http://blog.austinheap.com/building-the-stack/

I don’t know if any proxies of the kind talked about here are in use for the haystack network, and if setting up those is a concern in the future. If so, I want to provide serious help towards the Mac community, for simplifying things. Austin, if you read me, take direct contact to work communicate and work on this together.

http://blog.austinheap.com/2009/06/22/state-of-the-iran-proxies/

since it was there, I thought to wait to release something. Sorry for the time it is taking, but I want a proper and easy to set up solution for the Mac-fellows.

I’m sorry to say so, but I’d really like it to be easier to browse around here, as all the info is in blog posts.

In the meantime you can post your mac installation questions to a dedicated mail address:

squid.mac@gmail.com

but please use the browsing tips first to collect you info:

1. Try to take a look around the posts on this blog, as the essential info is a bit scattered around.
Check the bottom of each page here to click to a next or previous post. You will encounter some medical tips, but just click trough …

2. use the rss page feed://blog.austinheap.com/feed/ and make sure you can have an over view of 20 posts or so.

I am not part of this website, so I cannot change the setup here.

So long!

aclParseIpData: WARNING: Netmask masks away part of the specified IP in ’192.168.0.0/8′

(no swapdirectories problem)

thank you

(i got also the swapdirectories error, but it was fixed by the commands posted by austin)

hope you can give me some advice

thanks

michael: re: password – it looks like nothing is happening when you type but it is actually getting it, just type it correctly and it will go through

question: when my computer is asleep will the squid thingy still be able to run?

client_netmask 0.0.0.0

This way logging is done like this (I paste from my log)

1245627093.320 7014 0.0.0.0 TCP_MISS/302 424 GET http://…(edited)…
1245627095.569 2202 0.0.0.0 TCP_MISS/200 4765 GET http://…(edited)…
1245627095.891 378 0.0.0.0 TCP_MISS/200 13657 GET http://…(edited)…
1245627095.986 473 0.0.0.0 TCP_MISS/200 124465 GET http://…(edited)…

All proxy clients are reported to as 0.0.0.0

————–

If you don’t have a static IP, use dyndns (http://dyndns.org) or no-ip (http://www.no-ip.com/)

This way you direct an url to your home ip that gets updated from within your computer.

Unless they block all the available domain types (a lot at dyndns)

Check it out!
—————

Take your time setting things up!

I’ll be posting an easy-to-edit config file tomorrow, including all relevant tips all around the blog here. And I’ll be packing a step-by-step for OSX as I said. (just gotta fix a launchdaemon)

Check the top of the config file,
You should have something like this:

http_port 1
http_port 2
http_port 3
http_port 4

etc… and off course, replace 1,2,3 and 4 by random port numbers!

For people wondering about the terminal instructions:

You will find the Terminal application in Your Applications/Utilities directory.

Open it to get to a command line, that can give Unix the instructions provided.

Make sure you copy properly!

2.

For people wondering about the security of their computer: proxyservers are just a kind of relay station for people who need it. There is not a direct risk involved.

It might help to know how It works:
#Iranelection folks want to go to their desired blocked website, and ar enot able to.
They get a relay trough a proxy server, provided by Austin. They setup their browser/whole system to use the provided proxyserver. Then any website request (and other protocols if necessary) are sent to the proxy server, which will initiate the connection to the blocked website. The connection gets established and the person gets the content trough the proxyserver that forwards all the blocked stuff to #iranelection folks.

But, as always when running a server: have a proper firewall set up. If you are behind a router set it up as dns for your local network, prefer individual port forwarding settings to a default dmz server, and check your logs from time to time.

I have a router, with dns server for my local computers. I have ports forwarded from default port numbers to internal random port numbers, have firewall in stealth mode, and I’m as safe as could be!

But I do back up regularly in case…

sudo mkdir -p /Applications/Squid/var/cache/00
sudo chmod 777 /Applications/Squid/var/cache /Applications/Squid/var/cache/00

Hopefully that works! I’ve never seen that error though