Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

1
vote
0answers
59 views

Best effort (failover) HTTP proxy use in aptitude?

I was installing a new Ubuntu 13.10 (daily build) for testing, and came to the option of being able to configure an HTTP proxy server for aptitude. It's been a while since I've sat through an ...
0
votes
0answers
107 views

how to use two squid proxy by iptables

I have two Linux machines with squid installed: 192.168.0.60:3128 and 192.168.0.70:3128. I want to setup a transparent proxy: 192.168.0.60:3128 to deal with http protocol 192.168.0.70:3128 to deal ...
-2
votes
1answer
61 views

Setting up a DHCP/Proxy Server

Current setup: Modem -> Firewall(DHCP) -> Switch and Wireless Router |-> Computers If I wanted to setup a Proxy Server in there, it would have to replace the Firewall correct? The idea is so that ...
0
votes
1answer
2k views

Squid Proxy: url_regex acl is not working?

I am using squid proxy 3.1 in ubuntu machine. I want to allow only urls matching our pattern through our proxy server. I configured acl like below. Acl for dstdomain is working fine. If i access any ...
3
votes
1answer
247 views

Squid proxy in cent os often disconnected with error : tunnelConnectTimeout(): tunnelState->servers is NULL

I am having very often internet disconnection problem with Squid proxy service. My server config; OS: CentOS release 6.3 (Final) model name : Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz cpu MHz : ...
0
votes
0answers
128 views

Squid proxy server not forwarding traffic

I'm trying to set up a web filtering system (dans guardian) on my home network but am failing at the first hurdle - configuring the Squid Proxy server. No matter what I do I cannot seem to configure ...
2
votes
1answer
205 views

Outline squid server - redirect traffic with pf

What's my goal: know what employee are looking in Internet (what pages, how long etc; no caching). What I did: install squid on openBSD Problem: I see whole traffic (tcpdump), but I can't redirect ...
1
vote
1answer
1k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
4
votes
1answer
310 views

Running pfSense server after load balancer, dhcp?

I got the following situation: Two wan, load balanced by a hardware load balancing router Wifi network (can be up to twenty AP's) And I need the following: Need a captive portal where clients ...
1
vote
0answers
576 views

Local transparent proxy with ipfw and squid

I want to use a local transparent proxy to have a single place to enter the password to an office proxy. Basically, all the TCP packets sent to port 80 except the ones sent to specific subnet should ...
2
votes
2answers
850 views

IE supplies wrong username for NTLM Proxy Auth

We have a managed proxy based on Squid, using NTLM "fakeauth" authentication. The system has been running well for over a year. My issue lies in the client I believe. Yesterday, a specific user on a ...
0
votes
2answers
1k views

What's the minimum required Squid config to make a public proxy server?

I'm trying to configure Squid3 proxy server that any IP address on the internet can access, but default settings horrible and whatever I do it keeps giving TCP_DENIED/403 What's the minimum config ...
0
votes
1answer
166 views

Squid3 for Debian updates with upstream proxy

I often need to setup new Debian servers, so I'm trying to setup a Squid proxy to cache apt-get updates/upgrades. But I always have a problem with some specific files it can retrieve. Details: i'm ...
0
votes
2answers
475 views

Can Squid 2.7 proxy gzipped content

We have a forward proxy for our network which is Squid 2.7. This is managed for us by a third party. We noticed recently that http requests going from our network to the web were having the ...
0
votes
0answers
232 views

Client can not access some HTTPS through Squeeze gateway

I have a gateway (+firewall +proxy) set up on a Squeeze box with 2 NICs. The problem is the client cannot see some of the HTTPS (for example they can go https://mail.google.com but not ...
2
votes
1answer
384 views

Cycling through outbound IP addresses with squid

A Squid server at work is being used to route requests through multiple external IP addresses. I'm doing the named-IP routing with the solution at my own question on Unix.SE. Another piece of the ...
4
votes
1answer
396 views

How can I make squid add its own http header to the reply, based on ACL?

I have a Squid server at work doing Squid-ly things. I need to have Squid reply with a particular header based on matching an ACL. The header is a custom one that will look something like ...
2
votes
1answer
512 views

Bandwidth Manager Using Squid

I am trying to create a internet distribution software for an ISP (an internet distributor or a school or other such organizations) like the one here It will have restrictions and policies for users ...
0
votes
1answer
535 views

Why does Squid very rarely get TCP_HIT the log, which consists mostly of TCP_MISS?

I am using Squid v2.7. I am getting lots of TCP_MISS messages in the log, and very few TCP_HIT. What does this mean? p.s. Here is a sample of the log: 1369840631.853 59 127.0.0.1 TCP_MISS/200 ...
2
votes
1answer
933 views

Squid proxy: how to link inbound IPv4+port to outbound IPv6

I'm trying to setup a squid proxy that will accept multiple inbound connections on one IPv4 across a range of ports, and for each port connection to connect out on a unique IPv6 address. I've named ...
-1
votes
1answer
173 views

How to measure performance for a download behind a proxy

I would like to measure the download performance of my company's proxies. Browsing could take ages whereas my company has two redundant high speed internet access (2 x 100MB/s) and it seems that the ...
0
votes
0answers
84 views

squidGuard not working in browser

I'm currently involved in a project to make a child friendly browser for android We're testing different setups at the moment but a proxy server seems to make the most sense and I was instantly drawn ...
3
votes
6answers
3k views

Force clients to use proxy

Here's my network configuration: The proxy server is running Ubuntu with Squid on port 3128 and DansGuardian on port 8080. I'd like to force all clients to use the proxy server - specifically, ...
0
votes
5answers
1k views

Configure Squid to cache images explicitly called from img src=“”

Instead of hot-linking to external images from my application I'd like to cache them on my server where my web app resides, e.g. instead of <img src="http://api.domain.com/image/1234.jpeg" /> ...
0
votes
0answers
503 views

Can't get Squid to work with Intercept

I have a Sqiud Proxy server I am trying to add Transparency to using the Intercept feature. Currently the Proxy server accepts and functions fine as a standalone proxy for users. However when I add ...
0
votes
0answers
190 views

Squid https_port not responding

I set up an squid with https_port. My goal is to connect from browser to squid with ssl. documentation says that squid can handle this kind of browser-squid connection. So i set https_port with ...
1
vote
0answers
268 views

Internet Explorer issues with wpad.dat

I am setting up a Squid caching proxy server at work to cache some map data for one of our web apps. My wpad.dat works great in Firefox & Chrome but it does not work correctly with Internet ...
0
votes
1answer
143 views

Squid “refusing connections” with big ACL

I've successfully set up squid and it's working as is should. I'm using "Squidman" on OS X Server (underlying squid version is 3.1.12). However, I want to use squid to block certain porn sites, so I ...
0
votes
1answer
657 views

configure squid3 as transparent proxy

After adding this lines to the file squid.conf: httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on I'm having this error message: * Restarting ...
0
votes
0answers
60 views

config squid to set specific acl for username and then set it to the ip addr of username

Assume your executive of corporation, sit on his clerk desk PC, and login to his username on the network (authenticate with Active Directory), of course he wants his full access to internet, but he ...
0
votes
1answer
825 views

preventing squid forwarding loop with IPtables

I have a web application, and I'd like to limit file upload size. I thought I'd try using squid for this, via its directive request_body_size_max. I have my webserver running on port 8080, and I've ...
0
votes
1answer
69 views

Reverse proxy to proxy traffic to (external dns) *.domain.com to internal <str[1-…>.domain.com dns

I'd like to configure a reverse http proxy to serve traffic from numerous internal webservers while exposing a single external ip. I plan to have an externally published wildcard dns for ...
0
votes
0answers
394 views

Squid Proxy Splash page always showing up

I am further along with using Squid to present a splash page to guest users, and I wrote a basic HTML splash page to be presented to users. I wrote the Splash page HTML to grab the url from Squid ...
0
votes
1answer
426 views

Filter HTTPS URLs with non-transparent proxy

I have set up a Squid v.3.1 + Squidguard, the proxy is configured on each browser via a proxy.pac file. Now if an user goes to a blocked site with HTTP (e.g. http://www.facebook.com) the Url filter ...
1
vote
2answers
2k views

Configure apt to use proxy in vagrant box

I'm using Vagrant to setup a virtual machine for testing. I would like apt inside the virtual machine to use a proxy on the host machine to allow caching of all the downloads to persist between ...
0
votes
1answer
131 views

Squid releasing CSS files unnecessarily

The setup I have has Firefox talking to a web server with Squid being a caching proxy. Firefox <--> Squid (ssl_bump) <--> Web server While images (even on https) are cached and do see cache ...
1
vote
2answers
759 views

Bypass transparent Squid proxy on Tomato USB for specific sites

I'm using a router with Tomato USB to forward port 80 requests to a Ubuntu Server with Squid 3 in transparent mode. Someone on the Tomato forum adapted these instructions for Tomato: #!/bin/sh ...
1
vote
1answer
461 views

Squid Proxy Splash Page based on Subnet

I am trying to use the Splash page feature that squid has, but I am trying to have it used only on certain subnet. I cannot figure out a way to use two ACLs to do this. I have the following in my ...
-2
votes
1answer
141 views

Can Squid or other open-source proxy server be set up to process HTTPS encrypted traffic? [closed]

I would like to set up a home proxy server which would filter ads and viruses even before they get to the browser. The problem in this case is that many web sites use encrypted HTTPS connections and I ...
1
vote
2answers
887 views

squid: can't connect to peer with tcp_outgoing_address

I encountered the problem with configuration of two squid servers. I have the following scheme - The main idea is to download all files from rackspace and amazon through parent squid and store all ...
0
votes
1answer
196 views

How to use tcp_outgoing_address with cache_peer [duplicate]

I encountered the problem with configuration 2 squids. I have the following scheme - http://i.piccy.info/i7/0ecd5cb8276b78975a791c0e5f55ae60/4-57-1543/57409208/squids_schema.jpg The main idea is to ...
2
votes
0answers
317 views

Squid as fully transparent reverse proxy

I have got a few web servers running on my server and I want all of them to be accessible via port 80. I set up squid as a reverse proxy and it works fine. I, however, need the source ip address to be ...
1
vote
1answer
311 views

How to force outgoing requests from webserver/PHP through squid proxy on same machine?

I have a Debian Squeeze VPS configured as an nginx web server. For security reasons I have blocked all outgoing connections except those to the Debian update servers (this stops bad scripts from ...
1
vote
0answers
39 views

How to set up squid3 to respond with cache if back end server is down

I have a squid3 proxy set up at the moment as a transparent proxy. i am using the following in my config: http_port 3128 transparent acl localnet src 10.234.255.68/24 acl localhost src ...
1
vote
2answers
529 views

Squid proxy refusing to revalidate cache when Vary header present

squid.conf cache_effective_user squid http_access allow all # Squid normally listens to port 3128 http_port 3128 accel defaultsite=localhost no-vhost ignore-cc cache_peer localhost parent 80 0 ...
4
votes
1answer
1k views

Squid proxy not caching anything

squid.conf: http_access allow all # Squid normally listens to port 3128 http_port 3128 accel defaultsite=localhost no-vhost cache_peer localhost parent 80 0 no-query originserver name=myAccel ...
0
votes
3answers
174 views

Setup a http proxy server in linux so that Web users behind a big firewall in another country can access the Web without filtering

I've already setup a SSH server. I can create a socks proxy and proxify the Internet connections from within a country that censores the Internet. The problem is that SSH proxies are too slow and for ...
0
votes
1answer
596 views

Squid as Transparent Proxy Opens only https websites not normal http

I installed and configured squid proxy as transparent proxy server. when i tried using firefox the proxy server works fine and i can access both ports https and http. but when i transparnet, i can ...
2
votes
1answer
531 views

Squid ssl_bump server_first

I am trying to test the ssl_bump server_first Squid directive, but I did not understand how it works. As far as I understood the ssl_bump directive has three working modes: None: HTTPS traffic is ...
1
vote
2answers
1k views

URL filtering HTTPS traffic

the configuration that I am dealing with is a transparent HTTP proxy: on the firewall all the HTTP traffic (port 80) is redirected to the proxy via iptables; Dansguardian is installed on the proxy, ...