Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
2answers
1k views

DNS issue with squid

I'm having DNS issues with a squid setup. I also tried using dns_nameservers directive in my squid.conf to point to the DNS servers. I have a scenario where www.example.com is supposed to go out to ...
0
votes
0answers
245 views

Squid SSL Protocol error

What is the issue of this error in Squid? (I Don't find anything in google) The system returned: (71) Protocol error The remote host or network may be down. Please try the request again. my ...
2
votes
1answer
123 views

How to get squid to access to referred URLs?

I have my whitelist setup and everything seems to be working perfectly. Except for one thing. Some of the sites host their assets on some sort of CDN (internal or external). As a result, certain sites ...
-2
votes
1answer
86 views

manage connection to proxy for local sites

I'm an admin for a company and my company has internal network, and also it has internet access. All users from inside the company configured to use a proxy server, and all their URL queries will go ...
0
votes
0answers
42 views

How to configure logs in Squid3

I want to configure the access.log on squid so I can read the reports with SARG, but I don't really know how to to it, as uncommenting this line #Default: access_log /var/log/squid3/access.log squid ...
0
votes
1answer
365 views

Start Squid Cache Proxy

I'm having trouble starting squid. I type in console squid -k shutdown and get: squid: ERROR: Could not send signal 15 to process 2065: (3) No such process I have checked and process "2065" ...
1
vote
1answer
95 views

Squid MISSes reloading pages that should be cached

I've been fighting this for a while, but I can't seem to understand why a request isn't being cached. Response headers: HTTP/1.1 200 OK Date: Tue, 20 Aug 2013 16:42:12 GMT Server: Apache/2.2.23 ...
0
votes
1answer
513 views

Squid forward cache to HAProxy load balancer

I have a farm of Squid proxies set up behind an HAProxy load balancer. I would like to cache data that is returned from the Squid proxies, the architecture I am considering would look something like ...
0
votes
1answer
340 views

Is there any way to log HTTPS requests (URLs) in a proxy server (Squid no transparent proxy)?

We do not want to know what is inside the package. Only monitor the destination URLs. Is it possible? In other words: I want the Squid log accesses without being transparent proxy.
2
votes
1answer
920 views

Squid3 trying to add a custom external_acl_type

I'm trying to create an external acl helper for squid3 to (hopefully) cut down some config lines from my squid3 server and I wrote a simple python script for it: #!/usr/bin/python import sys import ...
1
vote
1answer
483 views

how do I force Apache to use http_proxy on Localhost for outbound traffic without iptables?

I have a webserver with several applications of several users. Since I'm not sure what the applications are doing and which outbound http/https traffic they produce, I want to get more control about ...
1
vote
1answer
93 views

Proxy to remote proxy?

One of our partners require us to use one of their proxies in order for us to reach various services there. What I would like to achieve is to set up a local proxy at which I point the domains, so ...
0
votes
3answers
288 views

Squid: restrict proxy_auth (userid) only from selectec sources (src ip)

I need a way to restrict userid (proxy_auth) only from authentic user pc (src ip). Because: a userX take lent a userid (login) from another user (boss user) and can access all sites without ...
0
votes
1answer
393 views

squid proxy ext_session_acl missing from RPM package

After installing squid 3.1/3.2/3.3 on Fedora 18, Centos 6 or RHEL 6, the session helper file ext_session_acl is missing. Compiling from 3.3.source, it doesn't get compiled even when given argument to ...
1
vote
1answer
506 views

Squid workers and server cpus

Allright so I'm about to upgrade my box (with 2k external ips) to the latest squid (3.3.x) since my old version do not take any advantage of the multi-core processors. While researching on the ...
1
vote
1answer
629 views

Squid Proxy and AD auth generating errors on Squid startup

I need some advice with an error i am getting when trying to start Squid which has integrated NTLM / AD auth setup. heres the back story: I've followed this guide word for word on the setup, ...
0
votes
1answer
381 views

/etc/hosts configuration file is ignored when behind a squid proxy

I put this in my /etc/hosts file: 198.252.206.16 stackoverflowtest.com And when I try stackoverflowtest.com in my browser, I get this squid error: ERROR The requested URL could not be retrieved ...
1
vote
0answers
597 views

Is this possible to filter https request using squid acl?

I am using squid proxy 3.1. I want to allow users to access particular domain urls only. Say allow only this url "https://google.com/search" through squid proxy. Default squid does not know the url ...
0
votes
2answers
1k views

Squid transparent proxy connected to another proxy

Sorry for my terminology I am not proxy expert. What I need to do is to have a very simple HTTP(S) proxy on one side without any client authentication (this is so that clients don't need to supply ...
0
votes
1answer
237 views

Legality of using Squid with --enable-ssl in production [closed]

Background: I am building a server application, deploying on Debian. I want to use Squid's accelerator modes to cache the resources generated by my server. Squid will most likely run on the same box ...
1
vote
1answer
736 views

Proxy Bypass Rule (serverside)

Using squid proxy, I'd like to (by)pass traffic from clients to a specific IP/domain. No matter who is using the proxy (client IP or auth), the proxy should not be the man in the middle for any ...
1
vote
1answer
2k views

Squid Proxy TCP_Miss all the time, not caching at all

I've install Squid Proxy via sudo apt-get install squidon Ubuntu for a forward proxy I've not modified any of the default settings in squid.conf apart from http_access deny all to http_access allow ...
0
votes
2answers
116 views

Web caching with SSL connection and dynamic contents

I have some questions about web-caching systems. If I use systems like Squid, Varnish as reverse-proxy in front of my architetture: Is possible to have SSL connection from user to my proxy and SSL ...
3
votes
1answer
143 views

Selective use of transparent proxy on per-connection basis

TL;DR - I'm planning on using an application-level firewall to forward only requests for HTML content to a transparent proxy. So the initial GET request for google.com (for example) that returns an ...
1
vote
1answer
180 views

Squid not block HTTPS

I broke my squid proxy. It stopped blocking HTTPS sites in the acl.denied_domains file, but still blocks the HTTP sites. This was working till I edited my squid.conf file, and I do not have a backup. ...
0
votes
2answers
547 views

Defensing againt DDoS attack on Squid server [duplicate]

My Squid (3.1.20 on Ubuntu 13.04) is under DDoS attack (with about 1000 different IPs). I'm using Basic Authentication on it and all of those requests are getting DENIED response but still they ...
2
votes
1answer
222 views

how to achieve temporary page in squid 3?

I'm trying to achieve a temporary announcement page for all the client requests, which means this page will disappear after a few seconds and the URL will be back to the original client request. I ...
1
vote
0answers
62 views

Best effort (failover) HTTP proxy use in aptitude?

I was installing a new Ubuntu 13.10 (daily build) for testing, and came to the option of being able to configure an HTTP proxy server for aptitude. It's been a while since I've sat through an ...
0
votes
0answers
114 views

how to use two squid proxy by iptables

I have two Linux machines with squid installed: 192.168.0.60:3128 and 192.168.0.70:3128. I want to setup a transparent proxy: 192.168.0.60:3128 to deal with http protocol 192.168.0.70:3128 to deal ...
-2
votes
1answer
64 views

Setting up a DHCP/Proxy Server

Current setup: Modem -> Firewall(DHCP) -> Switch and Wireless Router |-> Computers If I wanted to setup a Proxy Server in there, it would have to replace the Firewall correct? The idea is so that ...
0
votes
1answer
3k views

Squid Proxy: url_regex acl is not working?

I am using squid proxy 3.1 in ubuntu machine. I want to allow only urls matching our pattern through our proxy server. I configured acl like below. Acl for dstdomain is working fine. If i access any ...
3
votes
1answer
290 views

Squid proxy in cent os often disconnected with error : tunnelConnectTimeout(): tunnelState->servers is NULL

I am having very often internet disconnection problem with Squid proxy service. My server config; OS: CentOS release 6.3 (Final) model name : Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz cpu MHz : ...
0
votes
0answers
141 views

Squid proxy server not forwarding traffic

I'm trying to set up a web filtering system (dans guardian) on my home network but am failing at the first hurdle - configuring the Squid Proxy server. No matter what I do I cannot seem to configure ...
2
votes
1answer
236 views

Outline squid server - redirect traffic with pf

What's my goal: know what employee are looking in Internet (what pages, how long etc; no caching). What I did: install squid on openBSD Problem: I see whole traffic (tcpdump), but I can't redirect ...
1
vote
1answer
2k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
4
votes
1answer
348 views

Running pfSense server after load balancer, dhcp?

I got the following situation: Two wan, load balanced by a hardware load balancing router Wifi network (can be up to twenty AP's) And I need the following: Need a captive portal where clients ...
1
vote
0answers
637 views

Local transparent proxy with ipfw and squid

I want to use a local transparent proxy to have a single place to enter the password to an office proxy. Basically, all the TCP packets sent to port 80 except the ones sent to specific subnet should ...
2
votes
2answers
1k views

IE supplies wrong username for NTLM Proxy Auth

We have a managed proxy based on Squid, using NTLM "fakeauth" authentication. The system has been running well for over a year. My issue lies in the client I believe. Yesterday, a specific user on a ...
0
votes
2answers
1k views

What's the minimum required Squid config to make a public proxy server?

I'm trying to configure Squid3 proxy server that any IP address on the internet can access, but default settings horrible and whatever I do it keeps giving TCP_DENIED/403 What's the minimum config ...
0
votes
1answer
175 views

Squid3 for Debian updates with upstream proxy

I often need to setup new Debian servers, so I'm trying to setup a Squid proxy to cache apt-get updates/upgrades. But I always have a problem with some specific files it can retrieve. Details: i'm ...
0
votes
2answers
593 views

Can Squid 2.7 proxy gzipped content

We have a forward proxy for our network which is Squid 2.7. This is managed for us by a third party. We noticed recently that http requests going from our network to the web were having the ...
0
votes
0answers
259 views

Client can not access some HTTPS through Squeeze gateway

I have a gateway (+firewall +proxy) set up on a Squeeze box with 2 NICs. The problem is the client cannot see some of the HTTPS (for example they can go https://mail.google.com but not ...
2
votes
1answer
489 views

Cycling through outbound IP addresses with squid

A Squid server at work is being used to route requests through multiple external IP addresses. I'm doing the named-IP routing with the solution at my own question on Unix.SE. Another piece of the ...
4
votes
1answer
449 views

How can I make squid add its own http header to the reply, based on ACL?

I have a Squid server at work doing Squid-ly things. I need to have Squid reply with a particular header based on matching an ACL. The header is a custom one that will look something like ...
2
votes
1answer
586 views

Bandwidth Manager Using Squid

I am trying to create a internet distribution software for an ISP (an internet distributor or a school or other such organizations) like the one here It will have restrictions and policies for users ...
0
votes
1answer
647 views

Why does Squid very rarely get TCP_HIT the log, which consists mostly of TCP_MISS?

I am using Squid v2.7. I am getting lots of TCP_MISS messages in the log, and very few TCP_HIT. What does this mean? p.s. Here is a sample of the log: 1369840631.853 59 127.0.0.1 TCP_MISS/200 ...
2
votes
1answer
1k views

Squid proxy: how to link inbound IPv4+port to outbound IPv6

I'm trying to setup a squid proxy that will accept multiple inbound connections on one IPv4 across a range of ports, and for each port connection to connect out on a unique IPv6 address. I've named ...
-1
votes
1answer
209 views

How to measure performance for a download behind a proxy

I would like to measure the download performance of my company's proxies. Browsing could take ages whereas my company has two redundant high speed internet access (2 x 100MB/s) and it seems that the ...
0
votes
0answers
97 views

squidGuard not working in browser

I'm currently involved in a project to make a child friendly browser for android We're testing different setups at the moment but a proxy server seems to make the most sense and I was instantly drawn ...
3
votes
6answers
4k views

Force clients to use proxy

Here's my network configuration: The proxy server is running Ubuntu with Squid on port 3128 and DansGuardian on port 8080. I'd like to force all clients to use the proxy server - specifically, ...