Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
0answers
15 views

Setting up Squid Transparent Proxy on a machine separate from the router

The context would be like this: Router Machine runs CentOS 6.0 with iptables policies applied. WAN interface is eth0. Interface eth3 connects the network that contains the proxy server, and eth2 is ...
1
vote
1answer
39 views

Kerberos keytab permissions

Can you share some thoughts on whether a Kerberos keytab should be readable only by root - under all circumstances? Or are there exceptions to this rule? I am setting up a Squid proxy on Debian ...
0
votes
2answers
4k views

How To Enable URL Filtering With Just Squid & C-ICAP

Before I posted this question, I read several set up guides online, the squid docs, c-icap docus, and also the ICAP RFC (3507). Unfortunately, the documentation for SQUID and C-ICAP does not provide ...
0
votes
0answers
8 views

Why squidguard tell me default acl is missing but it isn't?

I have a problem with squidguard when i want to create .db files. When i do : squidGuard -c "/etc/squid3/squidGuard.conf" -C all -d It tell me : squidGuard: FATAL; default acl not defined in file ...
0
votes
0answers
16 views

Squid3 don't caching, always TCP_MISS/200

I have installed Squid3 and now I wont set it to caching WMTS's. This is valid WMTS service url http://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO and here is link to image from this ...
3
votes
1answer
1k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
-1
votes
1answer
23 views

Make squid (or tinyproxy) return cache EVERYTHING and return hits on Internet outage

I am wondering how to configure squid (or tinyproxy) to cache EVERYTHING and return HTTP 200 hits, even on Internet outage or if original source is 404? Basically, I want squid to look in the cache ...
1
vote
0answers
20 views

Setup proxy, dns, file sharing (BIND9, SQUID3, SAMBA4) on lan server [on hold]

Lately I buy new server to company and I need help with configure it. Before we have QNAP NAS with web-gui so editing config files wasn't needed. Now I need do it by hand. So I want to have: DNS ...
0
votes
0answers
5 views

Squid 3.1 Monitor HTTPS logs [migrated]

I have configured squid3 on Raspbian Wheezy OS, here is the configuration file (squid.conf): acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl ...
1
vote
1answer
22 views

Squid3 CONNECT imap.gmail.com:993 TCP_DENIED:NONE

I have the following configuration under squid.conf. However, when my Blackberry email client attempts to fetch new emails, etc. Squid access log show the following error: imap.gmail.com "CONNECT ...
2
votes
3answers
2k views

Squid traffic tunneled through VPN

So what I'm trying to do is have a Squid Proxy run on 1 machine along side a VPN connection. What I want to happen is all traffic running though the Squad Proxy would run though the VPN for its ...
0
votes
0answers
15 views

Basic ncsa authentication is not workling in squid

I'm using squid-3.3.8-12.el7_0.x86_64 on CentOS 7 I've configured squid for basic authentication, md5 password works, but if fails when I try to use either blowfish or sha password. Below is the ...
0
votes
1answer
2k views

How do I tunnel an HTTPS proxy through a virtual machine (VMWare)

I have a personal setup at home using VMWare Workstation. I also have a set of Virtual Private Machines that run Squid, and therefore provide me HTTPS proxy tunnels. Using Proxifier, I can tunnel all ...
0
votes
1answer
26 views

Squid running in intercept mode on same machine as browser keeps giving access denied

It's been a while since I last touched squid and I've been sitting here figuring out this problem since the last few hours why my squid setup on this standalone server machine (behind router nat) ...
0
votes
0answers
12 views

Can Squid be configured to use the incoming IP address as the outgoing Address if multiple IPs are used on the server?

At the moment I have to define rules for all local ips like this: acl ip1 localip 1.1.1.1/32 tcp_outgoing_address 1.1.1.1 ip1 acl ip2 localip 2.2.2.2/32 tcp_outgoing_address 2.2.2.2 ip2 acl ip3 ...
1
vote
0answers
42 views

Trouble setting up a transparent proxy

I have been trying without success to setup a transparent proxy on a router like computer. Most examples that I have found don't have the gateway and proxy on the same computer, so I may be looking at ...
-1
votes
0answers
14 views

Transparent proxy Squid with 1 NIC without virtual interfaces

I'm trying to setup a transparent proxy in an existing LAN. I've seen many tutorials where Squid is being implement as a router in the network, even with 1 NIC, where 2 virtual interfaces are created ...
0
votes
0answers
13 views

Disable Squid ACL rules after redirects

I have a squid clamav proxy with some fairly restrictive ACL set up for particular sites and urls on those sites that we trust. Unfortunately, a site we now wish to trust distributes its content ...
3
votes
2answers
8k views

Squid throws error, The requested URL could not be retrieved

Sometimes I am getting the following error The requested URL could not be retrieved While trying to retrieve the URL: http://groups.google.com/ The following error was encountered: Unable to ...
0
votes
0answers
29 views

How to pass TCP-CONNECT from Internet through a Reverse Proxy to reach my local server?

I have this scenario: Some institutional severs between my institutional server and my VPS in Internet exist like men in the middle (Routers, Firewalls (NAT & Filters), DNS, SMTP relay, Proxy, ...
0
votes
0answers
16 views

Squid: bypass url_rewrite_program when request is https

I have a url rewriter working in squid currently. The problem is that, while it works fine for HTTP, HTTPS requests obviously don't work, even when rewritten with the same URL (because my server would ...
0
votes
1answer
1k views

Squidguard + LDAP (Active Directory) not working

I've been trying to configure a squid with squidguard and MS AD. I've successfuly linked my squid with my AD so far, but now, I want to link my squidguard with the active directory. I've followed ...
0
votes
1answer
928 views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
0
votes
2answers
2k views

TCP port numbers reused and TCP Retransmission

Facing issues due to TCP Port Reuse and Retransmission for HTTP traffic. My deployment is as follows: enter image description here I have a squid proxy installed on a unix machine which is sending ...
0
votes
0answers
74 views

LVS + keepalived for load balancing transparent SQUID proxies

I need to load balance a number of SQUID proxies configured in transparent mode. Below is a simple diagram with one LB and SQUID boxes. ---------- | Client | ...
0
votes
1answer
172 views

how to manage when squid server crash and internet share for all when bypass server by WCCP Cisco router accrued?

We have about 735 clients with windows 98 SE and Windows XP (joined to domain) Windows 7 and 8 and etc. and have about 35 servers and internet connections and cache servers that one of them is Squid ...
0
votes
3answers
3k views

By passing squid for few hosts using iptables

We have a squid proxy setup which listens on default port(3128): on eht0 (192.x.x.x). It has another interface eth1 (10.x.x.x) used to connect to external world. It is doing good quality content ...
0
votes
1answer
22 views

Squid both transparent and forward mode

Is it possibile to configure squid for both transparent and forward-authenticated mode (maybe listening two different tcp ports)?
2
votes
2answers
1k views

Disabling the Squid Error pages

I've just started looking at using Squid for a project and can't seem to see an easy way of disabling the Squid error pages (e.g. "Name Error: The domain name does not exist"). We use a custom browser ...
0
votes
1answer
32 views

Allow a certain URL path with Squid

I'm using Squid 3.4 on Debian, and I want to know how to allow certain sub-URLs while banning the rest of them. Particularly, I want to ban access to reddit.com/* but allow access to ...
1
vote
1answer
61 views

Squid Segmentation Fault?

I'm currently fixing an issue with one of our production servers. The issue is related to squid not able to run properly. When I try to run service squid start/stop, it throws an error: 2015/03/11 ...
1
vote
0answers
62 views

Squid intercept proxy stuck with forwarding loop

I'm trying to set up a debugging proxy using Squid, mainly to test our own client communications library for various proxy types (one possibility with our client, is to connect to an external ...
1
vote
3answers
2k views

Squid via Haproxy

Anyone experienced with configuring Squid to forward requests to HAproxy? I use Squid as a proxy, with ACLs and other stuff, and I need to know if I can tell it to forward requests to HAproxy, which ...
0
votes
1answer
2k views

What “traffic flow” would be right in a transparent “squid + dansguardian” pfsense setup?

my thought (i'm not sure if its right): lan interface traffic comes into port 80 destination port is redirected to 8080 (dans guardian) dansguardian outputs traffic to port 3128 (squid) squid ...
4
votes
2answers
3k views

How to get Squid to not cache files with certain extensions?

I've found information on how to keep squid from caching domains/IP addresses, however, that's not quite what I want. I'd like to prevent it from caching .jnlp and .jar files. The core problem being ...
0
votes
3answers
41 views

How do I configure all clients use proxy with out making changes to thier configuration

I am looking to configure a content filter for my network. I have squidgaurd configurared and working. I would like to have all clients use it. This includes clients I have no control over (BYOD ...
0
votes
0answers
124 views

squid transparent proxy for https / ssl trafic

I am trying to configure squid as transparent proxy , I followed below steps to configure Downloaded squid3.5 from the website, As squid3.1 will not support for ssl bump ./configure ...
0
votes
2answers
882 views

squid specify outgoing network interface

I have a Linux Debian machine with many network interfaces (venet0:1 to venet0:5) running Squid. If I connect to interface venet0:2 squid uses venet0:0 for outgoing traffic but I want Squid to use the ...
0
votes
0answers
51 views

Squid NTLM authentication started to fail

I have a squid server authenticating against a Win2k3 AD. The authentication is failing since today and I'm sure it is something on the windows side because on the linux machine there were no ...
-1
votes
1answer
60 views

Can squid work as reverse proxy server for ftp, pop3 and smtp [closed]

OS is Ubuntu 14.04 Can squid work as reverse proxy server for ftp, pop3 and smtp? I need a server can work as reverse proxy server mode to proxy the http and ftp. I configure quid3 but I find it can ...
1
vote
1answer
2k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
1
vote
1answer
2k views

Squid: The request or reply is too large

I have done a reverse proxy with an Apache in the background (on the same server). All works great but I can't open one page. I get the error "The request or reply is too large." In my cache.log ...
1
vote
0answers
1k views

Squid HTTPS Tunnelling using CONNECT very slow

I use squid on my network to cache content. I launch chrome with a command line switch that tells it to use the proxy. For the most part this works great as squid caches a large amount of content ...
0
votes
0answers
44 views

Squid3 Reverse Proxy - Force Cache and Suppress Version

I have been using pfSense for about 2 years now and I love it. One of my favorite features has come to be Squid2 and Squid3. Right now I am using Squid3 to run both proxy and reverse proxy. There are ...
-1
votes
1answer
142 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
1
vote
1answer
787 views

Encrypt client connection with squid forward proxy using SSL

I'm setting up a Squid forward proxy and I'm wondering if I could configure Squid in such a way that the connection from my web browser to squid is https regardless of whether the connection from ...
0
votes
2answers
1k views

How To Remove Bottleneck with Squid Caching Proxy

I'm more of a LAMP web developer trying to help the sysop. When I joined a project, I inherited some old PHP spaghetti code. Some of that code is that it goes out to a third-party website (let's call ...
0
votes
1answer
73 views

How to Force Client To Browse Internet Through Squid Proxy

I am using Windows Server 2012 in which i have share internet throw NAT to secondary lan card using Routing and remote service and now the problem is that when my client are browsing through proxy ...
0
votes
1answer
321 views

Allow Google apps and block consumer Google accounts using squid proxy

In my organisation, I am trying to allow the Google apps account and block consumer Google accounts using squid proxy. According to this link, Google says we can do it using following steps: 1. ...
3
votes
1answer
8k views

squid and https URLs

I have installed squid as a non-transparent proxy/cache server with --enable-ssl configuration. It is a child of a parent proxy server proxy1.ut.ac.ir. Everything is OK for HTTP URLs, but any HTTPS ...