Networking :: HTTPS Through Upstream Proxy
Oct 4, 2010
I am running a Linux firewall (IPcop) to bridge two networks. Hosts on network A have to use a proxy server in order to get online. This server runs a transparent proxy (squid) configured to use the proxy needed to connect to the internet as an upstream proxy, therefore meaning all the hosts on network B can connect to the internet without the user having to configure a proxy address.
The problem is that HTTPS also has to go through the upstream proxy, which I'm told can't be proxied by my server transparently because of security issues. This means that hosts on network B can't currently access HTTPS sites.
View 6 Replies
ADVERTISEMENT
Jul 7, 2010
I've been trying to make myself anonymous, but I cant find 'Tor' anywhere, tried 'yum & kpackagekit' neither have it. I did find 'Privoxy', installed it, set proxy for HTTP and HTTPS in Firefox, but it says 'unknown proxy' when I try to use it! I've been to the Privoxy web site and read through the 'User manual', but most of it is 'geek' to me!
View 8 Replies
View Related
Apr 6, 2011
I need to redirect all http/https/ftp traffic through the remote proxy, but when I changes connection settings in browser or in System->Preferences->Network Proxy it doesn't work well: instead of getting page content browser asks for saving some short (8 bytes) file with the same content for all requested pages. It happens in Chrome/Opera/Firefox. This proxy requires authorization and works on computer with Windos XP. It worked well when I was using Windows 7 and Proxifier, now I have Ubuntu 9.10 with all available updates.
View 3 Replies
View Related
Sep 17, 2010
I am working on a project to create a video conferencing environment. For this I use a default installation of BigBlueButton on ubuntu 10.04. One of the main problems here is that it's not safe enough to share classified documents trough this software. It's a simple webserver that uses nginx. What I want to do is make this connection secure.
One of the problems is that I don't only have a connection trough port 80 but it uses the following ports:
Port 80 (HTTP), 1935 (RTMP), 9123 (Desktop sharing).
I would like to use a proxy instead of some tunneling or vpn to do this. Would anyone happen to know anything about squid or another equivalent to do this?
View 3 Replies
View Related
Apr 26, 2011
I'm trying to get https/443 traffic go through squid.
View 3 Replies
View Related
May 30, 2010
Here's the setup I have:
Linksys wrt400n (wrt54gs same issue)
Laptop with wireless n nic running ubuntu 10.04 (all updates)
PS3 connecting wirelessly to linksys (all updates)
If I run PS3 media server on my laptop wirelessly,I cannot stream up more than 2 Mpbs to the PS3. If I connect wired, I have no issues.
I've checked quite a bit about PS3 media server and confirmed that upnp is turned off (and turned on in past, no change). Nothing I've done seems to resolve the issue.I purchased a new router recently and both it and the old g have this issue so I'm pretty sure it isn't the wireless routers. how I can trace down this 2 Mbps cap when uploading wirelessly?
View 3 Replies
View Related
Jul 15, 2010
I have several servers that we have bonded some NICs for rundancy and they will of course switch from primary to secondary NIC if connection state is lost to the switches they are physically connected to, but is there any way to be able to sense upstream connectivity (off switch) for each NIC and failover even though the NIC itself has a connection state to the switch it is plugged into? We are using Dell managed switches on VLANs with trunking.
View 3 Replies
View Related
Sep 28, 2010
I suddenly got this error ("HTTPS proxy auth failed") while trying to login. I'm not using any proxy, so can anyone explain why I am having this error? and how to fix it?I'm using Ubuntu 10.04 and Skype (beta) Version 2.1.0.81.
View 1 Replies
View Related
May 22, 2011
I have set up certain portions of my web site to be forced https:// How do I force, non https:// protocols. I know this sounds confusing, so let me give you an example.
[Code]...
View 7 Replies
View Related
Dec 9, 2010
Currently my DHCP Server is working now what i want to have is auto detection of squid proxy in any browser but I still got an error in my dhcp server when I restart it.
My Config:
# DHCP configuration generated by Firestarter
ddns-update-style interim;
ignore client-updates;
[code]....
View 2 Replies
View Related
Oct 28, 2009
At the moment I have a proxy and all the users have to configure it in the browser to access internet. I want to make the users able to browse even without configuring the proxy in the browser. but eventually it should be received in the proxy rather than giving an error to the user. I heard with transparent proxy I can redirect all the traffic from a particular network, to a particular host( ie my existing proxy).
I tried this using firewall rules. But then the existing proxy doesn't understand the protocol of the requests. I heard that it should be in the kind of proxy protocol.
View 1 Replies
View Related
Feb 23, 2010
I've setup squid proxy st time on centos 5.This is my current setup.squid.conf:Quote:acl our_networks src 192.168.10.0/24 ttp_access allow our_networksQuote:
internet -- modem -- Firewall --switch--squid proxy (192.168.10.100)
--client workstation ((192.168.10.200)
(client workstation is connected to the same switch as the squid proxy)
[code]...
View 1 Replies
View Related
Jul 29, 2011
I'm trying to use svn over http or https because I'm rear of a corporate proxy. Only allows HTTP connections.
I tried connect-tunnel but no success.
I also modified ./subversion/servers and I added the proxy server but no success.
View 2 Replies
View Related
Dec 22, 2010
I am trying to open a site named [url] and it gives me error connection refused the network may be down.
I had checked that ip and it's pinging from my pc but the site is not opening
My internet server is red hat linux and i have done all the iptables thing but it's not working
View 5 Replies
View Related
Sep 14, 2010
I tried a kde live cd last week and quite liked the unbranded look on booting. I am using 11.4 m1 kde 4.5 and am trying to replicate the look. As I have automatic logon set to 'yes' there are three stages. Have changed the boot option menu graphic OK and workspace upstream but am struggling with the middle part. This still shows the suse green. which file I need to change?
View 2 Replies
View Related
Nov 29, 2010
I connect to the internet at work through an authenticating proxy, and to avoid having to enter the proxy info into every app I use (e.g. firefox, wget, kde, etc) I have set up squid as a local transparent proxy which authenticates and routes all traffic to the work proxy. It has been working fine, but lately I haven't been able to connect to any https sites. I don't think I have changed the configuration, so perhaps it is the result of an upgrade, or something badly configured on my system from the start. I have tried connecting to https sites without squid and iptables and it works fine. My system is Arch linux, and my squid.conf file is: Code:
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80# http
acl Safe_ports port 21# ftp
acl Safe_ports port 443# https
[Code]....
View 2 Replies
View Related
Feb 2, 2011
I am having a problem with HTTPs in a double NAT'd network configuration. The scenario is like this..
[Code]...
Machines on these LANs can talk to each other no problem. There is also a NAT rule configured for traffic going from LAN A via LAN C out to the Internet. The Nokia is also doing NAT'ing. Normal web browsing works fine with this setup, but whenever I try to access HTTPS sites, it just hangs and eventually times out.Packet captures have showed lots of TCP Retransmission messages. If I logon directly to the Linux Router and fire up a browser, I am able to access HTTPS sites without any problems. This appears to be something to do with the traffic being NAT'd twice. Is there a way I can get around this without changing the config of the Nokia?
View 1 Replies
View Related
May 12, 2010
I have a server (Fedora 12) setup at a client's datacenter and the network is setup to allow me ssh access into the server, but prevents me from opening any connections from the server. However, I need to make http and https request from the server. What I'd like to do is forward all http/https traffic through another machine outside the network.
I've been looking at the documentation for ssh and the various options there and have gotten so far as to enable initiating an ssh connection from the client network back to my machine, but am not sure where to take it from there.
Here are some of the commands I've used so far:
Code:
I'm attempting to bind port 80 to be forwarded through the local machine. I assume I use "ssh -R" to create a dynamic tunnel to forward requests but I must be missing something.
By the way, root login via ssh is disabled.
View 5 Replies
View Related
Dec 26, 2010
i'm attemping to re-route incoming traffic of https to one of my servers. (a windows xp with subversion on it)
problem is if i do that ALL https traffic from other pc's is stopped. meaning i can't get any reply from any url with https;
View 6 Replies
View Related
Feb 23, 2010
I'm trying to build kernel 2.6.33-rc8 according to the documentation here: [URL] , but at a late stage in the compilation, I'm encountering the following error:
Code:
/usr/bin/make -f ./debian/rules debian/stamp/binary/pre-linux-image-2.6.33-rc8-custom
make[1]: Entering directory `/root/src/linux-2.6.33-rc8'
====== making target debian/stamp/install/linux-image-2.6.33-rc8-custom [new prereqs: ]======
This is kernel package version 11.015.
[Code].....
View 7 Replies
View Related
May 30, 2010
I am looking for an upstream kernel in hope that a few bugs are ironed out in my Lucid Kubuntu install. I tried about 2 weeks ago to get a precompiled kerel from the upstream kernel PPA [URL] but the problem is that it was built with gcc 4.2 and lucid comes with gcc 4.4 a little bit sub-moronic considering that Lucid won't accept modules built with a different compiler. I am also a little sub-moronic as I don't know how to tell if todays kernel is still being built with the 4.2 compiler, I downloaded the build.log file but I can't find any references to gcc 4.2 but as I said when I installed and tried build my Nvidia modules - no dice.
It says it needs either a kernel built with gcc 4.4 or something else. I would rebuild from scratch but I only have 1mb left for the next 10 days then my isp charges me 10c per meg, so I don't want to download the 400mb for the ncurses etc etc (thats the size it told me from aptitude to get just the additional packages and then i would need the kernel source...) They are still using gcc 4.2, and why? Where there is an official prebuilt kernel 64bit built with gcc 4.4???? or is this just another great bug that I must put up with.
View 1 Replies
View Related
Jun 21, 2010
I really dislike the ubuntu patches in lucid on the system tray, does anyone know if a ppa exists which has the upstream default or how I could unpatch the ubuntu package to upstream default?
View 2 Replies
View Related
Jul 19, 2010
I'm running a squid proxy in my ubuntu server, and I must have mess it up with the squid configuration. Users, cannot, access https pages. Can you tell me what to change in my squid.conf, so, to fix this?
Here is my squid.conf (witch is a friends conf, that i have change for my needs...)
Code:
http_port 8888
#http_port 3128
icp_port 3130
acl QUERY urlpath_regex cgi-bin ?
code....
View 2 Replies
View Related
Dec 13, 2010
This started yesterday. I haven't made any recent changes. I can't access any pages beginning with https. It's just my computer because my girlfriend's laptop doesn't have any issues. I'm using OpenDNS, but I have been for a long time and this is the first time this has ever happened. I'm not using a router, I connect straight to the modem, which I've already reset.
View 1 Replies
View Related
Jul 22, 2010
https://hostname:8834/ is blocked by iptables ?
I have nessus application is running in the target machine and the url
is https://hostname:8834/ - which is not accessible
But when i login in the target machine via ssh and check that this application and the service is running fine So i think it is blocked by the iptables in the same machine, where the nessus is running
find the iptables status when iptables -L
iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:nessus1
ACCEPT tcp -- anywhere anywhere tcp dpt:nessus1
[Code].....
View 3 Replies
View Related
Aug 7, 2010
I'm using Fedora 13 and I'm trying to update Gnome Shell on it. I use this command:
Code:
yum install gnome-shell --releasever=14 --disablerepo=rpmfusion*
but I get:
Code:
Loading mirror speeds from cached hostfile
fedora/metalink | 13 kB 00:00
updates/metalink | 17 kB 00:00
[code]....
how can I update gnome-shell package using yum?
View 6 Replies
View Related
Nov 19, 2010
HTTPS doesn't work. Im running firefox in ubuntu 10.10.
View 1 Replies
View Related
Jun 22, 2011
I am using Lenovo G550 laptop wid Intel Dual Core 2GHz, 2GB RAM, 250GB HDD, etc. Earlier I had 2 partitions 187GB (Windows 7) and other 33GB of Lenovo drivers. I split 187GB to 143GB (Windows 7) while remaining 44GB for Ubuntu 10.10!
Everything's been working fine except for internet. I am unable to load many https sites like fb, hotmail, etc. Gmail is working absolutely fine.
I did some research on this forum and disabled ipv6! I also checked for firewall and it was disabled. Then I also configured Open DNS and checked if it is working fine. But nothing has helped.
When I connect to these sites without 's' in https (i.e. only http) these sites load fast. I enter my username n password and then I am redirected to a compulsory https site which then takes me to a page like this (shown in thumbnails)! I have tried Chrome n Firefox 3.6 (which have SSL and TLS checked in preferences)! All these sites are working fine on Windows 7. But I don't want to use Windows 7 every now and then because it has become too slow and boring! Please help me with this.
I connect to internet using DSL wired (BSNL Broadband 256Kbps)
View 7 Replies
View Related
Jul 8, 2011
I'm on Ubuntu 11.04 and have wired internet connection.
Some sites (particularly https) take very long time to load . Sometimes I get "Page is taking a long time to load . Reload the page later" message.
Now , this is happening for some http webpages also.
This is not a problem with browser.
I have firefox , chrome , chromium and konqueror installed.
Also I can access all these sites properly from windows so it is not problem with my internet connection either.
View 1 Replies
View Related
May 5, 2011
I'm trying to use Debian Stable with some newer upstream packages. I've got the upstream Firefox tarball unbacked in /home/firefox/. The problem is that it can't find any plugins, flash or anything else. It's the 64 bit binary but still needed some 32 bit libraries to run. Does it need 32 bit plugins?
Iceweasel is uninstalled and and I deleted it's ./mozilla/ directory. I tried creating a /home/.mozilla/plugins/ directory and symlinking plugins into that and pretty much any other conceivable path where it could be looking for them.
I run upstream firefox from /home/ in the past and had no problems.
View 3 Replies
View Related
