1gAcy7WY7G_4pj5P3ZDdA/s1600/cbs-squid-3.5.7-Hit.png" /></a></div> </div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> </div> </div>

INSTALLING SQUID 3.5.7 AS TRANSPARENT PROXY CACHING HTTPS On UBUNTU SERVER 14.04.2 LTS

NETWORK TOPOLOGY Client with network address (192.168.2.0) access the internet via eth1 (192.168.2.50) on Ubuntu Server machine, eth0...

Read more »