2022 Developer Survey is open! Take survey.

Questions tagged [squid]

Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

How to configure Squid Proxy server to allow access by subnet [closed]

We have this scenario : one Centos server running Squid. network 10.0.0.0/8, witch should have access to youtube and facebook, but not netflix. network 20.0.0.0/8, which should have access to ...
user avatar
0 votes
0 answers
13 views

Squid config http_port only works when local IP is not specified

I'm running squid 4 on windows. I will soon have multiple static IP NICs so I need to understand the http_port command better. This works: http_port 3128 This works: http_port 127.0.0.1:3128 This does ...
user avatar
0 votes
0 answers
32 views

How to configure quotas for certain destinations in squid proxy?

Good afternoon, does anyone know how to configure quotas for certain destinations in squid proxy? Environment: Radius server with users, Authentication via WPA2-Enterprise Example: To: youtube.com, ...
user avatar
  • 1
0 votes
1 answer
10 views

Squid basic auth connection problems

We are using squid proxy with basic authentication. Each user has it's own outgoing ip configured. See parts of our squid.conf: # Authentication Basic Auth auth_param basic program /usr/lib/squid/...
user avatar
0 votes
0 answers
21 views

How to process a request with squid externally?

It is possible to catch a request that passes through squid proxy in order to analyze it with an external program? I have an application that is used in about 400 workstations. I don't have access to ...
user avatar
0 votes
0 answers
6 views

Squid IP range to specific ACL list [duplicate]

I'm using Squid and I want to know how to make that a specific IP range can have acces to a acl list. So that 10.1.x.x can have access to list.acl and 10.2.x.x to list2.acl
user avatar
-1 votes
1 answer
42 views

Using internet on remote server via SSH tunnel

I have a RHEL server accessible via jump host only. This is how i am connecting to it MyMachine(Win10)--SSH-->JumpHost(winserver2012r2)--SSH-->RHEL7 via ssh ssh -J user@jumphost user@RHEL7 I ...
user avatar
0 votes
0 answers
36 views

Proxy squid Very slow

I work in a school where we have approximately 500 computers. We have installed a proxy SQUID to filter adult websites etc. The server got like 32go ram and enough storage. But surfing become too ...
user avatar
0 votes
1 answer
25 views

How is the best practices to build proxy server on ubuntu?

I added to my server IP Failover (32 IP / OVH). I want to build a proxy server on one container on docker on this server. Which tool/lib is the best in this situation? I need a proxy for scraping ...
user avatar
  • 3
0 votes
0 answers
95 views

SendEcho ERROR: sending to ICMPv6 packet to [2a06:98c1:3121::7]: (101) Network is unreachable

we are using (Ubuntu 20.04 / Squid server / running on Azure) we are getting bellow error, SendEcho ERROR: sending to ICMPv6 packet to [2a06:98c1:3121::7]: (101) Network is unreachable We are not ...
user avatar
0 votes
0 answers
82 views

How to make squid proxy to accept self-signed certificate?

I have an use-case were I have to accept self-signed certificate in Squid. The endpoints are Kubernetes clusters using self-signed certificates. The clusters will be recreated on demand with different ...
user avatar
  • 101
0 votes
0 answers
11 views

Squid doesn't cache with Kerberos auth

I am using a squid proxy with kerberos auth. Everything works great for months now, but my only problem is, that squid isn't caching anything! As soon as I switch to NTLM auth, squid is caching, so I ...
user avatar
  • 11
0 votes
0 answers
39 views

How to Intercept and cache LDAP Search and Bind requests

I have a production web server running Django. Currently every request made requires an LDAP Bind and Search request. I can use the django-auth-ldap plugin to enable LDAP Search caching. However, my ...
user avatar
0 votes
1 answer
62 views

Dockerised local Squid proxy gives 5xx errors to some requests done with Axios but works with others

I'm trying to set up a local Squid proxy which does not cache anything. I am using Dockerised squid based on this image: https://hub.docker.com/r/ubuntu/squid I run the image like so: docker run -d --...
user avatar
  • 101
0 votes
0 answers
52 views

Squid regex syntax description?

From abuse.ch one can get a plain text file with malware distributing URIs. I want to use this as a blacklist for squid proxy (not yet sure about runtime behavior). It should not be to hard to ...
user avatar
0 votes
0 answers
25 views

Squid listening on additional, non-configured ports

I have squid (5.4.1, FreeBSD 12.3-RELEASE) configured to serve on these ports: squid squid 47309 12 tcp46 *:65128 *:* squid squid 47309 13 tcp46 *:65129 *:...
user avatar
  • 229
0 votes
0 answers
16 views

Squid proxy: return header with origin server IP

I am making a request to test.com via my squid proxy. test.com domain can resolve to multiple ips: 123.2.3.4, 123.2.4.4 Can I make squid return via header which IP of origin server was used? Can I ...
user avatar
0 votes
0 answers
70 views

Can Squid be configured to block URLs that specify an IP address instead of a host name?

I have a non-transparent Squid proxy (v5 running on Ubuntu 20.04) which serves as a gateway from my private network to the internet. In the network there's a victim machine for malware analysis, and ...
user avatar
  • 101
0 votes
0 answers
36 views

Exposing and managing a rotating pool of proxies through a single ip and port

I have a question regarding the infrastructure and setup of managed proxy pools. Many proxy services provides access to a rotating pool of proxies through a single ip, using auth for specifying access ...
user avatar
0 votes
0 answers
40 views

accounting Squid clients using freeradius

sorry I'm a very newbie in freeradius, and I try to create a VPN server using squid and check user sessions using freeradius. everything is ok, except the accounting and checking the sessions. my goal ...
user avatar
  • 101
0 votes
0 answers
146 views

Squid Proxy Server Not Accepting External Connection?

I am running squid 3.5.12 on Ubuntu. I have the followings in /etc/squid/squid.conf acl SSL_ports port 443 acl CONNECT method CONNECT acl acl_allowed_ip src my.client.ip.address.com http_access allow ...
user avatar
  • 235
0 votes
0 answers
66 views

squid4 proxy with only whitelist allow policy for all

Ubuntu 20.04; Squid 4.10 (build with ssl);common dns-server for clients and server 192.168.15.1 I can't configure squid4 proxy with only whitelist(with SSL) allow policy for all. I build squid by ...
user avatar
  • 111
0 votes
0 answers
50 views

Can Squid perform whitelisting on URL paths?

I have Squid configured with SSL bumping and a whitelist. Users have submitted domains to add to the whitelist including a couple with paths to a specific service, e.g. gstatic.com/recaptcha. A ...
user avatar
  • 415
-1 votes
1 answer
56 views

Squid is not returning http message body on debug

According to Squid documentation, when debug_options rotate=1 ALL,9 is set in squid.conf, I should see HTTP Message Body in cache.log However, it's not showing up. I do see, everything, including HTTP ...
user avatar
  • 207
0 votes
2 answers
123 views

Block websites for my VPN users

I have strongswan running fine, I need to block some bad websites by it's domains from being visiting by VPN users, I tried many methods but no luck as redirect traffic from vpn to proxy server like ...
user avatar
  • 101
0 votes
0 answers
185 views

Config Multiple IP config in squid proxy server

This answer seem not fit my requirement: Squid config - same user multiple ips Assume that I have a proxy server with 3 IPV4 (202.6.7.8-9-10) and 20 IPV6 (ipv6_1 -> ipv6_20) I want to config to ...
user avatar
  • 101
0 votes
0 answers
22 views

Squid does not write into access.log with kerberos authentication

I finally managed to get squid with kerberos authentication and LDAP group checking to work. I am using squid 4.1, kerberos v5 and Linux Mint Cinnamon 20.1. Everything works fine, but I got a little ...
user avatar
  • 11
1 vote
1 answer
286 views

How to disable ipv4 in squid proxy?

How do I disable ipv4 in squid proxy so when I visit a site it will use ipv6 ip only. I install squid proxy on ubuntu 20.04. I tested my config but on whatismyipaddress.com it can still detect ipv4. ...
user avatar
0 votes
0 answers
118 views

Why squid authentication fails?

I'm trying to add authentication to squid installed on windows, here is the config: auth_param basic program C:\Squid\lib\squid\basic_ncsa_auth.exe C:\Squid\etc\squid\.htpasswd acl ncsa_users ...
user avatar
  • 151
0 votes
1 answer
175 views

How to redirect traffic from squid to vpn?

I have a windows machine with a squid server and VPN client connection(which is not the default gateway) What I want is to redirect some traffic from squid to my default ethernet connection and some ...
user avatar
  • 151
0 votes
1 answer
36 views

How to check if a remote server is up through a proxy?

I have a series of lab linux server (centos/rh) that are built using an automated PXE install via kickstart file. I would like to use another automated process (ansible) to monitor when the ...
user avatar
  • 151
0 votes
1 answer
247 views

Allow only one ip to connect to squid server

I'm trying to allow only one ip to connect to the squid server but it seems it's not working I did ban all domains and allow only one domain but for the ip address it's not working here what I have ...
user avatar
0 votes
0 answers
70 views

Squid proxy's specific ports don't work for a short preiod of time, then start working again

I am using Squid version 4.6 on a Raspberry Pi 4 which has 7 Huawei Wifi Modems connected to it through a hub. After successfully setting up squid to work with all 7 ports and redirect traffic to the ...
user avatar
0 votes
0 answers
22 views

Why I'm Getting "Service web-cache lost on WCCP clinet" error on cisco router?

I'm configuring wccp and squid. Here is wccp configuration or router: ip wccp web-cache redirect-list wccp-access group-list wccp-server ! interface FastEthernet1/0 ip address 10.10.10.1 255.255.255....
user avatar
  • 21
-2 votes
1 answer
36 views

Creating a HTTP proxy with user and pass with Squid

I want to know if with Squid I can use as a proxy with basic auth, to use with cURL for example: curl -vvv "https://ifconfig.me" -x user:password@localhost:8000 Where localhost is the Squid ...
user avatar
  • 111
-1 votes
1 answer
461 views

squid proxy multiple ip

i got a ubuntu vps and i want to turn it to a proxy server with multiple ip,so far every guid just needs me to a range of ip for this proxy like 49.12.xxx.101 but i got only one ip for this vps ...
user avatar
0 votes
0 answers
324 views

Squid: Connection reset by peer (TLS code: SQUID_ERR_SSL_HANDSHAKE)

Failed to establish a secure connection to *ip-address* The system returned: (104) Connection reset by peer (TLS code: SQUID_ERR_SSL_HANDSHAKE) Handshake with SSL server failed: [No Error] This ...
user avatar
  • 23
0 votes
1 answer
648 views

How to debug Squid ERR_DNS_FAIL

I am managing a couple of web proxies running Squid 4.10 on Ubuntu 20.04LTS in several locations distributed worldwide. One of them has developed a nasty habit of occasionally failing to access a web ...
user avatar
0 votes
0 answers
141 views

Sectigo is not trusted in Squid

I have Squid (version 6) with SSL bump. Most sites are trusted but some of them are not. I get the error message: The following error was encountered while trying to retrieve the URL: Failed to ...
user avatar
  • 1
0 votes
0 answers
54 views

How to enable socks5 and http on squid at the same time?

I'd like to enable both socks5 (I have checked and this is possible) and http at the same time for my squid proxy. So far the only way I've found to do this is to run 2 squid instances via docker but ...
user avatar
0 votes
0 answers
408 views

SQUID Transparent Proxy: Error INVALID_URL and ACCESS_DENIED

I configure squid proxy on Centos 7. I am using Squid version 3.5.20. I also try squid 4.10 on Ubuntu 20.04, but I got the same problem. Maybe my ACL was wrong. I configure DSTNAT on Router to ...
user avatar
  • 11
0 votes
0 answers
199 views

Is there a way to disable ipv4 fallback in squid proxy

Is there a way to disable ipv4 fallback in squid, i will only use ipv6 outgoing address but if e.g. site is accepting only ipv4 squid fallback to ipv4 i will no fallback.
user avatar
0 votes
0 answers
122 views

Squid Proxy Server - Port numbers - HTTP - HTTPS etc

I have a virtual proxy client and I have a squid proxy server. root@arch:/etc/squid # cat /etc/squid/acls/ports.acl 80 # http 21 # ftp root@arch:/etc/squid # cat /etc/squid/acls/sslports.acl 443 # ...
user avatar
0 votes
1 answer
118 views

Squid : Do not cache these destinations ( I do not want some address to be cached by squid )

I have a virtual proxy client and I have a squid proxy server. I would like to add some addresses to block caching for them. Either their domain or IP address: www.apache.org 188.184.21.108 root@...
user avatar
0 votes
0 answers
73 views

How to block some categories with squidGuard at certain times of the day?

I have a non-transparent proxy server (squid on debian 11) implemented with basic authentication. The web filtering is done with the squidGuard, in it create two groups of users: usradmins and ...
user avatar
-2 votes
1 answer
126 views

Provide WSUS access to Internet when using Squid proxy [closed]

I am planning to deploy a WSUS server. Of course this WSUS server will need access to Windows Update Catalog to download the patches. So it needs Internet access and we have a Squid proxy on the ...
user avatar
  • 43
0 votes
0 answers
29 views

How does Squid 4 compute a request's cache key?

Sorry if I wasn't able to find the relevant doc on this: how does Squid 4 compute a given GET request's cache key? Is there a way to instruct to ignore HTTP headers in how it does this, i.e. only use ...
user avatar
0 votes
0 answers
49 views

strongswan and Squid Proxy on the same saver

192.168.1.10/24 client<--->cisco_router<----IPSec/Ikev2----->eth1(192.168.15.4)-strongswan/Squid-eth0(192.168.16.4)<------->Internet. on the scenario above I have IPSec working. The ...
user avatar
  • 1
0 votes
0 answers
35 views

Redirect to internal page on squid errors

I try to redirect to an internal page when a squid error occurs. In order not to customize squid template by template and that the error messages are different, what I try to do is in each original ...
user avatar
0 votes
0 answers
41 views

Whitelisting a domain and all dependencies via Squid or other

I don't know if this is a common requirement, but usually when you whitelist a single domain say facebook.com or instagram.com, you usually have to also whitelist some other cdns or other external ...
user avatar

1
2 3 4 5
28