0
votes
0answers
12 views

Allow some destination ip/hostnames to bypass acl in squid

We have setup squid for an office environment. We are blocking many multimedia file types like mp3, mp4 etc to prevent bandwidth misuse. Now we have setup media streaming server on our gateway server ...
0
votes
1answer
31 views

squid3 blocking access to particular IP not working

I have installed a squid3 on debian and using it as a proxy server. after some time I want to block the particular user using IP address. So I have defined this rule in my squid.conf file but it is ...
1
vote
0answers
32 views

squid apply rules to a some users

Good day: I have a squid 2.7 stable9 installation that works. It is connected to LDAP and the users can authenticate perfectly. I have different rules for instance to block a few websites during ...
1
vote
1answer
195 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
1
vote
1answer
468 views

Logrotate: Postrotate setfacl failed with no such file or directory error

I set some extended ACL entries for /var/log/squid3/ and /var/log/squid3/access.log. sudo setfacl -m u:jetty:r-x,g:adm:r-x /var/log/squid3 sudo setfacl -m u:jetty:r--,g:adm:r-- ...
3
votes
1answer
254 views

Squid 3.2 - Proper configuration for random outbound IP with a single user authentication?

I'm attempting to use AclRandom for Squid 3.2 and I think I'm a bit confused on the proper method for this. Here is my configuration: http_port 3128 auth_param basic program ...
0
votes
1answer
142 views

Squid “refusing connections” with big ACL

I've successfully set up squid and it's working as is should. I'm using "Squidman" on OS X Server (underlying squid version is 3.1.12). However, I want to use squid to block certain porn sites, so I ...
0
votes
0answers
394 views

Squid Proxy Splash page always showing up

I am further along with using Squid to present a splash page to guest users, and I wrote a basic HTML splash page to be presented to users. I wrote the Splash page HTML to grab the url from Squid ...
1
vote
0answers
46 views

Can Squid3 access PHP Helpers

Can Squid3 use PHP helper programs other than for ACL and redirect? I need Squid to use a PHP program (with mysql access) to set the parent proxy that should be used for a particular connection, so ...
1
vote
0answers
454 views

Squid Random Shared ip proxy

Running Squid with a acl random ip setup, Have 745 ip's in the pool and we are about 10 users that use it with tools that are running multiple threads, Check rankings on Google etc Issue: We did ...
1
vote
0answers
306 views

Squid 3.1: external_acl_type ttl won't work

I have custom script for handling Squid3's external_acl_type and it works fine. In this script (btw, its PHP) I turned on logging every request into the file. As far as I know from docs TTL value ...
0
votes
1answer
748 views

Squid access logging only specific ACLs?

In squid, is it possible to enable access logging only on a specific ACL? If so, how? We have done quite a few searches and were unable to find the proper conf syntax :(
2
votes
1answer
1k views

Exclude some IPs from a subnet in squid

I have squid configuration to allow access to the proxy from a particular network localnet. I'm blocking access to media to all users except some IPs within the subnet. Here is the relevant part from ...
1
vote
0answers
188 views

Can I make an ACL in squid for transparent connections?

I have a squid proxy that transparently intercepts connections from an internal network, and is explicit for connections from another network. I want to use authentication for the external network, ...
0
votes
1answer
614 views

How do I configure Squid Proxy located at a different location to route internet traffic?

I have a Linux box (Ubuntu 9.10) at a different location. I installed squid proxy and tried using that IP and port (opened 3128 at that location) in Firefox. I can't get it to work. My current ...
0
votes
1answer
991 views

Specifying multiple acl conditions on one acl line of squid.conf

In squid I need to combine acl conditions in one line: e.g. acl allowed_conn src 10.40.50.5 && dstdomain intranet.loc acl allowed_conn src 10.40.50.6 && dstdomain anothersite.net I ...
1
vote
0answers
222 views

Is there a convenient UI to control squid acls?

I'm looking for a convenient way to control access controls (specifically, to block URLs based on regex matching) of a squid server running on OS X. I checked out webmin and it seems incredibly ...
1
vote
1answer
116 views

Squid Acl rule question

In squid.conf, there are directives for safe ports and ssl ports: acl safe_ports (list of ports) acl ssl_port 443 then: http_access deny !safe_ports http_access deny !ssl_port My question is: ...
0
votes
1answer
193 views

squid - http_access

There is a line in squid default configuration: # Deny CONNECT to other than secure SSL ports http_access deny CONNECT !SSL_ports acls are applied from top down, so CONNECT acl will deny access to ...
0
votes
3answers
878 views

How to block website access using squid

I would like to block black listed URLs and Domains using the squid proxy server. In the tutorials, what is mostly shown how to block one URL/Domain, however I would like to have the URLs/Domains in a ...
1
vote
2answers
2k views

squid acl policy using username

i configure squid to authenticate using win AD, but users can connect from different ip address and i cant set policy base on ip for different user. is any way to set acl base on username? i found ...
2
votes
1answer
691 views

Squid / IPtables allow only connections when accessing a certain proxy domain

I'm not sure if this is a Squid subject or IPTables. In my Squid configuration I have something like this setup: http_port proxy.example.com:8080 I would like Squid to only accept connections from ...
2
votes
1answer
859 views

Adding wild card to squid ACL

I want to add a wild card to squid ACL. acl mp3_ext url_regex s-i *.mp3
0
votes
3answers
920 views

Configuring Squid proxy server

I have installed squid on a mac mini and would like to configure it to be used as a proxy Any ideas where i would start, especially setting up the ACLs, am using webmin as the GUI tool for ...