{"id":74613,"date":"2020-03-18T20:43:03","date_gmt":"2020-03-18T17:43:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej"},"modified":"2026-05-20T21:31:10","modified_gmt":"2026-05-20T19:31:10","slug":"besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","title":{"rendered":"Dominal avtorizasiyal\u0131 m\u00fc\u0259ssis\u0259 \u00fc\u00e7\u00fcn pulsuz proksi-server","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Dominal<\/p>\n

pfSense+Squid il\u0259 HTTPS filtrasiya + T\u0259k giri\u015f texnologiyas\u0131 (SSO) il\u0259 Active Directory qruplar\u0131 \u00fczr\u0259 filtrasiya<\/p>\n

Q\u0131sa tarix\u00e7\u0259si<\/h4>\n

\u015eirk\u0259td\u0259 AD qruplar\u0131ndan istifad\u0259 ed\u0259r\u0259k (o c\u00fcml\u0259d\u0259n https) saytlar \u00fczr\u0259 giri\u015fin filtrasiya edilm\u0259si \u00fc\u00e7\u00fcn proxy-serverin t\u0259tbiqin\u0259 ehtiyac yarand\u0131 ki, istifad\u0259\u00e7il\u0259r \u0259lav\u0259 parol daxil etm\u0259y\u0259r\u0259k, idar\u0259 etm\u0259ni veb interfeysd\u0259n h\u0259yata ke\u00e7ir\u0259 bilsinl\u0259r. N\u0259hay\u0259t, g\u00f6z\u0259l bir \u015f\u0259rait, d\u00fczd\u00fcr?<\/p>\n

Do\u011fru cavab Kerio Control v\u0259 ya UserGate kimi h\u0259ll\u0259rin al\u0131nmas\u0131 olard\u0131, lakin h\u0259mi\u015f\u0259 oldu\u011fu kimi pul yoxdur, ancaq ehtiyac var.<\/p>\n

Burada k\u00f6m\u0259yimiz\u0259 k\u00f6hn\u0259 yax\u015f\u0131 Squid g\u0259lir, amma yen\u0259 d\u0259 \u2014 veb interfeysini hardan tapmaq olar? SAMS2? Moral olaraq k\u00f6hn\u0259lib. Burada pfSense k\u00f6m\u0259yimiz\u0259 g\u0259lir.<\/p>\n

T\u0259svir<\/h4>\n

Bu m\u0259qal\u0259d\u0259 Squid proxy-serverinin konfiqurasiyas\u0131 yolu t\u0259svir edil\u0259c\u0259k.
\n\u0130stifad\u0259\u00e7il\u0259rin autentifikasiyas\u0131 \u00fc\u00e7\u00fcn Kerberos istifad\u0259 edil\u0259c\u0259k.
\nDomend\u0259n qruplar \u00fczr\u0259 filtrasiya \u00fc\u00e7\u00fcn SquidGuard istifad\u0259 edil\u0259c\u0259k.<\/p>\n

Monitorinq \u00fc\u00e7\u00fcn Lightsquid, sqstat v\u0259 pfSense-in daxili monitorinq sisteml\u0259ri istifad\u0259 olunacaq.
\nEyni zamanda, t\u0259k giri\u015f (SSO) texnologiyas\u0131 t\u0259tbiqind\u0259n ir\u0259li g\u0259l\u0259n tez-tez rast g\u0259lin\u0259n bir problemi h\u0259ll edil\u0259c\u0259k, y\u0259ni sistemin \u00f6z hesab\u0131 il\u0259 internet\u0259 \u00e7\u0131xma\u011fa \u00e7al\u0131\u015fan t\u0259tbiql\u0259r.
\n<\/a><\/p>\n

Squid-in qura\u015fd\u0131r\u0131lmas\u0131na haz\u0131rl\u0131q<\/h4>\n

M\u0259s\u0259l\u0259n pfSense \u0259sas\u0131nda olacaq, Qura\u015fd\u0131rma t\u0259limat\u0131.<\/a><\/p>\n

Onun daxilind\u0259 biz p\u0259rd\u0259l\u0259r\u0259 (firewall) domen hesablar\u0131 il\u0259 autentifikasiyan\u0131 t\u0259\u015fkil ed\u0259c\u0259yik. T\u0259limat.<\/a><\/p>\n

\u00c7ox vacibdir!<\/p>\n

Squid-i qura\u015fd\u0131rmadan \u0259vv\u0259l DNS-i pfSense-d\u0259 konfiqurasiya etm\u0259k server<\/a> A qeydini v\u0259 PTR qeydini bizim DNS serverimizd\u0259 yaratmaq v\u0259 NTP-ni konfiqurasiya etm\u0259kdir ki, vaxt domain kontrolerinin vaxt\u0131ndan f\u0259rql\u0259nm\u0259sin.<\/p>\n

Sizin \u015f\u0259b\u0259k\u0259d\u0259 pfSense-in WAN interfeysinin internet\u0259 \u00e7\u0131xmas\u0131 v\u0259 istifad\u0259\u00e7il\u0259rin LAN interfeysin\u0259 qo\u015fulmas\u0131, o c\u00fcml\u0259d\u0259n 7445 v\u0259 3128 (m\u0259nim halda 8080) portlar\u0131 vasit\u0259sil\u0259 m\u00fcmk\u00fcnd\u00fcr.<\/p>\n

H\u0259r \u015fey haz\u0131rd\u0131r? Domena LDAP il\u0259 \u0259laq\u0259 pfSense-d\u0259 qurulub v\u0259 vaxt sinxronla\u015fd\u0131r\u0131l\u0131b? \u018fla. \u0130ndi \u0259sas prosesi ba\u015flamaq vaxt\u0131d\u0131r.<\/p>\n

Qura\u015fd\u0131rma v\u0259 ilkin konfiqurasiya<\/h4>\n

Squid, SquidGuard v\u0259 LightSquid-i pfSense paket menecerind\u0259n \u00abSistem\/Paket meneceri\u00bb b\u00f6lm\u0259sind\u0259n qura\u015fd\u0131raca\u011f\u0131q.<\/p>\n

U\u011furlu qura\u015fd\u0131rmadan sonra \u00abXidm\u0259tl\u0259r \/ Squid Proxy server \/\u00bb b\u00f6lm\u0259sin\u0259 ke\u00e7irik v\u0259 ilk n\u00f6vb\u0259d\u0259 Local Cache sekmesinde ke\u015fi t\u0259nziml\u0259yirik, m\u0259n h\u0259r \u015feyi 0 olaraq t\u0259yin etdim, \u00e7\u00fcnki veb saytlar\u0131n\u0131n ke\u015fi y\u0131\u011fmaqda x\u00fcsusi bir m\u0259nas\u0131 g\u00f6rm\u00fcr\u0259m, bu tap\u015f\u0131r\u0131\u011f\u0131 brauzerl\u0259r \u00e7ox yax\u015f\u0131 yerin\u0259 yetirir. T\u0259nziml\u0259m\u0259d\u0259n sonra ekran\u0131n a\u015fa\u011f\u0131s\u0131nda \u00abSaxla\u00bb d\u00fcym\u0259sini bas\u0131r\u0131q v\u0259 bu, biz\u0259 proksi \u00fc\u00e7\u00fcn \u0259sas t\u0259nziml\u0259m\u0259l\u0259ri h\u0259yata ke\u00e7irm\u0259k imkan\u0131 ver\u0259c\u0259k.<\/p>\n

\u018fsas t\u0259nziml\u0259m\u0259l\u0259ri a\u015fa\u011f\u0131dak\u0131 \u015f\u0259kild\u0259 t\u0259qdim edirik:<\/p>\n

\"Dominal<\/p>\n

Varsay\u0131lan port 3128-dir, amma m\u0259n 8080 istifad\u0259 etm\u0259yi \u00fcst\u00fcn tuturam.<\/p>\n

Proxy Interface sekmesind\u0259 se\u00e7ilmi\u015f parametrl\u0259r proksimizin hans\u0131 interfeisl\u0259ri dinl\u0259y\u0259c\u0259yini m\u00fc\u0259yy\u0259n edir. server<\/a>. Bu firewall internet\u0259 WAN interfeysi il\u0259 baxd\u0131\u011f\u0131 \u00fc\u00e7\u00fcn, LAN v\u0259 WAN eyni yerli \u015f\u0259b\u0259k\u0259d\u0259 olsa bel\u0259, proksi \u00fc\u00e7\u00fcn LAN istifad\u0259 etm\u0259yi t\u00f6vsiy\u0259 edir\u0259m.<\/p>\n

Loopback sqstat-\u0131n i\u015fl\u0259m\u0259si \u00fc\u00e7\u00fcn laz\u0131md\u0131r.<\/p>\n

A\u015fa\u011f\u0131da sizi \u015e\u0259ffaf (Transparent) proksi t\u0259nziml\u0259m\u0259l\u0259ri v\u0259 SSL Filter il\u0259 tan\u0131\u015f ed\u0259c\u0259yik, amma onlara ehtiyac\u0131m\u0131z yoxdur, proksimiz \u015f\u0259ffaf olmayacaq v\u0259 HTTPS filtrasyonunda sertifikat d\u0259yi\u015fdirm\u0259 il\u0259 m\u0259\u015f\u011ful olmayaca\u011f\u0131q (ax\u0131 biz s\u0259n\u0259d d\u00f6vriyy\u0259si, bank-m\u00fc\u015ft\u0259ril\u0259r v\u0259 s. il\u0259 m\u0259\u015f\u011fuluq), sad\u0259c\u0259 \u0259l s\u0131x\u0131lmas\u0131 g\u00f6st\u0259ril\u0259c\u0259k.<\/p>\n

Bu m\u0259rh\u0259l\u0259d\u0259 domen kontrol\u00e7\u00fcm\u00fcz\u0259 ke\u00e7m\u0259liyik, orada autentifikasiya \u00fc\u00e7\u00fcn hesab yaratmal\u0131y\u0131q (pfSense-d\u0259 autentifikasiya \u00fc\u00e7\u00fcn t\u0259nziml\u0259diyimiz hesabdan da istifad\u0259 ed\u0259 bil\u0259rik). Burada \u00e7ox vacib bir amil var \u2013 \u0259g\u0259r AES128 v\u0259 ya AES256 \u015fifr\u0259l\u0259m\u0259si istifad\u0259 etm\u0259yi planla\u015fd\u0131r\u0131yorsan\u0131z, hesab t\u0259nziml\u0259m\u0259l\u0259rind\u0259 m\u00fcvafiq se\u00e7iml\u0259ri i\u015far\u0259l\u0259yin.<\/p>\n

\u018fg\u0259r sizin domeniniz olduqca m\u00fcr\u0259kk\u0259b bir me\u015f\u0259dirs\u0259 v\u0259 \u00e7ox sayda qovluq varsa v\u0259 ya domeniniz .local-d\u0131rsa, OLA B\u0130L\u018fR, lakin d\u0259qiq deyil, bu hesab \u00fc\u00e7\u00fcn sad\u0259 bir \u015fifr\u0259 istifad\u0259 etm\u0259li olacaqs\u0131n\u0131z, bu bir problem olaraq m\u0259lumdur, lakin m\u00fcr\u0259kk\u0259b \u015fifr\u0259 il\u0259 i\u015fl\u0259m\u0259y\u0259 bil\u0259r, konkret bir halda yoxlamaq laz\u0131md\u0131r.<\/p>\n

\"Dominal<\/p>\n

Bundan sonra Kerberos \u00fc\u00e7\u00fcn a\u00e7ar fayl\u0131n\u0131 haz\u0131rlay\u0131r\u0131q, domen kontrol\u00e7\u00fcs\u00fcnd\u0259 administrator h\u00fcquqlar\u0131 il\u0259 komanda x\u0259ttini a\u00e7\u0131r\u0131q v\u0259 daxil edirik:<\/p>\n

# ktpass -princ HTTP\/pfsense.domain.local@DOMAIN.LOCAL -mapuser pfsense -pass 3EYldza1sR -crypto {DES-CBC-CRC|DES-CBC-MD5|RC4-HMAC-NT|AES256-SHA1|AES128-SHA1|All} -ptype KRB5_NT_PRINCIPAL -out C:keytabsPROXY.keytab<\/code><\/pre>\n
Burada \u00f6z FQDN pfSense-nizi g\u00f6st\u0259ririk, b\u00f6y\u00fck-k\u00fc\u00e7\u00fck h\u0259rfl\u0259ri m\u00fctl\u0259q qoruyuruq, mapuser parametrind\u0259 domen hesab\u0131m\u0131z\u0131 v\u0259 onun \u015fifr\u0259sini daxil edirik, crypto parametrind\u0259 \u015fifr\u0259l\u0259m\u0259 \u00fcsulunu se\u00e7irik, m\u0259n i\u015f \u00fc\u00e7\u00fcn rc4-d\u0259n istifad\u0259 etdim v\u0259 -out sah\u0259sind\u0259 haz\u0131r a\u00e7ar fayl\u0131m\u0131z\u0131 hara g\u00f6nd\u0259r\u0259c\u0259yimizi se\u00e7irik.
\nA\u00e7ar fayl\u0131n\u0131 u\u011furla yaratd\u0131qdan sonra, onu bizim pfSense-\u0259 g\u00f6nd\u0259r\u0259c\u0259yik. Bunun \u00fc\u00e7\u00fcn Far-dan istifad\u0259 etdim, amma bunu h\u0259m\u00e7inin komandalarla, h\u0259m d\u0259 putty il\u0259 ya da pfSense-in \u00abDiaqnostika - Komanda x\u0259tti\u00bb b\u00f6lm\u0259sind\u0259 web interfeysi vasit\u0259sil\u0259 etm\u0259k olar.<\/p>\n
\u0130ndi biz \/etc\/krb5.conf fayl\u0131n\u0131 redakt\u0259 ed\u0259 bil\u0259rik\/yeni yarada bil\u0259rik.<\/p>\n
\"Dominal<\/p>\n
burada \/etc\/krb5.keytab bizim yaratd\u0131\u011f\u0131m\u0131z a\u00e7ar fayl\u0131d\u0131r.<\/p>\n
Kerberos-un i\u015fl\u0259diyin\u0259 \u0259min olmaq \u00fc\u00e7\u00fcn kinit il\u0259 yoxlay\u0131n, \u0259g\u0259r i\u015fl\u0259mirs\u0259, daha sonra oxuma\u011f\u0131n m\u0259nas\u0131 yoxdur.<\/p>\n
Squid-in autentifikasiyas\u0131n\u0131 v\u0259 autentifikasiyaya ehtiyac\u0131 olmayan giri\u015f siyah\u0131s\u0131n\u0131 konfiqurasiya etm\u0259k.<\/h4>\n
Kerberos-u u\u011furla qurduqdan sonra onu bizim Squid-\u0259 \u0259lav\u0259 ed\u0259c\u0259yik.<\/p>\n
Bunun \u00fc\u00e7\u00fcn Xidm\u0259tl\u0259r - Squid Proxy Server b\u00f6lm\u0259sin\u0259 ke\u00e7in v\u0259 \u0259sas parametrl\u0259rd\u0259 \u0259n a\u015fa\u011f\u0131ya enin, orada \u00ab\u018flav\u0259 parametrl\u0259r\u00bb d\u00fcym\u0259sini tapaca\u011f\u0131q.<\/p>\n
Custom Options (Before Auth) sah\u0259sin\u0259 daxil ed\u0259c\u0259yik:<\/p>\n
#\u0425\u0435\u043b\u043f\u0435\u0440\u044b\nauth_param negotiate program \/usr\/local\/libexec\/squid\/negotiate_kerberos_auth -s GSS_C_NO_NAME -k \/usr\/local\/etc\/squid\/squid.keytab -t none\nauth_param negotiate children 1000\nauth_param negotiate keep_alive on\n#\u0421\u043f\u0438\u0441\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430\nacl auth proxy_auth REQUIRED\nacl nonauth dstdomain \"\/etc\/squid\/nonauth.txt\" \n#\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \nhttp_access allow nonauth \nhttp_access deny !auth\nhttp_access allow auth<\/code><\/pre>\n
u\u0434\u0435 auth_param negotiate program \/usr\/local\/libexec\/squid\/negotiate_kerberos_auth<\/i> \u2014 laz\u0131m olan Kerberos autentifikasiyas\u0131 \u00fc\u00e7\u00fcn yard\u0131mc\u0131 proqram\u0131 se\u00e7ir.<\/p>\n
A\u00e7ar -s<\/i> d\u0259y\u0259ri il\u0259 GSS_C_NO_NAME<\/i> \u2014 a\u00e7ar fayl\u0131ndan h\u0259r hans\u0131 bir hesab\u0131n istifad\u0259sini m\u00fc\u0259yy\u0259n edir.<\/p>\n
A\u00e7ar -k<\/i> d\u0259y\u0259ri il\u0259 \/usr\/local\/etc\/squid\/squid.keytab<\/i> \u2014 m\u0259hz bu keytab fayl\u0131n\u0131 istifad\u0259 etm\u0259yi m\u00fc\u0259yy\u0259n edir. M\u0259nim hal\u0131mda, bu eyni \u015f\u0259kild\u0259 yaratd\u0131\u011f\u0131m\u0131z keytab fayl\u0131d\u0131r ki, onu \/usr\/local\/etc\/squid\/ direktoryas\u0131na k\u00f6\u00e7\u00fcrd\u00fcm v\u0259 ad\u0131n\u0131 d\u0259yi\u015fdirdim, \u00e7\u00fcnki Squid-in o direktoriya il\u0259 dostlu\u011fu yox idi, g\u00f6r\u0259s\u0259n g\u00f6r\u00fcnt\u00fc h\u00fcquqlar\u0131 \u00e7at\u0131\u015fm\u0131rd\u0131.<\/p>\n
A\u00e7ar -t<\/i> d\u0259y\u0259ri il\u0259 -t none<\/i> \u2014 domen kontrol sah\u0259sin\u0259 d\u00f6vr\u00fc sor\u011fular\u0131 dayand\u0131r\u0131r ki, bu da y\u00fck\u00fc ciddi d\u0259r\u0259c\u0259d\u0259 azald\u0131r, \u0259g\u0259r 50-d\u0259n art\u0131q istifad\u0259\u00e7iniz varsa.
\nTest m\u00fcdd\u0259tind\u0259 h\u0259m\u00e7inin -d a\u00e7ar\u0131n\u0131 \u0259lav\u0259 ed\u0259 bil\u0259rsiniz \u2014 y\u0259ni diaqnostika, daha \u00e7ox loq a\u00e7\u0131qlanacaq.
\nauth_param negotiate children 1000<\/i> \u2014 eyni anda n\u0259 q\u0259d\u0259r autentifikasiya prosesi ba\u015flaya bil\u0259c\u0259yini m\u00fc\u0259yy\u0259n edir.
\nauth_param negotiate keep_alive on<\/i> \u2014 autentifikasiya z\u0259ncirinin sor\u011fusu zaman\u0131 \u0259laq\u0259ni k\u0259sm\u0259m\u0259y\u0259 imkan verir.
\nacl auth proxy_auth REQUIRED<\/i> \u2014 autentifikasiyadan ke\u00e7mi\u015f istifad\u0259\u00e7il\u0259ri \u0259hat\u0259 ed\u0259n giri\u015f kontrol siyah\u0131s\u0131n\u0131 yarad\u0131r v\u0259 t\u0259l\u0259b edir.
\nacl nonauth dstdomain \u00ab\/etc\/squid\/nonauth.txt\u00bb<\/i> \u2014 Squid-\u0259, h\u0259r zaman ham\u0131ya a\u00e7\u0131q olan h\u0259d\u0259f domenl\u0259rinin yer ald\u0131\u011f\u0131 nonauth giri\u015f siyah\u0131s\u0131n\u0131 bildiririk. \u00d6z\u00fcm\u00fcz siyah\u0131 yarad\u0131b, i\u00e7\u0259risin\u0259 a\u015fa\u011f\u0131dak\u0131 formatda domenl\u0259ri qeyd ed\u0259c\u0259yik:<\/p>\n
.whatsapp.com\n.whatsapp.net<\/code><\/pre>\n
Whatsapp misal olaraq bo\u015funa se\u00e7ilm\u0259mi\u015fdir \u2014 o, autentifikasiyaya malik proxy-l\u0259r\u0259 qar\u015f\u0131 \u00e7ox t\u0259l\u0259bkard\u0131r v\u0259 autentifikasiyadan \u0259vv\u0259l icaz\u0259 verilm\u0259dikd\u0259 i\u015fl\u0259m\u0259y\u0259c\u0259k.
\nhttp_access allow nonauth<\/i> \u2014 bu siyah\u0131ya giri\u015f imtiyaz\u0131n\u0131 ham\u0131ya veririk.
\nhttp_access deny !auth<\/i> \u2014 qeyri-autentifikasiya olunmu\u015f istifad\u0259\u00e7il\u0259rin dig\u0259r saytlara giri\u015fini qada\u011fan edirik.
\nhttp_access allow auth<\/i> \u2014 giri\u015f izni verilen istifad\u0259\u00e7il\u0259r\u0259 imkan tan\u0131y\u0131r.
\nH\u0259r \u015fey, Squid art\u0131q sizin \u00fc\u00e7\u00fcn t\u0259nziml\u0259nib, indi qruplara g\u00f6r\u0259 filtrel\u0259m\u0259y\u0259 ba\u015flamaq \u00fc\u00e7\u00fcn \u0259n do\u011fru zamand\u0131r.<\/p>\n
SquidGuard T\u0259nziml\u0259nm\u0259si<\/h4>\n
Servisl\u0259r\u0259 ke\u00e7irikSquidGuard Proxy Filter.<\/p>\n
LDAP Se\u00e7iml\u0259rind\u0259 Kerberos autentifikasiyas\u0131 \u00fc\u00e7\u00fcn istifad\u0259 edil\u0259n hesab\u0131m\u0131z\u0131n m\u0259lumatlar\u0131n\u0131, amma a\u015fa\u011f\u0131dak\u0131 formatda daxil edirik:<\/p>\n
CN=pfsense,OU=xidm\u0259t-hesablar\u0131,DC=domain,DC=local<\/code><\/pre>\n
\u018fg\u0259r bo\u015fluqlar v\u0259 ya lat\u0131n olmayan simvollar varsa, bu yaz\u0131lar\u0131n ham\u0131s\u0131n\u0131 t\u0259k v\u0259 ya ikiqat qeyd i\u015far\u0259sin\u0259 almal\u0131:<\/p>\n
'CN=sg,OU=xidm\u0259t-hesablar\u0131,DC=domain,DC=local'\n\"CN=sg,OU=xidm\u0259t-hesablar\u0131,DC=domain,DC=local\"<\/code><\/pre>\n
Sonra bu i\u015far\u0259l\u0259ri m\u00fctl\u0259q qoyuruq:<\/p>\n
\"Dominal<\/p>\n
Laz\u0131ms\u0131z DOMAINpfsense-i k\u0259sm\u0259k \u00fc\u00e7\u00fcn DOMAIN<\/a>.LOCAL, sisteme olduqca h\u0259ssasd\u0131r.<\/p>\n
\u0130ndi Group Acl-\u0259 ke\u00e7irik v\u0259 domen qruplar\u0131m\u0131z\u0131 ba\u011flay\u0131r\u0131q, m\u0259n group_0, group_1 v\u0259 s. kimi sad\u0259 adlar istifad\u0259 edir\u0259m, burada 3 \u2014 yaln\u0131z a\u011f siyah\u0131ya giri\u015f, 0 \u2014 h\u0259r \u015fey\u0259 giri\u015f imkan\u0131.<\/p>\n
Qruplar a\u015fa\u011f\u0131dak\u0131 kimi ba\u011flan\u0131r:<\/p>\n
ldapusersearch ldap:\/\/dc.domain.local:3268\/DC=DOMAIN,DC=LOCAL?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=group_0OU=squidOU=service-groupsDC=DOMAINDC=LOCAL))<\/code><\/pre>\n
Qrupumuzu saxlay\u0131r\u0131q, Times-a ke\u00e7irik, orada h\u0259r zaman i\u015fl\u0259m\u0259k m\u0259nas\u0131n\u0131 ver\u0259n bir intervalla yarad\u0131lm\u0131\u015fd\u0131r, indi Target Categories-a ke\u00e7irik v\u0259 \u00f6z ist\u0259yimiz\u0259 g\u00f6r\u0259 siyah\u0131lar yarad\u0131r\u0131q, siyah\u0131lar\u0131 yaratd\u0131qdan sonra qruplar\u0131m\u0131za geri d\u00f6nerik v\u0259 i\u00e7\u0259risind\u0259 d\u00fcym\u0259l\u0259rl\u0259 kiml\u0259rin hara girm\u0259k icaz\u0259si, kiml\u0259rin hara girm\u0259m\u0259si se\u00e7ilir.<\/p>\n
LightSquid v\u0259 sqstat<\/h4>\n
T\u0259nziml\u0259m\u0259l\u0259rd\u0259 l\u00fcpb\u0259k se\u00e7diks\u0259 v\u0259 7445-\u0259 giri\u015f imkan\u0131 a\u00e7m\u0131\u015f\u0131qsa, h\u0259m \u015f\u0259b\u0259k\u0259mizd\u0259, h\u0259m d\u0259 pfSense-d\u0259, Squid Proxy Reports-a ke\u00e7dikd\u0259, he\u00e7 bir problem olmadan sqstat v\u0259 Lighsquid-i a\u00e7aca\u011f\u0131q. Sonuncusu \u00fc\u00e7\u00fcn orada istifad\u0259\u00e7i ad\u0131 v\u0259 \u015fifr\u0259 d\u00fc\u015f\u00fcnm\u0259li olaca\u011f\u0131q, h\u0259m\u00e7inin dizayn se\u00e7imi imkan\u0131 da var.<\/p>\n
Tamamlanma<\/h4>\n
pfSense \u00e7ox g\u00fccl\u00fc bir vasit\u0259dir, \u00e7ox \u015fey ed\u0259 bilir \u2014 h\u0259m trafik proxy-l\u0259\u015fdirilm\u0259si, h\u0259m d\u0259 internet\u0259 giri\u015fin idar\u0259 edilm\u0259si sad\u0259c\u0259 onun funksionall\u0131\u011f\u0131n\u0131n bir hiss\u0259sidir. Y\u00fczd\u0259n \u00e7ox ma\u015f\u0131n\u0131 olan m\u00fc\u0259ssis\u0259d\u0259 bu problem h\u0259ll edildi v\u0259 proxy al\u0131m\u0131nda q\u0259na\u0259t etm\u0259y\u0259 imkan yaratd\u0131.<\/p>\n
\u00dcmid edir\u0259m ki, bu m\u0259qal\u0259 orta v\u0259 b\u00f6y\u00fck m\u00fc\u0259ssis\u0259l\u0259r \u00fc\u00e7\u00fcn m\u00fcasir bir problemi h\u0259ll etm\u0259y\u0259 k\u00f6m\u0259k ed\u0259c\u0259k.<\/p>\n
M\u0259nb\u0259: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
pfSense+Squid \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 https + \u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c Active Directory \u041a\u0440\u0430\u0442\u043a\u0430\u044f \u043f\u0440\u0435\u0434\u044b\u0441\u0442\u043e\u0440\u0438\u044f \u041d\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0430\u0439\u0442\u0430\u043c(\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 https) \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c \u0438\u0437 AD, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u0432\u0432\u043e\u0434\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0441 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430. \u041d\u0435\u043f\u043b\u043e\u0445\u0430\u044f \u0437\u0430\u044f\u0432\u043e\u0447\u043a\u0430, \u043d\u0435 \u043f\u0440\u0430\u0432\u0434\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":74614,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-74613","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Domain autentifikasiyas\u0131 il\u0259 m\u00fc\u0259ssis\u0259 \u00fc\u00e7\u00fcn pulsuz proxy-server | ProHoster","description":"pfSense+Squid filtrasiya il\u0259.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 | ProHoster","og:description":"pfSense+Squid \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439.","og:url":"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-18T17:43:03+00:00","article:modified_time":"2026-05-20T19:31:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74613","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:11:25","updated":"2022-09-28 14:47:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/74613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=74613"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/74613\/revisions"}],"predecessor-version":[{"id":181598,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/74613\/revisions\/181598"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media\/74614"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=74613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=74613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=74613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}