Configure proxy firewall on SuSE Linux Enterprise Server 11

NETWORK ADMINISTRATION Firewall/Proxy Server:

2013-2015

PASSERELLES NUMERIQEUS CAMBODIA

Street 371 Phum Tropeang Chhuk (Borey Sorla), Sangkat Tek Thia Khan Sek Sok P.O. Box 511 Phnom Penh, Cambodia

PASSERELLESNUMERIQUES CAMBODIA NETWORK ADMINISTRATION

TOLA.LENG-PC 1

Contents

Note: All clients’ access have to across firewall.

Working time: 7:30-11:30 and 1:00-5:00 from Monday to Friday.

1. Server

A. Proxy/Firewall Server Can access internet

B. LAN Server can ping to Proxy/Firewall Server

C. LAN Server can remote to Proxy/Firewall Server

D. LAN Server can access to Internet without using Proxy Server

E. Local DNS Server requests DNS from ISP

2. Client

F. Get IP address automatically from DHCP Server

G. LAN-client requests DNS from Local DNS Server

H. IP address from 10.20.xxx.1 can access internet without using proxy.

I. LAN-client IP from 10.20.xxx.2 - 10.20.xxx.253/24 have to use proxy for accessing

Internet by blocking:

a. Block website

b. Block download extension (.mp3, .mp4, .exe)

c. All Client can access any website beside of working time.

d. Allow LAN client access to website by authentication use from Domain controller.

e. Make sure clients cannot access websites that not good on squidguard and shallalist

file.


TOLA.LENG-PC 2

LAB Instruction

Note: Make sure all the AD+DNS+DHCP is enables to access and using them.

LAN Server

o Network Address: 192.168.200.0/25

o AD+DNS+DHCP: 192.168.200.1

o Gateway: 192.168.200.126

o Pool/Scope range: 192.168.200.2-192.168.200.253

LAN Client

o Network Address: 10.20.135.0/24

o Gateway: 10.20.135.254

o Pool/Scope range: 10.20.135.1-10.20.135.253

Firewall/Proxy Server (SuSE 11)

o Added 3 network card

NIC for LAN Server: 192.168.200.126/25

NIC For LAN Client: 10.20.135.254/24

NIC for Internet: 172.16.1.135/23


TOLA.LENG-PC 3

Allow Client Request DHCP with IP address and domain

IP reservation for client 10.20.135.1


TOLA.LENG-PC 4

WINDOWS


TOLA.LENG-PC 5

LAN Server

A. Allow Proxy/Firewall Server can access Internet


TOLA.LENG-PC 6

B. LAN Server Can ping to proxy/Firewall server


TOLA.LENG-PC 7

C. LAN server can remote to proxy/Firewall server


TOLA.LENG-PC 8


TOLA.LENG-PC 9

D. LAN server can access to Internet without using proxy server


TOLA.LENG-PC 10


TOLA.LENG-PC 11

E. Local DNS server request DNS from ISP

Allow server request DNS from ISP


TOLA.LENG-PC 12


TOLA.LENG-PC 13

LAN Client

F. Get IP address automatically from DHCP Server

PC1 Request Reservation DHCP


TOLA.LENG-PC 14

=

PC2 Request DHCP


TOLA.LENG-PC 15

G. LAN_Client Request DNS from local DNS Server


TOLA.LENG-PC 16

PC1 10.20.135.1 Request DNS from Local Server

PC2


TOLA.LENG-PC 17

H. IP Address from 10.20.135.1 can access internet without using

proxy


TOLA.LENG-PC 18


TOLA.LENG-PC 19

I. LAN-Client IP from 10.20.135.2-10.20.135.253/24 have to use

proxy for accessing Internet by blocking:

PC2 access to internet


TOLA.LENG-PC 20


TOLA.LENG-PC 21

Block website: www.facebook.com, www.youtube.com

http://www.facebook.com/

http://www.youtube.com/


TOLA.LENG-PC 22

Block extensions: MP3


TOLA.LENG-PC 23

Block extensions: MP4


TOLA.LENG-PC 24

Block extensions: exe


TOLA.LENG-PC 25

Beside working time client 10.20.135.2-10.20.135.253 can access

to the website and download also.


TOLA.LENG-PC 26

PC1 access to internet without using proxy server


TOLA.LENG-PC 27


TOLA.LENG-PC 28

Allow LAN client access to website by authentication use from

Domain controller.


TOLA.LENG-PC 29


TOLA.LENG-PC 30


TOLA.LENG-PC 31


TOLA.LENG-PC 32


TOLA.LENG-PC 33


TOLA.LENG-PC 34

Proxy Server allow and Deny


TOLA.LENG-PC 35


TOLA.LENG-PC 36


TOLA.LENG-PC 37


TOLA.LENG-PC 38


TOLA.LENG-PC 39

Configure squidGurad


TOLA.LENG-PC 40

Then now we can download squidGuard from internet and install. In this, I have squidguard-1-

3.99-1.49.i586.rpm, so I install it with command rpm.


TOLA.LENG-PC 41


TOLA.LENG-PC 42


TOLA.LENG-PC 43


TOLA.LENG-PC 44


TOLA.LENG-PC 45

The End!

Technology

Configure proxy firewall on SuSE Linux Enterprise Server 11