Re: [squid-users] Transparent Squid Proxy Server

2015-07-11 Thread Nathan Hoad
I'm using 3.5 with transparent server first bumping in ~100 deployments so far, it works just fine, excluding with SNI and everything. On 12/07/2015 10:58 am, "Yuri Voinov" wrote: > Man, > > 3.5.x don't work with server-first. It must be for backward compatibility > - but don't be. > > Also, AFA

Re: [squid-users] Transparent Squid Proxy Server

2015-07-11 Thread Yuri Voinov
Man, 3.5.x don't work with server-first. It must be for backward compatibility - but don't be. Also, AFAIK, 3.5.x series don't work with transparent NAT interception in bump mode. Fake certs are generated, but with IP against hostnames (in all my test installations). So, if you strictly ne

Re: [squid-users] Transparent Squid Proxy Server

2015-06-23 Thread Reet Vyas
Hi Below is my squid file , I have configured squid 3.5.3 with ssl, but I cant filter https traffic and also in access log I cant see https in access logs. # # Recommended minimum configuration: # # Example rule allowing access from your local networks. # Adapt to list your (internal) IP networ

Re: [squid-users] Transparent Squid Proxy Server

2015-06-05 Thread Reet Vyas
Hi Thanks for reply. I am trying to cache youtube using this wiki http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube but I cant cache youtube. I want to cache facebook and youtube. SSl certificate installation that I have to do . Please suggest some links. On Thu, Jun 4, 2015 at 6

Re: [squid-users] Transparent Squid Proxy Server

2015-06-04 Thread Amos Jeffries
On 5/06/2015 12:55 a.m., Reet Vyas wrote: > Thank you everyone for helping me to setup squid , Now its working but in > access.logs I only see tcp_miss if m using same website. I mean squid is > not caching You will get MISS a fair bit more with intercepted traffic than with normal proxied traffi

Re: [squid-users] Transparent Squid Proxy Server

2015-06-04 Thread Reet Vyas
Thank you everyone for helping me to setup squid , Now its working but in access.logs I only see tcp_miss if m using same website. I mean squid is not caching Logs 43 192.168.0.198 TCP_MISS/200 384461 GET http://www.horlicksquad.com/images/tc-pic.png - HIER_DIRECT/52.74.133.61 image/png 14334220

Re: [squid-users] Transparent Squid Proxy Server

2015-06-04 Thread Amos Jeffries
On 4/06/2015 6:43 p.m., Reet Vyas wrote: > Hi, > > I changed the iptables still no luck :( but I am using squid 3.3 only can I > didn't understand why you have configured 3129 ,3130 and 3128 port? Because due to historic (browser war politics) reasons there are three different protocol message sy

Re: [squid-users] Transparent Squid Proxy Server

2015-06-04 Thread Reet Vyas
Hi I got it half working My chat is working I can search google, but I cant browse websites , My configuration now acl mynet src 116.72.152.37 192.168.0.0/16# RFC1918 possible internal network acl SSL_ports port 443 acl Safe_ports port 80# http acl Safe_ports port 21# ftp acl

Re: [squid-users] Transparent Squid Proxy Server

2015-06-03 Thread Reet Vyas
Hi, I changed the iptables still no luck :( but I am using squid 3.3 only can I didn't understand why you have configured 3129 ,3130 and 3128 port? On Wed, Jun 3, 2015 at 1:04 PM, Klavs Klavsen wrote: > Your client needs to use your squid server as default gateway. > > And then you need the ipt

Re: [squid-users] Transparent Squid Proxy Server

2015-06-03 Thread Klavs Klavsen
Your client needs to use your squid server as default gateway. And then you need the iptables rules I wrote about to direct traffic into squid for certain ports. Reet Vyas wrote on 06/03/2015 08:50 AM: Hi Thanks for reply. As of now we don't have router I have directly connected my machine t

Re: [squid-users] Transparent Squid Proxy Server

2015-06-02 Thread Reet Vyas
Hi Thanks for reply. As of now we don't have router I have directly connected my machine to internet and other to LAN and I have configured client machine ubuntu to test squid which is in switch where other users are connected using gateway of router 192.168.0.1. I read your valuable suggestions,

Re: [squid-users] Transparent Squid Proxy Server

2015-06-02 Thread Klavs Klavsen
Amos Jeffries wrote on 06/02/2015 04:34 PM: On 3/06/2015 1:20 a.m., Klavs Klavsen wrote: I have this in my squid server for it to work: The key words there are ... *in my Squid server* indeed :) NOTE to Klavs: loading the "multiport" kernel module seems overkill for a single-port match

Re: [squid-users] Transparent Squid Proxy Server

2015-06-02 Thread Amos Jeffries
On 3/06/2015 1:20 a.m., Klavs Klavsen wrote: > I have this in my squid server for it to work: The key words there are ... *in my Squid server* Reet did it on the router. Which was the first mistake. The router needs routing rules (not NAT) to deliver the clients packets to Squid machine where th

Re: [squid-users] Transparent Squid Proxy Server

2015-06-02 Thread Klavs Klavsen
I have this in my squid server for it to work: *mangle :PREROUTING ACCEPT [190:618576] :INPUT ACCEPT [190:618576] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [163:41506] :POSTROUTING ACCEPT [166:42334] -A PREROUTING -d $myip/32 -p tcp -m multiport --dports 3129 -m comment --comment "002 drop squid direc