Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
0answers
15 views

Squid proxy with 2 NICs

I'm trying to make a squid proxy in ubuntu 14 and can't make it to work. This is what I got so far: etc/network/interfaces iface eth0 inet static address 192.168.1.9 netmask 255.255.255.0 broadcast ...
0
votes
1answer
3k views

How do I tunnel an HTTPS proxy through a virtual machine (VMWare)

I have a personal setup at home using VMWare Workstation. I also have a set of Virtual Private Machines that run Squid, and therefore provide me HTTPS proxy tunnels. Using Proxifier, I can tunnel all ...
2
votes
3answers
2k views

Squid traffic tunneled through VPN

So what I'm trying to do is have a Squid Proxy run on 1 machine along side a VPN connection. What I want to happen is all traffic running though the Squad Proxy would run though the VPN for its ...
0
votes
2answers
27 views

Can Squid be configured to use the incoming IP address as the outgoing Address if multiple IPs are used on the server?

At the moment I have to define rules for all local ips like this: acl ip1 localip 1.1.1.1/32 tcp_outgoing_address 1.1.1.1 ip1 acl ip2 localip 2.2.2.2/32 tcp_outgoing_address 2.2.2.2 ip2 acl ip3 ...
0
votes
0answers
20 views

my squid proxy configuration always TCP_MISS

i have been trying for 2 days in my configuration but always same the result like this DIRECT/49.213.17.185 - 1429727403.426 22 114.125.72.213 TCP_MISS/404 228 HEAD http://dn.melon.co.id:8100/ - ...
0
votes
1answer
7 views

Squid upgrade stops authentication

Recently we installed a squid proxy server for a customer who was using an older server. New server is ubuntu 14.04.2 with squid 3.3.8. We used the same password file to authenticate users. The ...
3
votes
2answers
8k views

Squid throws error, The requested URL could not be retrieved

Sometimes I am getting the following error The requested URL could not be retrieved While trying to retrieve the URL: http://groups.google.com/ The following error was encountered: Unable to ...
0
votes
2answers
41 views

iptables block client ip internet access and keep LAN access

With the increase of appliances having network access and the potential for hacking, I want to block specific ip address from accessing the internet, but allow LAN access. For instance, I use a ...
-1
votes
0answers
19 views

SQUID and GreasySpoon(ICAP server) changing the header

I am trying to use GreasySpoon and SQUID. As basic case i just wanted to change header of the response. //——————————————————————- // ==ServerScript== // @name Add_Header // @status on // @description ...
0
votes
1answer
1k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
0
votes
1answer
2k views

Squidguard + LDAP (Active Directory) not working

I've been trying to configure a squid with squidguard and MS AD. I've successfuly linked my squid with my AD so far, but now, I want to link my squidguard with the active directory. I've followed ...
0
votes
2answers
2k views

TCP port numbers reused and TCP Retransmission

Facing issues due to TCP Port Reuse and Retransmission for HTTP traffic. My deployment is as follows: enter image description here I have a squid proxy installed on a unix machine which is sending ...
0
votes
2answers
15 views

Why squidguard tell me default acl is missing but it isn't?

I have a problem with squidguard when i want to create .db files. When i do : squidGuard -c "/etc/squid3/squidGuard.conf" -C all -d It tell me : squidGuard: FATAL; default acl not defined in file ...
1
vote
1answer
28 views

Squid cannot log to syslog

According to this documentation: http://www.squid-cache.org/Doc/config/access_log/ squid should be able to log to rsyslog with the following directives: access_log syslog:daemon.info squid cache_log ...
0
votes
0answers
9 views

Squid 3.1.22 with multiple delaypools for different subnet

i have a squid installed with squidguard. everything works great and now i want to implement a squid multi delay pool. i want to separate webspeed for every subnet but have also one unlimited to ...
2
votes
2answers
1k views

Disabling the Squid Error pages

I've just started looking at using Squid for a project and can't seem to see an easy way of disabling the Squid error pages (e.g. "Name Error: The domain name does not exist"). We use a custom browser ...
0
votes
1answer
35 views

Client not found in kerberos database while getting initial

I am installing Squid3 on Ubuntu 14.10 and I want to integrate it ADDS on windows server 2012 using kerberos 5. My infrastructure are as follows: Default Gateway: 192.168.1.1 DNS & Domain ...
0
votes
1answer
28 views

Squid delay pools delay_parameters bandwidth

I can not understand the documentation about delay_parameters params in squid. delay_pools 1 delay_class 1 4 delay_parameters 1 -1/-1 -1/-1 -1/-1 600/8000 What is the difference between the first ...
0
votes
0answers
30 views

How to block external sites using squid as forward proxy

I'm currently blocking sites using an acl, i.e.: acl block_site dstdomain "/etc/squid3/blocked". That works great, however, I'm wondering if it's possible to also block all external domains? For ...
0
votes
0answers
31 views

Squid transparent https certificate error: ssl_error_bad_cert_domain

I have a squid transparent proxy (squid 3.4 in pfsense 2.1) with ssl_bump for https, all my clients trusts squid as CA and many sistes are well working... However I have some problem with websites ...
4
votes
3answers
15k views

How to setup client for squid transparent proxy?

Server Details Squid Transparent Proxy Version: 3.3.8 OS: Ubuntu Server 14.04 Server IP: 192.168.1.3 Squid config file (excluding comments using grep) root@ubuntu:~# grep -v '^$\|^\s*\#' ...
0
votes
0answers
23 views

Integrate Squid Kerberos auth and Squidguard ldapusersearch into AD

I'm having trouble with Squid Kerberos auth and the Squidguard ldapusersearch that I use to apply ACLs by Active Directory groups membership. The problem is : Squid and Squidguard see my user as : ...
5
votes
2answers
3k views

How to get Squid to not cache files with certain extensions?

I've found information on how to keep squid from caching domains/IP addresses, however, that's not quite what I want. I'd like to prevent it from caching .jnlp and .jar files. The core problem being ...
0
votes
1answer
2k views

What “traffic flow” would be right in a transparent “squid + dansguardian” pfsense setup?

my thought (i'm not sure if its right): lan interface traffic comes into port 80 destination port is redirected to 8080 (dans guardian) dansguardian outputs traffic to port 3128 (squid) squid ...
1
vote
3answers
2k views

Squid via Haproxy

Anyone experienced with configuring Squid to forward requests to HAproxy? I use Squid as a proxy, with ACLs and other stuff, and I need to know if I can tell it to forward requests to HAproxy, which ...
1
vote
1answer
2k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
0
votes
1answer
37 views

Pfsense Squid external ACL with a php script

I want to use a PHP script to allow or deny Squid proxy request ina pfsense installation, so I'm using this configuration for external ACL: external_acl_type mysqlAuth %SRC /usr/local/bin/php -f ...
0
votes
0answers
16 views

SquidGuard reduce memory consumption

I trying to run squid3 on a small vm with only 512mb ram. I have these memory specific values configured: cache_mem 64 MB memory_pools_limit 5 MB maximum_object_size_in_memory 8 MB cache_dir ufs ...
0
votes
1answer
139 views

Missing ssl_crtd folder with Squid 3.5.2 / CentOS

I am attempting to install Squid 3.5.2 to utilize improved sslbump functionality with websites with HSTS. I'm following the documentation on a fresh CentOS 7 VM installation. The issue I'm having is ...
-1
votes
2answers
38 views

haproxy vs squid ssl bump and dynamic generation

I would like to know if following 2 features of squid are available in haproxy? http://wiki.squid-cache.org/Features/DynamicSslCert http://wiki.squid-cache.org/Features/SslBump any help would be ...
0
votes
1answer
80 views

Setting up Squid Transparent Proxy on a machine separate from the router

As explained in the title, I'm trying to set up a Squid Transparent Proxy on a machine separate from the router, and also separate from the private network I want to filter through the proxy. The ...
1
vote
2answers
653 views

Google searching requires captcha when using proxy server

We currently have a Squid Proxy server setup on our network, a high school. We are sending all traffic from student devices (iPads) through the proxy, both internally and externally. Traffic gets sent ...
5
votes
1answer
10k views

Configure Squid as an HTTPS forward proxy?

Here's some background about my problem: I have a web service running on Heroku, with a dynamic IP address. Static IPs on Heroku are not an option. I need to connect to an external web service which ...
0
votes
2answers
971 views

squid specify outgoing network interface

I have a Linux Debian machine with many network interfaces (venet0:1 to venet0:5) running Squid. If I connect to interface venet0:2 squid uses venet0:0 for outgoing traffic but I want Squid to use the ...
1
vote
1answer
46 views

Trouble setting up a transparent proxy

I have been trying without success to setup a transparent proxy on a router like computer. Most examples that I have found don't have the gateway and proxy on the same computer, so I may be looking at ...
0
votes
0answers
38 views

How to set up squid to proxy a remote HTTPS private repository on port 8443?

I have a cloud of machines that access a remote private docker registry. Unfortunately bandwidth between the remote registry and the local cloud is quite low. A registry mirror would be great! but ...
1
vote
1answer
49 views

Kerberos keytab permissions

Can you share some thoughts on whether a Kerberos keytab should be readable only by root - under all circumstances? Or are there exceptions to this rule? I am setting up a Squid proxy on Debian ...
0
votes
2answers
5k views

How To Enable URL Filtering With Just Squid & C-ICAP

Before I posted this question, I read several set up guides online, the squid docs, c-icap docus, and also the ICAP RFC (3507). Unfortunately, the documentation for SQUID and C-ICAP does not provide ...
0
votes
0answers
48 views

Squid3 don't caching, always TCP_MISS/200

I have installed Squid3 and now I wont set it to caching WMTS's. This is valid WMTS service url http://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO and here is link to image from this ...
3
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
-1
votes
1answer
36 views

Make squid (or tinyproxy) return cache EVERYTHING and return hits on Internet outage

I am wondering how to configure squid (or tinyproxy) to cache EVERYTHING and return HTTP 200 hits, even on Internet outage or if original source is 404? Basically, I want squid to look in the cache ...
1
vote
0answers
51 views

Setup proxy, dns, file sharing (BIND9, SQUID3, SAMBA4) on lan server [closed]

Lately I buy new server to company and I need help with configure it. Before we have QNAP NAS with web-gui so editing config files wasn't needed. Now I need do it by hand. So I want to have: DNS ...
0
votes
0answers
5 views

Squid 3.1 Monitor HTTPS logs [migrated]

I have configured squid3 on Raspbian Wheezy OS, here is the configuration file (squid.conf): acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl ...
1
vote
1answer
57 views

Squid3 CONNECT imap.gmail.com:993 TCP_DENIED:NONE

I have the following configuration under squid.conf. However, when my Blackberry email client attempts to fetch new emails, etc. Squid access log show the following error: imap.gmail.com "CONNECT ...
0
votes
0answers
26 views

Basic ncsa authentication is not workling in squid

I'm using squid-3.3.8-12.el7_0.x86_64 on CentOS 7 I've configured squid for basic authentication, md5 password works, but if fails when I try to use either blowfish or sha password. Below is the ...
0
votes
1answer
41 views

Squid running in intercept mode on same machine as browser keeps giving access denied

It's been a while since I last touched squid and I've been sitting here figuring out this problem since the last few hours why my squid setup on this standalone server machine (behind router nat) ...
0
votes
0answers
18 views

Disable Squid ACL rules after redirects

I have a squid clamav proxy with some fairly restrictive ACL set up for particular sites and urls on those sites that we trust. Unfortunately, a site we now wish to trust distributes its content ...
0
votes
0answers
55 views

How to pass TCP-CONNECT from Internet through a Reverse Proxy to reach my local server?

I have this scenario: Some institutional severs between my institutional server and my VPS in Internet exist like men in the middle (Routers, Firewalls (NAT & Filters), DNS, SMTP relay, Proxy, ...
0
votes
0answers
38 views

Squid: bypass url_rewrite_program when request is https

I have a url rewriter working in squid currently. The problem is that, while it works fine for HTTP, HTTPS requests obviously don't work, even when rewritten with the same URL (because my server would ...
0
votes
0answers
99 views

LVS + keepalived for load balancing transparent SQUID proxies

I need to load balance a number of SQUID proxies configured in transparent mode. Below is a simple diagram with one LB and SQUID boxes. ---------- | Client | ...