Tag Info

New answers tagged

0

Squid allows you to customise the error messages by editing the templates found in /usr/share/squid/errors/<LANG>/ directories. Simply update the template for ERR_DNS_FAIL to include a search box or a redirect to your preferred search engine.


0

Squid doesn't support SNI what is written here. So to have in Squid: https://server1.com (cert for server1.com) => http://mylanip1 https://server2.com (cert for server2.com) => http://mylanip2 you have to: Put the addresses on different IPs, because a certificate is assigned to a uniqe pair [IP, port]. Configure Squid like this: https_port ...


0

Squid starting from version 3 can act as an ICAP client. If you manage to build your own ICAP server or a plugin to already existing C-ICAP server (for example) then you will be able to filter contents of HTTP(s) requests and responses and not only URLs as in case of url rewriter. See the description at http://wiki.squid-cache.org/Features/ICAP and list of ...


0

From your vague question I guess you want to do something for the HTTP headers or request URIs. For that you can use url_rewrite_* parameters in Squid. For example, configuring Squid to use some PHP script for determining the correct URL you could put url_rewrite_program /path/to/your/script/squid_url_rewrite.php in Squid config and make sure your PHP ...


0

If I am understanding your question correctly you are looking for the url_rewrite_program directive. There is even an example using php and ofcourse there a lot more fun examples in April Fools Pranks with a Squid Proxy Server even though all of them are in perl.


0

Yes, I know this firsthand. I also just tested it and it throws an error if those options are missing. This was on squid 3.3.8-1ubunut6.1, but should hold true for any version I've seen.


0

I've got this working succesfully. By adding login=*:NOPASSWORD I now get a PHP_AUTH_USER variable. The full squid.conf looks like: http_port 3128 accel defaultsite=#### cache_peer #### parent 80 0 no-query login=*:NOPASSWORD originserver access_log /var/log/squid/access.log squid hosts_file /etc/hosts auth_param ntlm program /usr/bin/ntlm_auth ...


-1

In Ubuntu 14.04 Squid Transparent Proxy Version: 3.3.8, you must to remove transparent from the configuration http_port 3128 i mean just leave http_port 3128 not http_port 3128 transparent for some reason is not working now.


1

Solved myself. Found this in the apache server access logs 192.168.1.70 - - [02/Oct/2014:16:20:02 -0300] "GET /wpad.dat HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36" Firefox, is attempting to fetch the file from http://wpad/wpad.dat instead of ...


2

I can understand not wanting to perform interdiction of HTTPS traffic, both for the UX reasons and for reducing exposure to liability for the contents of decrypted communications. Instead of having DNS resolve to your web proxy, have it resolve normally to the true address (set your DNS servers as caching, recursive resolvers). Using either WCCP or DNAT on ...


1

As per comments: Check the order of http_access rules in your squid.conf file and reorder them such that the deny rule you desire to block that IP is before any allow rule that may match the IP in question.



Top 50 recent answers are included