Tagged Questions

Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

-4
votes
0answers
17 views

C-ICAP server - write my own service

I want to make a content-adaptation solution. The goal is to use an ICAP server which will be adding an HTML/js code (simple image advertises) to the top of page that clients connected to my network ...
0
votes
0answers
24 views

SQUID not caching anything

I am trying to setup squid to cache downloading of one of my programs , unfortunately I found out I am not caching anything, my logs looks like: 1414421675.540 1059 127.0.0.1 TCP_MISS/204 288 GET ...
0
votes
0answers
38 views

pfsense reverse proxy + HTTPS/SSL interception

I have pfSense 2.1.5 and squid3-dev 3.3.10 configured as reverse proxy for internal http web server and server proxy (port 3128).It works. Activating HTTPS/SSL interception (Enable SSL filtering) on ...
0
votes
0answers
18 views

Squid3 never cache image files

I just installed 3.3.8 on Ubuntu 14.04. However I found that squid3 never caches any statics images file at all. Here is my squid3.conf auth_param digest program /usr/lib/squid3/digest_file_auth -c ...
0
votes
1answer
23 views

Redirect a HTTPS CONNECT using squid

I have deployed squid 3.4.8. It's primary purpose is to redirect users to internal landing pages since no Internet access is permitted or enabled on this network. Instead of letting browsers time ...
0
votes
1answer
20 views

Squid proxy redirect to search if unable to resolve hostname

When not using a proxy, a hostname that does not exist results in an NX returned from the DNS server, and the web browser (Firefox in this case) is smart enough to attempt a search instead. However, ...
0
votes
0answers
32 views

Squid3 TCP_DENIED/403 with TIMEOUT_FIRST_UP_PARENT

I have the following hierarchy: P1 and P2 are configured as: acl manager proto cache_object acl localhost src 127.0.0.1/32 ::1 acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1 acl localnet src ...
-2
votes
0answers
29 views

squid transparent vs non transparent, browser setting vs iptables routing [closed]

whats the diff between settings a and b. where a) squid setting http_port 3128 settings in firefox proxy ip and port 3128 user can browse through proxy using this settings and b) squid setting ...
0
votes
0answers
14 views

Allow some destination ip/hostnames to bypass acl in squid

We have setup squid for an office environment. We are blocking many multimedia file types like mp3, mp4 etc to prevent bandwidth misuse. Now we have setup media streaming server on our gateway server ...
0
votes
3answers
34 views

Change Packet Dynamically with Squid

Is there any option in Squid that allow me to change packets dynamically? For ex: I want to send all packet that comming to Squid to my PHP code and change the packet with PHP Dynamically and resend ...
0
votes
1answer
16 views

cache_dir and some hardening squid

Suppose i'm going to define multiple cache_dir such as : cache_dir ..... # disk 1 cache_dir ..... # disk 2 cache_dir ..... # disk 3 Question: Do i need to define maximum_object_size and ...
0
votes
1answer
28 views

how to make squid revere proxy with authentication send remote_user header

OS CentOS 6.4 - squid 3.1 I currently have squid running as a reverse proxy, performing NTML authentication succesfully. This is working as expected. If I enter valid AD username and password, it ...
0
votes
0answers
15 views

Forward original hostname through Squid to Apache

I'm trying to forward proxy requests in Squid to an Apache server that uses SNI. It looks like I'm misconfiguring Squid to forward the host name to Apache. I'm not sure what I'm missing to do this ...
2
votes
1answer
60 views

Automatic Proxy Discovery wpad.example.com doesn't work

I'm trying to setup an automatic method for discovery my Squid proxy on the local network, by setting the browsers with "Automatic detection". The proxy is fine and works if I specify the IP:Port ...
0
votes
0answers
162 views

transparent proxy with squid3 dansguardian iptables and one nic

I am attempting to filter my home internet connection through transparent proxy (squid3) and dansguardian . I have the following setup: http://i.stack.imgur.com/5Z3DP.png My Ubuntu Server is ...
0
votes
1answer
40 views

I want to proxy only HTTP but I'm not sure what to do with HTTPS traffic

I have a DNS server that resolves all traffic to my Squid server that will proxy all HTTP traffic transparently (it must be transparent or it will drop a invalid url error) which works great. The ...
0
votes
1answer
40 views

squid3 blocking access to particular IP not working

I have installed a squid3 on debian and using it as a proxy server. after some time I want to block the particular user using IP address. So I have defined this rule in my squid.conf file but it is ...
0
votes
0answers
18 views

How to exclude a particular domain entry from access.log in squid3 on debian

I have proxy server setup running squid proxy and Squid Cache: Version 3.1.20 on debian, I am doing some log analysis from squid's log file i.e /var/log/squid3/access.log. I dont want a entry of ...
0
votes
0answers
26 views

Modifying squid proxy configuration programmatically

Is there any way to manage squid proxy programmatically, so I can add a cache peer or modify an access list using something like an api for squid?
0
votes
1answer
65 views

How does a proxy server handle non-http traffic?

I have an application that makes an un-secure connection over a non-http port to a server daemon. We use this tool internally. There might be occasion for some of our users to work outside our ...
1
vote
0answers
78 views

How can I limit total quota using squid without authentication for per user

I am having Raspberry Pi running Raspbian, I have configured it as a wifi hotspot using hostapd and dhcpd, I have configured transparent squid proxy server on it. Now all traffic goes through my proxy ...
0
votes
0answers
80 views

Skype through squid not working

I am trying to connect skype through a squid proxy server for a customer. However they don't specify a gateway to client PC's. They are using skypes latest version and we have updated squid to the ...
-2
votes
1answer
36 views

Squid separate access.log by http_port [closed]

I've AP 2 interface they're ip 192.168.200.1, 192.168.201.1 HTTP access from each interface i'm redirect it to difference squid port 192.168.200.0/24 ==> 192.168.200.1:3129 192.168.201.0/24 ...
0
votes
0answers
24 views

How to make Squid log url and forward traffic without proxying?

I want to use squid to listen on port 80 and log all url requests and simply forward it to original destination without changing anything. How to achieve that?
1
vote
0answers
41 views

Squid configuration to allow all https and block all else to and from localhost

I'm attempting to use squid to mock something on my local windows machine for testing purposes. I need to allow local applications and browsers to connect to a tomcat server running on localhost, ...
1
vote
0answers
38 views

Tune Squid to only cache URLs if response time is slow

I'm fine-tuning my Squid server to only cache URLs if the upstream server response time is slow. For all other calls, it acts as a transparent proxy. Has anyone done this before? Is there a way to ...
0
votes
0answers
16 views

Restricting proxy access to certain ldap users

I'd like to restrict access to a squid proxy server to certain ldap users. Since the ldap backend I use is zimbra, I intruduced a new Class of Service simply called squidusers and use that for the ...
0
votes
0answers
61 views

Squid Proxy: How to link inbound IPv4 ports to outbound IPv6 Addresses

I'm using Squid and I need to accept inbound connections on an ipv4 address using an ipv4 port that each user account link to an specific outbound ipv6 address. So for example I want to open port 4000 ...
0
votes
0answers
52 views

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the ...
0
votes
0answers
630 views

Transparent Proxy squid TCP_MISS/503 Error in all pages

I m trying to make a squid proxy server with to work as a transparent proxy server, and i m facing some issues that i m unable to figure out the reasons. The setup i m using is several VLAN's with ...
0
votes
1answer
295 views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
0
votes
0answers
84 views

Transparent bridge proxy between gateway with DMZ and router

I'm attempting to build a transparent bridged proxy using ebtables, bridge-utils and squid3 as seen in the following article. ...
0
votes
0answers
125 views

Squid Proxy: ACL error on request by curl

my squid.conf(squid3) acl localnet src 192.168.1.0/255.255.255.0 acl localweb src 192.168.199.0/255.255.255.0 http_port 3128 transparent http_access allow localnet http_access allow localweb my ...
1
vote
0answers
27 views

Squid limit all user to 128kbit/s

I have a very odd behaviour with my squid server. It limits every client to a bitrate of exactly 3,2 Mbit/s... To troubleshoot it, I've tried to set the bitrate limit to unlimited and to 128kbit/s ...
0
votes
0answers
55 views

Squid not routing traffic, missing domain

I have a squid3 proxy setup and would like to route it's traffic although when I try and connect I get this error: The following error was encountered while trying to retrieve the URL: ...
0
votes
0answers
91 views

Proxy / Squid 2.7 / Debian Wheezy 6.7 / lots of TCP Timed-out

I'm facing a lot of TCP timed-out on a busy cache server and here below my sysctl.conf configuration as well as an output of netstat -st Kernel 3.2.0-4-amd64 #1 SMP Debian 3.2.57-3 x86_64 GNU/Linux ...
1
vote
1answer
76 views

Single ipv6 from /64 subnet [closed]

I have a newbie question I'd like to ask. We have a dedicated server and we got an IPv6 /64 block. We want to use squid to make proxy and use those IP. And my question now is: is it possible to use ...
1
vote
0answers
141 views

Squid not caching files (Randomly)

I want to use an intercepting squid server to cache specific large zip files that users in my network download frequently. I have configured squid on a gateway machine and caching is working for ...
0
votes
1answer
242 views

Google searching requires captcha when using proxy server

We currently have a Squid Proxy server setup on our network, a high school. We are sending all traffic from student devices (iPads) through the proxy, both internally and externally. Traffic gets sent ...
0
votes
0answers
23 views

Banning all sites except one for user on the list

Is there an easy way to ban all sites except one (ex. domain.com) for user on the list? user list: src limit_users { userlist /etc/squid3/ul_limit_users }
0
votes
1answer
152 views

Squidanalyzer error

I installed squidanalyzer-5.4.tar.gz, following this tuto http://squidanalyzer.darold.net/install.html and setting as recommandation but when I run http://testserver.com/squidreport I get error below ...
-1
votes
1answer
151 views

How to block videos by title on youtube using Squid?

For example,i want to block videos that contain the word "cat" in the title. I also do not want the blocked videos appearing in: -Recommended Channels tab -Recommended/related videos -Search ...
-1
votes
1answer
225 views

Squid Proxy does not prompt for authentication and denies every request

I have a problem with a squid proxy that always denies requests. The bad part is, i never get to see an authentication pop-up... Squid is running on an Ubuntu 14.04 vserver. I'll provide you my ...
0
votes
0answers
91 views

How to enable sites by domain wildcards in Squid Guard Proxy Server?

I need to enable sites through Domain names by using wildcards in SquidGuard Proxy Server instead of adding one by one. For example, *.ae means it needs to allow all the sites comes under ae domains.
0
votes
0answers
353 views

squid authentication error kerberos - windows active directory

I use squid on RHEL6 and I want that authentication is via AD windows 2008, I already joined the server to the windows domain and all users is already seen by wbinfo -u wbinfo -g but wbmin -t show ...
0
votes
0answers
43 views

Strip spaces from Squid access log {X-Forwarded-for} output

Is there a way that I can strip the spaces from the comma separated list of IP addresses in the header printed by X-forwarded-for? For example in my logformat I have used: %{X-Forwarded-for}>h ...
-1
votes
1answer
143 views

How can google see my IP address despite squid3 proxy?

I own a dedicated server by namecheap.com running Debian 7. Since I am currently on vacation in Europe and I'm unable to access some services I need due to geographic limitations I wanted to try and ...
0
votes
1answer
514 views

Bypass squid proxy [closed]

I have a transparent squid proxy that I am using to filter out ads from web traffic which works well enough, however I would like to have the option of bypassing the proxy as well at times when I do ...
2
votes
1answer
103 views

How does Squid know if it's cache is is validated

In reverse proxy mode, Squid can cache content from websites previously accessed by devices within the network. What happens if the content on the remote site changes in someway, perhaps by a code ...
1
vote
1answer
208 views

Squid3 - Cannot authenticate username/password with Mysql

I am testing both authentication with squid_passwd file and Mysql. This is my configuration auth_param basic program /usr/lib/squid3/basic_ncsa_auth /etc/squid3/squid_passwd # auth_param basic ...