{"id":74613,"date":"2020-03-18T20:43:03","date_gmt":"2020-03-18T17:43:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej"},"modified":"2026-05-20T21:31:10","modified_gmt":"2026-05-20T19:31:10","slug":"besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","title":{"rendered":"Proxy i lir\u00eb p\u00ebr nd\u00ebrmarrje me autorizim n\u00eb domen.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Proxy<\/p>\n

pfSense+Squid me filtrimin https + Teknologjia e hyrjes s\u00eb vetme (SSO) me filtrimin sipas grupeve Active Directory<\/p>\n

Historia e shkurt\u00ebr<\/h4>\n

N\u00eb nd\u00ebrmarrje u shfaq nevoja p\u00ebr t\u00eb implementuar nj\u00eb server proxy me mund\u00ebsin\u00eb p\u00ebr t\u00eb filtruar aksesin n\u00eb sitet (p\u00ebrfshir\u00eb https) sipas grupeve nga AD, n\u00eb m\u00ebnyr\u00eb q\u00eb p\u00ebrdoruesit t\u00eb mos shqet\u00ebsohen p\u00ebr t\u00eb futur ndonj\u00eb fjal\u00ebkalim shtes\u00eb, dhe administrimi t\u00eb b\u00ebhej p\u00ebrmes nj\u00eb nd\u00ebrfaqeje n\u00eb internet. Nj\u00eb k\u00ebrkes\u00eb e mir\u00eb, apo jo?<\/p>\n

Nj\u00eb p\u00ebrgjigje e duhur do t\u00eb ishte t\u00eb blini zgjidhje si Kerio Control ose UserGate, por si gjithmon\u00eb, nuk ka para, nd\u00ebrsa nevoja ekziston.<\/p>\n

K\u00ebtu na ndihmon i vjet\u00ebr dhe i mir\u00eb Squid, por p\u00ebrs\u00ebri \u2014 ku ta gjejm\u00eb nd\u00ebrfaqen n\u00eb internet? SAMS2? \u00cbsht\u00eb moralish\u00eb e vjetruar. K\u00ebtu vjen n\u00eb ndihm\u00eb pfSense.<\/p>\n

P\u00ebrshkrimi<\/h4>\n

N\u00eb k\u00ebt\u00eb artikull do t\u00eb p\u00ebrshkruhet m\u00ebnyra e konfigurimit t\u00eb serverit proxy Squid.
\nP\u00ebr autorizimin e p\u00ebrdoruesve do t\u00eb p\u00ebrdoret Kerberos.
\nP\u00ebr filtrimin sipas grupeve t\u00eb domainit do t\u00eb p\u00ebrdoret SquidGuard.<\/p>\n

P\u00ebr monitorim do t\u00eb p\u00ebrdoren Lightsquid, sqstat dhe sistemet e brendshme t\u00eb monitorimit t\u00eb pfSense.
\nPo ashtu do t\u00eb zgjidhet nj\u00eb problem i zakonsh\u00ebm i lidhur me implementimin e teknologjis\u00eb s\u00eb hyrjes s\u00eb vetme (SSO), n\u00eb ve\u00e7anti aplikacionet q\u00eb p\u00ebrpiqen t\u00eb hyjn\u00eb n\u00eb internet me kredencialet e tyre sistemike.
\n<\/a><\/p>\n

P\u00ebrgatitja p\u00ebr instalimin e Squid<\/h4>\n

Si baz\u00eb do t\u00eb p\u00ebrdoret pfSense, Udh\u00ebzues p\u00ebr instalimin.<\/a><\/p>\n

Brenda t\u00eb cilit ne organizojm\u00eb autentifikimin n\u00eb vet\u00eb fire\u00eball-in p\u00ebrmes kredencialeve t\u00eb domainit. Udh\u00ebzimi.<\/a><\/p>\n

Shum\u00eb e r\u00ebnd\u00ebsishme!<\/p>\n

Para se t\u00eb filloni instalimin e Squid duhen konfiguruar DNS server<\/a> n\u00eb pfSense, t\u00eb b\u00ebni nj\u00eb regjistrim A dhe regjistrime PTR n\u00eb serverin ton\u00eb DNS dhe t\u00eb konfigurosh NTP-n\u00eb n\u00eb m\u00ebnyr\u00eb q\u00eb koha t\u00eb mos ndryshoj\u00eb nga koha n\u00eb kontrolluesin e domainit.<\/p>\n

Dhe n\u00eb rrjetin tuaj t\u00eb sigurohet q\u00eb nd\u00ebrfaqja WAN e pfSense t\u00eb ket\u00eb akses n\u00eb internet, dhe p\u00ebrdoruesit n\u00eb rrjetin lokal t\u00eb lidhen me nd\u00ebrfaqen LAN, gjithashtu p\u00ebrmes porteve 7445 dhe 3128 (n\u00eb rastin tim 8080).<\/p>\n

A \u00ebsht\u00eb gjith\u00e7ka gati? Lidhja me domainin p\u00ebrmes LDAP p\u00ebr autorizimin n\u00eb pfSense \u00ebsht\u00eb vendosur dhe koha \u00ebsht\u00eb sinkronizuar? Shk\u00eblqyer. Tani \u00ebsht\u00eb koha p\u00ebr t\u00eb filluar procesin kryesor.<\/p>\n

Instalimi dhe konfigurimi fillestar<\/h4>\n

Ne do t\u00eb instalojm\u00eb Squid, SquidGuard dhe LightSquid nga menaxheri i pakove t\u00eb pfSense n\u00eb seksionin \"Sistemi\/Pakot e menaxherit\".<\/p>\n

Pas instalimit t\u00eb suksessh\u00ebm kalojm\u00eb n\u00eb \"Sh\u00ebrbimet\/Squid Proxy server\/\" dhe fillimisht n\u00eb sked\u00ebn Local Cache konfigurojm\u00eb ruajtjen e t\u00eb dh\u00ebnave, un\u00eb kam v\u00ebn\u00eb gjith\u00e7ka n\u00eb 0, sepse nuk shoh ndonj\u00eb kuptim n\u00eb ruajtjen e faqeve, k\u00ebt\u00eb e b\u00ebn\u00eb mjaft mir\u00eb shfletuesit. Pas konfigurimit, klikoni n\u00eb butonin \"Shk\u00ebput\" n\u00eb fund t\u00eb ekranit dhe kjo do t\u00eb na jap\u00eb mund\u00ebsin\u00eb t\u00eb b\u00ebjm\u00eb konfigurimet kryesore t\u00eb proxy-it.<\/p>\n

Konfigurimet kryesore i sjellim n\u00eb k\u00ebt\u00eb form\u00eb:<\/p>\n

\"Proxy<\/p>\n

P\u00ebrgjith\u00ebsisht porta e paracaktuar \u00ebsht\u00eb 3128, por un\u00eb preferoj t\u00eb p\u00ebrdor 8080.<\/p>\n

Parametrat e zgjedhur n\u00eb sked\u00ebn Proxy Interface p\u00ebrcaktojn\u00eb cilat nd\u00ebrfaqe do t\u00eb d\u00ebgjoj\u00eb proxy-i yn\u00eb server<\/a>. Duke qen\u00eb se ky firewall \u00ebsht\u00eb nd\u00ebrtuar n\u00eb nj\u00eb m\u00ebnyr\u00eb q\u00eb n\u00eb internet ai shikon p\u00ebrmes nd\u00ebrfaqes WAN, madje edhe pse LAN dhe WAN mund t\u00eb jen\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn n\u00ebnrrjet lokale, rekomandoj q\u00eb p\u00ebr proxy-in t\u00eb p\u00ebrdorim pik\u00ebrisht LAN.<\/p>\n

Lupback \u00ebsht\u00eb i nevojsh\u00ebm p\u00ebr funksionimin e sqstat.<\/p>\n

M\u00eb posht\u00eb do t\u00eb gjeni konfigurimet p\u00ebr Transparent (proxy t\u00eb transparenc\u00ebs), si dhe p\u00ebr SSL Filter, por ato nuk na duhen, proxy yn\u00eb nuk do t\u00eb jet\u00eb transparent, dhe p\u00ebr filtrimin e https ne nuk do t\u00eb merremi me z\u00ebvend\u00ebsimin e certifikat\u00ebs (n\u00eb fund t\u00eb fundit, kemi dokumente, banka-klient\u00eb, etj), por thjesht do t\u00eb shohim n\u00eb dor\u00ebzimin.<\/p>\n

N\u00eb k\u00ebt\u00eb pik\u00eb na nevojitet t\u00eb kalojm\u00eb n\u00eb kontrolluesin e domainit ton\u00eb, t\u00eb krijojm\u00eb aty nj\u00eb llogari p\u00ebr autentifikim (mund t\u00eb p\u00ebrdorim edhe at\u00eb q\u00eb kemi konfiguruar p\u00ebr autentifikimin n\u00eb vet\u00eb pfSense). K\u00ebtu \u00ebsht\u00eb nj\u00eb faktor shum\u00eb i r\u00ebnd\u00ebsish\u00ebm \u2014 n\u00ebse keni nd\u00ebrmend t\u00eb p\u00ebrdorni kriptimin AES128 ose AES256 \u2014 vendosni kutit\u00eb p\u00ebrkat\u00ebse n\u00eb konfigurimin e llogaris\u00eb.<\/p>\n

N\u00ebse domeni juaj p\u00ebrb\u00ebn nj\u00eb pyll t\u00eb komplikuar me nj\u00eb num\u00ebr t\u00eb madh katalogesh ose domeni juaj .local, at\u00ebher\u00eb MUND T\u00cb jet\u00eb, por nuk \u00ebsht\u00eb e sigurt, ju do t\u00eb duhet t\u00eb p\u00ebrdorni p\u00ebr k\u00ebt\u00eb llogari nj\u00eb fjal\u00ebkalim t\u00eb thjesht\u00eb, nj\u00eb problem i njohur, por me nj\u00eb fjal\u00ebkalim t\u00eb komplikuar mund t\u00eb mos funksionoj\u00eb, duhet kontrolluar n\u00eb rastin konkret.<\/p>\n

\"Proxy<\/p>\n

Pas gjith\u00eb k\u00ebsaj formojm\u00eb skedarin e \u00e7el\u00ebsave p\u00ebr Kerberos, n\u00eb kontrolluesin e domainit hapim komand\u00ebn me t\u00eb drejtat e administratorit dhe shkruajm\u00eb:<\/p>\n

# ktpass -princ HTTP\/pfsense.domain.local@DOMAIN.LOCAL -mapuser pfsense -pass 3EYldza1sR -crypto {DES-CBC-CRC|DES-CBC-MD5|RC4-HMAC-NT|AES256-SHA1|AES128-SHA1|All} -ptype KRB5_NT_PRINCIPAL -out C:keytabsPROXY.keytab<\/code><\/pre>\n
Ku tregojm\u00eb FQDN e pfSense, duke respektuar rregullin e shkronjave, n\u00eb parametrin mapuser futim llogarin\u00eb ton\u00eb t\u00eb domainit dhe fjal\u00ebkalimin e saj, dhe n\u00eb crypto zgjedhim m\u00ebnyr\u00ebn e kriptimit, un\u00eb p\u00ebrdora rc4 p\u00ebr pun\u00eb dhe n\u00eb fush\u00ebn -out vendosim se ku do ta d\u00ebrgojm\u00eb skedarin ton\u00eb t\u00eb p\u00ebrfunduar t\u00eb \u00e7el\u00ebsave.
\nPas krijimit t\u00eb suksessh\u00ebm t\u00eb skedarit t\u00eb \u00e7el\u00ebsave, ne do ta d\u00ebrgojm\u00eb at\u00eb n\u00eb pfSense ton\u00eb, un\u00eb e p\u00ebrdora Far p\u00ebr k\u00ebt\u00eb, por gjithashtu mund ta b\u00ebni edhe p\u00ebrmes komandave, si dhe p\u00ebrputhjen ose p\u00ebrmes nd\u00ebrfaqes n\u00eb internet t\u00eb pfSense n\u00eb seksionin \"Diagnostik\u00eb\/Komanda\".<\/p>\n
Tani mund t\u00eb redaktojm\u00eb\/krijojm\u00eb \/etc\/krb5.conf<\/p>\n
\"Proxy<\/p>\n
ku \/etc\/krb5.keytab \u00ebsht\u00eb skedari i \u00e7el\u00ebsave q\u00eb krijuam.<\/p>\n
Sigurohuni q\u00eb t\u00eb kontrolloni funksionimin e Kerberos me kinit, n\u00ebse nuk funksionon \u2014 nuk ka kuptim t\u00eb lexoni m\u00eb tej.<\/p>\n
Konfigurimi i Authentikimit t\u00eb Squid dhe list\u00ebs s\u00eb aksesit pa autentikim<\/h4>\n
Pasi t\u00eb keni konfiguruar me sukses Kerberos, do ta lidhim me Squid-in ton\u00eb.<\/p>\n
P\u00ebr k\u00ebt\u00eb, shkoni te Sh\u00ebrbimetSquid Proxy Server dhe n\u00eb cil\u00ebsimet kryesore shkoni n\u00eb fund, aty do t\u00eb gjejm\u00eb butonin 'Cil\u00ebsime t\u00eb Zgjeruara'.<\/p>\n
N\u00eb fush\u00ebn Custom Options (Before Auth) shkruani:<\/p>\n
#\u0425\u0435\u043b\u043f\u0435\u0440\u044b\nauth_param negotiate program \/usr\/local\/libexec\/squid\/negotiate_kerberos_auth -s GSS_C_NO_NAME -k \/usr\/local\/etc\/squid\/squid.keytab -t none\nauth_param negotiate children 1000\nauth_param negotiate keep_alive on\n#\u0421\u043f\u0438\u0441\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430\nacl auth proxy_auth REQUIRED\nacl nonauth dstdomain \"\/etc\/squid\/nonauth.txt\" \n#\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \nhttp_access allow nonauth \nhttp_access deny !auth\nhttp_access allow auth<\/code><\/pre>\n
i ku auth_param negotiate program \/usr\/local\/libexec\/squid\/negotiate_kerberos_auth<\/i> \u2014 zgjedh ndihm\u00ebsin e nevojsh\u00ebm p\u00ebr autentikimin Kerberos.<\/p>\n
\u00c7el\u00ebsi -s<\/i> me vler\u00ebn GSS_C_NO_NAME<\/i> \u2014 p\u00ebrcakton p\u00ebrdorimin e \u00e7do llogarie nga skedari i \u00e7el\u00ebsit.<\/p>\n
\u00c7el\u00ebsi -k<\/i> me vler\u00ebn \/usr\/local\/etc\/squid\/squid.keytab<\/i> \u2014 p\u00ebrcakton q\u00eb t\u00eb p\u00ebrdoret pik\u00ebrisht ky skedar keytab. N\u00eb rastin tim, ky \u00ebsht\u00eb gjithashtu skedari keytab q\u00eb krijuam, t\u00eb cilin e kopjova n\u00eb direktorine \/usr\/local\/etc\/squid\/ dhe e ndryshova emrin, sepse Squid nuk donte t\u00eb punonte me at\u00eb direktor, ndoshta p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb t\u00eb drejtave.<\/p>\n
\u00c7el\u00ebsi -t<\/i> me vler\u00ebn -t none<\/i> \u2014 ndalon k\u00ebrkesat ciklike p\u00ebr n\u00eb kontrolluesin e domenit, duke e reduktuar ndjesh\u00ebm ngarkes\u00ebn mbi t\u00eb, n\u00ebse keni m\u00eb shum\u00eb se 50 p\u00ebrdorues.
\nGjat\u00eb testit, gjithashtu mund t\u00eb shtoni \u00e7el\u00ebsin -d \u2014 dmth diagnostikimi, m\u00eb shum\u00eb loge do t\u00eb shfaqen.
\nauth_param negotiate children 1000<\/i> \u2014 p\u00ebrcakton se sa procese autentikimi paralel mund t\u00eb ken\u00eb nisur
\nauth_param negotiate keep_alive on<\/i> \u2014 parandalon nd\u00ebrprerjen e lidhjes gjat\u00eb shqyrtimit t\u00eb zinxhirit t\u00eb autentikimit
\nacl auth proxy_auth REQUIRED<\/i> \u2014 krijon dhe k\u00ebrkon nj\u00eb list\u00eb t\u00eb kontrollit t\u00eb aksesit, p\u00ebrfshir\u00eb p\u00ebrdoruesit q\u00eb kan\u00eb kaluar autentikimin
\nacl nonauth dstdomain \u00ab\/etc\/squid\/nonauth.txt\u00bb<\/i> \u2014 informojm\u00eb Squid p\u00ebr list\u00ebn e aksesit nonauth ku p\u00ebrfshihen domainet e destinacionit, t\u00eb cilave do t'u lejohet gjithmon\u00eb qasja. Ne e krijojm\u00eb skedarin dhe e plot\u00ebsojm\u00eb at\u00eb me domainet n\u00eb formatin<\/p>\n
.whatsapp.com\n.whatsapp.net<\/code><\/pre>\n
Whatsapp nuk \u00ebsht\u00eb p\u00ebrdorur rast\u00ebsisht si shembull \u2014 ai \u00ebsht\u00eb shum\u00eb kapri\u00e7oz me proxy me autentikim dhe nuk do t\u00eb funksionoj\u00eb n\u00ebse nuk lejohet para autentikimit.
\nhttp_access allow nonauth<\/i> \u2014 lejoni qasjen p\u00ebr k\u00ebt\u00eb list\u00eb p\u00ebr t\u00eb gjith\u00eb
\nhttp_access deny !auth<\/i> \u2014 ndaloni qasjen p\u00ebr p\u00ebrdoruesit e paautorizuar n\u00eb faqet e tjera
\nhttp_access allow auth<\/i> \u2014 lejoni qasjen p\u00ebr p\u00ebrdoruesit e autorizuar.
\nKaq, vet\u00eb Squid \u00ebsht\u00eb konfiguruar, tani \u00ebsht\u00eb koha p\u00ebr t\u00eb filluar filtrimin sipas grupeve.<\/p>\n
Konfigurimi i SquidGuard<\/h4>\n
Shkoni te Sh\u00ebrbimetSquidGuard Proxy Filter.<\/p>\n
N\u00eb Opsionet LDAP, futni t\u00eb dh\u00ebnat e llogaris\u00eb son\u00eb t\u00eb p\u00ebrdorur p\u00ebr autentikimin Kerberos, por n\u00eb formatin e m\u00ebposht\u00ebm:<\/p>\n
CN=pfsense,OU=service-accounts,DC=domain,DC=local<\/code><\/pre>\n
N\u00ebse ka hap\u00ebsira dhe\/ose karaktere jo latine, e gjith\u00eb kjo sh\u00ebnes\u00eb duhet t\u00eb mbyllet n\u00eb thonj\u00ebza t\u00eb vetme ose t\u00eb dyfishta:<\/p>\n
'CN=sg,OU=service-accounts,DC=domain,DC=local'\n\"CN=sg,OU=service-accounts,DC=domain,DC=local\"<\/code><\/pre>\n
Pastaj patjet\u00ebr t\u00eb vendosim k\u00ebto kutia:<\/p>\n
\"Proxy<\/p>\n
P\u00ebr t\u00eb prer\u00eb DOMAINpfsense t\u00eb panevojshme DOMAIN<\/a>.LOCAL me t\u00eb cilat e gjith\u00eb sistemi \u00ebsht\u00eb shum\u00eb i ndjesh\u00ebm.<\/p>\n
Tani kalojm\u00eb n\u00eb Group Acl dhe lidhim grupet tona t\u00eb aksesit, p\u00ebrdor emra t\u00eb thjesht\u00eb si group_0, group_1 dhe k\u00ebshtu deri n\u00eb 3, ku 3 \u00ebsht\u00eb qasje vet\u00ebm n\u00eb list\u00ebn e bardh\u00eb, nd\u00ebrsa 0 \u2014 lejohet gjith\u00e7ka.<\/p>\n
Grupet lidhen si m\u00eb posht\u00eb:<\/p>\n
ldapusersearch ldap:\/\/dc.domain.local:3268\/DC=DOMAIN,DC=LOCAL?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=group_0OU=squidOU=service-groupsDC=DOMAINDC=LOCAL))<\/code><\/pre>\n
ruajm\u00eb grupin ton\u00eb, kalojm\u00eb n\u00eb Times, aty krijova nj\u00eb interval q\u00eb do t\u00eb thot\u00eb t\u00eb punojm\u00eb gjithmon\u00eb, tani kalojm\u00eb n\u00eb Kategorit\u00eb e Target dhe krijojm\u00eb lista sipas d\u00ebshir\u00ebs son\u00eb, pas krijimit t\u00eb listave kthehemi n\u00eb grupet tona dhe brenda grupit me butona zgjedhim kush mund dhe kush jo.<\/p>\n
LightSquid dhe sqstat<\/h4>\n
N\u00ebse gjat\u00eb konfigurimit zgjodh\u00ebm loopback n\u00eb cil\u00ebsimet e Squid-it dhe hap\u00ebm mund\u00ebsin\u00eb p\u00ebr t\u00eb hyr\u00eb n\u00eb 7445 n\u00eb firewall si n\u00eb rrjetin ton\u00eb, ashtu edhe n\u00eb vet\u00eb pfSense, at\u00ebher\u00eb duke kaluar n\u00eb Diagnostik\u00ebn e Raporteve t\u00eb Squid Proxy ne pa ndonj\u00eb problem do t\u00eb jemi n\u00eb gjendje t\u00eb hapim si sqstat ashtu edhe LightSquid, p\u00ebr t\u00eb fundit do t\u00eb duhet t\u00eb shpikim nj\u00eb em\u00ebr p\u00ebrdoruesi dhe fjal\u00ebkalim, gjithashtu ka mund\u00ebsi p\u00ebr t\u00eb zgjedhur dizajnin.<\/p>\n
P\u00ebrfundimi<\/h4>\n
pfSense \u00ebsht\u00eb nj\u00eb mjet shum\u00eb i fuqish\u00ebm, i cili mund t\u00eb b\u00ebj\u00eb shum\u00eb gj\u00ebra \u2014 dhe proxy t\u00eb trafikut, dhe kontroll mbi qasjen e p\u00ebrdoruesve n\u00eb internet, kjo \u00ebsht\u00eb vet\u00ebm nj\u00eb pjes\u00eb e funksionalitetit t\u00eb tij, megjithat\u00eb n\u00eb nj\u00eb nd\u00ebrmarrje me 500 makina, kjo zgjidhi problemin dhe leht\u00ebsoi blerjen e proxy.<\/p>\n
Shpresoj q\u00eb ky artikull t\u00eb ndihmoj\u00eb dik\u00eb t\u00eb zgjidh\u00eb nj\u00eb detyr\u00eb shum\u00eb t\u00eb r\u00ebnd\u00ebsishme p\u00ebr mesatar\u00ebt dhe t\u00eb m\u00ebdhenjt\u00eb.<\/p>\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
pfSense+Squid \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 https + \u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c Active Directory \u041a\u0440\u0430\u0442\u043a\u0430\u044f \u043f\u0440\u0435\u0434\u044b\u0441\u0442\u043e\u0440\u0438\u044f \u041d\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0430\u0439\u0442\u0430\u043c(\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 https) \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c \u0438\u0437 AD, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u0432\u0432\u043e\u0434\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0441 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430. \u041d\u0435\u043f\u043b\u043e\u0445\u0430\u044f \u0437\u0430\u044f\u0432\u043e\u0447\u043a\u0430, \u043d\u0435 \u043f\u0440\u0430\u0432\u0434\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":74614,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-74613","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Proxy i lir\u00eb p\u00ebr nd\u00ebrmarrjen me autorizim n\u00eb domen | ProHoster","description":"pfSense+Squid me filtrimin.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 | ProHoster","og:description":"pfSense+Squid \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-18T17:43:03+00:00","article:modified_time":"2026-05-20T19:31:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74613","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:11:25","updated":"2022-09-28 14:47:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/74613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=74613"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/74613\/revisions"}],"predecessor-version":[{"id":181598,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/74613\/revisions\/181598"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/74614"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=74613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=74613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=74613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}