jackblk · June 11, 2025 06:56 · Sep 1, 2021 · May 30, 2021 · May 30, 2021 · Mar 2, 2020
diff --git a/squid_proxy_tutorial.md b/squid_proxy_tutorial.md
@@ -74,8 +74,8 @@ http_port 8888
 Save the file in vi with [esc]:wq
 
 ### Start the squid service
-Start squid: ```sudo service squid squid start```
-Press ```Ctrl + A, Ctrl + D``` to detach the screen. You can resume the sreen via ```screen -r```.
+Start squid: ```sudo service squid start```
+
 To check service status: ```service squid status```
 
 ### Restart the squid service and try proxy

diff --git a/squid.conf b/squid.conf
@@ -1,11 +0,0 @@
-auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwords
-auth_param basic realm Squid proxy-caching web server
-auth_param basic credentialsttl 24 hours
-auth_param basic casesensitive off
-acl authenticated proxy_auth REQUIRED
-http_access allow authenticated
-http_access deny all
-dns_v4_first on
-forwarded_for delete
-via off
-http_port 8888

diff --git a/squid.conf b/squid.conf
@@ -0,0 +1,11 @@
+auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwords
+auth_param basic realm Squid proxy-caching web server
+auth_param basic credentialsttl 24 hours
+auth_param basic casesensitive off
+acl authenticated proxy_auth REQUIRED
+http_access allow authenticated
+http_access deny all
+dns_v4_first on
+forwarded_for delete
+via off
+http_port 8888
diff --git a/squid_proxy_tutorial.md b/squid_proxy_tutorial.md
@@ -73,9 +73,14 @@ http_port 8888
 
 Save the file in vi with [esc]:wq
 
+### Start the squid service
+Start squid: ```sudo service squid squid start```
+Press ```Ctrl + A, Ctrl + D``` to detach the screen. You can resume the sreen via ```screen -r```.
+To check service status: ```service squid status```
+
 ### Restart the squid service and try proxy
 Restart squid service
-```sudo systemctl restart squid.service``` or ```sudo service squid restart```.
+```sudo service squid restart``` or ```sudo systemctl restart squid.service```.
 
 Use your proxy with your ```ip:port```. Example: ```111.111.222.333:8888``` and login with your user/pass.
 

diff --git a/squid_proxy_tutorial.md b/squid_proxy_tutorial.md
@@ -82,4 +82,4 @@ Use your proxy with your ```ip:port```. Example: ```111.111.222.333:8888``` and
 ### Caution
 You might need to create inbound firewall rule first before using the proxy.
 
-For Google cloud: [Firewall](https://console.cloud.google.com/networking/firewalls/). Create a rule that apply to IP range of ```0.0.0.0/0```, allow ```TCP:8888, UDP:8888``` for all traffic.
+For Google cloud: [Firewall](https://console.cloud.google.com/networking/firewalls/). Create an Ingress rule, Target Apply to all, IP range of ```0.0.0.0/0```, allow ```TCP:8888, UDP:8888``` for all traffic.
diff --git a/squid_proxy_tutorial.md b/squid_proxy_tutorial.md
@@ -66,6 +66,7 @@ http_port 8888
 
 * ```auth_param basic credentialsttl 24 hours```: after 24 hours, user/pass will be asked again.
 * ```auth_param basic casesensitive off```: case sensitive for user is off.
+* ```dns_v4_first on```: use only IPv4 to speed up the proxy.
 * ```forwarded_for delete```: remove the forwarded_for http header which would expose your source to the destination
 * ```via off```: remove more headers to avoid exposing the source.
 * ```http_port 8888```: port 8888 is used for proxy. You can choose any port.

diff --git a/squid_proxy_tutorial.md b/squid_proxy_tutorial.md
@@ -0,0 +1,84 @@
+### Note
+This tutorial is for Ubuntu & Squid3. Use AWS, Google cloud, Digital Ocean or any services with Ubuntu to follow this tutorial.
+
+
+### Install squid & update
+```
+sudo apt-get update
+sudo apt-get install squid3
+sudo apt-get install apache2-utils
+```
+
+### Setup the password store
+Choose a username/password. Example:
+```
+username: abc
+password: 123
+```
+Type in console:
+```
+sudo touch /etc/squid/passwords
+sudo chmod 777 /etc/squid/passwords
+sudo htpasswd -c /etc/squid/passwords [USERNAME]
+```
+
+Replace [USERNAME] with your username, in this example: ```abc```.
+
+You will be prompted for entering the password. Enter and confirm it. This example password: ```123```.
+
+
+#### [Optional] Test the password store
+
+```
+/usr/lib/squid3/basic_ncsa_auth /etc/squid/passwords
+```
+
+After executing this line the console will look like its hung, there is a prompt without any text in it. Enter ```USERNAME PASSWORD``` (replacing these with your specific username and password) and hit return. You should receive the response "OK".
+
+If not, review the error message, your username/password might be incorrect. Its also possible basic_ncsa_auth is located on a different path (e.g. lib64).
+
+### Config squid proxy
+
+Backup default config file:
+```
+sudo mv /etc/squid/squid.conf /etc/squid/squid.conf.original
+```
+
+Make a new configuration files
+```
+sudo vi /etc/squid/squid.conf
+```
+
+Enter this in the config file
+```
+auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwords
+auth_param basic realm Squid proxy-caching web server
+auth_param basic credentialsttl 24 hours
+auth_param basic casesensitive off
+acl authenticated proxy_auth REQUIRED
+http_access allow authenticated
+http_access deny all
+dns_v4_first on
+forwarded_for delete
+via off
+http_port 8888
+```
+
+* ```auth_param basic credentialsttl 24 hours```: after 24 hours, user/pass will be asked again.
+* ```auth_param basic casesensitive off```: case sensitive for user is off.
+* ```forwarded_for delete```: remove the forwarded_for http header which would expose your source to the destination
+* ```via off```: remove more headers to avoid exposing the source.
+* ```http_port 8888```: port 8888 is used for proxy. You can choose any port.
+
+Save the file in vi with [esc]:wq
+
+### Restart the squid service and try proxy
+Restart squid service
+```sudo systemctl restart squid.service``` or ```sudo service squid restart```.
+
+Use your proxy with your ```ip:port```. Example: ```111.111.222.333:8888``` and login with your user/pass.
+
+### Caution
+You might need to create inbound firewall rule first before using the proxy.
+
+For Google cloud: [Firewall](https://console.cloud.google.com/networking/firewalls/). Create a rule that apply to IP range of ```0.0.0.0/0```, allow ```TCP:8888, UDP:8888``` for all traffic.