Table of Contents

1. Challenge

   Install Squid

   You will need to install Squid on Server1 (10.0.1.10):

   yum install squid

2. Challenge

   Enable and Start Squid

   You will need to enable Squid:

   systemctl enable squid

   And start it:

   systemctl start squid

3. Challenge

   Permit Squid Client Access through the Firewall

   You will need to permit clients to connect to the Squid service through the firewall:

   firewall-cmd --permanent --add-service=squid

   And reload the firewall configuration to pick up the change:

   firewall-cmd --reload

4. Challenge

   Configure Squid

   You'll want to create an ACL that only allows clients to access linuxacademy.com. These go in /etc/squid/squid.conf after the line that says # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS.

   ...
   # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
   
   acl whitelist dstdomain .linuxacademy.com
   http_access allow whitelist
   ...
   

   You'll also need to comment out or remove the line:

   #http_access allow localnet

   And restart Squid:

   systemctl restart squid

5. Challenge

   Test from a Client

   You'll need to export the http_proxy value to use Server1:

   export http_proxy="http://10.0.1.10:3128"

   And try curling the header of linuxacademy.com:

   curl -I linuxacademy.com

   This should work. Verify this is the only site that works by curling a different address:

   curl -I apache.org

   This should come back as forbidden.