LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-21-2007, 11:27 AM   #1
sarajevo
Member
 
Registered: Apr 2005
Distribution: Debian, OpenBSD,Fedora,RedHat
Posts: 228
Blog Entries: 1

Rep: Reputation: 31
How prevent squid to send Proxy Server Details?


Hi all,

I have debian and use it as proxy server running squid. It works very good. When I visit http://whatismyipaddress.com/ I get this

Proxy Server IP address: xxx.yyy.zzz.aaa

Proxy Server Details: 1.1 alisa:3128 (squid/2.6.STABLE12)

What O should change in squid.conf to prevent squid to send Proxy Server Details ?
I googled and read squid.conf ( there is a lot of options ) but was not be able to find out what to change in order to prevent squid to sent its details.

Any hint, link or pdf are welcome

Thank you in advance
 
Old 06-21-2007, 04:59 PM   #2
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by sarajevo
When I visit http://whatismyipaddress.com/ I get this

Proxy Server IP address: xxx.yyy.zzz.aaa

Proxy Server Details: 1.1 alisa:3128 (squid/2.6.STABLE12)

What O should change in squid.conf to prevent squid to send Proxy Server Details ?
it's basically a matter of filtering the Via HTTP header...

you can do that with something like this in your squid.conf file:
Code:
header_access Via deny all
keep in mind this will probably cause you trouble on some sites and stuff... in that case, you could either: a) tell squid which websites you want the headers to be allowed on or b) replace the Via header with a fake one... (you could also combine both options, etc...)

example for option a):
Code:
acl lq dstdomain .linuxquestions.org
acl debian dstdomain .debian.org
header_access Via allow lq debian
header_access Via deny all
example for option b):
Code:
header_access Via deny all
header_replace Via 1.1 example.net:8080 (squid/2.5.STABLE9)
the second example would make your squid look like it is much older than what it is, and listening on a different port, etc... of course this does NOT add any security or anything like that... but since you are concerened about this info being sent upstream perhaps you wanna make it look different...

just my ...

Last edited by win32sux; 06-21-2007 at 05:11 PM.
 
Old 06-22-2007, 03:31 PM   #3
sarajevo
Member
 
Registered: Apr 2005
Distribution: Debian, OpenBSD,Fedora,RedHat
Posts: 228

Original Poster
Blog Entries: 1

Rep: Reputation: 31
Thank you win32sux,

after applying your suggestions I got what I wanted to do.
There is a lot of options and I will explore them futher

Thank you

 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
squid proxy server configuration & distribution of internet without proxy gaurav_gupta082 Linux From Scratch 2 07-31-2010 11:25 AM
Squid Proxy Server blackfish Linux - Server 2 03-31-2007 04:07 PM
squid(proxy) server pankajkarde Linux - Server 2 03-08-2007 02:04 AM
squid proxy server msound Linux - Networking 4 06-01-2005 11:59 AM
squid proxy server cmardhekar Linux - Newbie 0 09-29-2001 05:34 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:54 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration