Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

1
vote
2answers
5k views

How To Enable URL Filtering With Just Squid & C-ICAP

Before I posted this question, I read several set up guides online, the squid docs, c-icap docus, and also the ICAP RFC (3507). Unfortunately, the documentation for SQUID and C-ICAP does not provide ...
0
votes
0answers
24 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
-2
votes
0answers
26 views

Only HTTPS websites are accessible [on hold]

Yesterday, my company's network doesn't access HTTP websites, only HTTPS. This happend out of the blue. I tried turning off the Squid proxy, the openDNS, rebooting my WatchGuard firewall,.. I don't ...
0
votes
1answer
1k views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
1
vote
1answer
3k views

How do I tunnel an HTTPS proxy through a virtual machine (VMWare)

I have a personal setup at home using VMWare Workstation. I also have a set of Virtual Private Machines that run Squid, and therefore provide me HTTPS proxy tunnels. Using Proxifier, I can tunnel all ...
2
votes
3answers
2k views

Squid traffic tunneled through VPN

So what I'm trying to do is have a Squid Proxy run on 1 machine along side a VPN connection. What I want to happen is all traffic running though the Squad Proxy would run though the VPN for its ...
3
votes
2answers
9k views

Squid throws error, The requested URL could not be retrieved

Sometimes I am getting the following error The requested URL could not be retrieved While trying to retrieve the URL: http://groups.google.com/ The following error was encountered: Unable to ...
0
votes
0answers
11 views

connecting webmin console to remote squid proxy server

I have a Squid proxy running on windows 2008 system. I have another linux machine where i have installed webmin. Installing webmin on windows is a pain and require perl module thus i installed it on a ...
0
votes
2answers
3k views

TCP port numbers reused and TCP Retransmission

Facing issues due to TCP Port Reuse and Retransmission for HTTP traffic. My deployment is as follows: enter image description here I have a squid proxy installed on a unix machine which is sending ...
0
votes
1answer
1k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
-1
votes
0answers
118 views

transparent squid 3.5 + pf on freebsd 10.1

I'm having trouble with pf rule redirect http traffic to squid version 3.5.4 on FreeBSD 10.1. I set up squid like a transparent proxy, now I have pf and I want redirect every http connect to squid but ...
0
votes
1answer
2k views

Squidguard + LDAP (Active Directory) not working

I've been trying to configure a squid with squidguard and MS AD. I've successfuly linked my squid with my AD so far, but now, I want to link my squidguard with the active directory. I've followed ...
2
votes
1answer
922 views

Limit number of simultaneous connections squid makes to a single server

Note: I am asking about outbound concurrent connection limits, not inbound, which is sufficiently covered on existing questions Modern browsers typically open a large number of simultaneous ...
2
votes
2answers
1k views

Disabling the Squid Error pages

I've just started looking at using Squid for a project and can't seem to see an easy way of disabling the Squid error pages (e.g. "Name Error: The domain name does not exist"). We use a custom browser ...
1
vote
3answers
2k views

Squid via Haproxy

Anyone experienced with configuring Squid to forward requests to HAproxy? I use Squid as a proxy, with ACLs and other stuff, and I need to know if I can tell it to forward requests to HAproxy, which ...
1
vote
1answer
3k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
1
vote
3answers
7k views

Squid closing the connection on long HTTP GET requests

When running a database query on a specific external site we use, Squid seems to cut off the connection after a consistent period of time (just over a minute). The query is submitted through a ...
1
vote
0answers
14 views

Make a basic auth client authenticate on a digest auth proxy server

My company has a legacy application which needs to connect to the Internet. Unfortunately, our network staff has changed the proxy settings in order to accept digest authentication only, which this ...
0
votes
1answer
34 views

Prevent squid forwarding twice with transparent and non-transparent setup

I'm running squid in a small network. I've setup a couple of squid listening ports for different scenarios: http_port 3128 - This is will be pushed to Windows clients via domain policy, with the ...
0
votes
1answer
2k views

What “traffic flow” would be right in a transparent “squid + dansguardian” pfsense setup?

my thought (i'm not sure if its right): lan interface traffic comes into port 80 destination port is redirected to 8080 (dans guardian) dansguardian outputs traffic to port 3128 (squid) squid ...
1
vote
1answer
48 views

Creating an SELINUX allow rule for sockets error with clamd

I've got a CentOS 7 box configured as a Squid proxy, with clamav and Squidclamav. Normally I would just disable SELINUX, but I am attempting to understand and setup allow rules properly. I've managed ...
0
votes
0answers
23 views

Squid3 working from external network but getting random timeouts from internal network

I am using Squid 3 as a reverse proxy. It is working fine from external network, but when I make the same request from internal network, des request ends up in timeouts sometimes. Let me explain my ...
4
votes
6answers
20k views

How to setup client for squid transparent proxy?

Server Details Squid Transparent Proxy Version: 3.3.8 OS: Ubuntu Server 14.04 Server IP: 192.168.1.3 Squid config file (excluding comments using grep) root@ubuntu:~# grep -v '^$\|^\s*\#' ...
1
vote
1answer
1k views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
0
votes
1answer
53 views

Squid 3.1.22 with multiple delaypools for different subnet

i have a squid installed with squidguard. everything works great and now i want to implement a squid multi delay pool. i want to separate webspeed for every subnet but have also one unlimited to ...
0
votes
1answer
2k views

freebsd pf squid transparent

I have broken my brain dealing with this. Squid was built from ports /usr/ports/www/squid32 with PF_TP enabled. I have internet but strangely it bypasses squid. Obviously, squid logs are empty. I ...
0
votes
1answer
2k views

Redirect a HTTPS CONNECT using squid

I have deployed squid 3.4.8. It's primary purpose is to redirect users to internal landing pages since no Internet access is permitted or enabled on this network. Instead of letting browsers time ...
0
votes
2answers
1k views

squid specify outgoing network interface

I have a Linux Debian machine with many network interfaces (venet0:1 to venet0:5) running Squid. If I connect to interface venet0:2 squid uses venet0:0 for outgoing traffic but I want Squid to use the ...
-1
votes
0answers
65 views

squid/proxycap configuration to bypass squid proxy parent digest authentication

Hi my network proxy pass from plain text authentication to digest authentication and i want to hace a local caching proxy on my computer to reduce the amount of internet access. but with the digest ...
3
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
1
vote
3answers
1k views

Two Squid chaining

I have two squid servers, Squid A and Squid B. Squid A transparently caches for the local network. I would like to set up Squid A so that on a request for an URL matching a regexp, instead of ...
1
vote
2answers
522 views

How can I make my proxy server use a proxy to access another proxy

I need to set up a HTTP proxy server (call it server A) for users to access Internet. For some reason, it needs to forward all the requests to another HTTP proxy server (call it server C). But C is ...
0
votes
1answer
48 views

How do I use Squid to redirect an incomig request to another host?

I'm trying to integrate an internal GitLab installation with a Slack incoming webhook but I have a problem, the machine where GitLab can only access other machines in the same network. I have VM which ...
0
votes
0answers
18 views

transparent option for http_port causes error in Squid3

When we have http_port 3128 in squid.conf, the Squid proxy works OK but is not transparent. However changing it to http_port 3128 intercept causes an error Access control configuration prevents your ...
0
votes
2answers
71 views

Squid3 'The proxy server is refusing connections'

Whenever I try to connect to my Squid3 Proxy server, I get the 'Proxy server is refusing connections' error. Here's my config: #Recommended minimum configuration: acl manager proto cache_object ...
1
vote
2answers
1k views

Working configuration for transparent FTP caching proxy with Squid3 and IPTABLES

Does anyone have Squid3 working to successfully cache FTP requests coming in transparently? Should the proxy still listen on 3128, and I redirect incoming reuests on 21 to 3128?
1
vote
1answer
1k views

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works ...
0
votes
1answer
44 views

Unable to stop Squid3

When trying to stop squid3 that is running off a docker image jpetazzo/squid-in-a-can, I am unable to stop squid! root@myserver:/# service squid3 stop [FAIL] Stopping Squid HTTP Proxy 3.x: ...
0
votes
0answers
45 views

DNS Based Load balancing on squid - odd issues

I'm attempting to do round-robin DNS based load balancing for two squid boxes running as simple HTTP(S) proxies. For testing I'm using AWS Route 53. To simulate round-robin I created two records ...
1
vote
1answer
459 views

Squid3 proxy server is not working for a single website

I face an annoying and hard to track its root problem with squid3 proxy server running on Ubuntu Server 12.04. Squid is working fine for all websites I have tried so far to access, except ...
0
votes
1answer
548 views

Squid configuration for proxy server

I have a server with 10 ip's that I want to give access to some friends via authentication but I'm stuck on squid's config file. Let's say I have these ip's available on my server: 212.77.23.10 ...
0
votes
1answer
1k views

Why does Squid very rarely get TCP_HIT in the log, which consists mostly of TCP_MISS?

I am using Squid v2.7. I am getting lots of TCP_MISS messages in the log, and very few TCP_HIT. What does this mean? p.s. Here is a sample of the log: 1369840631.853 59 127.0.0.1 TCP_MISS/200 ...
0
votes
0answers
10 views

Stop proxy authentication from modern browser allow from command line

I have squid Version 3.1.10 installed and configured authentication with the auth mechanism ncsa_auth. Is it possible to not allow a modern browser to auth should a user try and access the internet ...
0
votes
0answers
36 views

Office 2013 and squid whith NTLM authenticate doesn't work

I have a Squid 2.7STABLE9 on a Debian and everything works except the office 2013 pack : Word, Excel, Outlook ... For all, I made a rule on Squid conf as it explaine here and it look like it doesn't ...
0
votes
0answers
134 views

squid 3.5.3 with ssl bump

I have configured squid as transparent proxy with ssl bump configuration and using store id to cache youtube Squid 3.5.3 Ubuntu 14.04 Issue is my http sites are working but I cant see https website ...
1
vote
2answers
707 views

Missing ssl_crtd folder with Squid 3.5.2 / CentOS

I am attempting to install Squid 3.5.2 to utilize improved sslbump functionality with websites with HSTS. I'm following the documentation on a fresh CentOS 7 VM installation. The issue I'm having is ...
1
vote
2answers
1k views

Puppet: Unable to start squid service

In init.pp the squid service is defined like this: service { 'squid': ensure => running, enable => true, hasrestart => true, hasstatus => true, subscribe => ...
0
votes
1answer
75 views

Squid server issues after upgrade (Ubuntu 14)

We have upgraded a squid proxy server from a previous version of Ubuntu (Can't recall what it was sorry) to version 14.04.2. Now it appears Squid will not start / VM's can not reach internet through ...
1
vote
0answers
590 views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ ...
2
votes
1answer
63 views

How to establish new connection through proxy using Squid in Python script? [closed]

I am new to networking and proxy. For a project I need to give a proxy connection. I already have a connection and I want change the connection behavior of the process to connect through that proxy. ...