I want to use a local transparent proxy to have a single place to enter the password to an office proxy. Basically, all the TCP packets sent to port 80 except the ones sent to specific subnet should be forwarded to local Squid.

Squid works fine in regular mode but when I switch it to transparent and disable proxy in browser, the browser can't connect to remote hosts. ipfw works, checked by adding deny ip from any to any rule. The debugging is hard because its being Mac OS the logs are located god knows where.


 $ squid -v
Squid Cache: Version 3.2.9
configure options:  '--disable-debug' '--disable-dependency-tracking' '--prefix=/usr/local/Cellar/squid/3.2.9' '--localstatedir=/usr/local/var' '--enable-ssl' '--enable-ssl-crtd' '--disable-eui' '--enable-ipfw-transparent' 'CC=cc' 'CXX=c++' 'PKG_CONFIG_LIBDIR=/usr/lib/pkgconfig:/usr/local/Library/ENV/pkgconfig/10.8'


 $ sudo ipfw list
00100 fwd,3128 tcp from me to any dst-port 80
65535 allow ip from any to any

Relevant part from squid.conf

http_access allow localhost manager
http_access deny manager
http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

http_access allow localnet
http_access allow localhost

http_access deny all

http_port 3128 transparent

cache_peer proxy.office.com parent 8080 0 login=user:password
never_direct allow all

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.