gwendes Posted March 7, 2007 Posted March 7, 2007 I'm keep hitting a barrier with setting up a proxy server and I'm not sure where the barrier is. I've installed Ubuntu/Debian with squid and Dansguardian as well as (attempting) an installation of dedicated distros ClarkConnect and CensorNet. Hopefully someone can point out where it is that I am going wrong! I work in a training centre that is connected to the school (with a 1.2Gbps fibre) and I want to install a proxy on one of the old servers to see how effective they are at stopping my bandwidth being eaten up by flash games and chat sites. I cannot connect two NICs as I only have a single connection to the school. Ideally I would connect like this IT room <> proxy (squid + Dansguardian) <> switch and uplink to school With the installs I have done I get everything configured as per guides online, I get lovely 'It Works!' messages but the proxy seems unable to resolve any IP or connect me to a website. CensorNet says that it works with a single NIC but still demands two indentical cards and, when I ignore, it cannot create a swap partition... Am I just really unlucky or is what I'm trying to do just really stupid?
contink Posted March 7, 2007 Posted March 7, 2007 I can't provide the answers on this particular blend you've got but I can say that I got the "Extended Defense Plus" Homebrew version of Smoothwall up and running and that includes dansguardian, and advanced proxy and more besides... Additionally it provides you with some options such as a blue (wireless) port, orange DMZ.. but in your case a simple 2 card NIC profile. One thing I'm a little confused about though.. you say you can't connect two NICs but I'd assume that you'd need two (one for Red (WAN facing) and one for Green (LAN facing) to make it all possible... If you're not putting the proxy inline doesn't that make it somewhat tricky to avoid someone bypassing it?
gwendes Posted March 7, 2007 Author Posted March 7, 2007 The plan is to force all computers through the proxy, using it as the gateway, on a single NIC. If this isn't possible it explains all the trouble I've had!
plexer Posted March 7, 2007 Posted March 7, 2007 Censornet requires 2 nics to be in the box but it sets the 2 up as a bridge. We use smoothwall vorporate guardian 5 which is a single nic proxy and filter. Ben
contink Posted March 7, 2007 Posted March 7, 2007 The plan is to force all computers through the proxy, using it as the gateway, on a single NIC. If this isn't possible it explains all the trouble I've had! Well I don't know about the other systems but I'm sure you can't do it with smoothwall. However that's primarily a firewall product so it would make sense. I could make some half assed suggestions at this point but I'd be guessing so I'll bow out and let those with the knowledge take over. Right now though it does sound like the single NIC approach is part of your problem
gwendes Posted March 7, 2007 Author Posted March 7, 2007 Censornet requires 2 nics to be in the box but it sets the 2 up as a bridge. We use smoothwall vorporate guardian 5 which is a single nic proxy and filter. Ben Do they need to be identical? Do both cards need to be connected to a switch?
plexer Posted March 7, 2007 Posted March 7, 2007 No once it's installed you just connect one of the cards to your switch. Ben
Geoff Posted March 7, 2007 Posted March 7, 2007 With the installs I have done I get everything configured as per guides online, I get lovely 'It Works!' messages but the proxy seems unable to resolve any IP or connect me to a website. It's either: 1) Your proxies DNS server settings are incorrect. 2) Your proxy isn't set to use your school/LEA proxy and this is required for internet access (eg, direct internet access is firewalled).
marco84 Posted March 7, 2007 Posted March 7, 2007 It can be done with 1 NIC using squid & dansguardian. I assume the school already have their own proxy doing the web filtering. If so, just set up squid as a downstream proxy. forward all requests to the parent proxy.
gwendes Posted March 7, 2007 Author Posted March 7, 2007 It can be done with 1 NIC using squid & dansguardian. I assume the school already have their own proxy doing the web filtering. If so, just set up squid as a downstream proxy. forward all requests to the parent proxy. This is what I'm sure I've already setup - I'll start again (linux is so fast) with a fresh config file! Any recommendations on distro with squid / content filtering ready to go? I've tried Ubuntu-Debian and Mandriva - most comfortable with Debian
marco84 Posted March 7, 2007 Posted March 7, 2007 Have you got webmin installed? Being new to linux too, i find it just makes things a bit easier when configuring squid. I know that using the webmin module to edit the squid.conf makes it alot easier (for me anyway) to add a parent cache.
gwendes Posted March 7, 2007 Author Posted March 7, 2007 Have you got webmin installed? Being new to linux too, i find it just makes things a bit easier when configuring squid. I know that using the webmin module to edit the squid.conf makes it alot easier (for me anyway) to add a parent cache. Thanks for the tip - I'd already found that webmin is best for me too - It's like Windows is engraved on my soul Wish me luck!
marco84 Posted March 7, 2007 Posted March 7, 2007 Im looking at using Censornet, but havent had time to play with it properly yet. Using SuSE 10.1 at the mo with KDE.
Geoff Posted March 7, 2007 Posted March 7, 2007 I have an Ubuntu 6.06 box here running Squid and Dansguardian.
gwendes Posted March 7, 2007 Author Posted March 7, 2007 Right. CensorNet simply will not get past the first part of the install. I've installed indentical NICs, zeroed the drive, disabled the onboard network, burnt two copies of the CD and it refuses to install. Earlier it worked - now it says that it can't create a swap partition. Not even if I say please... Grrrr!
gwendes Posted March 7, 2007 Author Posted March 7, 2007 Did you do an MD5 check on the Disc? It worked this morning so I tried another and the same - cannot create a partition. Powermax passes the hdd on everything. I hate computers.
Geoff Posted March 7, 2007 Posted March 7, 2007 I suspect the hardware. Is it something wierd that isn't quite Linux compatible or has interesting hardware bugs? Or is there something physically broken, I'd start with the memory..
gwendes Posted March 7, 2007 Author Posted March 7, 2007 memtest/powermax all ok - I doubt it's incompatible an Intel 865PERL and 8139 NICs - you can't get much more standard! Damned thing installed this morning... too many things to do to worry about this (like banning people on goowy)
Geoff Posted March 7, 2007 Posted March 7, 2007 Try running it with APIC/Local APIC disabled. Add the following to your kernel boot parameters. noapic nolapic You might be a the victim of a buggy BIOS (also check if there's a newer BIOS available).
tom_newton Posted March 7, 2007 Posted March 7, 2007 If you want to play with our pre-packaged solution, which makes this all a piece of proverbial cake, then just drop me a PM, I can sort you out an evaluation. If it works, well, that will prove that either paying for a commercially supported version OR hacking your own up would be worthwhile - if it doesn't, well, you've lost less time Tom
adent Posted March 8, 2007 Posted March 8, 2007 If you want to play with our pre-packaged solution, which makes this all a piece of proverbial cake, then just drop me a PM, I can sort you out an evaluation. If it works, well, that will prove that either paying for a commercially supported version OR hacking your own up would be worthwhile - if it doesn't, well, you've lost less time Tom I agree - we've installed this in a number of schools - it does what it says on the tin first time - every time.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now