Linux Proxy Server

X4Nt3R1UM

Member
Apr 25, 2003
58
0
0
hi,

i want to setup my linux (red hat) server, as an internet proxy server. if i use Squid (proxy), how would i configure it to automatically dial-up to my ISP, each time a workstation request for internet service?

please advise me

thanks


x4nt3r1um

 

drag

Elite Member
Jul 4, 2002
8,708
0
0
Check this out. Don't use a proxy. Create masquarade filewall. More commonly called a NAT firewall. It's a linux speciality.

You create a router out of a PC, but instead of assigning all your computers on the LAN a public ip address, you assign them all private addresses. When they want to access the internet they go thru a gateway (your masq' firewall/router PC).

The masq'ed gateway strips the ip address information and puts it's own external address in it's place, all while keeping track of the connections.

This makes it so that you can access the internet completely transparently with no special configuration of the internal PC's, exept in setting up the gateway information (which you'd have to anyways). Any server on the internet thinks that you firewall PC is the only computer. You could have 50 PC's on your private LAN, but as far as anyone else is your router is the only thing they see.

This is handy in protecting your LAN from worms and viruses, too, but to be complete you have to protect your router with extra iptable rules... probably won't be nescessary for dial up though... only for perminate connections.

I actually used Redhat for this for a while.

look at this, it's a server that works with your NAT firewall. It causes it to dial up from a remote command. It has clients for many different OSes, including Windoze


The only real PITA is if you have a WINMODEM.

Winmodems aren't realy modems. They are just a simple peice of hardware to connect the analog phone line to digital signals. They don't do any real MODulating DEModulating. That's all done in software and it runs off of software and uses your CPU time. A real modem does that all in hardware. Software modems need special drivers, they only have these special drivers for Windows. They've reversed engineer some of them to make them work in Linux, but not all of them. Real modems are very nice things to have and can do much more then just dial-up connections, however they cost between 25-50 dollars compared with 7-15 dollars for software ones. check out here


edit:
oh ya I almost forgot. Some things don't work to well with NAT firewalls. Like quake games online or ftp, the nature of them interfear with those services setting up active connections with internal computers. You need to use certian special modules and that will enable those things to work correctly
 

jonmullen

Platinum Member
Jun 17, 2002
2,517
0
0
Or you can do the same thing as stated above and still use Squid for transparent caching and end up speeding up alot of your internet surfing.
 

drag

Elite Member
Jul 4, 2002
8,708
0
0
Originally posted by: jonmullen
Or you can do the same thing as stated above and still use Squid for transparent caching and end up speeding up alot of your internet surfing.

well their you go! ;)