How to install, setup and configure squid proxy server on linux?

The internet connection nows day become a very important thing that all user and client needs to find a source and information. I test and install squid proxy server for the www connection to my organization and working well.

Here are the step to install squid proxy server on CentOS5.2

Step 1 : install linux operating system

-install
  linux text

-install
 customize
  admin tools
  development tools
  development libraries
  editors
  system tools
  text base internet

Step 2 :enable services on linux platform

-ntsysv
 iptables
 network
 syslog
 crond
 xinetd

Step 3 : configuring LAN card

-LAN card
 [root@proxytkk ~]#cd /etc/sysconfig/network-scripts/ifcfg-eth0

 [root@proxytkk ~]#vi ifcfg-eth0 

IPADDR=172.16.160.9
  NETMASK=255.255.255.0
  BROADCAST=172.16.160.255
  BOOTPROTO=static
  NETWORK=172.16.160.0
  ONBOOT=yes
  HWADDR=00:E0:18:C4:98:C1
 

 [root@proxytkk ~]#ifconfig  /for confirmation/

Step 4 : Configuring gateway

 [root@proxytkk ~]#cd /etc/sysconfig
 [root@proxytkk ~]#vi network
                               172.16.160.111   #leaseline, CIS:172.16.160.254

Step 5: Configuring routing on the NIC card

 [root@proxytkk ~]#cd /etc/sysconfig/network-scripts
 [root@proxytkk ~]#vi route-eth0
  GATEWAY19=172.16.160.2
  NETMASK19=255.255.240.0
  ADDRESS19=172.16.169.0
  GATEWAY18=172.16.160.1
  NETMASK18=255.255.240.0
  ADDRESS18=172.16.169.0
  GATEWAY17=172.16.160.2
  NETMASK17=255.255.240.0
  ADDRESS17=172.16.170.0
  GATEWAY16=172.16.160.2
  NETMASK16=255.255.240.0
  ADDRESS16=172.16.168.0
  GATEWAY15=172.16.160.2
  NETMASK15=255.255.240.0
  ADDRESS15=172.16.167.0
  GATEWAY14=172.16.160.2
  NETMASK14=255.255.240.0
  ADDRESS14=172.16.166.0
  GATEWAY13=172.16.160.2
  NETMASK13=255.255.240.0

#when we make same addresses, latter one will be activated. Firs is backup.

Step 6: Configuring dns

[root@proxytkk ~]#cd /etc
 [root@proxytkk ~]##vi resolv.conf
                              nameserver 172.16.160.5

Step 7 : Understanding iptables fundamental

 iptables -P INPUT DROP
 iptables -P FORWARD DROP
 iptables -P OUTPUT ACCEPT
 iptables -A INPUT -p tcp --dport 53 -j ACCEPT
 iptables -A INPUT -p udp --dport 53 -j ACCEPT
 iptables -A INPUT -p tcp --sport 53 -j ACCEPT
 iptables -A INPUT -p udp --sport 53 -j ACCEPT
 iptables -A INPUT -p tcp --dport 80 -j ACCEPT
 iptables -A INPUT -p tcp --dport 20:21 -j ACCEPT
 iptables -A INPUT -p tcp --dport 443 -j ACCEPT
 iptables -A INPUT -p tcp --dport 8080 -j ACCEPT
 iptables -A INPUT -p tcp --dport 1024:65535 -j ACCEPT
 iptables -A INPUT -p icmp -j ACCEPT

Step 8 :Save iptables

 [root@proxytkk ~]#iptables-save > /etc/sysconfig/iptables

Step 9 : download squid

squid-3.0.STABLE9.tar.gz

 [root@proxytkk ~]#elinks http://www.google.com/

Step 10: install squid

 [root@proxytkk ~]#tar xzf squid-3.0.STABLE9.tar.gz
 [root@proxytkk ~]#cd squid-3.0.STABLE9
 [root@proxytkk ~]#./configure --enable-ssl    #explained in squid.conf
 [root@proxytkk ~]#make all
 [root@proxytkk ~]#make -n install
 [root@proxytkk ~]# make install

Step 11 : making cache dir

 [root@proxytkk ~]#cd /usr/local/squid/etc
 [root@proxytkk ~]#vi squid.conf
      cache_dir ufs /usr/local/squid/cache 2000 16 256
      cache_effective_user nobody
      cache_effective_group nobody
      visible_hostname proxy.oist.net
      http_port 8080
      #acl localnet src 10.0.0.0/8  #comment out
      acl localnet src 172.16.160.0/20
      #acl localnet src 192.168.0.0/16   #comment out
      dns_nameservers 172.16.160.5

 [root@proxytkk ~]#mkdir /usr/local/squid/var/cache
 [root@proxytkk ~]#chown nobody.nobody /usr/local/squid/var/cache
 [root@proxytkk ~]#/usr/local/squid/sbin/squid -z

Step 12 : making logs

 [root@proxytkk ~]#chown nobody.nobody /usr/local/squid/logs  #in new squid /usr/local/squid/var/logs

Step 13 : start squid

 [root@proxytkk ~]#cd /etc/rc.d/
 [root@proxytkk ~]#vi rc.local
  /usr/local/squid/sbin/squid-z  #initialize cache
  /usr/local/squid/bin/RunCache &

Step 14 : test squid

 [root@proxytkk ~]#/usr/local/squid/bin/squidclient -p 8080 http://www.google.com/

Step 15 : stop squid

 [root@proxytkk ~]#/usr/local/squid/sbin/squid -k shutdown