| purge | The purge tool is a kind of magnifying glass into your squid-2 cache. You can use purge to have a look at what URLs are stored in which file within your cache. The purge tool can also be used to release objects which URLs match user specified regular expressions. A more troublesome feature is the ability to remove files squid does not seem to know about any longer. |
|---|---|
| NTLM Authorization Proxy Server | 'NTLM Authorization Proxy Server' (APS) is a proxy software that allows you to authenticate via an MS Proxy Server using the proprietary NTLM protocol. Since version 0.9.5 APS has an ability to behave as a standalone proxy server and authenticate http clients at web servers using NTLM method. It can change arbitrary values in your client's request header so that those requests will look like they were created by MS IE. It is written in Python v1.5.2 language. |
| frox, a transparent ftp proxy | frox is a transparent ftp proxy which is released under the GPL. It optionally supports caching (either through an external http cache (eg. squid), or by maintaining a cache locally), and/or running a virus scanner, on downloaded files. It is written with security in mind, and in the default setup it runs as a non root user in a chroot jail. |
| sqcwa | To help you understand how Web Caches will treat a Web page, the Cacheability Engine will look at a URL (and optionally any images or objects associated with it), giving both specific cache-related data about it, and a general commentary on how cacheable the object is. |
| Cacheability Engine | To help you understand how Web Caches will treat a Web page, the Cacheability Engine will look at a URL (and optionally any images or objects associated with it), giving both specific cache-related data about it, and a general commentary on how cacheable the object is. |
| wget | A command-line Web client that supports both HTTP and FTP. Wget can generate proxy-HTTP requests and is useful for mirroring Web sites. |
| echoping | A nifty Unix utility that ``pings'' your proxy cache with a test HTTP request. Can be used from cron to warn you if your cache goes down. |
| 3Dhierarchy.pl | A perl script by Kenichi Matsui that generates a 3D hierarchy map in VRML from squid.conf files. |
| transproxy | A program that can be used in conjunction with the Linux Transparent Proxy networking feature, and ipfwadm, to transparently proxy HTTP and other requests. Transproxy is written by John Saunders. |
| Junkbuster | A freely-available, privacy-enhancing, ad-blocking proxy server that you can use in conjunction with Squid (or alone). |
| Relais | The Relais protocol allows a group of caches distributed world-wide to cooperate in order to improve Web performances. Relais guarantees to its clients a monotonic and rapid progress on the documents' versions. Once a cache learns that some document is stale, Relais takes care of the refreshment of all partners caching this document. For performance reasons, actions required to enforce consistency are performed in background. Relais has been prototyped on top of Squid. |
| WPM | The Web-based Proxy Manager is an easy-to-use interface for managing Squid and access to the Internet. It allows you to define different users, with different access levels. You can easily define network segments, allow or deny their Internet activity with a single mouse click, allow or deny single computers' exit to the Internet, and easily remove all the restrictions. |
| Accountd | [The old accountd page is gone. Let us know if it pops up somewhere new.] A daemon that tracks IP traffic through a system, correlating it with dial-in sessions by users. The end result is a database of users with records for each of the number of dial-in sessions, total time connected and data downloaded. Configuration text files are used to specify users and map serial lines to IP addresses, and the records can be viewed with a web browser. |
| 1FD-SQUID | Y. Nishimura has developed a version of Squid and FreeBSD that fits on a single floppy disk. There are a number of other cool 1FD applications available as well. |
| Webmin | Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms (and Java for the File Manager module), you can setup user accounts, Apache, DNS, file sharing and so on. Webmin has a module for configuring Squid. |
| Unanimated GIFs | Tim Newsome's page has a patch for Squid that removes animation codes from GIF images. |
| Printable Web Pages | Many news sites have ultra-snazzy layouts which contribute nothing to the usability or readability of the web site. The usual crap includes: stock quotes, banner ads etc etc along with every news story. Another very annoying feature of some web sites is that they split a single story across multiple web pages. Perhaps they get more ad impressions that way. The PWP page describes how you can use Squid and Squirm to automatically rewrite requests for these pages into their printer-friendly versions. |
| DansGuardian | A fully featured web filtering proxy that uses squid. It filters based on web page content (by a banned phrase list), PICS, MIME-type and file extension. It is free for non-commerical use. |
| Cerberian content filter | The Cerberian content filter is a very flexible URL rating system with full Squid integration provided by MARA Systems AB. The service requires a license (priced by the number of seats) but evaluation licenses are available. |
| SquidSearch | SquidSearch allows users to search for key words in the Squid cache. It searches the binary files that make up the cache, and pulls key words from the "META tags" and "body" of the cached files. "Links" to the stored files are created by parsing the meta data in the header of the cache files until the STORE_META_URL token is found. Developed by IPS Systems. |
| Cache Manager | Squid Cache Manager allows users to purge entries in the Squid cache by searching for key words and/or urls. Users will then be allowed to select which cached entries found to purge. Developed by IPS Systems. |
| Squid Efficiency Analyzer | Squid Efficiency Analyzer interprets a Squid log (native) to determine how much traffic can be retrieved from the cache and how much comes from the webservers in the internet. Tested with log files from Squid 2.5 STABLE 5 for Windows NT 4.0/2000/XP/2003. |
| proxymin | An easy to use graphical interface to configure commonly needed Squid ACLs. It allows for fine grained permission management based on users, hosts and groups. Protocols HTTP, HTTPS and FTP are currently supported. proxymin has been tested with several hundreds of managed accounts. All major features have been implemented and tested. |
| WebScan for Linux | WebScan for Linux brings the awesome Anti Virus and Content Security features of MicroWorld products to protect the internal clients/networks served by Linux based Proxy Servers and stop the threat at the gateway level. |
| Malware Block List | The Malware Block List is a free, automated and user contributed system for checking URLs for the presence of Viruses, Trojans, Worms, or any other software considered Malware. The list of URLs that point to Malware is available and formatted for using on Squid to block users from acessing and downloading these malicious softwares. |
| ProxyTrack | ProxyTrack is a simple proxy server that delivers content archived by HTTrack sessions. It can aggregate multiple download caches, for direct use (through any browser) or as an upstream cache slave server. This proxy can handle HTTP/1.1 proxy connections, and is able to reply to ICPv2 requests for an efficient integration within other cache servers, such as Squid. It can also handle transparent HTTP requests to allow cached live connections inside an offline network. |
Ident Servers | |
| Windows NT | Identd is a free basic implementation of RFC931/RFC1413 for Windows NT. |
| Windows 95/98 | Based on the above source, this one works on Windows 95/98 systems. |
| Pidentd | Ident server for Unix systems. |
| ident2 | A secure auth server replacement. Can be a well-behaved (RFC compliant) netizen or turned completely away from the path by a security paranoid network administrator who still needs to run some kind of ident servers. |
| hidentd | hidentd is a simple and secure GPLed ident (RFC1413) server. It requires either inetd, xinetd or ucspi-tcp to run. |
Redirectors | |
| Ian's | A redirector that allows Intranet (restricted) or Internet (full) access with URL deny and redirection for sites that are not deemed acceptable for a userbase all via a single proxy port. |
| Squirm | A configurable, efficient redirector for Squid by Chris Foote with many cool features |
| Jesred | A very fast and highly configurable redirector package by Jens Elkner. |
| squidGuard | A free (GPL), flexible and efficient filter and redirector program for squid. It lets you define multiple access rules with different restrictions for different user groups on a squid cache. squidGuard uses squid standard redirector interface. |
| Viralator | Viralator is a virus scanner interface for Squid. Before a user can download a file, Squid passes the file to the Viralator script which, in turn, uses a virus scanner to scan, disinfect or delete the download. This is especially good for stopping virus infected files from free email sites like hotmail, etc. Viralator uses Squirm, Apache, and a virus scanner called Innoculate. |
| Ad Zapper | A free redirector by Cameron Simpson designed to eliminate advertisement images. You can also get regular updates of the pattern-matching database. |
| zapchain | Another free redirector by Cameron Simpson designed to chain multiple redirectors together. The directions is specific to combining Adzapper with another redirector, but works equally well with any other set redirectors. |
| urlredir | |
| SleezeBall | SleezeBall tries to guess what is a banner and then tells Squid to load an image on the local webserver instead. This has the nice effect of saving you from downloading and seeing a lot of ugly banners. |
| asqredir | asqredir (another squid redirect program) is a small, basic and fast redirect program for the almighty squid webcache. It can be used for filtering out advertisements from web sites or preventing proxy users to get certain files and redirect them to another url. |
| soul | soul is a Squid redirector designed with schools in mind. It is designed for St. Lukes school in England, and has been released under the GPL License. It filters out domains, URLs and IP addresses that schools do not want their children to see. Pretty much like squidguard, but will soon have some features like Realtime lock checks (to cut off certain classrooms), and if cache auth is enabled, to only allow one user per machine. It also has customable logs. |
| Soulcatcher | Soulcatcher is a Squid redirector designed with educational establishments in mind. It is designed to be easy to use and allow easy updating via a command line. |
| squid_auth_ldap | Yet another LDAP authentication helper by Casper Pedersen, designed for use with Novell eDirectory. |
| pyredir | pyredir is a flexible but simple redirector for Squid implemented in Python. URLs matching Python regular expressions can be redirected using regular expression substitution, databases of filename-to-url mappings, alternative config files, or child redirectors. Utilities are provided for generating database files from file archives. It is primarily useful for redirecting requests to large local FTP archives, but it can also be useful as a top-level redirector that separates and feeds requests to more specialized child redirectors. |
| LASP | Lasp is a "Lightweight ACL" helper application for Squid proxy. It was designed to allow a moderate number of allow/deny rules to be implemented in such a way as to have maximum flexibility and minimal overhead to the performance of the proxy. It has been found to perform moderately well with about 100-150 users in a corporate environment. |
| iredir | iredir is a small python program which can be used as a squid redirector to rewrite urls based on regular expression definitions. Its highly flexible and also supports multithreaded squid3 redirector mode. |
| SquiVi2 | SquiVi2 is a redirector for squid. It makes is possible to include an virusscanner in squid to search for viruses and trojans in the requested files. You can configure as many virus scanners and compression tools as you want. |
| ufdbGuard | extremely fast and free URL filter based on squidGuard. |
| Rejik | REJIK is a Web filtering system consisting of a Squid redirector and ban lists. It is fast and easy. |
| SquiDJ | This redirect_program will turn your Squid proxy/cache into a "dijjerizer" service. Only an instance of dijjer, running on the squid machine, will serve an entire network: just point other LAN browser to the squid address. Dijjer is a distributed p2p web cache. If you want to insert/get a file to/from the dijer network, you usually have to start a dijjer instance, then direct your browser to http://127.0.0.1:9115/http://www.domain.com/path/to/file The dijjer server running on localhost will get the file from the distributed p2p cache. If you have a LAN with many computers, it is difficult to install dijjer on every one, and most important, only a tiny part of the traffic will go to dijjer. To increment the use of dijjer without having to maintain too copies of it and without the need to explain users anything, you can set up Squid so it will automatically redirect part of the traffic to a single dijjer instance on the same server squid runs. Then you will have to set the proxy option on client machine, if it isn't already set. That makes debug and optimization very easy, increment dijjer use across your LAN, and maximize the bandwidth use (download speed will be less influenced by external servers upload bandwidth). |
Authenticators | |
| The Squid source distribution includes a number of external authentication modules in the helpers directory. Below are some additional modules that you might be interested in. | |
| htpasswd | The htpasswd.c program, from NCSA httpd, can be used to manage a password file for Squid when using the NCSA authenticator. You can also download the manual page (troff source). Pedro L Orso has adapted the source into a CGI script (chpasswd-cgi.tar.gz) that enables your users to change their own passwords. |
| RADIUS | This is Marc van Selm's RADIUS authenticator for Squid. |
| mysql_auth | A basic auth helper written in C called mysql_auth that authenticates against a MySQL database. Also included is a Web based interface (also in C) for adding new Squid Users to MySQL for mysql_auth. Developed by ISP Systems which is very grateful to Carson S.K. Harding for his CGL Library (An ANSI C CGI library). |
| Non-Anon LDAP | Karel De Bruyne has modified Alan Spark's original LDAP authenticator to work for non-anonymous LDAP servers. Note: similar functionality is provided by the helper shipped with Squid |
| Group LDAP | Tobias Crawley has a patch that supports static and dynamic LDAP group lookups when doing LDAP authentication. It modifies the core squid code to add support for ldap groups in acl mechanism, and adds a group ldap authentication module in the auth_modules/GROUP_LDAP/ directory. Note: This is for Squid-2.4. Squid-2.5 and later already contains support for groups etc via it's external acl types. |
| squidauth.pl | This authentication program by Thomas Börnert is written in perl and uses the md5 and MIME::Base64 Modules. It has some security features, which may be necessary for firewalls |
| RADIUS | Squid RADIUS authenticator by Marc van Selm, with contributors from many others. |
Monitoring | |
| Anemone | Anemone integrates the flexible real-time status graphic capabilities of MRTG with the powerful SNMP data-reporting facilities of the Squid accelerator cache. This combination provides real-time graphing of web-server usage as well as other useful real-time information. |
| S.L.U.G. | SLUG stands for Squid Log Usage Generator. now supports Dansguardian. Many useful features to automate adding groups and phrases. Similar to squidalyser. |
| squid-rrd | A Perl script that makes cache manager requests to extract useful information, which is then stored in a number of RRD databases. A sample CGI script shows how to view the RRD data through an Apache server. |
Please use this form to add your software to this list