上文中，说明了 Squid3 IP Proxy 隐藏原IP，这里就搭建Squid 3密码账号IP代理进行整理，涉及环境 Ubuntu 18.04。
Step 1： htpasswd 和 htdigest 工具
htpasswd和htdigest工具是用于生成Squid密码的，直接安装命令
sudo apt-get install apache2-utils
安装完成后，使用命令如下所示
htpasswd -c /etc/squid/.squid_users xifarm
New password:
Re-type new password:
Adding password for user xifarm
创建的密码在/etc/squid/.squid_users里面存储，我们可以再增加一个用户
htpasswd /etc/squid/.squid_users runwulink
New password:
Re-type new password:
Adding password for user runwulink
这里可以“查看”一下刚才创建的2个账号
cat /etc/squid/.squid_users
xifarm:IyfTZICg
apr1
m6c5B5KK5ZAK/7A/VIgYB/
验证账号密码用这个脚本–防止我们遗忘密码账号
chown squid /etc/squid/.squid_users
/usr/lib64/squid/basic_ncsa_auth /etc/squid/.squid_users
xifarm password
OK
runwulink password
OK
Step2: 配置squid.conf 密码账号
auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/.squid_users
auth_param basic children 5
auth_param basic realm Proxy Authentication Required
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive offacl auth_users proxy_auth xifarm runwulink
http_access allow auth_users
basic_ncsa_auth 配置密码文件路径 /etc/squid/.squid_users
auth_param basic children 5 指明了这里最多开放5个账号
auth_param basic casesensitive off 大小写不明感
acl auth_users proxy_auth xifarm runwulink
开启Squid测试
systemctl restart squid
Step3：代理使用
wget命令为例
wget google.com
–2019-12-1 00:38:21– http://google.com/
Connecting to 192.168.49.69:3128… connected.
Proxy request sent, awaiting response… 407 Proxy Authentication Required
2018-12-1 00:38:21 ERROR 407: Proxy Authentication Required.
这里会报407错误：密码账号没有设置原因。
wget –proxy-user=amos –proxy-password=password google.com
–2018-12-1 00:39:36– http://google.com/
Connecting to 192.168.49.69:3128… connected.
Proxy request sent, awaiting response… 301 Moved Permanently
Location: http://www.google.com/ [following]
–2018-12-1 00:39:37– http://www.google.com/
Reusing existing connection to 192.168.49.69:3128.
Proxy request sent, awaiting response… 200 OK
Length: unspecified [text/html]
Saving to: ‘index.html.8’index.html.8 [ <=> ] 11.72K –.-KB/s in 0.1s
2018-12-1 00:39:38 (97.6 KB/s) – ‘index.html.8’ saved [12001]
小经验
- 查询Squid错误的日志vi /var/log/squid/access.log
- 注意命令行路径 /usr/lib/squid/basic_ncsa_auth 以你安装Squid的为准！
- 默认是3128端口，这个端口已经被滥用了，注意修改端口，且适用Squid密码账号方式保护流量
