<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr">I have a Ubuntu server set up that does various things in addition to being a web proxy (squid 3.3.8) to use remotely over the internet. This allows me to directly access internal devices with a web page on my LAN since my employer, like most, blocks VPN connections. My intention is to have the squid service running at all times, with a login, so I can use it any time. However, there's a few things I have not been able to answer/resolve through my own research:</div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr">1. I am not able to SSH into my server from my employer. It's rare I'd need to do this, but ethical considerations aside, could this work with PuTTY over the squid proxy? I'm confused over how or if this would work using the Connection -> Proxy config in PuTTY. I can successfully use my proxy from a web browser, but have had no luck with SSH despite entering the proxy info into PuTTY. Supposedly the proxy needs to support the CONNECT method, but I'm unclear what this is or how to enable this. As an aside, I have experimented with shellinabox, but abandoned it when I learned it's not encrypted by default.</div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr">2. How good is squid's security as far as leaving its port open to the Internet, which I obviously have to do in my case? I found it interesting that if I enter <a href="http://myip:myport/" id="yui_3_16_0_ym19_1_1491567653657_7346">http://myip:myport</a> from over the Internet, it responds with a "The requested URL could not be retrieved" page, along with information that identifies it as squid, along with the version number and server name, without asking for a login. Being unfamiliar with web proxies, this might be the norm for all I know. If I set up a browser to use it as a proxy, it does ask for a login. It appears the error pages are in /usr/share/squid/errors, but is there a way for it to be more discrete, preferably to not respond at all or ask for a login?</div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr">Below is my squid.conf. I removed all the commented lines, and pieced one together from information online. My goal is to have it proxy basically anything thrown at it if authenticated, be as secure as reasonably possible, absolutely no caching, and enable SSH connections through it, if possible.</div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr">Thanks in advance.</div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7692">auth_param basic program /usr/lib/squid3/basic_ncsa_auth /etc/squid3/passwords</div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7693">auth_param basic realm proxy</div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7694">acl authenticated proxy_auth REQUIRED</div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7695">http_access allow authenticated</div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7696"><br id="yui_3_16_0_ym19_1_1491567653657_7697"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7698"># Choose the port you want. Below we set it to default 3128.</div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7699">http_port 8092</div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7700">cache deny all</div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7701">access_log none</div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7702"><br id="yui_3_16_0_ym19_1_1491567653657_7703"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1491567653657_7704">acl CONNECT method CONNECT</div><div id="yui_3_16_0_ym19_1_1491567653657_6635" dir="ltr"> </div></div></body></html>