Internet Proxy / Usage Monitoring Server












0















I have a Dell PowerEdge Server and I want to make it into a whole site (location) proxy server so if anyone in the building uses our internet connection, they will have to go through this proxy to get out. I want to be able to block certain internet sites as well as monitor unproductive internet usage. (Search by user, date, time, site visited...) I would also like to restrict with username and password who is allowed to connect to the proxy.



I have a PowerEdge server running Ubuntu and an Ethernet switch. Do you know what hardware I need to do this and what software I need to be running and how to configure it? It would also be nice if it had a nice web interface and/or GUI to configure/search/monitor usage.



I have already looked into Squid, but it didn't seem like it did everything I am looking to do. Maybe I am not configuring it correctly or I need other software to run along side it?










share|improve this question





























    0















    I have a Dell PowerEdge Server and I want to make it into a whole site (location) proxy server so if anyone in the building uses our internet connection, they will have to go through this proxy to get out. I want to be able to block certain internet sites as well as monitor unproductive internet usage. (Search by user, date, time, site visited...) I would also like to restrict with username and password who is allowed to connect to the proxy.



    I have a PowerEdge server running Ubuntu and an Ethernet switch. Do you know what hardware I need to do this and what software I need to be running and how to configure it? It would also be nice if it had a nice web interface and/or GUI to configure/search/monitor usage.



    I have already looked into Squid, but it didn't seem like it did everything I am looking to do. Maybe I am not configuring it correctly or I need other software to run along side it?










    share|improve this question



























      0












      0








      0


      1






      I have a Dell PowerEdge Server and I want to make it into a whole site (location) proxy server so if anyone in the building uses our internet connection, they will have to go through this proxy to get out. I want to be able to block certain internet sites as well as monitor unproductive internet usage. (Search by user, date, time, site visited...) I would also like to restrict with username and password who is allowed to connect to the proxy.



      I have a PowerEdge server running Ubuntu and an Ethernet switch. Do you know what hardware I need to do this and what software I need to be running and how to configure it? It would also be nice if it had a nice web interface and/or GUI to configure/search/monitor usage.



      I have already looked into Squid, but it didn't seem like it did everything I am looking to do. Maybe I am not configuring it correctly or I need other software to run along side it?










      share|improve this question
















      I have a Dell PowerEdge Server and I want to make it into a whole site (location) proxy server so if anyone in the building uses our internet connection, they will have to go through this proxy to get out. I want to be able to block certain internet sites as well as monitor unproductive internet usage. (Search by user, date, time, site visited...) I would also like to restrict with username and password who is allowed to connect to the proxy.



      I have a PowerEdge server running Ubuntu and an Ethernet switch. Do you know what hardware I need to do this and what software I need to be running and how to configure it? It would also be nice if it had a nice web interface and/or GUI to configure/search/monitor usage.



      I have already looked into Squid, but it didn't seem like it did everything I am looking to do. Maybe I am not configuring it correctly or I need other software to run along side it?







      server internet proxy webserver transparent-proxy






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Aug 6 '12 at 20:26









      Eliah Kagan

      82.9k22228369




      82.9k22228369










      asked Aug 6 '12 at 13:39









      JasonJason

      1115




      1115






















          1 Answer
          1






          active

          oldest

          votes


















          0














          How many users you need to support in total and concurrently will determine how much hardware you need. A single server can potentially handle many users but it depends on the number of users and the hardware capabilities.



          I don't know of a turn-key solution on top of Ubuntu that does exactly what you are describing, but I think you are definitely right to look at Squid. As you saw Squid by itself does not do everything you want, but it has good authentication capabilities you can configure depending on your environment.



          For content filtering and blocking Squid will work with Dan's Guardian which lets you block sites according to your own customization or pre-defined blacklists or keywords and such.



          Finally, there are a number of ways to view and analyze the logs which are general or specific to Squid. /var/log/squid/access.log is in a plaintext format and you can view it in a nice graphical format with Squid-specific log viewers such as SqStat or Calamari (which seem to be no longer maintained) or SquidAnalyzer which looks like it is more current. You can even import it into Excel or OpenOffice Calc or similar to create a custom report based on the data.






          share|improve this answer


























          • I will look into using Squid and SquidAnalyzer. How do I setup Squid to allow other users to connect to the internet through my proxy? To clarify, I am not sure how to setup the hardware. Do I connect one port of the server to the internet router, and the second port from the server to the switch for other computers to connect to?

            – Jason
            Aug 6 '12 at 21:33













          • There are two ways I can think of to do it: you can put the Squid server between the router and the switch, or you can just hang the Squid server off the switch. In both cases you will need to configure clients to authenticate with Squid. If the Squid server is between the switch and router, then you may also need to configure the Squid server to forward additional non-HTTP traffic to the gateway -- otherwise they will only be able to access upstream network resources that Squid retrieves on their behalf.

            – DELL_JonathanS
            Aug 9 '12 at 15:29











          • Do you think Zentyal would do what I am looking for?

            – Jason
            Aug 10 '12 at 16:35











          • I don't have experience with Zentyal, but judging by doc.zentyal.org/en/proxy.html it seems like it does a lot of what you want -- a nice-looking GUI and supports content filtering and authentication. It also supports logging: doc.zentyal.org/en/logs.html Does the log sample look like what you want? doc.zentyal.org/en/_images/02-full-report.png Zentyal may be a good choice for you!

            – DELL_JonathanS
            Aug 10 '12 at 21:59











          • I think this is exactly what I am looking for. Thanks!

            – Jason
            Aug 11 '12 at 10:31











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "89"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f172585%2finternet-proxy-usage-monitoring-server%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          1 Answer
          1






          active

          oldest

          votes








          1 Answer
          1






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes









          0














          How many users you need to support in total and concurrently will determine how much hardware you need. A single server can potentially handle many users but it depends on the number of users and the hardware capabilities.



          I don't know of a turn-key solution on top of Ubuntu that does exactly what you are describing, but I think you are definitely right to look at Squid. As you saw Squid by itself does not do everything you want, but it has good authentication capabilities you can configure depending on your environment.



          For content filtering and blocking Squid will work with Dan's Guardian which lets you block sites according to your own customization or pre-defined blacklists or keywords and such.



          Finally, there are a number of ways to view and analyze the logs which are general or specific to Squid. /var/log/squid/access.log is in a plaintext format and you can view it in a nice graphical format with Squid-specific log viewers such as SqStat or Calamari (which seem to be no longer maintained) or SquidAnalyzer which looks like it is more current. You can even import it into Excel or OpenOffice Calc or similar to create a custom report based on the data.






          share|improve this answer


























          • I will look into using Squid and SquidAnalyzer. How do I setup Squid to allow other users to connect to the internet through my proxy? To clarify, I am not sure how to setup the hardware. Do I connect one port of the server to the internet router, and the second port from the server to the switch for other computers to connect to?

            – Jason
            Aug 6 '12 at 21:33













          • There are two ways I can think of to do it: you can put the Squid server between the router and the switch, or you can just hang the Squid server off the switch. In both cases you will need to configure clients to authenticate with Squid. If the Squid server is between the switch and router, then you may also need to configure the Squid server to forward additional non-HTTP traffic to the gateway -- otherwise they will only be able to access upstream network resources that Squid retrieves on their behalf.

            – DELL_JonathanS
            Aug 9 '12 at 15:29











          • Do you think Zentyal would do what I am looking for?

            – Jason
            Aug 10 '12 at 16:35











          • I don't have experience with Zentyal, but judging by doc.zentyal.org/en/proxy.html it seems like it does a lot of what you want -- a nice-looking GUI and supports content filtering and authentication. It also supports logging: doc.zentyal.org/en/logs.html Does the log sample look like what you want? doc.zentyal.org/en/_images/02-full-report.png Zentyal may be a good choice for you!

            – DELL_JonathanS
            Aug 10 '12 at 21:59











          • I think this is exactly what I am looking for. Thanks!

            – Jason
            Aug 11 '12 at 10:31
















          0














          How many users you need to support in total and concurrently will determine how much hardware you need. A single server can potentially handle many users but it depends on the number of users and the hardware capabilities.



          I don't know of a turn-key solution on top of Ubuntu that does exactly what you are describing, but I think you are definitely right to look at Squid. As you saw Squid by itself does not do everything you want, but it has good authentication capabilities you can configure depending on your environment.



          For content filtering and blocking Squid will work with Dan's Guardian which lets you block sites according to your own customization or pre-defined blacklists or keywords and such.



          Finally, there are a number of ways to view and analyze the logs which are general or specific to Squid. /var/log/squid/access.log is in a plaintext format and you can view it in a nice graphical format with Squid-specific log viewers such as SqStat or Calamari (which seem to be no longer maintained) or SquidAnalyzer which looks like it is more current. You can even import it into Excel or OpenOffice Calc or similar to create a custom report based on the data.






          share|improve this answer


























          • I will look into using Squid and SquidAnalyzer. How do I setup Squid to allow other users to connect to the internet through my proxy? To clarify, I am not sure how to setup the hardware. Do I connect one port of the server to the internet router, and the second port from the server to the switch for other computers to connect to?

            – Jason
            Aug 6 '12 at 21:33













          • There are two ways I can think of to do it: you can put the Squid server between the router and the switch, or you can just hang the Squid server off the switch. In both cases you will need to configure clients to authenticate with Squid. If the Squid server is between the switch and router, then you may also need to configure the Squid server to forward additional non-HTTP traffic to the gateway -- otherwise they will only be able to access upstream network resources that Squid retrieves on their behalf.

            – DELL_JonathanS
            Aug 9 '12 at 15:29











          • Do you think Zentyal would do what I am looking for?

            – Jason
            Aug 10 '12 at 16:35











          • I don't have experience with Zentyal, but judging by doc.zentyal.org/en/proxy.html it seems like it does a lot of what you want -- a nice-looking GUI and supports content filtering and authentication. It also supports logging: doc.zentyal.org/en/logs.html Does the log sample look like what you want? doc.zentyal.org/en/_images/02-full-report.png Zentyal may be a good choice for you!

            – DELL_JonathanS
            Aug 10 '12 at 21:59











          • I think this is exactly what I am looking for. Thanks!

            – Jason
            Aug 11 '12 at 10:31














          0












          0








          0







          How many users you need to support in total and concurrently will determine how much hardware you need. A single server can potentially handle many users but it depends on the number of users and the hardware capabilities.



          I don't know of a turn-key solution on top of Ubuntu that does exactly what you are describing, but I think you are definitely right to look at Squid. As you saw Squid by itself does not do everything you want, but it has good authentication capabilities you can configure depending on your environment.



          For content filtering and blocking Squid will work with Dan's Guardian which lets you block sites according to your own customization or pre-defined blacklists or keywords and such.



          Finally, there are a number of ways to view and analyze the logs which are general or specific to Squid. /var/log/squid/access.log is in a plaintext format and you can view it in a nice graphical format with Squid-specific log viewers such as SqStat or Calamari (which seem to be no longer maintained) or SquidAnalyzer which looks like it is more current. You can even import it into Excel or OpenOffice Calc or similar to create a custom report based on the data.






          share|improve this answer















          How many users you need to support in total and concurrently will determine how much hardware you need. A single server can potentially handle many users but it depends on the number of users and the hardware capabilities.



          I don't know of a turn-key solution on top of Ubuntu that does exactly what you are describing, but I think you are definitely right to look at Squid. As you saw Squid by itself does not do everything you want, but it has good authentication capabilities you can configure depending on your environment.



          For content filtering and blocking Squid will work with Dan's Guardian which lets you block sites according to your own customization or pre-defined blacklists or keywords and such.



          Finally, there are a number of ways to view and analyze the logs which are general or specific to Squid. /var/log/squid/access.log is in a plaintext format and you can view it in a nice graphical format with Squid-specific log viewers such as SqStat or Calamari (which seem to be no longer maintained) or SquidAnalyzer which looks like it is more current. You can even import it into Excel or OpenOffice Calc or similar to create a custom report based on the data.







          share|improve this answer














          share|improve this answer



          share|improve this answer








          edited Aug 6 '12 at 20:26









          Eliah Kagan

          82.9k22228369




          82.9k22228369










          answered Aug 6 '12 at 20:22









          DELL_JonathanSDELL_JonathanS

          1




          1













          • I will look into using Squid and SquidAnalyzer. How do I setup Squid to allow other users to connect to the internet through my proxy? To clarify, I am not sure how to setup the hardware. Do I connect one port of the server to the internet router, and the second port from the server to the switch for other computers to connect to?

            – Jason
            Aug 6 '12 at 21:33













          • There are two ways I can think of to do it: you can put the Squid server between the router and the switch, or you can just hang the Squid server off the switch. In both cases you will need to configure clients to authenticate with Squid. If the Squid server is between the switch and router, then you may also need to configure the Squid server to forward additional non-HTTP traffic to the gateway -- otherwise they will only be able to access upstream network resources that Squid retrieves on their behalf.

            – DELL_JonathanS
            Aug 9 '12 at 15:29











          • Do you think Zentyal would do what I am looking for?

            – Jason
            Aug 10 '12 at 16:35











          • I don't have experience with Zentyal, but judging by doc.zentyal.org/en/proxy.html it seems like it does a lot of what you want -- a nice-looking GUI and supports content filtering and authentication. It also supports logging: doc.zentyal.org/en/logs.html Does the log sample look like what you want? doc.zentyal.org/en/_images/02-full-report.png Zentyal may be a good choice for you!

            – DELL_JonathanS
            Aug 10 '12 at 21:59











          • I think this is exactly what I am looking for. Thanks!

            – Jason
            Aug 11 '12 at 10:31



















          • I will look into using Squid and SquidAnalyzer. How do I setup Squid to allow other users to connect to the internet through my proxy? To clarify, I am not sure how to setup the hardware. Do I connect one port of the server to the internet router, and the second port from the server to the switch for other computers to connect to?

            – Jason
            Aug 6 '12 at 21:33













          • There are two ways I can think of to do it: you can put the Squid server between the router and the switch, or you can just hang the Squid server off the switch. In both cases you will need to configure clients to authenticate with Squid. If the Squid server is between the switch and router, then you may also need to configure the Squid server to forward additional non-HTTP traffic to the gateway -- otherwise they will only be able to access upstream network resources that Squid retrieves on their behalf.

            – DELL_JonathanS
            Aug 9 '12 at 15:29











          • Do you think Zentyal would do what I am looking for?

            – Jason
            Aug 10 '12 at 16:35











          • I don't have experience with Zentyal, but judging by doc.zentyal.org/en/proxy.html it seems like it does a lot of what you want -- a nice-looking GUI and supports content filtering and authentication. It also supports logging: doc.zentyal.org/en/logs.html Does the log sample look like what you want? doc.zentyal.org/en/_images/02-full-report.png Zentyal may be a good choice for you!

            – DELL_JonathanS
            Aug 10 '12 at 21:59











          • I think this is exactly what I am looking for. Thanks!

            – Jason
            Aug 11 '12 at 10:31

















          I will look into using Squid and SquidAnalyzer. How do I setup Squid to allow other users to connect to the internet through my proxy? To clarify, I am not sure how to setup the hardware. Do I connect one port of the server to the internet router, and the second port from the server to the switch for other computers to connect to?

          – Jason
          Aug 6 '12 at 21:33







          I will look into using Squid and SquidAnalyzer. How do I setup Squid to allow other users to connect to the internet through my proxy? To clarify, I am not sure how to setup the hardware. Do I connect one port of the server to the internet router, and the second port from the server to the switch for other computers to connect to?

          – Jason
          Aug 6 '12 at 21:33















          There are two ways I can think of to do it: you can put the Squid server between the router and the switch, or you can just hang the Squid server off the switch. In both cases you will need to configure clients to authenticate with Squid. If the Squid server is between the switch and router, then you may also need to configure the Squid server to forward additional non-HTTP traffic to the gateway -- otherwise they will only be able to access upstream network resources that Squid retrieves on their behalf.

          – DELL_JonathanS
          Aug 9 '12 at 15:29





          There are two ways I can think of to do it: you can put the Squid server between the router and the switch, or you can just hang the Squid server off the switch. In both cases you will need to configure clients to authenticate with Squid. If the Squid server is between the switch and router, then you may also need to configure the Squid server to forward additional non-HTTP traffic to the gateway -- otherwise they will only be able to access upstream network resources that Squid retrieves on their behalf.

          – DELL_JonathanS
          Aug 9 '12 at 15:29













          Do you think Zentyal would do what I am looking for?

          – Jason
          Aug 10 '12 at 16:35





          Do you think Zentyal would do what I am looking for?

          – Jason
          Aug 10 '12 at 16:35













          I don't have experience with Zentyal, but judging by doc.zentyal.org/en/proxy.html it seems like it does a lot of what you want -- a nice-looking GUI and supports content filtering and authentication. It also supports logging: doc.zentyal.org/en/logs.html Does the log sample look like what you want? doc.zentyal.org/en/_images/02-full-report.png Zentyal may be a good choice for you!

          – DELL_JonathanS
          Aug 10 '12 at 21:59





          I don't have experience with Zentyal, but judging by doc.zentyal.org/en/proxy.html it seems like it does a lot of what you want -- a nice-looking GUI and supports content filtering and authentication. It also supports logging: doc.zentyal.org/en/logs.html Does the log sample look like what you want? doc.zentyal.org/en/_images/02-full-report.png Zentyal may be a good choice for you!

          – DELL_JonathanS
          Aug 10 '12 at 21:59













          I think this is exactly what I am looking for. Thanks!

          – Jason
          Aug 11 '12 at 10:31





          I think this is exactly what I am looking for. Thanks!

          – Jason
          Aug 11 '12 at 10:31


















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Ask Ubuntu!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f172585%2finternet-proxy-usage-monitoring-server%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          flock() on closed filehandle LOCK_FILE at /usr/bin/apt-mirror

          Mangá

          Eduardo VII do Reino Unido