Posts

Showing posts with the label acl

Common squid requirements - Part 1

In this segment, we would be accomplishing the following: block specific website block multiple website block specific ip block multiple ip block specific mac block multiple mac set maximum  download size set time/date limit for browsing Setting up mandatory authentication before internet access We assume that our network is 192.168.10.0/24. 1. Blocking a Specific Website Although a website can be blocked using different parameters, the best way to block a website using squid is the ' url_regex ' parameter. url_regex checks link inserted in the browser for matching syntax. For example, if we tell squid to block any website that has the word “jumble” in it, then any website, like jumbleA.com, jumbleB.com, jumbleC.com would be blocked. root@firefly:~# vim squid.conf #### Declaring the acl ##### acl our_network src 192.168.10.0/24 acl bad_site url_regex .jumble.com #### for example, anything.jumble.com, anythi...

Sudo & ACL

Sudo If a server needs to be administered by a number of people it is normally not a good idea for them all to use the root account. This is because it becomes difficult to determine exactly who did what, when and where if everyone logs in with the same credentials. The sudo utility was designed to overcome this difficulty. The sudo utility allows users defined in the /etc/sudoers configuration file to have temporary access to run commands they would not normally be able to due to file permission restrictions. The commands can be run as user "root" or as any other user defined in the /etc/sudoers configuration file. The privileged command you want to run must first begin with the word sudo followed by the command's regular syntax. When running the command with the sudo prefix, you will be prompted for your regular password before it is executed. You may run other privileged commands using sudo within a five-minute period without being re-prompted for a password. All co...