Setting up Transparent Squid Proxy - Revision history

Sertonix: replace /etc/init.d with rc-service

2023-11-17T10:09:51Z

replace /etc/init.d with rc-service

← Older revision		Revision as of 10:09, 17 November 2023
Line 117:		Line 117:

	Start squid:		Start squid:
	{{Cmd\|~~/etc/init.d/~~squid start}}		{{Cmd\|rc-service squid start}}

	Add squid to boot-up sequence:		Add squid to boot-up sequence:

John3-16: Categorized: Proxy Server

2017-09-21T02:55:22Z

Categorized: Proxy Server

← Older revision		Revision as of 02:55, 21 September 2017
Line 143:		Line 143:

	[[Category:Server]]		[[Category:Server]]
			[[Category:Proxy Server]]

Ginjachris at 12:04, 24 February 2014

2014-02-24T12:04:29Z

← Older revision		Revision as of 12:04, 24 February 2014
Line 1:		Line 1:
	~~{{Draft}}~~

	This document covers how to set up squid as a transparent proxy server.		This document covers how to set up squid as a transparent proxy server.

Ginjachris: /* Install Squid */

2014-02-24T12:04:14Z

Install Squid

← Older revision		Revision as of 12:04, 24 February 2014
Line 142:		Line 142:
	{{Cmd\|shorewall restart}}		{{Cmd\|shorewall restart}}

	Alternatively, you can configure Squid to listen on port 80. With this method, it is usual for either the proxy to be configured 'in-line' so that due to physical cabling traffic must pass through the proxy (in this instance Squid will usually run on the same physical box as a router, which will be the clients' default gateway), or alternatively (as described above) traffic on port 80 is re-directed by a router or firewall to the proxy (but remains on port 80). WCCP on a Cisco router is one method to redirect the traffic in this way.		Alternatively, you can configure Squid to listen on port 80. With this method, it is usual for either the proxy to be configured 'in-line' so that due to physical cabling traffic must pass through the proxy (in this instance Squid will usually run on the same physical box as a router, which will be the clients' default gateway), or alternatively (as described above) traffic on port 80 is re-directed by a router or firewall to the proxy (but remains on port 80). [https://en.wikipedia.org/wiki/Web_Cache_Communication_Protocol WCCP] on a Cisco router is one method to redirect the traffic in this way.

	[[Category:Server]]		[[Category:Server]]

Ginjachris: /* Install Squid */

2013-12-27T11:20:10Z

Install Squid

← Older revision		Revision as of 11:20, 27 December 2013
Line 142:		Line 142:
	{{Cmd\|shorewall restart}}		{{Cmd\|shorewall restart}}

	Alternatively, you can configure Squid to listen on port 80. With this method, it is usual for either the proxy to be configured 'in-line' so that due to physical cabling traffic must pass through the proxy, or alternatively (as described above) traffic on port 80 is re-directed by a router or firewall to the proxy (but remains on port 80). WCCP on a Cisco router is one method to redirect the traffic in this way.		Alternatively, you can configure Squid to listen on port 80. With this method, it is usual for either the proxy to be configured 'in-line' so that due to physical cabling traffic must pass through the proxy (in this instance Squid will usually run on the same physical box as a router, which will be the clients' default gateway), or alternatively (as described above) traffic on port 80 is re-directed by a router or firewall to the proxy (but remains on port 80). WCCP on a Cisco router is one method to redirect the traffic in this way.

	[[Category:Server]]		[[Category:Server]]

Ginjachris: /* Install Squid */

2013-12-20T12:16:06Z

Install Squid

← Older revision		Revision as of 12:16, 20 December 2013
Line 19:		Line 19:

	<pre>		<pre>
	# This makes squid transparent in versions before squid 3.1		## This makes squid transparent in versions before squid 3.1
	#http_port 8080 transparent		#http_port 8080 transparent
	# For squid 3.1 and later, use this instead		## For squid 3.1 and later, use this instead
	http_port 8080 intercept		http_port 8080 intercept
			## Note that you need Squid 3.4 or above to support IPv6 for intercept mode. Requires ip6tables support

	visible_hostname proxy.example.com		visible_hostname proxy.example.com

Ginjachris: /* Install Squid */

2013-12-20T12:11:55Z

Install Squid

← Older revision		Revision as of 12:11, 20 December 2013
Line 19:		Line 19:

	<pre>		<pre>
	# This makes squid transparent		# This makes squid transparent in versions before squid 3.1
	http_port 8080 transparent		#http_port 8080 transparent
			# For squid 3.1 and later, use this instead
			http_port 8080 intercept

	visible_hostname proxy.example.com		visible_hostname proxy.example.com

Ginjachris at 14:23, 29 November 2013

2013-11-29T14:23:11Z

← Older revision		Revision as of 14:23, 29 November 2013
Line 7:		Line 7:
	* Your proxy server will reside in a DMZ zone, separated from the network segment your clients are in. Other implementations are covered [http://wiki.squid-cache.org/SquidFaq/InterceptionProxy here].		* Your proxy server will reside in a DMZ zone, separated from the network segment your clients are in. Other implementations are covered [http://wiki.squid-cache.org/SquidFaq/InterceptionProxy here].
	** In order to transparently redirect web traffic from your clients to the proxy server in the DMZ, you will need to configure your intercepting router to DNAT traffic.		** In order to transparently redirect web traffic from your clients to the proxy server in the DMZ, you will need to configure your intercepting router to DNAT traffic.

			'''Note:''' If you're looking to setup an explicit squid proxy, or don't know what the differences are, please see [[Setting up Explicit Squid Proxy\|this wiki page]]

	=== Install Squid ===		=== Install Squid ===

Ginjachris: /* Install Squid */

2013-11-04T11:48:12Z

Install Squid

← Older revision		Revision as of 11:48, 4 November 2013
Line 137:		Line 137:
	{{Cmd\|shorewall restart}}		{{Cmd\|shorewall restart}}

	Alternatively, you can configure Squid to listen on port 80. With this method, it is usual for either the proxy to be configured 'in-line' so that due to physical cabling traffic must pass through the proxy, or alternatively (as described above) traffic on port 80 is re-directed by a router or firewall to the proxy (but remains on port 80).		Alternatively, you can configure Squid to listen on port 80. With this method, it is usual for either the proxy to be configured 'in-line' so that due to physical cabling traffic must pass through the proxy, or alternatively (as described above) traffic on port 80 is re-directed by a router or firewall to the proxy (but remains on port 80). WCCP on a Cisco router is one method to redirect the traffic in this way.

	[[Category:Server]]		[[Category:Server]]

Ginjachris: /* Install Squid */

2013-11-04T11:45:19Z

Install Squid

← Older revision		Revision as of 11:45, 4 November 2013
Line 119:		Line 119:
	{{Cmd\|rc-update add squid default}}		{{Cmd\|rc-update add squid default}}

	Remember to add port 8080 to the permitted ports clients can connect on to any firewalls on your proxy server or ~~inbetween~~ the proxy and the clients.		Remember to add port 8080 to the permitted ports clients can connect on to any firewalls on your proxy server or in-between the proxy and the clients.

	If you are running an Alpine Linux firewall on the firewall separating the Proxy from the clients, you will need to redirect all traffic from your client subnet on port 80 to the proxy server on port 8080 to allow web traffic to be proxied.		If you are running an Alpine Linux firewall on the firewall separating the Proxy from the clients, you will need to redirect all traffic from your client subnet on port 80 to the proxy server on port 8080 to allow web traffic to be proxied.
Line 137:		Line 137:
	{{Cmd\|shorewall restart}}		{{Cmd\|shorewall restart}}

	Alternatively, you can configure Squid to listen on port 80.		Alternatively, you can configure Squid to listen on port 80. With this method, it is usual for either the proxy to be configured 'in-line' so that due to physical cabling traffic must pass through the proxy, or alternatively (as described above) traffic on port 80 is re-directed by a router or firewall to the proxy (but remains on port 80).

	[[Category:Server]]		[[Category:Server]]