Tag Info

Hot answers tagged

8

Most browsers enable you to get a warning if you have HTTP content on an HTTPS page. This can be very annoying if you visit sites that mix HTTP content on their HTTPS pages. From your question it appears Wikipedia is one of those. When properly set, Firefox warns me visiting this page. A web server is not required to offer HTTPS. Many sites do not ...


6

I think pretty much all linux/unix software that uses networking will honor the http_proxy and ftp_proxy environment variables. Depending on how your distribution is set up, /etc/environment will exist and be read by default by login shells. You can add a line saying http_proxy=123.45.67.89:1011 in /etc/environment easily enough, but changes in that file ...


6

1) Squid is a special proxy for http and https traffic. As it knows this protocol it can offer some advanced features like caching, filtering, rewrite rules, dns resolving. All web browsers know how to handle http proxies as it's part of that protocol spec. Additionally Squid can act as a transparent proxy where you don't configure your web browser to use ...


5

You're looking at it the wrong way. The no_proxy environment variable lists the domain suffixes, not the prefixes. From the documentation: no_proxy: This variable should contain a comma-separated list of domain extensions proxy should not be used for. So for IPs, you have two options: 1) Add each IP in full: printf -v no_proxy '%s,' ...


4

I agree that the best way to use the proxy server is with the environment variable http_proxy, as other answers have pointed out. Unfortunately, not all applications honour the http_proxy environment variable, which is why I still use tsocks for some programs to use LD_PRELOAD to force network connections to go through a SOCKS proxy.


4

info wget says: `no_proxy' This variable should contain a comma-separated list of domain extensions proxy should _not_ be used for. For instance, if the value of `no_proxy' is `.mit.edu', proxy will not be used to retrieve documents from MIT. So the variable should contain a list of domains, not IP ranges. You'll need to set up ...


4

Here are a couple: WebScarab: http://www.owasp.org/index.php/OWASP_WebScarab_Project Burp http://portswigger.net/proxy/


3

It seems to be related with environment variables. If you set the proxy in your profile (as environment variables), then probably when issuing sudo, these variables don't get loaded. If you succeed doing so with su, then probably you're using su - (that's the way to load the environment variables of root). To get loaded these variables (for a normal user) ...


3

Not having root privileges prevents you from listening on ports below 1024 on typical Linux systems. Thus, Squid should work OK as non-root listening on 8080 as long as the system you are on hasn't blocked incoming traffic on that port via a firewall or iptables. Not sure how many file descriptors Squid uses typically but if your admin has set a limit for ...


3

Did you try the following syntax ? http_proxy=http://address:port/ wget --proxy-user=USERNAME --proxy-password=PASSWORD http://url


3

The reason why you need to redirect that URL rather than rewrite is because you are visiting an unencrypted web page with the http:// (plaintext) URL, and the proxy needs to tell the browser to talk to the https:// URL. If the connection was simply redirected at the SSL port, your browser wouldn't know what to do with an SSL response if it were somehow ...


3

You might be interested in HTTP Strict Transport Security sometimes called STS or HSTS. This is a voluntary header a web server can send out to instruct the web browser that the site must always be secure. Chrome is one of the browsers that implement it. http://www.imperialviolet.org/2011/02/17/hstsui.html I think you can add Wikipedia to the default ...


3

cntlm provides a solution, along with some configuration. The basic steps to follow are: Install cntlm. Edit its configuration file at /etc/cntlm.conf, the comments included makes it easy enough. Add a proxy server (or two). Specify your user name and NT domain name in the appropriate places, and remove the password entry. Start the cntlm service, eg ...


3

Edit "/etc/apt/apt.conf" and add below entry: Acquire::http::Proxy "http://username:password@proxyhost:port/"; Reference Link


2

Get a 10/100 ethernet hub, a real hub, like a Netgear DS104. Put it between the wifi and the router. Hubs replicate traffic on all ports, so you can connect a separate machine to another port on the hub and sniff everything.


2

Unless your brand of router specifically allows for that kind of interception (most don't unless you're talking about industrial grade stuff with triple digit costs and usage licenses) I'm afraid you're sunk; a better bet might be to install a wifi card in your computer and try to sniff the wireless traffic directly using something like wireshark or Kismet. ...


2

Your failing to reach XChat through the proxy because your proxy is specifically set to deny you this privilege. Talk to whoever configures or maintains the proxy and see if they'll allow this.


2

You can't do this in a sane way for Google search queries. Why? Google is using HTTPS (SSL) everywhere now. All traffic between the endpoints (browser & Google server) is encrypted and checked for integrity. The only way to read (let alone modify) encrypted traffic is changing it at or beyond on one of the endpoints. Suggestions in the direction of ...


2

Caching https is hard to set up, sorry. You need to create a local CA certficate, and configure the client programs to accept it. I don't know what proxy software you'd have to use for it. Squid isn't great for caching large downloads. It doesn't support partial instances, i.e. resuming interrupted downloads. Polipo supports partial instances, and I ...


2

Youtube-dl doesn't support a SOCKS proxy. There's a feature request for it, with links to a couple of working proposals. Youtube-dl supports HTTP proxies out of the box. To benefit from this support, you'll need to run a proxy on myserver.com. Pretty much any lightweight proxy will do, for example tinyproxy. The proxy only needs to listen to local ...


2

You don't need --uid-owner in PREROUTING, you need it in OUTPUT (like in your example).


2

If firefox uses the desired proxy, then you can get the Proxy's IP and port. As root: netstat -t -n -p | grep firefox


1

From my Linux workstation, the only application that can access the internet are a) Firefox (using its own proxy configuration and authentication stored in Firefox), as well as applications running in a Windows VM (Note - the windows VM is a domain member and the user authenticates against the domain when logging in) Solution option: Run a web ...


1

As per polipo -v Max Loglevel is 0xFF logLevel integer 0x7 Logging level (max = 0xFF) Reference Link


1

The location where the logs go is controlled by the configuration variables logFile and logSyslog. If logSyslog is true, error messages go to the system log facility given by logFacility. If logFile is set, it is the name of a file where all output will accumulate. If logSyslog is false and logFile is empty, messages go to the error output of the process ...


1

Yes, but you will need to setup a white list of allowed connection, Set default out going policy to drop, and only allow access to a specific port / server, i.e iptables -P OUTPUT DROP iptables -A OUTPUT -p tcp --dport XX -d YY -j ACCEPT ... ( your other rules ) That way user must configure their browser to utilize YY:XX as the proxy server.


1

Ok. The problem was at my end. I was testing Firefox for the connectivity with my server via web proxy, and I just need to select "Use this proxy server for all protocols" in the Firefox Proxy selection settings, and after this selection I am able to access my server via Firefox.


1

The line http_access allow manager localhost lagrangian64 allows you to access squid's management interface. All conditions must be matched for a rule to apply - in this case, your IP and localhost (which is impossible) must try to access the manager (which is defined in an earlier acl manager line in the default config file). This should work: # Allow your ...


1

Perhaps I'm answering too late, but I have found a way to do what you want. Instead of adding the URL you wish to block in the "URL" category, add it to the "Keyword" category. This works fine for me.


1

Look at the tsocks application, it is able to transparently redirect every network request of a controlled application through a given socks proxy.



Only top voted, non community-wiki answers of a minimum length are eligible