Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
0answers
32 views

Squid auth_param children not closing

I have this authentication script on my setup: auth_param basic program /usr/bin/python /etc/auth.py auth_param basic children 5 startup=5 idle=1 auth_param basic realm Please login auth_param basic ...
0
votes
1answer
63 views

Advanced Squid Log Analysis

We are currently using sarg to analyse our squid proxy logs, while it works ok, its not really amazing and we could do with a bit more information. The main thing we would like to do is be able to ...
0
votes
0answers
106 views

Squid 3.0 URL Rewrite Program Crash too Rapidly on arm

I'm using the following setup: - Ubuntu 10.04 (on ARM architecture) - Squid 3.0 - A simple url rewrite program in ruby I have the same setup on an x86 computer and it already works. But when deployed ...
0
votes
1answer
52 views

Squid3 enable multipart form data

I have a client that says he can't upload images with our squid using Content-Type: multipart / form-data; and I'm searching for a way to enable that in my config but all I found so far regarding this ...
1
vote
1answer
78 views

Configuring squid to download big files on one interface and do anything else on another

I have two internet connections, one with high download speeds, but it is slow for browsing. The other one is fast for browsing, but slow for downloads. I tried to set up an acl in squid to manage ...
0
votes
1answer
120 views

Is it advisable to use virtual Linux server installed on i5 / 8GB / 500GB desktop class computer? [closed]

We have CentOS 4.3 P4 / 512MB /Linux server installed somewhere in 2006-7. This machine has three network interaces for leased line, broadband (backup) and LAN. We use Sendmail, Fetchmail, NAT, Squid, ...
1
vote
2answers
3k views

squid ssl bump sslv3 enforce to allow old sites

Important: I have this question on stackoverflow but somebody told me this is more relevant place for this question. Thanks I have configured squid(3.4.2) as ssl bumped proxy. I am setting proxy in ...
0
votes
1answer
132 views

In CentOS 4.3 Webmin 1.3000 bandwidth monitoring is eating disk space. How to delete those files?

I maintain Linux server being used for Mail, Squid and DNS service. Recently I observed that something was eating server disk space. But at last, today I caught the culprit which was consuming the ...
0
votes
1answer
296 views

Block rtmp and make it retry on port 80 via iptables

We have a proxy filtering connections but some sites use RTMP, which runs on port 1935. This cannot go through the proxy as proxies are port 80 only. As far as I know if RTMP fails, it will retry on ...
0
votes
1answer
53 views

Redirect http queries

I need to exchange information with one webserver through soap. I have a computer with dynamic IP, but webserver allow only static ip (whitelisted). Also, I have a centos server with static ip. How ...
1
vote
0answers
113 views

Monitor squid proxy usage by subnet

I'm building a router/proxy box for a nonprofit organization. They have five internal departments, and I have assigned each department to a separate subnet. All web traffic goes out through a squid ...
1
vote
1answer
3k views

Pfsense+squid LDAP search filter error

Just installed pfsense and squid on a spare machine. I am trying to get Squid to authenticate AD users via LDAP. First I tried this: ...
1
vote
1answer
289 views

dansguardian error: filterports must match number of filterips (pfsense)

Hi I'm setting up pfsense with squid3 and dansguardian packages. When I try to start the dansguardian service however, I get the following errors: May 27 22:17:37 php: /pkg_edit.php: The command ...
1
vote
0answers
191 views

pfSense + Squid, Windows 2008 DHCP

I recently installed pfSense and Squid3-dev on a spare machine. It is now connected to the network and Internet is working alright. The problem is that I can't get my users to go through Squid proxy ...
1
vote
0answers
41 views

squid apply rules to a some users

Good day: I have a squid 2.7 stable9 installation that works. It is connected to LDAP and the users can authenticate perfectly. I have different rules for instance to block a few websites during ...
4
votes
1answer
2k views

Squid3 not caching larger files

I try to use squid to cache rpm packages fetched from a yum repository. With the following configuration, it works well for a small rpms, but it would not cache larger ones like openjdk. From the log ...
0
votes
1answer
2k views

What “traffic flow” would be right in a transparent “squid + dansguardian” pfsense setup?

my thought (i'm not sure if its right): lan interface traffic comes into port 80 destination port is redirected to 8080 (dans guardian) dansguardian outputs traffic to port 3128 (squid) squid ...
1
vote
1answer
296 views

Accessing internal network addresses remotely through squid proxy on debian

My objective is to allow clients over the internet to connect to a squid proxy server, provide a username and password, and then access several http servers on the internal network that the server is ...
1
vote
0answers
251 views

Squid in reverse proxy mode: need to rewrite host headers

I am trying to deploy squid on a server to which I can point a number of domain names and have it load content from my main domain www.example.com, which is on my private network. Basically I need a ...
0
votes
0answers
177 views

Java HTTPClient Proxy Authentication

I need to setup a local dev environment behind an authenticated proxy. I'm using Squid as the proxy and have written a java program using Apache Java HTTP client to ensure I can connect outside of the ...
1
vote
1answer
45 views

Server Log Format

I'm trying to understand this server log line from cache_access.log. What does each field represent, specifically why are there three IPs listed and what does each represent? [HIT - - - -] ...
1
vote
1answer
681 views

WCCP and Squid, and Tunnels

I'm trying to configure WCCP + Squid with the following documentation: http://www.crypt.gen.nz/papers/cisco_squid_wccp.html I have a cisco switch, a test client, and a squid proxy server. I think ...
0
votes
2answers
1k views

Blocking Facebook on certain IP Addresses with iptables

Here's my current environment: I have a VM running Ubuntu Server/Squid, and it is set as non-transparent. I have some IP Addresses which need to bypass Squid authentication so they have unrestricted ...
-1
votes
1answer
287 views

get Squid proxy server authentication type from local client [closed]

Just like the title is: Is there a way to get the authentication type of a squid proxyserver from a client in the local network? Im using debian Thanks in advance Matt UPDATE 1: HTTP/1.1 407 ...
1
vote
1answer
618 views

Security implications of running SquidProxy on the main pfSense Firewall

I want to start a discussion about the pros and cons of running a SquidProxy server on the same pfSense box as the main firewall. Today I have one pfSense doing all the firewall things, like routing ...
0
votes
1answer
117 views

Squid upgrade HTTP to HTTPS

I want to use squid to upgrade HTTP request to HTTPS using my own certificate in order to do a client handshake with a server (a reverse proxy) that requires mutual authentication. How can I ...
0
votes
0answers
888 views

Squid proxy log shows warings

I am seeing these errors in my squid logs and I wonder if it is that my configuration is incorrect. Apr 14 06:11:53 proxy squid[3901]: WARNING: Unsupported or unconfigured/inactive proxy-auth scheme, ...
1
vote
2answers
543 views

HTTPS on Squid http proxy server

I've got many servers and I want them to have the same IP when they do requests via the Internet. So I configured a Squid http proxy server that works well for http requests. The problem is that it do ...
0
votes
2answers
985 views

nginx reverse proxy or squid forward proxy (transparent)?

I have to implement a proxy server in front of a running production server to route and secure the production-server. On the production server multiple node.js applications listening on different ...
0
votes
1answer
92 views

Squid + Apache error

I had my Apache webserver perfectly configured and everything worked fine. I asked my friend to setup a cache proxy to make my web answers faster. So here's what he did (if I understand the history): ...
0
votes
1answer
381 views

squid cache shutting down error

I am not a squid expert and I would like to ask you for your opinion. I have gateway running debian 7.1 wheezy with Squid 2.7.STABLE9-4.1 installed. Then I have a server running Windows 2000 (this one ...
0
votes
0answers
184 views

Squid3 HTTPS connections seem slow

We have a strange issue using squid 3.1.19 on an ubuntu box. HTTPS connections seem to be very slow, and i've no idea why. They sometimes do eventually work, but most of the time just time out. If I ...
1
vote
0answers
660 views

iptables configuration for squid proxy in bridged mode

I recently set up a squid proxy in bridged mode. But Squid is not caching due to some firewall issues I guess. Manual caching is perfectly ok. Here is what I have set up in /etc/rc.local ifconfig ...
0
votes
0answers
400 views

Squid3 http Issue

I got Squid3 running on my MyBookLive (Debian Squeeze). I succesfully installed Squid3 but it stops serving http requests after some time, https does still work. If I check the access.log I see ...
5
votes
1answer
2k views

“apt-get source” cannot find package but “apt-get install” and “apt-get cache” can find it

I'm trying to download the source of a package but when I run root@proxy:~# apt-get source squid3 Reading package lists... Done Building dependency tree Reading state information... Done E: Can not ...
1
vote
1answer
295 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
-1
votes
1answer
508 views

How can I set up a transparent proxy using squid and squidguard which has time-based acl based on MAC addresses?

I have a linux based server and I want to control access to internet based on MAC addresses of devices. How can I do that?
-1
votes
1answer
447 views

How to block magnet links using Squid WEB proxy

I have Squid filtering all my WEB traffic running on port 80, I managed to block all torrent links using this ACL acl mediapr urlpath_regex \.torrent$ but I am not able to block magnet links.
2
votes
0answers
459 views

squid transparent proxy https

i hope someone can help me. i have this problem: squid is running as a ssl transparent proxy, and at the moment it's receiving all the traffic with these two iptables rules: iptables -t nat -A ...
0
votes
1answer
2k views

Iptables rule for squid transparent proxy block http requests

I have some iptables rules in a linux gateway (ubuntu server 12.04) and all works good. I configured a transparent squid proxy and works too. I'm using this rule. $IPT -t nat -A PREROUTING -p tcp ...
1
vote
1answer
729 views

Logrotate: Postrotate setfacl failed with no such file or directory error

I set some extended ACL entries for /var/log/squid3/ and /var/log/squid3/access.log. sudo setfacl -m u:jetty:r-x,g:adm:r-x /var/log/squid3 sudo setfacl -m u:jetty:r--,g:adm:r-- ...
0
votes
1answer
31 views

prepare domain list to work with squid 3.x

the latest version of squid do not accept duplicated domains like: example.com pre.example.com --- this is no longer necessary and it requires domains to start from "." adding dot is simple: ...
0
votes
1answer
319 views

DansGuardian+Squid3 (Ubuntu 12.04) on external VPS won't work transparently

My goal is to have an externally located DansGuardian + Squid setup to be used by only certain machines (the kids, especially) in my home. I've managed to install both on a cheap VPS, and I've had ...
0
votes
0answers
213 views

Setting Up Squid Proxy Server With A Different Gateway

I have a problem in my networking study. There's a network that has 192.168.0.1 as the router gateway. All of the client's PCs are in a same network (used IP are 192.168.103-110). And then I want to ...
0
votes
1answer
58 views

Domain prefix in squid - bypassing rules

I have successfully setup squid service and start to block domain : acl blocked dstdomain "/mypath/to/blockedlist" http_access deny blocked in "blockedlist" file i have: site1.pl site2.pl When i ...
0
votes
1answer
545 views

iptables rules for a transparent squid2.7 proxy, and a single network interface

I want to use Squid 2.7 as a transparent caching proxy for HTTP traffic on a Raspberry Pi running Debian Linux. The raspberry pi will be connected to my wifi router (MBR1400) using a single network ...
3
votes
1answer
626 views

Squid 3.2 - Proper configuration for random outbound IP with a single user authentication?

I'm attempting to use AclRandom for Squid 3.2 and I think I'm a bit confused on the proper method for this. Here is my configuration: http_port 3128 auth_param basic program ...
0
votes
0answers
149 views

how change the output IP of every PROXY to it's own IP in CentOS (SQUID- Multiple IP)?

i configured a proxy server in CentOS server using with squid i have multiple ips like these : 192.233.76.1 ~ 100 i've added those ips to my one interface. so every HTTPS proxy works well -> ip ...
0
votes
3answers
5k views

Can't Block https://facebook using squid Transparent

I'm using Squid Proxy 3.1 as transparent proxy server, I want to block facebook.com but while listed in blocked list , Some user's accessing facebook using https, how can i block only https for ...
2
votes
2answers
1k views

Squid: disable X-Forwarded-For, but only for specific ACLs

I know, that I can turn off X-Forwarded-For header in Squid completley by using directive "forwarded_for off" or "forwarded_for delete" globally. I would like to be able to disable that header only ...