Overview

Configure the basic Network Infrastructure.

Configure the Sockets on which SafeSquid will Listen, and accept connections from clients.

Manage SafeSquid's outgoing connections through existing IP's of your host system.

Listen

Setup SafeSquid’s Listen Interfaces to accept connections from clients.

When SafeSquid starts-up, all the enabled entries will be evaluated, and create appropriate Listening Sockets.

You may specify these Interfaces when creating policies in Access Restrictions Section.

Evaluation logically skips disabled Entries.

Service restart is required to effect any changes made here.

Enable or Disable this entry

For documentation, and future references, explain the relevance of this entry with your policies.

That is, by reading the policies, a future user can understand the purpose of that entry.

Specify the Listen port. By default, SafeSquid listens on port 8080.

Port value can be a positive integer between 1 and 65535. Default value is 8080

Specify the IP address to complete the socket definition.

You may choose a specific IPv4 or IPv6 address.

Empty or Blank: All the IPv4 and IPv6 addresses of the host.

Choose additional bindings (roles) for this Socket.

You may select multiple options if you need.

SSL_TRANSPARENT : Accept SSL requests in a transparent proxy mode.
CAPTIVE_PORTAL : Setup a captive portal for user authentication, when SafeSquid is used as a Transparent Proxy.
SSL_AUTHENTICATION : User authentication via SSL client certificates.(Not Yet Implemented)
SSL_BRIDGE : If SafeSquid has been setup as Reverse Proxy, and must provide SSL for non-SSL HTTP servers.(Not Yet Implemented)

Rule#1

My SafeSquid proxy is running on a cloud server, I use ssh tunnel using 127.0.0.1:8080 to access my proxy server.

I have host only network with IP range 10.100.0.0/16

I want my proxy server to listen on 10.100.0.1:8080

Using the network -> listen policy we can allow proxy to listen to addition IP and ports.

Rule#2

I want to use SafeSquid without configuring it in my browser. (As a transparent proxy server)

I want to transfer all traffic from port 80 to be forwarded to port 8080 and traffic from 443 to be forwarded to 8443.

I want SafeSquid to listen to port 8443

Rule #2 is configured to use proxy server as a transparent proxy server.

Bindings set as SSL_TRANSPARENT is used to accept SSL request in transparent mode.

Rule#3

I want our admin users to access SafeSquid web interface without authentication.

General users’ access internet using port 8080 where GUI access is disabled.

We want SafeSquid to listen on IP 192.168.2.10 and port 8082 which has access to SafeSquid web interface, can be configured in “Access Restrictions”.

Rule #3 can be used where user identification is not performed and personal having access to SafeSquid’s web interface should be limited.