Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
0answers
2 views

Squid upgrade stops authentication

Recently we installed a squid proxy server for a customer who was using an older server. New server is ubuntu 14.04.2 with squid 3.3.8. We used the same password file to authenticate users. The ...
-1
votes
0answers
11 views

SQUID and GreasySpoon(ICAP server) changing the header

I am trying to use GreasySpoon and SQUID. As basic case i just wanted to change header of the response. //——————————————————————- // ==ServerScript== // @name Add_Header // @status on // @description ...
1
vote
1answer
25 views

Squid cannot log to syslog

According to this documentation: http://www.squid-cache.org/Doc/config/access_log/ squid should be able to log to rsyslog with the following directives: access_log syslog:daemon.info squid cache_log ...
0
votes
0answers
6 views

Squid 3.1.22 with multiple delaypools for different subnet

i have a squid installed with squidguard. everything works great and now i want to implement a squid multi delay pool. i want to separate webspeed for every subnet but have also one unlimited to ...
0
votes
0answers
27 views

How to block external sites using squid as forward proxy

I'm currently blocking sites using an acl, i.e.: acl block_site dstdomain "/etc/squid3/blocked". That works great, however, I'm wondering if it's possible to also block all external domains? For ...
0
votes
1answer
17 views

Squid delay pools delay_parameters bandwidth

I can not understand the documentation about delay_parameters params in squid. delay_pools 1 delay_class 1 4 delay_parameters 1 -1/-1 -1/-1 -1/-1 600/8000 What is the difference between the first ...
0
votes
0answers
18 views

Squid transparent https certificate error: ssl_error_bad_cert_domain

I have a squid transparent proxy (squid 3.4 in pfsense 2.1) with ssl_bump for https, all my clients trusts squid as CA and many sistes are well working... However I have some problem with websites ...
0
votes
1answer
25 views

Client not found in kerberos database while getting initial

I am installing Squid3 on Ubuntu 14.10 and I want to integrate it ADDS on windows server 2012 using kerberos 5. My infrastructure are as follows: Default Gateway: 192.168.1.1 DNS & Domain ...
0
votes
0answers
18 views

Integrate Squid Kerberos auth and Squidguard ldapusersearch into AD

I'm having trouble with Squid Kerberos auth and the Squidguard ldapusersearch that I use to apply ACLs by Active Directory groups membership. The problem is : Squid and Squidguard see my user as : ...
0
votes
1answer
28 views

Pfsense Squid external ACL with a php script

I want to use a PHP script to allow or deny Squid proxy request ina pfsense installation, so I'm using this configuration for external ACL: external_acl_type mysqlAuth %SRC /usr/local/bin/php -f ...
0
votes
0answers
13 views

SquidGuard reduce memory consumption

I trying to run squid3 on a small vm with only 512mb ram. I have these memory specific values configured: cache_mem 64 MB memory_pools_limit 5 MB maximum_object_size_in_memory 8 MB cache_dir ufs ...
-1
votes
2answers
28 views

haproxy vs squid ssl bump and dynamic generation

I would like to know if following 2 features of squid are available in haproxy? http://wiki.squid-cache.org/Features/DynamicSslCert http://wiki.squid-cache.org/Features/SslBump any help would be ...
0
votes
1answer
114 views

Missing ssl_crtd folder with Squid 3.5.2 / CentOS

I am attempting to install Squid 3.5.2 to utilize improved sslbump functionality with websites with HSTS. I'm following the documentation on a fresh CentOS 7 VM installation. The issue I'm having is ...
0
votes
0answers
33 views

How to set up squid to proxy a remote HTTPS private repository on port 8443?

I have a cloud of machines that access a remote private docker registry. Unfortunately bandwidth between the remote registry and the local cloud is quite low. A registry mirror would be great! but ...
0
votes
1answer
73 views

Setting up Squid Transparent Proxy on a machine separate from the router

As explained in the title, I'm trying to set up a Squid Transparent Proxy on a machine separate from the router, and also separate from the private network I want to filter through the proxy. The ...
0
votes
2answers
14 views

Why squidguard tell me default acl is missing but it isn't?

I have a problem with squidguard when i want to create .db files. When i do : squidGuard -c "/etc/squid3/squidGuard.conf" -C all -d It tell me : squidGuard: FATAL; default acl not defined in file ...
0
votes
0answers
42 views

Squid3 don't caching, always TCP_MISS/200

I have installed Squid3 and now I wont set it to caching WMTS's. This is valid WMTS service url http://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO and here is link to image from this ...
-1
votes
1answer
33 views

Make squid (or tinyproxy) return cache EVERYTHING and return hits on Internet outage

I am wondering how to configure squid (or tinyproxy) to cache EVERYTHING and return HTTP 200 hits, even on Internet outage or if original source is 404? Basically, I want squid to look in the cache ...
0
votes
0answers
5 views

Squid 3.1 Monitor HTTPS logs [migrated]

I have configured squid3 on Raspbian Wheezy OS, here is the configuration file (squid.conf): acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl ...
1
vote
1answer
52 views

Squid3 CONNECT imap.gmail.com:993 TCP_DENIED:NONE

I have the following configuration under squid.conf. However, when my Blackberry email client attempts to fetch new emails, etc. Squid access log show the following error: imap.gmail.com "CONNECT ...
1
vote
0answers
46 views

Setup proxy, dns, file sharing (BIND9, SQUID3, SAMBA4) on lan server [closed]

Lately I buy new server to company and I need help with configure it. Before we have QNAP NAS with web-gui so editing config files wasn't needed. Now I need do it by hand. So I want to have: DNS ...
0
votes
1answer
38 views

Squid running in intercept mode on same machine as browser keeps giving access denied

It's been a while since I last touched squid and I've been sitting here figuring out this problem since the last few hours why my squid setup on this standalone server machine (behind router nat) ...
0
votes
0answers
19 views

Can Squid be configured to use the incoming IP address as the outgoing Address if multiple IPs are used on the server?

At the moment I have to define rules for all local ips like this: acl ip1 localip 1.1.1.1/32 tcp_outgoing_address 1.1.1.1 ip1 acl ip2 localip 2.2.2.2/32 tcp_outgoing_address 2.2.2.2 ip2 acl ip3 ...
1
vote
1answer
46 views

Trouble setting up a transparent proxy

I have been trying without success to setup a transparent proxy on a router like computer. Most examples that I have found don't have the gateway and proxy on the same computer, so I may be looking at ...
-1
votes
0answers
28 views

Transparent proxy Squid with 1 NIC without virtual interfaces

I'm trying to setup a transparent proxy in an existing LAN. I've seen many tutorials where Squid is being implement as a router in the network, even with 1 NIC, where 2 virtual interfaces are created ...
0
votes
0answers
16 views

Disable Squid ACL rules after redirects

I have a squid clamav proxy with some fairly restrictive ACL set up for particular sites and urls on those sites that we trust. Unfortunately, a site we now wish to trust distributes its content ...
0
votes
0answers
49 views

How to pass TCP-CONNECT from Internet through a Reverse Proxy to reach my local server?

I have this scenario: Some institutional severs between my institutional server and my VPS in Internet exist like men in the middle (Routers, Firewalls (NAT & Filters), DNS, SMTP relay, Proxy, ...
0
votes
0answers
25 views

Basic ncsa authentication is not workling in squid

I'm using squid-3.3.8-12.el7_0.x86_64 on CentOS 7 I've configured squid for basic authentication, md5 password works, but if fails when I try to use either blowfish or sha password. Below is the ...
0
votes
0answers
31 views

Squid: bypass url_rewrite_program when request is https

I have a url rewriter working in squid currently. The problem is that, while it works fine for HTTP, HTTPS requests obviously don't work, even when rewritten with the same URL (because my server would ...
0
votes
1answer
28 views

Squid both transparent and forward mode

Is it possibile to configure squid for both transparent and forward-authenticated mode (maybe listening two different tcp ports)?
0
votes
1answer
45 views

Allow a certain URL path with Squid

I'm using Squid 3.4 on Debian, and I want to know how to allow certain sub-URLs while banning the rest of them. Particularly, I want to ban access to reddit.com/* but allow access to ...
1
vote
0answers
108 views

Squid intercept proxy stuck with forwarding loop

I'm trying to set up a debugging proxy using Squid, mainly to test our own client communications library for various proxy types (one possibility with our client, is to connect to an external ...
1
vote
1answer
75 views

Squid Segmentation Fault?

I'm currently fixing an issue with one of our production servers. The issue is related to squid not able to run properly. When I try to run service squid start/stop, it throws an error: 2015/03/11 ...
0
votes
3answers
43 views

How do I configure all clients use proxy with out making changes to thier configuration

I am looking to configure a content filter for my network. I have squidgaurd configurared and working. I would like to have all clients use it. This includes clients I have no control over (BYOD ...
1
vote
1answer
49 views

Kerberos keytab permissions

Can you share some thoughts on whether a Kerberos keytab should be readable only by root - under all circumstances? Or are there exceptions to this rule? I am setting up a Squid proxy on Debian ...
0
votes
0answers
224 views

squid transparent proxy for https / ssl trafic

I am trying to configure squid as transparent proxy , I followed below steps to configure Downloaded squid3.5 from the website, As squid3.1 will not support for ssl bump ./configure ...
0
votes
0answers
61 views

Squid NTLM authentication started to fail

I have a squid server authenticating against a Win2k3 AD. The authentication is failing since today and I'm sure it is something on the windows side because on the linux machine there were no ...
-1
votes
1answer
73 views

Can squid work as reverse proxy server for ftp, pop3 and smtp [closed]

OS is Ubuntu 14.04 Can squid work as reverse proxy server for ftp, pop3 and smtp? I need a server can work as reverse proxy server mode to proxy the http and ftp. I configure quid3 but I find it can ...
0
votes
0answers
69 views

Squid3 Reverse Proxy - Force Cache and Suppress Version

I have been using pfSense for about 2 years now and I love it. One of my favorite features has come to be Squid2 and Squid3. Right now I am using Squid3 to run both proxy and reverse proxy. There are ...
0
votes
1answer
95 views

How to Force Client To Browse Internet Through Squid Proxy

I am using Windows Server 2012 in which i have share internet throw NAT to secondary lan card using Routing and remote service and now the problem is that when my client are browsing through proxy ...
0
votes
1answer
44 views

transparent proxy (SSL error)

Right now we are having transparent proxy in our network environment. we have been set proxy settings to browsers in all systems. While accessing the https sites in browsers no issue but few of ...
2
votes
1answer
49 views

Squid problems with iptables

I've installed and configured Squid on Fedora Server 21 with full updates. My proxy's IP is 145.130.33.133 with port 3128. First I modified my squid.conf with my rules and everything. On my laptop ...
1
vote
1answer
76 views

Squid SSL intercept works for most google sites but not www.google.com

I am able to access pretty much all of Google's .co.uk services now that I have configured squid to use SSL. I can also view my certificate information in the certificate being presented by Google. ...
0
votes
3answers
68 views

How to route all local trafic to Squid?

I have a working squid caching server which is accessile through 127.0.0.1:3128. I'm trying to route all my trafic(and if possible all my virtual machines) to 127.0.0.1:3128. I'm using vagrant and ...
1
vote
0answers
107 views

Hide squid in the header

I have a squid server installed, and I'd like it to be hidden when looking into the headers. First of all, I was getting both squid and the version on the headers: curl -i ip_address HTTP/1.0 400 ...
0
votes
0answers
32 views

multiple OUs in LDAPSearch

When working with Group ACL in PFSENSE+SquidGuard: In the Client-Source parameter, can I place OU and how? This is because I'm having multiple OUs with users to be added in the rule. Would the ...
0
votes
0answers
159 views

Port 5228 on squid proxy server

I am using squid. I am trying to use the service for whatsapp which lies on port 5228. I wish to intercept 5228 for logging purposes. I already intercept 80, 8080, 443(ssl bump) on squid and it has ...
-1
votes
1answer
167 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
-2
votes
2answers
218 views

Nginx as a proxy server for a local network

I'm currently using squid as a proxy server for my local network, but I'm not entirely satisfied with it. Is Nginx also suitable for use as a proxy server on a local network? Is it actively being used ...
0
votes
1answer
64 views

squid3 FAIL with cache_peer round-robin on 127.0.0.1 different port

I have 3 tunnels end to a Debian running squid3 (ports 9001 to 9003). At start of each tunnel runs a proxy. I try to load-balance those proxies this way: http_access allow all http_port 4128 ...