Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
1answer
148 views

How to log only certain result/status codes with Squid?

By default Squid logs all access information including 'successes' and 'failures'. I'm interested in logging only 'failures'. In other words, I want to do something like log only Squid DENIED result ...
0
votes
1answer
163 views

NAT routing based on DNS name (reverse TCP proxy?)

Introduction I have one router, running pfSense (can be anything since it's a virtual machine on VMware, so if the solution requires anything else, that's fine by me) and behind it I have multiple ...
0
votes
0answers
74 views

How to reuse same digest authentication credentials with multiple acls?

I want to apply different access policies to different groups/acls using Squid, which is what I've done. Now I want to set up digest authentication, but I want to use the same digest credentials for ...
2
votes
1answer
200 views

How to establish new connection through proxy using Squid in Python script? [closed]

I am new to networking and proxy. For a project I need to give a proxy connection. I already have a connection and I want change the connection behavior of the process to connect through that proxy. ...
1
vote
1answer
34 views

Netfilter : invalid state for proxy through VPN

I have an OpenVPN between my box A, and the remote server B (both Debian jessie). On server B, I also run Squid3. I then configure my A-browser to use the remote proxy with the VPN address of the ...
0
votes
0answers
312 views

Squid blocks automatic updates - antivirus and java

I have Squid3 configured as a transparent proxy on a linux server. I am trying to allow automatic updates of windows (currently disabled), java and antivirus programs to pass through. The automatic ...
0
votes
0answers
48 views

zph obsolete in squid3

I am trying to set up a squid3 server with a Mikrotik router. I want to enable the cache hit but the zph_mode, zph_option and other settings are obsolete. Following the release notes I noticed that ...
0
votes
0answers
49 views

url_rewrite_program in squid doesn't work

I configured the squid so it redirects to yahoo.com when it requests for google.com. However, this line of configuration is just ignored and is not working. Any suggestion? squid.conf ...
0
votes
0answers
29 views

configure squid to support content filtering feature

Is there a way for squid to add/replace any string in the web response like below <body> =>>> <body>this is an added text by squid
0
votes
0answers
484 views

configure NGINX to work with squid

I have squid running on one server(192.168.29.246) with sslbump enabled. I configured nginx(192.168.29.245) in the other server and i want it to work in front of squid. However, only the ...
0
votes
0answers
55 views

squid setup with sslbump not working

I configured squid for both http and https traffic. The http traffic works fine. However, the https traffic doesn't work and i already get "err_empty_response" when accessing https websites. Any idea? ...
0
votes
0answers
61 views

Squid do not log proxy error

How to configure squid to not log errors? I tried: acl respError rep_header X-Squid-Error .+ log_access deny respError But I got this warning: ACL::checklistMatches WARNING: 'respError' ACL is ...
0
votes
0answers
24 views

Squid log auth method

Is there any way to log the authentication method of a client request to squid proxy? I have 3 methods: - negotate (kerberos) - ntlm - basic But in squid proxy logs (access log) I can not see this ...
0
votes
1answer
324 views

Squid3 blocking all sites except restricted sites

I have a configuration file and in the lines where I have my allowed and restricted sites, I have the following: acl AllowedSites dstdomain "/home/john/squid3_sites/allowed-sites.squid" acl ...
0
votes
1answer
202 views

bind squid and apache for pac file

EDIT It was some interne rules on FW, sorry for the inconvenience and thanks for your advices I have a server with Squid (2.7.STABLE9) on a Debian (Wheezy 7.1) and I add an Apache2 (2.2.22) for ...
0
votes
1answer
107 views

How to set up iptables on a gateway that also hosts Squid proxy?

I have a computer that serves as: a) a gateway between a wireless network (WLAN0) and a LAN (ETH0) connected to internet b) a Squid3 proxy server that does only web filtering (no caching) I have ...
0
votes
0answers
42 views

Microsoft Outlook MAPI Decoding

I want to capture Microsoft Outlook Desktop 2013 network traffic with a proxy (Squid). I do see the traffic, but the request and response bodies are not human readable, though I can read the request ...
0
votes
0answers
250 views

Setting up SQUID 3.5 with SSL Support

I’m setting up a SQUID 3.5 server with SSL support and managed to successfully configured HTTP with SQUID proxy. However, my HTTPS connection is not working. SSL configuration was carried out using ...
0
votes
0answers
85 views

Squid Proxy 3.1: Squid generated FTP directory listing in browser results in corrupted txt files

Environment: We use squid proxy 3.1.12 on SLES 11 (its the latest suse supported squid release). Problem: When a ftp page is loaded via a web browser, e.g. with the URL ...
1
vote
1answer
1k views

Centos Squid Proxy Server for Windows Updates

I'm running Centos 7 as my OS and have installed squid to cache windows updates for my company. Going through the log file, it shows that everything is tcp_miss, including when it's accessing the ...
0
votes
1answer
206 views

glype proxy script with squid optimising web Delivery

I'm trying to utilize squid : Optimising Web Delivery with Glype® Proxy Script. include/init.php (Custom browser - set up defaults): if ( ! isset($_SESSION['custom_browser']) ) { ...
1
vote
2answers
212 views

Block https by mac address. Squid or iptables

I want to block web access (http and https) to certain mac addresses. I was able to do this for http using squid but it still lets https sites through. acl denylist arp "/etc/squid/mac-deny-list.lst ...
0
votes
1answer
594 views

Unable to get squid working on centos

I have set up squid on my centos vps server and I am trying to connect to it through my windows computer but I am getting following error for all the websites: Waiting for google.com The ...
1
vote
1answer
603 views

openbsd pf squid transparent proxy using a bridge

I want to use OpenBSD 5.7 as a filtering bridge in front of my router, and as part of that run a transparent proxy (squid 3.5.1) to manage web access. I have set up the openbsd machine as a bridge, ...
2
votes
0answers
328 views

Compiling Squid Proxy on OS X 10.10 Yosemite [closed]

I'm trying to compile Squid 3.5.4 (I also tried 3.5.2) on OS X 10.10 (Yosemite), and keep getting multiple failures during make that are all LDAP related: basic_ldap_auth.cc:758:9: error: ...
1
vote
0answers
923 views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ ...
1
vote
2answers
147 views

How does squid understand the destination IP address in transparent mode

In transparent mode, following iptable rules are used to redirect traffic to squid. iptables -I PREROUTING -t nat -p tcp --dport 80 -j REDIRECT --to-ports 3128 As per my knowledge REDIRECT changes ...
0
votes
2answers
59 views

Cache HTTPS Static Assets

I will be managing a network for an African College with limited Internet access. To help reduce network traffic and increase browsing speed, I was hoping to setup a Squid like caching server. ...
1
vote
0answers
570 views

Protocol not available errors in squid3

I set up a transparent cache proxy on my Raspberry Pi with Squid3. Everything seems to be working fine and Squid is caching everything it's supposed to and working perfectly. The cache.log is filled ...
0
votes
0answers
235 views

Squid proxy with 2 NICs

I'm trying to make a squid proxy in ubuntu 14 and can't make it to work. This is what I got so far: etc/network/interfaces iface eth0 inet static address 192.168.1.9 netmask 255.255.255.0 broadcast ...
0
votes
0answers
567 views

my squid proxy configuration always TCP_MISS

i have been trying for 2 days in my configuration but always same the result like this DIRECT/49.213.17.185 - 1429727403.426 22 114.125.72.213 TCP_MISS/404 228 HEAD http://dn.melon.co.id:8100/ - ...
1
vote
2answers
3k views

iptables block client ip internet access and keep LAN access

With the increase of appliances having network access and the potential for hacking, I want to block specific ip address from accessing the internet, but allow LAN access. For instance, I use a ...
0
votes
1answer
44 views

Squid upgrade stops authentication

Recently we installed a squid proxy server for a customer who was using an older server. New server is ubuntu 14.04.2 with squid 3.3.8. We used the same password file to authenticate users. The ...
1
vote
1answer
646 views

Squid cannot log to syslog

According to this documentation: http://www.squid-cache.org/Doc/config/access_log/ squid should be able to log to rsyslog with the following directives: access_log syslog:daemon.info squid cache_log ...
0
votes
1answer
103 views

Squid 3.1.22 with multiple delaypools for different subnet

i have a squid installed with squidguard. everything works great and now i want to implement a squid multi delay pool. i want to separate webspeed for every subnet but have also one unlimited to ...
0
votes
0answers
96 views

How to block external sites using squid as forward proxy

I'm currently blocking sites using an acl, i.e.: acl block_site dstdomain "/etc/squid3/blocked". That works great, however, I'm wondering if it's possible to also block all external domains? For ...
0
votes
1answer
258 views

Squid delay pools delay_parameters bandwidth

I can not understand the documentation about delay_parameters params in squid. delay_pools 1 delay_class 1 4 delay_parameters 1 -1/-1 -1/-1 -1/-1 600/8000 What is the difference between the first ...
0
votes
0answers
339 views

Squid transparent https certificate error: ssl_error_bad_cert_domain

I have a squid transparent proxy (squid 3.4 in pfsense 2.1) with ssl_bump for https, all my clients trusts squid as CA and many sistes are well working... However I have some problem with websites ...
1
vote
1answer
4k views

Client not found in kerberos database while getting initial

I am installing Squid3 on Ubuntu 14.10 and I want to integrate it ADDS on windows server 2012 using kerberos 5. My infrastructure are as follows: Default Gateway: 192.168.1.1 DNS & Domain ...
0
votes
2answers
191 views

Integrate Squid Kerberos auth and Squidguard ldapusersearch into AD

I'm having trouble with Squid Kerberos auth and the Squidguard ldapusersearch that I use to apply ACLs by Active Directory groups membership. The problem is : Squid and Squidguard see my user as : ...
0
votes
1answer
429 views

Pfsense Squid external ACL with a php script

I want to use a PHP script to allow or deny Squid proxy request ina pfsense installation, so I'm using this configuration for external ACL: external_acl_type mysqlAuth %SRC /usr/local/bin/php -f ...
0
votes
0answers
124 views

SquidGuard reduce memory consumption

I trying to run squid3 on a small vm with only 512mb ram. I have these memory specific values configured: cache_mem 64 MB memory_pools_limit 5 MB maximum_object_size_in_memory 8 MB cache_dir ufs ...
-1
votes
2answers
135 views

haproxy vs squid ssl bump and dynamic generation

I would like to know if following 2 features of squid are available in haproxy? http://wiki.squid-cache.org/Features/DynamicSslCert http://wiki.squid-cache.org/Features/SslBump any help would be ...
1
vote
2answers
2k views

Missing ssl_crtd folder with Squid 3.5.2 / CentOS

I am attempting to install Squid 3.5.2 to utilize improved sslbump functionality with websites with HSTS. I'm following the documentation on a fresh CentOS 7 VM installation. The issue I'm having is ...
0
votes
0answers
243 views

How to set up squid to proxy a remote HTTPS private repository on port 8443?

I have a cloud of machines that access a remote private docker registry. Unfortunately bandwidth between the remote registry and the local cloud is quite low. A registry mirror would be great! but ...
0
votes
1answer
391 views

Setting up Squid Transparent Proxy on a machine separate from the router

As explained in the title, I'm trying to set up a Squid Transparent Proxy on a machine separate from the router, and also separate from the private network I want to filter through the proxy. The ...
0
votes
2answers
32 views

Why squidguard tell me default acl is missing but it isn't?

I have a problem with squidguard when i want to create .db files. When i do : squidGuard -c "/etc/squid3/squidGuard.conf" -C all -d It tell me : squidGuard: FATAL; default acl not defined in file ...
0
votes
0answers
455 views

Squid3 don't caching, always TCP_MISS/200

I have installed Squid3 and now I wont set it to caching WMTS's. This is valid WMTS service url http://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO and here is link to image from this ...
-1
votes
1answer
178 views

Make squid (or tinyproxy) return cache EVERYTHING and return hits on Internet outage

I am wondering how to configure squid (or tinyproxy) to cache EVERYTHING and return HTTP 200 hits, even on Internet outage or if original source is 404? Basically, I want squid to look in the cache ...
1
vote
1answer
883 views

Squid3 CONNECT imap.gmail.com:993 TCP_DENIED:NONE

I have the following configuration under squid.conf. However, when my Blackberry email client attempts to fetch new emails, etc. Squid access log show the following error: imap.gmail.com "CONNECT ...