Questions tagged [squid]

Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

Filter by
Sorted by
Tagged with
0 votes
1 answer
104 views

SSH through squid proxy running on the same server

I am currently connecting to my server over ssh. I also have a squid proxy running on the same server, and I would like to be able to connect to ssh through the proxy, presumably with ssh taking place ...
user avatar
0 votes
0 answers
18 views

Re-route traffic from a Shadowsocks server based on GeoIP

I am trying to set up a proxy network consisting of two servers: First server is a ShadowSocks server (Rust version) with manager API enabled as a standalone systemd service. This allows opening proxy ...
wutt's user avatar
  • 1
0 votes
1 answer
74 views

Can't cache dynamic content with Squid

I am trying to use squid in order to cache some dynamic content. The content comes from requests such as /path/{id}, where id is the identifier of the resource. I have tried playing with the ...
Alex's user avatar
  • 3
0 votes
0 answers
25 views

Can I add a custom (spoofed) X-Forwarded-For and Via Header in Squid for requests from local network?

I tried spoofing the X-Forwarded-For Header (and Via Header) in Squid in my local network. Since the request isn't coming from a system with a public ip, I assume that squid doesn't set these headers (...
quantumquester's user avatar
0 votes
0 answers
26 views

How to use sslcrtvalidator_program helper in squid on ubuntu

I have an application that does not support TLS but wants to access another application that requires TLS access with mutual authentication. To bridge the gap I have setup squid in accelerator/reverse-...
Rosso's user avatar
  • 111
1 vote
0 answers
50 views

Squid to allow src ip address

I have a squid proxy running on a docker on linux with ip say a.b.c.d Squid proxy is configured to allow only certain domains (dst) and block everything else. There is also a parent proxy configured ...
A Sree's user avatar
  • 11
0 votes
1 answer
95 views

Squid's `tls_key_log` does not work as alternative to `SSLKEYLOGFILE` to decrypt TLS traffic

Following the instruction I can successfully descrypt TLS traffic in wireshark while browsing in firefox with SSLKEYLOGFILE env variable set and running squid as middle man proxy. export SSLKEYLOGFILE=...
rnd_nr_gen's user avatar
0 votes
0 answers
81 views

Squid not blocking access to websites

I'm on Ubuntu Server 22.04.3 LTS and I'm trying to learn a bit about Squid. I installed Squid v5.7 and one of my tasks is to deny access to a list of URL's. I modified "squid.conf" file and ...
João Sacramento's user avatar
0 votes
1 answer
128 views

Debugging combination of tproxy and policy based routing

let me preface this by saying that I know I am combining a wild amount of things in here, but sometimes that is where things take you. So the scenario: I'm using squid and tproxy to transparently ...
Mart Allini's user avatar
0 votes
0 answers
115 views

I want to use full /56 or /64 subnet in squid proxy change on every request instead of 1 ipv6 only

I want squid proxy to use full /56 or /64 IPv6 subnet instead of one Ipv6 I have two servers with squid proxy installed and my servers have been assigned with /56 and /64 ipv6 ranges But on both ...
Nova's user avatar
  • 5
0 votes
0 answers
83 views

Squid Proxy - Hide Signs of Proxy Being Used

I've installed a Squid Proxy Server in a Windows VPS. I will route browser and some other programs in my PC through that proxy, and I would like that all requests are sent to the websites just as if I ...
FrO's user avatar
  • 1
0 votes
0 answers
26 views

squid reverse proxy log

we have an exchange server behind a squid reverse proxy there is many failed account events in exchange, the exchange event viewer display the IP address of the reverse proxy as source address in ...
skacem's user avatar
  • 1
0 votes
0 answers
36 views

squid v5.5 is not logging successful ssh connections on oracle linux 9.2

I adjusted my acls to allow port 22 traffic, however my access log is not showing succsssful port 22 connections only denys and the "denys" show a http RC of 200. access.log is below [20/Sep/...
dirman's user avatar
  • 3
0 votes
0 answers
50 views

Squid didn't cache artifacts, which was downloaded from remote repository with authentication

I have a latest Squid, installed in my network. SSL bump and other options has been configured. Artifacts, which I download from HTTPS sites, are cacheing successfully(as example https://downloads....
Mak S's user avatar
  • 1
0 votes
1 answer
65 views

Excepted behavior for overlapping dstdomains entries in Squid 4.1

Per documentation, if using dstdomain and having overlapping entries in the list, Squid should generate a warning message. For example I have this in my /etc/squid/squid.conf: acl dst_domains ...
John Heyer's user avatar
2 votes
1 answer
53 views

squid: Unable to allow 10.10.11.0/24 but 10.10.11.0/23 works

Im unable to make a working acl with CIDR over `/23` (squid 5.7 on Debian) For example i got this config (working): acl servers src 10.10.11.0/23 http_access allow servers ... http_access deny all ...
mylan's user avatar
  • 51
0 votes
0 answers
55 views

Squid cache 302 responses

I have a very specific use case in which I need to cache EVERYTHING. Including 302s. I know it's technically against the HTTP RFC, but I know those redirects will always be the same and I need them to ...
Martin Horský's user avatar
0 votes
0 answers
312 views

Serving squid proxy behind HTTP load balancer

I want to build a system where we have 3 squid proxies server running behind load balancer. Currently squid proxy is running on http port, (help for https_port is also appreciated) dns_v4_first on acl ...
tbhaxor's user avatar
  • 101
0 votes
0 answers
173 views

Squid Proxy - allow http for specific url

I'm learning about squid proxy in a Windows environment. I have verified that the list of allowed urls in a notepad file and add it to squid.config file as path of allowed url is functioning well. ...
Praveen Sivakumar's user avatar
0 votes
0 answers
426 views

Connecting squid to upstream proxy using CONNECT request

I'm setting up a reverse proxy that has to forward all the requests to a given url.com/resource. Now, that resource is behind a proxy, so it has to use the CONNECT request. The idea is that squid, ...
dario's user avatar
  • 1
0 votes
0 answers
271 views

[SQUID-6.1]: Setup Squid ipv4 to ipv6 proxy

I'm trying to setup a squid proxy that will accept multiple inbound connections on one IPv4 across a range of ports, and for each port connection to connect out on a unique IPv6 address. I can ...
Alexander's user avatar
0 votes
0 answers
42 views

Squid bypass site don't work (as expected)

Here is my squid.conf http_access allow localhost acl whoer dstdomain .whoer.net http_access allow whoer never_direct allow whoer # And finally deny all other access to this proxy always_direct allow ...
comm1ted's user avatar
  • 101
0 votes
0 answers
237 views

Squid doesn't use IPv6 address

I've got a small issue with my squid (forward) proxy server. It keeps using IPv4 as outgoing IP address even if remote server and client have IPv6 connectivity. My client's IP address: devuan@devuan:~$...
Tchupy's user avatar
  • 1
0 votes
0 answers
45 views

In a Linux environment, does the order of commands "ip Route" affect routing?

I attached multiple ethernets to the server, one for LAN and the rest for PPPOE. Each packet connected to each PPPOE was sent by itself. It works fine on CentOS 6.10. In the 8 series, packets are ...
Cholho Lee's user avatar
0 votes
0 answers
38 views

grab https URL without import CA into PC from squid access log

1.The domain aa.com was belongs to our company and we have the public and private key of Wildcard certificate about aa.com. 2.We want to grab all of the URL from the access log which about *.aa.com, ...
insmod's user avatar
  • 1
1 vote
2 answers
4k views

Transparent HTTPS proxy with squid using SNI

Final update: I ended up using nginx as squid proved to be difficult to work with, see last update at the end for more detail What I'm trying to do is setting up a transparent HTTPS proxy with squid ...
Alireza Dastyar's user avatar
0 votes
0 answers
384 views

Use squid to forward http(s) requests based on domainname

I have installed 5 LXC containers in Proxmox. Each container has a Apache2 webserver up and running inside, pointing to a registered domain. So: container1 points to example1.com and has a local ip ...
kzpm's user avatar
  • 99
0 votes
0 answers
65 views

Should I use a Squid on the host machine or a virtual machine?

I have a server from SoYouStart and 32 failover IPs. I need these IPs for proxy (for scraping). Should I set up Squid on the host machine (Proxmox) or on a virtual machine like Ubuntu + Squid? I read ...
robokonk's user avatar
1 vote
1 answer
175 views

Rsyslog prepend text to messages in certain facility

OS: Debian 11 Rsyslog version 8.2102 Squid version 4.13 I am attempted to remote log squid logs without going through a file. I am using the following logging line for the store log in squid.conf: ...
user avatar
0 votes
0 answers
252 views

YouTube app not working with squid. What urls to bump exclude?

I have squid running with SSL Bump. The rest of the squid settings are basically defaults. I can access YouTube just fine from a browser but the android app is not working. I've already excluded ...
J'e's user avatar
  • 83
0 votes
0 answers
37 views

can't block a domain which is redirected by aws

This is my first year at university and This is also my first time trying to configure a server. They want me to block some https-web. I was able to block all websites with iptables except one. I'm ...
endiku's user avatar
  • 1
0 votes
0 answers
79 views

squid proxy random IP time change

I have included two IP addresses in squid with random TCP outgoing addresses but I need them as one IP will be active for 15 minutes and the other one will be active for 15 minutes and this will ...
Manojit Das's user avatar
0 votes
0 answers
151 views

Squid proxy: How to pass param to ext_sql_session_acl

I'm trying set external acl that check against database if authenticated user is overcuote, for that I try to configure acl rule as: external_acl_type CHECKOVERCUOTE ttl=3600 negative_ttl=10 children-...
Francisco's user avatar
  • 141
0 votes
0 answers
249 views

How squid whitelist domain + exclude certificate error domain

I have Squid Setup as a transparent HTTP+HTTPS proxy in my network, using SSL-Bump. I am having trouble with a handful of domains and those domains showing me cert errors while dumping and splicing, ...
sanket jaiswal's user avatar
-1 votes
1 answer
101 views

How to redirect network traffic using squid and nginx to outer page?

My school network blocks access to game pages, more exactly colonist.io. We have an access to linux server for learning purposes. I'd like to avoid blocking by setting up some kind of proxy server on ...
MijatTomić's user avatar
0 votes
1 answer
1k views

Squid configuration to forward another proxy for internet only

I just installed squid proxy server on Linux. I am now configurating squid . I have a set of ip defined for intranet. Internet are those that is not intranet. If destination is to internet, I want the ...
Hairy Ass's user avatar
  • 101
0 votes
1 answer
326 views

How to create Iptables rules for squid to only handle web traffic request

I'm using Squid Proxy for (DNS Filtering), I have configured squid proxy behind my GCP Cloud NAT in transparent mode to intercept HTTP and HTTPS Web Traffic, I have added only below rules to redirect ...
sanket jaiswal's user avatar
1 vote
0 answers
103 views

How to allow squid user to use only certain ports that are bound to ip

In my squid configuration, I map each ip to a specific port. acl port_3000_acl myport 3000 acl port_3001_acl myport 3001 http_port 3000 http_port 3001 tcp_outgoing_address 185.166.196.238 ...
timur zolotov's user avatar
0 votes
1 answer
195 views

Forward all incoming traffic without redirect

How to forward all traffic to another domain? serverA has a serverA.com domain serverB has a serverB.com domain I want to forward all incoming traffic from serverA to serverB For example, when ...
Joe's user avatar
  • 11
0 votes
2 answers
37 views

Will my Harddisk still be written when i delete a logfile in use on Debian?

Due some Bug testings there are tons of request made to my squid server on debian. Because it is a test i can't disable logging, restart the Server or block the requests. Due the growing size of the ...
Deex's user avatar
  • 131
1 vote
0 answers
250 views

Squid as an explicit & terminated forward proxy / bridge

Background: we've got some "old" IoT devices running an older SSL stack that must connect to a newer server over HTTPS. We'd like to setup a forward proxy / bridge so that: Device uses its ...
smertrios's user avatar
  • 111
0 votes
1 answer
1k views

Squid Reverse Proxy with SSL

I'm trying to use squid as a reverse proxy in front of a single website, to decrypt the SSL on the proxy and then to encrypt the connection to the webserver (this is in order to use squid as an ICAP ...
user3811862's user avatar
0 votes
2 answers
4k views

How can I avoid the error TCP_MISS_ABORTED/000 when uploading files through squid?

While uploading big files, > 10MB, through a squid V5.6, I noticed that they failed and/or were retried. The error has been logged multiple times in the logs: 1671092710.452 423 ::1 ...
Zioalex's user avatar
  • 131
0 votes
1 answer
410 views

A proxy forward to redirect some calls to avoid crossing the proxy. Only redirect proxy forward

I'm trying to redirect with 301 some https calls with some proxy forward. The idea is not to go through the proxy, but to return a 301 redirect with the new location. I've got two cases: https://...
albertoiNET's user avatar
0 votes
2 answers
131 views

How to show an internal static page to IP addresses list? [closed]

I have a ubuntu 22.04 server, a list of ip addresses of users on my local network and I want to redirect http/https traffic from this list to a local informative html page. Similar to how a hotspot ...
acgbox's user avatar
  • 398
1 vote
1 answer
1k views

CONNECT Proxy over Squid with TLS termination

I can create a regular http(s) proxy with Squid, which can then be accessed at http://my-ip. I want to have TLS termination, so I can access httpS://my-domain. I have generated ssl certs using certbot ...
d9ngle's user avatar
  • 59
0 votes
1 answer
358 views

Squid in docker returns 502 but works when run on host

I'm using the same config for squid 5.6 that runs on a host machine and in docker. When I run it on the host (Ubuntu 22.10) it works just fine but when I run it from ubuntu/squid image I get 502 bad ...
chingis's user avatar
  • 243
0 votes
1 answer
278 views

Squid + OpenVPN : 403 Forbidden

I need to have a proxy server for an already configured and working OpenVPN server. So I install Squid 5.2 on Ubuntu 20.04. To test, I changed the following line in the /etc/squid/squid.conf file and ...
Omid Shojaee's user avatar
0 votes
1 answer
193 views

How to configure a forward proxy to keep a historical mirror of the websites accessed?

I'm scraping information regarding civil servants' calendars. This is all public, text-only information. I'd like to keep a copy of the raw HTML files I'm scraping for historical purposes, and also in ...
Vítor Baptista's user avatar
0 votes
0 answers
30 views

A web server that takes contents from another one, and serves it with slightly modified HTML

I have a web site a.com (please note: I own and run it). I want to be able to run a slightly modified version of it on b.com . The contents would be identical; however, I would apply some minor ...
Merc's user avatar
  • 807

1
2 3 4 5
28