Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to have a secure access from the internet to my squid server.
I have:

auth_param basic program /usr/local/squid/libexec/ncsa_auth /usr/local/squid/etc/passwd

that allow 1 user to use squid from outside but:
1) how to protect squid from bruteforcing?
2) how to encrypt passwords that are send to squid from the internet?

share|improve this question
up vote 0 down vote accepted
  1. You can protect squid against brute forcing with something like Fail2Ban. It's a fully configurable system that you can use to automatically block any user/ip/etc after attempting a couple of logins on one of your services.

  2. Use a VPN/SSH tunnel to connect to squid. With HTTP everything will not be encrypted by default, so if you want it secure, tunnel it via an encrypted protocol.

share|improve this answer
    
thanks for advice! – Sergey Aug 11 '10 at 20:39

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.