Facebook and Squid privacy

qwertyjjj · 12-23-2009, 05:00 AM

I made some changes to the server settings in squid to block headers to prevent the IP address from being sent. However, this has now made facebook give the error message that they do not recognise the browser.
Any ideas on what to change?
I need the IP address to show up as the proxy server but not allow too much privacy information to be sent through the headers.

GlennsPref · 12-23-2009, 05:43 AM

There is nothing private about using twitter, facebook and other sites intent on exposing your private expressions.

Good luck, and why not consider masquerading the ip with iptables and squid.

You can (may not work) spoof your ip address. But you'll need to research that.

cheers Glenn

ps. I could be wrong about that, but tipically, if you value your privacy, don't use those social networking sites. Might be safe now, but what if the governments decide differently. Read the eula. This goes for incredimail (nice icons) too.

qwertyjjj · 12-23-2009, 05:54 AM

Quote:

Originally Posted by GlennsPref

There is nothing private about using twitter, facebook and other sites intent on exposing your private expressions.

Good luck, and why not consider masquerading the ip with iptables and squid.

You can (may not work) spoof your ip address. But you'll need to research that.

cheers Glenn

ps. I could be wrong about that, but tipically, if you value your privacy, don't use those social networking sites. Might be safe now, but what if the governments decide differently. Read the eula. This goes for incredimail (nice icons) too.

It's not the privacy I'm concerned about but rather getting the proxy server to work with the website

There is something in my squid.conf preventing it from working with Facebook. Facebook must be checking the headers to see which browser is being connected.

qwertyjjj · 12-23-2009, 12:56 PM

Which part of this would cause an issue with webpages?

Quote:

header_access From deny all
header_access Referer deny all
header_access Server deny all
header_access User-Agent deny all
header_access WWW-Authenticate deny all
header_access Link deny all

Or can I leave all of that in as long as I use this to hide the IP?

Quote:

forwarded_for off

GlennsPref · 12-23-2009, 05:50 PM

Hi, I guess you've seen this....
http://www.squid-cache.org/Doc/config/header_access/

Quote:

WARNING: Doing this VIOLATES the HTTP standard. Enabling
this feature could make you liable for problems which it
causes.

and http://www.squid-cache.org/Doc/config/forwarded_for/

Quote:

If set to "truncate", Squid will remove all existing
X-Forwarded-For entries, and place itself as the sole entry.

To be honest, I don't know. Not something I have tried.

But when setting up my squid proxy with iptables I have used this site, to cross-reference, also....Current and recently updated

http://www.linuxhomenetworking.com/

Regards Glenn

qwertyjjj · 12-23-2009, 06:20 PM

Quote:

Originally Posted by GlennsPref

Hi, I guess you've seen this....
http://www.squid-cache.org/Doc/config/header_access/

and http://www.squid-cache.org/Doc/config/forwarded_for/

To be honest, I don't know. Not something I have tried.

But when setting up my squid proxy with iptables I have used this site, to cross-reference, also....Current and recently updated

http://www.linuxhomenetworking.com/

Regards Glenn

Thanks I will try those.
So, the IP address is only sent in the forwarded_for config.
What would be the point in actually restricting headers from being sent?

GlennsPref · 12-23-2009, 06:29 PM

Once again, I don't know. Sorry.

Just another thought though,

Have you tried to set the web-browser settings on privacy?

Konqueror and firefox allow this.

But it needs to be done on a user basis.

No sure if it will cover the ip address.

I know you can test it at grc.com Gibson Research
shields-up

http://www.grc.com/intro.htm

go through the tests, it's free, and quite a good indicator.

I also wonder if iptables is able to do what you want.

cheers, Glenn