The tag has no usage guidance.

learn more… | top users | synonyms

11
votes
4answers
13k views

Setting up a transparent SSL proxy

I've got a linux box set up with 2 network cards to inspect traffic going through port 80. One card is used to go out to the internet, the other one is hooked up to a networking switch. The point is ...
11
votes
0answers
554 views

Getting Squid and TPROXY with IPv6 working on CentOS 7

I'm having trouble getting TPROXY working with Squid and IPv6 on a CentOS 7 server. I was previously using a generic intercept setup with NAT, but it was limited to IPv4 only. I'm now expanding the ...
8
votes
2answers
1k views

Mac OS X Lion - forward all connections on port 22 to external ip [closed]

I need to forward all connection to any address port 22 to a different gateway (i.e. no default). Firstly I suppose to do it with ipfw: sudo ipfw add 5 fwd $EXTERNAL_IP,22 tcp from any to any 22 keep-...
6
votes
4answers
17k views

transparent SSL proxy myths and facts

I've been searching for many hours now about a way to setup a transparent proxy for SSL (not Squid). The general answer is that I can't, but I know there are some ways, though. My purpose is only the ...
6
votes
1answer
10k views

Howto create a transparent https proxy with firehol and tinyproxy?

I have a transparent proxy setup in Ubuntu 10.04.4 with firehol and tinyproxy that works fine for http but I can't get it to work for https. Connecting to tinyproxy directly works fine as the ...
5
votes
5answers
7k views

Squid to cache youtube and windows update content

I Have a squid server (transparent) and I want to cahce youtube videos and windows updates. I know that someone has posted a similar question and I have looked at this post but I am configuring this ...
5
votes
6answers
34k views

How to setup client for squid transparent proxy?

Server Details Squid Transparent Proxy Version: 3.3.8 OS: Ubuntu Server 14.04 Server IP: 192.168.1.3 Squid config file (excluding comments using grep) root@ubuntu:~# grep -v '^$\|^\s*\#' /etc/...
5
votes
4answers
14k views

How can I tell if there's a transparent HTTP proxy on my broadband?

I'm trying to work out if my broadband provider is using a transparent proxy. Mostly I don't mind if they do, but today I'm trying to preview a site I have moved from one server to another, before DNS ...
5
votes
4answers
707 views

Enterprise IPv6 Migration - End of proxypac ? Start of Point-to-Point ? +10K users

Let's start with a diagram : We can see a "typical" IPv4 company network with : An Internet acces through a proxy An "Others companys" access through an dedicated proxy A direct access to local ...
4
votes
1answer
2k views

Linux IPv6 Transparent Proxy (but Linux doesn't support NAT on IPv6!?)

On Linux I can make a transparent proxy simply by adding a iptables -j REDIRECT command. To my surprise, I am needing to support IPv6. Simple enough right? iptables6 -j REDIRECT command not supported!...
4
votes
1answer
188 views

Whitelisting outgoing traffic from docker containers

I have a server running multiple docker containers in the following configuration: One of the containers is a reverse proxy binding to the exposed ports of the other containers. This is the only ...
4
votes
2answers
122 views

Transparent proxy cache on BGP multihome

Provider A have transparent caching with squid . In the situation which a client has multihome BGP with provider A and provider B then client does not send its outgoing traffic (upload) to provider ...
4
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
3
votes
3answers
7k views

Easy way to “edit” the traffic coming from a tcp host (linux)

I need to make some small modification to incoming traffic from a known tcp host:port before the process handling the connection get the stream. For example, let 192.168.1.88 be a remote host which ...
3
votes
4answers
11k views

Nginx as network edge HTTP cache?

Looking to implement an office network with peak # users of 40-50 people and clients and I'm thinking that nginx could be used as a transparent proxy to cache requests to any HTTP-based site at the ...
3
votes
3answers
405 views

Transparent proxy to enforce terms of service

There are lots of programs that small businesses (libraries, internet cafes, etc) can install on local computers to enforce their rules and terms of service when using free resources. These aren't ...
3
votes
1answer
4k views

Automatic Proxy Discovery wpad.example.com doesn't work

I'm trying to setup an automatic method for discovery my Squid proxy on the local network, by setting the browsers with "Automatic detection". The proxy is fine and works if I specify the IP:Port ...
3
votes
1answer
275 views

Selective use of transparent proxy on per-connection basis

TL;DR - I'm planning on using an application-level firewall to forward only requests for HTML content to a transparent proxy. So the initial GET request for google.com (for example) that returns an ...
3
votes
1answer
628 views

Squid transparent proxy for outgoing traffic only

I have a Rails server that's a bit API heavy and so I want to run a Squid caching transparent proxy, between all port 80 activity, and the real world. However I don't need incoming traffic to go ...
3
votes
5answers
558 views

Simple Linux program that takes any HTTP/HTTPS request and returns a single page?

I have a Linux box operating as router. There's a NIC that's connected to the internet (WAN), a NIC connected to an 8-port GbE switch (LAN), and a NIC connected to a Linksys wireless N-router (WLAN). ...
2
votes
3answers
1k views

Do transparent proxies have limitations comparing to non-transparent proxies?

I wonder why would companies use non-transparent proxies when the transparent ones seems better to me.
2
votes
4answers
1k views

Does IIS6 have a secret, unlogged, transparent, case-sensitive proxy?

Does IIS have a secret, unlogged, transparent, case-sensitive proxy built into it? A file exists on the web-server: GET http://www.stackoverflow.com/javascript/ModifyQuoteArea.js HTTP/1.1 Accept: ...
2
votes
1answer
1k views

Redirected traffic with iptables to squid not displaying custom error page?

I've created a squid configuration with the directive: deny_info ERR_PROXY_INFO all And tested this by setting squids port to 8080, then setting my browser proxy to 192.168.1.3:8080 This does ...
2
votes
4answers
1k views

Is there a simple command-line HTTP proxy that outputs to STDOUT?

Is there a command-line HTTP proxy that outputs to STDOUT so I can use it with Unix pipes? I want to do something like this: Start the proxy at the command-line: $ proxy -p 8888 | grep "Text I'm ...
2
votes
1answer
1k views

configure squid to act as transparent proxy

I have configured squid to support transparency using this command ./configure --enable-ipfw-transparent --enable-ssl I have started squid, is there any other configuration that i need to add so ...
2
votes
0answers
39 views

How can I throttle the rate of messages with a transparent proxy server?

I am trying to run a client software that connects to a socket server and downloads data. My problem is that the socket server has a max rate of messages per second, and it disconnects a client if ...
2
votes
1answer
404 views

Host doesn't send ACK-SYN packets for transparent proxy

I am setting up a transparent proxy using haproxy, the setup works without the 'source 0.0.0.0 usesrc client' line. When I add that line in, the endpoint is called from the original client's ip ...
2
votes
0answers
35 views

Evaluating and redirecting http requests

I am trying to evaluate traffic on port 80 to determine whether or not if we need to redirect a request, or pass it through, while being transparent. Scenario: User connects to our system via Wifi. ...
2
votes
0answers
780 views

Squid as fully transparent reverse proxy

I have got a few web servers running on my server and I want all of them to be accessible via port 80. I set up squid as a reverse proxy and it works fine. I, however, need the source ip address to be ...
2
votes
1answer
516 views

Simple proxy server for Windows that supports chaining proxies?

Are there any small/simple proxy servers for Windows, that support chaining further proxies? Example: Browser connects to proxy server. Proxy server connects to another proxy server. Proxy server ...
1
vote
3answers
463 views

What is the best way to get PRECISE domain name from ip address logged in iptables log

In iptables I am logging certain public IP addresses... say of websites visited from different workstations, depending on destination port number... All this is not really relevant to the question but ...
1
vote
1answer
6k views

HTTPS is not working in transparent proxy with Squid

I am using Squid proxy 3.1, all systems in the LAN connects to the internet through proxy. Direct connection is blocked using the iptables from the gateway server. There are some devices which does ...
1
vote
7answers
13k views

Redirecting port 80 to another port on a single Windows computer? [closed]

Assuming my Windows (xp, vista, 2003, 2008, or windows 7) computer is connected directly to the internet and has no router in between... Is there a way to filter all traffic going TO port 80, so that ...
1
vote
2answers
708 views

Transparent proxy and HTTPS with squid

Is is possibile to use a transparent proxy to filter some domains without a man-in-the-middle approach? I would like to guarantee the certificate verification and user privacy, by other hand, I want ...
1
vote
2answers
1k views

Can I use iptables on my Varnish server to forward HTTPS traffic to a specific server?

We use Varnish as our front-end web cache and load balancer, so we have a Linux server in our development environment, running Varnish with some basic caching and load-balancing rules across a pair of ...
1
vote
2answers
283 views

Reverse proxy to the entire WWW

I'm trying to create a reverse proxy to work like http://www.meowbify.com/, It's a cool platform that replaces images with cats animations. I tried Apache and nginx "reverse proxy" just to reverse ...
1
vote
1answer
58 views

How to forward HTTPS traffic through squid transparently?

I want to redirect all HTTP and HTTPS traffic to squid acting as a transparent proxy. This traffic will then be blocked or authorized (in bulk) during certain hours. Specifically I do not want to ...
1
vote
1answer
175 views

Nginx transparent reverse proxy for https and http to another server

I have researched this for a while but the use cases that others have asked about are more complex/different to what I am trying to achieve. I have Nginx serving pages on both ports 80 and 443 for ...
1
vote
1answer
2k views

How to check if Ubuntu 14.04 Kernel has TPROXY

I'm using Digital Ocean's Ubuntu 14.04 image and needs the kernel to be compiled for TPROXY. Is there a way to check whether the current kernel supports TPROXY?
1
vote
1answer
1k views

Security implications of running SquidProxy on the main pfSense Firewall

I want to start a discussion about the pros and cons of running a SquidProxy server on the same pfSense box as the main firewall. Today I have one pfSense doing all the firewall things, like routing ...
1
vote
1answer
85 views

Creating my own proxy server

I have a remote machine which needs to serve as a proxy server (http), aswell as an http server. The part of the http server is taken care of and is working, but as far as setting proxy server - I've ...
1
vote
3answers
2k views

Transparent proxying leaves sockets with SYN_RCVD in MacOS X 10.6 Snow Leopard (and maybe FreeBSD)

I'm trying to create a transparent proxy on my MacOS machine in order to port the sshuttle ssh-based transproxy VPN from Linux. I think I almost have it working, but sadly, almost is not 100%. Short ...
1
vote
1answer
126 views

Proxy to remote proxy?

One of our partners require us to use one of their proxies in order for us to reach various services there. What I would like to achieve is to set up a local proxy at which I point the domains, so ...
1
vote
2answers
1k views

Bypass transparent Squid proxy on Tomato USB for specific sites

I'm using a router with Tomato USB to forward port 80 requests to a Ubuntu Server with Squid 3 in transparent mode. Someone on the Tomato forum adapted these instructions for Tomato: #!/bin/sh ...
1
vote
1answer
1k views

Transparent proxy which preserves client mac address [closed]

I have a customer that wants to intercept SSL traffic as it leaves their network. My proposed solution is to setup a proxy that is transparent and both layer 2 and layer 3 so it can simply be dropped ...
1
vote
1answer
795 views

Rewrite URL based off of IP on OpenWRT

We are running OpenWRT on a WRT54GL. I have been looking for an answer to this, but I can't seem to figure out what to search for, if its possible, or what combination of programs to use. I want to ...
1
vote
1answer
3k views

ClearOS transparent firewall and web proxy mode possible?

In other firewall software packages I have seen the ability and am hoping it is possible with ClearOS to put it in to transparent or bridged mode where the device sits physically between the client ...
1
vote
1answer
526 views

Correct use of a transparent bridge

I've asked a similar question previously but I am just now sure I am understanding what I need to do. My current set-up is as follows: DC1[192.168.0.101]---RV082(A)[192.168.0.1]---[VPN]---RV082(B)...
1
vote
1answer
4k views

How to config automatic proxy from DHCP in windows server 2003?

I am running squid proxy, and currently my users are being configured directly to the squid server. I am trying to setup a proxy.pac to simplify the process. The proxy.pac working fine in the network ...
1
vote
1answer
506 views

3Proxy with Rotating IP's

I want to configure a proxy which can rotate the IP's on session basis. Let me explain what I have done so far and what is exact requirement. I installed 3 proxy configured it to listen on 10 Public ...