Networking :: Transparently Chaining Squid And Privoxy For A Local Machine?
Jul 18, 2010
I'm trying to setup iptables to send web (tcp?) traffic through Squid and Privoxy transparently (to save having to setup everything per browser and hoping they honor their settings). I know I have done this before but I can't find the old config nor remember the exact options needed to do this.What I am wanting specificially is for Privoxy to grab the data as it leaves the browser, do its thing then pass it on to Squid before sending it down the line, then doing the same incoming (Privoxy -> Squid -> requesting app).
View 1 Replies
ADVERTISEMENT
Sep 28, 2009
I am trying to set up squid to make switching proxies easier. I have a laptop which I use at work and at home. At work, I need to connect to the internet via a authenticated proxy. At home, I connect directly to via mobile broadband. So I end up switching proxy settings twice daily, which is just irritating! To solve this I want to set up a system whereby I never have to worry about a proxy - my browser sees a direct internet connection which squid (on my computer) intercepts and forwards either to the mobile broadband connection or to the work proxy (along with the required authentication) depending on which is available. I've read various articles on how to do clever things with iptables and squid, but I don't understand enough of the networking jargon or concepts to know when I need to change to make it work in my situation, or if it is even possible.
View 2 Replies
View Related
Mar 3, 2011
i have configured the squid for my lan. My lan has three redhat 5.3 web servers. Now by using proxy server, i wish to give access to external clients for my web server and restrict to local client, accessing wan through port 80
View 2 Replies
View Related
Sep 30, 2010
I've been searching for a while in forums about the issue I'm facing but couldn't find anything clear, or at least my net search skills are pretty lame. I'm facing a problem with prompted user password in a SSH chain connection when using authorized_keys.
I have: (1) Client - (2) Server - (3) Testing machine (testing machine is connect to Server via usb network)I've created keys for Client and Server, and updated authorized_keys in host machines with the key values: Testing machine has Server public key, and Server has Client public key.Until now everything is fine, if I try to connect via ssh the user password prompt is not shown since public key is found in authorized_keys.
For example: from Client: Code: ssh server Works fine, no password prompt.from Server: Code: ssh testing_machine Works fine, no password prompt.But if try to do that from Client only: from Client: Code: client:$ ssh server Works fine, no password prompt.from Client: Code: server:$ ssh testing_machine Asks for password.Bellow the verbose output from previous ssh command:
Code: ssh -v root(at)192.168.100.2
OpenSSH_5.3p1 Debian-3ubuntu4, OpenSSL 0.9.8k 25 Mar 2009
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to 192.168.100.2 [192.168.100.2] port 22.
[Code].....
View 1 Replies
View Related
Mar 31, 2009
I tried to authenticate using ntlm proxy authentication service and my computer could not retrive the IP address. Currently I am using fedora cammbridge
View 1 Replies
View Related
Jul 25, 2010
I have a few ubuntu machines in my house, 1 mythtv backend server with other services as well, 2 mythbuntu frontends boxes hooked up to tv's etc. I wanted to push the audio from my laptop out over pulseaudio to the machine connected to the AV equipment.
I could not see any other pulseaudio sinks in padevchooser... this lead me down the road to investigating avahi.
When I run avahi-browse on my laptop (hydrogen) it only returns the services published from itself:
Code:
$ avahi-browse -ta
+ wlan0 IPv4 byron's remote desktop on hydrogen VNC Remote Access local
+ wlan0 IPv4 hydrogen [00:1b:77:71:97:76] Workstation
[Code]....
My laptop has vmware on it, and I've changed the vmnet intefaces to not support multicast so avahi ignores them. but I'm still at a loss to why my laptop can't see the other machines on my network with avahi (mdns).
View 1 Replies
View Related
Feb 28, 2010
I have a reverse ssh connection established from a remote machine to my local machine - it is established with autossh from the remote machine - I know it is connecting because I can see the two ssh processes on the local machine - and, when I kill the two ssh processes, two new ssh processes are immediately established. But I cannot login to the port on the local machine. I have tried everything - it simply refuses to connect. This remote machine is miles away and not readily accessible.
Code:
ssh -p 7766 -vvv user[at_sign]192.168.1.108
OpenSSH_5.1p1 Debian-6ubuntu2, OpenSSL 0.9.8g 19 Oct 2007
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
[Code]...
I'm wondering if there is some way I could utilize netcat or socat to "tap into" this connection from my local machine??? (My ultimate goal would be to get to a shell on the remote machine.)
View 5 Replies
View Related
Jul 7, 2011
My company requires a proxy server that requires a manual configuration to use. Many Ubuntu apps, however, do not respect the HTTP proxy settings.Is there anyway to modify my local firewall settings to automatically forward IP traffic to the company proxies in the same way a transparent proxy might work?Would I need to set-up my own local, transparent squid proxy which itself forwards to the company proxy?
View 1 Replies
View Related
Apr 15, 2010
In INSTALL I can see:
Quote:
to build from either unpacked tarball or CVS source:
autoheader
autoconf
./configure # (--help to see options)
make # (the make from GNU, sometimes called gmake)
su # Possibly required
make -n install # (to see where all the files will go)
make -s install # (to really install, -s to silence output)
code....
I think that trouble is in autoheader. I don't now does src2pkg (2.1) support it.Is it impossible to build a package of privoxy with src2pkg?
View 9 Replies
View Related
Dec 18, 2010
i want to know mac address of a particular ip but the problem is that i am unable to ping that ip but that ip is being used by someone in my local network that i know from my proxy logs. i want to know the mac address of that ip,
View 5 Replies
View Related
Jun 3, 2010
How to install kerberos on a local machine...?
View 2 Replies
View Related
May 26, 2011
I just getting back to working with linux. I'm having a problem with what seems to be an iptables thing or something easier than that, Enough here is the question I can get apache to run on the local machine by either going to http://localhost or by the ipaddress on the CentOS machine. But for some reason when I try to take a look on my laptop (on the same network) and try to go to it using the IP address is doesn't go. I can ssh from my laptops but it will not open the apache startup page.
View 1 Replies
View Related
Dec 12, 2009
following on from [URL] I was having a little think about how to make this concept more secure. its easy enough to separate known and unknown clients out via MAC address. but that system is easier to break than it is to set up either, sniff out a mac address already connected to the system, and spoof that address.or, more simply, set a static IP on your wifi device, and avoid the redirection completely. so, is anyone aware of a relatively straight forward setup that would allow me to identify clients on my network without relying on MAC address, would more forcefully separate out known and unknown hosts (vlan??). As well as doing so without alerting them to the fact, and without requiring known hosts to do anything special, or install software. Or requiring any more hardware than I have already. (hardware = a debian box with 2 NIC's acting as a gateway between all internal network, and the billion router which handles the outside world not getting in, and a WAP attached to the internal side of the network. also somewhere I have a wifi card that I could attach to the server to replace the AP) I assume some sort of authentication mechanism is required, but I dont know much more past that.
View 2 Replies
View Related
Jul 30, 2010
I m using the pc as gateway....i have two NICs:1) 10.6.15.254 ---> for internal network 10.6.15.02) 10.6.0.115 -----> for out side world I can ping and ssh any out side machine but when i try to ping or ssh any machine in the 10.6.15.0 network it says host unreachable.... i can ping and ssh gateway i.e. 10.6.15.254 and 10.6.0.115 but not the client machine in the 10.6.15.0 network from out side world even i flush iptable rules i can not access any client machine i m using ubuntu 10.04 as operating system..
View 2 Replies
View Related
May 26, 2010
i have a problem........ How to redirect local http port to remote ip ddress(192.168.10.64) using iptables..my destro is Centos 5.3 my rule is this iptables -t nat -A PREROUTING -s 0/0 -d <my local ip> -p tcp --dport 80 -j DNAT --to-destination 192.168.10.64
View 1 Replies
View Related
Jul 27, 2011
I am a newbie trying to enable virtual hosting and run it on a local machine without fqdn. I checked the http://9.9.9.92/ (my IP address) site and saw my (default) page. I would like to virtuly host a asdf.com If virtualy hosting is setup properly - how do I access the new setup? Just type http://asdf.com ? or is there more to it?
View 6 Replies
View Related
Dec 26, 2009
Is there any way to redirect a remote Linux machine mplayer output audio to local one?
View 2 Replies
View Related
Mar 29, 2011
I try setting up Privoxy but I keep getting this error and I don't know how to fix it. I try downloading other network programs and at the end of the download Ikeep getting this error.
View 2 Replies
View Related
Jun 14, 2011
Have seen this post and was wondering why would that be so.
Quote:Originally Posted by DaveG
you do not want to download software through the privoxy filters - they could corrupt the data.
Privoxy is supposed to either block or allow specific adverts, why would that corrupt a single file, like an .exe or .tar.gz?
View 1 Replies
View Related
Feb 24, 2010
Long-time linux user, new to Ubuntu (mainly a gentoo user). I need to get tor and privoxy up and running for a less computer-capable user. I installed Tor and Privoxy, configured them (apparently correctly) and they both appear to work just fine when I start them manually from their init scripts:
sudo /etc/init.d/tor start
sudo /etc/init.d/privoxy start
However, I cannot seem to get privoxy to start up properly when the machine boots. Tor starts up and waits patiently, but privoxy is dying or getting killed for some reason I can't understand, and on Ubuntu, have no idea how to diagnose. There's no privoxy process after booting, and the init.d script reports status: not running. I have the startup scripts for both Tor and Privoxy linked to in all the relevant runlevels. I played with the order thinking it might be a dependency thing. Hell, I even put a line in rc.local to try and force it to go. But no matter what I do, I can't seem to get the privoxy service to start for me any way but by manually typing 'sudo /etc/init.d/privoxy start' in a terminal, after logging in.
1. Help me get privoxy to auto-start during init
2. OR Help me figure out how to figure out how to get privoxy to auto-start during init. On Gentoo, all of the init scripts are listed on the screen during init as they run, and you can even run through them interactively by pressing I during startup. I have no idea how to do this on Ubuntu. I modified the kernel line to remove the splash screen, but the information Ubuntu puts on the screen during init is quite haphazard. How do I figure out what's going wrong with the privoxy init script?
View 1 Replies
View Related
May 15, 2010
I am running karmic on a laptop. I recently changed iptables to drop all new incoming packets (not the related or established ones) on all ports. I was not running a proxy, so this worked fine. More recently I got v 3.0.13 of privoxy with apt-get and looked through the config file. I changed the default port in the privoxy config to 8080 and kept the ip at 127.0.0.1. Then I changed the Firefox settings to use a HTTP proxy at 127.0.0.1 with port 8080. when I try to run privoxy with the command: privoxy /etc/privoxy/config , the terminal outputs no errors. Then when I try to access a webpage through firefox the page will not load, but firefox doesn't display any reason for it. I don't really even know if privoxy is running because when I check the logfile (after having uncommented the logfile line in the privoxy config file) it is blank. I don't know much about networking, but I was wondering if someone could tell me why this is happening? Well that was a bit dumb of me. I just had to allow new packages in from localhost.
View 2 Replies
View Related
Jun 24, 2009
I have setup squid on a local-only ADSL account as per management to cut costs. But now they have asked to route international sites via another proxy. The local sites should still go through the local proxy and the international sites get routed to another vpn.Is it possible to use iptables for domain names and redirect the traffic.
View 2 Replies
View Related
Feb 9, 2010
i built a new basic squid proxy server. so when i check my ip from internet various website. it shows my local ip address.
1) how to know squid proxy mode working in which mode, like tranparent rever or web proxy etc
2) how to hide all local ip from outside world, let our isp proxy global show everywhere by which traffic go out
View 1 Replies
View Related
Feb 21, 2011
Not sure why this is happening. I've tried searching for a solution but it's not clear where I went wrong. I wasn't doing any real modifications to anything.
Attached is a picture of Nautilus not changing with one of the default themes, "High Contrast".
View 2 Replies
View Related
Apr 26, 2011
Every time I try to set to standard.(cautious|medium|advanced) I get Apr 26 17:20:59.960 7f7faff15700 Fatal error: can't load actions file '/etc/privoxy/match-all.action': invalid line (9): { +standard.Cautious } /
or something similar. No additional help is available in the docs. So i try to use http://p.p (i.e. config.privoxy.org), and click on [URL]... expecting to get the three mode buttons. It just returns to p.p.
I already set the three edit vars to allow remote editing etc.So I looked in the top 15 Google hits for "Privoxy standard.Cautious". Apparently, nobody else knows how to do this either even tried launching firefox in root. but I'm getting kind-of frustrated with the writers/maintainers of Privoxy 3.
View 4 Replies
View Related
May 31, 2010
Ubunu 9.1 and I would like to set up my machine so that when i type a domain name into another browser on my local network, I will get the apache server. I currently access the pages i have on the ubuntu server by typing the ip address into another machine on the network, I would like to type in a DNS type of name instead.
Ultimately, I would like to access this machine from outside of my network over the Internet, and would appreciate insight on how to do this, too.
View 3 Replies
View Related
Feb 2, 2011
I would like to be able to have one local user connect to the X of another local user and run an X program. On fedora, I can simply run:
$ xhost +
And then have the other user run:
$ sol --display=0.0
This is not working on my ubuntu (10.10). I am guessing that there is an additional level of Xauth restrictions, but I cannot find out how to get past them. Both users are local to the machine. I would like to not use sux or gdsu as both require you to enter the password and I would like this to be seemless. I am aware of the security concerns and believe that I have mitigated them.
View 8 Replies
View Related
Jun 5, 2011
The devices tab under ubuntu one preferences lists only <LOCAL MACHINE> the staus at the top says disconnected, the connect button is grayed out and the reset button at the bottom right does nothing. Files don't sync etc but I think this is as a result of the situation described above. I have tried on the advice of an older thread to delete the token for Ubuntu one from 'passwords and encryption keys' and then revisit Ubuntu one preferences in order to sign in again and grant my computer access but this made no difference.
View 9 Replies
View Related
Jun 3, 2010
How to install kerberos on a local machine ?
View 10 Replies
View Related
May 16, 2010
I'd like a way to see all of the devices on my local network and what their local IP address is. I recall that I used wireshark to troubleshoot a similar problem a while back, but it doesn't seem to have a way to see all of the devices- only the traffic. (I'd like to do this without having to physically interface with my router if possible, and I am in an encrypted network if that matters)
View 6 Replies
View Related
