Questions tagged [squid]
Squid is a caching proxy server.
19
questions
0
votes
0
answers
24
views
How can I detect a string based on a regex with a Squid ACL
would it be possible to detect a string (a canary token, for example) with a squid proxy within a http post (or get) request? I am looking for a regex ACL on the http body, but can only find protocol ...
- 113
0
votes
0
answers
31
views
Proxychains fails but foxyproxy works?
Here's a proxy problem I am trying to understand.
There's a http squid proxy in 192.168.215.189:3128 . No other ports of the specified IP is exposed externally. I created a foxyproxy proxy and used ...
1
vote
0
answers
182
views
VPS for Tor & I2P - which other services can I safely run on same?
I'm toying with the idea of setting-up a Tor node (middle/guard) and an I2P node on the same VPS. I think that should be safe(ish)...
But I'm wondering what other services I could run without it/them ...
- 777
0
votes
1
answer
378
views
Cipher, for a rookie, what's safe and not safe 2021?
I'm a rookie in the cipher world, and I'm setting up squid as an TLS proxy. in an example it uses:
cipher=EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:...
- 115
-1
votes
1
answer
285
views
Preventing MITM Attack with Squid
There are two options, what is the best approach?
I want to either
Create a squid proxy server that detects MITM attacks
or
Create a python UI application to detect differences between local ...
- 442
1
vote
0
answers
146
views
Certificate Checking for MITM w/ Squid
I have already set up a squid cache proxy server on a Raspberry Pi 4. I need to create some sort of GUI to turn on and off certificate checking for man in the middle attacks.
First, how do I get squid ...
- 442
1
vote
1
answer
986
views
How to make Squid Proxy undetectable by ip-check.net? [closed]
I have setup squid proxy on a CentOs server where I set forwarded_for to delete and denied request headers on the /etc/squid/squid.conf file. However, whilst connected to the proxy, if I visit http://...
- 11
0
votes
1
answer
476
views
iptables: force clients to use proxy
My network: 192.168.0.1 server. (enp0s3 NAT, enp0s8 internal) 192.168.0.10-15 clients (enp0s3 internal).
I have a proxysquid for blocking websites,and so on.
My clients can navigate and browse any ...
1
vote
0
answers
404
views
Transparent proxy with certificate check
I need to filter HTTPS traffic based on the certificate of the destination server. Only traffic to servers which have a certain certificate should be allowed, other traffic needs to be blocked. The ...
- 11
3
votes
1
answer
116
views
how to check what process connects to my squid
I found today, that I have open proxy (squid on Debian). I fixed the firewall rule, and now I'm not. But someone still uses this proxy - it looks like it is proxying from inside my machine. I try to ...
- 141
1
vote
2
answers
429
views
Monitor HTTP requests in a TLS transaction
I want to know if there is a way to monitor the size and time taken for an HTTP request in a TLS transaction using a proxy or other network traffic inspection tool. Note that I do not want to inspect ...
- 33
1
vote
1
answer
351
views
HSTS implemented but not working?
While being connected on a very restricted network, I was only able to access the internet through a Squid proxy which was configured only for HTTP on port 80.
When navigating to google.com, I'm able ...
4
votes
3
answers
2k
views
Is SSL Interception possible without disabling Public Key Pinning on the client side?
I'm currently setting up a pfSense firewall in my lab. It supports SSL Inception which works pretty well for most sites.
But there are some sites which use HTTP Public Key Pinning to prevent MitM ...
- 4,313
1
vote
0
answers
128
views
Making My Cache Work and Not Theirs: Blacklist for Blocking Caching Sites with Squidguard?
Is there a Squid Guard blacklist (assuming SSL decryption and inspection) that will block caching websites like Google Cache, Google Translate, and the Internet Wayback Machine?
- 1,387
1
vote
1
answer
122
views
Is it possible to lock down the http / https proxy settings on a Windows Phone?
Is there any way to lock down the proxy settings on a Windows Phone so that they can't be changed by anyone but the person with the password?
- 1,387
1
vote
1
answer
165
views
Is it possible to lock down the http / https proxy settings on an Android phone?
Is there any way to lock down the proxy settings on an Android Phone so that they can't be changed by anyone but the person with the password?
- 1,387
1
vote
1
answer
450
views
Is it possible to lock down the http / https proxy settings on an iPhone?
Is there any way to lock down the proxy settings on an iPhone so that they can't be changed by anyone but the person with the password?
- 1,387
1
vote
1
answer
493
views
Is it possible to filter internet access on a mobile phone with a 3/4G connection with a proxy server?
If you were to put a pfSense Squid Proxy Server with Squid Guardian on a DMZ and then point a cellphone with a 3/4G connection at it for SSL and HTTP with a self-signed CA certificate installed on it; ...
- 1,387
1
vote
1
answer
637
views
Computers connecting to suspicious websites via squid proxy
I am running a squid proxy server on my network which my computers connect through to access the internet. I have noticed several odd entries in the squid access.log file around the same time everyday,...
- 155