2011.0915 - Announcing the latest V5 of the KingNeutron (Minimalist) Squid Proxy VM
o Still Based on Long-Term-Support Ubuntu 8.04.4 ( Hardy ) -- JEOS ( Just Enough OS )
o Minimal download size
o ESX* Compatible with SCSI vdisks - Plase Test!
o Note: ESXi users will probably have to edit the /etc/network/interfaces after 1st boot.
o Takes minimal resources to run -- 128MB RAM alloc, 1.7 GB Disk ( +2GB 2nd disk on sdb1, INCLUDED! ++ Pre-formatted for JFS )
- ROOT SSH logins are DENIED, out of the box -- login as " user " instead and SUDO or SU from there
Vmware Tools is NOT installed, for space reasons.
NO FIREWALL rules
o Bridged networking is used by default, and the VM is expecting to grab a DHCP address on bootup. IPV6 support has again been left Enabled in this release.
(Static MAC address assigned in VMX file - should Just Work anywhere)
o Default STATIC IP: 10.0.244.250
+ This can be changed by editing " /etc/network/interfaces " and then issuing ' /etc/init.d/networking restart '.
Note, this is a TESTING release - PLEASE let me know if there are any bugs!
I have finally been able to test Logfile rotation on ESXi - works Ok out of the box
IMPORTANT NOTE: When powering on the VM, tell Vmware you MOVED IT - not Copied it -- this may eliminate the hassle that some users have been seeing with " NIC creep ", where eth0 migrates to eth1 ;-)
DISCLAIMER *** - Run at your own risk, default build only includes SSH ( port 22 ) and Squid ( 10.0.244.250, port 3128 )
Not Responsible if this Virtual Appliance wows your birdcatponylizardfish, and makes it fall over in excitement! ***
Filesize: 101,214 KB / ~99MB
** Default ID / password:
root / vmroot
user / vmware
SECURITY NOTE: ** End-users are HIGHLY ENCOURAGED to change these default passwords as soon as possible, to avoid cracker attacks.
As root, ' passwd root ' and ' passwd user '.
- Feature: The 1st time you login as root, you WILL be asked to change the password. ;-) Otherwise, SSH will not be available.
--Please note that the Ubuntu Hardy Linux distro uses " upstart " instead of /etc/inittab, so TTY changes should be made in " /etc/event.d " now.
Ctrl-Alt-Del has been set to SHUTDOWN the VM, NOT REBOOT **
Alt-F5: Bandwidth monitor, updates every (4) sec ( Increased from V4 to save CPU interrupts )
Alt-F9: " Top " display, slightly customized
* Easter egg(s) and some minor speed tweaks and fixes
--Suggested additional software: (' apt-get update; apt-get install pkgname ')
o webmin -- For system configuration (Browser-based config: https://10.0.244.250:10000 )
o calamaris -- Log analyzer
o sarg -- Squid analysis report generator
o srg -- Detailed log analysis for squid
o squid-cgi -- Cache manager interface
Quick instructions (HOWTO):
- Fire up the VM
- Hit Alt-F5 and you can watch the bandwidth monitor
Hit Alt+F1, LOGIN AS ROOT and ** CHANGE THE PASSWORDS!! 1st thing **
- Set ALL of your browser's Cache setting really low, like to 5 MB - and Delete it! Huge disk space savings!
- Point your browser's Proxy setting to the VM's IP address ( default 10.0.244.250 , port 3128 ) - you can point it to the DHCP address for fast/temporary testing (issue ' ifconfig ' at the root or User prompt to see the squid VM's DHCP IP address) or change it to whatever matches your home network. I put it as a Class A address by default so it matches my home setup and ((hopefully)) shouldn't interfere with other setups.
--Note that this is a security feature as well. I have my home net setup as a Class A with all-static IPs, and everybody (browsers and apt-get) talks to Squid. Squid is usually the only box that has a DHCP address from the router so it can talk to the Internet.
-- Now here's the neat thing - multiple PCs on your network can have *multiple browsers* - Firefox, Chrome, Opera, IE, Safari, Lynx, etc all pointing to the Squid proxy, and it will cache and filter ( ad- and some porn-sites, user definable ) requests for *everybody.*
-- You know how AdBlock Plus works in Firefox? Squid does something very similar, only it does it for ANY browser. Somebody loads the Yahoo website? Well now you'll get it to load -faster- for you because it will be pulled from the Squid cache. Virus updates, ad-aware, apt-get and Windows updates should also be faster because they won't have to be downloaded from the Web multiple times. ( And yes, pretty much all of my physical PCs, laptops, and VMs go through my Squid proxy - I'm "eating my own dog food" here. )
o Basic tutorials here:
- ACL / file extension filtering:
-- There are a *LOT* of config file options; I've done the heavy lifting and marked up /etc/squid.conf with " xxx " marks wherever things have been changed, and it should Just Work out of the box. The maximum filesize that will get stored in-cache is 20MB, set by me. If you're a tweaker though, you can set it up to pretty much store and filter whatever you want. ( Hint: as root, edit the following in /etc/squid: adsblock.txt, porn.txt, notporn.txt -- and then issue ' squiderr ' )
-- If you are really anticipating a lot of usage, you should go ahead and bump up the settings - give the VM 256 MB RAM or more, and activate the built-in 2nd disk in /etc/squid.conf for extra cache space. You will need to un-comment the cache_dir line for the extra space, and possibly tweak some other settings. Repeat as needed - you can always replace the 2nd vdisk with a bigger one, or add more.
NOTE: ' squid -kshutdown; sleep 30; squid -z; squid -D ' will activate the extra disk space once you are done editing the config file.
--> Look in /etc/squid dir for ad-blocking settings, and don't forget to ' squid -kreconfigure ' ( or ' squiderr ' ) if you change things...
-- Note for people who like SANE text editors, that don't remind you of EDLIN - I've included Joe (' jstar ', for those of us who actually miss WordStar), and Midnight Commander, which comes with ' mcedit ' -- you're NOT limited to VI !!! You should easily be able to apt-get install nano as well, if you're used to it.
/ Post bug reports
./. If you have appreciated my response, please remember to apply Helpful/Correct points. TIA