Topic: Proxy server bypass for internet connection

[roratonet]

Hi all,

I have a problem on my SME server release 8 beta 6.
I have a server on my network (not administrated by me and not changeable) who gives the internet connection to all the clients through a proxy, with the following parameters:

PROXY IP: 192.168.10.250
PORT: 3128
TYPE: Squid
This proxy requires authentication with username and password.
That's all I know about this server.

Next to, there is my SME server with 2 ethernet connections:
eth0: local
eth1: out
The local IP is 192.168.100.100
The outside IP is 192.168.10.240

Now I have two separate networks, but I need to give my server an internet access, through the eth1 connection.
I have made several tests, someone I red in this forum, others I have found on the internet. Nothing works.

First, I have edited the yum.conf file and added the proxy informations.
Yum has updated itself and all the packages correctly, because in the web control panel he gives me the green THE SYSTEM IS UPDATED status.
I tried to install dansguardian, following this command:

Code: [Select]

yum --enablerepo=smecontribs install smeserver-dansguardian
He says me that he cannot resolve the connection for the repository, ERRNO = 4
Then he enters in conflict with itself: This program is in lock mode because it is used by: YUM

Next to, I tried to give the proxy information to the system, because I want that all my clients on my network using the SME server as a gateway for internet connection, so I don't have to set the proxy information on all the clients.
I found some guides:

Code: [Select]

export http_proxy=http://username:password@ip_host:port/
 export ftp_proxy=http://username:password@ip_host:port/
 export no_proxy=.domain.com
 export HTTP_PROXY=http://username:password@ip_host:port/
 export FTP_PROXY=http://username:password@ip_host:port/
http://www.carinato.net/linux/squid-proxy-behind-a-proxy

http://www.fedoraforum.org/forum/showthread.php?s=&threadid=742

Nothing works 

Are there other solutions?

[Stefano]

did you try the template fragments you see on carinato.net page?
if so, did you search in the logs for errors?

[roratonet]

did you try the template fragments you see on carinato.net page?

Yes, I did. Without success!!! I don't know if YUM downloaded me the "dansguardian", because after the download command, he gave me the error: Another application is currently using this service: YUM...himself!!!!

if so, did you search in the logs for errors?

Too, but the logs give me no information about a connection error for YUM. Maybe I'll post you the errors on the logs in a few hours, when I'll get access to the system.

Or should I try to install the SME server version 7.x latest release?

[cactus]

Yes, I did. Without success!!! I don't know if YUM downloaded me the "dansguardian", because after the download command, he gave me the error: Another application is currently using this service: YUM...himself!!!!

No, it did not download then, but it should have done if you kept it running. Did you keep it running or did you either kill yum or abort the session?

[roratonet]

I let it run, but I don't know how to see if he installed it. Have I to set up the proxy information of my server on any client, or have I only to give them the gateway address, to access the internet?

[Stefano]

Hi

SME8 has squid 2.6

according to this page, you have to add this directive to your squid.conf

Code: [Select]

cache_peer parentproxy       parent    3128  7 no-query login=youruser:yourpassword

atm you could edit squid.conf and insert such a line, edit it accordingly to your needs, save the file and restart squid
it should work
if it doesn't, take a look at squid's logs for errors and report here..

if it works, use the fragments on carinato.net.. be sure you insert the correct values.. then expand squid.conf and check if it looks exactly as the original one after your manual editing (they should be identical)

[sebastiaopburnay]

Hi!

I'm also using an sme server (7.5.1) inside a company's intranet with it's own proxy server (Windows server 2008) also with authentication.

Lets assume the following:
Mask:       255.255.0.0
mySME:    172.20.31.61
Proxy:      172.20.10.252 (proxing on port 8080)

If I set a line on squid with the followinc code will my server authenticate itself and bypass the proxy?

Code: [Select]

cache_peer parentproxy       parent    8080  7 no-query login=youruser:yourpassword
The port and and login itens are pretty intuitive, about the others, what should I change?
Would it be replacing the parent iten with 172.20.10.252