Implementing access control through Safesquid deployment content filtering Proxy Server

"51cto.com exclusive translation" Content filtering proxy server to help administrators control the content delivery process of Internet access, it is often used in institutions, schools to ensure that the use of the Internet is consistent with their own use of the policy, content filtering agents must be for the Internet access rights and cross-enterprise constraints for fine-grained adjustment. Content filtering agents can be used to filter unwanted content, using such methods as URL or DNS blacklist, URL filtering, MIME filtering, keyword filtering, cookie filtering, packet header filtering, pornographic image filtering, etc. Content filtering agent support authentication, used to control access to the Internet, it generates logs, or gives details about a particular user's access URL, or monitors bandwidth usage, and it communicates with the background service and provides antivirus and malware protection with antivirus software that integrates the ICAP protocol. These are done in real time by scanning the inbound content before entering the entire network. In this article, I will describe the installation process for content filtering proxy software-safesquid. About Safesquidsafesquid is a Linux based content filtering HTTP1.1 agent, but also an application-level firewall, which allows administrators to control over the network who can access what, when to access and how much content. It gives administrators full access control & full content control. Safesquid offers a completely free unlimited time limit version that can be used for a 20-user network, which can be downloaded in http://www.safesquid.com/html/portal.php?page=126. Install Safesquid on linux boxes first download the free version, then copy the downloaded safesquid.tar.gz to/USR/LOCAL/SRC/:CP safesquid-4.2.0-com20-free.tar.gz/usr/ Local/src/safesquid.tar.gz extract the tar file with the tar command: TAR-XVZF safesquid-4.2.0-com20-free.tar.gz This will create a ' Safesquid ' directory, enter this directory: the CD Safesquid/safesquid directory contains the installation script install, run the script:./install setup script requires you to select one of the following 3 options: Press "F" if we are Doing a Fresh installpress "U" if we want to Update a existing installationpress "a" if we want to aDjust an existing conf file because I am a brand new installation, use the option ' F '. The setup script checks for dependencies and displays the status, and the output should resemble: Checking dependencies/lib/libsafe.so.2 (0xf6ffa000) libpam.so.0 =>/lib/libpam.so.0 ( 0xf6fea000) libdl.so.2 =>/lib/libdl.so.2 (0xf6fe5000) libpthread.so.0 =>/lib/tls/i686/libpthread.so.0 ( 0xf6fd4000) libssl.so.4 =>/lib/libssl.so.4 (0xf6fa0000) libstdc++.so.6 =>/usr/lib/libstdc++.so.6 (0x00bbb000) Libm.so.6 =>/lib/tls/i686/libm.so.6 (0xf6f7d000) libc.so.6 => (/lib/tls/i686/libc.so.6) 0xf6e69000 S.so.1 =>/lib/libgcc_s.so.1 (0x00974000)/lib/ld-linux.so.2 (0x00b97000) libgssapi_krb5.so.2 => Libgssapi_krb5.so.2 (0x009e7000) libkrb5.so.3 =>/usr/lib/libkrb5.so.3 (0x00b1e000) libcom_err.so.2 => Libcom_err.so.2 (0x009e2000) libk5crypto.so.3 =>/usr/lib/libk5crypto.so.3 (0x00afb000) libresolv.so.2 => Libresolv.so.2 (0xf6e55000) libcrypto.so.4 =>/lib/libcrypto.so.4 (0x00a11000) libz.so.1 => ( 0x00962000) looks okaypress any key to re-enters if the report lacks a dependency on yourBefore continuing, you must install this dependency pack first, and if all things are ready, press any key to continue. Comes to the Safesquid End User License Agreement, which shows the following options: Press "B"/"F" to move Back/forwardpress "s" as you have finished reading read license agreement or click ' s ' to skip and relay Continue, the following option will be displayed: Press "Y" if you find the end-user License acceptablepress "A" to Read the end-user License againpress "N" if The end-user License not acceptableand immediately abort the installation process Press ' Y ' to continue. Now, you can press ' s ' with the default option to install, or carefully check the various Options page, the installation script will ask about 28 options, all the options pages do not need to be explained, and do not need you to make any changes. If you want to modify the default options, press ' C ', and when you have made the necessary modifications, press ' s ' to continue with the installation. In fact, the settings can be modified later with the/etc/init.d/safesquid Adjustment command, or directly edit the startup.conf file, this file in the/OPT/SAFESQUID/SAFESQUID/INIT.D directory. These modifications take effect after the next Safesquid reboot. Press ' s ' to start the installation, the installation will be paused several times to display the status, and confirm that when the installation is complete, the following message is displayed: "News" S "if you would like to start your safesquid nowpress any other key to Si Mply Exit Press ' s ' to start Safesquid, you will see the following message: 1. Safesquid started with pid:9659 ... ssquid are not listening on:8080 ... 2. Safesquid started with pid:9659 ... ssquid is listening on 192.168.0.30:8080 ... Process is running so, your Safesquid installation is successful and running. Now, access the Safesquid interface and point to your bangsBrowser proxy settings, fill in the Safesquid server IP address: port, such as: 192.168.0.30:8080, and then access url:http://safesquid.cfg498 this.width=498; OnMouseWheel = ' Javascript:return big (This) ' alt= ' src= '/files/uploadimg/20080320/1408130.gif ' border=0> Safesquid Web interface. Note: If there is a problem, run the following command:/etc/init.d/safesquid Dircheck It checks and corrects the installation files and directories and their permissions, and then restarts them with the following command safesquid:/etc/init.d/ Safesquid Restart wish you luck! "51cto.com exclusive translation, reproduced please specify the source and the author!" "" "Responsible Editor: Yutie TEL: (010) 68476606" Original: Safesquid deployment content filtering Proxy server to achieve access control return to network security home