{"id":74613,"date":"2020-03-18T20:43:03","date_gmt":"2020-03-18T17:43:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej"},"modified":"2026-05-20T21:31:10","modified_gmt":"2026-05-20T19:31:10","slug":"besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","title":{"rendered":"Proxy server gratuit pentru \u00eentreprindere cu autentificare pe baz\u0103 de domeniu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/03\/229c5f1df948da65810db95ef2b4d2a2.png\" alt=\"Proxy server gratuit pentru \u00eentreprindere cu autentificare pe baz\u0103 de domeniu\" \/><\/p>\n<p>pfSense+Squid cu filtrare HTTPS + Tehnologia autentific\u0103rii unice (SSO) cu filtrare pe grupuri Active Directory<\/p>\n<h4>Scurt istoric<\/h4>\n<p>Compania a avut nevoie de implementarea unui server proxy cu capacitatea de a filtra accesul la site-uri (inclusiv HTTPS) pe baza grupurilor din AD, astfel \u00eenc\u00e2t utilizatorii s\u0103 nu fie nevoi\u021bi s\u0103 introduc\u0103 parole suplimentare, iar administrarea s\u0103 poat\u0103 fi realizat\u0103 prin intermediul unei interfe\u021be web. O cerere destul de bun\u0103, nu-i a\u0219a?<\/p>\n<p>O variant\u0103 corect\u0103 ar fi fost achizi\u021bionarea unor solu\u021bii precum Kerio Control sau UserGate, dar, ca \u00eentotdeauna, nu sunt suficien\u021bi bani, iar necesitatea exist\u0103.<\/p>\n<p>Aici intr\u0103 \u00een scen\u0103 vechiul \u0219i bunul Squid, dar din nou \u2013 de unde lu\u0103m interfa\u021ba web? SAMS2? Este moralmente dep\u0103\u0219it. Aici intervine pfSense.<\/p>\n<h4>Descriere<\/h4>\n<p>\u00cen acest articol va fi descris modul de configurare a serverului proxy Squid.<br \/>\nPentru autorizarea utilizatorilor va fi folosit Kerberos.<br \/>\nPentru filtrarea pe grupuri de domeniu va fi utilizat SquidGuard.<\/p>\n<p>Pentru monitorizare vor fi folosite Lightsquid, sqstat \u0219i sistemele interne de monitorizare pfSense.<br \/>\nDe asemenea, va fi rezolvat\u0103 o problem\u0103 frecvent\u0103 legat\u0103 de implementarea tehnologiei autentific\u0103rii unice (SSO), \u0219i anume aplica\u021biile care \u00eencearc\u0103 s\u0103 acceseze internetul sub acreditivul contului sistemului.<br \/>\n<a rel=\"nofollow\" name=\"habracut\"><\/a><\/p>\n<h4>Preg\u0103tirea pentru instalarea Squid<\/h4>\n<p>Se va folosi pfSense ca baz\u0103, <a href=\"https:\/\/docs.netgate.com\/pfsense\/en\/latest\/install\/installing-pfsense.html\" rel=\"nofollow\">Instruc\u021biuni de instalare.<\/a><\/p>\n<p>\u00cen interiorul s\u0103u vom organiza autentificarea pe firewall-ul intermediar folosind conturi de domeniu. <a href=\"https:\/\/techexpert.tips\/ro\/pfsense-ro\/autentificarea-pfsense-ldap-in-active-directory\/\" rel=\"nofollow\">Instruc\u021biuni.<\/a><\/p>\n<p>Foarte important!<\/p>\n<p>\u00cenainte de a \u00eencepe instalarea Squid, trebuie s\u0103 configur\u0103m DNS <a href=\"https:\/\/prohoster.info\/ro\/server\/dts-los-angeles\/\">server<\/a> \u00een pfSense, s\u0103 facem o \u00eenregistrare A \u0219i \u00eenregistr\u0103ri PTR pe serverul nostru DNS \u0219i s\u0103 configur\u0103m NTP astfel \u00eenc\u00e2t timpul s\u0103 nu difere de cel de pe controlerul de domeniu.<\/p>\n<p>De asemenea, \u00een re\u021beaua dvs. trebuie s\u0103 permite\u021bi interfe\u021bei WAN a pfSense s\u0103 acceseze internetul, iar utilizatorilor din re\u021beaua local\u0103 s\u0103 se conecteze la interfa\u021ba LAN, inclusiv prin porturile 7445 \u0219i 3128 (\u00een cazul meu 8080).<\/p>\n<p>Este totul preg\u0103tit? Conexiunea cu domeniul prin LDAP pentru autorizare pe pfSense a fost stabilit\u0103 \u0219i timpul este sincronizat? Excelent. Este timpul s\u0103 trecem la procesul principal.<\/p>\n<h4>Instalare \u0219i configurare preliminar\u0103<\/h4>\n<p>Vom instala Squid, SquidGuard \u0219i LightSquid din managerul de pachete pfSense \u00een sec\u021biunea \u201eSistem \/ Manager de pachete\u201d.<\/p>\n<p>Dup\u0103 finalizarea instal\u0103rii, mergem la \u201eServicii\/Squid Proxy server\/\u201d \u0219i, \u00een primul r\u00e2nd, \u00een tab-ul Local Cache, configur\u0103m caching-ul. Am setat totul pe 0, deoarece nu v\u0103d un sens deosebit \u00een a cache-ui site-urile, acest lucru fiind gestionat eficient \u0219i de browsere. Dup\u0103 configurare, ap\u0103s\u0103m butonul \u201eSalveaz\u0103\u201d din partea de jos a ecranului \u0219i aceasta ne va permite s\u0103 efectu\u0103m set\u0103rile principale pentru proxy.<\/p>\n<p>Set\u0103rile principale le aducem la urm\u0103toarea form\u0103:<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/03\/b3333c720db87625c76ea56d194295ff.png\" alt=\"Proxy server gratuit pentru \u00eentreprindere cu autentificare pe baz\u0103 de domeniu\" \/><\/p>\n<p>Portul implicit este 3128, dar prefer s\u0103 folosesc 8080.<\/p>\n<p>Parametrii selecta\u021bi \u00een tab-ul Proxy Interface determin\u0103 ce interfete va asculta proxy-ul nostru. <a href=\"https:\/\/prohoster.info\/ro\/server\/\">serverul<\/a>. Deoarece acest firewall este construit astfel \u00eenc\u00e2t la internet s\u0103 se uit\u0103 prin interfa\u021ba WAN, chiar dac\u0103 LAN \u0219i WAN pot fi \u00een aceea\u0219i subre\u021bea local\u0103, recomand s\u0103 folosim precis LAN pentru proxy.<\/p>\n<p>Loopback-ul este necesar pentru func\u021bionarea sqstat.<\/p>\n<p>Mai jos ve\u021bi g\u0103si set\u0103rile pentru proxy Transparent (transparent) \u0219i SSL Filter, dar nu ne sunt necesare, proxy-ul nostru nu va fi transparent, \u0219i pentru filtrarea https nu ne vom ocupa de substituirea certificatului (av\u00e2nd \u00een vedere c\u0103 avem documenta\u021bie, banc\u0103-client \u0219i a\u0219a mai departe), ci vom analiza doar handshake-ul.<\/p>\n<p>\u00cen acest stadiu, trebuie s\u0103 ne \u00eentoarcem la controllerul nostru de domeniu, s\u0103 cre\u0103m un cont pentru autentificare (putem folosi \u0219i cel pe care l-am configurat pentru autentificarea pe pfSense). Un factor foarte important aici este \u2014 dac\u0103 inten\u021biona\u021bi s\u0103 folosi\u021bi criptarea AES128 sau AES256, bifa\u021bi op\u021biunile corespunz\u0103toare \u00een set\u0103rile contului.<\/p>\n<p>\u00cen cazul \u00een care domeniul dumneavoastr\u0103 este un decor complex cu un num\u0103r mare de directoare sau domeniul dvs. este .local, ATUNCI AR PUTEA, dar nu este sigur, s\u0103 trebuiasc\u0103 s\u0103 folosi\u021bi o parol\u0103 simpl\u0103 pentru acest cont, o problem\u0103 cunoscut\u0103, dar cu o parol\u0103 complex\u0103 ar putea pur \u0219i simplu s\u0103 nu func\u021bioneze, trebuie verificat \u00een cazul particular.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/03\/d93a4a825a83de3e0c94cde9c1017411.png\" alt=\"Proxy server gratuit pentru \u00eentreprindere cu autentificare pe baz\u0103 de domeniu\" \/><\/p>\n<p>Dup\u0103 toate acestea gener\u0103m fi\u0219ierul de chei pentru Kerberos, deschidem linia de comand\u0103 ca administrator pe controllerul de domeniu \u0219i introducem:<\/p>\n<pre><code class=\"plaintext\"># ktpass -princ HTTP\/pfsense.domain.local@DOMAIN.LOCAL -mapuser pfsense -pass 3EYldza1sR -crypto {DES-CBC-CRC|DES-CBC-MD5|RC4-HMAC-NT|AES256-SHA1|AES128-SHA1|All} -ptype KRB5_NT_PRINCIPAL -out C:keytabsPROXY.keytab<\/code><\/pre>\n<p>Aici specific\u0103m FQDN-ul pfSense, respect\u00e2nd cu stricte\u021be literele mari \u0219i mici, \u00een parametrul mapuser introducem contul nostru de domeniu \u0219i parola acestuia, iar \u00een crypto alegem metoda de criptare, eu am folosit rc4 pentru lucru, iar \u00een c\u00e2mpul -out alegem unde vom trimite fi\u0219ierul nostru de chei gata.<br \/>\nDup\u0103 crearea cu succes a fi\u0219ierului de chei, \u00eel vom trimite pe pfSense-ul nostru. Am folosit Far pentru asta, dar se poate face \u0219i cu comenzi, cu putty sau prin intermediul interfe\u021bei web pfSense \u00een sec\u021biunea \u201eDiagnostic\u0103 - Linia de comand\u0103\u201d.<\/p>\n<p>Acum putem edita sau crea \/etc\/krb5.conf<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/03\/0fb3830c14d216afa05ac45e3aec66e4.png\" alt=\"Proxy server gratuit pentru \u00eentreprindere cu autentificare pe baz\u0103 de domeniu\" \/><\/p>\n<p>unde \/etc\/krb5.keytab este fi\u0219ierul de chei pe care l-am creat.<\/p>\n<p>Asigura\u021bi-v\u0103 c\u0103 verifica\u021bi func\u021bionarea Kerberos cu kinit, dac\u0103 nu func\u021bioneaz\u0103, nu are sens s\u0103 citi\u021bi mai departe.<\/p>\n<h4>Configurarea autentific\u0103rii Squid \u0219i a listei de acces f\u0103r\u0103 autentificare<\/h4>\n<p>Dup\u0103 ce am configurat Kerberos, \u00eel vom conecta la Squid-ul nostru.<\/p>\n<p>Pentru asta, mergi la Servicii - Server Proxy Squid \u0219i \u00een set\u0103rile de baz\u0103 deruleaz\u0103 la fund, acolo vom g\u0103si butonul \u201eSet\u0103ri avansate\u201d.<\/p>\n<p>\u00cen c\u00e2mpul Op\u021biuni personalizate (\u00cenainte de autentificare) introducem:<\/p>\n<pre><code class=\"perl\">#\u0425\u0435\u043b\u043f\u0435\u0440\u044b\nauth_param negotiate program \/usr\/local\/libexec\/squid\/negotiate_kerberos_auth -s GSS_C_NO_NAME -k \/usr\/local\/etc\/squid\/squid.keytab -t none\nauth_param negotiate children 1000\nauth_param negotiate keep_alive on\n#\u0421\u043f\u0438\u0441\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430\nacl auth proxy_auth REQUIRED\nacl nonauth dstdomain \"\/etc\/squid\/nonauth.txt\" \n#\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \nhttp_access allow nonauth \nhttp_access deny !auth\nhttp_access allow auth<\/code><\/pre>\n<p>u\u0433\u0434\u0435 <i>auth_param negotiate program \/usr\/local\/libexec\/squid\/negotiate_kerberos_auth<\/i> \u2014 alege helper-ul necesar pentru autentificarea Kerberos.<\/p>\n<p>Cheia <i>-s<\/i> cu valoarea <i>GSS_C_NO_NAME<\/i> \u2014 define\u0219te utilizarea oric\u0103rei conturi din fi\u0219ierul de chei.<\/p>\n<p>Cheia <i>-k<\/i> cu valoarea <i>\/usr\/local\/etc\/squid\/squid.keytab<\/i> \u2014 define\u0219te utilizarea exact a acestui fi\u0219ier keytab. \u00cen cazul meu, acesta este acela\u0219i fi\u0219ier keytab creat de noi, pe care l-am copiat \u00een directorul \/usr\/local\/etc\/squid\/ \u0219i l-am redenumit, deoarece Squid nu voia s\u0103 colaboreze cu acel director, probabil din cauza permiselor insuficiente.<\/p>\n<p>Cheia <i>-t<\/i> cu valoarea <i>-t none<\/i> \u2014 dezactiveaz\u0103 cererile ciclice c\u0103tre controlerul de domeniu, ceea ce reduce semnificativ sarcina pe acesta dac\u0103 ave\u021bi mai mult de 50 de utilizatori.<br \/>\nPentru perioada de testare, pute\u021bi ad\u0103uga, de asemenea, cheia -d - adic\u0103 diagnosticare, va genera mai multe jurnale.<br \/>\n<i>auth_param negotiate children 1000<\/i> \u2014 define\u0219te c\u00e2te procese simultane de autorizare pot fi active<br \/>\n<i>auth_param negotiate keep_alive on<\/i> \u2014 nu permite \u00eentreruperea conexiunii \u00een timpul interog\u0103rii lan\u021bului de autorizare<br \/>\n<i>acl auth proxy_auth REQUIRED<\/i> \u2014 creeaz\u0103 \u0219i necesit\u0103 o list\u0103 de control al accesului, incluz\u00e2nd utilizatorii care au trecut de autentificare<br \/>\n<i>acl nonauth dstdomain \u00ab\/etc\/squid\/nonauth.txt\u00bb<\/i> \u2014 inform\u0103m Squid despre lista de acces nonauth \u00een care se afl\u0103 domenii de destina\u021bie, la care tuturor le va fi permis accesul. Cre\u0103m fi\u0219ierul \u0219i introducem domeniile \u00een formatul<\/p>\n<pre><code class=\"perl\">.whatsapp.com\n.whatsapp.net<\/code><\/pre>\n<p>WhatsApp nu este folosit \u00eent\u00e2mpl\u0103tor ca exemplu - este foarte preten\u021bios \u00een ceea ce prive\u0219te proxy-urile cu autentificare \u0219i nu va func\u021biona dac\u0103 nu este permis \u00eenainte de autentificare.<br \/>\n<i>http_access allow nonauth<\/i> \u2014 permitem accesul la aceast\u0103 list\u0103 tuturor<br \/>\n<i>http_access deny !auth<\/i> \u2014 interzicem accesul utilizatorilor neautoriza\u021bi la celelalte site-uri<br \/>\n<i>http_access allow auth<\/i> \u2014 permitem accesul utilizatorilor autoriza\u021bi.<br \/>\nTotul, Squid-ul este configurat, acum este momentul s\u0103 \u00eencepem filtrarea pe grupuri.<\/p>\n<h4>Configurarea SquidGuard<\/h4>\n<p>Trecem la Servicii SquidGuard Proxy Filter.<\/p>\n<p>\u00cen LDAP Options introducem datele contului nostru, folosit pentru autentificarea Kerberos, dar \u00een urm\u0103torul format:<\/p>\n<pre><code class=\"perl\">CN=pfsense,OU=service-accounts,DC=domain,DC=local<\/code><\/pre>\n<p>Dac\u0103 exist\u0103 spa\u021bii sau caractere ne-latine, aceast\u0103 \u00eenregistrare ar trebui s\u0103 fie \u00eenchis\u0103 \u00eentre ghilimele simple sau duble:<\/p>\n<pre><code class=\"perl\">'CN=sg,OU=service-accounts,DC=domain,DC=local'\n\"CN=sg,OU=service-accounts,DC=domain,DC=local\"<\/code><\/pre>\n<p>Apoi, asigur\u0103-te c\u0103 bifezi aceste op\u021biuni:<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/03\/162ca3f3b6d0977c8ac73f20b640f67c.png\" alt=\"Proxy server gratuit pentru \u00eentreprindere cu autentificare pe baz\u0103 de domeniu\" \/><\/p>\n<p>Pentru a elimina domeniile inutile pfsense <a class=\"user_link\" href=\"https:\/\/habr.com\/ru\/users\/domain\/\" rel=\"nofollow\">DOMAIN<\/a>.LOCAL la care \u00eentreaga sistem este foarte sensibil.<\/p>\n<p>Acum trecem la Group Acl \u0219i asociem grupurile noastre de acces, eu folosesc denumiri simple \u00een stilul group_0, group_1 \u0219i a\u0219a mai departe p\u00e2n\u0103 la 3, unde 3 \u2014 acces doar pe lista alb\u0103, iar 0 \u2014 se poate accesa orice.<\/p>\n<p>Grupurile sunt asociate \u00een urm\u0103torul mod:<\/p>\n<pre><code class=\"perl\">ldapusersearch ldap:\/\/dc.domain.local:3268\/DC=DOMAIN,DC=LOCAL?sAMAccountName?sub?(&amp;(sAMAccountName=%s)(memberOf=CN=group_0OU=squidOU=service-groupsDC=DOMAINDC=LOCAL))<\/code><\/pre>\n<p>Salv\u0103m grupul nostru, trecem la Times, acolo am creat un interval semnific\u00e2nd c\u0103 lucreaz\u0103 \u00eentotdeauna, acum trecem la Target Categories \u0219i cre\u0103m liste dup\u0103 cum dorim, dup\u0103 crearea listelor ne \u00eentoarcem la grupurile noastre \u0219i \u00een interiorul grupului folosim butoanele pentru a alege cine poate accesa \u0219i cine nu.<\/p>\n<h4>LightSquid \u0219i sqstat<\/h4>\n<p>Dac\u0103 \u00een procesul de configurare am ales loopback \u00een set\u0103rile Squid \u0219i am deschis posibilitatea de a accesa 7445 \u00een firewall at\u00e2t \u00een re\u021beaua noastr\u0103, c\u00e2t \u0219i pe pfSense \u00een sine, atunci c\u00e2nd trecem la Diagnostica Raportelor Squid Proxy nu vom avea probleme s\u0103 deschidem at\u00e2t sqstat c\u00e2t \u0219i LightSquid, pentru acesta din urm\u0103 va trebui s\u0103 invent\u0103m un utilizator \u0219i o parol\u0103, iar de asemenea exist\u0103 posibilitatea de a alege designul.<\/p>\n<h4>\u00cencheiere<\/h4>\n<p>pfSense este un instrument foarte puternic, care poate face foarte multe \u2014 at\u00e2t pentru proxy-ing traficului, c\u00e2t \u0219i pentru controlul accesului utilizatorilor la internet, aceasta este doar o mic\u0103 parte din func\u021bionalitatea sa; \u00eens\u0103, \u00eentr-o companie cu 500 de ma\u0219ini, aceasta a rezolvat problema \u0219i a permis economisirea la achizi\u021bia unui server proxy.<\/p>\n<p>Sper c\u0103 acest articol va ajuta pe cineva s\u0103 rezolve o problem\u0103 destul de actual\u0103 pentru companiile medii \u0219i mari.<\/p>\n<p>Sursa: <a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/492684\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>pfSense+Squid \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 https + \u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c Active Directory \u041a\u0440\u0430\u0442\u043a\u0430\u044f \u043f\u0440\u0435\u0434\u044b\u0441\u0442\u043e\u0440\u0438\u044f \u041d\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0430\u0439\u0442\u0430\u043c(\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 https) \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c \u0438\u0437 AD, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u0432\u0432\u043e\u0434\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0441 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430. \u041d\u0435\u043f\u043b\u043e\u0445\u0430\u044f \u0437\u0430\u044f\u0432\u043e\u0447\u043a\u0430, \u043d\u0435 \u043f\u0440\u0430\u0432\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":74614,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-74613","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"pfSense+Squid \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0411\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"pfSense+Squid \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-18T17:43:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-20T19:31:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Server proxy gratuit pentru companie cu autentificare pe domeniu | ProHoster","description":"pfSense+Squid cu filtrare.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 | ProHoster","og:description":"pfSense+Squid \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-18T17:43:03+00:00","article:modified_time":"2026-05-20T19:31:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74613","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:11:25","updated":"2022-09-28 14:47:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/74613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=74613"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/74613\/revisions"}],"predecessor-version":[{"id":181598,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/74613\/revisions\/181598"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/74614"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=74613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=74613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=74613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}