The tag has no wiki summary.

learn more… | top users | synonyms

8
votes
4answers
7k views

Setting up a transparent SSL proxy

I've got a linux box set up with 2 network cards to inspect traffic going through port 80. One card is used to go out to the internet, the other one is hooked up to a networking switch. The point is ...
8
votes
2answers
1k views

Mac OS X Lion - forward all connections on port 22 to external ip [closed]

I need to forward all connection to any address port 22 to a different gateway (i.e. no default). Firstly I suppose to do it with ipfw: sudo ipfw add 5 fwd $EXTERNAL_IP,22 tcp from any to any 22 ...
5
votes
3answers
11k views

transparent SSL proxy myths and facts

I've been searching for many hours now about a way to setup a transparent proxy for SSL (not Squid). The general answer is that I can't, but I know there are some ways, though. My purpose is only the ...
5
votes
5answers
6k views

Squid to cache youtube and windows update content

I Have a squid server (transparent) and I want to cahce youtube videos and windows updates. I know that someone has posted a similar question and I have looked at this post but I am configuring this ...
5
votes
4answers
540 views

Enterprise IPv6 Migration - End of proxypac ? Start of Point-to-Point ? +10K users

Let's start with a diagram : We can see a "typical" IPv4 company network with : An Internet acces through a proxy An "Others companys" access through an dedicated proxy A direct access to local ...
4
votes
3answers
5k views

How to setup client for squid transparent proxy?

Server Details Squid Transparent Proxy Version: 3.3.8 OS: Ubuntu Server 14.04 Server IP: 192.168.1.3 Squid config file (excluding comments using grep) root@ubuntu:~# grep -v '^$\|^\s*\#' ...
3
votes
3answers
3k views

Easy way to “edit” the traffic coming from a tcp host (linux)

I need to make some small modification to incoming traffic from a known tcp host:port before the process handling the connection get the stream. For example, let 192.168.1.88 be a remote host which ...
3
votes
3answers
396 views

Transparent proxy to enforce terms of service

There are lots of programs that small businesses (libraries, internet cafes, etc) can install on local computers to enforce their rules and terms of service when using free resources. These aren't ...
3
votes
4answers
8k views

How can I tell if there's a transparent HTTP proxy on my broadband?

I'm trying to work out if my broadband provider is using a transparent proxy. Mostly I don't mind if they do, but today I'm trying to preview a site I have moved from one server to another, before DNS ...
3
votes
1answer
1k views

Linux IPv6 Transparent Proxy (but Linux doesn't support NAT on IPv6!?)

On Linux I can make a transparent proxy simply by adding a iptables -j REDIRECT command. To my surprise, I am needing to support IPv6. Simple enough right? iptables6 -j REDIRECT command not ...
3
votes
1answer
140 views

Selective use of transparent proxy on per-connection basis

TL;DR - I'm planning on using an application-level firewall to forward only requests for HTML content to a transparent proxy. So the initial GET request for google.com (for example) that returns an ...
3
votes
1answer
5k views

Howto create a transparent https proxy with firehol and tinyproxy?

I have a transparent proxy setup in Ubuntu 10.04.4 with firehol and tinyproxy that works fine for http but I can't get it to work for https. Connecting to tinyproxy directly works fine as the ...
3
votes
1answer
426 views

Squid transparent proxy for outgoing traffic only

I have a Rails server that's a bit API heavy and so I want to run a Squid caching transparent proxy, between all port 80 activity, and the real world. However I don't need incoming traffic to go ...
3
votes
5answers
541 views

Simple Linux program that takes any HTTP/HTTPS request and returns a single page?

I have a Linux box operating as router. There's a NIC that's connected to the internet (WAN), a NIC connected to an 8-port GbE switch (LAN), and a NIC connected to a Linksys wireless N-router (WLAN). ...
3
votes
2answers
57 views

Transparent proxy cache on BGP multihome

Provider A have transparent caching with squid . In the situation which a client has multihome BGP with provider A and provider B then client does not send its outgoing traffic (upload) to provider ...
3
votes
1answer
999 views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
2
votes
3answers
972 views

Do transparent proxies have limitations comparing to non-transparent proxies?

I wonder why would companies use non-transparent proxies when the transparent ones seems better to me.
2
votes
4answers
6k views

Nginx as network edge HTTP cache?

Looking to implement an office network with peak # users of 40-50 people and clients and I'm thinking that nginx could be used as a transparent proxy to cache requests to any HTTP-based site at the ...
2
votes
4answers
967 views

Does IIS6 have a secret, unlogged, transparent, case-sensitive proxy?

Does IIS have a secret, unlogged, transparent, case-sensitive proxy built into it? A file exists on the web-server: GET http://www.stackoverflow.com/javascript/ModifyQuoteArea.js HTTP/1.1 Accept: ...
2
votes
1answer
130 views

Automatic Proxy Discovery wpad.example.com doesn't work

I'm trying to setup an automatic method for discovery my Squid proxy on the local network, by setting the browsers with "Automatic detection". The proxy is fine and works if I specify the IP:Port ...
2
votes
4answers
858 views

Is there a simple command-line HTTP proxy that outputs to STDOUT?

Is there a command-line HTTP proxy that outputs to STDOUT so I can use it with Unix pipes? I want to do something like this: Start the proxy at the command-line: $ proxy -p 8888 | grep "Text I'm ...
2
votes
1answer
957 views

configure squid to act as transparent proxy

I have configured squid to support transparency using this command ./configure --enable-ipfw-transparent --enable-ssl I have started squid, is there any other configuration that i need to add so ...
2
votes
1answer
205 views

Host doesn't send ACK-SYN packets for transparent proxy

I am setting up a transparent proxy using haproxy, the setup works without the 'source 0.0.0.0 usesrc client' line. When I add that line in, the endpoint is called from the original client's ip ...
2
votes
0answers
28 views

Evaluating and redirecting http requests

I am trying to evaluate traffic on port 80 to determine whether or not if we need to redirect a request, or pass it through, while being transparent. Scenario: User connects to our system via Wifi. ...
2
votes
0answers
330 views

Squid as fully transparent reverse proxy

I have got a few web servers running on my server and I want all of them to be accessible via port 80. I set up squid as a reverse proxy and it works fine. I, however, need the source ip address to be ...
2
votes
0answers
493 views

Using nginx as reverse proxy with haproxy as loadbalancer

I am tring to use nginx and haproxy together. I am doing that because haproxy does not support gzip compression. My aim is that first using nginx for gzip compression than forward it to haproxy for ...
1
vote
1answer
4k views

HTTPS is not working in transparent proxy with Squid

I am using Squid proxy 3.1, all systems in the LAN connects to the internet through proxy. Direct connection is blocked using the iptables from the gateway server. There are some devices which does ...
1
vote
7answers
10k views

Redirecting port 80 to another port on a single Windows computer? [closed]

Assuming my Windows (xp, vista, 2003, 2008, or windows 7) computer is connected directly to the internet and has no router in between... Is there a way to filter all traffic going TO port 80, so that ...
1
vote
2answers
244 views

Reverse proxy to the entire WWW

I'm trying to create a reverse proxy to work like http://www.meowbify.com/, It's a cool platform that replaces images with cats animations. I tried Apache and nginx "reverse proxy" just to reverse ...
1
vote
1answer
331 views

Security implications of running SquidProxy on the main pfSense Firewall

I want to start a discussion about the pros and cons of running a SquidProxy server on the same pfSense box as the main firewall. Today I have one pfSense doing all the firewall things, like routing ...
1
vote
1answer
73 views

Creating my own proxy server

I have a remote machine which needs to serve as a proxy server (http), aswell as an http server. The part of the http server is taken care of and is working, but as far as setting proxy server - I've ...
1
vote
3answers
1k views

Transparent proxying leaves sockets with SYN_RCVD in MacOS X 10.6 Snow Leopard (and maybe FreeBSD)

I'm trying to create a transparent proxy on my MacOS machine in order to port the sshuttle ssh-based transproxy VPN from Linux. I think I almost have it working, but sadly, almost is not 100%. Short ...
1
vote
1answer
161 views

Set up proxy for vpn server on ubuntu server 12.4

I have a vpn server with HTTPS, L2TP, OPENVPN, and PPTP. I want to set up a proxy on the server, so all connection that comes from vpn clients, they will use that. I created the following bash script ...
1
vote
1answer
178 views

How to check if Ubuntu 14.04 Kernel has TPROXY

I'm using Digital Ocean's Ubuntu 14.04 image and needs the kernel to be compiled for TPROXY. Is there a way to check whether the current kernel supports TPROXY?
1
vote
1answer
93 views

Proxy to remote proxy?

One of our partners require us to use one of their proxies in order for us to reach various services there. What I would like to achieve is to set up a local proxy at which I point the domains, so ...
1
vote
2answers
803 views

Bypass transparent Squid proxy on Tomato USB for specific sites

I'm using a router with Tomato USB to forward port 80 requests to a Ubuntu Server with Squid 3 in transparent mode. Someone on the Tomato forum adapted these instructions for Tomato: #!/bin/sh ...
1
vote
1answer
510 views

Rewrite URL based off of IP on OpenWRT

We are running OpenWRT on a WRT54GL. I have been looking for an answer to this, but I can't seem to figure out what to search for, if its possible, or what combination of programs to use. I want to ...
1
vote
1answer
2k views

ClearOS transparent firewall and web proxy mode possible?

In other firewall software packages I have seen the ability and am hoping it is possible with ClearOS to put it in to transparent or bridged mode where the device sits physically between the client ...
1
vote
1answer
410 views

Correct use of a transparent bridge

I've asked a similar question previously but I am just now sure I am understanding what I need to do. My current set-up is as follows: ...
1
vote
1answer
2k views

How to config automatic proxy from DHCP in windows server 2003?

I am running squid proxy, and currently my users are being configured directly to the squid server. I am trying to setup a proxy.pac to simplify the process. The proxy.pac working fine in the network ...
1
vote
1answer
372 views

3Proxy with Rotating IP's

I want to configure a proxy which can rotate the IP's on session basis. Let me explain what I have done so far and what is exact requirement. I installed 3 proxy configured it to listen on 10 Public ...
1
vote
1answer
857 views

Redirected traffic with iptables to squid not displaying custom error page?

I've created a squid configuration with the directive: deny_info ERR_PROXY_INFO all And tested this by setting squids port to 8080, then setting my browser proxy to 192.168.1.3:8080 This does ...
1
vote
2answers
999 views

setting up a proxy to mirror an SSH SOCKS connection

I have two remote machines, remote1 and remote2. remote2 is only running sshd, and I can't run anything else on it. remote1 is a full-fledged server to which I have complete access. I can run a ...
1
vote
1answer
606 views

Problem installing IP-Filters MAC for transparent proxy

Am trying to compile squid to allow transparency using this command ./configure --enable-ipf-transparent on a MAC mini running 10.5.8 am getting a error WARNING: Cannot find necessary ...
1
vote
0answers
22 views

How can I throttle the rate of messages with a transparent proxy server?

I am trying to run a client software that connects to a socket server and downloads data. My problem is that the socket server has a max rate of messages per second, and it disconnects a client if ...
1
vote
0answers
429 views

TPROXY Not working with HAProxy, Ubuntu 14.04

I'm trying to use HAProxy as a fully transparent proxy using TPROXY in Ubuntu 14.04. HAProxy will be setup on the first server with eth0 111.111.250.250 and eth1 10.111.128.134. The single balanced ...
1
vote
1answer
275 views

Redirect traffic on port 80 into apache for unknown macs, and into squid for some macs

I have a linux box behaving like a router that handles two network interfaces: eth0 for internet and eth1 for LAN. I set up iptables in order to redirect all the web traffic coming by the LAN into a ...
1
vote
1answer
319 views

How to force outgoing requests from webserver/PHP through squid proxy on same machine?

I have a Debian Squeeze VPS configured as an nginx web server. For security reasons I have blocked all outgoing connections except those to the Debian update servers (this stops bad scripts from ...
1
vote
0answers
166 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
1
vote
1answer
721 views

Transparent proxy which preserves client mac address

I have a customer that wants to intercept SSL traffic as it leaves their network. My proposed solution is to setup a proxy that is transparent and both layer 2 and layer 3 so it can simply be dropped ...