Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
0answers
13 views

Double DNS resolution at Squid proxy

I wanted to check if anyone faced this scenario or not. Any input if someone can share greatly appreciated. Following is scenario:- I have set of workstations are accessing internet directly but for ...
0
votes
0answers
38 views

squid Failed to select source for '[null_entry]'

I created a proxy server using squid on Centos 6. It works fine with http but I can't open https websites. Squid listens to 443 port and the log file shows this error: 2016/03/04 12:50:46| Failed to ...
0
votes
1answer
123 views

images not displaying with squid proxy page

We are using a Red Hat 6 squid server to redirect HTTP request for custom notifications. Squid provides several built in splash pages however we are using a slightly customized one taken from a built ...
0
votes
0answers
12 views

IIS rejecting HTTP/1.0?

I have found an issue with some old proxy servers in our environment, is it possible that some webservers will only accept HTTP/1.1 requests? We have a very old squid server, and doing a wireshark on ...
1
vote
3answers
401 views

CentOS7 Kerberos Auth: Improper format of Kerberos configuration file;

I'm working on setting up a Squid 4.0 explicit proxy for group based AD authentication against a Active Directory domain (Server 2012 R2) with SSL bumping on a minimal CentOS 7 (64b) install. The ...
0
votes
1answer
49 views

Can squid block an access to the specific IP-address which is resolved with a domain name?

I have a .pac file like below. if (dnsDomainIs(host, ".example.com")) { hostip = dnsResolve(host); if (isInNet(hostip, "202.0.0.0", "255.255.255.0")) { return "DIRECT"; } } Now ...
2
votes
1answer
133 views

Integrating squid with active directory

I am trying to integrate squid as a web proxy for my users in active directory. I have followed the tutorial in the squid site in here. When i run the command : msktutil -c -b "CN=Administrator" -s ...
0
votes
1answer
23 views

Squid3 don't open port externally

I've just installed squid3, set acl's to the local ip addresses I want to be able to use it and also filtered port 3128 in iptables. Is it possible I can close this port completely on the external ...
0
votes
0answers
54 views

solutions to filter traffic with group based rules

I have a 25 computer network with 1 pfsense box (with squid installed) and 1 openLDAP server configured & working , 70% of the network is wired the rest is password protected wireless. Right now ...
-1
votes
1answer
14 views

squid never_direct to certain domain and computer [closed]

I need configuration squid proxy server to redirect one ip (one user) to parent proxy, also certain domain. My configuration at now : acl vkdomain dstdomain vkontakte\.ru vk\.ru vk\.com \.vk\.com ...
0
votes
3answers
34 views

how to dynamically route requests

I have this network, red - 3 computers with internet connection - every computer has its own different connection to internet (over VPN) blue - proxy server, squid green - computers in my local ...
0
votes
1answer
42 views

Squid reverse proxy: maintenance mode

Currently I am trying to configure my squid (3.1) reverse proxy to always display a static webpage when the one and only backend webserver is under maintenance. There is no need for an automatic ...
1
vote
2answers
185 views

Trouble getting transparent Squid forwarding proxy working with ssl

I have an environment consisting of four servers networked together. One server acts as the server, and the other three act as clients for running automated tests and Linux benchmarking using ...
0
votes
0answers
118 views

Websocket (Secure) behind transparent proxy - possible workarounds

I need some help with making ws / wss connections possible behind a transparent proxy. It is obvious that websockets are not supported by Squid (or older Bluecoat proxies) in transparent mode. However,...
0
votes
0answers
12 views

Proxy only certain domain

I use squid as a proxy only without caching anything.How can i proxy only domains in a whitelist.Any other request should be forwarded directly (i.e skip the squid proxy ) not blocked. never_direct ...
0
votes
1answer
61 views

How to tell squid use Source IP address for sending requests?

I have two interfaces in my ifconfig, eth0 and eth1. Squid is set to accept connections from both of them on port 3000. However, eth0's ip address is always used to send proxy requests, even if ...
0
votes
0answers
54 views

squid reverse proxy through https, no cache, no public proxy

is it possible to hide website IP behind squid reverse proxy? I am not interested to use proxy to access Internet, I don't want to use squid to cache or to make public proxy, than just to hide ...
0
votes
0answers
21 views

Pass request cookies to Squid url_rewrite_program

I am using Squid to rewrite requests and cache them. I have written a squid url_rewrite_program using python to rewrite request. Basic rewriting works well. But most of the requests have cookies ...
-1
votes
1answer
52 views

how to find out the clients connects to the proxy server in redhat linux

Is there any way to find out the client machines connected to the particular proxy server in redhat linux , i am using redhat linux version 6 and squid configured in it
0
votes
1answer
65 views

accessing another subnet behind proxy

I have squid proxy with dansguardian with ip x.x.1.125 and all computer have this ip as their gateway. Now I need them to access an application on x.x.othernetwork.41 ip. But when I turn on ip ...
0
votes
0answers
52 views

Squid3 + HTTPS Authentication issue

I've successfully setup Squid3 to work as a transparent proxy for HTTP and HTTPS, installed the CA on the machines. Everything works OK, but there is this corporation site I work for where Squid does ...
0
votes
0answers
188 views

HTTPS Content Filtering without de-crypting traffic using squid?

I am attempting to terminate https traffic based on ACLs using ssl_bumping WITHOUT de-crypting the traffic in intercept/transparent mode. Has anyone got this to work before? I have copied my ...
0
votes
0answers
23 views

Squid cacher_peer connection in ssl and HTTPS

I have a Squid server who relay traffic to other Squids servers. I want to encrypt connection between these servers. I use the ssl option in squid. cache_peer OUTPROXYIP parent 1081 0 round-robin no-...
2
votes
0answers
86 views

iptables configuations for stunnel+squid

I'm building a highly anonymous proxy server with squid and stunnel, and I'm facing a configurations problem on iptables. The server should act like this: browser <-> client stunnel <=> ...
0
votes
0answers
89 views

Squid stop working,constantly freezes

I'm running Squid v. 3.3.11. I have around 150 active users. The machine physical resources are more than the recommended. I don't use the cache function, so it is turned off. The problem is when I ...
1
vote
0answers
47 views

Squid reverse proxy not able to cache

Not able to cache anything with squid reverse proxy, running in centOS6.5 squid.conf http_port 81 accel defaultsite=example.com:8080 no-vhost cache_peer example.com.ip.address parent 8080 0 no-...
1
vote
0answers
74 views

How do I make Docker forward a packet from remote when a packet from the dockerhost works?

I have set up a docker container with a vpn. I added another container with a Squid proxy using the --net option, sharing the same network as the vpn. Running a traceroute from within the container I ...
0
votes
1answer
48 views

SQUID: detect Website name entered by user in browser

I am using squid as an explicit proxy within my organization to block certain websites in my infrastructure. I have successfully set it up using url_rewrite_program and ssl_bump features and its ...
-2
votes
1answer
42 views

Point multiple ips to one server [closed]

I'm trying to setup a squid proxy on an ubuntu server. I happen to have multiple ip addresses that I bought along with the vps. Is it possible for me to setup the 2 extra ip addresses to point to my ...
0
votes
0answers
76 views

Squid proxy ignores delay pool configuration

I have Squid proxy 3.5.13 running on CentOS 7. Everything is working well so far except for the bandwidth limit. I have about 200 users going through this proxy server and I want each of them to have ...
0
votes
0answers
87 views

How to block zip files containing executable (exe, jar) using Squid?

Squid Proxy Server is blocking exe and jar files by file extensions and meme type (for http traffic). However, if exe or jar files/programs are within zip files, then it is not blocking. The ...
0
votes
1answer
105 views

Squid Proxy: 400 Bad Request when “%25” (Percent Sign) in URL

I have a squid proxy that works well except for this issue: If a URL has a %25 inside of it (the percent sign), we get a 400 Bad Request and Bad Request is displayed to the web browser. Example URL: ...
2
votes
0answers
47 views

SquidGuard holding navigation

This is my first question within ServerFault. So I beg you pardon if the question here is a little out of context or too long. I haven't found anything on the internet so I'm recurring to you. I'm ...
1
vote
0answers
41 views

CentOS + IPTables

I am trying to setup a CentOS 7 server with Squid as a proxy server. The proxy server is strictly private and doesn't need to be available to anyone other than myself and other 2 servers, therefore I ...
1
vote
1answer
91 views

How do I set up squid reverse proxy to use https and http traffic?

I already have a squid reverse proxy working for two test sites. My two sites are www.test1.com and www.test2.com My current working config file looks like this /etc/squid3/squid.conf acl ...
0
votes
1answer
77 views

Configure squid to forward ftp requests to ftp server on some other machine

I have installed squid proxy servers and vsftpd FTP server on 2 separate VMs. How can I Configure squid proxy servers on machines-A (where squid installed)to forward ftp requests to machine-B (where ...
0
votes
0answers
31 views

Cache domain GET requests using Squid

I'm trying to cache requests to remote package repository, so I can access it without internet connection. All calls are via http GET to remote repo. iptables entry to redirect requests to proxy ...
0
votes
1answer
204 views

Squid 3.5: Preventing forwarding loop in intercept mode

I have set up a router and an intercepting HTTP squid proxy on different machines. Clients should use the proxy (without knowledge) in the following way: Client -> Router (DNATing to proxy server) -> ...
0
votes
1answer
341 views

Transparent HTTP/HTTPS domain filtering proxy [closed]

I want to set up a transparent HTTP/HTTPS proxy to filter outbound requests based on destination hostname (domain). The proxy itself should be non-intrusive and just forward traffic, not decrypt/...
0
votes
1answer
88 views

Squid never caching files using dnf

I'm attempting to set up a local repository cache for dnf. The idea is for one machine on the network to download a package, then any other machine on the network attempting to acquire the package ...
0
votes
0answers
155 views

HTTPS web filtering issue in endian

I am running endian firewall latest version and setup the web transparent proxy with enable the https filtering and installed the certificate in the client system. If i enable the https filtering then ...
0
votes
0answers
11 views

Squid : different acl for different kind of authentication

I am using a 2.7 Squid stable 9 with NTLM authentication. But with some tools (like adobe cloud), the connection use Basic auth param, which is not configured in my squid.conf. So I would like to ...
0
votes
0answers
34 views

Squid forwarding to proxy in https

I've installed latest squid on Ubuntu server 14.04, my goal is to forward the entire traffic come from squid to 3rd side proxy. Client -> Squid -> External Proxy i managed to do it with cache_peer ...
0
votes
1answer
60 views

SQUID Cache version 3.5.10 for x86_64-redhat-linux-gnu

I have searched far and wide but now I need to ask for help. I have a few squid servers that need an IP address change. Since the address change I get the following in the log files when I start ...
0
votes
0answers
49 views

Squid with NTLM auth behind Netscaler

my task is implementing a squid proxy that allow all my authenticated (windows AD) internal users to surf internet without any credential request (pop-up). Plus, i created two squid nodes and put ...
1
vote
1answer
82 views

Squid Proxy timing out on Public Interface - Packets getting lost on port 3128

Partial Solution Turns out that traffic on port 3128 was getting lost on the way to my VPS. I am not sure if this is Linode blocking this port, or if it is something in the between. (I have used this ...
1
vote
1answer
92 views

Squid Reverse Proxy with multiple WAN-Interfaces

I'm having the following setup: two WAN-Lines, each with a static public IP, both connected to a separate router, providing two internal networks (net1 and net2) one Ubuntu 14.04 LTS server with ...
0
votes
0answers
83 views

Chrome/IE proxy pac issue

I created a simple proxy.pac file and I put it on one of my webserver. This proxy pac file tells browser to display all internal resources and all https resources "DIRECT" and use a proxy for all ...
0
votes
0answers
27 views

Why am I not getting a login prompt when using basic authentication with squid3

I've just installed squid3 and tried to set up basic_ncsa_auth. I've got the following directives in my squid3.conf file: acl allcomputers src 0.0.0.0/0.0.0.0 auth_param basic program /usr/lib/squid3/...
0
votes
1answer
97 views

Would it make sense to have Squid running behind a high latency WAN?

We have a satellite uplink connected to a PFsense router. Our connection has a latency of +- 750ms. Would it make sense to configure squid to cache much data to improve loading times of websites? I ...