New answers tagged squid
acl SSL_ports port 443 http_access deny CONNECT !SSL_ports The CONNECT command is used to build a tunnel through the proxy to some other host. It is usually used by the browser to connect to a remote server via https, i.e. built the tunnel and then upgrade the connection inside the tunnel to SSL and then speak HTTP inside this SSL tunnel. Since ...
You will need to add local host to the localnet definition. acl localnet src 127.0.0.1 # localhost acl localnet src ::1 # IPv6 localhost Using a firewall to force transparent proxy access on localhost will require some additional parameters to ignore traffic from squid.
Of course, just add two port lines like : http_port 3128 http_port 3130 transparent And of course, the transparent will not be authenticated, as it is not possible
Order is important. Put the allow line before the deny. Also url_regex matches one the whole URL including http:// so you need to change your regexes. Remember to restart or reload squid after changes.
At line who has name= allow-miss try to put name='' allow-miss, squid configuration parser is trying to assign [space]allow-miss to name.
Another option is to use dhcp option 252 and set the URL to an automatic proxy configuration script. Or alternately you can set up a URL http://wpad/wpad.dat with the proxy settings. Or you can do both. The DNS method is generally more supported. This is dependent on being able to set the options with the dhcp server and clients supporting the auto proxy ...
You can configure squid as transparent caching proxy. Which is actually applies a fw rule to forward all packets to squid port from web ports 80. A sample configuration for squid. httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on acl lan src 192.168.1.1 192.168.2.0/24 http_access allow localhost ...
Configure your router to use your squidguard machine as a 'transparent proxy'. You did not mention what you were using for a router, but if it's supported, there is likely a tutorial on the web for configuring it to be used with a proxy server.
Squid is a HTTP proxy (usually operated as a Forward Proxy). It does support FTP also. It does not support POP3 and SMTP. You should look at something like HAProxy if you want a Reverse Proxy for protocols other than HTTP.
Top 50 recent answers are included