The tag has no wiki summary.

learn more… | top users | synonyms

-1
votes
1answer
23 views

Transparent caching solution

I would like to in some cases make transparent caching for certain sites. Let's say that I have a static list of site from where I want to cache all downloads, ie: the client wants to download ...
0
votes
1answer
624 views

tproxy squid bridge very slow when cache is full

I have installed a bridge tproxy proxy in a fast server with 8GB ram. The traffic is around 60Mb/s. When I start for first time the proxy (with the cache empty) the proxy works very well but when the ...
2
votes
1answer
34 views

Host doesn't send ACK-SYN packets for transparent proxy

I am setting up a transparent proxy using haproxy, the setup works without the 'source 0.0.0.0 usesrc client' line. When I add that line in, the endpoint is called from the original client's ip ...
1
vote
1answer
1k views

ClearOS transparent firewall and web proxy mode possible?

In other firewall software packages I have seen the ability and am hoping it is possible with ClearOS to put it in to transparent or bridged mode where the device sits physically between the client ...
-1
votes
1answer
37 views

How can I set up a transparent proxy using squid and squidguard which has time-based acl based on MAC addresses?

I have a linux based server and I want to control access to internet based on MAC addresses of devices. How can I do that?
-1
votes
1answer
74 views

How to configure Windows Server as a Web Proxy? [closed]

I'd like to set up a transparent web proxy on my home network. I know you can do this with Squid on Linux. I was wondering if Windows Server includes a web proxy?
0
votes
1answer
149 views

How To Route All HTTP Traffic from eth1 to the Squid Proxy? The Iptable rules?

I have just setup a squid proxy server. The server have two interfaces. eth0 connects to the router and eth1 is connected to a switch where all the other machines connect. The server also have a DHCP ...
0
votes
0answers
74 views

Squid 2.6 and https trasparent proxy

I have a question about Squid configuration as trasparent proxy using SSL. I would to use Squid 2.6 as trasparent proxy with http and https connection. I followed this steps: 1) I configurated my ...
1
vote
0answers
134 views

blocking https connections using squid trans [duplicate]

Am a linux user. I have a proxy server setup running squid-trans for dealing my wireless connections. But i found that it can easily open https connections (like https://www.facebook.com) . Is there ...
0
votes
1answer
118 views

Trying to setup transparent, load balancing, SSL reverse proxy. Is it possible?

I've done a few weeks worth of research on this topic for a project, and unfortunately I'm a simple code monkey, my knowledge of networking and SSL are limited. Pretty much every search I've done so ...
3
votes
1answer
390 views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
0answers
109 views

Deny All Allow Video Streaming Site Firewall Proxy

I need to build a hotspot for children to view a video streaming site with random tablet devices that a client is going to provide. The req uested environment should restrict access to only the video ...
5
votes
5answers
5k views

Squid to cache youtube and windows update content

I Have a squid server (transparent) and I want to cahce youtube videos and windows updates. I know that someone has posted a similar question and I have looked at this post but I am configuring this ...
0
votes
0answers
58 views

Setting a transparent proxy without changing existing IP Address values

The end goal of what I'm trying to achieve is: Block access to certain websites and view bandwidth used by IP Address. Without changing my employee's gateway address. -- Our internet connection is ...
0
votes
0answers
67 views

ip_conntrack vs TPROXY performance

I'm currently trying to set up a high performance load balancer who - ideally - would be able to handle more than the ~65k connections that are possible without using a transparent proxy, with HAProxy ...
7
votes
2answers
941 views

Mac OS X Lion - forward all connections on port 22 to external ip [closed]

I need to forward all connection to any address port 22 to a different gateway (i.e. no default). Firstly I suppose to do it with ipfw: sudo ipfw add 5 fwd $EXTERNAL_IP,22 tcp from any to any 22 ...
0
votes
0answers
61 views

Chaining transparent and non-transparent proxies using Squid

I have a question about the possible setup when chainig a Squid proxy behind a transparent proxy behind a non-transparent proxy, as in: [user pool] -> [Squid 1 (transparent)] -> [transparent proxy] ...
0
votes
0answers
44 views

Transparent proxy with netsed not working for tcp

I am trying to create a transparent proxy wherein i am redirecting outgoing packets on port 80 to port 10101 and use netsed to modify outgoing tcp packets Below are the iptables rule: iptables -t nat ...
0
votes
0answers
278 views

TCP_MISS/Squid-Error: ERR_CONNECT_FAIL

I setup an apache web server and squid3 running on the same machine, but when I try to access the web-server pages from client machine, I always ended up with an ERR_CONNECT_FAIL error. I tried all ...
1
vote
7answers
9k views

Redirecting port 80 to another port on a single Windows computer? [closed]

Assuming my Windows (xp, vista, 2003, 2008, or windows 7) computer is connected directly to the internet and has no router in between... Is there a way to filter all traffic going TO port 80, so that ...
1
vote
1answer
66 views

Proxy to remote proxy?

One of our partners require us to use one of their proxies in order for us to reach various services there. What I would like to achieve is to set up a local proxy at which I point the domains, so ...
-2
votes
1answer
79 views

Transparent AntiSpam solution in ISP scale [closed]

We have and ISP with adsl , broadband etc subscribers (average 10000 online users with 1M of Bandwidth . average ) . Some users infected by spammer viruses which makes our ip address spaces ...
3
votes
1answer
85 views

Selective use of transparent proxy on per-connection basis

TL;DR - I'm planning on using an application-level firewall to forward only requests for HTML content to a transparent proxy. So the initial GET request for google.com (for example) that returns an ...
-2
votes
1answer
57 views

Setting up a DHCP/Proxy Server

Current setup: Modem -> Firewall(DHCP) -> Switch and Wireless Router |-> Computers If I wanted to setup a Proxy Server in there, it would have to replace the Firewall correct? The idea is so that ...
2
votes
0answers
25 views

Evaluating and redirecting http requests

I am trying to evaluate traffic on port 80 to determine whether or not if we need to redirect a request, or pass it through, while being transparent. Scenario: User connects to our system via Wifi. ...
0
votes
1answer
150 views

apache module to perform search and replace operations on response bodies?

I am trying to do search and replace operation on response bodies using a transparent apache reverse proxy configuration, the below config using "mod_substitute" and "mod_proxy" works as expected : ...
7
votes
4answers
6k views

Setting up a transparent SSL proxy

I've got a linux box set up with 2 network cards to inspect traffic going through port 80. One card is used to go out to the internet, the other one is hooked up to a networking switch. The point is ...
0
votes
0answers
266 views

Can't get Squid to work with Intercept

I have a Sqiud Proxy server I am trying to add Transparency to using the Intercept feature. Currently the Proxy server accepts and functions fine as a standalone proxy for users. However when I add ...
0
votes
0answers
47 views

config squid to set specific acl for username and then set it to the ip addr of username

Assume your executive of corporation, sit on his clerk desk PC, and login to his username on the network (authenticate with Active Directory), of course he wants his full access to internet, but he ...
0
votes
1answer
52 views

.NET WebRequests fail on network with Blue Coat proxy

I have a .NET 3.5 application that makes a standard http WebRequest: var webRequest = WebRequest.Create(new Uri("http://myserver.com/target.xml)); var webResponse = webRequest.GetResponse(); This ...
0
votes
1answer
398 views

preventing squid forwarding loop with IPtables

I have a web application, and I'd like to limit file upload size. I thought I'd try using squid for this, via its directive request_body_size_max. I have my webserver running on port 8080, and I've ...
1
vote
1answer
218 views

How to force outgoing requests from webserver/PHP through squid proxy on same machine?

I have a Debian Squeeze VPS configured as an nginx web server. For security reasons I have blocked all outgoing connections except those to the Debian update servers (this stops bad scripts from ...
1
vote
1answer
162 views

Redirect traffic on port 80 into apache for unknown macs, and into squid for some macs

I have a linux box behaving like a router that handles two network interfaces: eth0 for internet and eth1 for LAN. I set up iptables in order to redirect all the web traffic coming by the LAN into a ...
1
vote
2answers
459 views

Bypass transparent Squid proxy on Tomato USB for specific sites

I'm using a router with Tomato USB to forward port 80 requests to a Ubuntu Server with Squid 3 in transparent mode. Someone on the Tomato forum adapted these instructions for Tomato: #!/bin/sh ...
0
votes
1answer
37 views

Setting up a transparent proxy for a database

Currently my setup is as follows :- Database client/library <---------------------> Database I'd like to have the following :- Database client/library <---> Proxy <-------------> Database ...
2
votes
0answers
187 views

Squid as fully transparent reverse proxy

I have got a few web servers running on my server and I want all of them to be accessible via port 80. I set up squid as a reverse proxy and it works fine. I, however, need the source ip address to be ...
-3
votes
2answers
836 views

How can system admins track employees Gmail chat [closed]

I am in a company where i have been warned about using chats. I spoke with one of the admin and he said every chat is being Monitored; ok i agree it can be if we use plain text but what if we use ...
0
votes
2answers
510 views

Tunnel an SSH connection transparently (no ProxyCommand)

Here's the scenario: the user runs "ssh -i sshkey user@server1". I want the SSH connection to be tunneled through server1 to server2. Normally, the user could do this himself using: ssh -i sshkey ...
5
votes
3answers
9k views

transparent SSL proxy myths and facts

I've been searching for many hours now about a way to setup a transparent proxy for SSL (not Squid). The general answer is that I can't, but I know there are some ways, though. My purpose is only the ...
1
vote
1answer
3k views

HTTPS is not working in transparent proxy with Squid

I am using Squid proxy 3.1, all systems in the LAN connects to the internet through proxy. Direct connection is blocked using the iptables from the gateway server. There are some devices which does ...
0
votes
1answer
29 views

Sharing proxy-cache among multiple user groups

Here is what I am trying to do. I have two different VLANs, each using their own Squid proxy-caches. Now I want to set up a single proxy-cache which both VLANs use. The catch is I don't want them to ...
0
votes
1answer
387 views

Transparent redirect or proxy in Apache, preserving incoming request

When a user first hits our server, we want to capture some information about the incoming request: GET parameters, Referer header, &c. The general idea is that when we get an incoming request that ...
0
votes
1answer
91 views

Squid proxy loading from the localhost web server

I've just set up a squid transparent proxy inside my network. The proxy works fine, however it seems some sort of caching policy is causing the proxy to instead go grab a copy of the website, it's ...
-1
votes
1answer
76 views

Squid connection to 0.0.0.0 Failed

trying to set up a Squid transparent proxy. All is good for the transparency, however the proxy occasionally runs into errors such as "connection to 0.0.0.0 Failed" Is this common? Am I doing ...
1
vote
0answers
138 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
3
votes
1answer
3k views

Howto create a transparent https proxy with firehol and tinyproxy?

I have a transparent proxy setup in Ubuntu 10.04.4 with firehol and tinyproxy that works fine for http but I can't get it to work for https. Connecting to tinyproxy directly works fine as the ...
0
votes
0answers
31 views

Proxy on top 2 databases

I have 02 database server, their addresses are 127.0.0.1:1234 and 127.0.0.2:1234, I want to have a proxy service that will run on 127.0.0.3:1234 that will able to redirect to the database which still ...
0
votes
2answers
687 views

Can I use iptables on my Varnish server to forward HTTPS traffic to a specific server?

We use Varnish as our front-end web cache and load balancer, so we have a Linux server in our development environment, running Varnish with some basic caching and load-balancing rules across a pair of ...
0
votes
1answer
288 views

how can make transparent proxy on more than one port?

i want to make transparent proxy with linux ( centos) , i want all incoming connection on port 1000 - 2000 on eth0 forward to eth1 on port 1000 - 2000 in transparent mode i have 2 server 1- ...
1
vote
1answer
447 views

Transparent proxy which preserves client mac address

I have a customer that wants to intercept SSL traffic as it leaves their network. My proposed solution is to setup a proxy that is transparent and both layer 2 and layer 3 so it can simply be dropped ...