Comments on: How to Setup “Squid Proxy” Server on Ubuntu and Debian

By: wazzu

wazzu — Mon, 17 Jan 2022 18:46:49 +0000

Hi,

I have an error after rebooting the device when I force to restart the service works. I tried with the default template squid.conf and at booting works well.

When I use my squid.conf I’m getting an error at reboot, I reviewed the configuration using sudo squid -k parse and I did not find errors.

Could you please provide me with advice?

Take a look at the error.

● squid.service – Squid Web Proxy Server
Loaded: loaded (/lib/systemd/system/squid.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Fri 2022-01-14 18:11:55 CST; 3min 19s ago
Docs: man:squid(8)
Process: 2300 ExecStartPre=/usr/sbin/squid –foreground -z (code=exited, status=0/SUCCESS)
Process: 2315 ExecStart=/usr/sbin/squid –foreground -sYC (code=exited, status=1/FAILURE)
Main PID: 2315 (code=exited, status=1/FAILURE)

Jan 14 18:11:54 raspib4bcm squid[2315]: Removing PID file (/run/squid.pid)
Jan 14 18:11:55 raspib4bcm systemd[1]: squid.service: Main process exited, code=exited, status=1/FAILURE
Jan 14 18:11:55 raspib4bcm systemd[1]: squid.service: Killing process 2346 (squid) with signal SIGKILL.
Jan 14 18:11:55 raspib4bcm systemd[1]: squid.service: Killing process 2347 (squid) with signal SIGKILL.
Jan 14 18:11:55 raspib4bcm systemd[1]: squid.service: Killing process 2346 (squid) with signal SIGKILL.
Jan 14 18:11:55 raspib4bcm systemd[1]: squid.service: Killing process 2347 (squid) with signal SIGKILL.
Jan 14 18:11:55 raspib4bcm systemd[1]: squid.service: Failed with result ‘exit-code’.
Jan 14 18:11:55 raspib4bcm systemd[1]: squid.service: Unit process 2346 (squid) remains running after unit stopped.
Jan 14 18:11:55 raspib4bcm systemd[1]: squid.service: Unit process 2347 (squid) remains running after unit stopped.
Jan 14 18:11:55 raspib4bcm systemd[1]: Failed to start Squid Web Proxy Server.

By: Dave

Dave — Thu, 04 Feb 2021 19:08:14 +0000

Hi, I am wondering if this “great” guide could be updated to include transparent proxy setup/configuration. I don’t want to set up individual clients and guests and simply force them all to use the proxy to access the internet.

I read somewhere about using IP tables but can’t seem to get my head around it.

# iptables -t nat -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 92.168.0.1:3128
# iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128

Thanks in advance.

Ubuntu 20.04 on a Pi4 with webmin, UFW & squid 4.10.

By: Gabriel Moldovan

Gabriel Moldovan — Thu, 17 Sep 2020 11:16:42 +0000

but to create a whitelist the procedure is the same as the blacklist?

thank you so much.

By: Fabrizio

Fabrizio — Fri, 26 Jun 2020 14:04:20 +0000

In reply to rat from the strawberry field.

I agree that nowadays it is complicated to use a proxy, in the past without too many mobile phones connected and with more HTTP sites to cache, it was more usable.

Today what I use a proxy for is just to deny websites for specific users and define download pools.

For mobile phones, the best usage is to implement freeradius and some sort of captive portal.

By: rat from the strawberry field

rat from the strawberry field — Thu, 25 Jun 2020 18:28:44 +0000

In reply to rat from the strawberry field.

A little thing left out: I’m using squid to log which domains were accessed by the clients. But it is incomplete because android devices can bypass the proxy. And I can’t stop them on the router, because if I forbid all traffic, except the proxy’s own, then many features get unusable on the mobiles. :(