Questions tagged [transparent-proxy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

Squid Proxy using HTTPS

So i have squid proxy setup and running fine with HTTP but now i need it to work with HTTPS. i already have a self signed certificate using my own root CA which is installed on my pc, and a key as ...
0
votes
2answers
99 views

Web Proxy to avoid port forwarding

Hello. I wonder if anyone could help me define which solution to use. I need to run a cloud server that acts as a proxy for HTTP requests, but on the web server side, I have no fixed IP or possibility ...
0
votes
0answers
66 views

Debugging squid proxy access log - TAG_NONE/200

We are using transparent proxy, Squid (Squid Cache: Version 3.5.28 Service Name: squid). Issue seems somehow similar to Squid SSL Bump TAG_NONE / HEIR_NONE but my access log is slightly different. ...
0
votes
0answers
57 views

SQUID Transparent Proxy HTTPS IP Logging

I'm using squid transparent proxy to log users traffic. For HTTP sites, it's working fine. Nowadays most of the popular sites are under https. I know I can implement SSL interception, it will need to ...
0
votes
0answers
83 views

Tor remote transparent proxy in the local network with pure iptables routing

Disclaimer: this is for self-study and to use a solution which I understand. I know there are available solutions. I have a router that connects to the Internet. I have a Raspberry-tor that I want to ...
0
votes
1answer
47 views

How to make a transparent proxy server based intranet dns

I want to implement a server for responding any http/https request sent to it. It's much like forward proxy using CONNECT method. I do not want the clients to set proxy explicitly. The DNS of the ...
1
vote
0answers
394 views

how to redirect android traffic to proxy

I know that Android does not support automatic detection pac files, and I also know that port 443 can not be redirected. So, This is what I have: For example, asssuming the squid-cache proxy port is ...
3
votes
0answers
361 views

Transparent Tor Proxy with pfSense

I'm trying to set up a transparent Tor proxy in Virtualbox using pfSense. In the end I want all traffic to be passed through Tor, whenever I connect a VM to the same internal network as the proxy. I ...
0
votes
1answer
113 views

Softether VPN - How to setup Squid proxy without switching off SecureNAT DHCP?

I have a Softether VPN server running and configured to use DHCP (SecureNAT) instead of local bridging as I couldn't figure out how to do it (despite reading all available tutorials on the internet). ...
7
votes
1answer
2k views

What exactly is a “transparent reverse proxy”?

I've been running some services as docker containers on a DigitalOcean droplet for a few years now, and recently I figured it was time to update one of them to the latest version (the service in ...
0
votes
0answers
83 views

Inline forward chained HTTPS proxy

What is the best way to enforce an appliance to route its traffic through the corporate proxy? that would be both inline and forwarding traffic to a parent proxy? the corporate proxy can authenticate ...
2
votes
2answers
212 views

Transparent HAproxy on ubuntu (amazon EC2)

I am trying to setup a transparent HAproxy load balancer using ubuntu 18.04 on amazon EC2. I got the HAproxy to work on a non-transparent mode, so now I am trying to add the changes required for the ...
0
votes
1answer
623 views

Unable to redirect HTTP traffic to transparent proxy (Squid)

I'm trying to create a transparent proxy to cache and blacklist traffic on my self-made Linux router. Problem is that all clients are getting timed-out when trying to reach any HTTP sites (HTTPS works)...
1
vote
0answers
37 views

Transparent proxy between two firewalls

I'm thinking on setting a transparent caching proxy for that also handles SSL traffic, but as you may [obviously] know there's the certificate issue that makes it difficult...some devices requiring a ...
0
votes
1answer
1k views

Transparent Proxy Squid with internal and external network

I have network setup like this with external and internal network. I have successfully got squid running with proxy for internal browser and now I want to set up as transparent but having some ...
0
votes
2answers
466 views

What's the difference between transparent proxy and explicit proxy

I've set up a transparent proxy with squid listening on 8080(http) 8443(https), and it works. In addition, I set the iptables to redirect the request. iptables -t nat -A PREROUTING -i wlan0 -p tcp -...
0
votes
1answer
103 views

Setup transparent proy on localhost without loop

To get a locally running, non-proxy aware app to go anyway through my proxy (running on localhost:8081) I've been trying out various combinations of iptables rules that have all failed. One that ...
0
votes
0answers
139 views

Setting up polipo proxy behind nginx

I need to put polipo transparent proxy behind nginx reverse proxy. I need this to route trafic to specific polipo instances based on specific domains. For example, proxy-1.domain.com should be routed ...
0
votes
0answers
296 views

Forward Traffic between Namespaces

I have 3 interfaces: eth0 eth1 eth2: eth0 is directly connected to the Internet. eth1 and eth2 are connected to an external switch with no Internet connectivity. My goal was to connect eth1 and eth2 ...
0
votes
1answer
921 views

NginX (Host) as transparent proxy for NginX-Proxy (Docker Container)

Problem I am setting up Nginx-Proxy within docker upon my server. NginX-Proxy is meant to be directly accessible from the web and I would like to place a proxy in front of it. Ideally NginX(Host) ...
0
votes
1answer
469 views

Setting up transparent MitM HTTPS proxy for IoT device?

I have an IoT device that communicates with a remote server via HTTPS over port 443. I would like to intercept the HTTP/HTTPS communication - e.g. using Charles or mitmproxy. If it was a desktop or ...
3
votes
3answers
4k views

Local transparent proxy

I have an application that does not support proxy but I need to send it's traffic to a local proxy. I want to set IPTABLES to transparently redirect traffic to a given IP and PORT (80) to be ...
0
votes
2answers
1k views

Squid: curl: (52) Empty reply from server

I want to set up a public HTTP proxy using Squid. I installed it successfully on Ubuntu 14.04 and just added two lines in /etc/squid3/squid.conf: http_access allow all http_port 3120 transparent ...
0
votes
2answers
1k views

Block HTTPS Traffic with Transparent Proxy Setup

I'm developing a Captive Portal system and (for now), I would like to know if there is any way to block HTTPS traffic on a Transparent Proxy setup. Here is what I have: a GNU/Linux Router (Netfilter),...
2
votes
2answers
4k views

Configure squid 3.5 to use different parent proxies for different listening ports

I have following configuration now: # Squid normally listens to port 3128 http_port 3128 cache_peer proxy1_address parent proxy1_port 0 proxy-only default login=name1:pass1 never_direct allow all ...
0
votes
0answers
556 views

How to relay videos blocked by firewall on client side? [closed]

We have embedded Vimeo videos on a site accesible only to logged in users. Because of different firewalls, using different types of blocks, the videos sometimes do not work for the client. We cannot: ...
1
vote
0answers
1k views

Transparent proxy and udp load balance with Nginx in Docker

I'm trying to setup udp load balancer with IP and port transparent proxy. My environment runs on docker. We are using mesos + marathon to manage containers. For UDP load balancing I use Nginx. App ...
2
votes
0answers
13k views

Transparent HTTPs proxy with Squid 3.5

For couple of days I'm trying to figure out how to get a transparent HTTPs proxy to work with Squid. What I'm trying to achieve is a proxy that accepts internet traffic from ports 80 & 443, routes ...
1
vote
0answers
359 views

Traffic Redirection of several vlan through TPROXY

I have http proxy, whitch has been developed in my company. Proxy uses TPROXY. Usually, installation of this proxy requires adding some routing rules and iptables rules (as for squid): ip rule add ...
1
vote
0answers
2k views

Nginx Transparent IP - route server response through load balancer, and not straight to client

I've been given a task of setting up Transparent IP on Nginx in order to pass client address and port to upstream server. The setup look like this: Client --> Nginx (listens for udp on 90009) --&...
1
vote
1answer
1k views

Configure Squid proxy server or pfsense to achieve WLAN URL logging

Using Squid proxy server and pfsense are out of my comfort zone, I have managed to install Squid on an Ubuntu server and give it a static IP and connect to it via LAN after setting HTTP_access to ...
1
vote
1answer
2k views

Squid TPROXY on Ubuntu Router/Gateway

Okay, so I have an Ubuntu box acting as Router/Gateway for my LAN; with 3 network cards, 2 for WAN and 1 for the local network. It is setup to load balance between the WAN and failover when needed. ...
0
votes
1answer
2k views

Squid Enable SSL not working

So I've compiled Squid myself with the following options: Squid Cache: Version 3.3.8 configure options: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${...
0
votes
1answer
169 views

terrible idea? transparent https caching proxy for a local network

I am not sure which stackexchange network is best for this question... but here goes: Is it a terrible idea to implement a transparent https proxy to make use of local caching for a local network? ...
0
votes
1answer
589 views

Outlook SMTP issues under squid server

I have configured squid from source code and running as transparent proxy server everything is working fine browsing FTP caching. Email client from Thunderbird are able to connect SMTP server but ...
0
votes
2answers
6k views

Squid SSL Bump TAG_NONE / HEIR_NONE

I have a transparent proxy, Squid, version 3.5.20 (latest stable at this time) I need to do domain whitelisting. Squid is configured to do SSLBumping (see squid config below) I try to install ...
5
votes
1answer
7k views

HAProxy TCP Transparent Mode Remote Servers

Alright so I have a server box with HAProxy installed and I need it to forward traffic to two MySQL servers. They are both located in completely different datacenters. It works when I have this ...
0
votes
1answer
2k views

pfsense(2.3.1_5) Squid transparent proxy redirects internally hosted sites from http to https

I'm having an issue with Squid's transparent proxy on my pfSense firewall. My company hosts an internal git server at the following address (for example purposes) http://git.gitserver.com/. From our ...
4
votes
1answer
14k views

How to forward HTTPS traffic through squid transparently?

I want to redirect all HTTP and HTTPS traffic to squid acting as a transparent proxy. This traffic will then be blocked or authorized (in bulk) during certain hours. Specifically I do not want to ...
1
vote
1answer
3k views

Nginx transparent reverse proxy for https and http to another server

I have researched this for a while but the use cases that others have asked about are more complex/different to what I am trying to achieve. I have Nginx serving pages on both ports 80 and 443 for ...
0
votes
1answer
815 views

Iptables rules for transparent proxy, and no proxy

Hi I'm using redsocks and iptables port redirection rules to set a transparent proxy, and works fine, but I need to establish iptables rules for non proxy access, to domains, domain1.com and domain2....
5
votes
1answer
2k views

Whitelisting outgoing traffic from docker containers

I have a server running multiple docker containers in the following configuration: One of the containers is a reverse proxy binding to the exposed ports of the other containers. This is the only ...
18
votes
1answer
2k views

Getting Squid and TPROXY with IPv6 working on CentOS 7

I'm having trouble getting TPROXY working with Squid and IPv6 on a CentOS 7 server. I was previously using a generic intercept setup with NAT, but it was limited to IPv4 only. I'm now expanding the ...
0
votes
1answer
11k views

Transparent squid proxy on ubuntu 14.04 server [closed]

I have ubuntu 14.04 LTS server installed on my server, and I would like to install transparent proxy server on my server for LAN network. Please help me with this. Thanks in advance.
1
vote
2answers
511 views

apache2 HTTPS to HTTP reverse proxying

I am trying to set up what i believe needs to be a reverse proxy in Apache 2. I have apache set up and i have Mod_proxy,mod_ssl,Mod_rewrite all enabled. i am trying to control a media player through ...
0
votes
3answers
2k views

iptables with transparent proxy, how to pass the user IP

I have a local transparent proxy, but my problem is that packets, when re-routed, have the router IP and not the user. These are the rules that I currently have in place: iptables -t nat -A ...
1
vote
1answer
491 views

Is HAProxy built with TPROXY on Ubuntu 14.04

Ubuntu 14.04 has TPROXY (How to check if Ubuntu 14.04 Kernel has TPROXY). How do I find out if the version of HAProxy packaged for 14.04 is compiled with TPROXY?
0
votes
1answer
331 views

Transfer traffic between iptable chains

My understanding is that normally any given packet will only ever interact with one iptables chain either INPUT FORWARD or OUTPUT. However I want to have all traffic on port 80 that has neither its ...
0
votes
1answer
512 views

Prevent non-intercept Squid traffic being tagged by Policy Routing

I've re-edited the original question, because I have changed the setup since the original answer, which was for NAT based setup. NAT is no longer being used and has been replaced with TPROXY for IPv6 ...
0
votes
1answer
673 views

NAT routing based on DNS name (reverse TCP proxy?)

Introduction I have one router, running pfSense (can be anything since it's a virtual machine on VMware, so if the solution requires anything else, that's fine by me) and behind it I have multiple ...