Questions tagged [squid]

Squid is a Proxy Server for Linux.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

squid proxy on redhat 7 is not allowing http traffic

I have two squid proxy servers. They both have same squid.conf file. One is allowing http traffic but other is not allowing http traffic. https traffic is working via both squid proxies squid config ...
0 votes
0 answers
30 views

Proxy Squid HTTPS

i am recently managing the squid proxy, but i have a problem. I cannot browse some websites using the https protocol. If I browse to https: \ www.google.com it works, but other https websites are not ...
  • 1
0 votes
0 answers
12 views

How can I forward my http/https request to 2 different upstream proxies based in the destilanation url?

Hi I am quite struggling to find a good solution to my problem. I have to forward http/https requests from my (Linux) server to 2 different proxy based on the destination URL. I've tried different ...
  • 260
0 votes
1 answer
30 views

Docker Squid not enforcing time acl in configuration

I have a squid running in docker, which is not enforcing the time ACLs that are defined in the configuration. I'me using https://hub.docker.com/r/ubuntu/squid running on arm This is my configuration ...
  • 701
0 votes
0 answers
20 views

How to add windows client machines IP’s and names in squid proxy so the logs output as clients name instead IP

I have configured squid proxy server on centos stream and its up and running perfectly I want access.log output as windows client usernames instead of machine IP . As example below . current output ...
1 vote
1 answer
58 views

squid url_regex not matching characters

I have a url_regex acl: ^http(s)://bitbucket.org/example/* However, it's matching the url: http(s)://bitbucket.org/example_test/* This seems to not consider the "/" at the end of ^http(s)://...
1 vote
0 answers
651 views

squid proxy url_regex with ssl-bump

I've been banging my head trying to get squid proxy to work with https. I've checked that its supported and enabled ssl-bumping. I've also setup the certificates etc according to https://support....
0 votes
0 answers
16 views

AWS OpenVPN, Squid and smartphones

I have AWS EC2 with Ubuntu, OpenVPN server, Squid and some services like calDAV, remote git repo and so on. Usually i use it for these services only and sometimes for internet access by setting up ...
1 vote
0 answers
201 views

Squid Transparent Port Redirection

I'm running Squid 5.2 on Ubuntu 20.04. I set this machine up as a web filter for my children. The proxy functions appear to work fine. I am pretty sure at least one of the children will be able to ...
0 votes
0 answers
109 views

Squid transparent proxy error

Im trying to configure squid transparent proxy on centos 8 and it give me error as below can someone have a look and tell me where im wrong . squid.conf # # Recommended minimum configuration: # # ...
  • 1
0 votes
0 answers
85 views

Squid transparent proxy not intercepting

I have configured squid as transparent proxy on centos 8. squid is not intercepting or deploying here is below my configuration. # # Recommended minimum configuration: # # Example rule allowing ...
0 votes
1 answer
335 views

Squid proxy - multiple IP addresses

I have got a Ubuntu VPS and I want to turn it to a proxy server with multiple IP addresses, so I can use it for bots. However, the problem with the proxy I made is that the websites block it because ...
0 votes
0 answers
135 views

How to add proxy server settings in wifi router or access point

I have squid proxy server running in centos 8 i want to setup proxy server in wifi router or wireless access point which i can force wireless clients to go through proxy server.
1 vote
1 answer
126 views

Serve HTTPS response from Squid cache even if upstream server is unreachable

I have configured Squid with ssl_bump so that it can man-in-the-middle HTTPS connections and cache the replies, like so: http_port 3128 ssl-bump \ cert=/etc/squid/certs/squid-ca-cert-and-key.pem \ ...
  • 123
0 votes
0 answers
56 views

How to force windows users to go through a centos proxy server

I have squid proxy and DHCP server running on centos 8. currently we have deployed proxy setting from window server group policy. is there anyway that we can force users to go through proxy server ...
0 votes
1 answer
183 views

Squid deny_info https not working

I have squid proxy server configured on centos 8 and working fine i have blocked some sites through squid when anyone access to blocked url it simply show the page browser cant open the page. I just ...
0 votes
0 answers
376 views

How to redirect URL In squid proxy server in centos 8

I have squid proxy server running in centos 8 and it worked fine i have blocked some sites through squid when anyone access to blocked url it simply show the page browser cant open the page. I just ...
0 votes
1 answer
132 views

Squid fails to block Facebook

I have squid proxy server running on Centos 8 its failed to block any https site. # # Recommended minimum configuration: # # Example rule allowing access from your local networks. # Adapt to list ...
-2 votes
1 answer
82 views

How to block web traffic for some websites without proxy server

Hello in our windows environment we need to block or filter internet some websites using Centos 8 For squid proxy server we need to assign group policy or add proxy address one by on which is not ...
0 votes
0 answers
35 views

Some questions about how IPTABLES works

I am building a 4G proxy server from this tutorial: https://learnproxy.altervista.org/create-your-own-mobile-4g-proxies-for-instagram-tutorial-2020/ In an excerpt of the tutorial, it is advised to ...
0 votes
1 answer
140 views

How to manage squid authentication

I'm running a squid server. I want to limit my users for using their usernames to use my proxy server. For example, I define a limit for a username named (user1) that if, for example, 3 devices use ...
0 votes
1 answer
644 views

Squid (proxy) is eating up it's own resources (and other issues)

I have several squid issues, but one at a time; WARNING! Your cache is running out of filedescriptors This can happen when the proxy are getting a lot of calls, and can be fixed by increasing the ...
  • 337
0 votes
1 answer
113 views

Squid only works when run with 'sudo'

I want to run may instances of squid proxies. But I am only able to connect with them when squid is started with sudo. In the squid config I have: access_log none cache_store_log none cache_log /dev/...
  • 121
0 votes
0 answers
584 views

HAproxy + Transparent Squid configuration

I tried configuring squid to be a transparent proxy and then connecting it to a HAProxy load balancing server on CentOS 7. My squid configuration is this: http_access allow localnet http_access allow ...
  • 41
0 votes
0 answers
75 views

iptables forward port to a different host

I have a squid proxy which I want to forward sftp traffic to. I set the sftp_proxy env var, however, since the port is non-standard, traffic is going through the default route, and not through the ...
  • 312
0 votes
0 answers
46 views

Cannot access websites by URL (squid transparent)

I set up transparent proxy in squid. I can access web sites by their IP addresses. But I cannot access web sites by their URLs. This is my UFW.log Mar 7 09:28:22 proxy kernel: [75293.384239] [UFW ...
  • 195
0 votes
1 answer
523 views

Squid transparent configuration with UFW

I am struggling in configuring transparent squid proxy. I have installed Ubuntu 20.04 and squid. If I write into browser my proxy parameters, I can access Internet, that is ok. But I want to ...
  • 195
0 votes
1 answer
419 views

How do I ssh into a server over HTTPs?

I have a server that has a reverse proxy (NGINX) set up to host all my other websites/services on a single server. I would like to create a way to SSH into that server over HTTP. The reason I need to ...
0 votes
0 answers
149 views

Easy script to uncomment a line in squid config file

I am creating a script to easily uncomment and add lines to the /etc/squid/squid.conf file as when the squid package is installed, the line acl allow localnet is always commented. Is it possible to ...
  • 113
1 vote
3 answers
10k views

Setting up squid transparent proxy with SSL bumping on Debian 10

Debian 10 with squid working as a transparent proxy. Now want to add SSL. # apt-get install openssl # mkdir -p /etc/squid/cert # cd /etc/squid/cert # openssl req -new -newkey rsa:4096 -sha256 -days ...
1 vote
0 answers
392 views

Squid and openvpn client same time - route Squid traffic through VPN client

I'm doing proxy setup squid. I set up squid as a forward proxy listening to my public IP where my firefox browser connects to port 3128 of that public IP and I can browse the web without any issues. ...
  • 294
0 votes
0 answers
274 views

linux squid kerberos group filter with ext_kerberos_ldap_group_acl

i setup a new squid under redhat 8 and follow the instructions on Redhat 8 Squid under 6.3. All fine. Kerberos authentification works. Now i want to limit the users on a specific group. So all users ...
0 votes
1 answer
2k views

Why squid doesnt work with https sites

I have setup a squid server which redirects USERS to http://testas.lt/, but it only works with HTTP sites, with HTTPS I get an error. Here's the code: http_port 8080 intercept http_port 3128 acl ...
0 votes
0 answers
666 views

CentOS proxy server does not start: UFSSwapDir OpenLog error

I have tried almost anything to get running a squid proxy in CentOS7 with cache initialized at a non-default directory (which is usually /var/spool/squid). I loaded a second disk for cache, it has ...
1 vote
1 answer
2k views

squid, TLS connection between browser and proxy

I have a squid instance (v4.6) on a public address A.B.C.D setup with basic_auth (ldap backend). This works over unencrypted port, say 8080, using http_port A.B.C.D:8080. I'm trying to fiugre out how ...
  • 1,211
0 votes
1 answer
2k views

Cannot telnet host from ec2 instance behind a proxy

Let me try to rephrase the whole question as it was not very clear the first time. I need to understand and workout port forwarding. I have an ec2 instance running behind a proxy server. I need to ...
  • 111
0 votes
1 answer
501 views

How can I make the proxy squid to use itself a http_proxy?

Attention: Here proxy is ambiguious term as squid should be both the proxy server and a proxy client. On a system I can access resource on the http/https protocol only via a proxy. I have a two ...
  • 557
0 votes
1 answer
104 views

Unable to retrieve Squid OID information for monitoring proxy

I installed Squid and snmp on my CentOS 7 virtual machine and now I would like to monitor the proxy server using snmp. The problem is that I cannot retrieve (by the snmpwalk command) any of the ...
0 votes
0 answers
432 views

Transparent proxy (including https) that authenticates to another proxy, in a NAT?

We have a computer room in a NAT (using dnsmasq and arno iptables firewall). And this computer room is inside a University proxy, so all internet browsing must be authenticated. The topology is ...
  • 111
0 votes
1 answer
2k views

Configure SQUID transparent proxy with basic auth

I'm trying to configure SQUID (3.5.27 on Ubuntu 18.04) to be a transparent proxy. Further down the line it is supposed to handle authentication and request logging, but I started simple and got stuck ...
  • 115
2 votes
0 answers
129 views

How much do I stand to gain if I run a caching proxy server when most sites are using HTTPS

I have been running squid to cache content along with privoxy to remove lower quality content for years; however, as more and more sites use HTTPS, the amount I can effectively cache or filter is ...
  • 1,164
2 votes
2 answers
701 views

Permanently change Squid access.log permissions

I have a squid user, writing to access.log with 640 permissions. Also an nrpe user, reading access.log, but only works with 644 permissions. chmod 644 access.log Does the trick, but only until the ...
  • 183
0 votes
1 answer
2k views

HTTPS proxy relay

In an Ubuntu 16.04 machine I have set up a proxy relay configuration with squid 3.5.12 like this: External_proxy <-> Internal_proxy <-> Host At this moment, from both, external and internal ...
1 vote
1 answer
209 views

Squid & email traffic (25)

I'm using AWS, all traffic routed out (https) via a squid Farm in an ASG to Elastic NAT gateways. I need to route smtp port 25/110 out via this route. However new to this stuff. I believe squid is ...
1 vote
1 answer
1k views

iptables redirect dns to proxy

Can we redirect DNS (tcp/udp) requests to Squid proxy in non-transparent mode (3128) using iptables? (Would the squid proxy understand this and process it?) example rule to redirect tcp 53 (It could ...
  • 831
0 votes
0 answers
203 views

Squid TLS 1.2 reverse proxy without caching

Can someone familiar with squid confirm whether the following specific setup is possible: serve as reverse proxy only accept only TLS 1.2 connections from the internet facing side decrypts TLS 1....
  • 101
2 votes
1 answer
1k views

Squid Proxy Server Error : Upon Starting

I got this error upon starting Squid Proxy Server using the command sudo squid -z fatal: ipc::mem::segment::create failed to shm_open(/squid-cf__metadata.shm): 13 permission denied How shall I fix ...
3 votes
2 answers
5k views

Basic Authentication of Squid - /usr/lib64/squid/basic_ncsa_auth file not found

I have centos 7.6 & installed squid 4.5 on it. sudo yum -y install squid I followed this link for Basic Authentication. Without authentication squid works fine. Here is squid.conf after ...
0 votes
1 answer
43 views

Squid block non-proxy user

I installed squid which is listening on port 3128. Now, I would like to show an error webpage to every user who tries to connect to any http/https webpage and doesnt have proxy set up. What parameter ...
  • 3
1 vote
0 answers
212 views

How to configure squid to accept all http headers

I'm trying to connect to my SSH server through squid using HTTP injector but I get a protocol mismatch. The problem is only with the following payload I guess as it has a \n before GET. Using some ...
  • 11