Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [squid]

Squid is a Proxy Server for Linux.

0
votes
0answers
22 views

Making Squid Work with DD-WRT

I'm trying to run Squid with DD-WRT, but I can not. I use as a DNS server the Pi-hole. Ubuntu 18.04 This error appears ERROR The requested URL could not be retrieved The following error was ...
0
votes
0answers
22 views

Squid TLS 1.2 reverse proxy without caching

Can someone familiar with squid confirm whether the following specific setup is possible: serve as reverse proxy only accept only TLS 1.2 connections from the internet facing side decrypts TLS 1....
1
vote
1answer
16 views

Squid Proxy Server Error : Upon Starting

I got this error upon starting Squid Proxy Server using the command sudo squid -z fatal: ipc::mem::segment::create failed to shm_open(/squid-cf__metadata.shm): 13 permission denied How shall I fix ...
0
votes
1answer
200 views

Basic Authentication of Squid - /usr/lib64/squid/basic_ncsa_auth file not found

I have centos 7.6 & installed squid 4.5 on it. sudo yum -y install squid I followed this link for Basic Authentication. Without authentication squid works fine. Here is squid.conf after ...
0
votes
1answer
20 views

Squid block non-proxy user

I installed squid which is listening on port 3128. Now, I would like to show an error webpage to every user who tries to connect to any http/https webpage and doesnt have proxy set up. What parameter ...
1
vote
0answers
37 views

How to configure squid to accept all http headers

I'm trying to connect to my SSH server through squid using HTTP injector but I get a protocol mismatch. The problem is only with the following payload I guess as it has a \n before GET. Using some ...
1
vote
0answers
169 views

Authenticating Squid 3.5 with Active Directory (samba 4) on Ubuntu 16.04? [closed]

I need authenticate a squid 3.5 with a Active Directory build (over SAMBA4) POST-DATA: This ubuntu is already joined to the Active Directory built on SAMBA4 I do not know if the problem is in the ...
1
vote
0answers
216 views

Squid with squidguard launch problem [closed]

I'm not able to successfully launch squid with squidguard. Here is my service squid status : ● squid.service - LSB: Squid HTTP Proxy version 3.x Loaded: loaded (/etc/init.d/squid; generated; ...
0
votes
1answer
210 views

Problem with Wpad file in Mozilla Firefox

I have this wpad.pac function FindProxyForURL(url, host) { if (isPlainHostName(host) || shExpMatch(host, "*.local") || isInNet(dnsResolve(host), "192.168.0.0", "255.255.255.0") || isInNet(...
1
vote
1answer
163 views

exclude local addresses in wpad

I have a proxy Ubuntu 18.04, with squid 3128 and apache2, and I publish the auto configuration file proxy.pac with the option dhcp 252. The file has the following contents: function FindProxyForURL(...
0
votes
1answer
338 views

squid configuration for whataspp

I'm running Ubuntu server 14.04 I successfully installed squid3.5 via apt-get and I configured it to allow all proxy requests by changing the default configuration file like the following: I changed ...
1
vote
1answer
20 views

Squid Transparent issue

I am facing the issue with transparent squid where I am unable to browse to any HTTP site yahoomail.com is not working while https://mail.yahoo.com is working. Please see my squid config # ...
0
votes
0answers
470 views

How to make squid accept requests over HTTPS?

I have an issue with my provider. Some sites don't work (time out). Most notably, gravatar.com. I have a browser extension in mind that allows to proxy some requests. The thing is, proxies that come ...
0
votes
1answer
237 views

how to know if squid reverse proxy is installed and working well in centos6

I'm Gowri Shankar and i have been trying to learn linux for the past one month(which is awesome as everytime i configure something correctly it gives immense joy to me). Currently i'm learning squid ...
1
vote
0answers
3k views

How to use authentication with negiotiation (e.g. Kerberos) to HTTP proxy?

Generally accepted is the use of HTTP_PROXY/HTTPS_PROXY environment variables to specify the use of a proxy server. Authentication can be included in this URL, e.g. HTTP_PROXY=http://user:pass@myproxy....
1
vote
1answer
867 views

squid with urlpath_regex not working with https

Why squid do not filter download type: .doc when the url beggin with https:// only filter *.doc when beggin with http:// My files is cat /etc/squid/archivos .doc$ # My acl and RULES is simple acl ...
0
votes
1answer
3k views

iptables rules on squid proxy machine

I use my web-browser to connect to the internet via a squid proxy server (which I own). The proxy port is 3128. I want to lock down the other ports on the machine running the proxy server, however my ...
0
votes
1answer
73 views

Squid on Linux being detected as proxy, but not on Windows

I have added the following to my squid.conf #Privacy Things via off forwarded_for off follow_x_forwarded_for deny all request_header_access X-Forwarded-For deny all but when I go to whoer.net it can ...
1
vote
0answers
321 views

Squid + Squidguard - redirect http traffic

Im having trouble figuring out which is the best way to redirect the traffic for a certain subnet. Basically i want to deny the access for a certain subnet to the internet. And i want it to always ...
2
votes
0answers
417 views

Configuring Squid as a proxy server that allows torrenting

I have an Ubuntu 16 server with Squid 3.5 installed. The squid.conf file only has two lines: http_port 1234 http_access allow all Right now I can set this server up as a proxy, and use it to send ...
4
votes
2answers
2k views

How I can configure w3m to use squid proxy (or any proxy) by default when invoked by a specific user?

Can I configure w3m to use Squid by default when invoked by a specific user in a bash login shell? I've looked inside the w3m configuration file, but I don't see any setting were I can set squid as ...
4
votes
2answers
483 views

Can I easily make a host “mirror” that caches downloaded Debian packages?

We've got a Squid web cache set up that is used for caching package downloads, so that all the machines here don't have to independently redownload everything. The installer prompts for a mirror and ...
1
vote
1answer
774 views

Reverse proxy multiple backend web servers

I am trying to have multiple copies of the same web application appear under different paths of a single URL. Each application is a unique instance with its own login. All run with http. In this ...
4
votes
3answers
670 views

squid: Illegal Instruction (core dumped)

OS: Oracle Solaris 11.3.1.5.2, CPU Arch : X86 I recently installed Squid by doing $ pkg install squid This went fine: root@darwin1:~# pkg info squid Name: web/proxy/squid Summary: ...
4
votes
2answers
765 views

Jessie to Stretch upgrade ; squid proxy broken

I have just upgraded from Jessie to Stretch a proxy server with a perfectly working Squid configuration. The upgrade asked me if I wanted to copy squid.conf from the old /etc/squid3 directory to the ...
1
vote
0answers
515 views

SQUID intercept mode using external authentication and ICAP with adaptation_send_username not working

My goal is to transparently filter HTTP and HTTPS URLs based on a user name that is obtained via an external acl type. I am running Squid 3.5.23 in intercept mode, after researching, it seems that ...
3
votes
1answer
667 views

Setting up an FTP proxy on Squid

I haven't used squid in a while so I wouldn't be surprised if I am off on the configuration. But essentially, I am trying to set up a proxy server with Squid so that I can do this: Client (my local ...
2
votes
1answer
169 views

How to allow OCSP but disallow all other outgoing HTTP requests?

Is it possible to allow OCSP requests using for example iptables or Squid? I'm doing an experiment where I reject insecure outgoing HTTP requests, but OCSP is of course a valid exception since the ...
1
vote
1answer
141 views

Proxy Server on FreeBSD is rejecting connections

I have done a proxy server on FreeBSD, but from my client the browser says that the server is rejecting connections. Here I leave you my squid.conf file. Sorry for the screenshots, but from ...
0
votes
1answer
477 views

Lock down squid proxy to specific IP addresses

I have an anonymous squid proxy server running and I would like it to drop requests from any non-approved IP. I've limited access already via acl's in the squid config. However, if someone tries to ...
0
votes
0answers
464 views

How to register SSL Bump certificate correctly?

I have set up squid3 and setup SSL bump on it. For this purpose I have generated a certificate, which appeared in 3 files: myserver.cert myserver.csr myserver.private If I understand correctly, this ...
1
vote
1answer
3k views

How to capture SQUID proxy traffic via tcpdump with actual information?

I am using squid as proxy in a small setup having one internal NIC and one external NIC. Now using tcp, I can capture traffic on either side but there is some problem that I am facing. If I capture ...
2
votes
0answers
776 views

firewalld + squid : how-to setup a proxy

infra-server with IP x.x.x.x (with no internet connectivity) does the following request: $ wget http://google.com --2016-11-04 09:32:55-- http://google.com/ Resolving google.com (google.com)... 172....
-2
votes
1answer
590 views

Squid Proxy let user use only one ip

how can i let user1 only use 100.160.238.0:17648 and user2 only use 100.160.238.1:48049 and user3 only use 100.160.238.2:26394 ??? I tried some method but not work now my config is mixed with error....
3
votes
1answer
26 views

Squid Cache Server 2.7

How do I get the access.log, cache.log, and, store.log files stored for a longer duration of time on a server, say, for about fifteen days; currently there is a server which stores the files ...
3
votes
1answer
1k views

How do I configure a transparent proxy where the proxy server is remote?

What I am trying to acheive I have a CentOS (6.8) box 1.1.1.1 and a remote squid proxy server 2.2.2.2 I am trying to emulate the results of curl http://google.com -x 2.2.2.2:3128 with applications ...
0
votes
0answers
221 views

Proxy or something else to mirror website?

I want to set up a website on my internal network that mirrors the bbc iplayer website and have all the associated functionality. The internal site will be a vm or a container with a vpn client ...
0
votes
0answers
2k views

How to Include the Common ACL Rules in a Group ACL in the pfSense Squid Guard Package?

I figured out how to use the GUI to block black listed sites dependent on what time it is, but it's a little verbose for my tastes...is it possible to set a Common ACL and then have the Target ...
2
votes
1answer
3k views

In pfSense what is the meaning of the “Target Categories” and “Target Categories for off-time” columns in the Groups ACL Screen?

In SquidGuard within pfSense 2.3.1 in the Groups ACL screen there are two columns in the Target Rules List Target Categories and Target Categories for off-time. Each value in the row has the values ...
1
vote
0answers
49 views

MOD_PROXY with Squid

I am not entirely sure how to ask this question so it may have been discussed before. Attached below is an image of my image server setup. Here is how it works: A User visits my real estate website ...
3
votes
2answers
1k views

Can't generate client-side certificate after becoming my own Certificate Authority

I became my own certificate authority after running through the tutorial at: https://jamielinux.com/docs/openssl-certificate-authority/ I created a root pair, created an intermediate pair, and ...
1
vote
1answer
440 views

Images and Stylesheets not loading from squid due to a bad certificate?

I just setup Gate Sentry on a Raspberry PI 3, and it contains Squid 3 as part of it's proxy chain. It also utilizes ssl bump and certain websites that use SSL (usually big ones, like Facebook and ...
0
votes
0answers
188 views

What features of Squid 3 would allow the blocking of all traffic and then just adding servers to a whitelist that are allowed through?

I just installed Gate Sentry on a Raspberrry PI 3, and I'm able to block https facebook; provided I set the browser to use the proxy on port 8080 and the certificate. It gives me a nice content ...
0
votes
1answer
113 views

Squid3 to replace .jpg

I'm running squid3-3.4.8 i've been searching for a solution to replace cached jpg with other jpg stored on server or on internet. There are many tools like squidred, volta, asqredir. But none of them ...
2
votes
1answer
2k views

Squid systemd service not run at boot

I compiled squid 3 from source and installed in /usr/local/squid/ on my debian jessie computer. I want to start squid at boot. The following code is my squid.service which located in /etc/systemd/...
1
vote
0answers
523 views

How to reduce the bandwidth using squid proxy delay pools

I have a LAN with user PCs that managed by linux squid proxy server. IP ranges : User1 category: 192.168.1.2-192.168.1.12 User2 category: 192.168.1.13-192.168.1.23 User3 category: 192.168.1.24-192....
1
vote
1answer
2k views

Iptable rules for squid on centos 7

I have two interfaces in my proxy server eth0 and eth1. where eth0 connects to local (private) network wile eth1 connects to internet.My squid version is 3.3.8 and centos 7 is my OS. I have to ...
3
votes
1answer
4k views

How to pass certain URL to parent proxy in squid?

I would like to retrieve certain sites or domains via uplink proxy in squid. I would like to have a list of such sites. How to do that? I see directive always_direct, but I need opposite: pass all ...
0
votes
0answers
53 views

Squid filters some of Bugzilla HTTPs URLs

I am trying to finetune web filtering with squid, but meeting ununderstandable behaviour (for me). For example, if I open the following address: https://bugzilla.mozilla.org/ It goes fine. But if I ...
0
votes
1answer
389 views

How to have comments in squid adslist file readen by url_regex?

To block ads I wrote the following in the beginning of squid.conf: acl adslist url_regex -i "/etc/squid/adslist.txt" http_access deny adslist The file contains a plain list of domain names. Is it ...