Search squid archive

Re: Detecting and blocking child proxy servers

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Thanks once again for sharing light on this. Do you have any examples
> where I can use req_header to detect if my clients have their own proxy
> servers?
>
> Any clue, web links or posts will highly be appreciated.
>
> Also is req_header the only option whereby we can detect child proxies?
> Or do we also have other options for detecting child proxies?
>
> I googled and found the Follow X-Forwarded-For headers (follow_xff) tag.
> Do you have any ideas regarding this?

Yes, X-Forwarded-For headers can be useful. There is same problem as with Via 
header - spoofable. In default squid configuration is directive forwarded_for 
set to on. It means, that squid forward forwarded-for header to upstrem 
proxy. Your squid has to be compilled with --enable-follow-x-forwarded-for 
option, and in squid config you need this directives:
follow_x_forwarded_for allow all
acl_uses_indirect_ckient on
log_uses_indirect_client on

Then you can track clients behind child proxy's. But all is depending on child 
squid configuration.

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux