Re: [squid-users] anonymous again...

if you continue giving infos like this, someone may hack u

On 12/6/06, Marc-Olivier Meunier <momeunier@gmail.com> wrote:
> Hi all,
>
> Had a look at the Archives before asking but I can't find my answer.
>
> I'm living in Finland and I'm trying to access a french VOD site
> (cause I'm french) but this site don't let me in.
>
> So i've set up a squid proxy on a box located in France with a french IP.
>
> I've used the forwarded_for off option but still this site detect that
> I'm using a proxy and since he doesn't know where it comes from, it
> doesn't let me in.
>
>
> When using a site like http://www.monip.org
>
> it says:
>
> IP : 88.191.16.144
> --- oktober.momeunier.fr ---
> 1.1 oktober.momeunier.fr:3128 (squid/2.5.STABLE12)
>
>
> ---------------
> Proxy detecté / Proxy detected
> ---------------
>
>
> ORG_IP : 82.181.61.165
> --- cs181061165.pp.htv.fi ---
> Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.1) Gecko/20061010
> Firefox/2.0
>
>
> Here is my squid.conf:
>
> hierarchy_stoplist cgi-bin ?
> acl QUERY urlpath_regex cgi-bin \?
> no_cache deny QUERY
> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl SSL_ports port 443 563 10000
> acl Safe_ports port 80
> acl Safe_ports port 21
> acl Safe_ports port 443 563
> acl Safe_ports port 70
> acl Safe_ports port 210
> acl Safe_ports port 1025-65535
> acl Safe_ports port 280
> acl Safe_ports port 488
> acl Safe_ports port 591
> acl Safe_ports port 777
> acl Safe_ports port 901
> acl purge method PURGE
> acl CONNECT method CONNECT
> acl LocalNet src 192.168.0.0/255.255.255.0
> acl marco src 82.181.61.165
> forwarded_for off
> http_access allow manager localhost
> http_access deny manager
> http_access allow purge localhost
> http_access deny purge
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow localhost
> http_access allow LocalNet
> http_access allow marco
> http_access deny all
> icp_access allow all
> log_fqdn on
>
>
> Any idea ?
>
> Maybe can I change the IP in X-Forwarded-for ?
>
> --
> Marc-Olivier Meunier
> http://blog.momeunier.fr
> +358 50 4840036
>
Received on Wed Dec 06 2006 - 07:13:04 MST