Squid showed up on port 8080. Possible Rootkit?
I recently attempted to connect to my EC2 server on 8080 and had some strange issues that weren’t occurring earlier. NGinx (though setup for :81) captures any requests on port 8080. If I stop nginx, I get a “Connection Refused” message from a Squid Proxy I definitely didn’t install myself, and don’t recall seeing before. I’m attempting run a simple Pyramid app on 8080, but the squid proxy seems to be catching all the requests. [...]
Continue Reading »Loadbalance a bunch of Squid servers
I’m trying to load balance a network of proxy (squid) servers (currently 8 nodes) efficiently. I’m currently balancing over a network wide proxy autoconfig but that seems to not work properly. Some servers do get a horrible amount of load, some are just sitting there and waiting for requests. What’s an efficient way to balance these (without changing too much on the client side)? Is it possible to do some kind of request delegating instead [...]
Continue Reading »How can I make Squid provide authentication credentials to Zscaler?
I netadmin a school. The school connects to the outside world via a VPN implemented on equipment ouside my control (all in-school hosts have 10.x.x.x IP addresses). The only way out to the Web is via an upstream filtering proxy server that serves multiple schools. The school has a local Squid proxy under my complete control, which all the school browsers are configured to use. It’s currently set up to use the upstream proxy as [...]
Continue Reading »squid Which url in my file is matching
i’m trying to open a web, but my squid is blocking that url, in squid.conf, i have this acl neverallow url_regex -i “/usr/local/squid/etc/blacklist/neverallow” http_access deny neverallow if i comment the http_access line, i’m able to open the url, so, i open the file looking for the domain name, or something that looks like the url i’m trying to open, but, couldn’t find nothing with my own eyes, so, i’m not an expert in linux, and [...]
Continue Reading »How do I setup a NIC for outgoing connections and the other to serve my Squid proxy?
I have an internal network (192.168.2.0/24) that I’m supposed to connect to a proxy. I’ve already installed and test(with a little traffic) an Squid 3 cache/proxy server in a Ubuntu 12.04 box with this IP address: 192.168.2.102 eth0. Also, I have another physical NIC with IP 192.168.2.101 eth1. The setup that I’ve done consists in the Ubuntu box going out to internet and serving the Squid in the same eth0 NIC. I have the concern [...]
Continue Reading »networking: NAT protocol between two addresses of one network card
Is it possible to deploy NAT protocol between two addresses, one ip network card (so that between them there was no conflict)? This is to ensure that one ip address to the Internet through a proxy parent, and the second address to the child proxy server and distribute it to the Internet in the local area network. Can this be done in principle? Asked by user125794 Yes. This is called “NAT on a stick”. Answered [...]
Continue Reading »squid still caching
I have set this maximum_object_size 0 KB minimum_object_size 0 KB acl all src 0.0.0.0/0.0.0.0 no_cache deny all but when I do test for the caching curl -x ip1:3128 http://blabla.com/iptest.php sleep 5 curl -x ip2:55555 http://blabla.com/iptest.php both will return only the fist ip (ip1) If the sleep is bigger that 30, it will show the ip2 too LATER EDIT: I see that the problem is if you hit the squid with 2 connsecutive requests it will [...]
Continue Reading »Using squid to capture https – how to do non transparent proxy?
The root of the problem: I need to block access to https://somewebsite.com/folder/index.php; but allow access to the rest of the site. I thought the best way to accomplish it would be through a proxy like squid. How can I accomplish my goal? Keep in mind I’m running squid 2.7 on a Windows 7 box and all the clients are also windows machines that I have full access to. This is my first experience with squid, [...]
Continue Reading »Squid access logging only specific ACLs?
In squid, is it possible to enable access logging only on a specific ACL? If so, how? We have done quite a few searches and were unable to find the proper conf syntax Asked by anonymous-one acl log_this src x.x.x.x. y.y.y.y.y z.z.z.z.z access_log /var/log/squid common log_this Answered by diegows Check more discussion of this question. Bookmark on Delicious Digg this post Recommend on Facebook share via Reddit Share with Stumblers Tweet about it Print for [...]
Continue Reading »Proxy-forward in Squid via a different public IP depending on the local port
I wish to forward a persistent HTTP request through a different public IP. It connects to the server and stays connected as the server continuously streams data. This needs to be transparent to the application; the routing logic needs to be limited to just making the HTTP connection to a target port number (or host:port). I’m considering having a Squid service listening on a LAN IP but on several ports; if the application connects to [...]
Continue Reading »


