rlsblog

* Any LinuxCBT Operating System Course (Classic/EL-4/SUSE/Debian Editions)
o Open mind & determination to master Linux and related open-source applications
o Basic understanding of networking concepts
o Access to a PC to follow the exercises

Proxy Security - Module 1

* Squid Proxy Initialization
o Discuss Squid concepts & applications
o Discuss DNS application
o Configure DNS on primary SuSE Linux server for the Squid Proxy environment
o Confirm DNS environment
o Start Squid and evaluate default configuration
o Install Squid Proxy server
*
* General Proxy Usage
o Configure web browser to utilize proxy services
o Grant permissions to permit local hosts to utilize proxy services
o Discuss ideal file system layout - partitioning
o Explore key configuration files
o Use client to test the performance of proxy services
o Discuss HIT/MISS logic for serving content
o Configure proxy support for text-based (lftp/wget/lynx) HTTP clients
*
* Squid Proxy Logs
o Discuss Squid Proxy logging mechanism
o Identify key log files
o Discuss & explore the Access log to identify HITS and/or MISSES
o Discuss & explore the Store log to identify cached content
o Convert Squid logs to the Common Log Format (CLF) for easy processing
o Discuss key CLF fields
o Configure Webalizer to process Squid-CLF logs
o Revert to Squid Native logs
o Discuss key Native log fields
o Configure Webalizer to process Squid Native logs
*
* Squid Network Configuration & System Stats
o Discuss cachemgr.cgi Common Gateway Interface(CGI) script
o Explore the available metrics provided by cachemgr.cgi
o Change default Squid Proxy port
Modify text/graphical clients and test communications
Discuss Safe Ports - usage & applications
*
* Squid Access Control Lists (ACLs)
Intro to Access Control Lists (ACLs) - syntax
Define & test multiple HTTP-based ACLs
Define & test ACL lists - to support multiple hosts/subnets
Define & test time-based ACLs
Nest ACLs to tighten security
Implement destination domain based ACLs
Exempt destination domains from being cached to ensure content freshness
Define & test Anded ACLs
Discuss the benefits of Regular Expressions (Regexes)
Implement Regular Expressions ACLs to match URL patterns
Exempt hosts/subnets from being cached or using the Squid cache
Force cache usage
Configure enterprise-class Cisco PIX firewall to deny outbound traffic
Configure DNS round-robin with multiple Squid Proxy caches for load-balancing
Discuss delay pool concepts & applications - bandwidth management
Configure delay pools - to support rate-limiting
Examine results of various delay pool classes
Enforce maximum connections to deter Denial of Service (DoS) attacks
Verify maximum connections comply with security policy
*
* Squid Proxy Hierarchies
Discuss Squid cache hierarchy concepts & applications
Ensure communications through a primary cache server - double-auditing
Discuss and configure parent-child bypass based on ACLs
Configure Intranet ACLs for peer-cache bypass
Discuss & implement Squid cache hierarchy siblings