Questions tagged [squid]

Squid is a Proxy Server for Linux.

Filter by
Sorted by
Tagged with
0 votes
1 answer
41 views

Why squid deny the https request but allow the same site with http request?

I want to allow dev just use github copilot and deny other request. According to github info: https://docs.github.com/en/copilot/troubleshooting-github-copilot/troubleshooting-firewall-settings-for-...
张龙飞's user avatar
0 votes
0 answers
33 views

E2Guardian+Squid mark forwarded packets between interfaces

I read couple of similar scenarios but did not find any solution. So this is what I have at the moment. An Ubuntu 20.0 LTS box with E2Guardian 5.4 and Squid 4.10. This host is set as gateway for my ...
sfeher's user avatar
  • 1
0 votes
1 answer
65 views

Is it possible to redirect squid traffic from Host A through Host B(Squid)?

Can traffic of Host A having squid proxy redirect all its traffic to Host B's squid proxy using ssh tunnel? Couldn't find any solution. A help will be appreciated. Solution form this https://unix....
Vishal Sanghani's user avatar
0 votes
0 answers
261 views

Squid transparent proxy for HTTPS requests that have been redirected by DNAT rule

I would like to look into suspicious activity of possibly infected web application in my network. I wanted to use squid to intercept https requests with https_port directive. My network setup: http/...
Marcel Tkáč's user avatar
0 votes
0 answers
49 views

How to use multiple IPs in squid proxy server on CentOS Stream 9

I was able to successful install squid on CentOS Stream 9, and the squid server connection from the browser are all good with the primary IP(45.63.67.*) on the server, when I added addtional IP(45.76....
FuYuan Zhao's user avatar
1 vote
0 answers
170 views

Squid proxy server configuration issue with Instagram media content

I am trying to configure a squid proxy on the remote virtual server in order to access blocked content from my smartphone. I have installed Squid and everything works, but for some reason Instagram ...
VladF's user avatar
  • 53
1 vote
0 answers
113 views

Run squid proxy service in a systemd enable centos 7 container

I am unable to start squid service in a systemd enabled centos 7 container. I am able to install the squid package. this is what I got before starting the service : [root@c65bf5111b85 /]# systemctl ...
Lionel Tsimi Biloa's user avatar
0 votes
0 answers
72 views

Squid proxy block all traffic to subdomains

Hello guys we have configured Squid Cache: Version 4.15 running on centos 8 and we have blocked some traffic , social media and google adds. And it worked perfectly. but we are facing issue to access ...
Rizwan Saleem's user avatar
2 votes
1 answer
611 views

Squid Peek/Bump/Splice with Self Signed Cert

TL:DR; Squid v5.7 is not including the Issuer in the generated certificate In the past I've been able to do HTTPS data caching by: building squid with: VERSION='4.11' ./configure --with-openssl --...
rupert160's user avatar
  • 183
0 votes
0 answers
91 views

squid proxy on redhat 7 is not allowing http traffic

I have two squid proxy servers. They both have same squid.conf file. One is allowing http traffic but other is not allowing http traffic. https traffic is working via both squid proxies squid config ...
AstraLino's user avatar
0 votes
0 answers
135 views

How can I forward my http/https request to 2 different upstream proxies based in the destilanation url?

Hi I am quite struggling to find a good solution to my problem. I have to forward http/https requests from my (Linux) server to 2 different proxy based on the destination URL. I've tried different ...
Zioalex's user avatar
  • 286
0 votes
1 answer
40 views

Docker Squid not enforcing time acl in configuration

I have a squid running in docker, which is not enforcing the time ACLs that are defined in the configuration. I'me using https://hub.docker.com/r/ubuntu/squid running on arm This is my configuration ...
BANJOSA's user avatar
  • 721
0 votes
0 answers
210 views

How to add windows client machines IP’s and names in squid proxy so the logs output as clients name instead IP

I have configured squid proxy server on centos stream and its up and running perfectly I want access.log output as windows client usernames instead of machine IP . As example below . current output ...
Rizwan Saleem's user avatar
1 vote
1 answer
652 views

squid url_regex not matching characters

I have a url_regex acl: ^http(s)://bitbucket.org/example/* However, it's matching the url: http(s)://bitbucket.org/example_test/* This seems to not consider the "/" at the end of ^http(s)://...
David Co's user avatar
  • 123
1 vote
0 answers
2k views

squid proxy url_regex with ssl-bump

I've been banging my head trying to get squid proxy to work with https. I've checked that its supported and enabled ssl-bumping. I've also setup the certificates etc according to https://support....
David Co's user avatar
  • 123
1 vote
0 answers
591 views

Squid Transparent Port Redirection

I'm running Squid 5.2 on Ubuntu 20.04. I set this machine up as a web filter for my children. The proxy functions appear to work fine. I am pretty sure at least one of the children will be able to ...
sirEgghead's user avatar
0 votes
0 answers
172 views

Squid transparent proxy not intercepting

I have configured squid as transparent proxy on centos 8. squid is not intercepting or deploying here is below my configuration. # # Recommended minimum configuration: # # Example rule allowing ...
Rizwan Saleem's user avatar
0 votes
1 answer
1k views

Squid proxy - multiple IP addresses

I have got a Ubuntu VPS and I want to turn it to a proxy server with multiple IP addresses, so I can use it for bots. However, the problem with the proxy I made is that the websites block it because ...
amirreza es's user avatar
0 votes
0 answers
381 views

How to add proxy server settings in wifi router or access point

I have squid proxy server running in centos 8 i want to setup proxy server in wifi router or wireless access point which i can force wireless clients to go through proxy server.
Rizwan Saleem's user avatar
1 vote
1 answer
422 views

Serve HTTPS response from Squid cache even if upstream server is unreachable

I have configured Squid with ssl_bump so that it can man-in-the-middle HTTPS connections and cache the replies, like so: http_port 3128 ssl-bump \ cert=/etc/squid/certs/squid-ca-cert-and-key.pem \ ...
rgov's user avatar
  • 213
0 votes
1 answer
705 views

Squid deny_info https not working

I have squid proxy server configured on centos 8 and working fine i have blocked some sites through squid when anyone access to blocked url it simply show the page browser cant open the page. I just ...
Rizwan Saleem's user avatar
0 votes
1 answer
351 views

Squid fails to block Facebook

I have squid proxy server running on Centos 8 its failed to block any https site. # # Recommended minimum configuration: # # Example rule allowing access from your local networks. # Adapt to list ...
Rizwan Saleem's user avatar
-2 votes
1 answer
199 views

How to block web traffic for some websites without proxy server

Hello in our windows environment we need to block or filter internet some websites using Centos 8 For squid proxy server we need to assign group policy or add proxy address one by on which is not ...
Rizwan Saleem's user avatar
0 votes
0 answers
62 views

Some questions about how IPTABLES works

I am building a 4G proxy server from this tutorial: https://learnproxy.altervista.org/create-your-own-mobile-4g-proxies-for-instagram-tutorial-2020/ In an excerpt of the tutorial, it is advised to ...
Felipe Gabriel's user avatar
0 votes
1 answer
343 views

How to manage squid authentication

I'm running a squid server. I want to limit my users for using their usernames to use my proxy server. For example, I define a limit for a username named (user1) that if, for example, 3 devices use ...
erikmsi's user avatar
0 votes
1 answer
2k views

Squid (proxy) is eating up its own resources (and other issues)

I have several squid issues, but one at a time: WARNING! Your cache is running out of filedescriptors This can happen when the proxy are getting a lot of calls, and can be fixed by increasing the ...
JoBe's user avatar
  • 397
0 votes
1 answer
505 views

Squid only works when run with 'sudo'

I want to run may instances of squid proxies. But I am only able to connect with them when squid is started with sudo. In the squid config I have: access_log none cache_store_log none cache_log /dev/...
tsorn's user avatar
  • 119
0 votes
0 answers
1k views

HAproxy + Transparent Squid configuration

I tried configuring squid to be a transparent proxy and then connecting it to a HAProxy load balancing server on CentOS 7. My squid configuration is this: http_access allow localnet http_access allow ...
Gwynn's user avatar
  • 41
0 votes
0 answers
169 views

iptables forward port to a different host

I have a squid proxy which I want to forward sftp traffic to. I set the sftp_proxy env var, however, since the port is non-standard, traffic is going through the default route, and not through the ...
Moshe's user avatar
  • 322
0 votes
0 answers
95 views

Cannot access websites by URL (squid transparent)

I set up transparent proxy in squid. I can access web sites by their IP addresses. But I cannot access web sites by their URLs. This is my UFW.log Mar 7 09:28:22 proxy kernel: [75293.384239] [UFW ...
it dev's user avatar
  • 315
0 votes
1 answer
1k views

Squid transparent configuration with UFW

I am struggling in configuring transparent squid proxy. I have installed Ubuntu 20.04 and squid. If I write into browser my proxy parameters, I can access Internet, that is ok. But I want to ...
it dev's user avatar
  • 315
0 votes
1 answer
1k views

How do I ssh into a server over HTTPs?

I have a server that has a reverse proxy (NGINX) set up to host all my other websites/services on a single server. I would like to create a way to SSH into that server over HTTP. The reason I need to ...
SpenserWilson1's user avatar
0 votes
0 answers
201 views

Easy script to uncomment a line in squid config file

I am creating a script to easily uncomment and add lines to the /etc/squid/squid.conf file as when the squid package is installed, the line acl allow localnet is always commented. Is it possible to ...
LtMuffin's user avatar
4 votes
3 answers
19k views

Setting up squid transparent proxy with SSL bumping on Debian 10

Debian 10 with squid working as a transparent proxy. Now want to add SSL. # apt-get install openssl # mkdir -p /etc/squid/cert # cd /etc/squid/cert # openssl req -new -newkey rsa:4096 -sha256 -days ...
Richard Barraclough's user avatar
1 vote
0 answers
685 views

Squid and openvpn client same time - route Squid traffic through VPN client

I'm doing proxy setup squid. I set up squid as a forward proxy listening to my public IP where my firefox browser connects to port 3128 of that public IP and I can browse the web without any issues. ...
sameera's user avatar
  • 304
0 votes
0 answers
501 views

linux squid kerberos group filter with ext_kerberos_ldap_group_acl

i setup a new squid under redhat 8 and follow the instructions on Redhat 8 Squid under 6.3. All fine. Kerberos authentification works. Now i want to limit the users on a specific group. So all users ...
MarcelS's user avatar
0 votes
1 answer
5k views

Why squid doesnt work with https sites

I have setup a squid server which redirects USERS to http://testas.lt/, but it only works with HTTP sites, with HTTPS I get an error. Here's the code: http_port 8080 intercept http_port 3128 acl ...
robotiaga's user avatar
  • 111
0 votes
0 answers
979 views

CentOS proxy server does not start: UFSSwapDir OpenLog error

I have tried almost anything to get running a squid proxy in CentOS7 with cache initialized at a non-default directory (which is usually /var/spool/squid). I loaded a second disk for cache, it has ...
R99Photography's user avatar
1 vote
1 answer
2k views

squid, TLS connection between browser and proxy

I have a squid instance (v4.6) on a public address A.B.C.D setup with basic_auth (ldap backend). This works over unencrypted port, say 8080, using http_port A.B.C.D:8080. I'm trying to fiugre out how ...
Kamil's user avatar
  • 1,461
0 votes
1 answer
2k views

Cannot telnet host from ec2 instance behind a proxy

Let me try to rephrase the whole question as it was not very clear the first time. I need to understand and workout port forwarding. I have an ec2 instance running behind a proxy server. I need to ...
Riz's user avatar
  • 111
1 vote
1 answer
1k views

How can I make the proxy squid to use itself a http_proxy?

Attention: Here proxy is ambiguious term as squid should be both the proxy server and a proxy client. On a system I can access resource on the http/https protocol only via a proxy. I have a two ...
fraleone's user avatar
  • 787
0 votes
1 answer
194 views

Unable to retrieve Squid OID information for monitoring proxy

I installed Squid and snmp on my CentOS 7 virtual machine and now I would like to monitor the proxy server using snmp. The problem is that I cannot retrieve (by the snmpwalk command) any of the ...
R99Photography's user avatar
0 votes
0 answers
500 views

Transparent proxy (including https) that authenticates to another proxy, in a NAT?

We have a computer room in a NAT (using dnsmasq and arno iptables firewall). And this computer room is inside a University proxy, so all internet browsing must be authenticated. The topology is ...
iluvatar's user avatar
  • 111
0 votes
1 answer
3k views

Configure SQUID transparent proxy with basic auth

I'm trying to configure SQUID (3.5.27 on Ubuntu 18.04) to be a transparent proxy. Further down the line it is supposed to handle authentication and request logging, but I started simple and got stuck ...
Mulle's user avatar
  • 125
2 votes
0 answers
211 views

How much do I stand to gain if I run a caching proxy server when most sites are using HTTPS

I have been running squid to cache content along with privoxy to remove lower quality content for years; however, as more and more sites use HTTPS, the amount I can effectively cache or filter is ...
Walter's user avatar
  • 1,234
2 votes
2 answers
1k views

Permanently change Squid access.log permissions

I have a squid user, writing to access.log with 640 permissions. Also an nrpe user, reading access.log, but only works with 644 permissions. chmod 644 access.log Does the trick, but only until the ...
itChi's user avatar
  • 203
0 votes
1 answer
3k views

HTTPS proxy relay

In an Ubuntu 16.04 machine I have set up a proxy relay configuration with squid 3.5.12 like this: External_proxy <-> Internal_proxy <-> Host At this moment, from both, external and internal ...
Zumo de Vidrio's user avatar
1 vote
1 answer
863 views

Squid & email traffic (25)

I'm using AWS, all traffic routed out (https) via a squid Farm in an ASG to Elastic NAT gateways. I need to route smtp port 25/110 out via this route. However new to this stuff. I believe squid is ...
Nick Gleed's user avatar
1 vote
1 answer
2k views

iptables redirect dns to proxy

Can we redirect DNS (tcp/udp) requests to Squid proxy in non-transparent mode (3128) using iptables? (Would the squid proxy understand this and process it?) example rule to redirect tcp 53 (It could ...
acgbox's user avatar
  • 941
0 votes
0 answers
307 views

Squid TLS 1.2 reverse proxy without caching

Can someone familiar with squid confirm whether the following specific setup is possible: serve as reverse proxy only accept only TLS 1.2 connections from the internet facing side decrypts TLS 1....
Waslap's user avatar
  • 101