0
votes
3answers
693 views

Can't Block https://facebook using squid Transparent

I'm using Squid Proxy 3.1 as transparent proxy server, I want to block facebook.com but while listed in blocked list , Some user's accessing facebook using https, how can i block only https for ...
2
votes
0answers
2k views

Configure Squid as an HTTPS forward proxy?

Here's some background about my problem: I have a web service running on Heroku, with a dynamic IP address. Static IPs on Heroku are not an option. I need to connect to an external web service which ...
1
vote
1answer
344 views

Squid Proxy Ubuntu 13.1 and iOS AppStore

I have a squid proxy set up on my home network and I can't seem to set it up to allow apple AppStore traffic to passthrough. I am running Diladele Web Security on top of squid3.3.8 I have added ...
1
vote
1answer
812 views

Squid 3.4 transparent https proxy

I'm trying to get a transparent https proxy setup working. I'm not looking to intercept or anything, I would like the https traffic to just be forwarded to the real host. In squid I have something ...
0
votes
0answers
103 views

Squid 2.6 and https trasparent proxy

I have a question about Squid configuration as trasparent proxy using SSL. I would to use Squid 2.6 as trasparent proxy with http and https connection. I followed this steps: 1) I configurated my ...
0
votes
0answers
887 views

Multiple SSL certificates with Squid reverse proxy

I have been upgrading my network from using an apache reverse proxy (Not quite powerful enough) to a Squid proxy configured just for reverse use. My squid proxy is on a CentOS 6 VM, and currently ...
0
votes
0answers
177 views

Squid SSL Protocol error

What is the issue of this error in Squid? (I Don't find anything in google) The system returned: (71) Protocol error The remote host or network may be down. Please try the request again. my ...
0
votes
1answer
146 views

Is there any way to log HTTPS requests (URLs) in a proxy server (Squid no transparent proxy)?

We do not want to know what is inside the package. Only monitor the destination URLs. Is it possible? In other words: I want the Squid log accesses without being transparent proxy.
0
votes
0answers
220 views

Client can not access some HTTPS through Squeeze gateway

I have a gateway (+firewall +proxy) set up on a Squeeze box with 2 NICs. The problem is the client cannot see some of the HTTPS (for example they can go https://mail.google.com but not ...
0
votes
1answer
266 views

Filter HTTPS URLs with non-transparent proxy

I have set up a Squid v.3.1 + Squidguard, the proxy is configured on each browser via a proxy.pac file. Now if an user goes to a blocked site with HTTP (e.g. http://www.facebook.com) the Url filter ...
-2
votes
1answer
125 views

Can Squid or other open-source proxy server be set up to process HTTPS encrypted traffic? [closed]

I would like to set up a home proxy server which would filter ads and viruses even before they get to the browser. The problem in this case is that many web sites use encrypted HTTPS connections and I ...
2
votes
1answer
387 views

Squid ssl_bump server_first

I am trying to test the ssl_bump server_first Squid directive, but I did not understand how it works. As far as I understood the ssl_bump directive has three working modes: None: HTTPS traffic is ...
1
vote
2answers
720 views

URL filtering HTTPS traffic

the configuration that I am dealing with is a transparent HTTP proxy: on the firewall all the HTTP traffic (port 80) is redirected to the proxy via iptables; Dansguardian is installed on the proxy, ...
3
votes
3answers
612 views

BYOD and Google SSL

I run a school network with a BYOD program in place. I have a linux proxy (squid) with content filtering by Mind (fork of dansguardian). Everything works fine over HTTP, the problem is of corse when ...
0
votes
0answers
114 views

set https forwarding with squid and iptables

I have a Linux as router, eth0 (192.168.0.60) connect to LAN, eth1 (10.100.33.239) connect to Internet. squid works well, I can set 10.100.33.239:3128 or 192.168.0.60:3128 as proxy in web browser and ...
0
votes
0answers
329 views

squid configuration only for http, how to show an error for https thru squid

squid Version 3.1.11, not transparent 1200 LAN clients surf the web thru the squid server. Browsers' configuration, programmatically pushed to clients, is http server:3128 https --- On the ...
0
votes
1answer
273 views

Block HTTPS traffic to only selected sites

The Squid at my office is currently set up as a transparent proxy. I tried to block sites like facebook.com and twitter.com and was successful because just typing in those domains do not default to ...
1
vote
1answer
5k views

Squid proxy users in HTTPS connection

I saw in my Squid proxy log that I cannot log username in an HTTPS connection. Do you think this is my configuration error, or it is impossible due to the encryption? If the answer is the second one ...
0
votes
0answers
533 views

How to setup Squid to allow outgoing HTTPS calls on FreeBSD jails where Squid acts as both proxy and accelerators?

This should be actually a very obvious setup, but somehow I have missed the obvious step! Default assumptions: FreeBSD 6.4-RELEASE-p11, Squid 2.7.STABLE9. These are not changeable, so "upgrade to the ...
1
vote
2answers
3k views

Using squid to capture https - how to do non transparent proxy?

The root of the problem: I need to block access to https://somewebsite.com/folder/index.php; but allow access to the rest of the site. I thought the best way to accomplish it would be through a proxy ...
3
votes
4answers
4k views

Is there any way to cache HTTPS requests in a proxy server?

We are using Squid proxy server in our environment and we want to cache HTTPS requests. Is there any way to configure Squid or in general a proxy server to cache HTTPS requests?
1
vote
1answer
2k views

Logging HTTPS traffic through a proxy

How do I configure squid (or any other) proxy server to keep log of URLs visited, and files downloaded, over HTTPS? Is it possible?
0
votes
1answer
600 views

Encrypt client connection with squid forward proxy using SSL

I'm setting up a Squid forward proxy and I'm wondering if I could configure Squid in such a way that the connection from my web browser to squid is https regardless of whether the connection from ...
1
vote
1answer
978 views

How to configure squid for inspecting https requests and pages?

I wish to allow squid to block https requests by full URL regex matching (not just domain) and to block https responses by inspecting page contents. Is there some step by step guide for how to set ...
1
vote
1answer
346 views

Squid: is there a way to log https urls in their entirety and/or block according to full url regex?

It seems that squid only "sees" the domain name for https requests. Is there any way to configure it so that the full url can be logged and/or matched within ACLs? Thanks.
0
votes
1answer
235 views

SQUID SERVER (or whatever) HTTPS to HTTP

I am not too familiar with Squid or IPTABLES, I have an idea that this will work but I cannot find a good example via Google. In a nutshell, I am trying to mimic an SSL Accelerator. Like a ...
1
vote
1answer
1k views

Squid url rewrites https>>http

I'm exploring some uses with Squid proxy 2.7 and I have seen a good number of examples for url rewrites that take urls such as: http: //somesitename.com and then the rewriter can change the url to: ...
0
votes
3answers
2k views

Filter SSL connections with squid proxy

We have a Ubuntu server between our network & the firewall for URL filtering. Of course SSL connections are a problem. I am looking into ways of doing some basic filtering. I have even thought of ...
0
votes
1answer
254 views

Squid incorrectly serving cache HIT after SSL unwrapping

We have a cloud setup like this: User Request -> Perlbal (SSL unwrapping) -> Squid (Caching) -> Apache -> HTTP Response We support SSL on some pages, and not on others. Everything ...
3
votes
1answer
5k views

squid and https URLs

I have installed squid as a non-transparent proxy/cache server with --enable-ssl configuration. It is a child of a parent proxy server proxy1.ut.ac.ir. Everything is OK for HTTP URLs, but any HTTPS ...
2
votes
2answers
1k views

How can I set up a reverse proxy for several web applications and static content?

Update: based on Jesper Mortensen's response, here is some more information. The applications are based on Perl's HTTP::Daemon. I do plan to deploying them on a Linux server. Each application does ...