Displaying 20 results from an estimated 35 matches for "http_port".
2016 Feb 04
5
Squid as interception HTTPS proxy under CentOS 7
...your local networks.
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
http_access allow localnet
http_access allow localhost
# And finally deny all other access to this proxy
http_access deny all
# Squid normally listens to port 3128
#http_port 3128
# Uncomment and adjust the following to add a disk cache directory.
#cache_dir ufs /var/spool/squid 100 16 256
# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid
#
# Add any of your own refresh_pattern entries above these.
#
refresh_pattern ^ftp: 1440 20% 10080
refresh_...
2007 Aug 10
1
TRANSEPARENT PROXY WITH SQUID 2.6
Hi,
I am running squid as a TRANSEPARENT PROXY WITH SQUID 2.5 on CENTOS 4.5.
Pls see below for squid.con file.
http_port 3128
cache_mem 64 MB
cache_dir ufs /var/spool/squid 100 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
# Example rule allowing access from your loca...
2016 Feb 04
0
Squid as interception HTTPS proxy under CentOS 7
...e ACL section to list your (internal) IP networks
> # from where browsing should be allowed
> http_access allow localnet
> http_access allow localhost
>
> # And finally deny all other access to this proxy
> http_access deny all
>
> # Squid normally listens to port 3128
> #http_port 3128
>
> # Uncomment and adjust the following to add a disk cache directory.
> #cache_dir ufs /var/spool/squid 100 16 256
>
> # Leave coredumps in the first cache dir
> coredump_dir /var/spool/squid
>
> #
> # Add any of your own refresh_pattern entries above these.
> #...
2020 May 09
4
Transparent Squid and FirewallD : fine-tuning question
...in the
NetworkManager configuration:
$ nmcli con show
NAME UUID TYPE DEVICE
WAN 9574b606-8f6d-3edc-95ad-8165df0f3fce ethernet enp2s0
LAN c726b168-1fcd-4dc5-a01d-8ad8a1ba38ee ethernet enp3s1
Squid is acting as a transparent proxy server:
$ sudo grep http_port /etc/squid/squid.conf
http_port 3128 transparent
In my firewall configuration, all requests to port 80 (HTTP) are redirected to
port 3128:
$ sudo firewall-cmd --permanent
--add-forward-port=port=80:proto=tcp:toport=3128:toaddr=192.168.3.1
$ sudo firewall-cmd --reload
$ sudo firewall-cmd --list-al...
2016 Feb 04
0
Squid as interception HTTPS proxy under CentOS 7
...e ACL section to list your (internal) IP networks
> # from where browsing should be allowed
> http_access allow localnet
> http_access allow localhost
>
> # And finally deny all other access to this proxy
> http_access deny all
>
> # Squid normally listens to port 3128
> #http_port 3128
>
> # Uncomment and adjust the following to add a disk cache directory.
> #cache_dir ufs /var/spool/squid 100 16 256
>
> # Leave coredumps in the first cache dir
> coredump_dir /var/spool/squid
>
> #
> # Add any of your own refresh_pattern entries above these.
> #...
2018 Mar 09
3
SELinux breaks Squid's ssl_crtd helper
...t 777 # multiling http
acl CONNECT method CONNECT
# R?gles d'acc?s
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow localnet
http_access allow localhost
http_access deny all
# Ports du proxy
http_port 3130
http_port 3128 intercept
https_port 3129 intercept ssl-bump \
cert=/etc/squid/ssl_cert/nestor.microlinux.lan.pem \
generate-host-certificates=on dynamic_cert_mem_cache_size=4MB
# Emplacement de ssl_crtd et du cache des certificats TLS
sslcrtd_program /usr/lib64/squid/ssl_crtd -s /var/lib/...
2006 Jul 21
1
Unable to configure squid transparent proxy on Centos4.0
...92.168.2.126/24
Debian:
eth0: 192.168.2.83/24 gateway: 192.168.2.126/24 (eth1 of Centos)
Squid works fine if I manually add the proxy settings in any browser for the
clients of network (192.168.1.0) but as I want to configure transparent
proxy I have added these lines to squid.conf
http_port 5678
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
iptables configuration Only one rule is there
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 5678
I can access the LAN serve...
2012 Jan 21
1
squid transparent proxy problem
Greetings,
I installed a squid 3.1.10.i686 squid to a centos 6.2i686. The proxy is
working fine with the default config.
After I decided to use it as a transparent proxy, I added two lines to
config: http_proxy 10.0.5.1:3128 transparent, always_direct allow all
http_port 10.0.5.1:3128 transparent
#
# Recommended minimum configuration:
#
acl manager proto cache_object
#acl localhost src 127.0.0.1/32 ::1
acl localhost src 127.0.0.1/32
#acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
# Example rule allowing access from your...
2009 Feb 02
1
squid stops working several times a day
...(562.6 MiB) TX bytes:639895003 (610.2 MiB)
Interrupt:185
and the disk space is plenty.
Has anybody had a similar problem and
how would you debug it please?
Thank you for any hints
Alex
PS: Below my config file:
[root at ablprx01 squid]# grep -v ^# /etc/squid/squid.conf | grep -v ^$
http_port 3128
http_port 8080
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_dir ufs /var/spool/squid 40000 16 256
access_log /var/log/squid/access.log squid
dns_defnames on
refresh_pattern ^ftp:...
2018 Mar 11
2
Squid vs. iptables redirection: exception for certain domains ?
...I have setup Squid as a transparent HTTP+HTTPS proxy in my local
network. All web traffic gets handed over to Squid by an iptables script
on the server. Here's the relevant section in /etc/squid/squid.conf:
--8<-------------------------------------------------------------
# Ports du proxy
http_port 3130
http_port 3128 intercept
https_port 3129 intercept ssl-bump \
cert=/etc/squid/ssl_cert/amandine.sandbox.lan.pem \
generate-host-certificates=on dynamic_cert_mem_cache_size=4MB
--8<-------------------------------------------------------------
And here's the corresponding section of...
2015 Sep 27
1
dovecot, fts, solr5 patch, fuzzy search
...c/plugins/fts-solr/solr-connection.c 2015-05-13
17:14:45.000000000 +0300
+++
dovecot-2.2.18.patch/src/plugins/fts-solr/solr-connection.c 2015-09-27
19:47:40.363843359 +0300
@@ -432,7 +432,6 @@
solr_connection_select_response, conn);
http_client_request_set_port(http_req, conn->http_port);
http_client_request_set_ssl(http_req, conn->http_ssl);
- http_client_request_add_header(http_req, "Content-Type", "text/xml");
http_client_request_submit(http_req);
conn->request_status = 0;
After that it works just fine. And it seems it doesn't hurt
comp...
2015 Mar 06
2
Squid on CentOS 7: few questions
...orts port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
# R?gles d'acc?s
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
# Port du proxy
http_port 3128
# Taille du cache dans la RAM
cache_mem 256 MB
# Vidage syst?me
coredump_dir /var/spool/squid
# Dur?e de vie des fichiers sans date d'expiration
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0
--8&...
2013 Oct 02
2
Problem with squid+ntlm+samba
...ind.logdefault = SYSLOG:NOTICE:DAEMON
[domain_realm].domain.local = DOMAIN.LOCAL
[appdefaults]pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 1
squid.conf
# Do not edit manually !http_port 192.168.0.1:8080icp_port 0
pid_filename /var/run/squid.pidcache_effective_user proxycache_effective_group proxyerror_directory /usr/local/etc/squid/errors/Englishicon_directory /usr/local/etc/squid/iconsvisible_hostname localhostcache_mgr admin at localhostaccess_log /var/squid/logs/access.logcache...
2007 Feb 09
1
trouble https multiple uplinks... how?
...es -t nat -A POSTROUTING -j SNAT -o eth1 --to-source 172.17.1.1
iptables -t nat -A POSTROUTING -j SNAT -o eth2 --to-source 172.18.1.1
------------
squid config :
------------
visible_hostname my_isp.net
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
http_port 3128
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
cache_mem 512 MB
cache_replacement_policy heap GDSF
memory_replacement_policy heap GDSF
cache_dir ufs /cache 6000 14 256
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl local...
2007 Jun 02
0
ssh tunnel proxy setup
.../-------------------------------/
| host1 |=========//Tunnel ssh
//====================| Host2 |
| squid parent |
| squid
http_port 3128 |
| 127.0.0.1:8080
|
| acl accept all |
\-------------------------\
\----------------------...
2007 Jun 02
0
Tunnel connection channel Setup with proxy server
.../-------------------------------/
| host1 |=========//Tunnel ssh
//====================| Host2 |
| squid parent |
| squid http_port
3128 |
| 127.0.0.1:8080
|
| acl accept all |
\-------------------------\
\---------------------...
2011 Nov 17
2
Squid 3 with SSL Bump on Centos 5.7
I have Centos 5.7 AMD64; is there a way to have Squid 3 with SSLBump feature in Centos 5.7? I appreciate any help on that?
2007 Jun 12
1
How to setup both Transpaent Proxy and firewall on the same Machine.
...RWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT DROP
iptables -A FORWARD DROP
iptables -A OUTPUT DROP
in addition to that, There are many rules , ALL work fine.
in squid.conf file, I have added below rules,
http_port 3128
cache_mem 64 MB
cache_dir ufs /var/spool/squid 100 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
And, Then, I...
2015 Mar 06
0
Squid on CentOS 7: few questions
...acl Safe_ports port 591 # filemaker
> acl Safe_ports port 777 # multiling http
> acl CONNECT method CONNECT
>
> # R?gles d'acc?s
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow localnet
>
> # Port du proxy
> http_port 3128
>
> # Taille du cache dans la RAM
> cache_mem 256 MB
>
> # Vidage syst?me
> coredump_dir /var/spool/squid
>
> # Dur?e de vie des fichiers sans date d'expiration
> refresh_pattern ^ftp: 1440 20% 10080
> refresh_pattern ^gopher: 1440 0...
2020 Jul 30
1
ntlm authentication issues
...les dns
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis
#/ETC/KRB5.CONF
[libdefaults]
dns_lookup_realm = false
dns_lookup_kdc = true
default_realm = EMPRESA.COM.BR
#/ETC/SQUID/SQUID.CONF
http_port 3128
cache_mem 512 MB
cache_swap_low 80
cache_swap_high 90
maximum_object_size 512 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 4096 KB
cache_replacement_policy heap LFUDA
memory_replacement_policy heap LFUDA
quick_abort_min -1 KB
detect_broken_pconn on
fqdncache_size 1024
refr...