Anonymous Iran

Lynx

If you’re using Windows, it’s pretty straight forward to setup a proxy and help give access to those in Iran who are being censored. If you’re running Redhat/CentOS, please use the linux instructions.

• Download Squid for Windows
• Extract that zip archive, and move the “squid” folder to the root of your drive (probably C:\).
• After moving the squid folder, open “C:\squid\etc\squid.conf” in your favorite text editor (not Word).
• Configure the DNS name servers on the line that says “dns_nameservers” to point at your ISPs DNS servers.
• Now the fun part, locking access down the just the Iranian IP blocks.

Inside the text editor search (Control-W) for the line “http_access deny all” and change it to “http_access allow all”. This will make your proxy open and accessible to the world. If you would like to limit your proxy to Iranian IP blocks, you want to change “http_access deny all” to read “http_access allow TRUSTED” add a line (BEFORE the http_access line to setup an access control list [ACL]). This ACL line that defines TRUSTED should read:

• Setup “visible_hostname” (normally just the public IP address).
• Turn off logging by adding these two lines:

• Setup the Squid cache by issuing the following command: “c:\squid\sbin\squid -D –z” (No quotes).
• Setup Squid to run as a service by issuing the following command: “c:\squid\sbin\squid –i”

Please don’t run this on a machine that you’re worried about or is used for production sites; and take basic security precautions, ie: moving ftp off the default port, using a firewall package, etc.

Once your server is up and running please DM @austinheap and let me know! I will no longer posting proxies on the public list. If you set one up, please e-mail me@austinheap.com to contribute to the private one or e-mail me if your an Iranian that needs access!

Messaging an admin or mod on this forum works too !

echo

I tried a simple, open source one - psiphon. It's SSL, you need to add a user and password, and email them to some Iranian who will distribute it privately without being blocked fast. This guy ask for some proxies at me@austinheap.com - blog. You can always post it too.

There may not be much control over IP, but you can use your router to allow only domains such as facebook, twitter, youtube, etc. There's also log.

Edit: I think the ISP's just block the default SSL port 4x3, so you cannot do banking etc. In Psiphon you pick the port and send it to somebody you trust. And since nobody ask for anything I'll stick with being a public TOR relay.

Sighter Goliant

I wouldn't mind helping this way, but I don't know enough about comps to take the "common sense precautions" that austin recommends.

Does anyone know of a very concise resource on what constitutes a "common sense precaution?"

Nul@nul.nul

If i'm not mistaken Iran blocks all SSL

I Ran Hubbard

Can someone here comment on router configs.

What ports need opened TCP/UDP in/out for this?

Unregistered

http://files.getdropbox.com/u/136331...Network.tar.gz

high speed download
instructions inside
virtual machine ready to deploy in 5 minutes

you can share the proxy to everyone opening the explained port

YOU CAN MOVE IT FAST
YOU CAN COPY THE VM FASTER

echo

See setting up a TOR relay at >Resources for some related information.

DC4Justice

Bump

Today has the potential to be a total shit storm -- the demonstrators going to need all the help they can get in spreading their pics and vidz around the world.

gutch

I would really like to help but not sure what it is I could do or where the help is needed.

AnythingICan

I am trying with little success to set up a proxy server. I have a mac and very little cpu experience, if anyone could message me or reply it would be greatly, greatly appreciated! Thank you!