iptables --uid-owner wuxuu la mid yahay sockets-ka maxalliga ah ee Squid, ma aha isticmaalayaasha LAN
Isticmaal macnaha --uid-owner ee ah abuuraha socket maxalli ah markaad ka fikiraysid bixitaanka Squid, oo ka sooc baakadaha LAN ee la gudbiyo.
Isku-dhigga owner ee iptables wuxuu aqoonsan karaa baakadaha uu abuuray socket-ka geeddi-socod maxalli ah. Tusaale ahaan, -m owner --uid-owner 1234 waxa uu tilmaamayaa socket maxalli ah oo uu leeyahay UID 1234; ma aqoonsado magaca isticmaalaha proxy HTTP.
Mashiinka Squid ku shaqeeya, kala sooc waddooyinkan:
| Taraafikada | Farqiga khuseeya |
|---|---|
| Macmiil wuxuu ku xirmayaa Squid mashiinkan | Xiriir soo galaya oo u socda dhageystaha proxy |
| Squid wuxuu furayaa xiriir halka loo socdo | Socket baxa oo maxalli ahaan loo abuuray |
| Macmiil LAN ah ayaa si toos ah u mara mashiinkan | Taraafikada la gudbiyay oo aan lahayn socket abuure maxalli ah |
Kordhinta waxay ansax tahay OUTPUT iyo POSTROUTING. Baakadaha la gudbiyay ma laha socket maxalli ah oo ku xiran isku-dhiggan, sidaas darteed qaanuunka FORWARD ma ogaan karo isticmaalaha kombuyuutarka fog isagoo weydiinaya UID-ga Squid.
Sidaas darteed siyaasad u oggolaanaysa sockets-ka baxa ee Squid laftiisa waxay ka hadlaysaa kaliya qayb ka mid ah naqshad shabakadeed ku salaysan proxy oo keliya. Gudbinta gateway-ga, gelitaanka dhageystaha, adeegyada kale ee la oggolaaday iyo akoonka adeegga proxy ee dhabta ah waa in lagu maareeyaa baaxaddooda ku habboon.
Isticmaal aqoonsiga waqtiga socodka ee la habeeyay halkii aad ka malayn lahayd in Squid u shaqeeyo sida nobody. Geeddi-socodyo badan ayaa wadaagi kara hal UID, sidaas darteed oggolaansho ku salaysan UID waa xad akoon, ma aha caddayn in hal fayl fulin oo gaar ah uu abuuray xiriir kasta oo la oggolaaday.