0
votes
0answers
20 views

What should be the correct http response code for custom proxy login/register page

I configured a firewall rule on a dd-wrt router to redirect http connections to a shell script, and drop the remaining ports, for the unregistered range of IPs. I am trying to tell the clients they ...
0
votes
1answer
549 views

preventing squid forwarding loop with IPtables

I have a web application, and I'd like to limit file upload size. I thought I'd try using squid for this, via its directive request_body_size_max. I have my webserver running on port 8080, and I've ...
1
vote
1answer
182 views

Redirect traffic on port 80 into apache for unknown macs, and into squid for some macs

I have a linux box behaving like a router that handles two network interfaces: eth0 for internet and eth1 for LAN. I set up iptables in order to redirect all the web traffic coming by the LAN into a ...
1
vote
2answers
571 views

Bypass transparent Squid proxy on Tomato USB for specific sites

I'm using a router with Tomato USB to forward port 80 requests to a Ubuntu Server with Squid 3 in transparent mode. Someone on the Tomato forum adapted these instructions for Tomato: #!/bin/sh ...
0
votes
1answer
168 views

How To Route All HTTP Traffic from eth1 to the Squid Proxy? The Iptable rules?

I have just setup a squid proxy server. The server have two interfaces. eth0 connects to the router and eth1 is connected to a switch where all the other machines connect. The server also have a DHCP ...
0
votes
2answers
765 views

Can I use iptables on my Varnish server to forward HTTPS traffic to a specific server?

We use Varnish as our front-end web cache and load balancer, so we have a Linux server in our development environment, running Varnish with some basic caching and load-balancing rules across a pair of ...
0
votes
1answer
304 views

how can make transparent proxy on more than one port?

i want to make transparent proxy with linux ( centos) , i want all incoming connection on port 1000 - 2000 on eth0 forward to eth1 on port 1000 - 2000 in transparent mode i have 2 server 1- ...
1
vote
1answer
559 views

Transparent proxy which preserves client mac address

I have a customer that wants to intercept SSL traffic as it leaves their network. My proposed solution is to setup a proxy that is transparent and both layer 2 and layer 3 so it can simply be dropped ...
3
votes
1answer
385 views

Squid transparent proxy for outgoing traffic only

I have a Rails server that's a bit API heavy and so I want to run a Squid caching transparent proxy, between all port 80 activity, and the real world. However I don't need incoming traffic to go ...
8
votes
4answers
6k views

Setting up a transparent SSL proxy

I've got a linux box set up with 2 network cards to inspect traffic going through port 80. One card is used to go out to the internet, the other one is hooked up to a networking switch. The point is ...
0
votes
1answer
324 views

use iptables for transparent access to 2 proxies depending on domain

I have a setup where I have 2 proxy servers. One is a socks proxy which I wish to use for ALL connections by default. The second proxy is an http proxy which I wish to use for http connections to ...
3
votes
3answers
2k views

Easy way to “edit” the traffic coming from a tcp host (linux)

I need to make some small modification to incoming traffic from a known tcp host:port before the process handling the connection get the stream. For example, let 192.168.1.88 be a remote host which ...
5
votes
3answers
9k views

transparent SSL proxy myths and facts

I've been searching for many hours now about a way to setup a transparent proxy for SSL (not Squid). The general answer is that I can't, but I know there are some ways, though. My purpose is only the ...
3
votes
1answer
1k views

Linux IPv6 Transparent Proxy (but Linux doesn't support NAT on IPv6!?)

On Linux I can make a transparent proxy simply by adding a iptables -j REDIRECT command. To my surprise, I am needing to support IPv6. Simple enough right? iptables6 -j REDIRECT command not ...
1
vote
1answer
4k views

HTTPS is not working in transparent proxy with Squid

I am using Squid proxy 3.1, all systems in the LAN connects to the internet through proxy. Direct connection is blocked using the iptables from the gateway server. There are some devices which does ...
0
votes
1answer
181 views

transparent proxy to lo

I am trying to setup a transparent proxy between eth0 and lo, The reason being during DNS propagation services are being tunneled over a SSH connection between the old and new servers, on the "old" ...
1
vote
1answer
794 views

Redirected traffic with iptables to squid not displaying custom error page?

I've created a squid configuration with the directive: deny_info ERR_PROXY_INFO all And tested this by setting squids port to 8080, then setting my browser proxy to 192.168.1.3:8080 This does ...
0
votes
1answer
280 views

Setting up a transparent proxy with only one box

I am playing around with transparent proxies, unfortunately I do not have two machines to test it out with. The current way I am doing things is the program makes a request to a computer on port 80, ...
1
vote
3answers
647 views

Transparent Squid : Logging client ip problem

I am using the following rules in iptables in my network to use a transparent proxy * iptables -t nat -A PREROUTING -i eth0 -s ! squid-box -p tcp --dport 80 -j DNAT --to squid-box:3128 * iptables -t ...