Applications for building a green campus network in Linux

Article title: Linux green campus network application. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.

The implementation of the "school-to-school communication" project has greatly promoted the reform of school education, teaching, and management. However, while building a network, many schools have neglected the security construction of campus networks, this includes how to protect campus network servers and prevent hacker intrusion; how to filter websites to prevent the impact of unhealthy websites on students. Based on the principle of zero cost and high efficiency, this article will talk about some applications of free Linux in building a green campus network.

Web server protection

1, configure Apache first to install a good Linux gateway, I use is easy to install and use the Redhat, you can download the Redhat7.2. install Redhat7.2 in the http://www.redhat.com, Apache, Squid and so on have been installed at the same time, we only need to simply configure it.

After Redhat7.2 is installed, Apache is not running by default. Therefore, httpd is enabled to run Apache first. Modify the configuration file/etc/httpd/conf/httpd. conf.

LoadModule proxy_module modules/libproxy. so

AddModule mod_proxy.c

NameVirtualHost 210.77.126.xx # real IP address of the Gateway

# The Real IP corresponding to the domain name

ServerName www.sdbjzx.com # Web

Server domain name

ProxyPass/192.168.1.1/# Web

Server IP address

ProxyPassReverse/192.168.1.1

/# IP address of the Web server

2. the working principle is to explain the internal Web host to the external Nic of the Linux gateway. when a request from www.sdbjzx.com is received, the Gateway can automatically forward the request to 192.168.1.1, after receiving the response from 192.168.1.1, rewrite the source address as the real IP address of the Gateway and return it to the Internet user. This prevents external hackers from seeing the real Web server, thus effectively protecting the Web server.

Note: squidGuard does not support Berkeley DB 3.x.

3. install and configure SquidGuard

# Rpm-ivh squidGuard-1.2.0-3.i386.rpm (after installation data directory dbhome:/var/squidGuard/blacklists log directory logdir:/var/log/squidGuard)

Follow the prompts to modify the configuration lines in the/etc/squid. conf file:

Redirect_program/usr/sbin/squidGuard-c/etc/squid/squidGuard. confredirect_child 5

Restart Squid, View/var/log/squidGuard. log, and check the last line: 16:13:18 [2237] SquidGuard Ready for Requests, which indicates that SquidGuard is running properly. If a blocked website can be redirected to a specified webpage, it indicates that the filtering function has taken effect. (Note: SquidGuard-1.2.0-3.i386.rpm is a ftp://k12Linux.mesd.k12.or.us/pub/SquidGuard)

Advantages

Easy configuration and low hardware requirements. Generally, the retired 486 and 586 models are fully qualified. all software is free of charge and the blocked list is updated quickly, just go to the http://www.squidGuard.org to download the latest version of the blocked list database to replace the old, you can also manually increase or decrease the blocked list, Squid can also set the internet time period, use flexible and convenient.

[1] [2] Next page