I was willing to create proxy in between the web app. and MySQL database so that I can do some modification before sending the query to the DB. But how to grep the query in the middle isn't working in the head yet. I found a tool named 'greensql' which captures the query in the middle but couldn't get how they are doing it.
View 4 Replieshow to lock down individual users from setting a proxy server. Its a server not a WS so it should never go to the internet. I want to lock down the system side and firefox 5 settings.
View 14 Replies View RelatedI have my own internal bind9 server, for my local domain, and I forward internal requests for public domains to OpenDNS servers. This server is not in a DMZ, but is instead behind an dynamic NAT. I do not accept queries from the public network, only responses. I understand that DNS is primarilly a UDP protocol, so it can't pass through a stateful/nat. without a firewall allow.
I've done a little reading and learned that bind9 does not run 53 <-> 53 anymore (is now >1024 <-> 53), and modified my config so it works like bind4 did, but I am concerned that this makes me less secure. additionally, I'd really rather not have a completely open 53 rule, but it seems that if I constrain 53 traffic to my known forwarders, it interfers with some of my network services like transmission. so, what firewall rules would you guys recommend for recieving forwarded DNS query responses to my server?
is there anyway for me to dl a proxy or use a proxy on ubuntu? other than the web based ones. i looked into using system->preferences->network proxy, but that stuff went way over my head. can someone explain this to me? how would i go about setting up a proxy for the web and using it effectively?
View 4 Replies View RelatedSetting up an Internet proxy In the past I had set a computer to act as an Internet proxy. This would be multihomed, and running dansguardian, tinyproxy and firehol. Then webmin would be used as interface. By time I realised that this system is far from effective. Is there some other way to setup a proxy to be placed between users and the Internet? I would like (the admin) to be able to see in which sites users go and have a lot of control on access..
View 2 Replies View Relatedhow to lock down individual users from setting a proxy server. Its a server not a WS so it should never go to the internet. I want to lock down the system side and firefox 5 settings. found this link but its a bit confusing. I want to lock the system and mozilla Locking preferences - MozillaZine Knowledge Base I tired this and put the local-setting.js in and now the firefox wont start at all. "failed to read the configuration file. Please contact your system administrator. well read several sites that all say to do the same thing but they are talking windows and mac so may be i am missing something being Linux...So what I did was create a file called
/usr/lib64/firefox-3.0.12/defaults/profile
more mozilla.txt
//
[code]...
Still get error.this link explains what the setting 0-5 are used for Network.proxy.type - MozillaZine Knowledge Base So i thought this might be a permission issue and did a 777 on the local-setting.js file. Still get the error.
my linux box in the office has an a proxy server to access the internet. i can set this on my browsers. id like to know how i give my shell (bash) the proxy server settings so i can wget,yum install perl modules, etc. on my shell terminal without problems.
i used
Code:
export http_proxy=http://<proxy-server-ip>:<port>
for example
Code:
export http_proxy=http://bsc.aut.ac.ir:8080
and also i did this for ftp. but i doesn't work.
I am playing around with transparent proxies, unfortunately I do not have two machines to test it out with. The current way I am doing things is the program makes a request to a computer on port 80, I use
Code:
iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j REDIRECT --to-port 1234 to redirect to my proxy that is listening on port 1234. The proxy will send out a request to port 81 (as all outbound port 80 are being fed back in to the proxy and if it sent out to port 80 it would just be a infinite loop) so I want to do something like
Code:
iptables -t nat -A OUTPUT -p tcp --destination-port 81 -j DNAT --to-destination xxxx:80
The problem lies with the xxxx part. How do I change the destination port without changing changing the destination ip?
I have recently installed tor + vidalia + privoxy on my maverick system. What I was hoping to do was set up transparent routing through tor using the instructions here - [URL] But Ive had no luck with any of the examples given. When Vidalia tries to connect it stops at the point of generating a tor circuit and never gets any further.
View 1 Replies View Relatedi want to setup a proxy authentication on fedora 15 for minimum of 5 users using squid but i had successfully setup a proxy sever on my system and its working perfecly.# vi /etc/squid/squid.conf this was the output.
# Recommended minimum configuration:
#
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
[code]....
where will i entered the configuration and what are the configuration?
I followed this guide: [URL] and restart the Squid Server with no errors but when I try to SSH into it:
Code:
ssh -L 8080:squidserver:8080 user@squidserver
It just hangs there for a long time, not timing out and eventually (after a long wait) I get this:
Code:
ssh_exchange_identification: Connection closed by remote host
What could be the problem? I can SSH normally into the computer, but not into the proxy server. Do I need to forward the 8080 port on that network?
Ubuntu 9.10 10.04 "software center" seems like a good idea compared to the previous implementation but it ignores proxy settings under system->preferences->network proxy and system->administration->synaptic package manager->settings->preferences->network.
Other sections of Ubuntu work fine through the proxy e.g. web browsers and using synaptic directly. However sudo apt-get install doesn't work through a terminal on Ubuntu 10.04 beta despite all updates. problem is definitely in Ubuntu as some parts of it recognize the proxy settings and other parts don't. This disconnection appears to be worse in U10.04 compared to U9.10 but earlier distributions (from memory) never had this problem. Is there a "fix" I can use to get Ubuntu 10.04 to recognize the proxy settings across all its features?
I used windows OS and installed Ubuntu 10.04 (amd64) in separate partition and works well but had a problem in internet connectivity. Likely reason may be the proxy setting that we used in college (currently). I used this commands to set up the IP address and gateway.
ifconfig -a | grep eth
"eth0"
sudo ifconfig eth0 192.168.5.209 netmask 255.255.255.0
[code]....
Then I manually set the proxy setting of HTTP which is given as proxy server 192.168.5.2 and port as 8000, further more there is a wins setting which is 192.168.1.178, really don't know where to put this number.
I think there is an application which lets you set the proxy settings for all applications. I remember seeing something like this in Gnome's network menu but now I'm using XFCE.
View 1 Replies View RelatedI have to set up a proxy for my work's network. No computer except the proxy has a direct internet connection. The proxy will NOT be transparent so it authenticates with Active Directory and allows or denies pages. The squid proxy is up, and working accordingly, denying and allowing what's needed to who's needed. BUT! Thunderbird and Outlook didn't work, so in less than 10 minutes I was forced to fall back.
I read googling a lot, and searching a bit here about socks, which seems to be what I need but also that squid is already a socks proxy. Web pages were the concern, it's not needed that other stuff is authenticated, it might as well be transparent for Outlook, Thunderbird and other programs *for example, it's not needed to block a Warcraft III game, though, allowing it explicitly is not the point either* but as of now, none can connect *haven't actually tried Warcraft though, but stuff like Adobe's updater didn't work either and I recall someone mentioned Windows Live messenger didn't either* The Squid Proxy is a CentOS.
I am trying to install a router on my CentOS 5 box, while i have properly configured IP address, Subnet, Default GW and DNS, I am at the point of trying to set up the Proxy. I have added a line: "proxy=http:ip_address:8080/" to the file of "/etc/yum.conf" The Proxy server here does not require any username nor password however I still cannot ping any website, while I tried to ping 74.125.45.100 (google.com) it returns the following message:
[Code]....
im looking at changing the computer systems over to Ubuntu, at a scout campsite im staff at. i have sorted some filtering out with dansguardian.
but how do i limit the powers of users, so remove all the administrative side and most importantly stop a user changing the network proxy setting.
i have used ubuntu before but not for a while, so im a bit of a newbie atm.
I am configuring a proxy server in my desktop, which in turn passthough a proxy ( parent proxy ). I have added following line for this
cache_peer proxy.tcs.com parent 8080 0 proxy-only default
But for parent proxy, we have to specify username and password in this line, I am confused here.
login=userassword | PASS | *assword
Here where I have to enter username and password ?
I got a problem about network proxy setting. With the graphics setting interface, I set auto proxy with the URL address but it is weird that the setting only work with eth1(wireless), doesn't work with etho(wired). however my wireless driver is always a problem for Linux. i also tried export http_proxy= XXXXX:8080 it still doesn't work at all.
View 2 Replies View Relatedi must make this work with the use of virtual pc's. I have vm player and installed fedora ( the latest version ) and one xp . So i have 2 virtual pc's. I'm making it simple for start so i can add more pc's when i see that it is working. I have setup a dhcp server at the fedora virtual pc. The fedora virtual pc is like a soho router. The xp pc is getting ip from dhcp while the fedora one has a static one.
My pc is behind an adsl router. Both virtual pc's can see each other which means i have no connectivity issues.Im trying to setup a squid proxy ( transparent one ) so for example the xp pc can access porn sites and such. I used all required configuration for the squid to work and started the service. Ive also inserted with iptables the commands to forward all incoming port 80 packets to port 3128 ( the squid ). It doesnt seems to be working and i thik i know why but i dont know how to fix it.
Because the xp has a gateway at 192.168.1.1 ( the adsl router ) packets go directly to it and not to the soho router ( fedora virtual pc as i intend to do) What can i do to solve this problem ? How can i forward all packets to go to the fedora virtual pc first and then the fedora pc to forward them (if necessary) to the adsl router? PS. I used Bridged connection on the networking configutration on the vmware player ! If you also want i can post the code for squid or iptables if needed !
I my office I have configure dhcp in my centos sever
eth0 for adsl-setup
eth1 for lan 172.16.0.4
I am using squid proxy server for internet access,
in my office all are using laptop through wifi , so i need to configure the browser proxy setting for accessing internet.
is there any way to setup automatically get the proxy setting as dhcp. I have tried transparent proxy but no success.
When i click preferences-network proxy a screen of comes up showing the system internet configuration. Is there a way to make all system connections got through tor?
View 5 Replies View RelatedI have a http proxy account. It works well under windows through wodTunnel(an active X control component). But, I usually works under linux. I want to use it here. But I don't know how. I tried gstm, it can connect to the server successfully, but it seems can't respond to my http request. What should I do next?
View 3 Replies View Relatedhere i would like to inform you that my company ask me to block facebook site at the work time it is: 08:00-12:30 and 14:00-17:30 in proxy server.i'm still confuse how to do!i need the details configuration in squid regarding how to block the sites
View 2 Replies View RelatedI'm using a local proxy server VPN'd to another network.
How do I setup either Firestarter or Gufw/ufw to ONLY allow in/out from ONE port? (The one port the proxy uses)
Ex: Firefox is proxied to 127.0.0.1, all ports, and then the proxy picks it up, and sends out on port xxxx, and recieves on port xxxx, then sends back thru 127.0.0.1, back to Firefox.
Any setting/rules I've treid on either Firestarter or Gufw kills the proxy>VPN (Proxy won't connect to remote network)
Addendum: If I start the proxy FIRST, then the firewall, all is good. I'm thinking the proxy uses a port to connect with remote network first, then switches to my configured xxxx port...hmmm
I am trying to install a proxy on my Kubuntu 10.10, since I live in a country that blocks access to almost everything. I tried to install squid, anon, socks.. both with command-line and KPackageKit, but every time, I have this error message:
[code]...
Rather than use pfsense, etc I decided to create my own router/proxy etc based on an atom base with 2 nics.Proxy/routing/dns/etc all working fine, I now though want to lockdown the fw rules.ETH1 is the WAN NICETH2 is the LAN NICI'm guessing i want to allow anything out of ETH1, but only allow incoming to ETH1 when its established or related... What about ETH2 though? Any ideas pls? Am used to configuring iptables on single nic, certainly not a router.
Code:
Chain INPUT (policy ACCEPT 18535 packets, 10M bytes)
pkts bytes target prot opt in out source destination
[code]....
Is my ssl connection secure if I'm going through a proxy. Is it possible to craft a malicious proxy to steal/crack authentication?
View 2 Replies View RelatedI want to install L7 iptables on my Linux that is used as a firewall for my internal network composed of some 200 computers. For my IDS , I plan to use Snort. Can I install snort on the same linux that I use as my firewall, or I have to install it on a different PC. Do I need to make use of L7 iptables, while I implement Snort. Shall I use Snort as IDS or IDPS? Where is the best place to install Snort, inside or outside the fire wall? Do I need to have a separate professional proxy installed on the linux, or the L7 proxy is sufficient? What would be the minimum hardware resource that Snorts requires(CPU, Ram)? For better security and performance , do I need to replace my present Linux with a PIX or any other hardware firewall?
View 1 Replies View Relatedi am using RHEL 5. i configured proxy server. now i want block one website.
View 2 Replies View Related