How to deny facebook https using squid proxy in Centos 6.5?
Hi we have Centos Server and we have client machines using Ubuntu 12.04 and Win7,I Have Configured Squid only purposely for facebook denied, Cos User;s often being in fb so need to do it, have configured squid as transparent , followed this How to install squid proxy on centos 6 steps to did it and working fine , but not blocking the facebook https, If im accessing fb by using https://www.facebook.com i can access if www.facebook its not allowing getting denied, any fix for this ? And i need to block skype and gtalk too, Cant find how to block the skype and gtalk, Any help ASAP..
I have an architecture as below
<> <>
There is a program in the AIX server which sends SMS to the internet, by sending HTTP request to the SMS processing server.
Like, http://smsserver/mysms=test
However the application does not have an option to specify where the Proxy server... (1 Reply)
Hi guys
On FC9 we are running squid-3.0.STABLE2-2.fc9.i386
HTTP traffic works fine, no problems there.
When I try to access a secure site, IE, Chrome and Firefox says the page cannot be loaded.
I do not see any log entries in the squid access log or the servers messages file.
... (3 Replies)
Hi all
We have squid-2.5.STABLE11-3.FC4 running in our environment.
LDAP authentication works fine. Active Directory 2003 Users are prompted to enter credentials every time they access the net. The system works perfectly, but I need to configure Squid to block users in a specific AD group.... (1 Reply)
Hi All
I need your valuable help on this. Im trying to setup reverse proxy using apache in rhel 5.5. I just started with Apache, and not much idea about going with advance level config, except that i have tried to set up this reverse proxy based on an online guide i found in internet. The... (0 Replies)
Hi we have Centos Server and we have client machines using Ubuntu 12.04 and Win7,I Have Configured Squid only purposely for facebook denied, Cos User;s often being in fb so need to do it, have configured squid as transpernt , followed this How to install squid proxy on centos 6 steps to did it and... (1 Reply)
Hello,
We are migrating our gateways from CentOS 6 to CentOS 7 and for setting up a transparent proxy using squid and Firewalld i am using below configuration.
#Firewalld configurations
firewall-cmd --permanent --zone=public --add-forward-port=port=80:proto=tcp:toport=3128:toaddr=LAN_IP... (4 Replies)
Hello,
Did anyone setup a CentOS7 as a gateway (with squid transparent proxy).
I am trying to do so but not able to setup.
I setup squid , iptables (using it instead of firewalld) and all the necessary IPtables rules but nothing work.
It work previously but access.log of squid not getting... (4 Replies)
Discussion started by: sunnysthakur
4 Replies
LEARN ABOUT CENTOS
ext_wbinfo_group_acl
EXT_WBINFO_GROUP_ACL.PL.IN(1) User Contributed Perl Documentation EXT_WBINFO_GROUP_ACL.PL.IN(1)NAME
ext_wbinfo_group_acl - external ACL helper for Squid to verify NT Domain group membership using wbinfo.
SYNOPSIS
ext_wbinfo_group_acl [-dh]
DESCRIPTION
ext_wbinfo_group_acl is an installed executable script. It uses wbinfo from Samba to lookup group membership of logged in users.
This helper must be used in with an authentication scheme (typically Basic or NTLM) based on Windows NT/2000 domain users.
It reads from the standard input the domain username and a list of groups and tries to match each against the groups membership of the
specified username.
OPTIONS -d Write debug info to stderr.
-h Print the help.
-K downgrade Kerberos credentials to NTLM.
CONFIGURATION
external_acl_type wbinfo_check %LOGIN /path/to/ext_wbinfo_group_acl
acl allowed_group external wbinfo_check Group1 Group2
http_access allow allowed_group
If the local perl interpreter is in a unusual location it may need to be added:
external_acl_type wbinfo_check %LOGIN /path/to/perl /path/to/ext_wbinfo_group_acl
AUTHOR
This program was written by Jerry Murdock <jmurdock@itraktech.com>
This manual was written by Amos Jeffries <amosjeffries@squid-cache.org>
COPYRIGHT
This program is put in the public domain by Jerry Murdock <jmurdock@itraktech.com>. It is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
QUESTIONS
Questions on the usage of this program can be sent to the Squid Users mailing list <squid-users@squid-cache.org>
REPORTING BUGS
Bug reports need to be made in English. See http://wiki.squid-cache.org/SquidFaq/BugReporting for details of what you need to include with
your bug report.
Report bugs or bug fixes using http://bugs.squid-cache.org/
Report serious security bugs to Squid Bugs <squid-bugs@squid-cache.org>
Report ideas for new improvements to the Squid Developers mailing list <squid-dev@squid-cache.org>
SEE ALSO
The Squid FAQ wiki http://wiki.squid-cache.org/SquidFaq
The Squid Configuration Manual http://www.squid-cache.org/Doc/config/
perl v5.10.1 2013-07-13 EXT_WBINFO_GROUP_ACL.PL.IN(1)