Questions tagged [transparent-proxy]

210 questions
0
votes
2 answers

Squid 2.7.STABLE3-4.1 as a transparent proxy on Ubuntu Server 9.04

Can't get this to work at all! I'm trying to get this linux box to act as a transparent proxy and, with the help of DHCP, force everyone on the network to gate into the proxy. I have two ethernet connections, both to the same switch. And I'm trying…
atomicharri
  • 321
  • 6
  • 24
0
votes
1 answer

Iptables rules for transparent proxy, and no proxy

Hi I'm using redsocks and iptables port redirection rules to set a transparent proxy, and works fine, but I need to establish iptables rules for non proxy access, to domains, domain1.com and domain2.com, and 10.0.0.0/8 Here is my actual redirection…
efirvida
  • 121
  • 1
  • 7
0
votes
1 answer

Transparent squid proxy on ubuntu 14.04 server

I have ubuntu 14.04 LTS server installed on my server, and I would like to install transparent proxy server on my server for LAN network. Please help me with this. Thanks in advance.
Amol
  • 3
  • 1
  • 1
  • 3
0
votes
3 answers

iptables with transparent proxy, how to pass the user IP

I have a local transparent proxy, but my problem is that packets, when re-routed, have the router IP and not the user. These are the rules that I currently have in place: iptables -t nat -A PREROUTING -i eth0 -s ! 192.168.1.231 -p tcp -m multiport…
Fabrizio
  • 73
  • 1
  • 7
0
votes
1 answer

Transfer traffic between iptable chains

My understanding is that normally any given packet will only ever interact with one iptables chain either INPUT FORWARD or OUTPUT. However I want to have all traffic on port 80 that has neither its source or destination as the current machine…
o.comp
  • 125
  • 7
0
votes
1 answer

Prevent non-intercept Squid traffic being tagged by Policy Routing

I've re-edited the original question, because I have changed the setup since the original answer, which was for NAT based setup. NAT is no longer being used and has been replaced with TPROXY for IPv6 compatibility. I'm running squid in a small…
James White
  • 674
  • 3
  • 18
  • 32
0
votes
1 answer

NAT routing based on DNS name (reverse TCP proxy?)

Introduction I have one router, running pfSense (can be anything since it's a virtual machine on VMware, so if the solution requires anything else, that's fine by me) and behind it I have multiple virtual machines (NAT). What I'd like to…
Devator
  • 1,473
  • 4
  • 18
  • 37
0
votes
1 answer

Squid running in intercept mode on same machine as browser keeps giving access denied

It's been a while since I last touched squid and I've been sitting here figuring out this problem since the last few hours why my squid setup on this standalone server machine (behind router nat) failed to process any outgoing http requests from the…
Flint
  • 631
  • 5
  • 10
  • 18
0
votes
1 answer

Squid both transparent and forward mode

Is it possibile to configure squid for both transparent and forward-authenticated mode (maybe listening two different tcp ports)?
Tobia
  • 1,272
  • 9
  • 41
  • 81
0
votes
0 answers

LVS + keepalived for load balancing transparent SQUID proxies

I need to load balance a number of SQUID proxies configured in transparent mode. Below is a simple diagram with one LB and SQUID boxes. ---------- | Client | ---------- | *.1.100 …
faraway
  • 1
  • 3
0
votes
2 answers

"Invalid URL" Squid 3.3.8 transparent proxy w/ SSL Bump

I am attempting to run the QLProxy Virtual Appliance with SSL Bump in a transparent proxy and cannot for the life of me get it to work. I keep receiving "Invalid URL" errors from Squid (version 3.3.8). Squid config is as follows acl localnet src…
DKNUCKLES
  • 4,028
  • 9
  • 47
  • 60
0
votes
0 answers

Two transparent gateway using squid return 403

I have two linux gateway using squid as transparent proxy. When I using them individually, everything is fine. But when I using them in the same network, every request from browser will return 403. The network topological structure like this: Client…
Loong
  • 11
  • 3
0
votes
1 answer

How to make Squid log url and forward traffic without proxying?

I want to use squid to listen on port 80 and log all url requests and simply forward it to original destination without changing anything. How to achieve that?
iTech
  • 355
  • 4
  • 15
0
votes
1 answer

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the HTTPS directly as we don't care about the traffic only…
Bryan Ice
  • 1
  • 2
0
votes
2 answers

Remote IP and SMTP Proxy

Is it possible to proxy emails - with postfix for example - transparently so the backend mail server will get the last SMTP server IP address (rbl purpose) and not the Proxy IP address? If it is possible and in the same mind could the SMTP proxy…
Arka
  • 173
  • 1
  • 2
  • 8