The tag has no usage guidance.

learn more… | top users | synonyms

-1
votes
0answers
38 views

Squid transparent proxy

I am developing a transparent squid proxy. Above is the image of the setup. Here are the details of the setup I have an explicit proxy server(10.201.51.71) in my organization. The clients have ...
1
vote
1answer
55 views

How to forward HTTPS traffic through squid transparently?

I want to redirect all HTTP and HTTPS traffic to squid acting as a transparent proxy. This traffic will then be blocked or authorized (in bulk) during certain hours. Specifically I do not want to ...
0
votes
0answers
15 views

set a explicit web proxy software to act as transparent proxy

I have a web proxy software (ccproxy) which creates an explicit proxy in the sense that the clients had to enter ip and port of web proxy to access it (proxy configurations in IE for example). ...
0
votes
0answers
17 views

Is Sonicwall SSL Decryption and Inspection the same function as Using a Transparent Proxy and Swapping out the Certificate with Squid 3?

I was wondering if Sonicwall SSL Decryption and Inspection is the same function, mainly; swap out the issued SSL certificate and decrypt traffic while issuing a local SSL certificate to the calling ...
0
votes
0answers
66 views

It is possible to use not NAT able VoIP Softswitch behind pfsense/siproxd

We are using diffrent VoIP Softswitches (asterisk/squire) behind a pfsense Firewall and connect to diffrent SIP Endpoints. The local softswitches only have a local IP and the Endpoints are public IPs. ...
1
vote
1answer
169 views

Nginx transparent reverse proxy for https and http to another server

I have researched this for a while but the use cases that others have asked about are more complex/different to what I am trying to achieve. I have Nginx serving pages on both ports 80 and 443 for ...
0
votes
1answer
93 views

Iptables rules for transparent proxy, and no proxy

Hi I'm using redsocks and iptables port redirection rules to set a transparent proxy, and works fine, but I need to establish iptables rules for non proxy access, to domains, domain1.com and domain2....
4
votes
1answer
186 views

Whitelisting outgoing traffic from docker containers

I have a server running multiple docker containers in the following configuration: One of the containers is a reverse proxy binding to the exposed ports of the other containers. This is the only ...
0
votes
0answers
38 views

How to make squid hit the cache by path only?

I need to cache the objects with URI's like http://ftp.debian.org/debian/dists/stretch-updates/non-free/i18n/Translation-en.bz2 and http://httpredir.debian.org/debian/dists/stretch-updates/non-free/...
10
votes
0answers
549 views

Getting Squid and TPROXY with IPv6 working on CentOS 7

I'm having trouble getting TPROXY working with Squid and IPv6 on a CentOS 7 server. I was previously using a generic intercept setup with NAT, but it was limited to IPv4 only. I'm now expanding the ...
0
votes
1answer
3k views

Transparent squid proxy on ubuntu 14.04 server [closed]

I have ubuntu 14.04 LTS server installed on my server, and I would like to install transparent proxy server on my server for LAN network. Please help me with this. Thanks in advance.
1
vote
2answers
70 views

apache2 HTTPS to HTTP reverse proxying

I am trying to set up what i believe needs to be a reverse proxy in Apache 2. I have apache set up and i have Mod_proxy,mod_ssl,Mod_rewrite all enabled. i am trying to control a media player through ...
0
votes
3answers
309 views

iptables with transparent proxy, how to pass the user IP

I have a local transparent proxy, but my problem is that packets, when re-routed, have the router IP and not the user. These are the rules that I currently have in place: iptables -t nat -A ...
0
votes
1answer
116 views

Is HAProxy built with TPROXY on Ubuntu 14.04

Ubuntu 14.04 has TPROXY (How to check if Ubuntu 14.04 Kernel has TPROXY). How do I find out if the version of HAProxy packaged for 14.04 is compiled with TPROXY?
0
votes
1answer
46 views

Transfer traffic between iptable chains

My understanding is that normally any given packet will only ever interact with one iptables chain either INPUT FORWARD or OUTPUT. However I want to have all traffic on port 80 that has neither its ...
0
votes
1answer
294 views

Prevent non-intercept Squid traffic being tagged by Policy Routing

I've re-edited the original question, because I have changed the setup since the original answer, which was for NAT based setup. NAT is no longer being used and has been replaced with TPROXY for IPv6 ...
0
votes
0answers
50 views

transparent option for http_port causes error in Squid3

When we have http_port 3128 in squid.conf, the Squid proxy works OK but is not transparent. However changing it to http_port 3128 intercept causes an error Access control configuration prevents your ...
0
votes
1answer
231 views

NAT routing based on DNS name (reverse TCP proxy?)

Introduction I have one router, running pfSense (can be anything since it's a virtual machine on VMware, so if the solution requires anything else, that's fine by me) and behind it I have multiple ...
1
vote
1answer
895 views

openbsd pf squid transparent proxy using a bridge

I want to use OpenBSD 5.7 as a filtering bridge in front of my router, and as part of that run a transparent proxy (squid 3.5.1) to manage web access. I have set up the openbsd machine as a bridge, ...
1
vote
3answers
463 views

What is the best way to get PRECISE domain name from ip address logged in iptables log

In iptables I am logging certain public IP addresses... say of websites visited from different workstations, depending on destination port number... All this is not really relevant to the question but ...
0
votes
1answer
465 views

Setting up Squid Transparent Proxy on a machine separate from the router

As explained in the title, I'm trying to set up a Squid Transparent Proxy on a machine separate from the router, and also separate from the private network I want to filter through the proxy. The ...
0
votes
1answer
1k views

Squid running in intercept mode on same machine as browser keeps giving access denied

It's been a while since I last touched squid and I've been sitting here figuring out this problem since the last few hours why my squid setup on this standalone server machine (behind router nat) ...
0
votes
1answer
123 views

Squid both transparent and forward mode

Is it possibile to configure squid for both transparent and forward-authenticated mode (maybe listening two different tcp ports)?
0
votes
1answer
864 views

redsocks + socks server on different machine

I have the following setup: Host-X (192.168.1.100) running ssh -D so that it can be used as a socks server. Host-Y (192.168.1.101) running redsocks configured with Host-X as socks. They are in the ...
0
votes
3answers
2k views

Transparent proxying a single docker container to another docker container

I have a pair of docker containers running on the host machine, these containers together makes my application fulfill. So for each iteration/instance of my application requires a pair of docker ...
0
votes
0answers
389 views

LVS + keepalived for load balancing transparent SQUID proxies

I need to load balance a number of SQUID proxies configured in transparent mode. Below is a simple diagram with one LB and SQUID boxes. ---------- | Client | ...
0
votes
2answers
5k views

“Invalid URL” Squid 3.3.8 transparent proxy w/ SSL Bump

I am attempting to run the QLProxy Virtual Appliance with SSL Bump in a transparent proxy and cannot for the life of me get it to work. I keep receiving "Invalid URL" errors from Squid (version 3.3.8)....
0
votes
0answers
124 views

Two transparent gateway using squid return 403

I have two linux gateway using squid as transparent proxy. When I using them individually, everything is fine. But when I using them in the same network, every request from browser will return 403. ...
0
votes
3answers
877 views

Transparent proxy for HTTPS traffic

I'm looking for a proxy to intercept HTTP traffic na pass through HTTPS traffic. Burp can do that with SSL pass through. With that option, SSL traffic isn't modified or capture, but just tunneled. I ...
1
vote
2answers
702 views

Transparent proxy and HTTPS with squid

Is is possibile to use a transparent proxy to filter some domains without a man-in-the-middle approach? I would like to guarantee the certificate verification and user privacy, by other hand, I want ...
0
votes
1answer
561 views

how to run pptp over redsocks proxy

I have one (virtual) Linux box in Ubuntu, that has redsocks set up done. Inside the machine, I could confirm that the the redsocks did work (use wget to check the external IP). Now, I want other ...
0
votes
1answer
1k views

Iptables fails to redirect traffic to transparent proxy

My goal was to use ubuntu as a router, with Redsocks serving as a transparent SOCKS proxy redirector. Each machine on my network would have its TCP/UDP traffic redirected to a different port where ...
2
votes
0answers
39 views

How can I throttle the rate of messages with a transparent proxy server?

I am trying to run a client software that connects to a socket server and downloads data. My problem is that the socket server has a max rate of messages per second, and it disconnects a client if ...
3
votes
1answer
4k views

Automatic Proxy Discovery wpad.example.com doesn't work

I'm trying to setup an automatic method for discovery my Squid proxy on the local network, by setting the browsers with "Automatic detection". The proxy is fine and works if I specify the IP:Port ...
0
votes
1answer
403 views

How to make Squid log url and forward traffic without proxying?

I want to use squid to listen on port 80 and log all url requests and simply forward it to original destination without changing anything. How to achieve that?
0
votes
1answer
605 views

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the ...
1
vote
0answers
5k views

Transparent Proxy squid TCP_MISS/503 Error in all pages

I m trying to make a squid proxy server with to work as a transparent proxy server, and i m facing some issues that i m unable to figure out the reasons. The setup i m using is several VLAN's with ...
1
vote
1answer
466 views

Set up proxy for vpn server on ubuntu server 12.4

I have a vpn server with HTTPS, L2TP, OPENVPN, and PPTP. I want to set up a proxy on the server, so all connection that comes from vpn clients, they will use that. I created the following bash script ...
1
vote
0answers
2k views

TPROXY Not working with HAProxy, Ubuntu 14.04

I'm trying to use HAProxy as a fully transparent proxy using TPROXY in Ubuntu 14.04. HAProxy will be setup on the first server with eth0 111.111.250.250 and eth1 10.111.128.134. The single balanced ...
1
vote
1answer
2k views

How to check if Ubuntu 14.04 Kernel has TPROXY

I'm using Digital Ocean's Ubuntu 14.04 image and needs the kernel to be compiled for TPROXY. Is there a way to check whether the current kernel supports TPROXY?
1
vote
1answer
3k views

haproxy transparent mode on 14.04

As per my previous question SSHD real-ip behind haproxy - I'm now attempting to setup HAProxy to transparently pass the IPs to the backend services. tproxy modules loaded / and supported in haproxy (...
0
votes
2answers
471 views

Remote IP and SMTP Proxy

Is it possible to proxy emails - with postfix for example - transparently so the backend mail server will get the last SMTP server IP address (rbl purpose) and not the Proxy IP address? If it is ...
5
votes
6answers
34k views

How to setup client for squid transparent proxy?

Server Details Squid Transparent Proxy Version: 3.3.8 OS: Ubuntu Server 14.04 Server IP: 192.168.1.3 Squid config file (excluding comments using grep) root@ubuntu:~# grep -v '^$\|^\s*\#' /etc/...
3
votes
2answers
121 views

Transparent proxy cache on BGP multihome

Provider A have transparent caching with squid . In the situation which a client has multihome BGP with provider A and provider B then client does not send its outgoing traffic (upload) to provider ...
1
vote
1answer
1k views

Security implications of running SquidProxy on the main pfSense Firewall

I want to start a discussion about the pros and cons of running a SquidProxy server on the same pfSense box as the main firewall. Today I have one pfSense doing all the firewall things, like routing ...
-1
votes
1answer
186 views

Transparent caching solution

I would like to in some cases make transparent caching for certain sites. Let's say that I have a static list of site from where I want to cache all downloads, ie: the client wants to download www....
2
votes
1answer
404 views

Host doesn't send ACK-SYN packets for transparent proxy

I am setting up a transparent proxy using haproxy, the setup works without the 'source 0.0.0.0 usesrc client' line. When I add that line in, the endpoint is called from the original client's ip ...
-1
votes
1answer
817 views

How can I set up a transparent proxy using squid and squidguard which has time-based acl based on MAC addresses?

I have a linux based server and I want to control access to internet based on MAC addresses of devices. How can I do that?
0
votes
1answer
7k views

How to configure Windows Server as a Web Proxy? [closed]

I'd like to set up a transparent web proxy on my home network. I know you can do this with Squid on Linux. I was wondering if Windows Server includes a web proxy?