Sponsored Content
Operating Systems Linux Ubuntu How do you setup 2 nic cards for squid Ubuntu server? Post 302762585 by DGPickett on Monday 28th of January 2013 05:28:30 PM
Old 01-28-2013
Yes, you are describing a proxying firewall. Offhand, there are three ways through a firewall: 1) connect to a proxy that connects out for you (no packets traverse the firewall, it is done at the tcp stream level). 2) NAT, iptables and similar translators where your IP and sometimes tcp/udp port are changed to different ones assigned to the firewall for this (Your internal IPs are not used past the firewall) and 3) barefoot selected packet passage (you hosts are given limited Internet exposure, need good IP addresses). Characteristically, 1 can handle less volume than 2 which is more work for the firewall than 3.

For a proxy firewall, you do not want/need to turn on IP Forwarding, which makes the 2 nic host a router. Users connect to you, and you connect for them to the Internet, but no packets flow through. The routing is inward for inward addresses, which can be free ones like 10.*.*.* and outward for the rest. It is very simple to set up. In addition to squid, there are additional proxies like tcp_relay and sockd to shoot tcp connections through the firewall for other simple tcp protocols.
 

9 More Discussions You Might Find Interesting

1. Solaris

NIC cards for sunblade 100

I need to add a PCI NIC to a sunblade 100 running solaris 8. Im new to this and was hoping someone could give me some card names and models which will work for this system and has a driver for this sparc system. thanks (3 Replies)
Discussion started by: meyersp
3 Replies

2. IP Networking

Setup 2 NIC cards in one UNIX system

Hi; I have a UNIX box (SCO 5.0.2) with two (2) NIC cards. One card (NIC1) talks to a network 57.14.65.x/27. The other card NIC2) talks to users on 57.14.103.x and 57.14.105.x with subnet mask of 255.255.0.0. If I set NIC2 to this subnet mask (255.255.0.0) it seems like the NIC traffic is now... (2 Replies)
Discussion started by: texaspanama
2 Replies

3. High Performance Computing

veritas and nic cards

Hello I have 2 machines with 3 NIC cards. When I setup veritas, I receive this message: e1000g1 has an IP address configured on it. It could be a public NIC on ken. Are you sure you want to use e1000g1 for the first private heartbeat link? As if e1000g1 should not have an IP address.... (2 Replies)
Discussion started by: melanie_pfefer
2 Replies

4. HP-UX

routing issues with multiple NIC cards

I am running HP_UX 11.23 with 4 NIC cards (this is our TSM server) I have 4 subnets we are backing across. trying to keep traffic on their subnets. I only have one route statment should I add more. route add net 123.99.8.0 netmask 255.255.255.0 123.99.8.254 route add net 123.99.67.0 netmask... (2 Replies)
Discussion started by: myork
2 Replies

5. Red Hat

External NIC cards not pinging with each other in RHEL 5.1

We have a setup of two nodes which has two NIC cards in each. One is built in and another is D-Link (external NIC card). We are unable to ping to the external NIC cards in both. Eg: Node A has two IPs 192.168.1.10 (eth0) and 192.168.2.10 (eth1) and Node B has two IPs 192.168.1.20 (eth0) and... (3 Replies)
Discussion started by: durgaprasadr13
3 Replies

6. HP-UX

HP UX 9000 NIC CARDS

Hello, I am trying to move an HP UX from one locaion to another. The new location don't have any Fiber switches. On the back of my server I see 2 RJ 45 for console management the other for networking , the server also has a fiber NIC card. When I disconnec the fiber and want to user regular... (1 Reply)
Discussion started by: ldaliosmane
1 Replies

7. IP Networking

Best reference for understanding low level info on nic cards drivers and functionality

Hi, What is the best reference that gives in detail on nic cards configuration , assigning multiple ip addresses to a single interface, netlink library etc and all basic stuff at this level..? Thanks (2 Replies)
Discussion started by: Gopi Krishna P
2 Replies

8. IP Networking

squid proxy: one NIC for inbound & one NIC for outbound?

I am new in squid proxy. My question is how to (and if it's necessary) to set one NIC for inbound traffic (http requests) and one NIC for outbound traffic (http answers)? Thank you in advance! (4 Replies)
Discussion started by: aixlover
4 Replies

9. Ubuntu

Help asap squid with 2 nic cards setup

I found an old post that talks about 2 nice cards and it is driven by the IP address .... but I didn't understand it because the 2 people skipped information for me the newbie.. Can someone help me... I have the proxy server setup and I believe I have enabled the 2nd nic card, I just need one... (1 Reply)
Discussion started by: trilju2005
1 Replies
ext_unix_group_acl(8)					      System Manager's Manual					     ext_unix_group_acl(8)

NAME
ext_unix_group_acl - Squid UNIX Group ACL helper SYNOPSIS
ext_unix_group_acl [-d] [-g group ] [-g group ...] [-p] [-s] DESCRIPTION
ext_unix_group_acl allows Squid to base access controls on users memberships in UNIX groups. OPTIONS
-d Write debug info to stderr. -g group Specifies a group name to match. -p Also match the users primary group from /etc/passwd -s Strip NT domain name component from user names (/ or separated) CONFIGURATION
This squid.conf example defines two Squid acls. usergroup1 matches users in group1 , and usergroup2 matches users in group2 or group3 external_acl_type unix_group %LOGIN /usr/local/squid/libexec/ext_unix_group_acl -p acl usergroup1 external unix_group group1 acl usergroup2 external unix_group group2 group3 By default up to 11 groups can be matched in one acl (including commandline specified groups). This limit is defined by MAX_GROUPS in the source code. KNOWN ISSUES
Does not understand GID aliased groups sometimes used to work around groups size limitations. If you are using GID aliased groups then you must specify each alias by name. AUTHOR
This program was written by Rodrigo Campos <rodrigo@geekbunker.org> This manual was written by Henrik Nordstrom <hno@squid-cache.org> COPYRIGHT
This program and documentation is copyright to the authors named above. Distributed under the GNU General Public License (GNU GPL) version 2 or later (GPLv2+). QUESTIONS
Questions on the usage of this program can be sent to the Squid Users mailing list <squid-users@squid-cache.org> REPORTING BUGS
Bug reports need to be made in English. See http://wiki.squid-cache.org/SquidFaq/BugReporting for details of what you need to include with your bug report. Report bugs or bug fixes using http://bugs.squid-cache.org/ Report serious security bugs to Squid Bugs <squid-bugs@squid-cache.org> Report ideas for new improvements to the Squid Developers mailing list <squid-dev@squid-cache.org> Additionally bugs or bug-fixes can be reported to Rodrigo Campos <rodrigo@geekbunker.org> SEE ALSO
squid(8), group(5), passwd(5), GPL(7), The Squid FAQ wiki http://wiki.squid-cache.org/SquidFaq The Squid Configuration Manual http://www.squid-cache.org/Doc/config/ 12 August 2002 ext_unix_group_acl(8)
All times are GMT -4. The time now is 06:14 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy