LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-28-2017, 02:24 AM   #1
Muhammad Jawwad
LQ Newbie
 
Registered: Feb 2017
Posts: 3

Rep: Reputation: Disabled
TRANSPARENT http + https filtering with squid


Assalam O Alaikum


Hello everyone,

Situation: i have debian jessie running on a raspberrypi where squid is installed, configured for filtering HTTP sites TRANSPARENTLY(without the knowledge of clients).

Help Required For:
i want to filter HTTPS websites too in parallel to HTTP sites.

Some Extra Queries:
I also want to make sure if it is possible to use, squid proxy or any other*, for TRANSPARENTLY filtering both http/https sites.







*if any other please direct me in the right direction.
 
Old 04-30-2017, 03:51 PM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 23,830

Rep: Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983
Quote:
Originally Posted by Muhammad Jawwad View Post
Assalam O Alaikum
Hello everyone,

Situation: i have debian jessie running on a raspberrypi where squid is installed, configured for filtering HTTP sites TRANSPARENTLY(without the knowledge of clients).

Help Required For:
i want to filter HTTPS websites too in parallel to HTTP sites.

Some Extra Queries:
I also want to make sure if it is possible to use, squid proxy or any other*, for TRANSPARENTLY filtering both http/https sites.
Think about what you're asking. If you have a proxy running without the knowledge of the users, and you filter a site, then what, exactly, do you think they're going to see when they visit a site that's been filtered??? They're then going to know all about the proxy, then bypass it. And if you want to put a web filter in, the very first hit in Google for "how to filter websites with a transparent squid proxy" is:
http://sharadchhetri.com/2014/03/20/...isted-in-file/

Read the "Question Guidelines" link in my posting signature, and please do basic research first before posting.
 
Old 04-30-2017, 04:30 PM   #3
Muhammad Jawwad
LQ Newbie
 
Registered: Feb 2017
Posts: 3

Original Poster
Rep: Reputation: Disabled
Ibam sorry for incomplete information, I am running ap in rapberrypi. This proxy will filter the traffic of this hotspot.
I really need to do it for my internship . A task at internship.

That link though which you provided. I have already configured my acl for http.
I need to filter https. For a land networkin an office.

Last edited by Muhammad Jawwad; 04-30-2017 at 04:37 PM.
 
Old 04-30-2017, 05:49 PM   #4
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 23,830

Rep: Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983
Quote:
Originally Posted by Muhammad Jawwad View Post
Ibam sorry for incomplete information, I am running ap in rapberrypi. This proxy will filter the traffic of this hotspot.
I really need to do it for my internship . A task at internship.
So, this is your homework, then. The machine you're running it on (in this case) doesn't matter. What you're asking for isn't part of how to do a 'transparent' proxy, as it will make the proxy EXTREMELY evident.
Quote:
That link though which you provided. I have already configured my acl for http. I need to filter https. For a land networkin an office.
...which you did not say when you posted. And again, putting "how to filter https sites with squid transparent proxy" into Google gives you:
https://www.howtoforge.com/filtering...fic-with-squid

...the very first hit. Again, please do basic research before posting. You probably found this site with an internet search, so try putting your questions into that same search engine and see what you get. We're happy to help with specific questions/problems, but you're essentially asking us to look up links to how-to guides for you.
 
Old 05-01-2017, 02:10 AM   #5
Muhammad Jawwad
LQ Newbie
 
Registered: Feb 2017
Posts: 3

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by TB0ne View Post
So, this is your homework, then. The machine you're running it on (in this case) doesn't matter. What you're asking for isn't part of how to do a 'transparent' proxy, as it will make the proxy EXTREMELY evident.

...which you did not say when you posted. And again, putting "how to filter https sites with squid transparent proxy" into Google gives you:
https://www.howtoforge.com/filtering...fic-with-squid

...the very first hit. Again, please do basic research before posting. You probably found this site with an internet search, so try putting your questions into that same search engine and see what you get. We're happy to help with specific questions/problems, but you're essentially asking us to look up links to how-to guides for you.
I don't mean to waste your time but i have already looked into google for this and got many sites but each with a different and unclear solution to my problem.

for instance, https://www.howtoforge.com/filtering...fic-with-squid here they are not making the proxy fully transparent as the admin has to install the certificates into the clients' browsers. I think this is not what a transparent means!
Please guide.

Last edited by Muhammad Jawwad; 05-01-2017 at 02:21 AM.
 
1 members found this post helpful.
Old 05-01-2017, 07:36 AM   #6
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 23,830

Rep: Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983Reputation: 6983
Quote:
Originally Posted by Muhammad Jawwad View Post
I don't mean to waste your time but i have already looked into google for this and got many sites but each with a different and unclear solution to my problem.
..and since you've not told us what, if anything, you've done/tried on your own is, how are we supposed to know??
Quote:
for instance, https://www.howtoforge.com/filtering...fic-with-squid here they are not making the proxy fully transparent as the admin has to install the certificates into the clients' browsers. I think this is not what a transparent means!
Please guide.
That's the same link I sent you. You've stated your question, and we understand it. What you haven't said is what you've done/tried, and what results you're getting, and what you WANT to get. Putting "transparent squid proxy block https" into Google pulls up 993,000 hits. Try that first.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
HTTPS filtering on clear OS 5.2 transparent mode Carafat Linux - Networking 4 05-31-2016 01:11 AM
HTTPS filtering on clear OS 5.2 transparent mode Carafat Linux - Newbie 1 05-25-2016 10:16 AM
HTTPS filtering on clear OS 5.2 transparent mode Carafat Linux - Security 1 05-25-2016 10:15 AM
HTTPS filtering on clear OS 5.2 transparent mode Carafat Linux - Server 3 05-25-2016 08:33 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 11:43 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration