Squid block domain transparent

debian-wheezyPROXYsquid

How to block domain with transparent on Debian Squid?

http_port 3128 transparent

but I still have to set the manual proxy on the browser.

NB: I'm using Debian Wheezy with squid 2.7

Best Answer

If you want to block specific domain using squid proxy, you can use acl to define the domain to block and apply it to specific client IPs.

acl bad_dom dstdomain example.com
http_access deny bad_dom

You need to pay attention to other defined ACLs, because ACLs order does matter. So, this htt_access deny line should appear before allow everything else to some clients.

Related Solutions

Linux – Squid 2.7.STABLE3-4.1 as a transparent proxy on Ubuntu Server 9.04

Make sure you don't have conflicting port definitions, squid will probably listen on 3128 anyway, so you probably need to modify the existing statement, not add a new one.

Also try manually setting the box as a proxy and make sure it's otherwise working before making it transparent.

Firewall – How to configure PFSense firewall with external transparent Squid proxy

SO in PF you have to do the following:

int_if="fxp0"
ext_if="em0"

rdr on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port 3128

pass in on $int_if inet proto tcp from any to 127.0.0.1 port 3128 keep state
pass out on $ext_if inet proto tcp from any to any port www keep state

Be sure that your SQUID has the transparent module when you compiled it, or the package is transparent enabled you are using.

Best Answer

Related Solutions

Linux – Squid 2.7.STABLE3-4.1 as a transparent proxy on Ubuntu Server 9.04

Firewall – How to configure PFSense firewall with external transparent Squid proxy

Related Topic