Haystack needs your help to support a free Internet in Iran!
15
Jun

How to setup a proxy for Iran citizens

Update 4: There is now a recommended squid config file available.
Update 3: Here’s a guide for the Windows users out there.
Update 2: I will no longer posting proxies on the public list. If you set one up, please e-mail me@austinheap.com to contribute to the private one or e-mail me if your an Iranian that needs access!
Update: There’s a list of working Iran proxy servers over here.

If you’re using CentOS/Redhat, it’s pretty straight forward to setup a proxy and help give access to those in Iran who are being censored.

Login as root and run the following

yum install squid
nano -w /etc/squid/squid.conf

Inside the code editor search (Control-W) for the line “http_access deny all” and change it to “http_access allow all”. This will make your proxy open and accessible to the world. If you would like to limit your proxy to Iranian IP blocks, you want to change “http_access deny all” to read “http_access allow TRUSTED” add a line (BEFORE the http_access line to setup an access control list [ACL]). This ACL line that defines TRUSTED should read:

acl TRUSTED src 62.60.128.0/17 62.193.0.0/19 62.220.96.0/19 77.36.128.0/17 77.77.64.0/18 77.104.64.0/18 77.237.64.0/19 77.237.160.0/19 77.245.224.0/20 78.38.0.0/15 78.109.192.0/20 78.110.112.0/20 78.111.0.0/20 78.154.32.0/19 78.157.32.0/19 78.158.160.0/19 79.127.0.0/17 79.132.192.0/19 79.170.144.0/21 79.175.128.0/18 80.66.176.0/20 80.69.240.0/20 80.71.112.0/20 80.75.0.0/20 80.191.0.0/16 80.242.0.0/20 80.253.128.0/20 80.253.144.0/20 81.12.0.0/17 81.28.32.0/20 81.28.48.0/20 81.31.160.0/20 81.31.176.0/20 81.90.144.0/20 81.91.128.0/20 81.91.144.0/20 82.99.192.0/18 82.115.0.0/19 83.147.192.0/18 84.47.192.0/18 84.241.0.0/18 85.9.64.0/18 85.15.0.0/18 85.133.128.0/17 85.185.0.0/16 85.198.0.0/18 86.109.32.0/19 87.107.0.0/16 87.247.160.0/19 87.248.128.0/19 89.144.128.0/18 89.165.0.0/17 89.221.80.0/20 89.235.64.0/18 91.98.0.0/15 91.184.64.0/19 91.186.192.0/19 91.206.122.0/23 91.208.165.0/24 91.209.242.0/24 91.212.16.0/24 91.212.19.0/24 91.212.252.0/24 92.42.48.0/21 92.50.0.0/18 92.61.176.0/20 92.62.176.0/20 92.242.192.0/19 93.110.0.0/16 93.190.24.0/21 94.74.128.0/18 94.101.128.0/20 94.101.176.0/20 94.101.240.0/20 94.139.160.0/19 94.182.0.0/15 94.184.0.0/17 94.232.168.0/21 94.241.128.0/18 95.38.0.0/16 95.80.128.0/18 95.81.64.0/18 95.82.0.0/18 95.82.64.0/18 95.130.56.0/21 95.130.240.0/21 188.34.0.0/16 188.93.64.0/21 188.121.96.0/19 188.121.128.0/19 188.136.128.0/17 188.158.0.0/15 193.189.122.0/23 194.225.0.0/16 195.146.32.0/19 212.16.64.0/19 212.33.192.0/19 212.50.224.0/19 212.80.0.0/19 212.95.128.0/19 212.120.192.0/19 213.176.0.0/19 213.176.32.0/19 213.176.64.0/18 213.195.0.0/18 213.207.192.0/18 213.217.32.0/19 213.233.160.0/19 217.11.16.0/20 217.24.144.0/20 217.25.48.0/20 217.64.144.0/20 217.66.192.0/20 217.66.208.0/20 217.146.208.0/20 217.172.96.0/19 217.174.16.0/20 217.218.0.0/15

Turn off logging by adding these two lines:

access_log none
cache_store_log none

Save the config file and as root issue the following command to start the Squid proxy server:

service squid start

Please don’t run this on a machine that you’re worried about or is used for production sites; and take basic security precautions, ie: moving SSH off the default port, using iptables, etc.

Once your server is up and running please tweet @austinheap and let me know!

Related posts:

  1. How to setup a proxy for Iran citizens (for Windows!)
  2. How to setup a proxy for Iran citizens (Virtual Machine Disk Format!)
  3. How to setup a proxy for Iran citizens (for Mac!)
  4. Working Iran Proxy List
  5. Best Proxy Practices (BPP!) and an update
Tags Posted under Internets, Iran, Politics, Technology by Austin

102 Responses


  • Thanks for this. I tried to set one up for my friend in Iran with squid but it just didn’t work. She’s currently using one but Twitter and youtube are still blocked for her. Now I hear that yahoo mail (The way we were communicating) is blocked *sigh*

    by: Jen, Jun 21st at 11:30 am

  • Dear Austin, I have been trying to set up a proxy but failed as i can not understand what exactly nneds to be done from the stage 4 onwards. I left several message for you on twitter. can you hekp or if you don’t want to resond let me know wher I can find teh answer.
    Many thanks

    by: pesareziba (on twitter, Jun 21st at 5:02 pm

  • I agree with the logging disablement: not necessary at all. But add the following line (I have it above the portnumbers):

    client_netmask 0.0.0.0

    This way logging is done like this (I paste from my log)

    1245627093.320 7014 0.0.0.0 TCP_MISS/302 424 GET http://…(edited)...
    1245627095.569 2202 0.0.0.0 TCP_MISS/200 4765 GET http://…(edited)...
    1245627095.891 378 0.0.0.0 TCP_MISS/200 13657 GET http://…(edited)...
    1245627095.986 473 0.0.0.0 TCP_MISS/200 124465 GET http://…(edited)...

    All proxy clients are reported to as 0.0.0.0

    by: olli, Jun 21st at 6:44 pm

  • I have a 2 meg connection. How fast is fast enough?

    by: Me, Jun 23rd at 12:51 pm

  • How can I help with os x?

    by: laranja, Jun 23rd at 5:07 pm

  • My squid on linux is working, thanks.
    I had to change the port from 3128 to 8080.

    Please try the proxy connection: 82.211.235.184:8080

    Is it working?

    by: terljv, Jun 24th at 6:10 am

  • hi i need see

    by: hosein, Jun 25th at 4:31 pm

  • The instructions provide a simple proxy. However, this is potentially dangerous: All traffic into or out of Iran is subject to Iranian government monitoring, and these proxies are NOT encrypted.

    by: dave, Jun 27th at 11:43 am

  • о да.. согласен

    by: Мечислав Ракутин, Jun 29th at 8:44 am

  • Спасибо, пост действительно толково написан и по делу, есть что почерпнуть.

    by: Любомир Райский, Jun 29th at 9:55 am

  • Мне очень хотелось бы пообщаться с кем-то по этой теме. У кого есть возможность, пишите в асю 22974539

    by: Владимир Осокин, Jul 7th at 8:29 am

  • The things you can do with the IPhone & IPod Touch are simply incredible. A company called Netwurk Solutions (yup, network with a u) created an app that turns your IPhone/IPod Touch into a proxy server. Yeah, I know, kinda nuts, but it actually works!

    Basically, what you do is, turn on Pocket Proxy, and configure your wireless router to allow connections to your Pocket Proxy, and that is all. If your router is properly configured, with port forwarding, anyone should be able to connect to your server.

    My brother and I decided to test this out. I started Pocket Proxy up, got the server information, and sent the information to my brother (who lives across town). Usually, with proxy servers, the responses can be slow, but with Pocket Proxy, he didn’t really notice a slow-down. He was able to go onto Facebook and MySpace, leave comments, view profiles, and do general browsing. Best of all, it appears to be a Highly Anonymous proxy server, just like Netwurk Solutions said! So, the websites that my brother visited could never know his IP, and only the server IP was left behind.
    The only drawback (I guess you could consider it one) was that Pocket Proxy works really really well with Firefox or Google Chrome, but not so well with IE (does anyone still use IE? Is this really a drawback?). Anyway, to avoid network restrictions, I guess that a die-hard IE user could switch to Firefox or Google Chrome.

    It seems that this proxy server (while only Wi-Fi) could be incredibly useful in certain circumstance, especially since it is mobile. I suppose that if a random Wi-Fi connection was available, then someone could potentially make random a mobile proxy server and no one would be the wiser. Pretty cool, huh? Although the router would need to be an open router that allows connections, I think it is interesting food for thought.

    For those of you who don’t know, a proxy server is basically a server that you use in conjunction with your browser, to hide your IP Address, and also could be used to get around some network restrictions.

    by: AppSniffer, Jul 14th at 11:49 am

  • Thanks for sharing, very usefull -note-

    by: mengembalikanjatidiribangsa, Sep 26th at 6:29 am

  • you fuvking twat ill rape your face

    by: jaske, Oct 20th at 8:12 am

  • i hate whit people yu fucking twat ill kill u lol ill poke your mums bean with a fork lol your dad is soo fat he obese

    by: asmad, Oct 20th at 8:14 am

  • twitter traces are getting iranians beaten jailed and their bank accounts confiscated… it’s not the US where activists sing songs while in lock up then go home and smoe out…

    by: tonyhongkong, Oct 26th at 5:34 am

  • I’d over the level of to mole that too!

    by: Kwess, Nov 19th at 4:54 pm

  • hi,
    i realy need to get news about iran and visit my facebook webpage , could you mail me and help me how to use it ?
    thank you !

    by: parham, Dec 28th at 4:25 pm

  • Thank you kindly, Austin!
    With pro-gov protesters having fired on people, the Iranians are going to need help in fulfilling their potential now.
    Good luck to Iran and her people!

    by: Jane, Jan 9th at 5:46 pm

  • It’s easy to get http proxies from proxy list sites and to get an access to blocked sites too. ;) http://proxyhttp.net for example, http://samair.ru http://sockslist.net and etc.

    by: TrueBoy, Jan 22nd at 10:41 am

  • i am bord

    by: charlie, Feb 15th at 4:07 pm

  • Мое ИМХО, что не стоит писать такие посты вообще. Никогда

    by: Rengenx, Mar 13th at 7:50 am

  • khak bar sare in dolatiha ba in filteringeshoon

    by: david, Jul 11th at 7:13 am

  • СОБЕРЕМ ДЛЯ Вас по сети интернет базу данных потенциальных клиентов для
    ВАШЕГО БИЗНЕСА
    (название, телефон, факс, адрес,род деятельности, e-mail, www, имена и др информацию)
    Точно! Быстро! Много! Недорого!

    УЗНАЙТЕ ПОДРОБНЕЕ по:
    ICQ: 6288862
    Email: prodawez@mixmail.com
    Skype: basedannix

    ЕЩЕ ПОДРОБНЕЕ по:
    Телефону +79133913837

    by: RokBoockyKigo, Jul 14th at 7:29 am

· 1 · 2

Share your comment

Name Your Message
Email Website * We know you have something to say