Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [transparent-proxy]

210 questions
0
votes
1 answer

how to recompile kernel iptables by enabling tproxy

I'm new to the Kernel iptables/netfilter. I'm having red hat linux with Linux Kernel 2.6.37-rc1,iptables 1.4.10 ,squid 3.1. But my iptables are not configured with tproxy table. Now, i want to recompile the netfilter/iptables module alone to…
srinuvenu
  • 113
  • 5
0
votes
1 answer

Get Squid3 to cache .zip, .rar, .iso files for 2 weeks

Is there away to get Squid3 to cache certain file extensions for an extended period of time? For example, I'd like to have .zip, .rar, and .iso files cached for 2 weeks by default. Thanks.
ensnare
  • 2,212
  • 7
  • 24
  • 40
0
votes
2 answers

tproxy squid bridge very slow when cache is full

I have installed a bridge tproxy proxy in a fast server with 8GB ram. The traffic is around 60Mb/s. When I start for first time the proxy (with the cache empty) the proxy works very well but when the cache becomes full (few hours later) the bridge…
Roberto
  • 87
  • 1
  • 7
0
votes
1 answer

Simple example of transparent proxy with Cisco IOS and Squid

Does anyone have a simple example with Cisco IOS and Squid whereby a Cisco router intercepts traffic and redirects it to an adjacent Squid 3 cache? Is there a way to do this for only certain requests (e.g. .zip, .rar, etc ...)
ensnare
  • 2,212
  • 7
  • 24
  • 40
0
votes
1 answer

transparent proxy to lo

I am trying to setup a transparent proxy between eth0 and lo, The reason being during DNS propagation services are being tunneled over a SSH connection between the old and new servers, on the "old" server this is fine for anything running locally…
Oneiroi
  • 2,063
  • 1
  • 15
  • 28
0
votes
1 answer

automatically forward all network traffic to a proxy

I've used cntlm to automatically add NTLM headers to https requests when ssh'ing to a particular host. What I need to do now is to send all outbound internet traffic (80/443) from any program running on machine A through a proxy server running on…
Ryan Fernandes
  • 312
  • 5
  • 19
0
votes
1 answer

software to monitor internet usage on an XP PC? (browser + non-browser)

Is there any (ideally open source) software for Windows that can be used on a PC, to monitor the usage of internet from that PC? It would need to include both browser and non-browser sources (e.g. a service that sync's calendar to gmail). So any…
GregH
  • 245
  • 3
  • 13
0
votes
1 answer

Setting up a transparent proxy with only one box

I am playing around with transparent proxies, unfortunately I do not have two machines to test it out with. The current way I am doing things is the program makes a request to a computer on port 80, I use iptables -t nat -A OUTPUT -p tcp…
Scott Chamberlain
  • 1,455
  • 2
  • 21
  • 37
0
votes
1 answer

How can I setup Nginx with a transparent socket?

Similarly to this Cloudflare blog post, I am trying to setup Nginx with a transparent socket (with the IP_TRANSPARENT socket option). I want to do this to implement a reverse TCP proxy that effectively binds to all ports. The IP_TRANSPARENT socket…
dippynark
  • 233
  • 3
  • 13
0
votes
2 answers

Transparent proxy to corporate proxy in k8s

Attempting to deploy an external app into a corporate k8s cluster. All egress traffic leaving this external app has to go through the corporate proxy before getting to the internet. The issue is that the application does not have built in env…
Virtual Penman
  • 1
0
votes
0 answers

grab https URL without import CA into PC from squid access log

1.The domain aa.com was belongs to our company and we have the public and private key of Wildcard certificate about aa.com. 2.We want to grab all of the URL from the access log which about *.aa.com, so we can use the security scanner to check these…
insmod
  • 1
0
votes
0 answers

Is it possible to route packet from Postrouting back to Prerouting?

I am wondering if I can mark TCP and UDP packets with DSCP, then at Postrouting, if a packet has certain DSCP marking, it will be rerouted back to Prerouting. The reason I am doing this is because I am running a transparent proxy, and UDP packet has…
Chris
  • 1
  • 1
0
votes
0 answers

Direct Server Return software and configuration for mesh network of raspbery pi servers

I don't know much about DSR technology but as I am aware both load balancer and servers need to be behind same router because of virtual IP addresses. I need solution to have cloud-based geo-based load balancers which will receive request with some…
Dejan Milosevic
  • 133
  • 3
0
votes
0 answers

How squid whitelist domain + exclude certificate error domain

I have Squid Setup as a transparent HTTP+HTTPS proxy in my network, using SSL-Bump. I am having trouble with a handful of domains and those domains showing me cert errors while dumping and splicing, self-signed certificate in the chain, that way…
sanket jaiswal
  • 1
  • 1
0
votes
1 answer

How to create Iptables rules for squid to only handle web traffic request

I'm using Squid Proxy for (DNS Filtering), I have configured squid proxy behind my GCP Cloud NAT in transparent mode to intercept HTTP and HTTPS Web Traffic, I have added only below rules to redirect HTTP and HTTPS traffic to squid. iptables -t nat…
sanket jaiswal
  • 1
  • 1
1 2 3
…
13 14