Configure proxy firewall on SuSE Linux Enterprise Server 11

Preview:

Citation preview

NETWORK ADMINISTRATION Firewall/Proxy Server:

2013-2015

PASSERELLES NUMERIQEUS CAMBODIA

Street 371 Phum Tropeang Chhuk (Borey Sorla), Sangkat Tek Thia Khan Sek Sok P.O. Box 511 Phnom Penh, Cambodia

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 1

Contents

Note: All clients’ access have to across firewall.

Working time: 7:30-11:30 and 1:00-5:00 from Monday to Friday.

1. Server

A. Proxy/Firewall Server Can access internet

B. LAN Server can ping to Proxy/Firewall Server

C. LAN Server can remote to Proxy/Firewall Server

D. LAN Server can access to Internet without using Proxy Server

E. Local DNS Server requests DNS from ISP

2. Client

F. Get IP address automatically from DHCP Server

G. LAN-client requests DNS from Local DNS Server

H. IP address from 10.20.xxx.1 can access internet without using proxy.

I. LAN-client IP from 10.20.xxx.2 - 10.20.xxx.253/24 have to use proxy for accessing

Internet by blocking:

a. Block website

b. Block download extension (.mp3, .mp4, .exe)

c. All Client can access any website beside of working time.

d. Allow LAN client access to website by authentication use from Domain controller.

e. Make sure clients cannot access websites that not good on squidguard and shallalist

file.

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 2

LAB Instruction

Note: Make sure all the AD+DNS+DHCP is enables to access and using them.

LAN Server

o Network Address: 192.168.200.0/25

o AD+DNS+DHCP: 192.168.200.1

o Gateway: 192.168.200.126

o Pool/Scope range: 192.168.200.2-192.168.200.253

LAN Client

o Network Address: 10.20.135.0/24

o Gateway: 10.20.135.254

o Pool/Scope range: 10.20.135.1-10.20.135.253

Firewall/Proxy Server (SuSE 11)

o Added 3 network card

NIC for LAN Server: 192.168.200.126/25

NIC For LAN Client: 10.20.135.254/24

NIC for Internet: 172.16.1.135/23

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 3

Allow Client Request DHCP with IP address and domain

IP reservation for client 10.20.135.1

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 4

WINDOWS

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 5

LAN Server

A. Allow Proxy/Firewall Server can access Internet

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 6

B. LAN Server Can ping to proxy/Firewall server

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 7

C. LAN server can remote to proxy/Firewall server

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 8

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 9

D. LAN server can access to Internet without using proxy server

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 10

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 11

E. Local DNS server request DNS from ISP

Allow server request DNS from ISP

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 12

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 13

LAN Client

F. Get IP address automatically from DHCP Server

PC1 Request Reservation DHCP

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 14

=

PC2 Request DHCP

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 15

G. LAN_Client Request DNS from local DNS Server

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 16

PC1 10.20.135.1 Request DNS from Local Server

PC2

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 17

H. IP Address from 10.20.135.1 can access internet without using

proxy

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 18

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 19

I. LAN-Client IP from 10.20.135.2-10.20.135.253/24 have to use

proxy for accessing Internet by blocking:

PC2 access to internet

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 20

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 21

Block website: www.facebook.com, www.youtube.com

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 22

Block extensions: MP3

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 23

Block extensions: MP4

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 24

Block extensions: exe

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 25

Beside working time client 10.20.135.2-10.20.135.253 can access

to the website and download also.

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 26

PC1 access to internet without using proxy server

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 27

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 28

Allow LAN client access to website by authentication use from

Domain controller.

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 29

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 30

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 31

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 32

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 33

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 34

Proxy Server allow and Deny

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 35

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 36

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 37

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 38

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 39

Configure squidGurad

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 40

Then now we can download squidGuard from internet and install. In this, I have squidguard-1-

3.99-1.49.i586.rpm, so I install it with command rpm.

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 41

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 42

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 43

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 44

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 45

The End!

Recommended