Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to have a secure access from the internet to my squid server.
I have:

auth_param basic program /usr/local/squid/libexec/ncsa_auth /usr/local/squid/etc/passwd

that allow 1 user to use squid from outside but:
1) how to protect squid from bruteforcing?
2) how to encrypt passwords that are send to squid from the internet?

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted
  1. You can protect squid against brute forcing with something like Fail2Ban. It's a fully configurable system that you can use to automatically block any user/ip/etc after attempting a couple of logins on one of your services.

  2. Use a VPN/SSH tunnel to connect to squid. With HTTP everything will not be encrypted by default, so if you want it secure, tunnel it via an encrypted protocol.

share|improve this answer
    
thanks for advice! –  Sergey Aug 11 '10 at 20:39
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.