This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
networking:linux:qlproxy [2011/12/24 14:40] gcooper |
networking:linux:qlproxy [2011/12/24 15:38] (current) gcooper |
||
---|---|---|---|
Line 14: | Line 14: | ||
http:// | http:// | ||
+ | |||
+ | ==== Install System ==== | ||
+ | |||
+ | [[computing: | ||
+ | |||
+ | This may work on either 32-bit or 64-bit systems. | ||
+ | |||
+ | ==== Install Requirements ==== | ||
< | < | ||
- | yum install wget | + | yum install wget system-config-firewall-tui squid httpd php |
+ | chkconfig squid on | ||
+ | chkconfig httpd on | ||
+ | </ | ||
+ | |||
+ | ==== Configure Firewall ==== | ||
+ | |||
+ | Open HTTP (**80**), HTTPS (**443**) and add a custom port **3128** (tcp protocol). | ||
+ | |||
+ | < | ||
+ | system-config-firewall-tui | ||
+ | </ | ||
+ | |||
+ | ==== Install QuintoLabs Content Security ==== | ||
+ | |||
+ | < | ||
wget http:// | wget http:// | ||
yum --nogpgcheck localinstall qlproxy-1.4.2-32d12.i386.rpm | yum --nogpgcheck localinstall qlproxy-1.4.2-32d12.i386.rpm | ||
+ | </ | ||
+ | ==== Selinux ==== | ||
+ | Set to permissive for now: | ||
+ | |||
+ | < | ||
+ | vi / | ||
</ | </ | ||
+ | ==== Configure Squid ==== | ||
+ | |||
+ | < | ||
+ | vi / | ||
+ | |||
+ | http_access allow localnet | ||
+ | acl localnet src 192.168.0.0/ | ||
+ | |||
+ | visible_hostname | ||
+ | |||
+ | icap_enable on | ||
+ | icap_preview_enable on | ||
+ | icap_preview_size 4096 | ||
+ | icap_persistent_connections on | ||
+ | icap_send_client_ip on | ||
+ | icap_send_client_username on | ||
+ | icap_service qlproxy1 reqmod_precache bypass=0 icap:// | ||
+ | icap_service qlproxy2 respmod_precache bypass=0 icap:// | ||
+ | adaptation_access qlproxy1 allow all | ||
+ | adaptation_access qlproxy2 allow all | ||
+ | </ | ||
+ | |||
+ | ==== Configure Web Server ==== | ||
+ | |||
+ | < | ||
+ | cat << EOF >> / | ||
+ | |||
+ | # | ||
+ | # This is / | ||
+ | # | ||
+ | |||
+ | Alias /qlproxy / | ||
+ | < | ||
+ | Options FollowSymLinks | ||
+ | AllowOverride None | ||
+ | </ | ||
+ | |||
+ | EOF | ||
+ | </ | ||
+ | **Now reboot!** |