[squid-users] Issues setting up a proxy for malware scanning

[Amos Jeffries]

On 5/03/19 6:20 am, Egoitz Aurrekoetxea wrote:
> Hi mates!
> 
> 
> I was trying to setup a Squid server for the following matter. I wanted
> to have some modified url pointing to my Squid proxy, so that Squid to
> be able to connect to destination, scan the content and if all is ok,
> return a 3xx to the real URL. For that purpose I use the following
> configuration https://pastebin.com/raw/mP73fame . The url redirector in
> that config is  https://pastebin.com/p6Usmq75
> 
> 
> I'm facing the two following problems, probably due to not having a
> large experience in Squid :


It seems not have much experience with HTTP either.

You would be far better off forgetting this whole fake-domains and URL
redirection thing. It is almost the hardest possible way to do what you
say you are wanting.

Just divert the client traffic to the proxy and scan (or not) as it goes
through. No problems with changing HTTP response objects just to get the
traffic to a state where the scanner receives it. No confusing the
scanner which may at times be checking the domain naming pattern as part
of the signature.


HTH
Amos