Search squid archive

Re: [squid-users] how to NOT ALLOW to forward proxy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



--- Henrik Nordstrom <hno@xxxxxxxxxxxxxxx> wrote:

> I think you are asking if there is means to stop
> people from running 
> child proxies inside your network.
> 

yes this is what i want


> Not easily. Some of these make a pretty good job of
> not revealing 
> themselves in the requests. However if the proxy
> follows the RFC you 
> should be able to look for a Via:,  X-Forwarded-For:
> or other proxy 
> generated request header line. But not all proxies
> adds these request 
> headers.
> 

how can i do this ?? where can i find som info, and
how does it work ?

> Authentication can also be relatively efficient in
> fighting this, but you 
> should be aware there is proxies which allow the
> authentication 
> credentials to be statically configured to defeat
> this..
> 

this is rather hard because i have a lot of users and
to pass arround the pass for each individual would be
a really messy job


> The final option is to run statistics, and look
> closely at the traffic 
> from suspected users (preferably with the User-Agent
> header preserved) to 
> judge if this traffic is reasonably from one person
> or if there is many 
> persons behind this IP.
> 

this could work but what if there are users that just
happen to download a demo in a day a demo of 400 mb...
so this won't work as well


> Regards
> Henrik
> 

-------------------
Funieru Bogdan
Admin MosilorNET

Contact Info:
Mob:
0742158956
0726592752
0744301506(very rare)
-------------------

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux