Coder Social home page Coder Social logo

diladele / squid-ubuntu Goto Github PK

View Code? Open in Web Editor NEW
165.0 18.0 61.0 64 KB

Latest version of Squid proxy recompiled with support for HTTPS filtering and SSL inspection on Ubuntu 22.04 LTS. Used in Web Safety web filter for Squid.

Home Page: https://docs.diladele.com

Shell 100.00%
squid ssl-inspection https-filtering ubuntu squid-proxy web-filtering web-safety icap dns-server

squid-ubuntu's Introduction

Squid for Ubuntu

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Squid has extensive access controls and makes a great server accelerator. It runs on most available operating systems, including Windows and is licensed under the GNU GPL. http://www.squid-cache.org

This project provides scripts needed to recompile modern version of Squid on Ubuntu 22.04 LTS with support for HTTPS filtering and SSL inspection. Results of the compilation are available in the public repos hosted by diladele.com.

Squid 6.10 Repo for Ubuntu 22.04 LTS

If you are installing Squid 6.10 for the first time from diladele.com repo, run the following commands:

# add diladele apt key
wget -qO - https://packages.diladele.com/diladele_pub.asc | sudo apt-key add -

# add new repo
echo "deb https://squid610.diladele.com/ubuntu/ jammy main" \
    > /etc/apt/sources.list.d/squid610.diladele.com.list

# and install
apt-get update && apt-get install -y \
    squid-common \
    squid-openssl \
    squidclient \
    libecap3 libecap3-dev

If you have installed previous versions of Squid 6 from this repo then run "sudo apt-get update && sudo apt-get upgrade". Also check that your current squid.conf file from previous version is not overwritten.

Squid 5.7 Repo for Ubuntu 20.04 LTS

Older versions of Squid can also be installed from old versions of diladele.com repo using the following commands:

# add diladele apt key
wget -qO - https://packages.diladele.com/diladele_pub.asc | sudo apt-key add -

# add new repo
echo "deb https://squid57.diladele.com/ubuntu/ focal main" \
    > /etc/apt/sources.list.d/squid57.diladele.com.list

# and install
apt-get update && apt-get install -y \
    squid-common \
    squid-openssl \
    squidclient \
    libecap3 libecap3-dev

If you have installed previous versions of Squid 5 from this repo then run "sudo apt-get update && sudo apt-get upgrade". Also check that your current squid.conf file from previous version is not overwritten.

HTTP and HTTPS Filtering Using Squid and ICAP

In case you need a high quality HTTP(S) web filtering/secure web gateway solution, consider taking a look at Web Safety.

Web Safety for Squid Proxy is an ICAP web filtering server/secure web gateway that integrates with Squid proxy server and provides rich content and web filtering functionality to sanitize Internet traffic passing into an internal home/enterprise network. It may be used to block illegal or potentially malicious file downloads, remove annoying advertisements, check downloaded files for viruses, prevent access to various categories of web sites and block resources with adult/explicit content.

Web Safety also has a user friendly Admin UI that you can use to manage your Squid proxy from the browser.

To try it out, have a look at Virtual Appliance ESXi/Hyper-v, deploy in Microsoft Azure or deploy in Amazon AWS

Web Filtering Proxy for Microsoft Windows

If your need a native Windows only web filtering solution consider taking a look at Web Filtering Proxy. Web Filtering Proxy for Microsoft Windows is a new implementation of web filtering proxy/secure web gateway running natively on Microsoft Windows. It can be easily integrated with Microsoft Active Directory, work as Secure Web Proxy, decrypt HTTPS traffic, filter HTTP requests and responses and inspect contents of HTML pages.

The proxy is installed natively on Microsoft Windows and can be managed by any administrator using Microsoft Management Console. The Admin Guide is available online.

DNS Filter

In case full featured HTTPS decryption and web filtering is not possible in your network, consider using our lightweight DNS filtering solution https://dnssafety.diladele.com. Dns Safety filter is a DNS forwarding server (like dnsmasq, pi-hole) with extensive filtering capabilities. It allows administrator to filter access to domain names by categories, easily block access to user specified domains and provides different access policies for different groups of machines in your network.

Dns Safety is supposed to be deployed as primary DNS server in your local network and can forward DNS requests to your ISP's DNS server, Google Public DNS, OpenDNS and other third party DNS providers. Internal DNS requests can be forwarded to internal DNS servers (for example Active Directory domain controllers).

The filter can be easily managed from full featured Web UI deployed on Debian 10 or Ubuntu 18. Other operating systems might be supported too in the near future.

Help

All questions/comments and suggestions are welcome at [email protected] or in squid mailing list http://www.squid-cache.org/Support/mailing-lists.html. Squid documentation can be found at http://www.squid-cache.org

Credits

We admire people working on Squid Cache server, who spend their time free of charge and deliver great product to all of us.

squid-ubuntu's People

Contributors

ea-at-diladele-com avatar ra-at-diladele-com avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

squid-ubuntu's Issues

Architecture "i386" not supported // unfulfilled dependencies libnettle6

Hello everybody,
am currently in the process of completely rebuilding SQUID on an Ubuntu 20.04.

I currently have the problem that if I take the standard version (apt install Squid), I get https_port 443 accel vhost cert = 'xy.cer' key = 'xy.key' connection-auth = on options = NO_SSLv3 cipher with the following command = HIG in Squid.conf the following error when starting SQUID: Unknown https_port option. I've tried a lot here, but I can't get it to work under 4.10.

So I was hoping that your package would help, but when I follow the steps from the Github I get the following errors.

apt-get update
N: Loading of the configured file »main / binary-i386 / Packages« is skipped because the depot »http://squid413.diladele.com/ubuntu bionic InRelease« does not support the architecture »i386«.

apt-get install squid
Some packages could not be installed. That can mean that
You have requested an impossible situation or when you have the
Unstable distro use that some required packages still
have not been created or have not yet left Incoming.
The following information may help you resolve the situation:

The following packages have unfulfilled dependencies:
squid: Depends on: libnettle6 but cannot be installed
E: Problems cannot be corrected, you have defective packages withheld.

Can you help me here?

ERROR: logformat squid is already defined. Ignoring

Hi,

I try to change logformat, because I want to log dns names, instead of ip adresses - so I changed the a to A from the default definition. But squid's cache.log shows the error message:

ERROR: logformat squid is already defined. Ignoring

But logformat is in squid.conf only once defined. I also checked the includes from and the /etc/squid/conf.d/*

Any Idea what happened?

I use your version:


root@proxy:~# dpkg -l|grep squid
ii  squid                                 4.6-1                                       amd64        Full featured Web Proxy cache (HTTP proxy)
ii  squid-common                          4.6-1                                       all          Full featured Web Proxy cache (HTTP proxy) - common files
ii  squid-langpack                        20170901-1                                  all          Localized error pages for Squid
ii  squidanalyzer                         6.6-1ubuntu0~bionic1                        all          Squid proxy log analyzer and report generator
ii  squidclient                           4.6-1                                       amd64        Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message utility
ii  squidguard                            1.5-6                                       amd64        filter and redirector plugin for Squid

Upgrade squid 4 to squid 5

This isn't a bug, but I couldn't find a 'help wanted' label.

I've followed the steps provided here to install squid 4.13 on Ubuntu Server 20.04.
How do I upgrade to squid 5.5?
I think I should remove this file /etc/apt/sources.list.d/squid413-ubuntu20.diladele.com.list
before adding the source for 5.5, right?
what else do I have to do?

Also, I would like to keep the old cache from squid 4.13 if there's a way to do that, because my internet is slow and limited.

Thanks.

Ubuntu 18.04

Hello

Can I use this instruction with Ubuntu serve 18.04?

Thanks

request upgrade

great project. can you upgrade to v5.7 for ubuntu 22.04 LTS?

Note: in reference to the debian tracker unstable ends at 5.6. Now 5.7 is an stable version (Ubuntu 22.04 install 5.2 by default)

Thanks

Can’t Upgrade Diladele Squid on Ubuntu 22.04

root@cloud:~# apt upgrade squid-openssl squidclient
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Calculating upgrade... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 squid-openssl : Depends: libldap-2.4-2 (>= 2.4.7) but it is not installable
                 Depends: libnettle7 but it is not installable
                 Depends: libssl1.1 (>= 1.1.0) but it is not installable
 squidclient : Depends: libnettle7 but it is not installable
E: Broken packages

ext_session_acl can not initialize db via tdb_open()

Ubuntu 20.04.4, squid-openssl 5.5

$ dpkg -l | grep squid
rc squid 4.10-1ubuntu1.5 amd64 Full featured Web Proxy cache (HTTP proxy)
ii squid-common 5.5-1 all Full featured Web Proxy cache (HTTP proxy) - common files
ii squid-langpack 20191103-1 all Localized error pages for Squid
ii squid-openssl 5.5-1 amd64 Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
ii squidclient 5.5-1 amd64 Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message utility

$ id
uid=13(proxy) gid=13(proxy) groups=13(proxy),124(winbindd_priv)
$ ls -ld /var/lib/squid/
drwxr-xr-x 3 proxy proxy 53 Jun 27 17:37 /var/lib/squid
$ ls -l /var/lib/squid
total 0
-rw-rw---- 1 proxy proxy 0 Jun 27 17:37 session
-rw-rw---- 1 proxy proxy 0 Jun 27 16:54 session.db
drwxr-xr-x 3 proxy proxy 48 Jun 27 16:25 ssl_db

$ /usr/lib/squid/ext_session_acl -b /var/lib/squid/session.db
FATAL: /usr/lib/squid/ext_session_acl: Failed to open session db '/var/lib/squid/session.db'
$ /usr/lib/squid/ext_session_acl -b /var/lib/squid/
FATAL: /usr/lib/squid/ext_session_acl: Failed to open session db '/var/lib/squid/session'
$ /usr/lib/squid/ext_session_acl -b /var/lib/squid
FATAL: /usr/lib/squid/ext_session_acl: Failed to open session db '/var/lib/squidsession'

$ ldd /usr/lib/squid/ext_session_acl
linux-vdso.so.1 (0x00007ffeb83e5000)
libtdb.so.1 => /lib/x86_64-linux-gnu/libtdb.so.1 (0x00007fe13908d000)
libstdc++.so.6 => /lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007fe138eab000)
libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007fe138e90000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fe138c9e000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007fe138c7b000)
libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007fe138b2c000)
/lib64/ld-linux-x86-64.so.2 (0x00007fe1390ba000)

No ssl_crtd?

ssl_crtd is not included in this package. Is it not compiled for ssl support?

Install error on Ubuntu 18.04 i386

Hello,

When using the script "ubuntu18/04_Install_squid.sh", dpkg say that he can't fin package with suffix "_amd64.deb".

You need to correct this in order to build it into i386 and amd64.

/var/run/squid should be created

When running Squid in SMP mode, the IPC sockets are created in /var/run/squid. When that directory is missing, or does not have the right permissions, Squid is not going to listen on the configured http_port and shows the following message in the cache.log: commBind Cannot bind socket FD 20

readme.md fix

Pls fix the Readme: trusty need to be changed to xenial in code example

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.