0
votes
2answers
238 views

The proxy server is refusing connections vs Access Denied

Our Network administrators configured Proxy server to block one website[LinkedIn.com]. On directly accessing http://www.linkedin.com/, seeing error message - "Access Denied". But when I accessed ...
1
vote
1answer
68 views

how to forward proxy requests using iptables

I've this schenario ----------------- ---------------- ---------- | SERVER A | ---(port:2128)> | PROXY | ---> | INTERNET | | (10.30.1.1) | ...
2
votes
1answer
43 views

Allow only one ipaddress through a cisco firewall without pcs knowing there is a proxy server

We have a PC behind a firewall. (ASA 5505) [PC] => [ASA Firewall] => [Corporate Proxy/Firewall/Anything] => [Internet] :- where the PC and ASA Firewall are under our control... and the rest are ...
0
votes
1answer
153 views

Squid loads some website very slow

I installed a couple of weeks ago squid on my network and first it was making websites load very slow with the default configuration but after a few changes in the squid.conf (copied from a different ...
0
votes
1answer
64 views

What are the security benefits of using a proxy server?

In Wikipedia is written: Security: the proxy server is an additional layer of defense and can protect against some OS and Web Server specific attacks. However, it does not provide any protection ...
0
votes
2answers
139 views

squid specify outgoing network interface

I have a Linux Debian machine with many network interfaces (venet0:1 to venet0:5) running Squid. If I connect to interface venet0:2 squid uses venet0:0 for outgoing traffic but I want Squid to use the ...
1
vote
1answer
64 views

IP translation for proxying IP web address with no dns entry

We use a dns based proxying system, which proxies certain addresses based on the dns entry, so for example for website1.com the dns return the IP if the proxy, and the request is sent though that, but ...
0
votes
1answer
123 views

Squid proxy: LAN IPs are not hide for remote desktop

I want to hide our internal LAN IP's(static IPs) behind squid proxy. I have done configuration, now all the traffic are going through squid proxy only. What I assume that after I configure squid no ...
0
votes
0answers
204 views

How to configure Internet Options > LAN settings > 'Use automatic configuration script' via command-line or script?

I'm installing my software product on servers at various customers and sometimes need to configure LAN settings to get internet access. My software runs as NETWORK SERVICE or LOCAL SYSTEM and makes ...
0
votes
1answer
74 views

How can I proxy ICMP requests?

I have a ubuntu server that receives many ping requests from various other servers in the network. I would like to be able to proxy these requests. Using iptable rules I can see how to DROP or ACCEPT ...
-2
votes
1answer
59 views

Setting up a DHCP/Proxy Server

Current setup: Modem -> Firewall(DHCP) -> Switch and Wireless Router |-> Computers If I wanted to setup a Proxy Server in there, it would have to replace the Firewall correct? The idea is so that ...
2
votes
2answers
117 views

How to configure apache to behave as a remote browser?

For my IT security class summer project, we have to work on different ways to circumvent security measures setup on a school/company network and to explain how these hacks can be detected and avoided. ...
3
votes
1answer
200 views

Squid proxy in cent os often disconnected with error : tunnelConnectTimeout(): tunnelState->servers is NULL

I am having very often internet disconnection problem with Squid proxy service. My server config; OS: CentOS release 6.3 (Final) model name : Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz cpu MHz : ...
6
votes
0answers
98 views

Does the Great Firewall Of China Modify X-Forwarded-For [closed]

I'm looking at traffic from some of our Chinese customers and their X-Forwarded-For's look something like: REALIP, 127.0.0.1, REALIP, etc The interesting thing is the loopback IP is always the ...
2
votes
0answers
75 views

What is a good, HTTP[S] proxy that is customizable in Python? [closed]

Trying to find a good HTTP proxy that I can customize with Python. Hopefully, this proxy library or application would allow me to add custom plugins for the request / response cycle - particularly a ...
0
votes
2answers
33 views

Prevent internet access except for one server?

I want to see if the HTTP proxy support for an application is working correctly. In order to check this I have installed a Ubuntu VirtualBox on my Mac laptop and I want to configure the virtual ...
-1
votes
1answer
33 views

Allow network connection to a specifc app

I am developing a application for mobile (iPhone and Android) maps based for a company. The company has deployed a wifi network to allow, by subscribing (paying), internet access. The idea of the ...
0
votes
0answers
64 views

Connecting to Mac on iPad via local network

For my business, I have a product that is built with a Mac Mini running things at the core. On this Mac Mini, I have installed Apache and PHP to serve dynamic web pages locally. Users access these ...
0
votes
1answer
56 views

Channelling DOM0 internet connection through DOMU

Bit of an odd queston but wanted to know your opinions on the following: I have a small computer that has Ubuntu (Both DOM0 and DOMU) virtualized using KVM. Now the person that will handle this ...
2
votes
3answers
2k views

Squid TPROXY connection fails on specific sites?

When squid setup as TPROXY, returns ERR_CONNECT_FAIL on some sites . The server which squid runs on it is able to open those sites by lynx, wget, curl etc . Even if we manually set proxy in browser ...
0
votes
2answers
84 views

Nginx routing to another site

I've setup nginx on an Amazon EC2 instance I've purchased but I am stuck with the most basic question. How would I be able to route all the requests to another remote address. Assume that you have the ...
-1
votes
1answer
86 views

Squid connection to 0.0.0.0 Failed

trying to set up a Squid transparent proxy. All is good for the transparency, however the proxy occasionally runs into errors such as "connection to 0.0.0.0 Failed" Is this common? Am I doing ...
0
votes
1answer
98 views

Squid proxy loading from the localhost web server

I've just set up a squid transparent proxy inside my network. The proxy works fine, however it seems some sort of caching policy is causing the proxy to instead go grab a copy of the website, it's ...
0
votes
1answer
281 views

Debian: How to create SOCKS proxy server to exit on specific network interface?

I have a setup with two internet connections. eth0 - Internet connection 1 eth1 - Internet connection 2 How can I create a SOCKS 4/5 server that will take connections coming from eth0 and proxy ...
0
votes
0answers
231 views

Incorrect iptables setting preventing server from returning data

I'm have a web server X, a transparent squid proxy server P and I'm using iptables to redirect all outgoing traffic on X to P, such that when a page on X is accessed, X will retrieve/curl a page Z and ...
3
votes
4answers
220 views

Is this iptables NAT exploitable from the external side?

Could you please have a short look on this simple iptables/NAT-Setup, I believe it has a fairly serious security issue (due to being too simple). On this network there is one internet-connected ...
3
votes
1answer
204 views

Force users to go through a proxy server?

I need to force my users on my network to use a transparent proxy server outside my network to access websites. I'm not sure if I can do this with DNS, by setting up my own DNS which redirects them to ...
-2
votes
1answer
189 views

how to “reroute” all packets that are coming from specific network adapter to some IP:port [closed]

I want to make a kind of WiFi proxy. And therefore I want to know how can I reroute packets that are going through specific adapter to destination IP:port.
1
vote
2answers
1k views

SSH multi-hop connections with netcat mode proxy

Since OpenSSH 5.4 there is a new feature called natcat mode, which allows you to bind STDIN and STDOUT of local SSH client to a TCP port accessible through the remote SSH server. This mode is enabled ...
0
votes
1answer
96 views

gpo proxy server settinngs for all applications

i am trying to set all internet connections of all network PCs via proxy server that is installed on windows server 2003 i have editted proxy setting from gpo, but it only worked for internet ...
1
vote
2answers
215 views

Setup a LAN-wide proxy

I am trying to setup squid as a caching server for my local network. I am looking for a solution to make the whole network use the proxy automatically. In other words, I want every client on the ...
-1
votes
2answers
62 views

I need to figure out a way for multiple servers to go out as a single IP address. Reverse proxy ?

I have multiple tomcat servers (X, Y, Z). They all make API calls to some servers (A, B, C). What I need to happen is this: Servers X,Y,Z are on AWS EC2. Servers A,B,C I have no control on where ...
0
votes
1answer
283 views

SQUID Transparent SSL proxy (no intercept)

I know how to have squid work as a transparent proxy. You put it into transparent mode then use your router or IPTABLES to forward port 80 to the squid port. I would like to do the same for SSL. ...
0
votes
1answer
70 views

Inspecting traffic betrween two routers

My network looks as follows: PC1 >––––– [Router1 (Wlan)] ––––––––– [Router2] –––––––––> Internet ^ | x ...
0
votes
2answers
64 views

Service redirection on same network

I have a network on which I run multiple servers each dedicated to a given service. Because most services run on distinct ports I'm currently looking for a way of unifying "all" services into a ...
1
vote
2answers
3k views

How to set a static route for an external IP address

I'm putting a new router on our network to help manage our private network connections and to better control routing to the outside. I've decided to simplify this question by removing references to a ...
-3
votes
1answer
82 views

Proxy authentication

I'm wondering if replacing a squid proxy server for a heterogeneous network that permits traffic by IP addresses by one that authenticates usernames is viable, having in mind all those different ...
2
votes
3answers
111 views

Executing a software on another network interface?

I have created 3 virtual interface on a Linux system, using different IP. I have a software doing requests to a server but it use the default interface, eth0. Is it possible to execute a software ...
0
votes
1answer
290 views

SSL Cert for transparent MITM SSL proxy

I would like to set up a transparent SSL corporate proxy with either privoxy or squid. One of the snags in my plan is understanding what kind of SSL certificate is required. I know I can get a ...
6
votes
3answers
1k views

Best way to authenticate users to the proxy in mobile devices

As example, in Forefront TMG I can have a wpad entry in the DNS and computers discover it and autoconfigure the web proxy. When the user tries to go to the Internet he is promptped for the ...
0
votes
3answers
358 views

SNMP (UDP) Proxy

I'm Working in a mid-sized telco, and I'm in charge of network monitoring solutions. We have a custom monitoring system, that is using mostly SNMP to communicate with devices. The problem is that ...
0
votes
1answer
397 views

How do I setup a NIC for outgoing connections and the other to serve my Squid proxy?

I have an internal network (192.168.2.0/24) that I'm supposed to connect to a proxy. I've already installed and test(with a little traffic) an Squid 3 cache/proxy server in a Ubuntu 12.04 box with ...
2
votes
2answers
101 views

Central web login system for university

We have 300 hosts in our LAN. They use a linux server as default gateway. We need to send all traffic through a server machine which would then forward it to internet. I want to add a central login ...
3
votes
2answers
614 views

Why is nat required when proxy is enough? [closed]

My machine is connected in a local lan. to connect to the internet the traffic goes through proxy server. my understanding of proxy server is that it sends the request on behalf of the original ...
-4
votes
2answers
2k views

What is my ip address and port number that is visible to the internet? [closed]

I went to the site http://www.whatismyip.com . It showed a ip that is not my system's ip and it also showed the proxy server's ip address. So I assumed that the nat router is providing a public ip for ...
2
votes
1answer
87 views

How can I Nat certain boxes in my datacenter so that they are coming from a single IP

I want to NAT a certain group of servers in my datacenter so that they all access clients from a single IP. This will make it much easier for documentation that we provide clients. However there ...
0
votes
1answer
506 views

What does HTTP traffic tunnelled through SSH look like to a network administrator? [closed]

When I am at work we have very tight firewalls, as a way to get around them and perhaps even gain some increased anonymity myself and many of my co-workers have set up SSH tunnels to our own hosted ...
1
vote
0answers
78 views

Strange network proxy issue

All of my external connections needs to go through a proxy, so for my user I've added this line to allow me to wget or yum freely ~/.bashrc export http_proxy=http://10.50.24.125:8080/ The part ...
0
votes
1answer
95 views

Socks Server Behind HTTP Proxy

I have a notebook(let's call it NOTEBOOK A) that is connected to INTERNAL NETWORK A. In order to browse the internet, NOTEBOOK A connects to a HTTP PROXY server which also resides in INTERNAL NETWORK ...
0
votes
2answers
763 views

Forwarding Http traffic through another machine in my LAN

I am inside a network where my machine (IP-192.168.4.53) dont have access to Gmail. But I have access to another machine with IP (192.168.4.33/24) through which Gmail is accessible. Now what I want to ...