Is it possible to use transparent Squid on Windows?

[ra-at-diladele-com]

"... currently use Windows 64bit 8.1 with 2 NIC, 1 with free internet access and other releasing access to LAN, squid 2.7.STABLE8. To redirect all traffic from port 80 to the squid, I'm using (SoftPerfect Bandwidth Manager 3.0.9 Full). My squid is in transparent mode (squid.conf with the line "http_port 3128 transparent") ..."

Need to check if this can be done with 3.5 build.

[itskvad]

Not currently possible.

See here:
https://groups.google.com/forum/#!topic/quintolabs-content-security-for-squid-proxy/zEkabckH1S8

[tobiastromm]

Hi.

Any news for that? I am still using 2.7.STABLE8 because of that.

I also need transparent proxy. It is possible to enable it?

Thanks a lot.

[leiwen0614]

Hi @tobiastromm what windows version are you using in transparent mode for 2.7.STABLE8? I 've came across lot of discussions, and ends up here: http://lists.squid-cache.org/pipermail/squid-users/2017-May/015184.html

I am also looking for a transparent squid proxy solution for windows.

[tobiastromm]

Hi @leilei8814.

You can download this Squid version here: http://squid.acmeconsulting.it/download/dl-squid.html

The diladele squid don't accept transparent proxy : ( I already send a mail for diladele...

If I can help you just mail me.

[leiwen0614]

Hi @tobiastromm thanks for your replay.
May I ask what windows version are you using? we have to stick with windows server 2016.

[tobiastromm]

Windows Server 2008 R2, but I think it can work with Server 2016.

[yadij]

FYI: To those of you staying with Squid 2.7 because it allowed "transparent" to be configured. Please be aware that Squid-2 does not actually do what "transparent" is supposed to do. It simply ignores the NAT failures and opens your network to malware hiding behind the CVE-2009-0801 issues.

[ssteeltm]

"Transparent" working ok!
Just set to ssl-bump, then redirect from server/gateway/machine from 80/443 to squid port.

[yadij]

@ssteeltm if that alone works your Squid is broken. See my last comment. Windows lacks a way to get the mandatory NAT information from the OS to Squid. The PROXYv2 protocol is an attempt to work around this issue, but is not supported by most NAT systems.

[omaidb]

"Transparent" working ok!

Just set to ssl-bump, then redirect from server/gateway/machine from 80/443 to squid port.

你是如何做到的啊……能讲述下您的squid版本以及您的配置文件吗？ssl-bump如何配置