i-iptables --uid-owner ihambisana namasokhethi endawo e-Squid, hhayi abasebenzisi be-LAN
Sebenzisa incazelo ye---uid-owner njengomakhi wesokhethi sendawo uma ucabanga ngokuphuma kwe-Squid futhi ugcine amaphakethe e-LAN adluliswayo ehlukile.
Ukufanisa i-owner kwe-iptables kungakhomba amaphakethe adalwe isokhethi yenqubo yendawo. Isibonelo, -m owner --uid-owner 1234 kusho isokhethi sendawo ephethwe yi-UID 1234; akubonisi igama lomsebenzisi we-HTTP proxy.
Kumshini ogijima i-Squid, hlukanisa lezi zindlela:
| Ithrafikhi | Umehluko ofanele |
|---|---|
| Iklayenti lixhuma ku-Squid kulo mshini | Ukuxhumana okungena kusilaleli se-proxy |
| I-Squid ivula ukuxhumana okuya endaweni | Isokhethi yokuphuma eyakhiwe endaweni |
| Iklayenti le-LAN lihamba ngqo ngalo mshini | Ithrafikhi edluliswayo ngaphandle kwesokhethi yomakhi wendawo |
Lesi sandiso sisebenza ku-OUTPUT naku-POSTROUTING. Amaphakethe adluliswayo awanaso isokhethi yendawo ehlobene nalokhu kufanisa, ngakho umthetho we-FORWARD awukwazi ukuthola umsebenzisi wekhompyutha ekude ngokubuza i-UID ye-Squid.
Ngakho inqubomgomo evumela amasokhethi okuphuma e-Squid uqobo ihlanganisa ingxenye eyodwa kuphela yedizayini yenethiwekhi encike kuphela ku-proxy. Ukudluliswa ngegesi, ukufinyelela kwesilaleli, ezinye izinsiza ezivunyelwe kanye ne-akhawunti yangempela yensiza ye-proxy kufanele kusingathwe endaweni efanele.
Sebenzisa ubunikazi besikhathi sokusebenza obulungiselelwe esikhundleni sokucabanga ukuthi i-Squid igijima njengo-nobody. Izinqubo eziningi zingabelana nge-UID eyodwa, ngakho imvume esekelwe ku-UID iwumkhawulo we-akhawunti, hhayi ubufakazi bokuthi ifayela elithile elisebenzayo lidale konke ukuxhumana okuvunyelwe.