search

diladele / squid-windows

Squid Proxy built for Microsoft Windows
GNU General Public License v2.0
188 stars 40 forks source link

Is it possible to use transparent Squid on Windows? #26

Open ra-at-diladele-com opened 9 years ago

ra-at-diladele-com commented 9 years ago

"... currently use Windows 64bit 8.1 with 2 NIC, 1 with free internet access and other releasing access to LAN, squid 2.7.STABLE8. To redirect all traffic from port 80 to the squid, I'm using (SoftPerfect Bandwidth Manager 3.0.9 Full). My squid is in transparent mode (squid.conf with the line "http_port 3128 transparent") ..."

Need to check if this can be done with 3.5 build.

itskvad commented 9 years ago

Not currently possible.

See here: https://groups.google.com/forum/#!topic/quintolabs-content-security-for-squid-proxy/zEkabckH1S8

tobiastromm commented 7 years ago

Hi.

Any news for that? I am still using 2.7.STABLE8 because of that.

I also need transparent proxy. It is possible to enable it?

Thanks a lot.

leiwen0614 commented 6 years ago

Hi @tobiastromm what windows version are you using in transparent mode for 2.7.STABLE8? I 've came across lot of discussions, and ends up here: http://lists.squid-cache.org/pipermail/squid-users/2017-May/015184.html

I am also looking for a transparent squid proxy solution for windows.

tobiastromm commented 6 years ago

Hi @leilei8814.

You can download this Squid version here: http://squid.acmeconsulting.it/download/dl-squid.html

The diladele squid don't accept transparent proxy : ( I already send a mail for diladele...

If I can help you just mail me.

leiwen0614 commented 6 years ago

Hi @tobiastromm thanks for your replay. May I ask what windows version are you using? we have to stick with windows server 2016.

tobiastromm commented 6 years ago

Windows Server 2008 R2, but I think it can work with Server 2016.

yadij commented 6 years ago

FYI: To those of you staying with Squid 2.7 because it allowed "transparent" to be configured. Please be aware that Squid-2 does not actually do what "transparent" is supposed to do. It simply ignores the NAT failures and opens your network to malware hiding behind the CVE-2009-0801 issues.

ssteeltm commented 5 years ago

"Transparent" working ok! Just set to ssl-bump, then redirect from server/gateway/machine from 80/443 to squid port.

yadij commented 5 years ago

@ssteeltm if that alone works your Squid is broken. See my last comment. Windows lacks a way to get the mandatory NAT information from the OS to Squid. The PROXYv2 protocol is an attempt to work around this issue, but is not supported by most NAT systems.

omaidb commented 2 years ago

"Transparent" working ok!

Just set to ssl-bump, then redirect from server/gateway/machine from 80/443 to squid port.

你是如何做到的啊……能讲述下您的squid版本以及您的配置文件吗？ssl-bump如何配置