Squid transparent mode not listening on SSL Proxy Port

[DavidSte1]

Hi all,

I'm working on getting squid running as a transparent proxy for both HTTP and HTTPS traffic (in order to avoid having to configure clients individually and to enable usage reporting from the logs).

I have it setup as per the OPNSense docs and it works OK if i manually configure the proxy in a browser, and tick the box to use the single port (3128) for both HTTP and HTTPS. Inspection and filtering works with a proxy set in the browser (and of course a trusted certificate) although this is not a requirement.

However I can't work out how to make it work as a transparent proxy with the NAT rules.  If I send traffic for both HTTP and HTTPS to 3128 or separately to 3128 and 3129, the HTTPS traffic doesn't work in both cases.

It looks like although the port is defined in the Web GUI, it doesn't actually create a listener. I do see traffic on 3129 allow through the firewall rules, so it appears to be something in squid itself.  Indeed in squid.conf I only see listeners for 3128.  Is this a bug in the WebGUI or have I missed some other setting?

This is the squid config for listeners:

Code: [Select]

# Setup transparent mode listeners on loopback interfaces
http_port 127.0.0.1:3128 intercept
http_port [::1]:3128 intercept

# Setup regular listeners configuration
http_port 192.168.11.251:3128
http_port 127.0.0.1:3128
http_port [::1]:3128
I've tried what feels like every combination of options and got nowhere so any help would be appreciated.