1
vote
1answer
54 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
1
vote
1answer
42 views

Logrotate: Postrotate setfacl failed with no such file or directory error

I set some extended ACL entries for /var/log/squid3/ and /var/log/squid3/access.log. sudo setfacl -m u:jetty:r-x,g:adm:r-x /var/log/squid3 sudo setfacl -m u:jetty:r--,g:adm:r-- ...
3
votes
1answer
49 views

Squid 3.2 - Proper configuration for random outbound IP with a single user authentication?

I'm attempting to use AclRandom for Squid 3.2 and I think I'm a bit confused on the proper method for this. Here is my configuration: http_port 3128 auth_param basic program ...
0
votes
1answer
111 views

Squid “refusing connections” with big ACL

I've successfully set up squid and it's working as is should. I'm using "Squidman" on OS X Server (underlying squid version is 3.1.12). However, I want to use squid to block certain porn sites, so I ...
0
votes
0answers
147 views

Trying to block two sites with squidGuard using ACL

this is a proof of concept. I am trying to add two domains to a custom blocklist that I am setting up for only users on a single subnet. I don't want to touch the other subnets that use the proxy. ...
0
votes
0answers
259 views

Squid Proxy Splash page always showing up

I am further along with using Squid to present a splash page to guest users, and I wrote a basic HTML splash page to be presented to users. I wrote the Splash page HTML to grab the url from Squid ...
1
vote
0answers
40 views

Can Squid3 access PHP Helpers

Can Squid3 use PHP helper programs other than for ACL and redirect? I need Squid to use a PHP program (with mysql access) to set the parent proxy that should be used for a particular connection, so ...
1
vote
0answers
330 views

Squid Random Shared ip proxy

Running Squid with a acl random ip setup, Have 745 ip's in the pool and we are about 10 users that use it with tools that are running multiple threads, Check rankings on Google etc Issue: We did ...
1
vote
0answers
208 views

Squid 3.1: external_acl_type ttl won't work

I have custom script for handling Squid3's external_acl_type and it works fine. In this script (btw, its PHP) I turned on logging every request into the file. As far as I know from docs TTL value ...
0
votes
1answer
573 views

Squid access logging only specific ACLs?

In squid, is it possible to enable access logging only on a specific ACL? If so, how? We have done quite a few searches and were unable to find the proper conf syntax :(
2
votes
1answer
735 views

Exclude some IPs from a subnet in squid

I have squid configuration to allow access to the proxy from a particular network localnet. I'm blocking access to media to all users except some IPs within the subnet. Here is the relevant part from ...
1
vote
0answers
174 views

Can I make an ACL in squid for transparent connections?

I have a squid proxy that transparently intercepts connections from an internal network, and is explicit for connections from another network. I want to use authentication for the external network, ...
0
votes
1answer
498 views

How do I configure Squid Proxy located at a different location to route internet traffic?

I have a Linux box (Ubuntu 9.10) at a different location. I installed squid proxy and tried using that IP and port (opened 3128 at that location) in Firefox. I can't get it to work. My current ...
0
votes
1answer
702 views

Specifying multiple acl conditions on one acl line of squid.conf

In squid I need to combine acl conditions in one line: e.g. acl allowed_conn src 10.40.50.5 && dstdomain intranet.loc acl allowed_conn src 10.40.50.6 && dstdomain anothersite.net I ...
1
vote
0answers
194 views

Is there a convenient UI to control squid acls?

I'm looking for a convenient way to control access controls (specifically, to block URLs based on regex matching) of a squid server running on OS X. I checked out webmin and it seems incredibly ...
1
vote
1answer
102 views

Squid Acl rule question

In squid.conf, there are directives for safe ports and ssl ports: acl safe_ports (list of ports) acl ssl_port 443 then: http_access deny !safe_ports http_access deny !ssl_port My question is: ...
0
votes
1answer
192 views

squid - http_access

There is a line in squid default configuration: # Deny CONNECT to other than secure SSL ports http_access deny CONNECT !SSL_ports acls are applied from top down, so CONNECT acl will deny access to ...
0
votes
3answers
862 views

How to block website access using squid

I would like to block black listed URLs and Domains using the squid proxy server. In the tutorials, what is mostly shown how to block one URL/Domain, however I would like to have the URLs/Domains in a ...
1
vote
2answers
1k views

squid acl policy using username

i configure squid to authenticate using win AD, but users can connect from different ip address and i cant set policy base on ip for different user. is any way to set acl base on username? i found ...
0
votes
0answers
450 views

Squid Reverse Caching Proxy with ACL and Delay Pools

I have to configure a Reverse Proxy Caching Squid box to do: Define Content groups, e.g. images containing gif, png, ico, jpg, jpeg, etc Audio containing mp3, wav, ogg etc Video Archives Binary ...
2
votes
1answer
677 views

Squid / IPtables allow only connections when accessing a certain proxy domain

I'm not sure if this is a Squid subject or IPTables. In my Squid configuration I have something like this setup: http_port proxy.example.com:8080 I would like Squid to only accept connections from ...
2
votes
1answer
773 views

Adding wild card to squid ACL

I want to add a wild card to squid ACL. acl mp3_ext url_regex s-i *.mp3
0
votes
3answers
858 views

Configuring Squid proxy server

I have installed squid on a mac mini and would like to configure it to be used as a proxy Any ideas where i would start, especially setting up the ACLs, am using webmin as the GUI tool for ...