Linux system proxy firewall configuration analysis method instance

9, reverse proxy, shall be set up obstacles in the system, use the Apache Server VI/etc/httpd/conf/httpd.conf file modified, changing the server listens on port 80 for HTTP requests.

To make squid to 3128 port to listen on the client's http request. And for the client to the proxy, to modify the configuration folder, the following items: listen80 servername192.168.0.6 filed exit. Then start Apache server/etc/rc.d/init.d/apachectl script, and ps view. Start the process. #/Etc/rc.d/init.d/apachect1start # ps-ax | grephttpd 10, use the vi command modify/usr/local/squid/etc/squid.conf, put the following option is changed to the value of the column later and remove configuration items preceding comment number, specify http_port3128 # squid monitoring browser client request port number icp_port0 # specify squid from neighbors (neighbour) Server buffering in sending and receiving ICP request port number, this is set to 0, it is because configure squid for the internal Web Server Accelerator, it is not necessary to use neighbors Server buffering. # Emulate_httpd_logon # make Squid follow the format of the web server access logs created. Run by squid Redirect_rewrites_host_headerof # as Accelerator mode does not require redirection feature, because native httpd_accel_port80 WWW server listens on port 80, so configure squid connection server on port 80 to get files from Apache. After 11, settings: Save and exit. Then start the squid proxy. You start as apache services provide reverse proxy services. #/Usr/local/squid/sbin/squid – D 12, LAN, users no longer need to go to the settings of the browser's proxy option, use the browser to access the address 192.168.0.6 browser will access the server's port 3128, i.e. proxy listening port, then the proxy server receives the client's request, find the local cache for the requested data, if any, directly returned to the client, if you do not have. Through port 80 requests to the Apache Server on apache returned data is first saved. The client then returns the requested data.