Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [squid]

Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

0
votes
0answers
12 views

Squid Proxy: dstdomain acl not working by name of domain?

given htttps transparent proxy Squid it is necessary to have access to only one url "partner.steam-api.com" squid.conf ... acl steam dstdomain partner.steam-api.com http_access allow steam ...
0
votes
0answers
21 views

How offer the teacher to block internet in the classroom?

I work for an high school. Currently we have an old Squid/SquidGuard, using explicit proxy fixed by GPO on Windows 10. Squid asks credentials (ntlm_auth), SquidGuard filters (blacklist) and logs ...
0
votes
0answers
12 views

Choice of server with versioning and cache [closed]

I’ve been doing some research to accomplish my goal but I’m still not completely sure of the conclusion. I hope this forum is the right place to complete the quest  The scenario is as follows: I ...
3
votes
1answer
51 views

AWS SSM Agent registration call cannot be proxied?

How do I proxy the amazon-ssm-agent -register call? I want to proxy all the amazon-ssm-agent traffic in a local VM instance through a squid proxy. When the SSM agent is running, it seems to proxy ...
0
votes
0answers
32 views

Inline forward chained HTTPS proxy

What is the best way to enforce an appliance to route its traffic through the corporate proxy? that would be both inline and forwarding traffic to a parent proxy? the corporate proxy can authenticate ...
0
votes
0answers
23 views

Squid 3.5 deprecated. Switch to 4?

As per the Squid wiki, Squid 3.5 has been deprecated. This also means that it no longer gets security updates, as per the security advisory. Does this mean that, when rolling out Squid in a ...
0
votes
1answer
39 views

Network configuration for transparent proxy

I'm trying deployment Squid in my house; as much as cache server, as much transparent proxy. I having questions about your network configuration. I am going to describe my environment. I have as a ...
0
votes
0answers
43 views

Squid Access Denied on SslBumpAndSplice

I have configured Squid as a transparent HTTP Egress Proxy, filtering outgoing web traffic based on a whitelist of known good URLs. I am now trying to get it working with HTTPS using the instructions ...
0
votes
0answers
21 views

Squid TCP_Denied

I'm trying to set up a basic proxy server. I've tried allowing all but to no avail. Following is my squid.conf file acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 ...
0
votes
0answers
12 views

How to configure https proxy in order to let it work when Prerouting?

I have http proxy and it works when i forward it iptables -t nat -I PREROUTING -p tcp --dport 80 -j DNAT --to-destination 127.0.0.1:81 I have squid proxy server and I am not able to let it work with ...
0
votes
1answer
142 views

How to combine squid reverse proxy with nginx proxy for shiny-server

I have a nginx web server which acts as a proxy for my shiny-server. I now want to use a squid reverse proxy to provide access to the nginx server (and thus the shiny server) to internet clients. ...
0
votes
0answers
30 views

Squid docker container configuration and swap

I'm currently running 4 squid container on my VPS. The server is a 1 vCore cpu with only 512 mb ram. I don't need a high percentage of hit rate, i don't need cache at all in fact. Starting from the ...
0
votes
0answers
29 views

Squid allow forwarding loop

I am trying to set up Squid as a caching reverse proxy in front of a single loadbalancer for a web application split into two parts - frontend.app.com and api.app.com. The frontend is running on a ...
0
votes
1answer
55 views

Not able to forward Pfsense 2.4.4 Squid log to elk

I have tried a couple of options so far but not able to forward logs to my elk server. Can someone please help me on this and guide me what configuration changes I have to make in order to achieve ...
-1
votes
0answers
27 views

squid3.5 - cannot authenticate username/password with Mysql 8

I configured squid 3.5 and mysql 8 in (centos 7.5)same vm(NAT) in vmware workstation. This is my configuration: Mysql configuration wget https://repo.mysql.com//mysql80-community-release-el7-1....
0
votes
0answers
81 views

Squid IPv6 To IPV4 mapping

i just finished setting up my squid proxy server, i have lots of IPv6 and only two IPv4 on my interface. the way squid is working currently is to use specified IPv6 tcp_outgoing_address, but if ...
0
votes
1answer
56 views

Squid 3.5.12 HTTP vs HTTPS Custom Block Page [duplicate]

I have Squid 3.5.12 On Ubuntu Server 16.04.5 LTS I'm using it to block everything except specific domains listed in whitelist.txt Everything is working fine except for the blocked page shown to the ...
0
votes
0answers
24 views

Digest Authentication on Squid proxy not working

I have been trying to get digest authentication working on squid, but it is not accepting my credentials. I have tried different passwords (in case of odd characters) and different realms. This is ...
0
votes
0answers
25 views

How do I assign a specific interface or IP for squid to use for outbound external authentication (ldap)

Background: I have a few pfSense servers that run a squid proxy, each one is configured with a central LDAP backend available over a VPN tunnel, is most cases this is OpenVPN but in one case we are ...
0
votes
1answer
153 views

Getting squid proxy to authenticate with AD or LDAP

So, I've been running a project lately, which is to mount a Squid proxy on Raspbian (on Raspberry pi via webmin). This project is divided into two parts; The first, which I have already completed, is ...
0
votes
0answers
18 views

Squid 3.5 (from Diladele) on windows failing to start as it can't rename file

After having managed to get my rewriters not to crash (see my earlier qeuestion), I get this: 2018/11/10 20:42:32 kid4| xrename: Cannot rename /cygdrive/d/squid/cache/swap.state.new to /cygdrive/d/...
1
vote
1answer
23 views

Creating proxies on large number of ports that forward to external proxy

I need some sort of proxy software (similar to Squid) that will work on Linux and allow me to create proxies listening on multiple ports. The proxies need to forward web requests to another external ...
0
votes
1answer
100 views

Unable to redirect HTTP traffic to transparent proxy (Squid)

I'm trying to create a transparent proxy to cache and blacklist traffic on my self-made Linux router. Problem is that all clients are getting timed-out when trying to reach any HTTP sites (HTTPS works)...
0
votes
0answers
41 views

Route traffic of specific ports via proxy

I have a squid3 proxy server setup and working as http/https proxy. On the client I am currently using export http_proxy="http:/xx.xx.xx.xx:3128" to use the proxy server for http and similarly ...
0
votes
1answer
33 views

How to set up url rewriting under squid 3.5 on windows 10

I have been trying to set up squid 3.5.27 on a windows box using the store-id-program setting. However, it seems that however I set it up the python script I'm running immediately gets end-of-input (...
0
votes
0answers
81 views

squid-cache Multiple Outgoing IP Addresses Not Working

I'm trying to use multiple outbound IP addresses with squid proxy server. This configuration has worked for me in the past with IPv6. Now I need to use it for IPv4 so I took my old config and applied ...
0
votes
1answer
65 views

Squid - Check header before send the request

This is my first time using Squid. I want to remove the information in the headers request that I'm using a proxy, because the site is blocking me. After I build the squid with --enable-http-violation ...
1
vote
0answers
123 views

Squid as transparent proxy to tunnel all connections under Windows

There's this app Joplin that can't connect to the internet on a corporate machine which lives on Active Directory and connects to the internet through HTTP and a NTLM proxy. The problem is that you ...
0
votes
1answer
49 views

Squid: timeout after acl file load

I have installed Squid 3.5.23 like proxy on my server. I have downloaded a huge file (15MB) with domains to block and I have added this file to my squid.conf throught acl blocksites url_regex "file" (...
0
votes
1answer
131 views

HA Squid with Keepalived

We're trying to setup two HA services: Explicit forwarding proxy using Squid (port 8080) SMTP relay to Office365 using Postfix For both setups we have 2 VM's with a default Debian 7 install, and I'...
0
votes
1answer
51 views

Can Squid cache parent proxy responses locally?

I have a local / internal Squid proxy setup to make all HTTP requests through a parent HTTP proxy that requires authentication. What I would like to do is have the HTTP resources saved in the local ...
0
votes
1answer
237 views

Squid 503 service unavailable. Might related to domain name resolution

We had several linux servers and only one could connect the internet. So I built squid proxy on the server and other servers could use the proxy via environment variables like http_proxy="", ftp_proxy=...
0
votes
0answers
15 views

Make Squid ask for password only for one PC, the others are passwordless

I did a little research but I couldn't find much information about it. I need to change my squid from transparent to user/pass authentication, but only for one PC. The other ones I want to leave ...
0
votes
0answers
253 views

Transparent reverse proxy to SSL host

I'll just explain my case. I have a HTTPS website say https://**site.com which is located on some servers. Those server IPs are blocked for the clients. So I need to make this site available for ...
0
votes
2answers
271 views

Is there any way to cache or forward https requests to an http proxy using Squid?

I currently have squid setup to use a self-signed certificate for MITM to cache HTTPS requests. This works. If an item is not in the cache I want to request from an online proxy like Crawlera. ...
0
votes
0answers
34 views

Switch https traffic to another route reject all other traffic

I have this config on my Mikrotik: >/ip firewall mangle print 16 ;;; SQUID HTTPS chain=prerouting action=mark-routing new-routing-mark=SQUIDS passthrough=yes protocol=tcp src-...
0
votes
1answer
88 views

Log usernames in squid for clients connected in WiFi with Radius

I am looking for a solution to a problem: Clients connect to the WiFi network using a Radius server and then use the Internet through a transparent Squid server that logs access. I would like to ...
0
votes
1answer
147 views

Squid 4.2 - Different outbound IP for each client/user

I have been playing with a few different pieces of forward proxy software, primarily CCProxy and Squid Proxy/Cache. What I have is a dedicated server with a single NIC with multiple IPs assigned to it....
0
votes
0answers
121 views

squid proxy dont load only one site , dont SSL VERIFY HOST

squid proxy don't load only one site, don't have a problem with other websites I think this problem from SSL VERIFY HOST on squid. I use this code on squid config but don't fix my problem: Source: ...
1
vote
1answer
472 views

sudo: unable to resolve host server1.yourdomain.com: Resource temporarily unavailable

OS: Ubuntu 18.0.4 i install Squid with this command: sudo apt-get install squid after install i small change on squid.conf , only change this http_access deny all to http_access allow all after ...
0
votes
0answers
184 views

Squid cache_peer not working properly

I have the following setup in my network Host ---- Squid(1) ---- Squid(2) ---- Internet the first proxy forwards all the traffic to the second one, the problem is that the second proxy won't service ...
0
votes
1answer
940 views

python get-pip.py not working behind proxy

i'm having an issue when trying to run devstack which is trying to get pip using the following command i added the verbose parameter sudo -H -E python /opt/stack/devstack/files/get-pip.py -c /opt/...
0
votes
1answer
356 views

Transparent Proxy Squid with internal and external network

I have network setup like this with external and internal network. I have successfully got squid running with proxy for internal browser and now I want to set up as transparent but having some ...
0
votes
1answer
15 views

how to allow externall network to use my squid

I've seen too many articles how to install and configure squid but most of them are written how to configure it in the local network. I'm going to create public forward proxy server, so: I have ...
0
votes
0answers
14 views

Alerting users which proxy they are using (in browser)

I have a development network where users can use one of three proxies to browse from different places. Its easy enough to get a plugin for browsers to let users switch but its hard to help users not ...
0
votes
0answers
153 views

Squid Proxy server configured as Global Proxy on iPad not allowing Gmail access

At my school we have installed a Squid proxy server to prevent users from logging in to their personal email ids by adding a header into all requests (as outlined here). The proxy itself works fine, ...
0
votes
1answer
231 views

Squid proxy does not consider localhost traffic

I installed squid on Kali linux, configured my browser to send whole traffic through squid. However, squid doesn't consider localhost traffic. Actually, I run this command to check log file while I'm ...
0
votes
0answers
34 views

HAPROXY allow only 1 concurrent connection to a website .

I'm really enjoying playing around with Haproxy , and it really looks like a powerful load balancer, so I thought maybe it could help me achieving this. Basically, I run several proxies, and use ...
0
votes
0answers
234 views

How do I do time-based ACLs in Squid 3?

The relevant part of my squid.conf is this: acl youtube_domains dstdomain .youtube.com .googlevideo.com .ytimg.com # G* services authentication domain acl gLogin dstdomain accounts.youtube.com # ...
0
votes
0answers
129 views

Cisco ASA and Squid with WCCP2

Configure a transparent proxy Squid redirection with a Cisco ASA via WCCP. Squid is already configured with authorization through Active Directory (Kerberos and LDAP groups), works if the client to ...