搭建Squid3 密码账号IP代理

上文中，说明了 Squid3 IP Proxy 隐藏原IP，这里就搭建Squid 3密码账号IP代理进行整理，涉及环境 Ubuntu 18.04。

Step 1： htpasswd 和 htdigest 工具

htpasswd和htdigest工具是用于生成Squid密码的，直接安装命令

sudo apt-get install apache2-utils

安装完成后，使用命令如下所示

htpasswd -c /etc/squid/.squid_users xifarm
New password:
Re-type new password:
Adding password for user xifarm

创建的密码在/etc/squid/.squid_users里面存储，我们可以再增加一个用户

htpasswd /etc/squid/.squid_users runwulink
New password:
Re-type new password:
Adding password for user runwulink

这里可以“查看”一下刚才创建的2个账号

cat /etc/squid/.squid_users
xifarm:IyfTZICgapr1m6c5B5KK5ZAK/7A/VIgYB/

验证账号密码用这个脚本–防止我们遗忘密码账号

chown squid /etc/squid/.squid_users
/usr/lib64/squid/basic_ncsa_auth /etc/squid/.squid_users
xifarm password
OK
runwulink password
OK

Step2: 配置squid.conf 密码账号

auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/.squid_users
auth_param basic children 5
auth_param basic realm Proxy Authentication Required
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

acl auth_users proxy_auth xifarm runwulink
http_access allow auth_users

basic_ncsa_auth 配置密码文件路径 /etc/squid/.squid_users
auth_param basic children 5 指明了这里最多开放5个账号
auth_param basic casesensitive off 大小写不明感
acl auth_users proxy_auth xifarm runwulink

开启Squid测试

systemctl restart squid

Step3：代理使用

wget命令为例

wget google.com
–2019-12-1 00:38:21– http://google.com/
Connecting to 192.168.49.69:3128… connected.
Proxy request sent, awaiting response… 407 Proxy Authentication Required
2018-12-1 00:38:21 ERROR 407: Proxy Authentication Required.

这里会报407错误：密码账号没有设置原因。

wget –proxy-user=amos –proxy-password=password google.com
–2018-12-1 00:39:36– http://google.com/
Connecting to 192.168.49.69:3128… connected.
Proxy request sent, awaiting response… 301 Moved Permanently
Location: http://www.google.com/ [following]
–2018-12-1 00:39:37– http://www.google.com/
Reusing existing connection to 192.168.49.69:3128.
Proxy request sent, awaiting response… 200 OK
Length: unspecified [text/html]
Saving to: ‘index.html.8’

index.html.8 [ <=> ] 11.72K –.-KB/s in 0.1s

2018-12-1 00:39:38 (97.6 KB/s) – ‘index.html.8’ saved [12001]

小经验

• 查询Squid错误的日志vi /var/log/squid/access.log
• 注意命令行路径 /usr/lib/squid/basic_ncsa_auth 以你安装Squid的为准！
• 默认是3128端口，这个端口已经被滥用了，注意修改端口，且适用Squid密码账号方式保护流量