Questions tagged [transparent-proxy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
33 views

Nginx stream block with wildcard filtering of subdomains

I have set up an Nginx server as L4 Proxy(Forward Proxy With Stream Module), with the following configuration in the nginx.conf file; load_module /usr/lib/nginx/modules/ngx_stream_module.so; stream { ...
0
votes
0answers
14 views

TPROXY redirect and routing decision

I would like to ask what happens internally when redirecting using Tproxy. iptables -t mangle -A PREROUTING -p tcp --dport 443 -j TPROXY --tproxy-mark 1 --on-port 40001 It located in PREROUTING in ...
0
votes
1answer
89 views

Fully transparent reverse proxy

I'm trying to set up the following: ┌──────────────────┐ ┌────────────────────┐ ┌─────────┐ │ │ │ │ │ │ │ ...
1
vote
0answers
29 views

How to Make NGINX to use System Proxy?

I am trying to setup a nginx server that forwards the incoming request to a corporate porxy (its a mcafee proxy) with a proxy header Host and the actual destination host something like ...
0
votes
0answers
17 views

How to route local traffic to a local transparent proxy?

I have an application to use multi-ports to send packages. I hope that traffic from some port(e.g.8080) shouldn't be intercepted while traffic from other ports should be redirected to a local proxy( ...
0
votes
0answers
23 views

What is an HTTP Proxy (forward not reverse) required to do with a client's request headers?

1 Could someone help me distill down what, exactly, the minimum requirements are for a proxy server (just a forward proxy not reverse) with regard to headers? What headers absolutely must be deleted ...
0
votes
1answer
45 views

What is the correct definition of a transparent proxy?

What is the correct definition of a transparent proxy? I see the term being used for proxies that require no configuration that do not modify requests and for proxies that do require configuration ...
1
vote
0answers
49 views

TPROXY interferes DNAT port forwarding rules

I'm setting up TPROXY on my VyOS router to forward certain traffic to a local transparent proxy. It works pretty well, until I discovered that all of my DNAT port forwarding rules are no longer ...
3
votes
3answers
390 views

Migrate web server to new datacenter and new IP

I have a web server that hosts 200+ domains but it needs to be moved to another data center and get a new IP address. But since all DNS settings have to be updated manually, I thought about whether ...
0
votes
0answers
60 views

Squid Proxy - Accepted wildcards in dstdomain lists

In my setup I have specific source IPv4 range whitelists and specific destination domain whitelists , both setup as separated whitelist files. Now I would want to have the possibility to limit the ...
0
votes
0answers
24 views

setting up transparent proxy on gateway computer

I am looking to setup a transparent proxy (client) on a computer which will act as a gateway/router for (client) computers connecting to this gateway computer. The client computers use a VPN client ...
0
votes
2answers
52 views

Squid proxy server returning error

I have designed a topology which has an external proxy server (192.168.239.152) and a Mikrotik Router (192.168.239.151). The MikroTik router connected with a LAN and enables internet connection to LAN ...
0
votes
0answers
219 views

Nftables tproxy not working

I want to redirect all DNS traffic to proxy. For that i setup following rules in nftables: chain prerouting { type filter hook prerouting priority mangle; policy accept; udp dport ...
0
votes
0answers
59 views

Forward traffic on port to another host with transparent proxy

I have a host with ip $HOST_IP which runs an HTTP server on port 8080. There is a transparent proxy server running on port 9000 on host with IP $PROXY_SERVICE_IP. I'm trying to forward traffic from ...
0
votes
0answers
81 views

invalid response from upstream server

I am setting up SSL connection between Webserver + Proxy Server and another Server(Linux). (Apache Webserver comes with Tomcat) There is a transparent proxy in use with port forwarding (Iptables) SSL ...
1
vote
0answers
33 views

iptables: Route outgoing requests to a local proxy preserving destination address and port

I want the proxy to make some routing decisions based on the original destination IP and port. I can do this easily for an incoming request: iptables -t mangle -A PREROUTING -p tcp --destination 10.37....
0
votes
0answers
67 views

PFsense NAT settings for proxy usage

So my PFsense machine is the default gateway of the network. I want all HTTP(S) traffic that is sent to be sent via a Proxy: Polarproxy. Polarproxy declare the following iptable rules for doing so, ...
0
votes
0answers
31 views

Conntrack not showing iptables redirected flow

I have a client and server. At Server I have a redirect rule to redirect all incoming flows to port 15006. Client IP: 10.20.3.53 ServerIP : 10.20.3.63 I have the following iptables rules on the ...
1
vote
1answer
189 views

Squid HTTP Transparent Proxy for Spoofed DNS Requests

I'm working on a security project which requires a remotely-accessible transparent proxy. I have set up an Azure VM running Ubuntu 18.04 with squid running as a transparent proxy. I'm only concerned ...
1
vote
0answers
1k views

Transparent Proxy with Squid 4.10 not working

Squid 4.10 on Ubuntu Server 20.04 I have tried so many things and spent this entire week researching on how to get this working. To get an idea of what I am trying to do here, take a look at these ...
0
votes
0answers
377 views

TPROXY iptables with transparent-proxy and server in the same host

I'm trying to test a scenario as described below: Client[eth0] ----[eth0]Server Client's eth0 interface is configured with IP 10.10.10.1. Server's eth0 interface is configured with IP 10.10.10.10. ...
1
vote
0answers
68 views

iptables tproxy with statistic --mode nth

I`m using squid now. and i run 4 squid for load-balance and i trying to change my iptables rule. this is my current rules. iptables -t nat -A PREROUTING -p tcp --dport 443 -m state --state NEW -m ...
0
votes
1answer
209 views

Redirection thru redsocks connecting but not responding

Am using redsocks to redirect thru a proxy. The problem is that when i use a tool like wget it appears to be connecting but not resolving. What could be the problem and how could i solve it? Executing ...
2
votes
0answers
483 views

How do I proxy all local traffic on 127.0.0.1:1080 use nftables tproxy

On my desktop linux,I want to surf the Internet through a proxy VPN. I already have a client for a transparent proxy listing on 127.0.0.1:1080. I want the traffic generated by the local process to ...
0
votes
1answer
30 views

Transparent proxy between two applications

I've got a following setup: Application A - makes HTTP requests to some API, running on http://localhost:8090. Application B - intercepts HTTP request from A, a proxy running on http://localhost:...
0
votes
1answer
915 views

Transparent TCP load balancing with NGINX/HAproxy

I have been trying for some days and still have no luck with getting transparent TCP load balancer to work using HAproxy/NGINX. The problem is: everything works correctly, until i try to enable ...
1
vote
3answers
2k views

Local transparent proxy to filter http/https adult content using squid

I want to filter all of my internet (http & https) connections using a whitelist. I heard about squid, so I started trying to run it. I found two main tutorials: https://wiki.squid-cache.org/...
0
votes
0answers
85 views

Recommend way of setting-up custom docker network?

I'm trying to setup transparent proxy network using container (docker) Client (C) Proxy (P1) Proxy (P2) 10.10.1.1/24 10.10.2.1/24 10.10.3.1/24 veth0 veth0 ...
2
votes
2answers
1k views

Why an iptables NAT does not happen in the network namespace separated transparent proxy setup?

I'm trying to setup transparent proxying networks on my host. Real Client and Proxy targets are containters but in this experiment I use netns (network namespace) separated envinroment. To redirect ...
1
vote
1answer
3k views

Proxy Protocol with Nginx Reverse Proxy

Overview I have an Nginx reverse proxy setup pointing to a SaaS application (BigCommerce). While my configuration works great, I'm not able to ensure the client IP shows in the SaaS backend instead ...
0
votes
2answers
6k views

How to configure squid4 as transparent proxy?

There are many posts how to do that, most for older versions. According to this post, to setup squid as transparent server for port 80 it should be as simple as this: //squid.config http_port 3128 ...
1
vote
0answers
38 views

How to redirect incoming traffic (HTTP, HTTPS) to specified server which is accessible behind SOCKS4 proxy?

servers setup schema I have a web application on a "Server behind proxy", which is not accessible through internet. It's only accessible through "SOCKS4 server", which I can't change anything on. I ...
1
vote
0answers
95 views

Transparent Proxy with DHCP passthru?

I'm trying to replicate on a small Linux-based router a behavior I've seen elsewhere, such as in cable modems: I need to get a single DHCP address from the WAN side, offer/pass that same address to ...
0
votes
2answers
2k views

Squid Proxy using HTTPS

So i have squid proxy setup and running fine with HTTP but now i need it to work with HTTPS. i already have a self signed certificate using my own root CA which is installed on my pc, and a key as ...
0
votes
2answers
567 views

Web Proxy to avoid port forwarding

Hello. I wonder if anyone could help me define which solution to use. I need to run a cloud server that acts as a proxy for HTTP requests, but on the web server side, I have no fixed IP or possibility ...
0
votes
0answers
2k views

Debugging squid proxy access log - TAG_NONE/200

We are using transparent proxy, Squid (Squid Cache: Version 3.5.28 Service Name: squid). Issue seems somehow similar to Squid SSL Bump TAG_NONE / HEIR_NONE but my access log is slightly different. ...
0
votes
1answer
528 views

How to make a transparent proxy server based intranet dns

I want to implement a server for responding any http/https request sent to it. It's much like forward proxy using CONNECT method. I do not want the clients to set proxy explicitly. The DNS of the ...
1
vote
0answers
1k views

how to redirect android traffic to proxy

I know that Android does not support automatic detection pac files, and I also know that port 443 can not be redirected. So, This is what I have: For example, asssuming the squid-cache proxy port is ...
3
votes
0answers
2k views

Transparent Tor Proxy with pfSense

I'm trying to set up a transparent Tor proxy in Virtualbox using pfSense. In the end I want all traffic to be passed through Tor, whenever I connect a VM to the same internal network as the proxy. I ...
0
votes
1answer
818 views

Softether VPN - How to setup Squid proxy without switching off SecureNAT DHCP?

I have a Softether VPN server running and configured to use DHCP (SecureNAT) instead of local bridging as I couldn't figure out how to do it (despite reading all available tutorials on the internet). ...
8
votes
1answer
4k views

What exactly is a "transparent reverse proxy"?

I've been running some services as docker containers on a DigitalOcean droplet for a few years now, and recently I figured it was time to update one of them to the latest version (the service in ...
0
votes
0answers
107 views

Inline forward chained HTTPS proxy

What is the best way to enforce an appliance to route its traffic through the corporate proxy? that would be both inline and forwarding traffic to a parent proxy? the corporate proxy can authenticate ...
2
votes
2answers
676 views

Transparent HAproxy on ubuntu (amazon EC2)

I am trying to setup a transparent HAproxy load balancer using ubuntu 18.04 on amazon EC2. I got the HAproxy to work on a non-transparent mode, so now I am trying to add the changes required for the ...
0
votes
1answer
2k views

Unable to redirect HTTP traffic to transparent proxy (Squid)

I'm trying to create a transparent proxy to cache and blacklist traffic on my self-made Linux router. Problem is that all clients are getting timed-out when trying to reach any HTTP sites (HTTPS works)...
1
vote
0answers
54 views

Transparent proxy between two firewalls

I'm thinking on setting a transparent caching proxy for that also handles SSL traffic, but as you may [obviously] know there's the certificate issue that makes it difficult...some devices requiring a ...
1
vote
1answer
2k views

Transparent Proxy Squid with internal and external network

I have network setup like this with external and internal network. I have successfully got squid running with proxy for internal browser and now I want to set up as transparent but having some ...
1
vote
2answers
1k views

What's the difference between transparent proxy and explicit proxy

I've set up a transparent proxy with squid listening on 8080(http) 8443(https), and it works. In addition, I set the iptables to redirect the request. iptables -t nat -A PREROUTING -i wlan0 -p tcp -...
0
votes
1answer
113 views

Setup transparent proy on localhost without loop

To get a locally running, non-proxy aware app to go anyway through my proxy (running on localhost:8081) I've been trying out various combinations of iptables rules that have all failed. One that ...
0
votes
0answers
238 views

Setting up polipo proxy behind nginx

I need to put polipo transparent proxy behind nginx reverse proxy. I need this to route trafic to specific polipo instances based on specific domains. For example, proxy-1.domain.com should be routed ...
0
votes
0answers
414 views

Forward Traffic between Namespaces

I have 3 interfaces: eth0 eth1 eth2: eth0 is directly connected to the Internet. eth1 and eth2 are connected to an external switch with no Internet connectivity. My goal was to connect eth1 and eth2 ...