Comments on: Best Proxy Practices (BPP!) and an update

By: jalinoos

jalinoos — Fri, 09 Jul 2010 09:46:48 +0000

contact my accunt.

By: reza

reza — Wed, 30 Jun 2010 20:48:59 +0000

please send for me a web proxy

By: amir

amir — Mon, 22 Feb 2010 13:45:01 +0000

please send for me a web proxy

By: amuddigundell

amuddigundell — Wed, 25 Nov 2009 01:02:15 +0000

Nice blogpost, good looking website, added it to my favs.

By: Proxy45

Proxy45 — Sat, 27 Jun 2009 07:28:28 +0000

Thank you Fidel, it’s usefull.

By: HS

HS — Sat, 27 Jun 2009 06:34:47 +0000

Good idea Curtis. Better still: place it here so all we “idiots” can benefit from it.

By: Never mind

Never mind — Thu, 25 Jun 2009 08:56:58 +0000

An easier way to setup a proxy on a Windows computer:
http://www.surfazad.com/howto_setup_proxy.php

Please make sure you have at least a cable connection and leave your computer on at all times so your proxy is not down.

By: efx

efx — Wed, 24 Jun 2009 22:49:22 +0000

If the http://www.catb.org/esr/nedanet/squid.conf conf file was used then I assume all of the above options in the conf are fixed?

By: MR

MR — Wed, 24 Jun 2009 13:12:36 +0000

Curtis, others: if you are not computer literate, try installing TOR, and run it as a relay. This helps Iranians getting anonymous and safe internet access.
Installation is very easy, and most of the time all you have to do is click a few times.

There’s a short guide, including pictures, at:
http://iansbrain.com/2009/06/15/tor-and-the-iranian-election/

Good luck!

Mohsen

By: Stewart

Stewart — Tue, 23 Jun 2009 18:43:35 +0000

Austin:

Thank you for posting an excellent response to the current internet access plight of the Iranian people. Your blog has resulted in nearly 500 new visitors to Country IP Blocks in the past few days. As a result we are making our network access lists for the Islamic Republic of Iran more prominent.

We are also in the process of mapping the network backbone access points in Iran to see if there may be routes in and out of Iran that are not currently being filtered.

Please keep in mind that Iranian network data is subject to change, therefore it is a good idea to check our website for the latest updates.

Thanks again for mentioning us in your post.

By: Curtis

Curtis — Tue, 23 Jun 2009 03:28:50 +0000

Hey, This guide seems like it was written for the computer literate. I have about 200 coworkers (I’m not kidding) who all would like to setup a proxy, as well as myself, but we seem to not be able to make any sense of the guide. If anybody else could PLEASE email me directions that explain it for idiots like myself, send it to t.ilton.s.tudent[at]gmail.com (all those periods are actually there)

By: Jeffrey Goldberg

Jeffrey Goldberg — Mon, 22 Jun 2009 23:14:22 +0000

If there are going to be attacks on proxies from the IRI government sites, the correct line of defense is with firewall rules and not with a Squid ACL. So thanks to those who’ve posted instructions on adding those blocks to iptables.

I think it would be helpful if someone could post instructions for those using off the shelf “hardware” firewalls such as linksys or D-Link boxes. I don’t have access to these to play with, so I can’t provide instructions beyond saying connect to your router with your web browser. You already needed to connect to it to allow port forwarding for your proxy (otherwise no one from the outside can connect), so I won’t provide those instructions. And just look for the tab or page for firewall rules. You might have to enter each by hand, and let’s hope that they accept CIDR format.

If others have played with these firewall/router thingies and can be more specific about what does and doesn’t work (and where to look for things) please enlighten us.

By: Fidel Dangelow

Fidel Dangelow — Mon, 22 Jun 2009 19:53:27 +0000

Here’s a link to a proxy config file, modified for Windows: http://iran.whyweprotest.net/attachments/help-iran-online/49d1245678166-how-setup-proxy-iranian-citizens-windows-squid-configuration-file.zip. It is slightly modified from the original version for Linux, found here: http://dev.austinheap.com/iran/squid-iran-ideal.txt. It should help Windows Squid users set up a proxy more quickly.

By: Proxies: 17-06-09, HTTP AND SOCKS - Page 8 - Why We Protest - IRAN

Proxies: 17-06-09, HTTP AND SOCKS - Page 8 - Why We Protest - IRAN — Mon, 22 Jun 2009 15:37:01 +0000

[...] random unassigned ports since the government is blocking more and more outgoing ports. See here: Austin Heap Blog Archive Best Proxy Practices (BPP!) and an update [...]

By: Shannon

Shannon — Mon, 22 Jun 2009 14:53:41 +0000

@Josh – I have the 4 major sites, and this one in my permit list – I’m also logging attempts to access domains (only that, no ip address, no urls, just domains) to see if there are other important domains I should add – which I’m monitoring real time…

By: Josh Rubin

Josh Rubin — Mon, 22 Jun 2009 14:38:36 +0000

@Shannon: How will users know which sites they are allowed to visit? I’m afraid of endangering protesters who waste time figuring it out by trial and error.

By: Derek

Derek — Mon, 22 Jun 2009 05:36:24 +0000

My proxy is working for normal web browsing, but I can’t log into twitter, facebook, etc. through the proxy. Twitter throws a 403, and Facebook tells me I don’t have cookies enabled.

I assume I’m missing/misconfigured something. Can anyone give me a hint without me tossing my entire config up? (Which I’ll do, but I don’t care to add to the noise if it’s not necessary.)

By: Shannon

Shannon — Mon, 22 Jun 2009 04:51:12 +0000

I’ve got a squid up and running – at current it only allows austinheap, youtube, twitter, and facebook – Does anyone have any other sites I should permit?

I only have limited bandwidth with which to provide the service so it’s important to keep it as short as possible.

By: Kam

Kam — Mon, 22 Jun 2009 03:57:47 +0000

The cache.log for squid points to ready and able proxy service, but I can’t figure out how and where to use/find proxy server address. Would somebody please advise on next step(s) to test/make server available.

By: Kam

Kam — Mon, 22 Jun 2009 03:42:48 +0000

I’ve configured SQUID on a Win XP machine and the service is running without any error message; but I am unable to see a proxy server address. How do I start the server up and test it to see if its working?