CentOS 7 - Proxy Server

Alex Sage

@scottalanmiller I did.

scottalanmiller

@anonymous said:

@scottalanmiller I did.

Then how would you ping it? Are you trying to ping it FROM the proxy?

Alex Sage

@scottalanmiller said:

You are on IPv6? You have an IPv6 connection from your ISP?

No. But isn't this a IPV6 address?

"Failed to connect to 2a02:2498:1:3d:5054:ff:fed3:e91a: Network is unreachable"

scottalanmiller

@anonymous said:

@scottalanmiller said:

You are on IPv6? You have an IPv6 connection from your ISP?

No. But isn't this a IPV6 address?

"Failed to connect to 2a02:2498:1:3d:5054:ff:fed3:e91a: Network is unreachable"

Yes, so you have IPv6 being used somewhere. You need to get everything onto IPv4 if you want that to work

scottalanmiller

Since that address would have to have come from DNS, I assume, then maybe the proxy things it is on IPv6 and is requesting AAAA records.

Alex Sage

I am assuming when the proxy is working correctly I will be able to ping google.com from this server.

scottalanmiller

@anonymous said:

I am assuming when the proxy is working correctly I will be able to ping google.com from this server.

No, the purpose of using a web proxy is to block that, not allow it. You have no path for the ping to get to google.com since you just put in a proxy to block that.

scottalanmiller

If you accidentally forgot to lock down your firewall and left the routes on your server, then ping would continue to work as before, but then a proxy would be pretty silly as it wouldn't be doing its job in most cases. Assuming you configured the firewall to block outbound traffic that doesn't come from the proxy server, there would be no route for a ICMP packet to take to get to the Internet since the server isn't on the Internet anymore.

Alex Sage

So.....

http_proxy=http://proxy_server_address:port

Doesn't work

http_proxy=http://proxy_server_address:port yum -y update

Works

scottalanmiller

I'm guessing you were not putting it into your profile or rc script to add it to your shell and were spawning a new shell without the proxy setting.

Alex Sage

@scottalanmiller I need to export it and reboot? Confused

scottalanmiller

@anonymous said:

@scottalanmiller I need to export it and reboot? Confused

No, you have to add it to one of the files mentioned in order for it to apply after a reboot.

Alex Sage

@scottalanmiller but I never rebooted.....

scottalanmiller

@anonymous said:

@scottalanmiller but I never rebooted.....

I didn't say that you did, I said that you spawned a new shell.

Alex Sage

To enable all yum operations to use a proxy server, specify the proxy server details in /etc/yum.conf. The proxy setting must specify the proxy server as a complete URL, including the TCP port number. If your proxy server requires a username and password, specify these by adding proxy_username and proxy_password settings.

The settings below enable yum to use the proxy server mycache.mydomain.com, connecting to port 3128, with the username yum-user and the password qwerty.

# The proxy server - proxy server:port number
proxy=http://mycache.mydomain.com:3128
# The account details for yum connections
proxy_username=yum-user
proxy_password=qwerty