nixCraft

Hi everyone,

I read a lot of posts in here about squid proxy server, and I tried to setup my own proxy server. Here is what I got.

O/S: SuSe10. IP 192.168.1.146(static internal IP from my linksys router). This is a Proxy Server with version of 2.XX.... It's running on port 3128, and there is only i NIC.

On my squid.conf, I configure NCSA-style username and password authentication. That means all my client machines with the browsers configured to use my proxy server have to enter username/password before they can go to any web sites.

However, some people(unauthorized user living next to me still access to my linksys router and browse the Internet. What I guess is because their web browsers(I.E, firefox, netscape) are not configured to use my proxy server. That's why they(A/U) can straight go to the Internet without needing to log in.

My question is, how to configure proxy server, maybe firewall, or anything that force all client machines must use my proxy server before connecting to the Internet? By doing this, all unauthorized users can't browse using my network or they have to contact me for username/password. What I guess is to forward port 80 to 3128? If so, how to do that? I am very new to linux. Please walk me through. Thank you very much.

Hi there,

Login to your linksys router - Block access to everyone except to 192.168.1.146 (Linux/squid IP).

Now user can not browse internet and they will ask you about new proxy

__________________
Rocky Jr.
You may have my body & soul, but you will never touch my pride!

If you have knowledge, let others light their candles at it.

Certified to work on HP-UX / Sun Solaris / RedHat

Thanks a lot for your reply. However, by blocking everything except 192.168.1.146(proxy server) on my linksys router, that means no machines can browse. Keep in mind that a machine must have an IP address before they can talk on the network. So, I don't think blocking everything except .1.146 works for this case because they can't talk to my proxy server. Does that make sense? I mean a machine must be in the network before it can communicate.

I think the way it should work for my case is configure SuSe10 firewall/iptables so that it can forward port 80(web) and 21(ftp) to port 3128 of proxy server. The thing is how to do that? What I want is unauthorized users will have to configure proxy on the web browser to talk to my proxy server. That will promt them to enter username annd password to access my network. Please help.

I got my squid proxy server up and running on SuSe10 with user authentication. Everything works like a charm. However, when I tried to view webcam on yahoo messenger from my friend, it's saying "sorry, you appear to be behind a firewall and are currently unable to use yahoo webcam..."

I know that yahoo webcam is using TCP port 5100, and I can't figure out how to make it work. Do I have to open port 5100 in proxy server ? If so, how? Please helppppppppppppppp. I will send million of thanks if anyone can help me with.