The tag has no usage guidance.

learn more… | top users | synonyms

11
votes
4answers
12k views

Setting up a transparent SSL proxy

I've got a linux box set up with 2 network cards to inspect traffic going through port 80. One card is used to go out to the internet, the other one is hooked up to a networking switch. The point is ...
8
votes
2answers
1k views

Mac OS X Lion - forward all connections on port 22 to external ip [closed]

I need to forward all connection to any address port 22 to a different gateway (i.e. no default). Firstly I suppose to do it with ipfw: sudo ipfw add 5 fwd $EXTERNAL_IP,22 tcp from any to any 22 ...
6
votes
0answers
291 views

Getting Squid and TPROXY with IPv6 working on CentOS 7

I'm having trouble getting TPROXY working with Squid and IPv6 on a CentOS 7 server. I was previously using a generic intercept setup with NAT, but it was limited to IPv4 only. I'm now expanding the ...
5
votes
4answers
16k views

transparent SSL proxy myths and facts

I've been searching for many hours now about a way to setup a transparent proxy for SSL (not Squid). The general answer is that I can't, but I know there are some ways, though. My purpose is only the ...
5
votes
5answers
7k views

Squid to cache youtube and windows update content

I Have a squid server (transparent) and I want to cahce youtube videos and windows updates. I know that someone has posted a similar question and I have looked at this post but I am configuring this ...
5
votes
6answers
29k views

How to setup client for squid transparent proxy?

Server Details Squid Transparent Proxy Version: 3.3.8 OS: Ubuntu Server 14.04 Server IP: 192.168.1.3 Squid config file (excluding comments using grep) root@ubuntu:~# grep -v '^$\|^\s*\#' ...
5
votes
4answers
675 views

Enterprise IPv6 Migration - End of proxypac ? Start of Point-to-Point ? +10K users

Let's start with a diagram : We can see a "typical" IPv4 company network with : An Internet acces through a proxy An "Others companys" access through an dedicated proxy A direct access to local ...
4
votes
1answer
9k views

Howto create a transparent https proxy with firehol and tinyproxy?

I have a transparent proxy setup in Ubuntu 10.04.4 with firehol and tinyproxy that works fine for http but I can't get it to work for https. Connecting to tinyproxy directly works fine as the ...
4
votes
1answer
1k views

Linux IPv6 Transparent Proxy (but Linux doesn't support NAT on IPv6!?)

On Linux I can make a transparent proxy simply by adding a iptables -j REDIRECT command. To my surprise, I am needing to support IPv6. Simple enough right? iptables6 -j REDIRECT command not ...
4
votes
4answers
13k views

How can I tell if there's a transparent HTTP proxy on my broadband?

I'm trying to work out if my broadband provider is using a transparent proxy. Mostly I don't mind if they do, but today I'm trying to preview a site I have moved from one server to another, before DNS ...
4
votes
1answer
102 views

Whitelisting outgoing traffic from docker containers

I have a server running multiple docker containers in the following configuration: One of the containers is a reverse proxy binding to the exposed ports of the other containers. This is the only ...
4
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
3
votes
3answers
6k views

Easy way to “edit” the traffic coming from a tcp host (linux)

I need to make some small modification to incoming traffic from a known tcp host:port before the process handling the connection get the stream. For example, let 192.168.1.88 be a remote host which ...
3
votes
4answers
10k views

Nginx as network edge HTTP cache?

Looking to implement an office network with peak # users of 40-50 people and clients and I'm thinking that nginx could be used as a transparent proxy to cache requests to any HTTP-based site at the ...
3
votes
3answers
402 views

Transparent proxy to enforce terms of service

There are lots of programs that small businesses (libraries, internet cafes, etc) can install on local computers to enforce their rules and terms of service when using free resources. These aren't ...
3
votes
1answer
3k views

Automatic Proxy Discovery wpad.example.com doesn't work

I'm trying to setup an automatic method for discovery my Squid proxy on the local network, by setting the browsers with "Automatic detection". The proxy is fine and works if I specify the IP:Port ...
3
votes
1answer
258 views

Selective use of transparent proxy on per-connection basis

TL;DR - I'm planning on using an application-level firewall to forward only requests for HTML content to a transparent proxy. So the initial GET request for google.com (for example) that returns an ...
3
votes
1answer
578 views

Squid transparent proxy for outgoing traffic only

I have a Rails server that's a bit API heavy and so I want to run a Squid caching transparent proxy, between all port 80 activity, and the real world. However I don't need incoming traffic to go ...
3
votes
5answers
553 views

Simple Linux program that takes any HTTP/HTTPS request and returns a single page?

I have a Linux box operating as router. There's a NIC that's connected to the internet (WAN), a NIC connected to an 8-port GbE switch (LAN), and a NIC connected to a Linksys wireless N-router (WLAN). ...
3
votes
2answers
110 views

Transparent proxy cache on BGP multihome

Provider A have transparent caching with squid . In the situation which a client has multihome BGP with provider A and provider B then client does not send its outgoing traffic (upload) to provider ...
2
votes
3answers
1k views

Do transparent proxies have limitations comparing to non-transparent proxies?

I wonder why would companies use non-transparent proxies when the transparent ones seems better to me.
2
votes
4answers
1k views

Does IIS6 have a secret, unlogged, transparent, case-sensitive proxy?

Does IIS have a secret, unlogged, transparent, case-sensitive proxy built into it? A file exists on the web-server: GET http://www.stackoverflow.com/javascript/ModifyQuoteArea.js HTTP/1.1 Accept: ...
2
votes
1answer
1k views

Redirected traffic with iptables to squid not displaying custom error page?

I've created a squid configuration with the directive: deny_info ERR_PROXY_INFO all And tested this by setting squids port to 8080, then setting my browser proxy to 192.168.1.3:8080 This does ...
2
votes
4answers
1k views

Is there a simple command-line HTTP proxy that outputs to STDOUT?

Is there a command-line HTTP proxy that outputs to STDOUT so I can use it with Unix pipes? I want to do something like this: Start the proxy at the command-line: $ proxy -p 8888 | grep "Text I'm ...
2
votes
1answer
1k views

configure squid to act as transparent proxy

I have configured squid to support transparency using this command ./configure --enable-ipfw-transparent --enable-ssl I have started squid, is there any other configuration that i need to add so ...
2
votes
0answers
38 views

How can I throttle the rate of messages with a transparent proxy server?

I am trying to run a client software that connects to a socket server and downloads data. My problem is that the socket server has a max rate of messages per second, and it disconnects a client if ...
2
votes
1answer
367 views

Host doesn't send ACK-SYN packets for transparent proxy

I am setting up a transparent proxy using haproxy, the setup works without the 'source 0.0.0.0 usesrc client' line. When I add that line in, the endpoint is called from the original client's ip ...
2
votes
0answers
32 views

Evaluating and redirecting http requests

I am trying to evaluate traffic on port 80 to determine whether or not if we need to redirect a request, or pass it through, while being transparent. Scenario: User connects to our system via Wifi. ...
2
votes
0answers
665 views

Squid as fully transparent reverse proxy

I have got a few web servers running on my server and I want all of them to be accessible via port 80. I set up squid as a reverse proxy and it works fine. I, however, need the source ip address to be ...
1
vote
3answers
429 views

What is the best way to get PRECISE domain name from ip address logged in iptables log

In iptables I am logging certain public IP addresses... say of websites visited from different workstations, depending on destination port number... All this is not really relevant to the question but ...
1
vote
1answer
6k views

HTTPS is not working in transparent proxy with Squid

I am using Squid proxy 3.1, all systems in the LAN connects to the internet through proxy. Direct connection is blocked using the iptables from the gateway server. There are some devices which does ...
1
vote
7answers
12k views

Redirecting port 80 to another port on a single Windows computer? [closed]

Assuming my Windows (xp, vista, 2003, 2008, or windows 7) computer is connected directly to the internet and has no router in between... Is there a way to filter all traffic going TO port 80, so that ...
1
vote
2answers
580 views

Transparent proxy and HTTPS with squid

Is is possibile to use a transparent proxy to filter some domains without a man-in-the-middle approach? I would like to guarantee the certificate verification and user privacy, by other hand, I want ...
1
vote
2answers
272 views

Reverse proxy to the entire WWW

I'm trying to create a reverse proxy to work like http://www.meowbify.com/, It's a cool platform that replaces images with cats animations. I tried Apache and nginx "reverse proxy" just to reverse ...
1
vote
1answer
1k views

How to check if Ubuntu 14.04 Kernel has TPROXY

I'm using Digital Ocean's Ubuntu 14.04 image and needs the kernel to be compiled for TPROXY. Is there a way to check whether the current kernel supports TPROXY?
1
vote
1answer
986 views

Security implications of running SquidProxy on the main pfSense Firewall

I want to start a discussion about the pros and cons of running a SquidProxy server on the same pfSense box as the main firewall. Today I have one pfSense doing all the firewall things, like routing ...
1
vote
1answer
84 views

Creating my own proxy server

I have a remote machine which needs to serve as a proxy server (http), aswell as an http server. The part of the http server is taken care of and is working, but as far as setting proxy server - I've ...
1
vote
3answers
2k views

Transparent proxying leaves sockets with SYN_RCVD in MacOS X 10.6 Snow Leopard (and maybe FreeBSD)

I'm trying to create a transparent proxy on my MacOS machine in order to port the sshuttle ssh-based transproxy VPN from Linux. I think I almost have it working, but sadly, almost is not 100%. Short ...
1
vote
1answer
121 views

Proxy to remote proxy?

One of our partners require us to use one of their proxies in order for us to reach various services there. What I would like to achieve is to set up a local proxy at which I point the domains, so ...
1
vote
2answers
1k views

Bypass transparent Squid proxy on Tomato USB for specific sites

I'm using a router with Tomato USB to forward port 80 requests to a Ubuntu Server with Squid 3 in transparent mode. Someone on the Tomato forum adapted these instructions for Tomato: #!/bin/sh ...
1
vote
1answer
1k views

Transparent proxy which preserves client mac address [closed]

I have a customer that wants to intercept SSL traffic as it leaves their network. My proposed solution is to setup a proxy that is transparent and both layer 2 and layer 3 so it can simply be dropped ...
1
vote
1answer
742 views

Rewrite URL based off of IP on OpenWRT

We are running OpenWRT on a WRT54GL. I have been looking for an answer to this, but I can't seem to figure out what to search for, if its possible, or what combination of programs to use. I want to ...
1
vote
1answer
2k views

ClearOS transparent firewall and web proxy mode possible?

In other firewall software packages I have seen the ability and am hoping it is possible with ClearOS to put it in to transparent or bridged mode where the device sits physically between the client ...
1
vote
1answer
515 views

Correct use of a transparent bridge

I've asked a similar question previously but I am just now sure I am understanding what I need to do. My current set-up is as follows: ...
1
vote
1answer
4k views

How to config automatic proxy from DHCP in windows server 2003?

I am running squid proxy, and currently my users are being configured directly to the squid server. I am trying to setup a proxy.pac to simplify the process. The proxy.pac working fine in the network ...
1
vote
1answer
478 views

3Proxy with Rotating IP's

I want to configure a proxy which can rotate the IP's on session basis. Let me explain what I have done so far and what is exact requirement. I installed 3 proxy configured it to listen on 10 Public ...
1
vote
2answers
1k views

setting up a proxy to mirror an SSH SOCKS connection

I have two remote machines, remote1 and remote2. remote2 is only running sshd, and I can't run anything else on it. remote1 is a full-fledged server to which I have complete access. I can run a ...
1
vote
1answer
652 views

Problem installing IP-Filters MAC for transparent proxy

Am trying to compile squid to allow transparency using this command ./configure --enable-ipf-transparent on a MAC mini running 10.5.8 am getting a error WARNING: Cannot find necessary ...
1
vote
2answers
47 views

apache2 HTTPS to HTTP reverse proxying

I am trying to set up what i believe needs to be a reverse proxy in Apache 2. I have apache set up and i have Mod_proxy,mod_ssl,Mod_rewrite all enabled. i am trying to control a media player through ...
1
vote
1answer
587 views

openbsd pf squid transparent proxy using a bridge

I want to use OpenBSD 5.7 as a filtering bridge in front of my router, and as part of that run a transparent proxy (squid 3.5.1) to manage web access. I have set up the openbsd machine as a bridge, ...