[squid-users] Any obvious security issues in my squid.conf?

2017-05-29 Thread j m
I will be remotely accessing squid 3.5 for general web usage, using an encrypted browser-to-proxy connection, and username/password authentication.  I believe my config is reasonably secure as it's based off the default config, but I'm unsure of myself due to some confusion.  Are there any glari

Re: [squid-users] TCP_DENIED/407 accessing webserver on same machine as squid

2017-05-26 Thread j m
Yes, I sort of pieced together what I found online, which is probably dangerous.  I really need to become familiar with how exactly this works for security's sake if nothing else. From: Amos Jeffries To: j m ; "squid-users@lists.squid-cache.org" Sent: Friday, May 2

Re: [squid-users] TCP_DENIED/407 accessing webserver on same machine as squid

2017-05-26 Thread j m
all https_port SQUID_PORT cert=/etc/squid/squid.pem cache deny all netdb_filename none From: Amos Jeffries To: squid-users@lists.squid-cache.org Sent: Friday, May 26, 2017 12:29 PM Subject: Re: [squid-users] TCP_DENIED/407 accessing webserver on same machine as squid On 27/0

[squid-users] TCP_DENIED/407 accessing webserver on same machine as squid

2017-05-26 Thread j m
I have a webserver and squid 3.5 running on the same Linux machine.  The webserver is actually part of shellinabox, so it's only for me to access.  Shellinabox simply presents a terminal and login in a web browser.  I want it to be accessible only through squid for more security. shellinabox wor

Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-25 Thread j m
y for firefox, you can use switchysharp for Chrome. Marcus On 25/05/17 09:00, j m wrote: > Thought I'd try getting this to work in Chrome too.  NOTHING I try makes it > work in Chrome.  Isn't running this from the Windows command line supposed to > work? > > chrome --proxy-

Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-25 Thread j m
proxy despite Firefox on the same computer working just fine! From: Amos Jeffries To: j m ; "squid-users@lists.squid-cache.org" Sent: Wednesday, May 24, 2017 5:15 PM Subject: Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called? On 25/05/17

Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-25 Thread j m
with? From: Amos Jeffries To: j m ; "squid-users@lists.squid-cache.org" Sent: Wednesday, May 24, 2017 5:15 PM Subject: Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called? On 25/05/17 09:01, j m wrote: > Some more info:  I tried this on Firef

Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-24 Thread j m
y, May 24, 2017 7:57 AM Subject: Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called? On 24/05/17 13:44, j m wrote: > I'd like to set up a proxy on a home server so I can use it remotely > for web browsing; no filtering, nothing fancy, just a pass-thro

Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-24 Thread j m
effries To: squid-users@lists.squid-cache.org Sent: Wednesday, May 24, 2017 7:57 AM Subject: Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called? On 24/05/17 13:44, j m wrote: > I'd like to set up a proxy on a home server so I can use it remotely

[squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-23 Thread j m
I'd like to set up a proxy on a home server so I can use it remotely for web browsing; no filtering, nothing fancy, just a pass-through of sorts to get around web filters.  That part I've got working.  The part I haven't had luck with is encrypting the browser-to-proxy connection.  I've found so

Re: [squid-users] Tutorial for better authentication than basic

2017-05-04 Thread j m
Wow, this only showed up in my email yesterday.  I blame Yahoo. I did respond earlier basically saying I would need to connect from different IPs. From: Eliezer Croitoru To: 'j m' ; squid-users@lists.squid-cache.org Sent: Wednesday, May 3, 2017 6:37 PM Subject: RE: [s

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
run HAProxy by itself (say in a VM) and get the same result.  Just fwd those ports from your router to the HAProxy box. Thanks!  From: squid-users [mailto:squid-users-bounces@ lists.squid-cache.org]On Behalf Of j m Sent: Wednesday, May 03, 2017 3:14 PM To: squid-users@lists.squid-cache. org S

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
ould run HAProxy by itself (say in a VM) and get the same result.  Just fwd those ports from your router to the HAProxy box. Thanks!  From: squid-users [mailto:squid-users-bounces@ lists.squid-cache.org]On Behalf Of j m Sent: Wednesday, May 03, 2017 3:14 PM To: squid-users@lists.squid-cache. org

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
1 {}#yiv0837668946 Hello,   Is this more in line with what your trying to do:   http://loredo.me/post/116633549315/geeking-out-with-haproxy-on-pfsense-the-ultimate   Tommy   From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org]On Behalf Of j m Sent: Wednesday, May 03, 201

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
In any case, I'm finding SSH through proxy is undesirable or not possible.  I'm thinking shellinabox, which is insecure but run over a secure proxy link, is my best bet. From: Alex Rousskov To: j m ; "squid-users@lists.squid-cache.org" Sent: Wednesday, May 3, 2

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
y FTP) proxy, not a general-purpose TCP proxy. This is the first I've been told this.  I personally don't know since I'm very proxy-illiterate.  From: Antony Stone To: squid-users@lists.squid-cache.org Sent: Wednesday, May 3, 2017 12:48 PM Subject: Re: [squid-users] HTTPS

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
Options" for the http_port directive (not the https_port directive!). This is helpful since I was trying to use https_port. From: Alex Rousskov To: "squid-users@lists.squid-cache.org" Cc: j m Sent: Wednesday, May 3, 2017 12:22 PM Subject: Re: [squid-users] HTTPS support On

[squid-users] HTTPS support

2017-05-03 Thread j m
I wanted to set up a proxy on my home server for use from remote locations to use as a web proxy (of course) and also to run SSH over.  This means that basic auth is undesirable due to the login being sent in clear text.  So, someone suggested digest auth, and I was happy.  But, now I'm finding

Re: [squid-users] Tutorial for better authentication than basic

2017-05-02 Thread j m
able to start squid in Ubuntu by using "service squid start".  This used to work, but it gives no error; it appears to immediately execute, but it's not running as a process.    However, if I run "squid -N -d 1 -D", it runs with no complaints. From: Eliezer Croitor

Re: [squid-users] Tutorial for better authentication than basic

2017-05-02 Thread j m
From: Amos Jeffries To: squid-users@lists.squid-cache.org Sent: Monday, May 1, 2017 7:06 PM Subject: Re: [squid-users] Tutorial for better authentication than basic On 02/05/17 09:04, j m wrote: > Wow, I didn't find that one.  Not super secure, but better than clear >

Re: [squid-users] Tutorial for better authentication than basic

2017-05-02 Thread j m
Re: [squid-users] Tutorial for better authentication than basic On 02/05/17 09:04, j m wrote: > Wow, I didn't find that one.  Not super secure, but better than clear > text and I'm not too worried about someone sniffing my packets. > The security level with Digest depends on

Re: [squid-users] Tutorial for better authentication than basic

2017-05-01 Thread j m
Wow, I didn't find that one.  Not super secure, but better than clear text and I'm not too worried about someone sniffing my packets. From: Eliezer Croitoru To: 'j m' ; squid-users@lists.squid-cache.org Sent: Monday, May 1, 2017 3:30 PM Subject: RE: [squid-users]

[squid-users] Tutorial for better authentication than basic

2017-05-01 Thread j m
I'm using Ubuntu 16.04 Server in the home and would like to set up a proxy server for use from over the Internet.  The main purpose for this is to easily access a few web-devices on my LAN without using VPN, and at times to route web traffic from a remote location through my home ISP.  I do not

Re: [squid-users] General security and usage questions

2017-04-13 Thread j m
t: Re: [squid-users] General security and usage questions On 8/04/2017 1:01 a.m., j m wrote: > I have a Ubuntu server set up that does various things in addition to > being a web proxy (squid 3.3.8) to use remotely over the internet. > This allows me to directly access internal devices with

[squid-users] General security and usage questions

2017-04-07 Thread j m
I have a Ubuntu server set up that does various things in addition to being a web proxy (squid 3.3.8) to use remotely over the internet.  This allows me to directly access internal devices with a web page on my LAN since my employer, like most, blocks VPN connections.  My intention is to have th