Tagged Questions

0
votes
0answers
30 views

Squid configuration for accessing https site requring client certificate using url-rewrite

I've never dealt with setting up a proxy server and that is why a bit puzzled about how to set up a rather complicated config.Help me, please! I've got squid running with login/password ...
0
votes
1answer
32 views

Filter HTTPS URLs with non-transparent proxy

I have set up a Squid v.3.1 + Squidguard, the proxy is configured on each browser via a proxy.pac file. Now if an user goes to a blocked site with HTTP (e.g. http://www.facebook.com) the Url filter ...
-2
votes
1answer
47 views

Can Squid or other open-source proxy server be set up to process HTTPS encrypted traffic? [closed]

I would like to set up a home proxy server which would filter ads and viruses even before they get to the browser. The problem in this case is that many web sites use encrypted HTTPS connections and I ...
1
vote
0answers
44 views

Squid ssl_bump server_first

I am trying to test the ssl_bump server_first Squid directive, but I did not understand how it works. As far as I understood the ssl_bump directive has three working modes: None: HTTPS traffic is ...
0
votes
2answers
79 views

URL filtering HTTPS traffic

the configuration that I am dealing with is a transparent HTTP proxy: on the firewall all the HTTP traffic (port 80) is redirected to the proxy via iptables; Dansguardian is installed on the proxy, ...
1
vote
2answers
139 views

BYOD and Google SSL

I run a school network with a BYOD program in place. I have a linux proxy (squid) with content filtering by Mind (fork of dansguardian). Everything works fine over HTTP, the problem is of corse when ...
0
votes
0answers
96 views

set https forwarding with squid and iptables

I have a Linux as router, eth0 (192.168.0.60) connect to LAN, eth1 (10.100.33.239) connect to Internet. squid works well, I can set 10.100.33.239:3128 or 192.168.0.60:3128 as proxy in web browser and ...
0
votes
0answers
186 views

squid configuration only for http, how to show an error for https thru squid

squid Version 3.1.11, not transparent 1200 LAN clients surf the web thru the squid server. Browsers' configuration, programmatically pushed to clients, is http server:3128 https --- On the ...
0
votes
0answers
123 views

Not able to block https requests while able to block http requests in squid server

I have configured squid in my CentOs 6.3 server it's working fine now i want to allow facebook access only in lunch time i have wrote a acl for this but it's blocking http access when i try to open ...
0
votes
1answer
163 views

Block HTTPS traffic to only selected sites

The Squid at my office is currently set up as a transparent proxy. I tried to block sites like facebook.com and twitter.com and was successful because just typing in those domains do not default to ...
0
votes
0answers
132 views

Logins to many website not working behind squid proxy [closed]

I have configured squid proxy on the LAN gateway. The configuration is as below :- forwarded_for off auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/passwd auth_param basic children 3 ...
0
votes
0answers
81 views

Squid: How to give the user a message when CONNECT is denied or goes through but page itself gets url_rewritten and redirected?

My question pertains to using Squid as a url-rewriter and problems encountered when used in conjunction with https pages. Setup Basically, we allow all CONNECTs and http_access requests. The ...
0
votes
1answer
2k views

Squid proxy users in HTTPS connection

I saw in my Squid proxy log that I cannot log username in an HTTPS connection. Do you think this is my configuration error, or it is impossible due to the encryption? If the answer is the second one ...
0
votes
0answers
359 views

How to setup Squid to allow outgoing HTTPS calls on FreeBSD jails where Squid acts as both proxy and accelerators?

This should be actually a very obvious setup, but somehow I have missed the obvious step! Default assumptions: FreeBSD 6.4-RELEASE-p11, Squid 2.7.STABLE9. These are not changeable, so "upgrade to the ...
1
vote
2answers
2k views

Using squid to capture https - how to do non transparent proxy?

The root of the problem: I need to block access to https://somewebsite.com/folder/index.php; but allow access to the rest of the site. I thought the best way to accomplish it would be through a proxy ...
3
votes
4answers
2k views

Is there any way to cache HTTPS requests in a proxy server?

We are using Squid proxy server in our environment and we want to cache HTTPS requests. Is there any way to configure Squid or in general a proxy server to cache HTTPS requests?
0
votes
1answer
896 views

Logging HTTPS traffic through a proxy

How do I configure squid (or any other) proxy server to keep log of URLs visited, and files downloaded, over HTTPS? Is it possible?
0
votes
1answer
388 views

Encrypt client connection with squid forward proxy using SSL

I'm setting up a Squid forward proxy and I'm wondering if I could configure Squid in such a way that the connection from my web browser to squid is https regardless of whether the connection from ...
1
vote
1answer
524 views

How to configure squid for inspecting https requests and pages?

I wish to allow squid to block https requests by full URL regex matching (not just domain) and to block https responses by inspecting page contents. Is there some step by step guide for how to set ...
1
vote
1answer
252 views

Squid: is there a way to log https urls in their entirety and/or block according to full url regex?

It seems that squid only "sees" the domain name for https requests. Is there any way to configure it so that the full url can be logged and/or matched within ACLs? Thanks.
0
votes
1answer
197 views

SQUID SERVER (or whatever) HTTPS to HTTP

I am not too familiar with Squid or IPTABLES, I have an idea that this will work but I cannot find a good example via Google. In a nutshell, I am trying to mimic an SSL Accelerator. Like a ...
0
votes
1answer
890 views

Squid url rewrites https>>http

I'm exploring some uses with Squid proxy 2.7 and I have seen a good number of examples for url rewrites that take urls such as: http: //somesitename.com and then the rewriter can change the url to: ...
0
votes
2answers
2k views

Filter SSL connections with squid proxy

We have a Ubuntu server between our network & the firewall for URL filtering. Of course SSL connections are a problem. I am looking into ways of doing some basic filtering. I have even thought of ...
0
votes
1answer
221 views

Squid incorrectly serving cache HIT after SSL unwrapping

We have a cloud setup like this: User Request -> Perlbal (SSL unwrapping) -> Squid (Caching) -> Apache -> HTTP Response We support SSL on some pages, and not on others. Everything ...
2
votes
1answer
3k views

squid and https URLs

I have installed squid as a non-transparent proxy/cache server with --enable-ssl configuration. It is a child of a parent proxy server proxy1.ut.ac.ir. Everything is OK for HTTP URLs, but any HTTPS ...
2
votes
3answers
967 views

How can I set up a reverse proxy for several web applications and static content?

Update: based on Jesper Mortensen's response, here is some more information. The applications are based on Perl's HTTP::Daemon. I do plan to deploying them on a Linux server. Each application does ...