Questions tagged [squid]

Squid is a Proxy Server for Linux.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

Hide all devices via squid proxy?

Can we hide all devices via squid proxy? I want to hide all of my devices from ISP. For this purpose I want to set a system as a router and want to install squid on it. Can we hide devices via this ...
0
votes
0answers
8 views

How to add authentication to squid proxy server from /etc/passwd

I want to add authentication to a public squid proxy server. Most tutorials on web are doing that with installing apache2-utils and storing the credentials with htpasswd and adding the following lines ...
0
votes
0answers
3 views

Swiftmailer to send mail via Squid Proxy to AWS SES

I'm on CentOS 8 and we have a laravel application that uses Swiftmailer to send mails to AWS SES. The thing is that this application server is using a Squid proxy (with authentication) to connect to ...
0
votes
0answers
10 views

Squid and openvpn client same time - route Squid traffic through VPN client

I'm doing proxy setup squid. I set up squid as a forward proxy listening to my public IP where my firefox browser connects to port 3128 of that public IP and I can browse the web without any issues. ...
0
votes
0answers
9 views

Outgoing address based on header

I would like to use the squid proxy to get the correct outbound address (I have 8) when making a query with the OdputIP: 1 header.
0
votes
0answers
23 views

linux squid kerberos group filter with ext_kerberos_ldap_group_acl

i setup a new squid under redhat 8 and follow the instructions on Redhat 8 Squid under 6.3. All fine. Kerberos authentification works. Now i want to limit the users on a specific group. So all users ...
0
votes
1answer
83 views

Why squid doesnt work with https sites

I have setup a squid server which redirects USERS to http://testas.lt/, but it only works with HTTP sites, with HTTPS I get an error. Here's the code: http_port 8080 intercept http_port 3128 acl ...
0
votes
0answers
70 views

CentOS proxy server does not start: UFSSwapDir OpenLog error

I have tried almost anything to get running a squid proxy in CentOS7 with cache initialized at a non-default directory (which is usually /var/spool/squid). I loaded a second disk for cache, it has ...
1
vote
1answer
284 views

squid, TLS connection between browser and proxy

I have a squid instance (v4.6) on a public address A.B.C.D setup with basic_auth (ldap backend). This works over unencrypted port, say 8080, using http_port A.B.C.D:8080. I'm trying to fiugre out how ...
0
votes
0answers
70 views

Make Squid4 cache HTTPS GET requests

I'm following this guide for the installation with config for running sudo /usr/sbin/squid -YC --foreground -f /opt/conf/squid/squid.conf acl localnet src 10.0.0.0/8 acl localnet src 172.16.0.0/12 ...
0
votes
0answers
60 views

systemctl squid unit unable to start

How to debug if systemctl is reporting below error ? Whereas squid is running if I ran via root shell. Apr 06 13:16:17 host1 systemd[1]: squid4.service: Main process exited, code=exited, status=255/n/...
0
votes
0answers
58 views

Forward one proxy to a rotating pool?

I'd like to know what the best app is for creating a proxy server to forward to another proxy. So: User -> My Proxy -> Another Proxy (which then returns the result to the user) I originally ...
0
votes
1answer
276 views

Cannot telnet host from ec2 instance behind a proxy

Let me try to rephrase the whole question as it was not very clear the first time. I need to understand and workout port forwarding. I have an ec2 instance running behind a proxy server. I need to ...
0
votes
1answer
84 views

How can I make the proxy squid to use itself a http_proxy?

Attention: Here proxy is ambiguious term as squid should be both the proxy server and a proxy client. On a system I can access resource on the http/https protocol only via a proxy. I have a two ...
0
votes
0answers
72 views

How can I force yum to use just http mirrors?

I am using squid proxy for cache rpm files, and because of https urls does not cache, I have to enforce yum to use just http urls. I do not want to disable SSL Verification : sslverify=0
0
votes
1answer
13 views

Unable to retrieve Squid OID information for monitoring proxy

I installed Squid and snmp on my CentOS 7 virtual machine and now I would like to monitor the proxy server using snmp. The problem is that I cannot retrieve (by the snmpwalk command) any of the ...
0
votes
0answers
4 views

Squid and NTLM issues

i setup squid 3.5 to autenticate users via NTLM_AUTH in order to manage different user based ACLs. Everything works almost fine, i said almost because i can't understand why some of the requests made ...
0
votes
0answers
25 views

Torify Clearnet Website

I want to torify existing HTTPS domain website into my Tor Hidden Service, if possible by specific outgoing IP Interface. I think squid would be the perfect way. Tried already nginx reverse proxy, ...
0
votes
0answers
174 views

Transparent proxy (including https) that authenticates to another proxy, in a NAT?

We have a computer room in a NAT (using dnsmasq and arno iptables firewall). And this computer room is inside a University proxy, so all internet browsing must be authenticated. The topology is ...
0
votes
1answer
900 views

Configure SQUID transparent proxy with basic auth

I'm trying to configure SQUID (3.5.27 on Ubuntu 18.04) to be a transparent proxy. Further down the line it is supposed to handle authentication and request logging, but I started simple and got stuck ...
2
votes
0answers
63 views

How much do I stand to gain if I run a caching proxy server when most sites are using HTTPS

I have been running squid to cache content along with privoxy to remove lower quality content for years; however, as more and more sites use HTTPS, the amount I can effectively cache or filter is ...
1
vote
2answers
186 views

Permanently change Squid access.log permissions

I have a squid user, writing to access.log with 640 permissions. Also an nrpe user, reading access.log, but only works with 644 permissions. chmod 644 access.log Does the trick, but only until the ...
0
votes
1answer
783 views

HTTPS proxy relay

In an Ubuntu 16.04 machine I have set up a proxy relay configuration with squid 3.5.12 like this: External_proxy <-> Internal_proxy <-> Host At this moment, from both, external and internal ...
1
vote
0answers
61 views

Squid & email traffic (25)

I'm using AWS, all traffic routed out (https) via a squid Farm in an ASG to Elastic NAT gateways. I need to route smtp port 25/110 out via this route. However new to this stuff. I believe squid is ...
0
votes
1answer
590 views

iptables redirect dns to proxy

Can we redirect DNS (tcp/udp) requests to Squid proxy in non-transparent mode (3128) using iptables? (Would the squid proxy understand this and process it?) example rule to redirect tcp 53 (It could ...
0
votes
0answers
104 views

Squid TLS 1.2 reverse proxy without caching

Can someone familiar with squid confirm whether the following specific setup is possible: serve as reverse proxy only accept only TLS 1.2 connections from the internet facing side decrypts TLS 1....
2
votes
1answer
483 views

Squid Proxy Server Error : Upon Starting

I got this error upon starting Squid Proxy Server using the command sudo squid -z fatal: ipc::mem::segment::create failed to shm_open(/squid-cf__metadata.shm): 13 permission denied How shall I fix ...
3
votes
2answers
2k views

Basic Authentication of Squid - /usr/lib64/squid/basic_ncsa_auth file not found

I have centos 7.6 & installed squid 4.5 on it. sudo yum -y install squid I followed this link for Basic Authentication. Without authentication squid works fine. Here is squid.conf after ...
0
votes
1answer
35 views

Squid block non-proxy user

I installed squid which is listening on port 3128. Now, I would like to show an error webpage to every user who tries to connect to any http/https webpage and doesnt have proxy set up. What parameter ...
1
vote
0answers
157 views

How to configure squid to accept all http headers

I'm trying to connect to my SSH server through squid using HTTP injector but I get a protocol mismatch. The problem is only with the following payload I guess as it has a \n before GET. Using some ...
0
votes
1answer
467 views

Problem with Wpad file in Mozilla Firefox

I have this wpad.pac function FindProxyForURL(url, host) { if (isPlainHostName(host) || shExpMatch(host, "*.local") || isInNet(dnsResolve(host), "192.168.0.0", "255.255.255.0") || isInNet(...
1
vote
1answer
595 views

exclude local addresses in wpad

I have a proxy Ubuntu 18.04, with squid 3128 and apache2, and I publish the auto configuration file proxy.pac with the option dhcp 252. The file has the following contents: function FindProxyForURL(...
0
votes
1answer
854 views

squid configuration for whataspp

I'm running Ubuntu server 14.04 I successfully installed squid3.5 via apt-get and I configured it to allow all proxy requests by changing the default configuration file like the following: I changed ...
1
vote
1answer
24 views

Squid Transparent issue

I am facing the issue with transparent squid where I am unable to browse to any HTTP site yahoomail.com is not working while https://mail.yahoo.com is working. Please see my squid config # ...
0
votes
0answers
563 views

How to make squid accept requests over HTTPS?

I have an issue with my provider. Some sites don't work (time out). Most notably, gravatar.com. I have a browser extension in mind that allows to proxy some requests. The thing is, proxies that come ...
0
votes
1answer
376 views

how to know if squid reverse proxy is installed and working well in centos6

I'm Gowri Shankar and i have been trying to learn linux for the past one month(which is awesome as everytime i configure something correctly it gives immense joy to me). Currently i'm learning squid ...
2
votes
0answers
6k views

How to use authentication with negiotiation (e.g. Kerberos) to HTTP proxy?

Generally accepted is the use of HTTP_PROXY/HTTPS_PROXY environment variables to specify the use of a proxy server. Authentication can be included in this URL, e.g. HTTP_PROXY=http://user:pass@myproxy....
1
vote
1answer
2k views

squid with urlpath_regex not working with https

Why squid do not filter download type: .doc when the url beggin with https:// only filter *.doc when beggin with http:// My files is cat /etc/squid/archivos .doc$ # My acl and RULES is simple acl ...
1
vote
1answer
5k views

iptables rules on squid proxy machine

I use my web-browser to connect to the internet via a squid proxy server (which I own). The proxy port is 3128. I want to lock down the other ports on the machine running the proxy server, however my ...
0
votes
1answer
84 views

Squid on Linux being detected as proxy, but not on Windows

I have added the following to my squid.conf #Privacy Things via off forwarded_for off follow_x_forwarded_for deny all request_header_access X-Forwarded-For deny all but when I go to whoer.net it can ...
1
vote
0answers
411 views

Squid + Squidguard - redirect http traffic

Im having trouble figuring out which is the best way to redirect the traffic for a certain subnet. Basically i want to deny the access for a certain subnet to the internet. And i want it to always ...
2
votes
0answers
718 views

Configuring Squid as a proxy server that allows torrenting

I have an Ubuntu 16 server with Squid 3.5 installed. The squid.conf file only has two lines: http_port 1234 http_access allow all Right now I can set this server up as a proxy, and use it to send ...
5
votes
2answers
3k views

How I can configure w3m to use squid proxy (or any proxy) by default when invoked by a specific user?

Can I configure w3m to use Squid by default when invoked by a specific user in a bash login shell? I've looked inside the w3m configuration file, but I don't see any setting were I can set squid as ...
5
votes
2answers
781 views

Can I easily make a host “mirror” that caches downloaded Debian packages?

We've got a Squid web cache set up that is used for caching package downloads, so that all the machines here don't have to independently redownload everything. The installer prompts for a mirror and ...
1
vote
1answer
1k views

Reverse proxy multiple backend web servers

I am trying to have multiple copies of the same web application appear under different paths of a single URL. Each application is a unique instance with its own login. All run with http. In this ...
4
votes
3answers
1k views

squid: Illegal Instruction (core dumped)

OS: Oracle Solaris 11.3.1.5.2, CPU Arch : X86 I recently installed Squid by doing $ pkg install squid This went fine: root@darwin1:~# pkg info squid Name: web/proxy/squid Summary: ...
2
votes
2answers
1k views

Jessie to Stretch upgrade ; squid proxy broken

I have just upgraded from Jessie to Stretch a proxy server with a perfectly working Squid configuration. The upgrade asked me if I wanted to copy squid.conf from the old /etc/squid3 directory to the ...
1
vote
0answers
694 views

SQUID intercept mode using external authentication and ICAP with adaptation_send_username not working

My goal is to transparently filter HTTP and HTTPS URLs based on a user name that is obtained via an external acl type. I am running Squid 3.5.23 in intercept mode, after researching, it seems that ...
1
vote
1answer
1k views

Setting up an FTP proxy on Squid

I haven't used squid in a while so I wouldn't be surprised if I am off on the configuration. But essentially, I am trying to set up a proxy server with Squid so that I can do this: Client (my local ...
2
votes
1answer
207 views

How to allow OCSP but disallow all other outgoing HTTP requests?

Is it possible to allow OCSP requests using for example iptables or Squid? I'm doing an experiment where I reject insecure outgoing HTTP requests, but OCSP is of course a valid exception since the ...