Wednesday, February 8, 2023

Basic https squid proxy configuration

# Basic proxy configuration
http_port 3128
cache_dir ufs /var/spool/squid 100 16 256

# SSL/TLS configuration
acl SSL_ports port 443
acl Safe_ports port 80
acl Safe_ports port 443
acl CONNECT method CONNECT
ssl_bump peek all
ssl_bump bump all

# Access control
http_access allow Safe_ports
http_access deny !Safe_ports
http_access allow CONNECT SSL_ports
http_access deny all

# Forward proxy configuration
forwarded_for delete
via off

# Disable caching of SSL/TLS content
no_cache deny SSL_ports

# iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source <public_ip>

etho = outside interface connecting to internet


No comments: