Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
3answers
404 views

squidguard not blocking https sites.

Trying to get squidguard to block https sites. Setup. ( This is the basic config http://thejimmahknows.com/proxy-wccp-cisco-asa-squid-3-4/) Server running centos 7. squid + squidguard installed. ...
0
votes
1answer
148 views

Squid and delay pools: rep_mime_type, https

I'm struggling with squid delay pools. The documentation I found is very poor and on internet there is contradictory and possibly surpassed information. First question: acl aclname url_regex -i \....
0
votes
2answers
208 views

It is possible to configure Squid with authenticated and not authenticated users?

I need to configure two types of access in Squid: Users with privileges (AD authentication) to access audio-video and social networking sites; Users without privileges, just few sites I'm using: ...
0
votes
0answers
65 views

Questions about squids transparent proxy

I'm doing a squid3.5 versions of the construction of the transparent proxy, squid3.5 version without the use of transparent to configure transparent proxy, my hosts file in Windows I'm going to visit ...
1
vote
1answer
110 views

Caching large files transparently over HTTP

I have a rather peculiar server set up to work with: I have files stored on an HTTP accessible server (Windows Azure Storage - about 800gb of content) but must serve them to people from a different ...
2
votes
0answers
148 views

Squid reverse proxy redirect / rewrite HTTP to HTTPS

My Squid Reverse Proxy only accepts HTTPS requests. What is a short way to redirect/rewrite a HTTP-request to https? So if the user visits http://foo.server.com he should be automatically redirected ...
0
votes
0answers
81 views

Squid reverse proxy with SSL to client

I'm building a reverse Proxy using squid which should redirect https request to a http webserver. so something like this: Client <--- SSL ---> Squid Proxy <--- unencrypted ---> Web ...
1
vote
0answers
348 views

certificate issue in squid3 on pfsense

I am using pfsense latest version and installed squid3 with Transparent HTTP Proxy and HTTPS/SSL interception with squidguard but many site are not open and getting below errors. (54) Connection ...
4
votes
1answer
188 views

Whitelisting outgoing traffic from docker containers

I have a server running multiple docker containers in the following configuration: One of the containers is a reverse proxy binding to the exposed ports of the other containers. This is the only ...
1
vote
0answers
511 views

PFSENSE - Squid - Transparent Mode not working correctly

I am having this weird problem with squid (both squid and squid 3). After installing, i forwarded all my traffic from mikrotik in port 3128 but the requests seemed to fail. After researching I noticed ...
0
votes
0answers
6 views

how much traffic a ram of proxy server can hold at a time [duplicate]

I'm planning to create a proxy server using Squid in Centos. My VPS proxy server has port of 1 GB and a ram of 512mb. I'm wondering in a stable and normal network how much traffic whould make server ...
0
votes
0answers
54 views

using FTP over proxy Squid with NTLM auth

I have a Squid 2.7 STABLE9 proxy on a Debian and I have allow 80, 443 & 21 port to my user (user have windows PC). When a user go throught my proxy, he have to authenticate himself with NTLM ...
0
votes
0answers
92 views

Trouble using old package - Debian jessie/Libdb

I'm stuck trying to get squidguard to run. It's due to the version of berkelydb ( libdb ). This is a fresh Debian jessie server install. No gui, just ssh, build-essential etc. Installed squid from ...
0
votes
0answers
28 views

http CONNECT makes squid choke

I have a squid proxy server and typically it runs fine. However, when there are several hundred/thousand clients starting to issue HTTP CONNECT statements and keep those connections open, it ...
0
votes
0answers
38 views

How to make squid hit the cache by path only?

I need to cache the objects with URI's like http://ftp.debian.org/debian/dists/stretch-updates/non-free/i18n/Translation-en.bz2 and http://httpredir.debian.org/debian/dists/stretch-updates/non-free/...
0
votes
0answers
42 views

Configure local squid for caching and redsock behind squid proxy parent

I'm using Debian, and to access to the Internet my network follow this diagram: MY PC -> SQUID PROXY (with digest authentication) --> INTERNET To resolve the digest authentication with my ...
11
votes
0answers
554 views

Getting Squid and TPROXY with IPv6 working on CentOS 7

I'm having trouble getting TPROXY working with Squid and IPv6 on a CentOS 7 server. I was previously using a generic intercept setup with NAT, but it was limited to IPv4 only. I'm now expanding the ...
0
votes
1answer
96 views

Squid not redirecting SSL as HTTP

I want all my traffic to a specific domain to be sent through a parent proxy, here is my squid conf: acl localnet src 10.0.0.0/8 # RFC1918 possible internal network acl localnet src 172.16.0.0/12 ...
0
votes
1answer
198 views

Why Squid ntlm_auth works only when “cache_effective_group root”

I have Debian 8 Jessie with Samba configured as AD member server. Samba+Winbind works perfectly: I can create shares and assign rights for AD users; getent passwd shows both local and AD users, etc. ...
0
votes
2answers
2k views

Logstash: UNIX Epoch time not getting converted to readable format

I have setup an ELK stack and I am trying to parse squid log entries. And I am having a problem trying to convert the following UNIX/Epoc time as 1442469455.757 to a human readable format. While ...
0
votes
1answer
568 views

How to redirect Https CONNECT Request with Squid Explicit Proxy

I want to block certain urls for some users of my internal network. I am using a squid based explicit proxy for this purpose with a redirect_program. The clients are configured to use a pac file for ...
0
votes
1answer
3k views

Transparent squid proxy on ubuntu 14.04 server [closed]

I have ubuntu 14.04 LTS server installed on my server, and I would like to install transparent proxy server on my server for LAN network. Please help me with this. Thanks in advance.
0
votes
0answers
49 views

Squid Proxy not correctly displaying web page

Currently working with Squid 3.3.8 on Ubuntu 14 and authorizing users against AD groups. Depending on AD group membership specific web sites are then allowed using dstdomain. LDAP_group ...
-1
votes
1answer
135 views

Squid loads webpages incorrectly

I'm trying to configure my VPS server to work as a simple HTTP proxy. I insatlled Squid 3.3.8 on CentOS 7.1.1503 and configured basic authentication with the ncsa_auth. Although the whole scheme seems ...
1
vote
0answers
52 views

Remote (Ubuntu) server as http gateway to multiple socks5 proxy servers

I have the following setup: Computer L (my Mac OS X machine). Linode R0 running Ubuntu 12.04. Linode R1 running Ubuntu 12.04. Linode R2 running Ubuntu 12.04. R1 and R2 are turned into SOCKS5 proxy ...
1
vote
1answer
76 views

squid crashes when connecting to facebook

I'm using squid to build an http proxy server. It works well until I tried to connect to https://www.facebook.com/ on my client (Mac OS X 10.10). Every time when I try to connect to Facebook, an "...
0
votes
0answers
138 views

How to get Squid to completely cache certain web pages so that they are available offline?

Note that I said web pages, not sites. I'm testing the Squid server with the default configuration settings. My browser is Iceweasel 31.4.0 with the following proxy settings HTTP Proxy: 127.0.0.1 ...
0
votes
0answers
64 views

Squid3 configuration for Round Robin pages

We use squid3( on Debian 8 as a proxy in front of a network to allow application servers access to HTTP(S) resources. We just found out that with the current configuration, squid3 will have enormous ...
1
vote
0answers
87 views

Squid ACL with IP in Header

I've got a pool of Squid proxies being accessed via a Loadbalancer. The loadbalancer can inject a HTTP Header with the 'true' client IP. How do I create an acl which checks the IP within a header ...
2
votes
1answer
387 views

Iptables rule to block ip range for a specific string (works sometimes)

After a two week search and read I ended up with this iptable rule that blocks youtube (as string) to an ip range in my office network. iptables -A FORWARD -t filter -m iprange --src-range 10.217.76....
1
vote
1answer
239 views

Squid cannot send UDP messages to syslog server

I'm migrating my old Squid (2.7 in Debian 7.8 to 3.1 in CentOS 6.6) I need to send logs to a syslog server located into another machine I added the following config to the new server logformat ...
0
votes
1answer
362 views

Iptables forward port 80 to remote squid

I have server A with IP 192.0.2.2, which does not have a connection to the internet so it must pass all internet http traffic to a squid proxy on server B with ip 192.0.2.3 listening on port 8080. I ...
0
votes
1answer
69 views

Ubuntu as router with squid

What i bassically want to do is use an ubuntu machine to act as my router but with squid to block some addresses. But i don't want to change user network settings. Explanation: Current configuration ...
1
vote
1answer
113 views

How to select the best parent server automatically?

I have configured a squid proxy server which has many parent servers. I have distributed the load using round-robin but I don't like it. Most of the time only one or two servers are working out of 5.I ...
0
votes
3answers
311 views

iptables with transparent proxy, how to pass the user IP

I have a local transparent proxy, but my problem is that packets, when re-routed, have the router IP and not the user. These are the rules that I currently have in place: iptables -t nat -A ...
-2
votes
1answer
200 views

Squid Forward Proxy on Cloudflare

Is it possible to set up a forward proxy using Squid and still have Cloudflare CDN working? For example, I currently have Squid running on Ubuntu, with this being the squid.conf file. acl myhost ...
1
vote
0answers
93 views

Machines disregarding default gateway

Our gateway is a router which redirects all browsing traffic to a proxy server (Ubuntu 14.04.3). Proxy server then process and sends the traffic back to the router through a different interface. Proxy ...
0
votes
0answers
163 views

Squid GET request returns incorrect content type when using transparent mode

I'm trying to establish the cause of a strange issue with mobile device that goes through a Squid 3.3 proxy on CentOS 7 using transparent mode which is not able to access news content within the Bing ...
1
vote
0answers
22 views

Squid option equivilents in nginx

I am trying to move some caching over to nginx from squid and I'm having some issues replicating some options. I have these options on one of my squid patterns ignore-reload ignore-no-store override-...
3
votes
1answer
478 views

Squid running out of filedescriptors on CentOS 7

I'm running Squid 3.3 (EPEL) on CentOS 7 and recently I have been getting the following error message in my cache.log WARNING! Your cache is running out of filedescriptors I am slightly confused by ...
0
votes
1answer
120 views

APT-GET behind a proxy with Digest Authentication

I'd like to use apt-get (and other ubuntu tools) to download software and keep it updated. Unfortunately, my company has set a squid proxy to accept digest authentication only. I've seen somewhere (...
1
vote
0answers
72 views

Squid authentication helpers

I set up squid with authentication helper following along the line the guide here http://www.freesoftwaremagazine.com/articles/authentication_with_squid the only difference is that my users together ...
0
votes
0answers
108 views

squid_ldap_group library missing

I am testing my squid-Active Directory connection. I need to use the squid_ldap_group library, but when I execute the test I have a 'library not found' error. This lib and others for authentication ...
0
votes
1answer
97 views

Configure Squid Proxy Server to use TCP for DNS lookups? [closed]

Is there a way to configure squid 3.5.1 to use TCP for DNS lookups? I've setup up the proxy server to use TCP for lookups by adding "options tcp" to my /etc/resolv.conf, but squid seems to be doing ...
0
votes
0answers
101 views

Squid3 storeurl_rewrite_program

I am trying to use squid3 to cache some resources. These resources are available as follows server.com/res/123/?tok=asdy1283asd where tok is a one time access token. I need to cache this but due ...
0
votes
0answers
79 views

connecting webmin console to remote squid proxy server

I have a Squid proxy running on windows 2008 system. I have another linux machine where i have installed webmin. Installing webmin on windows is a pain and require perl module thus i installed it on a ...
2
votes
0answers
104 views

Make a basic auth client authenticate on a digest auth proxy server

My company has a legacy application which needs to connect to the Internet. Unfortunately, our network staff has changed the proxy settings in order to accept digest authentication only, which this ...
0
votes
1answer
296 views

Prevent non-intercept Squid traffic being tagged by Policy Routing

I've re-edited the original question, because I have changed the setup since the original answer, which was for NAT based setup. NAT is no longer being used and has been replaced with TPROXY for IPv6 ...
1
vote
1answer
368 views

Creating an SELINUX allow rule for sockets error with clamd

I've got a CentOS 7 box configured as a Squid proxy, with clamav and Squidclamav. Normally I would just disable SELINUX, but I am attempting to understand and setup allow rules properly. I've managed ...
0
votes
0answers
37 views

Squid3 working from external network but getting random timeouts from internal network

I am using Squid 3 as a reverse proxy. It is working fine from external network, but when I make the same request from internal network, des request ends up in timeouts sometimes. Let me explain my ...