Unix & Linux Stack Exchange
Q&A for users of Linux, FreeBSD and other Unix-like operating systems
Latest Questions
1
votes
1
answers
109
views
Would a Netgate 1100 with pfSense Plus Software support SquidGuard?
Would a [Netgate 1100 with pfSense Plus Software][1] support SquidGuard? I'd like to be able to do web filtering using that software / hardware combination. P.S. Apologies if I have posted this in an incorrect StackExchange, if so please move the question to the appropriate StackExchange. [1]: https...
Would a Netgate 1100 with pfSense Plus Software support SquidGuard?
I'd like to be able to do web filtering using that software / hardware combination.
P.S. Apologies if I have posted this in an incorrect StackExchange, if so please move the question to the appropriate StackExchange.
leeand00
(4937 rep)
Sep 28, 2021, 01:46 AM
• Last activity: Jan 21, 2024, 07:47 AM
0
votes
0
answers
316
views
How to add windows client machines IP’s and names in squid proxy so the logs output as clients name instead IP
I have configured squid proxy server on centos stream and its up and running perfectly I want access.log output as windows client usernames instead of machine IP . As example below . current output 1656571863.985 0 172.30.0.104 TCP_DENIED/403 3864 CONNECT mtalk.google.com:5228 - HIER_NONE/- text/htm...
I have configured squid proxy server on centos stream and its up and running perfectly
I want access.log output as windows client usernames instead of machine IP . As example below .
current output
1656571863.985 0 172.30.0.104 TCP_DENIED/403 3864 CONNECT mtalk.google.com:5228 - HIER_NONE/- text/html
in above example client machine IP address i want username instead.
Rizwan Saleem
(27 rep)
Jun 30, 2022, 06:53 AM
• Last activity: Jun 30, 2022, 07:12 AM
0
votes
1
answers
984
views
Squid deny_info https not working
I have squid proxy server configured on centos 8 and working fine i have blocked some sites through squid when anyone access to blocked url it simply show the page browser cant open the page. I just want to ERROR_ACCESS. here is below my configuration. acl localnet src 200.200.200.0/24 acl localnet...
I have squid proxy server configured on centos 8 and working fine i have blocked some sites through squid when anyone access to blocked url it simply show the page browser cant open the page. I just want to ERROR_ACCESS. here is below my configuration.
acl localnet src 200.200.200.0/24
acl localnet src 172.30.0.0/16
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
acl badsite url_regex "/etc/squid/block"
http_access deny badsite all
deny_info ERR_ACCESS_DENIED badsite
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 3128
cache_dir ufs /var/spool/squid 100 16 256
coredump_dir /var/spool/squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern (Release|Packages(.gz)*)$ 0 20% 2880
refresh_pattern . 0 20% 4
Rizwan Saleem
(5 rep)
Oct 17, 2021, 09:24 AM
• Last activity: Jun 2, 2022, 07:07 AM
1
votes
1
answers
2267
views
squid url_regex not matching characters
I have a url_regex acl: ^http(s)://bitbucket.org/example/* However, it's matching the url: http(s)://bitbucket.org/example_test/* This seems to not consider the "/" at the end of ^http(s)://bitbucket.org/example/* I'd like to match anything with subfolder matching example. Eg: bitbucket.org/example/...
I have a url_regex acl:
^http(s)://bitbucket.org/example/*
However, it's matching the url:
http(s)://bitbucket.org/example_test/*
This seems to not consider the "/" at the end of ^http(s)://bitbucket.org/example/*
I'd like to match anything with subfolder matching example. Eg: bitbucket.org/example/case_1
bitbucket.org/example/case_2
But not, bitbucket.org/example_bad/case_3
It seems like a special blend of regex and its not considering the "/" –
Can anyone see what is wrong here ?
David Co
(123 rep)
Apr 4, 2022, 11:48 PM
• Last activity: Apr 5, 2022, 05:33 AM
-2
votes
1
answers
290
views
How to block web traffic for some websites without proxy server
Hello in our windows environment we need to block or filter internet some websites using Centos 8 For squid proxy server we need to assign group policy or add proxy address one by on which is not possible for us We need something through centos to filter our internet.Kindly advice necessary.
Hello in our windows environment we need to block or filter internet some websites using Centos 8
For squid proxy server we need to assign group policy or add proxy address one by on which is not possible for us
We need something through centos to filter our internet.Kindly advice necessary.
Rizwan Saleem
(5 rep)
Oct 10, 2021, 09:32 AM
• Last activity: Oct 10, 2021, 03:00 PM
1
votes
0
answers
662
views
Squid + Squidguard - redirect http traffic
Im having trouble figuring out which is the best way to redirect the traffic for a certain subnet. Basically i want to deny the access for a certain subnet to the internet. And i want it to always redirect the user to a specific (local) website. We have a squid3 + squidguard proxy here that is manag...
Im having trouble figuring out which is the best way to redirect the traffic for a certain subnet.
Basically i want to deny the access for a certain subnet to the internet. And i want it to always redirect the user to a specific (local) website.
We have a squid3 + squidguard proxy here that is managing the blocking of certain websites. I thought i could do it with it by using a whitelist and block everything else.
I tried to add this to the squidguard config
dest whitelist {
domainlist whitelist/domains
urllist whitelist/urls
}
test{
pass whitelist none
redirect http://bla.intern
}
and added the url http://bla.intern in the domains and urls file
Now i can visit http://bla.intern but when visiting other websites its not redireccting me just denying access.
Is there a better way to do this? Maybe over iptables?
amam
(13 rep)
Sep 14, 2017, 11:44 AM
-2
votes
1
answers
1277
views
Squid Proxy let user use only one ip
how can i let user1 only use `100.160.238.0:17648` and user2 only use `100.160.238.1:48049` and user3 only use `100.160.238.2:26394` ??? I tried some method but not work now my config is mixed with error. So please if anyone know how to do this then please help me. i tried below method but some erro...
how can i let user1 only use
100.160.238.0:17648
and user2 only use 100.160.238.1:48049
and user3 only use 100.160.238.2:26394
??? I tried some method but not work now my config is mixed with error. So please if anyone know how to do this then please help me. i tried below method but some error in my config.
auth_param basic program /usr/lib64/squid/basic_ncsa_auth /etc/squid/passwd
#external_acl_type ip_user %SRC %LOGIN /usr/lib/squid/ip_user_check -f /etc/squid/ip.conf
#external_acl_type ip_user %SRC %LOGIN /usr/lib64/squid/ext_file_userip_acl -f /etc/squid/ip.conf
if anyone know solution then please share your config or sample please.
OS CENTOS 7 X64BIT.
Zilvia Smith
(117 rep)
Oct 24, 2016, 05:22 PM
• Last activity: Oct 25, 2016, 08:18 AM
Showing page 1 of 7 total questions