- A Cloud Guru
Installing and Configuring Squid
In this learning activity, you will need to install and configure squid so that it only permits web access to *linuxacademy.com*.
Table of Contents
You will need to install Squid on
yum install squid
Enable and Start Squid
You will need to enable Squid:
systemctl enable squid
And start it:
systemctl start squid
Permit Squid Client Access through the Firewall
You will need to permit clients to connect to the Squid service through the firewall:
firewall-cmd --permanent --add-service=squid
And reload the firewall configuration to pick up the change:
You'll want to create an ACL that only allows clients to access linuxacademy.com. These go in
/etc/squid/squid.confafter the line that says
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS.
... # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS acl whitelist dstdomain .linuxacademy.com http_access allow whitelist ...
You'll also need to comment out or remove the line:
#http_access allow localnet
And restart Squid:
systemctl restart squid
Test from a Client
You'll need to export the http_proxy value to use
And try curling the header of linuxacademy.com:
curl -I linuxacademy.com
This should work. Verify this is the only site that works by curling a different address:
curl -I apache.org
This should come back as forbidden.
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.