This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
networking:linux:qlproxy [2011/12/24 14:31] gcooper created |
networking:linux:qlproxy [2011/12/24 15:38] (current) gcooper |
||
---|---|---|---|
Line 13: | Line 13: | ||
===== Installation ===== | ===== Installation ===== | ||
- | yum install wget | + | http:// |
+ | ==== Install System ==== | ||
+ | |||
+ | [[computing: | ||
+ | |||
+ | This may work on either 32-bit or 64-bit systems. | ||
+ | |||
+ | ==== Install Requirements ==== | ||
+ | |||
+ | < | ||
+ | yum install wget system-config-firewall-tui squid httpd php | ||
+ | |||
+ | chkconfig squid on | ||
+ | chkconfig httpd on | ||
+ | </ | ||
+ | |||
+ | ==== Configure Firewall ==== | ||
+ | |||
+ | Open HTTP (**80**), HTTPS (**443**) and add a custom port **3128** (tcp protocol). | ||
+ | |||
+ | < | ||
+ | system-config-firewall-tui | ||
+ | </ | ||
+ | |||
+ | ==== Install QuintoLabs Content Security ==== | ||
+ | |||
+ | < | ||
wget http:// | wget http:// | ||
- | yum localinstall qlproxy-1.4.2-32d12.i386.rpm | + | yum --nogpgcheck |
+ | </ | ||
+ | |||
+ | ==== Selinux ==== | ||
+ | |||
+ | Set to permissive for now: | ||
+ | |||
+ | < | ||
+ | vi / | ||
+ | </ | ||
+ | |||
+ | ==== Configure Squid ==== | ||
+ | |||
+ | < | ||
+ | vi / | ||
+ | |||
+ | http_access allow localnet | ||
+ | acl localnet src 192.168.0.0/ | ||
+ | |||
+ | visible_hostname | ||
+ | |||
+ | icap_enable on | ||
+ | icap_preview_enable on | ||
+ | icap_preview_size 4096 | ||
+ | icap_persistent_connections on | ||
+ | icap_send_client_ip on | ||
+ | icap_send_client_username on | ||
+ | icap_service qlproxy1 reqmod_precache bypass=0 icap:// | ||
+ | icap_service qlproxy2 respmod_precache bypass=0 icap:// | ||
+ | adaptation_access qlproxy1 allow all | ||
+ | adaptation_access qlproxy2 allow all | ||
+ | </ | ||
+ | |||
+ | ==== Configure Web Server ==== | ||
+ | |||
+ | < | ||
+ | cat << EOF >> / | ||
+ | |||
+ | # | ||
+ | # This is / | ||
+ | # | ||
+ | |||
+ | Alias /qlproxy / | ||
+ | < | ||
+ | Options FollowSymLinks | ||
+ | AllowOverride None | ||
+ | </ | ||
+ | EOF | ||
+ | </ | ||
+ | **Now reboot!** |