Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
0answers
27 views

http CONNECT makes squid choke

I have a squid proxy server and typically it runs fine. However, when there are several hundred/thousand clients starting to issue HTTP CONNECT statements and keep those connections open, it ...
0
votes
0answers
34 views

How to make squid hit the cache by path only?

I need to cache the objects with URI's like http://ftp.debian.org/debian/dists/stretch-updates/non-free/i18n/Translation-en.bz2 and ...
0
votes
0answers
33 views

Configure local squid for caching and redsock behind squid proxy parent

I'm using Debian, and to access to the Internet my network follow this diagram: MY PC -> SQUID PROXY (with digest authentication) --> INTERNET To resolve the digest authentication with my ...
9
votes
0answers
496 views

Getting Squid and TPROXY with IPv6 working on CentOS 7

I'm having trouble getting TPROXY working with Squid and IPv6 on a CentOS 7 server. I was previously using a generic intercept setup with NAT, but it was limited to IPv4 only. I'm now expanding the ...
0
votes
1answer
90 views

Squid not redirecting SSL as HTTP

I want all my traffic to a specific domain to be sent through a parent proxy, here is my squid conf: acl localnet src 10.0.0.0/8 # RFC1918 possible internal network acl localnet src 172.16.0.0/12 ...
0
votes
1answer
172 views

Why Squid ntlm_auth works only when “cache_effective_group root”

I have Debian 8 Jessie with Samba configured as AD member server. Samba+Winbind works perfectly: I can create shares and assign rights for AD users; getent passwd shows both local and AD users, etc. ...
0
votes
2answers
1k views

Logstash: UNIX Epoch time not getting converted to readable format

I have setup an ELK stack and I am trying to parse squid log entries. And I am having a problem trying to convert the following UNIX/Epoc time as 1442469455.757 to a human readable format. While ...
0
votes
1answer
501 views

How to redirect Https CONNECT Request with Squid Explicit Proxy

I want to block certain urls for some users of my internal network. I am using a squid based explicit proxy for this purpose with a redirect_program. The clients are configured to use a pac file for ...
0
votes
1answer
2k views

Transparent squid proxy on ubuntu 14.04 server [closed]

I have ubuntu 14.04 LTS server installed on my server, and I would like to install transparent proxy server on my server for LAN network. Please help me with this. Thanks in advance.
0
votes
0answers
46 views

Squid Proxy not correctly displaying web page

Currently working with Squid 3.3.8 on Ubuntu 14 and authorizing users against AD groups. Depending on AD group membership specific web sites are then allowed using dstdomain. LDAP_group ...
-1
votes
1answer
128 views

Squid loads webpages incorrectly

I'm trying to configure my VPS server to work as a simple HTTP proxy. I insatlled Squid 3.3.8 on CentOS 7.1.1503 and configured basic authentication with the ncsa_auth. Although the whole scheme seems ...
1
vote
0answers
48 views

Remote (Ubuntu) server as http gateway to multiple socks5 proxy servers

I have the following setup: Computer L (my Mac OS X machine). Linode R0 running Ubuntu 12.04. Linode R1 running Ubuntu 12.04. Linode R2 running Ubuntu 12.04. R1 and R2 are turned into SOCKS5 proxy ...
1
vote
1answer
71 views

squid crashes when connecting to facebook

I'm using squid to build an http proxy server. It works well until I tried to connect to https://www.facebook.com/ on my client (Mac OS X 10.10). Every time when I try to connect to Facebook, an ...
0
votes
0answers
130 views

How to get Squid to completely cache certain web pages so that they are available offline?

Note that I said web pages, not sites. I'm testing the Squid server with the default configuration settings. My browser is Iceweasel 31.4.0 with the following proxy settings HTTP Proxy: 127.0.0.1 ...
0
votes
0answers
59 views

Squid3 configuration for Round Robin pages

We use squid3( on Debian 8 as a proxy in front of a network to allow application servers access to HTTP(S) resources. We just found out that with the current configuration, squid3 will have enormous ...
1
vote
0answers
78 views

Squid ACL with IP in Header

I've got a pool of Squid proxies being accessed via a Loadbalancer. The loadbalancer can inject a HTTP Header with the 'true' client IP. How do I create an acl which checks the IP within a header ...
2
votes
1answer
351 views

Iptables rule to block ip range for a specific string (works sometimes)

After a two week search and read I ended up with this iptable rule that blocks youtube (as string) to an ip range in my office network. iptables -A FORWARD -t filter -m iprange --src-range ...
1
vote
1answer
202 views

Squid cannot send UDP messages to syslog server

I'm migrating my old Squid (2.7 in Debian 7.8 to 3.1 in CentOS 6.6) I need to send logs to a syslog server located into another machine I added the following config to the new server logformat ...
0
votes
1answer
320 views

Iptables forward port 80 to remote squid

I have server A with IP 192.0.2.2, which does not have a connection to the internet so it must pass all internet http traffic to a squid proxy on server B with ip 192.0.2.3 listening on port 8080. I ...
0
votes
1answer
69 views

Ubuntu as router with squid

What i bassically want to do is use an ubuntu machine to act as my router but with squid to block some addresses. But i don't want to change user network settings. Explanation: Current configuration ...
1
vote
1answer
112 views

How to select the best parent server automatically?

I have configured a squid proxy server which has many parent servers. I have distributed the load using round-robin but I don't like it. Most of the time only one or two servers are working out of 5.I ...
0
votes
3answers
267 views

iptables with transparent proxy, how to pass the user IP

I have a local transparent proxy, but my problem is that packets, when re-routed, have the router IP and not the user. These are the rules that I currently have in place: iptables -t nat -A ...
-2
votes
1answer
179 views

Squid Forward Proxy on Cloudflare

Is it possible to set up a forward proxy using Squid and still have Cloudflare CDN working? For example, I currently have Squid running on Ubuntu, with this being the squid.conf file. acl myhost ...
0
votes
0answers
86 views

Machines disregarding default gateway

Our gateway is a router which redirects all browsing traffic to a proxy server (Ubuntu 14.04.3). Proxy server then process and sends the traffic back to the router through a different interface. Proxy ...
0
votes
0answers
147 views

Squid GET request returns incorrect content type when using transparent mode

I'm trying to establish the cause of a strange issue with mobile device that goes through a Squid 3.3 proxy on CentOS 7 using transparent mode which is not able to access news content within the Bing ...
1
vote
0answers
21 views

Squid option equivilents in nginx

I am trying to move some caching over to nginx from squid and I'm having some issues replicating some options. I have these options on one of my squid patterns ignore-reload ignore-no-store ...
3
votes
1answer
422 views

Squid running out of filedescriptors on CentOS 7

I'm running Squid 3.3 (EPEL) on CentOS 7 and recently I have been getting the following error message in my cache.log WARNING! Your cache is running out of filedescriptors I am slightly confused by ...
0
votes
1answer
111 views

APT-GET behind a proxy with Digest Authentication

I'd like to use apt-get (and other ubuntu tools) to download software and keep it updated. Unfortunately, my company has set a squid proxy to accept digest authentication only. I've seen somewhere ...
1
vote
0answers
70 views

Squid authentication helpers

I set up squid with authentication helper following along the line the guide here http://www.freesoftwaremagazine.com/articles/authentication_with_squid the only difference is that my users together ...
0
votes
0answers
98 views

squid_ldap_group library missing

I am testing my squid-Active Directory connection. I need to use the squid_ldap_group library, but when I execute the test I have a 'library not found' error. This lib and others for authentication ...
-1
votes
1answer
91 views

Configure Squid Proxy Server to use TCP for DNS lookups? [closed]

Is there a way to configure squid 3.5.1 to use TCP for DNS lookups? I've setup up the proxy server to use TCP for lookups by adding "options tcp" to my /etc/resolv.conf, but squid seems to be doing ...
0
votes
0answers
94 views

Squid3 storeurl_rewrite_program

I am trying to use squid3 to cache some resources. These resources are available as follows server.com/res/123/?tok=asdy1283asd where tok is a one time access token. I need to cache this but due ...
0
votes
0answers
70 views

connecting webmin console to remote squid proxy server

I have a Squid proxy running on windows 2008 system. I have another linux machine where i have installed webmin. Installing webmin on windows is a pain and require perl module thus i installed it on a ...
2
votes
0answers
97 views

Make a basic auth client authenticate on a digest auth proxy server

My company has a legacy application which needs to connect to the Internet. Unfortunately, our network staff has changed the proxy settings in order to accept digest authentication only, which this ...
0
votes
1answer
287 views

Prevent non-intercept Squid traffic being tagged by Policy Routing

I've re-edited the original question, because I have changed the setup since the original answer, which was for NAT based setup. NAT is no longer being used and has been replaced with TPROXY for IPv6 ...
1
vote
1answer
325 views

Creating an SELINUX allow rule for sockets error with clamd

I've got a CentOS 7 box configured as a Squid proxy, with clamav and Squidclamav. Normally I would just disable SELINUX, but I am attempting to understand and setup allow rules properly. I've managed ...
0
votes
0answers
37 views

Squid3 working from external network but getting random timeouts from internal network

I am using Squid 3 as a reverse proxy. It is working fine from external network, but when I make the same request from internal network, des request ends up in timeouts sometimes. Let me explain my ...
0
votes
0answers
82 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
0
votes
1answer
549 views

How do I use Squid to redirect an incomig request to another host?

I'm trying to integrate an internal GitLab installation with a Slack incoming webhook but I have a problem, the machine where GitLab can only access other machines in the same network. I have VM which ...
0
votes
0answers
49 views

transparent option for http_port causes error in Squid3

When we have http_port 3128 in squid.conf, the Squid proxy works OK but is not transparent. However changing it to http_port 3128 intercept causes an error Access control configuration prevents your ...
0
votes
2answers
3k views

Squid3 'The proxy server is refusing connections'

Whenever I try to connect to my Squid3 Proxy server, I get the 'Proxy server is refusing connections' error. Here's my config: #Recommended minimum configuration: acl manager proto cache_object ...
0
votes
0answers
123 views

DNS Based Load balancing on squid - odd issues

I'm attempting to do round-robin DNS based load balancing for two squid boxes running as simple HTTP(S) proxies. For testing I'm using AWS Route 53. To simulate round-robin I created two records ...
0
votes
1answer
285 views

Unable to stop Squid3

When trying to stop squid3 that is running off a docker image jpetazzo/squid-in-a-can, I am unable to stop squid! root@myserver:/# service squid3 stop [FAIL] Stopping Squid HTTP Proxy 3.x: ...
0
votes
0answers
15 views

Stop proxy authentication from modern browser allow from command line

I have squid Version 3.1.10 installed and configured authentication with the auth mechanism ncsa_auth. Is it possible to not allow a modern browser to auth should a user try and access the internet ...
0
votes
0answers
270 views

Office 2013 and squid whith NTLM authenticate doesn't work

I have a Squid 2.7STABLE9 on a Debian and everything works except the office 2013 pack : Word, Excel, Outlook ... For all, I made a rule on Squid conf as it explaine here and it look like it doesn't ...
0
votes
0answers
510 views

squid 3.5.3 with ssl bump

I have configured squid as transparent proxy with ssl bump configuration and using store id to cache youtube Squid 3.5.3 Ubuntu 14.04 Issue is my http sites are working but I cant see https website ...
1
vote
1answer
2k views

Squid server issues after upgrade (Ubuntu 14)

We have upgraded a squid proxy server from a previous version of Ubuntu (Can't recall what it was sorry) to version 14.04.2. Now it appears Squid will not start / VM's can not reach internet through ...
0
votes
1answer
209 views

How to log only certain result/status codes with Squid?

By default Squid logs all access information including 'successes' and 'failures'. I'm interested in logging only 'failures'. In other words, I want to do something like log only Squid DENIED result ...
0
votes
1answer
220 views

NAT routing based on DNS name (reverse TCP proxy?)

Introduction I have one router, running pfSense (can be anything since it's a virtual machine on VMware, so if the solution requires anything else, that's fine by me) and behind it I have multiple ...
0
votes
0answers
86 views

How to reuse same digest authentication credentials with multiple acls?

I want to apply different access policies to different groups/acls using Squid, which is what I've done. Now I want to set up digest authentication, but I want to use the same digest credentials for ...