Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
1answer
1k views

Iptables rule for squid transparent proxy block http requests

I have some iptables rules in a linux gateway (ubuntu server 12.04) and all works good. I configured a transparent squid proxy and works too. I'm using this rule. $IPT -t nat -A PREROUTING -p tcp ...
1
vote
1answer
628 views

Logrotate: Postrotate setfacl failed with no such file or directory error

I set some extended ACL entries for /var/log/squid3/ and /var/log/squid3/access.log. sudo setfacl -m u:jetty:r-x,g:adm:r-x /var/log/squid3 sudo setfacl -m u:jetty:r--,g:adm:r-- ...
0
votes
1answer
24 views

prepare domain list to work with squid 3.x

the latest version of squid do not accept duplicated domains like: example.com pre.example.com --- this is no longer necessary and it requires domains to start from "." adding dot is simple: ...
0
votes
1answer
290 views

DansGuardian+Squid3 (Ubuntu 12.04) on external VPS won't work transparently

My goal is to have an externally located DansGuardian + Squid setup to be used by only certain machines (the kids, especially) in my home. I've managed to install both on a cheap VPS, and I've had ...
0
votes
0answers
97 views

How to prioritize Squid Cache Delay Pools

So I have the following squid cache delay pool configurations: # DELAYS delay_pools 2 delay_class 1 1 delay_class 2 1 delay_access 1 allow parents delay_access 1 deny all ...
0
votes
0answers
203 views

Setting Up Squid Proxy Server With A Different Gateway

I have a problem in my networking study. There's a network that has 192.168.0.1 as the router gateway. All of the client's PCs are in a same network (used IP are 192.168.103-110). And then I want to ...
0
votes
1answer
52 views

Domain prefix in squid - bypassing rules

I have successfully setup squid service and start to block domain : acl blocked dstdomain "/mypath/to/blockedlist" http_access deny blocked in "blockedlist" file i have: site1.pl site2.pl When i ...
0
votes
1answer
485 views

iptables rules for a transparent squid2.7 proxy, and a single network interface

I want to use Squid 2.7 as a transparent caching proxy for HTTP traffic on a Raspberry Pi running Debian Linux. The raspberry pi will be connected to my wifi router (MBR1400) using a single network ...
3
votes
1answer
487 views

Squid 3.2 - Proper configuration for random outbound IP with a single user authentication?

I'm attempting to use AclRandom for Squid 3.2 and I think I'm a bit confused on the proper method for this. Here is my configuration: http_port 3128 auth_param basic program ...
0
votes
0answers
116 views

how change the output IP of every PROXY to it's own IP in CentOS (SQUID- Multiple IP)?

i configured a proxy server in CentOS server using with squid i have multiple ips like these : 192.233.76.1 ~ 100 i've added those ips to my one interface. so every HTTPS proxy works well -> ip ...
0
votes
3answers
4k views

Can't Block https://facebook using squid Transparent

I'm using Squid Proxy 3.1 as transparent proxy server, I want to block facebook.com but while listed in blocked list , Some user's accessing facebook using https, how can i block only https for ...
2
votes
2answers
881 views

Squid: disable X-Forwarded-For, but only for specific ACLs

I know, that I can turn off X-Forwarded-For header in Squid completley by using directive "forwarded_for off" or "forwarded_for delete" globally. I would like to be able to disable that header only ...
0
votes
1answer
71 views

Where to install squid? on the web server or the database server?

I had my Ecommerce web application on a single server setup but now I am planning to separate out the web server and database server on different machines. Just want to understand where should I ...
1
vote
0answers
449 views

nginx proxypass squid

I'm trying to run squid server behind nginx. my sample configuration : location ~* ^/get/(.*) { proxy_pass http://ip:3128; proxy_set_header Host evenstatichostnamefortest.com; ...
1
vote
1answer
435 views

Authentication to Squid proxy with a RADIUS-authenticated client

I want to set up a wireless environment where WPA2-Enterprise is used for authentication to a FreeRADIUS server (using EAP-TTLS or PEAP), and the wireless client is seamlessly routed through and ...
4
votes
0answers
8k views

Configure Squid as an HTTPS forward proxy?

Here's some background about my problem: I have a web service running on Heroku, with a dynamic IP address. Static IPs on Heroku are not an option. I need to connect to an external web service which ...
1
vote
1answer
757 views

Squid loads some website very slow

I installed a couple of weeks ago squid on my network and first it was making websites load very slow with the default configuration but after a few changes in the squid.conf (copied from a different ...
0
votes
0answers
726 views

squid transparent proxy seems to “break” internet connectivity (http - port 80 only)

I have had a firewall & proxy server running for the past 2 years. it is based on slackware64 - v14.0 and has generally been up long periods of time between reboots. Up until recently it was ...
1
vote
0answers
723 views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
0
votes
2answers
731 views

squid specify outgoing network interface

I have a Linux Debian machine with many network interfaces (venet0:1 to venet0:5) running Squid. If I connect to interface venet0:2 squid uses venet0:0 for outgoing traffic but I want Squid to use the ...
0
votes
2answers
2k views

squid slow initial webpage loading

i believe i have managed to sucsessfully install squid on my debian 7 server, however whenever i attempt to use it loading of the first from a domain is incredibly slow, subsequent page loads from the ...
1
vote
1answer
738 views

Squid Proxy Ubuntu 13.1 and iOS AppStore

I have a squid proxy set up on my home network and I can't seem to set it up to allow apple AppStore traffic to passthrough. I am running Diladele Web Security on top of squid3.3.8 I have added ...
-1
votes
1answer
119 views

LightSquid ldap authentication fails

I have a lightsquid server to generate reports about Internet use. It is integrated with LDAP server. I cant login in lightsquid web page. cat /var/log/apache2/error.log Thu Dec 26 13:54:04 2013] ...
0
votes
1answer
780 views

How to configure squid to act as a virtual host for docker images

I have a server which is running a bunch of docker images (which basically just host a bunch of websites) they all have different domain names all pointing to the server's IP (lets say the server IP ...
0
votes
2answers
331 views

NAT vs Proxy server

I have installed squid proxy server to hide our network ips after some time it becomes slow then I read through NAT rules to achieve what I want by proxy server. As per this link the difference ...
2
votes
1answer
230 views

squid doesn't cache anything at all

I have configured squid for anonymous search and cache proxy. Initially it was working well, after two weeks it becomes slow(loading web page become slow) then again I had to looked into squid. I saw ...
1
vote
1answer
82 views

Squid and more hosts

I configurated my Squid as tranasparent cache on a visible_host myhost.com Now I need to make a test: - I modified my hosts file to redirect browser request myHost2.com to the same machine (squid + ...
1
vote
1answer
2k views

Squid 3.4 transparent https proxy

I'm trying to get a transparent https proxy setup working. I'm not looking to intercept or anything, I would like the https traffic to just be forwarded to the real host. In squid I have something ...
1
vote
0answers
43 views

squid as parent of url filtering

I have this situation: client -> url-filtering -> squid -> internet The squid proxy sees all clients as a single IP ( of url filtering) so I have a lot of connections from a single IP. Squid is the ...
0
votes
2answers
245 views

Squid no more max_user_ip?

I'm compiling latest squid (3.4) and I noticed it's complaining about my (working) rules regarding max_user_ip: acl concurrent_browsing max_user_ip -s 5 I checked the configs and it seems it ...
1
vote
0answers
329 views

Squid denying access

I have this box I'm trying to setup squid on. I've got it working up to 99% so far because I have an error somewhere that I can't find. Consider the following ACL part: acl inbound_myip_1 myip ...
0
votes
1answer
283 views

Squid Session User Authentication

I installed Squid Transparent with Session External helper [1]. Then I created a PHP login page and user can login with his UserName, Password. But the problem is that when user login via his correct ...
-1
votes
1answer
981 views

How to Setup iptables for a squid proxy with just one HW-NIC

I got a Server with a static ipadress for rent and now i want to setup a transparent proxy on this server. after i configured the squid for testing purposes with the listener "http_access allow all", ...
0
votes
2answers
1k views

NTLM through proxy server

We use squid as a HTTP proxy (if needed I can modify it's configuration). We want to access a website that uses ntlm for authentication When we go on the website through squid we see a blank page ...
0
votes
2answers
4k views

Squid makes Internet slow

I have configure squid proxy in our network on ubuntu server. All the traffic being divert to proxy server by Mikrotik router. After I configure squid proxy I changed /etc/squid3/squid.conf as ...
0
votes
1answer
2k views

TCP port numbers reused and TCP Retransmission

Facing issues due to TCP Port Reuse and Retransmission for HTTP traffic. My deployment is as follows: enter image description here I have a squid proxy installed on a unix machine which is sending ...
1
vote
1answer
189 views

DNS issue with Squid 3

I use a Linux gateway (Ubutnu Server) to provide internet on my local network. I also use Opendns for website blocking. I have used Opendns servers on the gateway to forward DNS requests. However, ...
0
votes
1answer
187 views

Squid proxy: LAN IPs are not hide for remote desktop

I want to hide our internal LAN IP's(static IPs) behind squid proxy. I have done configuration, now all the traffic are going through squid proxy only. What I assume that after I configure squid no ...
2
votes
1answer
89 views

web sites know the “real” access user(IP) through a proxy?

I'm new to Squid and iptables, and am investigating whether they would be able to accomplish a task at hand. part of my squid.conf: acl wf myport 8010 acl vp myport 8020 acl ss myport 8030 ...
1
vote
1answer
2k views

Multiple SSL certificates with Squid reverse proxy

I have been upgrading my network from using an apache reverse proxy (Not quite powerful enough) to a Squid proxy configured just for reverse use. My squid proxy is on a CentOS 6 VM, and currently ...
1
vote
1answer
189 views

Individual authenticated proxy configurations for VMs sharing a server

Problem. Hi all, I am in the need of having a small number of virtual machines living in a particular server. Each machine should have its own proxy configuration, but the software running in them ...
0
votes
1answer
76 views

Algorithm/Method to save costs of running filtering proxy on AWS EC2

I am trying to set up a Squid Proxy combined with DansGuardian Content filtering engine on EC2. I will be filtering traffic from mobile(IOS/Android) clients via this filtered proxy but that could mean ...
0
votes
0answers
75 views

Squid3: Send domain and IP to an other proxy and everything else direct to Internet

I want all *.domain.com, 10.225.*, 132.142.* requests to go forward on an other proxy server and everything else to go straight to the Internet. The server with Squid3 has full Internet access behind ...
0
votes
1answer
651 views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
0
votes
0answers
260 views

Squid Proxy - IPv6 Connections Refused

Can't load anything from Google over Squid which is largely IPv6 territory. Lots of TCP_MISS due to CONNECT failures in the access.log, like: TCP_MISS/200 0 CONNECT www.google.com:443 - ...
1
vote
1answer
1k views

What command should be used to connect via SSH through squid proxy?

I have set up a Squid HTTP Proxy (in centOS) and intended to use it also for ssh connections. Managed to configure putty (in a windows client) to use this proxy while connecting by ssh. Confirmed in ...
3
votes
1answer
1k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
1
vote
2answers
351 views

How to configure RRAS to route all traffic through squid proxy?

I have a VPN server up and running on a windows server 2003. All the users are able to connect to the server and NAT their IP (use server IP and internet). but my problem is government filtering on my ...
-1
votes
1answer
150 views

Certain URLs (and some content) not being blocked by DansGuardian

In attempting to configure DansGuardian I've had difficulty blocking certain search sites, though it also differs between browsers. I'm using the word "twerk" for testing as there's no instance of it ...
0
votes
0answers
158 views

Benefits of using Squid over SSH vs a dynamic SSH tunnel

Recently someone at my place of work set up Squid for convenience so that a bunch of us can use it if we want. Since it's not publicly accessible we'd need to SSH to the server and set up a tunnel. ...