Questions tagged [squid]
Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.
1,397
questions
0
votes
1
answer
104
views
SSH through squid proxy running on the same server
I am currently connecting to my server over ssh. I also have a squid proxy running on the same server, and I would like to be able to connect to ssh through the proxy, presumably with ssh taking place ...
0
votes
0
answers
18
views
Re-route traffic from a Shadowsocks server based on GeoIP
I am trying to set up a proxy network consisting of two servers:
First server is a ShadowSocks server (Rust version) with manager API enabled as a standalone systemd service. This allows opening proxy ...
0
votes
1
answer
74
views
Can't cache dynamic content with Squid
I am trying to use squid in order to cache some dynamic content. The content comes from requests such as /path/{id}, where id is the identifier of the resource.
I have tried playing with the ...
0
votes
0
answers
25
views
Can I add a custom (spoofed) X-Forwarded-For and Via Header in Squid for requests from local network?
I tried spoofing the X-Forwarded-For Header (and Via Header) in Squid in my local network. Since the request isn't coming from a system with a public ip, I assume that squid doesn't set these headers (...
0
votes
0
answers
26
views
How to use sslcrtvalidator_program helper in squid on ubuntu
I have an application that does not support TLS but wants to access another application that requires TLS access with mutual authentication. To bridge the gap I have setup squid in accelerator/reverse-...
1
vote
0
answers
50
views
Squid to allow src ip address
I have a squid proxy running on a docker on linux with ip say a.b.c.d
Squid proxy is configured to allow only certain domains (dst) and block everything else. There is also a parent proxy configured ...
0
votes
1
answer
95
views
Squid's `tls_key_log` does not work as alternative to `SSLKEYLOGFILE` to decrypt TLS traffic
Following the instruction I can successfully descrypt TLS traffic in wireshark while browsing in firefox with SSLKEYLOGFILE env variable set and running squid as middle man proxy.
export SSLKEYLOGFILE=...
0
votes
0
answers
81
views
Squid not blocking access to websites
I'm on Ubuntu Server 22.04.3 LTS and I'm trying to learn a bit about Squid.
I installed Squid v5.7 and one of my tasks is to deny access to a list of URL's.
I modified "squid.conf" file and ...
0
votes
1
answer
128
views
Debugging combination of tproxy and policy based routing
let me preface this by saying that I know I am combining a wild amount
of things in here, but sometimes that is where things take you.
So the scenario:
I'm using squid and tproxy to transparently ...
0
votes
0
answers
115
views
I want to use full /56 or /64 subnet in squid proxy change on every request instead of 1 ipv6 only
I want squid proxy to use full /56 or /64 IPv6 subnet instead of one Ipv6
I have two servers with squid proxy installed and my servers have been assigned with /56 and /64 ipv6 ranges
But on both ...
0
votes
0
answers
83
views
Squid Proxy - Hide Signs of Proxy Being Used
I've installed a Squid Proxy Server in a Windows VPS.
I will route browser and some other programs in my PC through that proxy, and I would like that all requests are sent to the websites just as if I ...
0
votes
0
answers
26
views
squid reverse proxy log
we have an exchange server behind a squid reverse proxy
there is many failed account events in exchange, the exchange event viewer display the IP address of the reverse proxy as source address in ...
0
votes
0
answers
36
views
squid v5.5 is not logging successful ssh connections on oracle linux 9.2
I adjusted my acls to allow port 22 traffic, however my access log is not showing succsssful port 22 connections only denys and the "denys" show a http RC of 200.
access.log is below
[20/Sep/...
0
votes
0
answers
50
views
Squid didn't cache artifacts, which was downloaded from remote repository with authentication
I have a latest Squid, installed in my network.
SSL bump and other options has been configured. Artifacts, which I download from HTTPS sites, are cacheing successfully(as example https://downloads....
0
votes
1
answer
65
views
Excepted behavior for overlapping dstdomains entries in Squid 4.1
Per documentation, if using dstdomain and having overlapping entries in the list, Squid should generate a warning message. For example I have this in my /etc/squid/squid.conf:
acl dst_domains ...
2
votes
1
answer
53
views
squid: Unable to allow 10.10.11.0/24 but 10.10.11.0/23 works
Im unable to make a working acl with CIDR over `/23` (squid 5.7 on Debian)
For example i got this config (working):
acl servers src 10.10.11.0/23
http_access allow servers
...
http_access deny all
...
0
votes
0
answers
55
views
Squid cache 302 responses
I have a very specific use case in which I need to cache EVERYTHING. Including 302s. I know it's technically against the HTTP RFC, but I know those redirects will always be the same and I need them to ...
0
votes
0
answers
312
views
Serving squid proxy behind HTTP load balancer
I want to build a system where we have 3 squid proxies server running behind load balancer.
Currently squid proxy is running on http port, (help for https_port is also appreciated)
dns_v4_first on
acl ...
0
votes
0
answers
173
views
Squid Proxy - allow http for specific url
I'm learning about squid proxy in a Windows environment. I have verified that the list of allowed urls in a notepad file and add it to squid.config file as path of allowed url is functioning well.
...
0
votes
0
answers
426
views
Connecting squid to upstream proxy using CONNECT request
I'm setting up a reverse proxy that has to forward all the requests to a given url.com/resource. Now, that resource is behind a proxy, so it has to use the CONNECT request.
The idea is that squid, ...
0
votes
0
answers
271
views
[SQUID-6.1]: Setup Squid ipv4 to ipv6 proxy
I'm trying to setup a squid proxy that will accept multiple inbound connections on one IPv4 across a range of ports, and for each port connection to connect out on a unique IPv6 address.
I can ...
0
votes
0
answers
42
views
Squid bypass site don't work (as expected)
Here is my squid.conf
http_access allow localhost
acl whoer dstdomain .whoer.net
http_access allow whoer
never_direct allow whoer
# And finally deny all other access to this proxy
always_direct allow ...
0
votes
0
answers
237
views
Squid doesn't use IPv6 address
I've got a small issue with my squid (forward) proxy server. It keeps using IPv4 as outgoing IP address even if remote server and client have IPv6 connectivity.
My client's IP address:
devuan@devuan:~$...
0
votes
0
answers
45
views
In a Linux environment, does the order of commands "ip Route" affect routing?
I attached multiple ethernets to the server, one for LAN and the rest for PPPOE.
Each packet connected to each PPPOE was sent by itself.
It works fine on CentOS 6.10.
In the 8 series, packets are ...
0
votes
0
answers
38
views
grab https URL without import CA into PC from squid access log
1.The domain aa.com was belongs to our company and we have the public and private key of Wildcard certificate about aa.com.
2.We want to grab all of the URL from the access log which about *.aa.com, ...
1
vote
2
answers
4k
views
Transparent HTTPS proxy with squid using SNI
Final update: I ended up using nginx as squid proved to be difficult to work with, see last update at the end for more detail
What I'm trying to do is setting up a transparent HTTPS proxy with squid ...
0
votes
0
answers
384
views
Use squid to forward http(s) requests based on domainname
I have installed 5 LXC containers in Proxmox. Each container has a Apache2 webserver up and running inside, pointing to a registered domain.
So:
container1 points to example1.com and has a local ip ...
0
votes
0
answers
65
views
Should I use a Squid on the host machine or a virtual machine?
I have a server from SoYouStart and 32 failover IPs.
I need these IPs for proxy (for scraping). Should I set up Squid on the host machine (Proxmox) or on a virtual machine like Ubuntu + Squid?
I read ...
1
vote
1
answer
175
views
Rsyslog prepend text to messages in certain facility
OS: Debian 11
Rsyslog version 8.2102
Squid version 4.13
I am attempted to remote log squid logs without going through a file.
I am using the following logging line for the store log in squid.conf:
...
0
votes
0
answers
252
views
YouTube app not working with squid. What urls to bump exclude?
I have squid running with SSL Bump. The rest of the squid settings are basically defaults. I can access YouTube just fine from a browser but the android app is not working. I've already excluded ...
0
votes
0
answers
37
views
can't block a domain which is redirected by aws
This is my first year at university and This is also my first time trying to configure a server.
They want me to block some https-web. I was able to block all websites with iptables except one.
I'm ...
0
votes
0
answers
79
views
squid proxy random IP time change
I have included two IP addresses in squid with random TCP outgoing addresses but I need them as one IP will be active for 15 minutes and the other one will be active for 15 minutes and this will ...
0
votes
0
answers
151
views
Squid proxy: How to pass param to ext_sql_session_acl
I'm trying set external acl that check against database if authenticated user is overcuote, for that I try to configure acl rule as:
external_acl_type CHECKOVERCUOTE ttl=3600 negative_ttl=10 children-...
0
votes
0
answers
249
views
How squid whitelist domain + exclude certificate error domain
I have Squid Setup as a transparent HTTP+HTTPS proxy in my network, using SSL-Bump. I am having trouble with a handful of domains and those domains showing me cert errors while dumping and splicing, ...
-1
votes
1
answer
101
views
How to redirect network traffic using squid and nginx to outer page?
My school network blocks access to game pages, more exactly colonist.io. We have an access to linux server for learning purposes. I'd like to avoid blocking by setting up some kind of proxy server on ...
0
votes
1
answer
1k
views
Squid configuration to forward another proxy for internet only
I just installed squid proxy server on Linux. I am now configurating squid .
I have a set of ip defined for intranet. Internet are those that is not intranet.
If destination is to internet, I want the ...
0
votes
1
answer
326
views
How to create Iptables rules for squid to only handle web traffic request
I'm using Squid Proxy for (DNS Filtering), I have configured squid proxy behind my GCP Cloud NAT in transparent mode to intercept HTTP and HTTPS Web Traffic, I have added only below rules to redirect ...
1
vote
0
answers
103
views
How to allow squid user to use only certain ports that are bound to ip
In my squid configuration, I map each ip to a specific port.
acl port_3000_acl myport 3000
acl port_3001_acl myport 3001
http_port 3000
http_port 3001
tcp_outgoing_address 185.166.196.238 ...
0
votes
1
answer
195
views
Forward all incoming traffic without redirect
How to forward all traffic to another domain?
serverA has a serverA.com domain
serverB has a serverB.com domain
I want to forward all incoming traffic from serverA to serverB
For example, when ...
0
votes
2
answers
37
views
Will my Harddisk still be written when i delete a logfile in use on Debian?
Due some Bug testings there are tons of request made to my squid server on debian. Because it is a test i can't disable logging, restart the Server or block the requests. Due the growing size of the ...
1
vote
0
answers
250
views
Squid as an explicit & terminated forward proxy / bridge
Background: we've got some "old" IoT devices running an older SSL stack that must connect to a newer server over HTTPS.
We'd like to setup a forward proxy / bridge so that:
Device uses its ...
0
votes
1
answer
1k
views
Squid Reverse Proxy with SSL
I'm trying to use squid as a reverse proxy in front of a single website, to decrypt the SSL on the proxy and then to encrypt the connection to the webserver (this is in order to use squid as an ICAP ...
0
votes
2
answers
4k
views
How can I avoid the error TCP_MISS_ABORTED/000 when uploading files through squid?
While uploading big files, > 10MB, through a squid V5.6, I noticed that they failed and/or were retried.
The error has been logged multiple times in the logs:
1671092710.452 423 ::1 ...
0
votes
1
answer
410
views
A proxy forward to redirect some calls to avoid crossing the proxy. Only redirect proxy forward
I'm trying to redirect with 301 some https calls with some proxy forward. The idea is not to go through the proxy, but to return a 301 redirect with the new location. I've got two cases:
https://...
0
votes
2
answers
131
views
How to show an internal static page to IP addresses list? [closed]
I have a ubuntu 22.04 server, a list of ip addresses of users on my local network and I want to redirect http/https traffic from this list to a local informative html page. Similar to how a hotspot ...
1
vote
1
answer
1k
views
CONNECT Proxy over Squid with TLS termination
I can create a regular http(s) proxy with Squid, which can then be accessed at http://my-ip.
I want to have TLS termination, so I can access httpS://my-domain.
I have generated ssl certs using certbot ...
0
votes
1
answer
358
views
Squid in docker returns 502 but works when run on host
I'm using the same config for squid 5.6 that runs on a host machine and in docker. When I run it on the host (Ubuntu 22.10) it works just fine but when I run it from ubuntu/squid image I get 502 bad ...
0
votes
1
answer
278
views
Squid + OpenVPN : 403 Forbidden
I need to have a proxy server for an already configured and working OpenVPN server.
So I install Squid 5.2 on Ubuntu 20.04.
To test, I changed the following line in the /etc/squid/squid.conf file and ...
0
votes
1
answer
193
views
How to configure a forward proxy to keep a historical mirror of the websites accessed?
I'm scraping information regarding civil servants' calendars. This is all public, text-only information. I'd like to keep a copy of the raw HTML files I'm scraping for historical purposes, and also in ...
0
votes
0
answers
30
views
A web server that takes contents from another one, and serves it with slightly modified HTML
I have a web site a.com (please note: I own and run it). I want to be able to run a slightly modified version of it on b.com . The contents would be identical; however, I would apply some minor ...