[prev in list] [next in list] [prev in thread] [next in thread]
List: ipcop-svn
Subject: [Ipcop-svn] SF.net SVN: ipcop:[2951] IPCopDoc/trunk/en/admin
From: eoberlander () users ! sourceforge ! net
Date: 2009-05-29 18:39:07
Message-ID: E1MA6yx-0003Y2-Gr () c3vjzd1 ! ch3 ! sourceforge ! com
[Download RAW message or body]
Revision: 2951
http://ipcop.svn.sourceforge.net/ipcop/?rev=2951&view=rev
Author: eoberlander
Date: 2009-05-29 18:39:07 +0000 (Fri, 29 May 2009)
Log Message:
-----------
Review Proxy section, and add new screenshots, split through text. This is a first \
draft.
Modified Paths:
--------------
IPCopDoc/trunk/en/admin/images/home1.png
IPCopDoc/trunk/en/admin/images/proxy.png
IPCopDoc/trunk/en/admin/xml/services.xml
Added Paths:
-----------
IPCopDoc/trunk/en/admin/images/proxy1.png
IPCopDoc/trunk/en/admin/images/proxy2.png
IPCopDoc/trunk/en/admin/images/proxy3.png
IPCopDoc/trunk/en/admin/images/proxy4.png
IPCopDoc/trunk/en/admin/images/proxy5.png
IPCopDoc/trunk/en/admin/images/proxy6.png
Modified: IPCopDoc/trunk/en/admin/images/home1.png
===================================================================
(Binary files differ)
Modified: IPCopDoc/trunk/en/admin/images/proxy.png
===================================================================
(Binary files differ)
Added: IPCopDoc/trunk/en/admin/images/proxy1.png
===================================================================
(Binary files differ)
Property changes on: IPCopDoc/trunk/en/admin/images/proxy1.png
___________________________________________________________________
Added: svn:mime-type
+ application/octet-stream
Added: IPCopDoc/trunk/en/admin/images/proxy2.png
===================================================================
(Binary files differ)
Property changes on: IPCopDoc/trunk/en/admin/images/proxy2.png
___________________________________________________________________
Added: svn:mime-type
+ application/octet-stream
Added: IPCopDoc/trunk/en/admin/images/proxy3.png
===================================================================
(Binary files differ)
Property changes on: IPCopDoc/trunk/en/admin/images/proxy3.png
___________________________________________________________________
Added: svn:mime-type
+ application/octet-stream
Added: IPCopDoc/trunk/en/admin/images/proxy4.png
===================================================================
(Binary files differ)
Property changes on: IPCopDoc/trunk/en/admin/images/proxy4.png
___________________________________________________________________
Added: svn:mime-type
+ application/octet-stream
Added: IPCopDoc/trunk/en/admin/images/proxy5.png
===================================================================
(Binary files differ)
Property changes on: IPCopDoc/trunk/en/admin/images/proxy5.png
___________________________________________________________________
Added: svn:mime-type
+ application/octet-stream
Added: IPCopDoc/trunk/en/admin/images/proxy6.png
===================================================================
(Binary files differ)
Property changes on: IPCopDoc/trunk/en/admin/images/proxy6.png
___________________________________________________________________
Added: svn:mime-type
+ application/octet-stream
Modified: IPCopDoc/trunk/en/admin/xml/services.xml
===================================================================
--- IPCopDoc/trunk/en/admin/xml/services.xml 2009-05-29 13:52:00 UTC (rev 2950)
+++ IPCopDoc/trunk/en/admin/xml/services.xml 2009-05-29 18:39:07 UTC (rev 2951)
@@ -44,6 +44,7 @@
In a larger network it is likely that some of these services will be
provided by dedicated servers and should be disabled here.
</para>
+
<sect2 id="services-webproxy">
<title>Web Proxy Administrative Web Page</title>
<para>
@@ -60,8 +61,29 @@
is also possible to run the proxy in <quote>transparent</quote> mode. In \
this case the browsers
need no special configuration and the firewall automatically redirects \
all traffic on port 80, the standard HTTP port, to the proxy server.
- </para><para>
- <screenshot>
+ </para>
+
+ <sect3 id="services-webproxy-commonsettings">
+ <title>Common settings</title>
+ <para>
+ You can choose if you want to proxy requests from your Green
+ (private) network and/or your Blue (wireless) network (if
+ fitted). Just tick the relevant boxes.
+ </para>
+ </sect3>
+ <sect3 id="services-webproxy-upstream">
+ <title>Upstream proxy</title>
+ <para>
+ If your ISP requires you to use their cache for web access then
+ you should specify the hostname and port in the
+ <guibutton>Upstream proxy</guibutton> text box. If your
+ ISP's proxy requires a username and password then enter
+ them in the <guibutton>Upstream username</guibutton> and
+ <guibutton>Upstream password</guibutton> boxes.
+ </para>
+ <para>
+ <figure id="v2.services.001">
+ <title>Web proxy - Common settings & Upstream proxy Sections</title>
<mediaobject>
<imageobject role="fo">
<imagedata fileref="&imagepath;proxy.&imageext;"
@@ -75,117 +97,373 @@
<phrase>HTTP Proxy Web Page</phrase>
</textobject>
</mediaobject>
- </screenshot>
- </para><para>
- You can choose if you want to proxy requests from your Green (private) \
network
- and/or your Blue (wireless) network (if fitted). Just tick the relevant \
boxes.
- </para>
- <formalpara>
- <title><guilabel>Log enabled</guilabel></title>
- <para>
- If you choose to enable the proxy then you can also
- log web accesses by ticking the
- <guibutton>Log Enabled</guibutton> box. Accesses made
- through the proxy can be seen by clicking the Proxy
- Logs choice of the Logs menu.
+ </figure>
</para>
- </formalpara>
- <para>
- If your ISP requires you to use their cache for web access then you \
should specify the hostname and port
- in the <guibutton>Upstream proxy</guibutton> text box. If your \
ISP's proxy requires a user name
- and password then enter them in the <guibutton>Upstream \
username</guibutton> and
- <guibutton>Upstream password</guibutton> boxes.
- </para>
- <formalpara>
- <title><guilabel>Your extension_methods
- list</guilabel></title>
+ </sect3>
+ <sect3 id="services-webproxy-logsettings">
+ <title>Log Settings</title>
+ <formalpara>
+ <title><guilabel>Log enabled</guilabel></title>
+ <para>
+ If you choose to enable the proxy, then you can also log
+ web accesses by ticking the
+ <guibutton>Log Enabled</guibutton> checkbox.
+ </para>
+ </formalpara>
<para>
- Squid only knows about standard HTTP request methods.
- Unknown methods are denied, unless you add them to the
- <filename>extension_methods</filename> list.
- You can add up to 20 additional "extension"
- methods here.
+ Accesses made through the proxy can be seen by visiting the
+ <link linkend="logs-proxy">Proxy Logs</link> webpage.
</para>
- </formalpara>
- <para>
- For example, <ulink \
url="http://subversion.tigris.org/">subversion</ulink>
- uses some non-standard methods that squid blocks.
- To allow subversion to work through IPCop's transparent proxy,
- you will have to add <filename>REPORT</filename>
- <filename>MKACTIVITY</filename> <filename>CHECKOUT</filename> and
- <filename>MERGE</filename> to the
- <filename>extension_methods</filename> list.
- </para>
- <formalpara>
- <title><guilabel>Disallow local proxying on blue/green
- networks</guilabel></title>
+ <formalpara>
+ <title><guilabel>Log query terms</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Log useragents</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ </sect3>
+ <sect3 id="services-webproxy-cacheman">
+ <title>Cache management</title>
<para>
- Check this option to disable proxying to green and
- blue networks (if blue is available). This closes a
- possible hole between Green and Blue if they are run
- in <quote>transparent</quote> mode.
+ You can choose how much disk space should be used for caching
+ web pages in the Cache Management section. You can also set the
+ size of the smallest object to be cached, normally 0, and the
+ largest, 4096KB.
</para>
- </formalpara>
- <formalpara>
- <title><guilabel>or specify a list of destinations
- which are not to be proxied</guilabel></title>
<para>
- This gives somewhat more flexibility, allowing you to
- define which destination networks are to be DENIED
- through the proxy. You can specify a network (or
- networks) with an IP Address and Netmask, for example:
- <filename>192.168.3.0/255.255.255.0</filename>
+ For privacy reasons, the proxy will not cache pages received via
+ https, or other pages where a username and password are
+ submitted via the URL.
</para>
- </formalpara>
- <formalpara id="cache_management">
- <title>Cache Management</title>
<para>
- You can choose how much disk space should be used for caching web pages \
in the Cache Management section.
- You can also set the size of the smallest object to be cached, normally \
0, and the largest, 4096KB.
- For privacy reasons, the proxy will not cache pages received via https, \
or other pages
- where a username and password are submitted via the URL.
+ <figure id="v2.services.002">
+ <title>Web proxy - Log settings & Cache management Sections</title>
+ <mediaobject>
+ <imageobject role="fo">
+ <imagedata fileref="&imagepath;proxy1.&imageext;"
+ format="PNG"
+ contentwidth="14cm"/>
+ </imageobject>
+ <imageobject role="html">
+ <imagedata fileref="&imagepath;proxy1.&imageext;" format="PNG" \
align="center"/> + </imageobject>
+ <textobject>
+ <phrase>HTTP Web Proxy Page</phrase>
+ </textobject>
+ </mediaobject>
+ </figure>
</para>
- </formalpara>
- <formalpara>
- <title><guilabel>Repair cache</guilabel></title>
+ <warning>
+ <para>
+ Caching can take up a lot of space on your hard drive.
+ If you use a large cache, then the minimum size hard drive
+ listed in the IPCop documentation will
+ <emphasis>not</emphasis> be large enough.
+ </para>
+ <para>
+ The larger the cache you choose, the more memory is required
+ by the proxy server to manage the cache. If you are running
+ IPCop on a machine with low memory do not choose a large
+ cache.
+ </para>
+ </warning>
+ </sect3>
+ <sect3 id="services-webproxy-destports">
+ <title>Destination ports</title>
+ <formalpara>
+ <title><guilabel>Allowed standard ports (one per \
line)</guilabel></title> + <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Allowed SSL ports (one per line)</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
<para>
- You can repair the proxy cache by clicking the
- <guibutton>Repair cache</guibutton> button.
+ <figure id="v2.services.003">
+ <title>Web proxy - Destination ports Section</title>
+ <mediaobject>
+ <imageobject role="fo">
+ <imagedata fileref="&imagepath;proxy2.&imageext;"
+ format="PNG"
+ contentwidth="14cm"/>
+ </imageobject>
+ <imageobject role="html">
+ <imagedata fileref="&imagepath;proxy2.&imageext;" format="PNG" \
align="center"/> + </imageobject>
+ <textobject>
+ <phrase>HTTP Web Proxy Page</phrase>
+ </textobject>
+ </mediaobject>
+ </figure>
</para>
- </formalpara>
- <formalpara>
- <title><guilabel>Clear cache</guilabel></title>
+ </sect3>
+ <sect3 id="services-webproxy-network">
+ <title>Network based access control</title>
+ <formalpara>
+ <title><guilabel>Allowed subnets (one per line)</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Disable internal proxy access</guilabel></title>
+ <para>
+ Check this box to disable internal proxy access.
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Disable internal proxy access to Green from other \
subnets</guilabel></title> + <para>
+ Check this box to disable internal proxy access to Green
+ from other subnets.
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Disable internal proxy access to Blue from other \
subnets</guilabel></title> + <para>
+ Check this box to disable internal proxy access to Blue
+ from other subnets.
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Unrestricted IP addresses (one per line)</guilabel> \
(optional)</title> + <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Unrestricted MAC addresses (one per \
line)</guilabel> (optional)</title> + <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Banned IP addresses (one per line)</guilabel> \
(optional)</title> + <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Banned MAC addresses (one per line)</guilabel> \
(optional)</title> + <para>
+ Content to be written...
+ </para>
+ </formalpara>
<para>
- You can flush all pages out of the proxy cache at any
- time by clicking the
- <guibutton>Clear cache</guibutton> button.
+ <figure id="v2.services.004">
+ <title>Web proxy - Network based access control Section</title>
+ <mediaobject>
+ <imageobject role="fo">
+ <imagedata fileref="&imagepath;proxy3.&imageext;"
+ format="PNG"
+ contentwidth="14cm"/>
+ </imageobject>
+ <imageobject role="html">
+ <imagedata fileref="&imagepath;proxy3.&imageext;" format="PNG" \
align="center"/> + </imageobject>
+ <textobject>
+ <phrase>HTTP Web Proxy Page</phrase>
+ </textobject>
+ </mediaobject>
+ </figure>
</para>
- </formalpara>
- <formalpara id="transfer_limits">
+ </sect3>
+ <sect3 id="services-webproxy-time">
+ <title>Time Restrictions</title>
+ <formalpara>
+ <title><guilabel>Access</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ </sect3>
+ <sect3 id="services-webproxy-transferlimits">
<title>Transfer limits</title>
<para>
- The web proxy can also be used to control how your users access the web. \
The only control accessible via the
- web interface is the maximum size of data received from and sent to the \
web. You can use this to
- prevent your users
- downloading large files and slowing Internet access for
- everyone else. Set the two fields to 0, the default, to
- remove all restrictions.
+ The web proxy can also be used to control how your Users access
+ the web. One control accessible via the web interface is the
+ maximum size of data received from and sent to the web. You can
+ use this to prevent your Users downloading large files and
+ slowing Internet access for everyone else. Set the
+ <guilabel>Max download size (KB)</guilabel> and
+ <guilabel>Max upload size (KB)</guilabel> fields to 0,
+ the default, to remove all restrictions.
</para>
- </formalpara>
- <formalpara>
- <title><guilabel>Save</guilabel></title>
+ </sect3>
+ <sect3 id="services-webproxy-throttling">
+ <title>Download Throttling</title>
<para>
- To save any changes, press the
- <guibutton>Save</guibutton> button.
+ Content required...
</para>
- </formalpara>
- <warning><para>
- Caching can take up a lot of space on your hard drive. If you use a \
large cache, then the
- minimum size hard drive listed in the IPCop documentation will not \
be large enough.</para><para>
- The larger the cache you choose the more memory is required by the \
proxy server to manage the cache. If
- you are running IPCop on a machine with low memory do not choose a \
large cache.</para>
- </warning>
- </sect2><sect2 id="services-dhcp">
+ <para>
+ <figure id="v2.services.005">
+ <title>Web proxy - Time restrictions, Transfer limits & Download \
throttling Sections</title> + <mediaobject>
+ <imageobject role="fo">
+ <imagedata fileref="&imagepath;proxy4.&imageext;"
+ format="PNG"
+ contentwidth="14cm"/>
+ </imageobject>
+ <imageobject role="html">
+ <imagedata fileref="&imagepath;proxy4.&imageext;" format="PNG" \
align="center"/> + </imageobject>
+ <textobject>
+ <phrase>HTTP Web Proxy Page</phrase>
+ </textobject>
+ </mediaobject>
+ </figure>
+ </para>
+ </sect3>
+ <sect3 id="services-webproxy-mime">
+ <title>MIME type filter</title>
+ <formalpara>
+ <title><guilabel>Enabled</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Block these MIME types (one per line)</guilabel> \
(optional)</title> + <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ </sect3>
+ <sect3 id="services-webproxy-browser">
+ <title>Web browser</title>
+ <formalpara>
+ <title><guilabel>Enable browser check</guilabel></title>
+ <para>
+ Check this box if you want to enable browser checking.
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Allowed clients for web access</guilabel></title>
+ <para>
+ Check the appropriate box(es) for permitted clients.
+ </para>
+ </formalpara>
+ <para>
+ <figure id="v2.services.006">
+ <title>Web proxy - MIME type filter & Web browser Sections</title>
+ <mediaobject>
+ <imageobject role="fo">
+ <imagedata fileref="&imagepath;proxy5.&imageext;"
+ format="PNG"
+ contentwidth="14cm"/>
+ </imageobject>
+ <imageobject role="html">
+ <imagedata fileref="&imagepath;proxy5.&imageext;" format="PNG" \
align="center"/> + </imageobject>
+ <textobject>
+ <phrase>HTTP Web Proxy Page</phrase>
+ </textobject>
+ </mediaobject>
+ </figure>
+ </para>
+ </sect3>
+ <sect3 id="services-webproxy-privacy">
+ <title>Privacy</title>
+ <formalpara>
+ <title><guilabel>Fake useragent submitted to external \
sites</guilabel> (optional)</title> + <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Fake referer submitted to external \
sites</guilabel> (optional)</title> + <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ </sect3>
+ <sect3 id="services-webproxy-authentication">
+ <title>Authentication method</title>
+ <formalpara>
+ <title><guilabel>None</guilabel> (default)</title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Local</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>identd</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>LDAP</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Windows</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>RADIUS</guilabel></title>
+ <para>
+ Content to be written...
+ </para>
+ </formalpara>
+ </sect3>
+ <sect3 id="services-webproxy-clearcache">
+ <title>Clear Cache/Save</title>
+ <formalpara>
+ <title><guilabel>Clear cache</guilabel></title>
+ <para>
+ You can flush all pages out of the proxy cache at any
+ time by clicking the
+ <guibutton>Clear cache</guibutton> button.
+ </para>
+ </formalpara>
+ <formalpara>
+ <title><guilabel>Save</guilabel></title>
+ <para>
+ After making any changes, press the
+ <guibutton>Save</guibutton> button to apply them.
+ </para>
+ </formalpara>
+ <para>
+ <figure id="v2.services.007">
+ <title>Web proxy - Privacy & Authentication Method Sections</title>
+ <mediaobject>
+ <imageobject role="fo">
+ <imagedata fileref="&imagepath;proxy6.&imageext;"
+ format="PNG"
+ contentwidth="14cm"/>
+ </imageobject>
+ <imageobject role="html">
+ <imagedata fileref="&imagepath;proxy6.&imageext;" format="PNG" \
align="center"/> + </imageobject>
+ <textobject>
+ <phrase>HTTP Web Proxy Page</phrase>
+ </textobject>
+ </mediaobject>
+ </figure>
+ </para>
+ </sect3>
+ </sect2>
+
+ <sect2 id="services-dhcp">
<title>DHCP Administrative Web Page</title>
<para>
DHCP (Dynamic Host Configuration Protocol) allows you to control the \
network configuration of all your computers
This was sent by the SourceForge.net collaborative development platform, the world's \
largest Open Source development site.
------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, &
iPhoneDevCamp as they present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com
_______________________________________________
Ipcop-svn mailing list
Ipcop-svn@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ipcop-svn
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic