0
votes
0answers
38 views

Transparent Proxy squid TCP_MISS/503 Error in all pages

I m trying to make a squid proxy server with to work as a transparent proxy server, and i m facing some issues that i m unable to figure out the reasons. The setup i m using is several VLAN's with ...
-1
votes
2answers
99 views

how to configure iptables to allow access to specific domain through squid proxy on port 3128?

What is wrong with my rules? I have installed squid on my server and i want just some specific domains to be reach able through squid but iptables completely blocked me I have found this : iptables ...
1
vote
1answer
55 views

Bypass Transparent Squid With IPTables

Similar questions have been asked before but the answers received were not satisfying or didn't apply to my situation. I have a transparent squid proxy that filters all the http and , for some ...
0
votes
1answer
50 views

squid3 with tcp_outgoing_address could not connect to anywhere

I have one server with 3 interfaces (3 physical lan card), which are connected to 3 different routers. Each router has a different subnet, i.e. the 3 interfaces of server belong to 3 different ...
0
votes
1answer
109 views

Block rtmp and make it retry on port 80 via iptables

We have a proxy filtering connections but some sites use RTMP, which runs on port 1935. This cannot go through the proxy as proxies are port 80 only. As far as I know if RTMP fails, it will retry on ...
0
votes
1answer
490 views

Blocking Facebook on certain IP Addresses with iptables

Here's my current environment: I have a VM running Ubuntu Server/Squid, and it is set as non-transparent. I have some IP Addresses which need to bypass Squid authentication so they have unrestricted ...
0
votes
1answer
57 views

Squid + Apache error

I had my Apache webserver perfectly configured and everything worked fine. I asked my friend to setup a cache proxy to make my web answers faster. So here's what he did (if I understand the history): ...
0
votes
0answers
164 views

Squid 3 - NetFilterInterception in cache.log

EDIT: after a day or so, it started happening again and I had to disable iptables for now cause everyone in the family was having no internet. I route all web traffic from my router (10.0.0.1) to my ...
0
votes
1answer
681 views

Iptables rule for squid transparent proxy block http requests

I have some iptables rules in a linux gateway (ubuntu server 12.04) and all works good. I configured a transparent squid proxy and works too. I'm using this rule. $IPT -t nat -A PREROUTING -p tcp ...
0
votes
1answer
211 views

DansGuardian+Squid3 (Ubuntu 12.04) on external VPS won't work transparently

My goal is to have an externally located DansGuardian + Squid setup to be used by only certain machines (the kids, especially) in my home. I've managed to install both on a cheap VPS, and I've had ...
0
votes
1answer
307 views

iptables rules for a transparent squid2.7 proxy, and a single network interface

I want to use Squid 2.7 as a transparent caching proxy for HTTP traffic on a Raspberry Pi running Debian Linux. The raspberry pi will be connected to my wifi router (MBR1400) using a single network ...
1
vote
1answer
57 views

Squid and more hosts

I configurated my Squid as tranasparent cache on a visible_host myhost.com Now I need to make a test: - I modified my hosts file to redirect browser request myHost2.com to the same machine (squid + ...
-1
votes
1answer
439 views

How to Setup iptables for a squid proxy with just one HW-NIC

I got a Server with a static ipadress for rent and now i want to setup a transparent proxy on this server. after i configured the squid for testing purposes with the listener "http_access allow all", ...
2
votes
1answer
84 views

web sites know the “real” access user(IP) through a proxy?

I'm new to Squid and iptables, and am investigating whether they would be able to accomplish a task at hand. part of my squid.conf: acl wf myport 8010 acl vp myport 8020 acl ss myport 8030 ...
0
votes
0answers
193 views

Squid SSL Protocol error

What is the issue of this error in Squid? (I Don't find anything in google) The system returned: (71) Protocol error The remote host or network may be down. Please try the request again. my ...
0
votes
0answers
98 views

how to use two squid proxy by iptables

I have two Linux machines with squid installed: 192.168.0.60:3128 and 192.168.0.70:3128. I want to setup a transparent proxy: 192.168.0.60:3128 to deal with http protocol 192.168.0.70:3128 to deal ...
0
votes
0answers
225 views

Client can not access some HTTPS through Squeeze gateway

I have a gateway (+firewall +proxy) set up on a Squeeze box with 2 NICs. The problem is the client cannot see some of the HTTPS (for example they can go https://mail.google.com but not ...
2
votes
1answer
396 views

Bandwidth Manager Using Squid

I am trying to create a internet distribution software for an ISP (an internet distributor or a school or other such organizations) like the one here It will have restrictions and policies for users ...
0
votes
1answer
668 views

preventing squid forwarding loop with IPtables

I have a web application, and I'd like to limit file upload size. I thought I'd try using squid for this, via its directive request_body_size_max. I have my webserver running on port 8080, and I've ...
1
vote
2answers
663 views

Bypass transparent Squid proxy on Tomato USB for specific sites

I'm using a router with Tomato USB to forward port 80 requests to a Ubuntu Server with Squid 3 in transparent mode. Someone on the Tomato forum adapted these instructions for Tomato: #!/bin/sh ...
1
vote
2answers
764 views

squid: can't connect to peer with tcp_outgoing_address

I encountered the problem with configuration of two squid servers. I have the following scheme - The main idea is to download all files from rackspace and amazon through parent squid and store all ...
0
votes
1answer
501 views

Squid as Transparent Proxy Opens only https websites not normal http

I installed and configured squid proxy as transparent proxy server. when i tried using firefox the proxy server works fine and i can access both ports https and http. but when i transparnet, i can ...
0
votes
1answer
132 views

routing traffic - iptables

Im trying to route some traffic on my lan. I have a squid3 server on 192.168.0.1:3128 and all web traffic is going through squid3. (Transparent via iptables) And now I have a testing server up and ...
0
votes
2answers
92 views

limit connexions to my proxy

I have a slow internet bandwith (1024 KBITS/S) to share between 30 users. To control the traffic, I have setup a basic proxy server with iptables. Logs and Packets captured with tcpdump show that ...
0
votes
0answers
124 views

set https forwarding with squid and iptables

I have a Linux as router, eth0 (192.168.0.60) connect to LAN, eth1 (10.100.33.239) connect to Internet. squid works well, I can set 10.100.33.239:3128 or 192.168.0.60:3128 as proxy in web browser and ...
0
votes
1answer
183 views

How To Route All HTTP Traffic from eth1 to the Squid Proxy? The Iptable rules?

I have just setup a squid proxy server. The server have two interfaces. eth0 connects to the router and eth1 is connected to a switch where all the other machines connect. The server also have a DHCP ...
0
votes
0answers
247 views

Incorrect iptables setting preventing server from returning data

I'm have a web server X, a transparent squid proxy server P and I'm using iptables to redirect all outgoing traffic on X to P, such that when a page on X is accessed, X will retrieve/curl a page Z and ...
1
vote
2answers
154 views

Enforce using proxy in all browsers

I've configured squid with squid with squidguard and when using proxy in browser it works fine. But I want to enforce using proxy (probably in iptables) in all browsers. Now it can be disabled in the ...
0
votes
1answer
534 views

Outside to port 80 doesn't work with IPTables with Squid

IPTables rules : # RESET iptables -F iptables -t nat -F iptables -t mangle -F iptables -X # Pas de filtrage sur l'interface lo iptables -A INPUT -i lo -j ACCEPT # Debut des reles de firewall ...
3
votes
1answer
402 views

Squid transparent proxy for outgoing traffic only

I have a Rails server that's a bit API heavy and so I want to run a Squid caching transparent proxy, between all port 80 activity, and the real world. However I don't need incoming traffic to go ...
1
vote
1answer
1k views

route all passing traffic on port 80 over router to external squid system

I'm unable to find correct iptables lines for this. I have a router who has one or more wlan clients (wlan0/10.13.37.x). eth0 is connected to the internet (through other routers). Squid is ...
0
votes
2answers
949 views

Internet slowed down because of SQUID Server setup

Recently I have setup a squid server for our office. I have computer (A) with two ethernet cards, one for internet and the second one for local networkIt has Ubuntu server OS with squid-server and ...
1
vote
1answer
250 views

Squid cache + direct routing

again here to ask for your help... This time i need to setup a cluster of 2 squid caching proxies to speedup some apache servers. The good thing is that there is no NAT involed so only direct ...
0
votes
2answers
606 views

squid transparent proxy on all ports

I have setup squid as a transparent proxy by redirecting port 80 to the native squid port 3128. I know there are issues with getting secure ports like ssl and imaps to go though the proxy but can I ...
0
votes
1answer
469 views

SQUID proxy + iptables

I'm using squid3 (on ubuntu 10.10) and it manage connection completelly fine. But how can I secure the traffic by setting the firewall on the *same serve*r? If I use firewalls like ufw or ...
1
vote
1answer
211 views

GMAIL ports/protocols

I am trying to configure iptables on Ubuntu. I have the server setup as a transparent proxy using Squid which is working fine. At this time only port 80 is redirected to SQUID via nat iptables. I ...
1
vote
0answers
943 views

Redirect OpenVPN gateway traffic to Privoxy

I would like to redirect the traffic that goes through my OpenVPN gateway to Privoxy, like so: OpenVPN client->Internet->OpenVPN gateway->Privoxy->Internet->Webserver (and vice versa) So far I ...
-1
votes
1answer
415 views

URL Redirect to IP on LAN [duplicate]

Possible Duplicate: Is there a way to forward a port based on subdomain? wOk here is what I need to do: Listen on various ports and route to LAN IP addresses based on url and port. So I ...
-1
votes
1answer
177 views

iptables -forward mail server port from inside lan to outside lan

ive local server with squid to manage my lan , it got 2 NICs and my mail server its outside the lan what i need here when users ty to connect and send email through NIC-1 its should fwd request to ...
0
votes
1answer
1k views

Routing squid traffic via same interface over different gateway (= DSL modem)

MI have two interfaces on an ipcop machine, eth1 (public) and eth0 (local LAN). Transparent SQUID is listening and caching on eth0, and all traffic is routed from there across eth1 for public web ...
0
votes
3answers
2k views

By passing squid for few hosts using iptables

We have a squid proxy setup which listens on default port(3128): on eht0 (192.x.x.x). It has another interface eth1 (10.x.x.x) used to connect to external world. It is doing good quality content ...
1
vote
0answers
885 views

bypass ip destination squid tproxy bridge

I have configured a squid transparent tproxy. All works fine. Now I need all the traffic going to an external IP (internet) does not pass through the proxy. Do I need to modify iptables, ebetables ...
0
votes
1answer
2k views

Redirect 443 Traffic of a Particular Incoming IP Address?

Currently, my IPtable indiscriminately sends all incoming request to my Squid transparent proxy. However, since I need SSL to work, I need a way to avoid intercepting SSL traffic. Idea example.com ...
0
votes
1answer
1k views

Easiest way to allow direct HTTPS connection in Intercept mode?

I know the SSL issue has been beaten to death I'm using DNS redirect to force my clients to use my intercept proxy. As we all know, intercepting HTTPS connection is not possible unless I provide a ...
0
votes
2answers
716 views

iptables - forward from port 80 to Squid on port 3128 problem

I have two boxes: 172.16.1.224 and 172.16.1.223. Both are running Squid. I connect my browser to x.x.x.224, port 3128 using Firefox proxy settings. That works fine. If I connect my browser to ...
0
votes
1answer
225 views

Making squid use a proxy

I have a home network with 4-5 clients, and a server. The server runs Squid 2.7. The clients are all configured to use squid as a proxy server. I would like to be able to establish an SSH tunnel with ...
4
votes
1answer
956 views

iptables refuses connections to squid port on CentOS 5.5

I installed squid on a fresh CentOS 5.5 and added this rule for iptables: -A RH-Firewall-1-INPUT -m state --state NEW,ESTABLISHED,RELATED -m tcp -p tcp --dport 8080 -j ACCEPT Using this HOWOT: ...
0
votes
1answer
201 views

Forwarding with iptable IIS response

So the scenario is the following i have a router when a request goes directly to its public address X.X.X.X it port forward to a IIS server, nevertheless my IIS has as its gateway a iptable/squid ...
0
votes
2answers
130 views

Don't allow a host to be spammed [duplicate]

I run a proxy server with squid and I've just got a report that a user of mine tried a ddos using my proxy. I can I block such requests? Ex: Allow just max 5 requests on the same domain on the same ...
0
votes
1answer
229 views

bind both squid and proxy

192.168.10.1 bind both squid on port 3128 and httpd on port 1000 how to serve both port as client request on port 80 at the same time like this for redirect all request on port 80 to 3128 iptables ...