The tag has no wiki summary.

learn more… | top users | synonyms

3
votes
3answers
3k views

Easy way to “edit” the traffic coming from a tcp host (linux)

I need to make some small modification to incoming traffic from a known tcp host:port before the process handling the connection get the stream. For example, let 192.168.1.88 be a remote host which ...
0
votes
0answers
16 views

Two transparent gateway using squid return 403

I have two linux gateway using squid as transparent proxy. When I using them individually, everything is fine. But when I using them in the same network, every request from browser will return 403. ...
0
votes
1answer
55 views

How to make Squid log url and forward traffic without proxying?

I want to use squid to listen on port 80 and log all url requests and simply forward it to original destination without changing anything. How to achieve that?
0
votes
2answers
52 views

Transparent proxy and HTTPS with squid

Is is possibile to use a transparent proxy to filter some domains without a man-in-the-middle approach? I would like to guarantee the certificate verification and user privacy, by other hand, I want ...
0
votes
0answers
30 views

Iptables - double REDIRECTING - is it possible?

I have 2 kinds of proxies in my local machine : stunnel and TOR-VPN. stunnel is listening on port 6666 TOR-VPN is listening on port 9040 The IP of stunnel server is a.b.c.d. I want to get web ...
0
votes
3answers
59 views

Transparent proxy for HTTPS traffic

I'm looking for a proxy to intercept HTTP traffic na pass through HTTPS traffic. Burp can do that with SSL pass through. With that option, SSL traffic isn't modified or capture, but just tunneled. I ...
3
votes
1answer
999 views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
1answer
38 views

how to run pptp over redsocks proxy

I have one (virtual) Linux box in Ubuntu, that has redsocks set up done. Inside the machine, I could confirm that the the redsocks did work (use wget to check the external IP). Now, I want other ...
0
votes
0answers
49 views

Allow some destination ip/hostnames to bypass acl in squid

We have setup squid for an office environment. We are blocking many multimedia file types like mp3, mp4 etc to prevent bandwidth misuse. Now we have setup media streaming server on our gateway server ...
0
votes
1answer
131 views

Iptables fails to redirect traffic to transparent proxy

My goal was to use ubuntu as a router, with Redsocks serving as a transparent SOCKS proxy redirector. Each machine on my network would have its TCP/UDP traffic redirected to a different port where ...
1
vote
0answers
22 views

How can I throttle the rate of messages with a transparent proxy server?

I am trying to run a client software that connects to a socket server and downloads data. My problem is that the socket server has a max rate of messages per second, and it disconnects a client if ...
2
votes
1answer
130 views

Automatic Proxy Discovery wpad.example.com doesn't work

I'm trying to setup an automatic method for discovery my Squid proxy on the local network, by setting the browsers with "Automatic detection". The proxy is fine and works if I specify the IP:Port ...
4
votes
3answers
5k views

How to setup client for squid transparent proxy?

Server Details Squid Transparent Proxy Version: 3.3.8 OS: Ubuntu Server 14.04 Server IP: 192.168.1.3 Squid config file (excluding comments using grep) root@ubuntu:~# grep -v '^$\|^\s*\#' ...
0
votes
0answers
76 views

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the ...
0
votes
0answers
991 views

Transparent Proxy squid TCP_MISS/503 Error in all pages

I m trying to make a squid proxy server with to work as a transparent proxy server, and i m facing some issues that i m unable to figure out the reasons. The setup i m using is several VLAN's with ...
1
vote
1answer
161 views

Set up proxy for vpn server on ubuntu server 12.4

I have a vpn server with HTTPS, L2TP, OPENVPN, and PPTP. I want to set up a proxy on the server, so all connection that comes from vpn clients, they will use that. I created the following bash script ...
1
vote
0answers
429 views

TPROXY Not working with HAProxy, Ubuntu 14.04

I'm trying to use HAProxy as a fully transparent proxy using TPROXY in Ubuntu 14.04. HAProxy will be setup on the first server with eth0 111.111.250.250 and eth1 10.111.128.134. The single balanced ...
1
vote
1answer
178 views

How to check if Ubuntu 14.04 Kernel has TPROXY

I'm using Digital Ocean's Ubuntu 14.04 image and needs the kernel to be compiled for TPROXY. Is there a way to check whether the current kernel supports TPROXY?
0
votes
1answer
517 views

haproxy transparent mode on 14.04

As per my previous question SSHD real-ip behind haproxy - I'm now attempting to setup HAProxy to transparently pass the IPs to the backend services. tproxy modules loaded / and supported in haproxy ...
0
votes
3answers
729 views

Setting up a transparent proxy

I am looking at setting up some kind of visitor wireless access for our company however our internet connections all run through a external proxy. After many wasted hours explaining to visitors how ...
0
votes
2answers
684 views

tproxy squid bridge very slow when cache is full

I have installed a bridge tproxy proxy in a fast server with 8GB ram. The traffic is around 60Mb/s. When I start for first time the proxy (with the cache empty) the proxy works very well but when the ...
0
votes
2answers
134 views

Remote IP and SMTP Proxy

Is it possible to proxy emails - with postfix for example - transparently so the backend mail server will get the last SMTP server IP address (rbl purpose) and not the Proxy IP address? If it is ...
0
votes
0answers
46 views

What should be the correct http response code for custom proxy login/register page

I configured a firewall rule on a dd-wrt router to redirect http connections to a shell script, and drop the remaining ports, for the unregistered range of IPs. I am trying to tell the clients they ...
0
votes
1answer
130 views

Setting a transparent proxy without changing existing IP Address values

The end goal of what I'm trying to achieve is: Block access to certain websites and view bandwidth used by IP Address. Without changing my employee's gateway address. -- Our internet connection is ...
3
votes
2answers
57 views

Transparent proxy cache on BGP multihome

Provider A have transparent caching with squid . In the situation which a client has multihome BGP with provider A and provider B then client does not send its outgoing traffic (upload) to provider ...
1
vote
1answer
2k views

ClearOS transparent firewall and web proxy mode possible?

In other firewall software packages I have seen the ability and am hoping it is possible with ClearOS to put it in to transparent or bridged mode where the device sits physically between the client ...
1
vote
1answer
331 views

Security implications of running SquidProxy on the main pfSense Firewall

I want to start a discussion about the pros and cons of running a SquidProxy server on the same pfSense box as the main firewall. Today I have one pfSense doing all the firewall things, like routing ...
-1
votes
1answer
91 views

Transparent caching solution

I would like to in some cases make transparent caching for certain sites. Let's say that I have a static list of site from where I want to cache all downloads, ie: the client wants to download ...
2
votes
1answer
205 views

Host doesn't send ACK-SYN packets for transparent proxy

I am setting up a transparent proxy using haproxy, the setup works without the 'source 0.0.0.0 usesrc client' line. When I add that line in, the endpoint is called from the original client's ip ...
-1
votes
1answer
371 views

How can I set up a transparent proxy using squid and squidguard which has time-based acl based on MAC addresses?

I have a linux based server and I want to control access to internet based on MAC addresses of devices. How can I do that?
-1
votes
1answer
1k views

How to configure Windows Server as a Web Proxy? [closed]

I'd like to set up a transparent web proxy on my home network. I know you can do this with Squid on Linux. I was wondering if Windows Server includes a web proxy?
0
votes
1answer
217 views

How To Route All HTTP Traffic from eth1 to the Squid Proxy? The Iptable rules?

I have just setup a squid proxy server. The server have two interfaces. eth0 connects to the router and eth1 is connected to a switch where all the other machines connect. The server also have a DHCP ...
0
votes
0answers
167 views

Squid 2.6 and https trasparent proxy

I have a question about Squid configuration as trasparent proxy using SSL. I would to use Squid 2.6 as trasparent proxy with http and https connection. I followed this steps: 1) I configurated my ...
0
votes
1answer
405 views

Trying to setup transparent, load balancing, SSL reverse proxy. Is it possible?

I've done a few weeks worth of research on this topic for a project, and unfortunately I'm a simple code monkey, my knowledge of networking and SSL are limited. Pretty much every search I've done so ...
5
votes
5answers
6k views

Squid to cache youtube and windows update content

I Have a squid server (transparent) and I want to cahce youtube videos and windows updates. I know that someone has posted a similar question and I have looked at this post but I am configuring this ...
8
votes
2answers
1k views

Mac OS X Lion - forward all connections on port 22 to external ip [closed]

I need to forward all connection to any address port 22 to a different gateway (i.e. no default). Firstly I suppose to do it with ipfw: sudo ipfw add 5 fwd $EXTERNAL_IP,22 tcp from any to any 22 ...
1
vote
7answers
10k views

Redirecting port 80 to another port on a single Windows computer? [closed]

Assuming my Windows (xp, vista, 2003, 2008, or windows 7) computer is connected directly to the internet and has no router in between... Is there a way to filter all traffic going TO port 80, so that ...
1
vote
1answer
93 views

Proxy to remote proxy?

One of our partners require us to use one of their proxies in order for us to reach various services there. What I would like to achieve is to set up a local proxy at which I point the domains, so ...
-2
votes
1answer
132 views

Transparent AntiSpam solution in ISP scale [closed]

We have and ISP with adsl , broadband etc subscribers (average 10000 online users with 1M of Bandwidth . average ) . Some users infected by spammer viruses which makes our ip address spaces ...
3
votes
1answer
140 views

Selective use of transparent proxy on per-connection basis

TL;DR - I'm planning on using an application-level firewall to forward only requests for HTML content to a transparent proxy. So the initial GET request for google.com (for example) that returns an ...
-2
votes
1answer
64 views

Setting up a DHCP/Proxy Server

Current setup: Modem -> Firewall(DHCP) -> Switch and Wireless Router |-> Computers If I wanted to setup a Proxy Server in there, it would have to replace the Firewall correct? The idea is so that ...
2
votes
0answers
28 views

Evaluating and redirecting http requests

I am trying to evaluate traffic on port 80 to determine whether or not if we need to redirect a request, or pass it through, while being transparent. Scenario: User connects to our system via Wifi. ...
0
votes
1answer
494 views

apache module to perform search and replace operations on response bodies?

I am trying to do search and replace operation on response bodies using a transparent apache reverse proxy configuration, the below config using "mod_substitute" and "mod_proxy" works as expected : ...
8
votes
4answers
7k views

Setting up a transparent SSL proxy

I've got a linux box set up with 2 network cards to inspect traffic going through port 80. One card is used to go out to the internet, the other one is hooked up to a networking switch. The point is ...
0
votes
0answers
594 views

Can't get Squid to work with Intercept

I have a Sqiud Proxy server I am trying to add Transparency to using the Intercept feature. Currently the Proxy server accepts and functions fine as a standalone proxy for users. However when I add ...
0
votes
0answers
63 views

config squid to set specific acl for username and then set it to the ip addr of username

Assume your executive of corporation, sit on his clerk desk PC, and login to his username on the network (authenticate with Active Directory), of course he wants his full access to internet, but he ...
0
votes
1answer
72 views

.NET WebRequests fail on network with Blue Coat proxy

I have a .NET 3.5 application that makes a standard http WebRequest: var webRequest = WebRequest.Create(new Uri("http://myserver.com/target.xml)); var webResponse = webRequest.GetResponse(); This ...
0
votes
1answer
972 views

preventing squid forwarding loop with IPtables

I have a web application, and I'd like to limit file upload size. I thought I'd try using squid for this, via its directive request_body_size_max. I have my webserver running on port 8080, and I've ...
1
vote
1answer
319 views

How to force outgoing requests from webserver/PHP through squid proxy on same machine?

I have a Debian Squeeze VPS configured as an nginx web server. For security reasons I have blocked all outgoing connections except those to the Debian update servers (this stops bad scripts from ...
1
vote
1answer
275 views

Redirect traffic on port 80 into apache for unknown macs, and into squid for some macs

I have a linux box behaving like a router that handles two network interfaces: eth0 for internet and eth1 for LAN. I set up iptables in order to redirect all the web traffic coming by the LAN into a ...