Questions tagged [squid]
Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.
1,397
questions
0
votes
1
answer
677
views
Squid proxy service configuration issue
I have installed squid proxy to filter outbound traffic from docker.
Specifically, I created a jupyterhub environment with docker in order to isolate each user and give them their virtual environment.
...
1
vote
0
answers
252
views
squid commSetConnTimeout
I'm using squid 3.5.20 on centos.
I send a curl request to bigquery directly without a squid proxy, and I have a response after 8 minutes.
Now, when I launch the same curl request through the squid ...
0
votes
2
answers
247
views
Squid proxy server returning error
I have designed a topology which has an external proxy server (192.168.239.152) and a Mikrotik Router (192.168.239.151).
The MikroTik router connected with a LAN and enables internet connection to LAN ...
1
vote
0
answers
1k
views
How to have auth ip/user|pass auth per port. Squid Proxy
i'm trying to launch what should be a simple commercial proxy server. I have bought a subnet of IPs, and I want to make those IPs accessible to some paying customers. These are the base requirements I'...
0
votes
1
answer
3k
views
Forwarding all traffic to transparent proxy
I want to redirect all of the traffic from my instance to another instance that’s running a transparent squid proxy, using IP tables rules and NOT changing the instance’s default route.
is it done on ...
1
vote
0
answers
4k
views
What are the system requirements for a squid forward proxy?
I would like to set up a squid forward proxy to proxy data outbound data from hosts that have no internet access.
The flow would be from application hosts located in a secure zone with no internet ...
1
vote
2
answers
14k
views
Configuring Squid to not log TCP connections (lots of "error:transaction-end-before-headers" showing up in logs)
We run Squid proxies in GCP, and are in the process of migrating from CentOS 7 to 8. I'm working on using the GCP Internal L4 load balancer to improve redundancy/failover, and have configured a ...
1
vote
0
answers
2k
views
Optimal ssl_bump configuration for whitelisted squid proxy
I've been banging my head against the wall for a few days now trying to get a whitelisted squid proxy to work. This is the first time working with squid 4.11 and don't remember having so many issues ...
1
vote
1
answer
585
views
Persistent connection not working between the squid (version 4.13) and Apache (origin server)
I would be very happy if somebody could help.
I am basically trying to make the connection between the Squid (version 4.13) proxy and the Apache server (origin) persistent. I've tried the ...
0
votes
1
answer
1k
views
what to check when can't connect the port of Squid proxy server on remote server
I want to connect from local pc(Windows10) to the specific port on the remote server(Windows server2019). The port is of Squid proxy server.
But, I tried checking with PowerShell command on the local ...
-2
votes
1
answer
1k
views
How to connect an “SSLv3 only” web client to a web server that only accept TLS1.0 - TLS1.2
I have a legacy embedded HTTP client (very old) that supports SSLv3, TLS1.0, TLS1.1 and TLS1.2. I would like to remove SSLv3 for security reasons. I rebuilt the openssl library and wanted to verify if ...
0
votes
1
answer
37
views
how to setup proxy server on internet in good security to be requested from IP addresses that I already know
My goal is that my colleages in our company can make https request via proxy server(Squid) outside of the company network to final destination API server.
My colleages can make requests from company ...
0
votes
1
answer
2k
views
Squid 3.5.20 No Internet Access
I installed Squid Proxy 3.5.20 on CentOS 7
The server is connected to the internet and pings
Squid is running with no errors
When I try to pass through Squid in Chrome I get no internet access for ...
1
vote
1
answer
725
views
Squid HTTP Transparent Proxy for Spoofed DNS Requests
I'm working on a security project which requires a remotely-accessible transparent proxy. I have set up an Azure VM running Ubuntu 18.04 with squid running as a transparent proxy. I'm only concerned ...
0
votes
1
answer
634
views
Integration of Squid Proxy to Anonymous Open Proxies to cache html response from Anonymous proxies
I need to Cache html response from anonymous proxies using squid caching server. However my requirement is something as given:
From client machine I need to connect to anonymous proxy with ...
1
vote
0
answers
213
views
Squid in dual stack ipv4 / ipv6 reaching out for services only served on ipv4 interface
I am running a dual stack network and am running a server there (Squid, Apache, DHCP, Mail,...). The network is working properly. However not all services running on that server provide a listener on ...
1
vote
0
answers
856
views
Which response headers are making Squid's refresh_pattern ineffective?
I cannot get Squid to cache anything with the following origin response headers.
When I use curl repeatedly, I get the following response
> curl -s -D - -o /dev/null -x "http://localhost:3128&...
0
votes
1
answer
360
views
Can you ssh into a server given only an HTTPs address
I have a server that I have a domain name for. The DNS redirects the address ssh.example.com to https://example.com:12345/ssh/.
Note: My server DNS needs to have a port as my server isn't accessible ...
0
votes
0
answers
113
views
Issue with Difference In Proxies
I have been recently diving deep into making proxies using servers and such. There are multiple proxy companies where their proxy IPs are traced back to https://www.hetzner.com/. These proxies provide ...
1
vote
1
answer
586
views
How to force streamed image objects to be cached by Squid Forward Proxy
I am accessing images stored on storage like AWS S3 or GCS.
I am using a node library called Got to fetch an image, and I stream the response into an image processor.
I am using Got with a tunnel ...
0
votes
1
answer
182
views
How can I allow a single address to access multiple URL in Squid?
We have squid setup and it is blocking everything and allowing some specific sites for all users.
Now we have 1 user who wants to access skype and hotmail.
If we add skype and hotmail to allow_sites....
1
vote
0
answers
137
views
what is the correct syntax to declare ports in squid?
what is the correct syntax to declare ports in squid?
In Squid official says (edited):
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port ...
2
votes
3
answers
58k
views
what are the whatsapp port numbers?
Update question about whatsapp ports:
According to official facebook:
5222
443
According to screwloose:
TCP: 4244,5222,5223,5228,5242
TCP/UDP: 50318,59234
UDP: 3478,45395
According to quora:
TCP ...
1
vote
0
answers
3k
views
Transparent Proxy with Squid 4.10 not working
Squid 4.10 on Ubuntu Server 20.04
I have tried so many things and spent this entire week researching on how to get this working. To get an idea of what I am trying to do here, take a look at these ...
1
vote
1
answer
2k
views
How to block mime_types by https with Squid?
I have this rule to block extensions:
acl bl_ext url_regex -i "/path_to/bl_ext.txt"
http_access deny workdays bl_ext
Example content file "bl_ext.txt":
\.avi([a-zA-Z][0-9]*)?(\?.*)...
1
vote
1
answer
549
views
Use of :80 in proxy URL
Setting some Squid proxies up, and trying to figure out some behavior.
Squid in a pass-all configuration, with the linux node set to forward 80 to port 3128, which Squid is listening on.
I do have an ...
0
votes
0
answers
187
views
How to redirect multiple subdomains through gateway server to internal app server with single IP address on different ports for each subdomain?
I am having a problem with trying to redirect subdomain url to a Application server that have apps on different ports but a single IP address.
Basically, here are the steps:
Client outside the network ...
1
vote
0
answers
203
views
winbind works but Squid acts wrong
I am trying to get a Squid Proxy running with Kerberos+Samba+Winbind, which is connected to my AD.
Everything works great so far!
krb auth working
wbinfo -u, -a, -g working
I made some new testing-...
0
votes
1
answer
2k
views
Squid Proxy with SSL and Gmail
I am trying to get squid to work with SSL so i can open up gmail but only with access to our domain, here is my config
coredump_dir /var/spool/squid
workers 4
http_port 3128 ssl-bump \
...
0
votes
0
answers
496
views
Squid Block/deny/disable cookies?
I wanted to try blocking cookies for matched URLs. I read this Squid - Users - "unset" or "remove" cookies on static content from the backend server and found I could do that, ...
1
vote
0
answers
1k
views
Squid outgoing address configuration with 2 interfaces
I'm trying to forward the traffic from one network (net1) to another network (network2) via a squid proxy which has 2 interfaces (eth1 and eth0) using the tcp_outgoing_address option.
My network is as ...
0
votes
2
answers
1k
views
Prevent Squid Proxy to change the outgoing request's IP address as it's own
We are trying to forward the traffic of our virtual machine to Squid Proxy. When the requests are bumped by Squid Proxy and leaves the proxy, all the request's source Ips are changed from the client's ...
0
votes
2
answers
1k
views
OpenVPN via proxy not sure what's happening, Clarification about theory?
I'm currently running OpenVPN and a squid proxy on a small VPS.
In the config file of the VPN I'm using OpenVPN proxy options to connect to the proxy before the VPN.
The interesting part of the ...
2
votes
1
answer
813
views
Caching Chromebooks updates: on premise caching from non proxy-configured client?
Before even attempting to setup something that wouldn't work, I'd like to understand if the following configuration has a logic.
Basically we want to stop Chromebooks to steal bandwidth on updates.
...
0
votes
0
answers
1k
views
Squid Proxy Multiple Ports based different outgoing address configuration not working
I have squid Configuration in ubuntu 20 with multiple listening ports and each port has different outgoing address assigned by using "tcp_outgoing_address" directive. but In Ubuntu my ...
1
vote
0
answers
624
views
Configure Nginx to route call to upstream server using corporate http proxy
I have a third party application which need to access an HTTPS URI on a remote location.
Here are my constraints:
Access to remote URI need to go through a corporate HTTP PROXY
Calls need to have ...
1
vote
0
answers
230
views
iptables tproxy with statistic --mode nth
I`m using squid now. and i run 4 squid for load-balance
and i trying to change my iptables rule.
this is my current rules.
iptables -t nat -A PREROUTING -p tcp --dport 443 -m state --state NEW -m ...
1
vote
0
answers
358
views
When I enable basic http auth in squid proxy .conf file it fails to start the squid service
I have setup squid proxy in my AWS linux instance and it is working as expected. here is the working squid.conf file.
acl artifactory dstdomain xyz.abc.defg.com
acl codebuild_us_east_1 src 34.228.4....
0
votes
1
answer
776
views
Squid IP Routing Issue
I have a squid server installed with 30 additional proxy addresses. Whenever I try to use one of these proxy addresses with a browser, like chrome, my IP shows as the main server IP as opposed to the ...
1
vote
0
answers
573
views
Docker behind squid proxy
Im running a squid http proxy with squidguard and already configured a dest block on squidguard with the domainlist of the allowed domains, also configured the docker.service.d to have a http proxy (...
0
votes
1
answer
106
views
How to block all outgoing traffic from one program on specific NIC?
This might be a stupid question but I was not able to google the right thing to find the answer.
How do I block all outgoing traffic from eth1 on Squid on the TCP level?
I have used the iptables rule ...
0
votes
2
answers
2k
views
OpenVPN 503 behind http proxy
I have a OpenVPN server successfully setup on a digital ocean droplet following this amazing tutorial: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-18-04
...
1
vote
1
answer
2k
views
HTTPS stunnel error:1408F09B:SSL routines:ssl3_get_record:https proxy request
I am configuring the HTTPS proxy with stunnel and squid.
But, I received the Mozilla error page "Secure Connection Failed", in case I am making browser requests through port 44444(stunnel).
...
1
vote
0
answers
280
views
PHP Curl process hitting a timeout when using Squid Proxy
I have a PHP process that running a CURL command to get the contents of a website. This works on 90% of websites that I try it on but one site in particular (the one I want to get the contents of) ...
0
votes
1
answer
696
views
Squid upload logs - how to view logs when user uploaded some data
I am using squid proxy, but none of the existing solutions are not showing proper logs related to upload data, I need to view when user uploads any files into internet via squid, it should log, size, ...
0
votes
1
answer
63
views
A proxy with a fixed URL that alters certain file types?
I need to make a mirrored website with a slightly different info.
spawning up a new server for each site is too much work, and takes a lot of effort to update.
most of the content should be intact, ...
0
votes
1
answer
3k
views
Building own smart dns-proxy with powerdns and Squid to socks5
I want to build my own small smart dns-proxy server with following features:
Client sets DNS Server like (2.2.2.2 <- MY DNS Server includes Proxy Squid)
Client sends request for sepcial domains (...
2
votes
1
answer
1k
views
Squid Proxy unable to start with custom config file in RHEL8, but works in Amazon Linux
Basically I am just following this guide from AWS, but this guide uses Amazon Linux, but I need to use RHEL 8. I tested in Amazon linux, and it works fine. In RHEL8 also, Squid is able to start with ...
0
votes
1
answer
8k
views
squid : Block destination Subnet or IP addresses
I have read many tutorial and official documentation, but the suggested method is not working for me.
I have set up a squid proxy(Squid Cache: Version 4.10, ubuntu 18.04.4 LTS) in my organization, and ...
0
votes
1
answer
658
views
Leading slash when sending request from nginx to squid
I am facing a weird situation. I want to load a webpage sitting behind Nginx. So I proxy pass a webpage request to squid as shown below in the snippet:
location /about-me/yellow {
...