1. 概述
本篇記錄如何使用squid做代理，修改默認端口，允許特定網段節點使用代理訪問特定域名
2. 過程
2.1 生成賬號密碼文件
htpasswd -c /etc/squid/.squid_users liwl
輸入密碼：liwanliang
執行結束，會創建/etc/squid/.squid_users
#賬號liwl，密碼:liwanliang
修改權限：chown squid.squid /etc/squid/.squid_users
驗證：/usr/lib64/squid/basic_ncsa_auth /etc/squid/.squid_users
2.2 編輯配置文件
dns_v4_first on
acl SSL_ports port 443
acl CONNECT method CONNECT
auth_param basic program /usr/lib64/squid/basic_ncsa_auth /etc/squid/.squid_users
auth_param basic children 5
auth_param basic realm Proxy Authentication Required
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
acl auth_users proxy_auth REQUIRED
acl user_simforezbx proxy_auth simforezbx
acl allowDomain dstdomain .qyapi.weixin.qq.com
http_access allow allowDomain
http_access deny !allowDomain
http_access allow localnet user_simforezbx
http_access deny all
http_port xxxx
coredump_dir /var/spool/squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
保存配置，重啓服務：systemctl restart squid
2.3 測試
curl -x 172.19.1.2:xxxx -U liwl:liwanliang --proxy-basic -o liwl.AppImage https://get.wiz.cn/x/wiznote-desktop-0.1.103-linux-x86_64.AppImage