Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Tek Bahadur Limbu
Henrik Nordstrom wrote: On mån, 2007-07-30 at 23:55 +0545, Tek Bahadur Limbu wrote: I have applied your techniques you describe above. I still have problems detecting my child proxies. In a layman view, how to I see them in the first place. If you are lucky the child proxies add

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Adrian Chadd
On Tue, Jul 31, 2007, Tek Bahadur Limbu wrote: How do I detect and stop them from operating child proxies. I would really appreciate your help on this matter. This issue has been bugging me for some time now! I think you need to begin by describing the why .. Adrian

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Henrik Nordstrom
On tis, 2007-07-31 at 13:59 +0545, Tek Bahadur Limbu wrote: Pardon me on this but how do I actually use the req_header ACL type? I am little confused with it's syntax. Example acl matching if either X-Forwarded-For or Via is used: acl proxy_headers req_header X-Forwarded-For . acl

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Tek Bahadur Limbu
Adrian Chadd wrote: On Tue, Jul 31, 2007, Tek Bahadur Limbu wrote: How do I detect and stop them from operating child proxies. I would really appreciate your help on this matter. This issue has been bugging me for some time now! I think you need to begin by describing the why .. Hi

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Henrik Nordstrom
On tis, 2007-07-31 at 17:30 +0545, Tek Bahadur Limbu wrote: Now I have found out that some of our clients are using some sort of proxy server to share and utilize that bandwidth which is burstable. And it's probably not Squid, and most likely does not add the discussed headers. More likely

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Tek Bahadur Limbu
Henrik Nordstrom wrote: On tis, 2007-07-31 at 13:59 +0545, Tek Bahadur Limbu wrote: Pardon me on this but how do I actually use the req_header ACL type? I am little confused with it's syntax. Example acl matching if either X-Forwarded-For or Via is used: acl proxy_headers req_header

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread squid inbox
--- Henrik Nordstrom [EMAIL PROTECTED] wrote: And it's probably not Squid, and most likely does not add the discussed headers. More likely just standard Windows connection sharing. I think that the windows ICS adds the headers because my ISP was able to block connection from client

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Tek Bahadur Limbu
Hi Henrik, Henrik Nordstrom wrote: On tis, 2007-07-31 at 17:30 +0545, Tek Bahadur Limbu wrote: Now I have found out that some of our clients are using some sort of proxy server to share and utilize that bandwidth which is burstable. And it's probably not Squid, and most likely does not add

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Tek Bahadur Limbu
squid inbox wrote: --- Henrik Nordstrom [EMAIL PROTECTED] wrote: And it's probably not Squid, and most likely does not add the discussed headers. More likely just standard Windows connection sharing. I think that the windows ICS adds the headers because my ISP was able to block connection

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread squid inbox
--- Tek Bahadur Limbu [EMAIL PROTECTED] wrote: Hmmm. So did you completely defeat your ISP after using your stealth proxy server? Easily defeated the XFF and Via headers issue with my proxy server. So my client computers were able to connect with no blocking. However, the other

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Henrik Nordstrom
On tis, 2007-07-31 at 12:34 -0700, squid inbox wrote: One of the techniques that my ISP uses is that when a program is downloading with full throttle, and when i open a page, his server will not split the speed for the requests, instead it either ignores it or replies after a large amount of

RE: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Scott B. Anderson
-cache.org Subject: Re: [squid-users] Detecting and blocking child proxy servers On tis, 2007-07-31 at 12:34 -0700, squid inbox wrote: One of the techniques that my ISP uses is that when a program is downloading with full throttle, and when i open a page, his server will not split the speed

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread squid inbox
More likely it's just a very large link transmit buffer at the ISP causing latency to skyrocket.. seen on most DSL links. It's a common technique used for maximising download speeds, but serverely hurts interactivity while a download is in progress. I have a cable internet, and the speed

RE: [squid-users] Detecting and blocking child proxy servers

2007-07-31 Thread Henrik Nordstrom
On tis, 2007-07-31 at 15:27 -0500, Scott B. Anderson wrote: I would have thought so too, but my sample website, news.com.com loads just fine (and really fast) with proxy off using the same machine as the default route, so I thought the problem must lie within squid. Odd. I assume you NAT the

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-30 Thread Tek Bahadur Limbu
Juraj Sakala wrote: Thanks once again for sharing light on this. Do you have any examples where I can use req_header to detect if my clients have their own proxy servers? Any clue, web links or posts will highly be appreciated. Also is req_header the only option whereby we can detect child

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-30 Thread Henrik Nordstrom
On mån, 2007-07-30 at 23:55 +0545, Tek Bahadur Limbu wrote: I have applied your techniques you describe above. I still have problems detecting my child proxies. In a layman view, how to I see them in the first place. If you are lucky the child proxies add X-Forwarded-For or Via headers,

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-26 Thread Tek Bahadur Limbu
Juraj Sakala wrote: On Wednesday 25 July 2007 14:42, Tek Bahadur Limbu wrote: Juraj Sakala wrote: On Tuesday 24 July 2007 12:56, Tek Bahadur Limbu wrote: Is this possible? In other words, I want my proxy servers to detect squid or other proxy severs which are being used or operated by others

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-26 Thread Juraj Sakala
On Wednesday 25 July 2007 14:42, Tek Bahadur Limbu wrote: Juraj Sakala wrote: On Tuesday 24 July 2007 12:56, Tek Bahadur Limbu wrote: Is this possible? In other words, I want my proxy servers to detect squid or other proxy severs which are being used or operated by others besides me.

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-26 Thread Juraj Sakala
Thanks once again for sharing light on this. Do you have any examples where I can use req_header to detect if my clients have their own proxy servers? Any clue, web links or posts will highly be appreciated. Also is req_header the only option whereby we can detect child proxies? Or do we

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-25 Thread Juraj Sakala
On Tuesday 24 July 2007 12:56, Tek Bahadur Limbu wrote: Is this possible? In other words, I want my proxy servers to detect squid or other proxy severs which are being used or operated by others besides me. May it is bepossible: - if you know your network you can use header x_forwarded_for to

Re: [squid-users] Detecting and blocking child proxy servers

2007-07-25 Thread Tek Bahadur Limbu
Juraj Sakala wrote: On Tuesday 24 July 2007 12:56, Tek Bahadur Limbu wrote: Is this possible? In other words, I want my proxy servers to detect squid or other proxy severs which are being used or operated by others besides me. May it is bepossible: - if you know your network you can use

[squid-users] Detecting and blocking child proxy servers

2007-07-24 Thread Tek Bahadur Limbu
Hi all, We have Squid-2.6 proxy servers running in transparent mode. I want to know if we can disable sibling/child proxy servers from using our proxy servers via the X-Forward-For headers. For example, I only want to allow only my selected child/sibling proxy servers from being able to use