acl

How to filter by simply using the IP addresses in squidGuard

To make sure that people don’t bypass the URL filter by simply using the IP addresses instead of the fully qualified domain names, you can add the   !in-addr following to your acl: Disallowing access to IP addresses acl { default { pass !in-addr all redirect http://localhost/block.html } }

How to Limit the number of simultaneous Web connections – Squid Proxy Server

You need to use squid ACCESS CONTROLS feature called maxconn. It puts a limit on the maximum number of connections from a single client IP address. It is an ACL that will be true if the user has more than maxconn connections open. It is used in http_access to allow/deny the request just like all [...]

How to configure Standard Access Control List on Cisco router

ACLs in Cisco IOS can be used to control traffic flow and to use it as a simple list to define another function like NATing or Route-Maps. Standard Access List (ACL) in Cisco IOS are the simplest and oldest type of ACLs. Standard ACLs simply compare the Source IP Address on the packet against the [...]

How to block music files using squid content filtering ACL

For security and to save bandwidth you may wish to configure Squid proxy server to block content. You do not want users to download files having extension such as MP3, MPEG, MPG, AVG, EXE etc This tutorial explains simple but effect squid content filtering using access control list to block files easily First open squid.conf [...]

How to Restrict Access to specific Web sites with Squid Proxy

You can limit users’ ability to browse the Internet with access control lists (ACLs). Each ACL line defines a particular type of activity, such as an access time or source network, they are then linked to an http_access statement that tells Squid whether or not to deny or allow traffic that matches the ACL. Squid [...]

How to Restrict Web Access By Time in Squid

Users configure their web browsers to use the Squid proxy server instead of going to the web directly. The Squid server then checks its web cache for the web information requested by the user. It will return any matching information that finds in its cache, and if not, it will go to the web to [...]

How to Permit PPTP/L2TP Connections Through the PIX/ASA/FWSM

This document discusses the configuration required on the Cisco Security Appliance/FWSM to allow a Point-to-Point Tunneling Protocol (PPTP)/Layer 2 Tunneling Protocol (L2TP) client to connect to a PPTP server through Network Address Translation (NAT). The FWSM 3.1.x and later supports PPTP pass through with PAT. Use the PPTP inspection in order to enable this functionality.

How to block yahoo chat messenger

A very old tip and trick on blocking yahoo chat messenger from connecting to internet, as per request. Considering an approved management policies, there are several ways to block yahoo chat messenger from connecting to internet coming from inside your network, depending on what equipment and boxes you have on ground. If you happen to [...]

How to Install and Configure a Caching DNS server

BIND DNS are nameservers responsible basically for resolving domain names or hostnames into their equivalent IP addresses. Websites or domain names have their own equivalent IP addresses that are usually managed and provided by the same website firms. If somebody is browsing a website from his browser, this website is being resolved, looked up and [...]

How to setup Transparent Proxy with Squid

One of the many tasks we could be facing from time to time in our work is setting up and building a production proxy server. Proxy implementation could be done in several ways to achieve the same goal. One best bet we could have with this kind of setup is by using Squid linux software [...]

Fedora 9: How to Install SquidGuard Proxy Filter

SquidGuard is a URL redirector and content filter addon that restricts proxy clients from accessing particular and/or banned site(s), IP addresses, URLs, website patterns using the proxy server.  SquidGuard can be used in conjunction with Squid proxy to implement website content filter from the proxy server. Here’s a run down on how to install and [...]

How to verify firewall ACLs and router rule sets using Linux

Core routers and firewall gateways are usually comprised of basic and extended access control lists including rule sets that define local network security level and control access. They are commonly implemented on gateway routers restricting hosts, protocols and port access to other host or networks located after their default gateways. Basically, routers and default gateways [...]

How To Install and Configure Caching DNS on Fedora

BIND DNS are nameservers responsible basically for resolving domain names or hostnames into their equivalent IP addresses. Websites or domain names have their own equivalent IP addresses that are usually managed and provided by the same website firms. If somebody is browsing a website from his browser, this website is being resolved, looked up and [...]

How to configure policy nat on ASA 5520

To gain access from one internal segment to the Demilitarized Zone (DMZ ), configure the Adaptive Security Appliance (ASA) for natting. To preserve the packet and assure that natting is bypassed, a no nat statement with an Access Control List (ACL) must be configured. This is performed when the administrator does not want natting to [...]