The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
3answers
1k views

Setting up a transparent proxy

I am looking at setting up some kind of visitor wireless access for our company however our internet connections all run through a external proxy. After many wasted hours explaining to visitors how ...
0
votes
3answers
944 views

Transparent proxy for HTTPS traffic

I'm looking for a proxy to intercept HTTP traffic na pass through HTTPS traffic. Burp can do that with SSL pass through. With that option, SSL traffic isn't modified or capture, but just tunneled. I ...
4
votes
2answers
126 views

Transparent proxy cache on BGP multihome

Provider A have transparent caching with squid . In the situation which a client has multihome BGP with provider A and provider B then client does not send its outgoing traffic (upload) to provider ...
1
vote
2answers
84 views

apache2 HTTPS to HTTP reverse proxying

I am trying to set up what i believe needs to be a reverse proxy in Apache 2. I have apache set up and i have Mod_proxy,mod_ssl,Mod_rewrite all enabled. i am trying to control a media player through ...
1
vote
2answers
901 views

Tunnel an SSH connection transparently (no ProxyCommand)

Here's the scenario: the user runs "ssh -i sshkey user@server1". I want the SSH connection to be tunneled through server1 to server2. Normally, the user could do this himself using: ssh -i sshkey ...
0
votes
2answers
796 views

tproxy squid bridge very slow when cache is full

I have installed a bridge tproxy proxy in a fast server with 8GB ram. The traffic is around 60Mb/s. When I start for first time the proxy (with the cache empty) the proxy works very well but when the ...
-1
votes
2answers
668 views

RAID0, LVM or JBOD for best performance squid proxy server?

I need to choise the storage type for a squid proxy server with 100Mb/s traffic. RAID0, LVM or JBOD Which is better for performance (don't care the data reliability) ? This storage is only for the ...
4
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
2
votes
1answer
411 views

Host doesn't send ACK-SYN packets for transparent proxy

I am setting up a transparent proxy using haproxy, the setup works without the 'source 0.0.0.0 usesrc client' line. When I add that line in, the endpoint is called from the original client's ip ...
2
votes
1answer
520 views

Simple proxy server for Windows that supports chaining proxies?

Are there any small/simple proxy servers for Windows, that support chaining further proxies? Example: Browser connects to proxy server. Proxy server connects to another proxy server. Proxy server ...
1
vote
1answer
952 views

openbsd pf squid transparent proxy using a bridge

I want to use OpenBSD 5.7 as a filtering bridge in front of my router, and as part of that run a transparent proxy (squid 3.5.1) to manage web access. I have set up the openbsd machine as a bridge, ...
1
vote
1answer
473 views

Set up proxy for vpn server on ubuntu server 12.4

I have a vpn server with HTTPS, L2TP, OPENVPN, and PPTP. I want to set up a proxy on the server, so all connection that comes from vpn clients, they will use that. I created the following bash script ...
1
vote
1answer
3k views

haproxy transparent mode on 14.04

As per my previous question SSHD real-ip behind haproxy - I'm now attempting to setup HAProxy to transparently pass the IPs to the backend services. tproxy modules loaded / and supported in haproxy (...
1
vote
1answer
499 views

Redirect traffic on port 80 into apache for unknown macs, and into squid for some macs

I have a linux box behaving like a router that handles two network interfaces: eth0 for internet and eth1 for LAN. I set up iptables in order to redirect all the web traffic coming by the LAN into a ...
1
vote
1answer
880 views

How To Route All HTTP Traffic from eth1 to the Squid Proxy? The Iptable rules?

I have just setup a squid proxy server. The server have two interfaces. eth0 connects to the router and eth1 is connected to a switch where all the other machines connect. The server also have a DHCP ...
0
votes
1answer
83 views

pfsense(2.3.1_5) Squid transparent proxy redirects internally hosted sites from http to https

I'm having an issue with Squid's transparent proxy on my pfSense firewall. My company hosts an internal git server at the following address (for example purposes) http://git.gitserver.com/. From our ...
0
votes
1answer
133 views

Is HAProxy built with TPROXY on Ubuntu 14.04

Ubuntu 14.04 has TPROXY (How to check if Ubuntu 14.04 Kernel has TPROXY). How do I find out if the version of HAProxy packaged for 14.04 is compiled with TPROXY?
0
votes
1answer
473 views

Setting up Squid Transparent Proxy on a machine separate from the router

As explained in the title, I'm trying to set up a Squid Transparent Proxy on a machine separate from the router, and also separate from the private network I want to filter through the proxy. The ...
0
votes
1answer
589 views

how to run pptp over redsocks proxy

I have one (virtual) Linux box in Ubuntu, that has redsocks set up done. Inside the machine, I could confirm that the the redsocks did work (use wget to check the external IP). Now, I want other ...
0
votes
1answer
632 views

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the ...
0
votes
1answer
525 views

Setting a transparent proxy without changing existing IP Address values

The end goal of what I'm trying to achieve is: Block access to certain websites and view bandwidth used by IP Address. Without changing my employee's gateway address. -- Our internet connection is ...
0
votes
1answer
70 views

Setting up a transparent proxy for a database

Currently my setup is as follows :- Database client/library <---------------------> Database I'd like to have the following :- Database client/library <---> Proxy <-------------> Database ...
0
votes
1answer
117 views

.NET WebRequests fail on network with Blue Coat proxy

I have a .NET 3.5 application that makes a standard http WebRequest: var webRequest = WebRequest.Create(new Uri("http://myserver.com/target.xml)); var webResponse = webRequest.GetResponse(); This ...
0
votes
1answer
1k views

Transparent redirect or proxy in Apache, preserving incoming request

When a user first hits our server, we want to capture some information about the incoming request: GET parameters, Referer header, &c. The general idea is that when we get an incoming request that ...
0
votes
1answer
129 views

Squid proxy loading from the localhost web server

I've just set up a squid transparent proxy inside my network. The proxy works fine, however it seems some sort of caching policy is causing the proxy to instead go grab a copy of the website, it's ...
0
votes
1answer
396 views

how can make transparent proxy on more than one port?

i want to make transparent proxy with linux ( centos) , i want all incoming connection on port 1000 - 2000 on eth0 forward to eth1 on port 1000 - 2000 in transparent mode i have 2 server 1- ...
0
votes
1answer
544 views

how to recompile kernel iptables by enabling tproxy

I'm new to the Kernel iptables/netfilter. I'm having red hat linux with Linux Kernel 2.6.37-rc1,iptables 1.4.10 ,squid 3.1. But my iptables are not configured with tproxy table. Now, i want to ...
0
votes
1answer
636 views

automatically forward all network traffic to a proxy

I've used cntlm to automatically add NTLM headers to https requests when ssh'ing to a particular host. What I need to do now is to send all outbound internet traffic (80/443) from any program ...
-1
votes
1answer
164 views

Squid connection to 0.0.0.0 Failed

trying to set up a Squid transparent proxy. All is good for the transparency, however the proxy occasionally runs into errors such as "connection to 0.0.0.0 Failed" Is this common? Am I doing ...
11
votes
0answers
602 views

Getting Squid and TPROXY with IPv6 working on CentOS 7

I'm having trouble getting TPROXY working with Squid and IPv6 on a CentOS 7 server. I was previously using a generic intercept setup with NAT, but it was limited to IPv4 only. I'm now expanding the ...
2
votes
0answers
40 views

How can I throttle the rate of messages with a transparent proxy server?

I am trying to run a client software that connects to a socket server and downloads data. My problem is that the socket server has a max rate of messages per second, and it disconnects a client if ...
2
votes
0answers
35 views

Evaluating and redirecting http requests

I am trying to evaluate traffic on port 80 to determine whether or not if we need to redirect a request, or pass it through, while being transparent. Scenario: User connects to our system via Wifi. ...
2
votes
0answers
789 views

Squid as fully transparent reverse proxy

I have got a few web servers running on my server and I want all of them to be accessible via port 80. I set up squid as a reverse proxy and it works fine. I, however, need the source ip address to be ...
1
vote
0answers
5k views

Transparent Proxy squid TCP_MISS/503 Error in all pages

I m trying to make a squid proxy server with to work as a transparent proxy server, and i m facing some issues that i m unable to figure out the reasons. The setup i m using is several VLAN's with ...
1
vote
0answers
2k views

TPROXY Not working with HAProxy, Ubuntu 14.04

I'm trying to use HAProxy as a fully transparent proxy using TPROXY in Ubuntu 14.04. HAProxy will be setup on the first server with eth0 111.111.250.250 and eth1 10.111.128.134. The single balanced ...
1
vote
0answers
2k views

Can't get Squid to work with Intercept

I have a Sqiud Proxy server I am trying to add Transparency to using the Intercept feature. Currently the Proxy server accepts and functions fine as a standalone proxy for users. However when I add ...
1
vote
0answers
222 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
1
vote
0answers
200 views

Can I make an ACL in squid for transparent connections?

I have a squid proxy that transparently intercepts connections from an internal network, and is explicit for connections from another network. I want to use authentication for the external network, ...
1
vote
0answers
647 views

Using nginx as reverse proxy with haproxy as loadbalancer

I am tring to use nginx and haproxy together. I am doing that because haproxy does not support gzip compression. My aim is that first using nginx for gzip compression than forward it to haproxy for ...
0
votes
0answers
3 views

Squid log has many repeated entries

I'm running Squid as a transparent proxy on my home router, a machine running IPFire. I noticed Squid was maxing out the CPU and causing poor network performance, so I looked at the log. I'm seeing ...
0
votes
0answers
17 views

set a explicit web proxy software to act as transparent proxy

I have a web proxy software (ccproxy) which creates an explicit proxy in the sense that the clients had to enter ip and port of web proxy to access it (proxy configurations in IE for example). ...
0
votes
0answers
21 views

Is Sonicwall SSL Decryption and Inspection the same function as Using a Transparent Proxy and Swapping out the Certificate with Squid 3?

I was wondering if Sonicwall SSL Decryption and Inspection is the same function, mainly; swap out the issued SSL certificate and decrypt traffic while issuing a local SSL certificate to the calling ...
0
votes
0answers
110 views

It is possible to use not NAT able VoIP Softswitch behind pfsense/siproxd

We are using diffrent VoIP Softswitches (asterisk/squire) behind a pfsense Firewall and connect to diffrent SIP Endpoints. The local softswitches only have a local IP and the Endpoints are public IPs. ...
0
votes
0answers
40 views

How to make squid hit the cache by path only?

I need to cache the objects with URI's like http://ftp.debian.org/debian/dists/stretch-updates/non-free/i18n/Translation-en.bz2 and http://httpredir.debian.org/debian/dists/stretch-updates/non-free/...
0
votes
0answers
412 views

LVS + keepalived for load balancing transparent SQUID proxies

I need to load balance a number of SQUID proxies configured in transparent mode. Below is a simple diagram with one LB and SQUID boxes. ---------- | Client | ...
0
votes
0answers
127 views

Two transparent gateway using squid return 403

I have two linux gateway using squid as transparent proxy. When I using them individually, everything is fine. But when I using them in the same network, every request from browser will return 403. ...