9 votes
Accepted

Can I easily make a host "mirror" that caches downloaded Debian packages?

For having a local deb cache to server my Debian server farm, I actually prefer to use apt-cacher-ng (caching proxy server for software repositories) It is a proxy specially APT/deb aware, quite ...
Rui F Ribeiro's user avatar
7 votes
Accepted

squid: Illegal Instruction (core dumped)

Sorry, I think I've found the answer myself: http://wiki.squid-cache.org/KnowledgeBase/IllegalInstructionError. (quote begin) Illegal Instruction errors on Squid 3.4 Synopsis Squid 3.4 and ...
peterh's user avatar
  • 922
5 votes
Accepted

Basic Authentication of Squid - /usr/lib64/squid/basic_ncsa_auth file not found

It appears that you aren't using the CentOS packaged squid, but the ones packaged here. It might have helped if you had mentioned that in your question. If you look at the repo, it appears there is ...
jsbillings's user avatar
  • 24.4k
4 votes
Accepted

iptables rules on squid proxy machine

You seem to have used sport instead of dport and vice versa in the firewall rules. It should be: iptables -A INPUT -p tcp -s "$my_pc_ip" --dport 3128 -m state --state NEW,ESTABLISHED -j ACCEPT ...
enZyme's user avatar
  • 364
4 votes
Accepted

How I can configure w3m to use squid proxy (or any proxy) by default when invoked by a specific user?

You don't tell a browser to “use Squid” as a proxy, you tell it to use whatever proxy is running on a certain host and port. Many web browsers, including w3m, can take proxy settings from the ...
Gilles 'SO- stop being evil''s user avatar
4 votes

How to pass certain URL to parent proxy in squid?

You use the cache_peer config option to define a peer or parent, and you use cache_peer_access to force all requests matching a particular squid acl to use that peer. For example: cache_peer squid2....
cas's user avatar
  • 78.6k
4 votes

Setting up squid transparent proxy with SSL bumping on Debian 10

This isn't a direct answer to your question as I'm just using squid as a local caching proxy. Regardless, I've posted here as your question was the closest to what I needed and now I've worked it out, ...
Jeremy Davis's user avatar
3 votes
Accepted

Jessie to Stretch upgrade ; squid proxy broken

In squid v3.5 the hierarchy_stoplist and client_db configuration directives are obsolete. Commented them out, restarted the service and squid started working properly. From squid mailing list As ...
Rui F Ribeiro's user avatar
3 votes

How to capture SQUID proxy traffic via tcpdump with actual information?

Unless you're using a transparent proxy, the behaviour you're seeing is normal: clients connect to the proxy to retrieve content, so you see packets from the clients to the proxy and back; the proxy ...
Stephen Kitt's user avatar
3 votes
Accepted

How to change Squid service UID in FreeBSD?

OK, I got it now. After a few check on the FreeBSD forum, I can now confirm that FreeBSD jails act a bit like some Swiss cheese as long as SHM objects are concerned. Indeed, FreeBSD does not provide ...
WhiteWinterWolf's user avatar
3 votes

Why squid doesnt work with https sites

At the simplest level you've not defined any rules to allow HTTPS traffic to connect through squid. (At the more complex level you need to create trusted certificates so you can intercept and validate ...
Chris Davies's user avatar
2 votes

How to create an on-demand RPM mirror

I'm not sure if you found a good solution for this but I ended up writing a quick little Go program. It acts as a caching proxy and keeps around RPMs, but proxies upstream to database files so it's ...
Yobert's user avatar
  • 139
2 votes

Set monthly data limit for internet proxy (squid) users

I've been struggling to add this functionality as well. The problem with squish is, it's squishing users that is not supposed to be squished. The workaround that I used was to use the daily data ...
Toushin Taishi's user avatar
2 votes

Can't generate client-side certificate after becoming my own Certificate Authority

According to the tutorial, I should be able to change the Common Name during this process That tutorial tells you to generate a new key with openssl genrsa AND new CSR with openssl req -new AND ...
dave_thompson_085's user avatar
2 votes

Can't generate client-side certificate after becoming my own Certificate Authority

TXT_DB error number 2 means DB_ERROR_INDEX_CLASH. You've tried to submit a certificate into the OpenSSL CA database with the same index twice. The cause of this is usually submitting a certificate ...
garethTheRed's user avatar
2 votes
Accepted

How do I configure a transparent proxy where the proxy server is remote?

RESOLVED Using iptables ruleset: -A PREROUTING -p tcp -m tcp --dport 80 -j DNAT --to-destination 2.2.2.2:3128 -A POSTROUTING -s 172.17.0.0/16 -j SNAT --to-source 1.1.1.1 Looks like this was because ...
Oliver Smith's user avatar
2 votes

How to allow OCSP but disallow all other outgoing HTTP requests?

This is probably beyond iptables; you're asking for filtering at the application layer which is pretty complex. I think you're going to have to look into squid paired with iptables that forces all ...
Aaron D. Marasco's user avatar
2 votes

Can I easily make a host "mirror" that caches downloaded Debian packages?

edit: The preseeding approach I edited in to Rui F Ribeiro's answer works with Squid—or any other proxy—as well, and (as long as you're using DHCP) is likely a better approach. First, mirror will be ...
derobert's user avatar
  • 110k
2 votes

squid: Illegal Instruction (core dumped)

Customers with Oracle Support contracts can get a version of squid compiled with the -march=native flag disabled in Solaris 11.3 SRU 17 (11.3.17.5.0) from the /support repo. This includes the fixes ...
alanc's user avatar
  • 2,994
2 votes

squid with urlpath_regex not working with https

The thing is HTTPS traffic is encrypted by definition. Thus the traffic only goes tunelled through Squid, and you cannot have an idea of what URLs are visited. Squid only knows what sites are being ...
Rui F Ribeiro's user avatar
2 votes

Is there any command-line, generic HTTP proxy (like Squid)?

https://mitmproxy.org/ An example: mitmdump --ssl-insecure --mode reverse:google.com
Chris Stryczynski's user avatar
2 votes
Accepted

iptables redirect dns to proxy

Squid is not a DNS proxy and does not accept DNS requests. Looking at the documentation for the directives you highlight it's quite clear these are for internal settings and have nothing to do with ...
Chris Davies's user avatar
2 votes

Squid Proxy Server Error : Upon Starting

You've run squid with the wrong user, which created files with wrong permissions. squid: ERROR: Could not read pid file You need to run with sudo: sudo squid. fatal: ipc::mem::segment::create ...
kenorb's user avatar
  • 21k
2 votes

Permanently change Squid access.log permissions

You can try to use unix group with nrpe user as member. groupadd squidaccess usermod -aG squidaccess nrpe That group must be proprietary of access.log file. chown :squidaccess access.log Using ...
Maat's user avatar
  • 71
2 votes
Accepted

Permanently change Squid access.log permissions

Much like Maat's answer I went with adding squid group to nrpe since that is the default configuration & squid group already having read access. usermod -aG squid nrpe systemctl restart nrpe The ...
itChi's user avatar
  • 203
2 votes

How can I make the proxy squid to use itself a http_proxy?

I found a solution here https://wiki.squid-cache.org/SquidFaq/ConfiguringSquid#How_do_I_configure_Squid_forward_all_requests_to_another_proxy.3F it was necessary to put those three lines in the /etc/...
fraleone's user avatar
  • 797
1 vote

Basic Authentication of Squid - /usr/lib64/squid/basic_ncsa_auth file not found

Centos changed the path: You can use: /usr/lib64/squid/ncsa_auth or /usr/lib/squid/ncsa_auth It's works fine!
Ramphy Rojas's user avatar
1 vote
Accepted

exclude local addresses in wpad

Change the function to this: function FindProxyForURL(url,host) { var hostIP; if (isIpV4Addr.test (host)) { hostIP = host; } else { hostIP = dnsResolve(host); } ...
wurtel's user avatar
  • 16.1k
1 vote

Setting up an FTP proxy on Squid

From the Squid Frequently Asked Questions: Can I make my regular FTP clients use a Squid cache? Nope, its not possible. Squid only accepts HTTP requests. It speaks FTP on the server-side, but not on ...
telcoM's user avatar
  • 97.1k
1 vote
Accepted

Proxy Server on FreeBSD is rejecting connections

The problem was in the client configuration, I was not setting the correct port. As can be seen in the above .conf file, the port required is 3128.
Quico Llinares Llorens's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible