The tag has no wiki summary.

learn more… | top users | synonyms

-1
votes
1answer
24 views

Transparent caching solution

I would like to in some cases make transparent caching for certain sites. Let's say that I have a static list of site from where I want to cache all downloads, ie: the client wants to download ...
2
votes
1answer
37 views

Host doesn't send ACK-SYN packets for transparent proxy

I am setting up a transparent proxy using haproxy, the setup works without the 'source 0.0.0.0 usesrc client' line. When I add that line in, the endpoint is called from the original client's ip ...
-1
votes
1answer
39 views

How can I set up a transparent proxy using squid and squidguard which has time-based acl based on MAC addresses?

I have a linux based server and I want to control access to internet based on MAC addresses of devices. How can I do that?
-1
votes
1answer
75 views

How to configure Windows Server as a Web Proxy? [closed]

I'd like to set up a transparent web proxy on my home network. I know you can do this with Squid on Linux. I was wondering if Windows Server includes a web proxy?
0
votes
0answers
75 views

Squid 2.6 and https trasparent proxy

I have a question about Squid configuration as trasparent proxy using SSL. I would to use Squid 2.6 as trasparent proxy with http and https connection. I followed this steps: 1) I configurated my ...
0
votes
1answer
122 views

Trying to setup transparent, load balancing, SSL reverse proxy. Is it possible?

I've done a few weeks worth of research on this topic for a project, and unfortunately I'm a simple code monkey, my knowledge of networking and SSL are limited. Pretty much every search I've done so ...
0
votes
0answers
109 views

Deny All Allow Video Streaming Site Firewall Proxy

I need to build a hotspot for children to view a video streaming site with random tablet devices that a client is going to provide. The req uested environment should restrict access to only the video ...
3
votes
1answer
397 views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
0answers
58 views

Setting a transparent proxy without changing existing IP Address values

The end goal of what I'm trying to achieve is: Block access to certain websites and view bandwidth used by IP Address. Without changing my employee's gateway address. -- Our internet connection is ...
0
votes
0answers
67 views

ip_conntrack vs TPROXY performance

I'm currently trying to set up a high performance load balancer who - ideally - would be able to handle more than the ~65k connections that are possible without using a transparent proxy, with HAProxy ...
0
votes
0answers
61 views

Chaining transparent and non-transparent proxies using Squid

I have a question about the possible setup when chainig a Squid proxy behind a transparent proxy behind a non-transparent proxy, as in: [user pool] -> [Squid 1 (transparent)] -> [transparent proxy] ...
0
votes
0answers
44 views

Transparent proxy with netsed not working for tcp

I am trying to create a transparent proxy wherein i am redirecting outgoing packets on port 80 to port 10101 and use netsed to modify outgoing tcp packets Below are the iptables rule: iptables -t nat ...
0
votes
0answers
280 views

TCP_MISS/Squid-Error: ERR_CONNECT_FAIL

I setup an apache web server and squid3 running on the same machine, but when I try to access the web-server pages from client machine, I always ended up with an ERR_CONNECT_FAIL error. I tried all ...
1
vote
1answer
66 views

Proxy to remote proxy?

One of our partners require us to use one of their proxies in order for us to reach various services there. What I would like to achieve is to set up a local proxy at which I point the domains, so ...
-2
votes
1answer
79 views

Transparent AntiSpam solution in ISP scale [closed]

We have and ISP with adsl , broadband etc subscribers (average 10000 online users with 1M of Bandwidth . average ) . Some users infected by spammer viruses which makes our ip address spaces ...
3
votes
1answer
85 views

Selective use of transparent proxy on per-connection basis

TL;DR - I'm planning on using an application-level firewall to forward only requests for HTML content to a transparent proxy. So the initial GET request for google.com (for example) that returns an ...
-2
votes
1answer
57 views

Setting up a DHCP/Proxy Server

Current setup: Modem -> Firewall(DHCP) -> Switch and Wireless Router |-> Computers If I wanted to setup a Proxy Server in there, it would have to replace the Firewall correct? The idea is so that ...
2
votes
0answers
25 views

Evaluating and redirecting http requests

I am trying to evaluate traffic on port 80 to determine whether or not if we need to redirect a request, or pass it through, while being transparent. Scenario: User connects to our system via Wifi. ...
0
votes
1answer
152 views

apache module to perform search and replace operations on response bodies?

I am trying to do search and replace operation on response bodies using a transparent apache reverse proxy configuration, the below config using "mod_substitute" and "mod_proxy" works as expected : ...
0
votes
0answers
267 views

Can't get Squid to work with Intercept

I have a Sqiud Proxy server I am trying to add Transparency to using the Intercept feature. Currently the Proxy server accepts and functions fine as a standalone proxy for users. However when I add ...
0
votes
0answers
47 views

config squid to set specific acl for username and then set it to the ip addr of username

Assume your executive of corporation, sit on his clerk desk PC, and login to his username on the network (authenticate with Active Directory), of course he wants his full access to internet, but he ...
0
votes
1answer
401 views

preventing squid forwarding loop with IPtables

I have a web application, and I'd like to limit file upload size. I thought I'd try using squid for this, via its directive request_body_size_max. I have my webserver running on port 8080, and I've ...
1
vote
1answer
162 views

Redirect traffic on port 80 into apache for unknown macs, and into squid for some macs

I have a linux box behaving like a router that handles two network interfaces: eth0 for internet and eth1 for LAN. I set up iptables in order to redirect all the web traffic coming by the LAN into a ...
1
vote
2answers
464 views

Bypass transparent Squid proxy on Tomato USB for specific sites

I'm using a router with Tomato USB to forward port 80 requests to a Ubuntu Server with Squid 3 in transparent mode. Someone on the Tomato forum adapted these instructions for Tomato: #!/bin/sh ...
0
votes
1answer
37 views

Setting up a transparent proxy for a database

Currently my setup is as follows :- Database client/library <---------------------> Database I'd like to have the following :- Database client/library <---> Proxy <-------------> Database ...
2
votes
0answers
188 views

Squid as fully transparent reverse proxy

I have got a few web servers running on my server and I want all of them to be accessible via port 80. I set up squid as a reverse proxy and it works fine. I, however, need the source ip address to be ...
1
vote
1answer
219 views

How to force outgoing requests from webserver/PHP through squid proxy on same machine?

I have a Debian Squeeze VPS configured as an nginx web server. For security reasons I have blocked all outgoing connections except those to the Debian update servers (this stops bad scripts from ...
0
votes
1answer
52 views

.NET WebRequests fail on network with Blue Coat proxy

I have a .NET 3.5 application that makes a standard http WebRequest: var webRequest = WebRequest.Create(new Uri("http://myserver.com/target.xml)); var webResponse = webRequest.GetResponse(); This ...
-3
votes
2answers
844 views

How can system admins track employees Gmail chat [closed]

I am in a company where i have been warned about using chats. I spoke with one of the admin and he said every chat is being Monitored; ok i agree it can be if we use plain text but what if we use ...
0
votes
1answer
29 views

Sharing proxy-cache among multiple user groups

Here is what I am trying to do. I have two different VLANs, each using their own Squid proxy-caches. Now I want to set up a single proxy-cache which both VLANs use. The catch is I don't want them to ...
0
votes
1answer
388 views

Transparent redirect or proxy in Apache, preserving incoming request

When a user first hits our server, we want to capture some information about the incoming request: GET parameters, Referer header, &c. The general idea is that when we get an incoming request that ...
-1
votes
1answer
76 views

Squid connection to 0.0.0.0 Failed

trying to set up a Squid transparent proxy. All is good for the transparency, however the proxy occasionally runs into errors such as "connection to 0.0.0.0 Failed" Is this common? Am I doing ...
0
votes
1answer
91 views

Squid proxy loading from the localhost web server

I've just set up a squid transparent proxy inside my network. The proxy works fine, however it seems some sort of caching policy is causing the proxy to instead go grab a copy of the website, it's ...
0
votes
1answer
149 views

How To Route All HTTP Traffic from eth1 to the Squid Proxy? The Iptable rules?

I have just setup a squid proxy server. The server have two interfaces. eth0 connects to the router and eth1 is connected to a switch where all the other machines connect. The server also have a DHCP ...
1
vote
0answers
138 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
1
vote
0answers
134 views

blocking https connections using squid trans [duplicate]

Am a linux user. I have a proxy server setup running squid-trans for dealing my wireless connections. But i found that it can easily open https connections (like https://www.facebook.com) . Is there ...
3
votes
1answer
3k views

Howto create a transparent https proxy with firehol and tinyproxy?

I have a transparent proxy setup in Ubuntu 10.04.4 with firehol and tinyproxy that works fine for http but I can't get it to work for https. Connecting to tinyproxy directly works fine as the ...
0
votes
0answers
31 views

Proxy on top 2 databases

I have 02 database server, their addresses are 127.0.0.1:1234 and 127.0.0.2:1234, I want to have a proxy service that will run on 127.0.0.3:1234 that will able to redirect to the database which still ...
0
votes
2answers
688 views

Can I use iptables on my Varnish server to forward HTTPS traffic to a specific server?

We use Varnish as our front-end web cache and load balancer, so we have a Linux server in our development environment, running Varnish with some basic caching and load-balancing rules across a pair of ...
0
votes
1answer
289 views

how can make transparent proxy on more than one port?

i want to make transparent proxy with linux ( centos) , i want all incoming connection on port 1000 - 2000 on eth0 forward to eth1 on port 1000 - 2000 in transparent mode i have 2 server 1- ...
1
vote
1answer
451 views

Transparent proxy which preserves client mac address

I have a customer that wants to intercept SSL traffic as it leaves their network. My proposed solution is to setup a proxy that is transparent and both layer 2 and layer 3 so it can simply be dropped ...
-2
votes
1answer
286 views

Setting up a transparent proxy server a la unblock-us.com [closed]

I have a Windows Server set up in America (I'm from the UK), and am thinking of setting it up so I can mask my IP like http://www.unblock-us.com. Basically what it does is make it look like my IP is ...
1
vote
1answer
66 views

Creating my own proxy server

I have a remote machine which needs to serve as a proxy server (http), aswell as an http server. The part of the http server is taken care of and is working, but as far as setting proxy server - I've ...
0
votes
2answers
512 views

Tunnel an SSH connection transparently (no ProxyCommand)

Here's the scenario: the user runs "ssh -i sshkey user@server1". I want the SSH connection to be tunneled through server1 to server2. Normally, the user could do this himself using: ssh -i sshkey ...
0
votes
2answers
217 views

Reverse proxy to the entire WWW

I'm trying to create a reverse proxy to work like http://www.meowbify.com/, It's a cool platform that replaces images with cats animations. I tried Apache and nginx "reverse proxy" just to reverse ...
0
votes
1answer
273 views

SSL Cert for transparent MITM SSL proxy

I would like to set up a transparent SSL corporate proxy with either privoxy or squid. One of the snags in my plan is understanding what kind of SSL certificate is required. I know I can get a ...
1
vote
1answer
351 views

Rewrite URL based off of IP on OpenWRT

We are running OpenWRT on a WRT54GL. I have been looking for an answer to this, but I can't seem to figure out what to search for, if its possible, or what combination of programs to use. I want to ...
3
votes
1answer
363 views

Squid transparent proxy for outgoing traffic only

I have a Rails server that's a bit API heavy and so I want to run a Squid caching transparent proxy, between all port 80 activity, and the real world. However I don't need incoming traffic to go ...
5
votes
4answers
462 views

Enterprise IPv6 Migration - End of proxypac ? Start of Point-to-Point ? +10K users

Let's start with a diagram : We can see a "typical" IPv4 company network with : An Internet acces through a proxy An "Others companys" access through an dedicated proxy A direct access to local ...
0
votes
2answers
749 views

Transparent redirection to squid proxy server on the cloud

We have a squid proxy on the cloud with IP Address 50.x.y.z listening on tcp port 3128 and running in transparent mode. This proxy server is running Debian 6.0 and is located at a data center. In our ...