How To Setup A Proxy For Iranian Citizens On Windows

If you’re using Windows, it’s pretty straight forward to setup a proxy and help give access to those in Iran who are being censored. If you’re running Redhat/CentOS, please use the linux instructions.

• Download Squid for Windows
• Extract that zip archive, and move the “squid” folder to the root of your drive (probably C:\).
• After moving the squid folder, open “C:\squid\etc\squid.conf” in your favorite text editor (not Word).
• Configure the DNS name servers on the line that says “dns_nameservers” to point at your ISPs DNS servers.
• Now the fun part, locking access down the just the Iranian IP blocks.

Inside the text editor search (Control-W) for the line “http_access deny all” and change it to “http_access allow all”. This will make your proxy open and accessible to the world. If you would like to limit your proxy to Iranian IP blocks, you want to change “http_access deny all” to read “http_access allow TRUSTED” add a line (BEFORE the http_access line to setup an access control list [ACL]). This ACL line that defines TRUSTED should read:

• Setup “visible_hostname” (normally just the public IP address).
• Turn off logging by adding these two lines:

• Setup the Squid cache by issuing the following command: “c:\squid\sbin\squid -D –z” (No quotes).
• Setup Squid to run as a service by issuing the following command: “c:\squid\sbin\squid –i”

Please don’t run this on a machine that you’re worried about or is used for production sites; and take basic security precautions, ie: moving ftp off the default port, using a firewall package, etc.

Once your server is up and running please DM @austinheap and let me know! I will no longer posting proxies on the public list. If you set one up, please e-mail me@austinheap.com to contribute to the private one or e-mail me if your an Iranian that needs access!

Messaging an admin or mod on this forum works too !

A simple proxy server

I tried a simple, open source one - psiphon. It's SSL, you need to add a user and password, and email them to some Iranian who will distribute it privately without being blocked fast. This guy ask for some proxies at me@austinheap.com - blog. You can always post it too.

There may not be much control over IP, but you can use your router to allow only domains such as facebook, twitter, youtube, etc. There's also log.

Edit: I think the ISP's just block the default SSL port 4x3, so you cannot do banking etc. In Psiphon you pick the port and send it to somebody you trust. And since nobody ask for anything I'll stick with being a public TOR relay.

Common sense Precautions?

I wouldn't mind helping this way, but I don't know enough about comps to take the "common sense precautions" that austin recommends.

Does anyone know of a very concise resource on what constitutes a "common sense precaution?"

Ssl

If i'm not mistaken Iran blocks all SSL

Can someone here comment on router configs.

What ports need opened TCP/UDP in/out for this?

Tor + Proxy ready

http://files.getdropbox.com/u/1363314/Tor-Anonymity-Network.tar.gz

high speed download
instructions inside
virtual machine ready to deploy in 5 minutes

you can share the proxy to everyone opening the explained port

YOU CAN MOVE IT FAST
YOU CAN COPY THE VM FASTER

See setting up a TOR relay at >Resources for some related information.

Bump

Today has the potential to be a total shit storm -- the demonstrators going to need all the help they can get in spreading their pics and vidz around the world.

I would really like to help but not sure what it is I could do or where the help is needed.

I am trying with little success to set up a proxy server. I have a mac and very little cpu experience, if anyone could message me or reply it would be greatly, greatly appreciated! Thank you!

I have my proxy up and running....whom do I contact about getting the IP address/port out to people who need it?

thx...

TK

I keep getting "OpenSCmanager failed" when I try and give the command "C:\squid\sbin\squid -i" anyone know whats the problem might be?

EDIT: I fixed the problem. I am using vista and you need to be logged on as administrator.

Can anyone provide a link of where to get squid?

Original instructions are here:
Austin Heap Blog Archive How to setup a proxy for Iran citizens (for Windows!)

Squid download is here (same link as original instructions)
http://dev.austinheap.com/iran/squid-2.7.STABLE6-bin-DELAYP.zip

No error messages when the command is typed in. Is that a sign of success?

I could use help finding out if I did this right.

Thanks. Better late than never regaring details of setting up a proxy server. I've already posted that one needs to be used, in addition to time zone change on FB. Going to post the whole chimichanga now.

more iran IP blocks

some duplicates with previous list but don't really have time to remove them. copy and paste into a text file in /squid/sbin directory. if saved as iraqips.txt add the following two lines in the acl and http_access sections of /squid/etc/squid.conf:

acl iran2 src "iranips.txt"
...
http_access allow iran2


[SPOILER]12.130.88.0-12.130.88.255
62.32.35.32-62.32.35.127
62.32.49.128-62.32.49.231
62.32.49.240-62.32.50.255
62.32.53.64-62.32.53.127
62.32.53.168-62.32.53.175
62.32.53.224-62.32.53.239
62.32.61.96-62.32.61.127
62.32.61.224-62.32.61.255
62.32.63.128-62.32.63.191
62.60.128.0-62.60.255.255
62.68.82.64-62.68.82.127
62.145.82.0-62.145.82.255
62.145.87.0-62.145.87.127
62.145.88.0-62.145.89.159
62.145.89.192-62.145.89.255
62.145.92.128-62.145.92.255
62.145.96.0-62.145.99.255
62.145.109.0-62.145.109.255
62.193.0.0-62.193.31.255
62.201.192.0-62.201.255.255
62.220.96.0-62.220.127.255
63.243.185.0-63.243.185.255
64.182.7.161-64.182.7.168
69.13.185.223-69.13.185.231
77.36.128.0-77.36.255.255
77.67.32.0-77.67.32.255
77.77.64.0-77.77.127.255
77.95.219.0-77.95.220.255
77.104.64.0-77.104.127.255
77.237.64.0-77.237.95.255
77.237.160.0-77.237.191.255
77.245.224.0-77.245.239.255
78.38.0.0-78.39.255.255
78.109.192.0-78.109.207.255
78.110.112.0-78.110.127.255
78.111.0.0-78.111.1.255
78.111.2.64-78.111.2.95
78.111.2.136-78.111.2.143
78.111.3.0-78.111.3.255
78.111.4.64-78.111.4.79
78.111.5.0-78.111.15.255
78.154.32.0-78.154.63.255
78.157.32.0-78.157.63.255
78.158.160.0-78.158.191.255
79.127.0.0-79.127.127.255
79.132.192.0-79.132.223.255
79.141.162.0-79.141.162.255
79.170.144.0-79.170.151.255
79.175.128.0-79.175.191.255
80.66.176.0-80.66.191.255
80.69.240.0-80.69.255.255
80.71.112.0-80.71.127.255
80.75.0.0-80.75.15.255
80.78.135.128-80.78.135.255
80.84.140.224-80.84.140.255
80.191.0.0-80.191.255.255
80.231.68.0-80.231.68.255
80.242.0.0-80.242.15.255
80.253.128.0-80.253.159.255
81.12.0.0-81.12.127.255
81.28.32.0-81.28.63.255
81.31.160.0-81.31.191.255
81.90.144.0-81.90.159.255
81.91.128.0-81.91.159.255
82.99.192.0-82.99.255.255
82.115.0.0-82.115.21.255
82.138.140.0-82.138.140.127
82.205.129.0-82.205.129.31
82.205.129.128-82.205.129.159
82.205.130.0-82.205.130.255
82.205.139.0-82.205.139.15
82.205.139.64-82.205.139.127
82.205.139.176-82.205.139.191
82.205.143.192-82.205.143.255
82.205.146.160-82.205.146.175
82.205.146.200-82.205.146.207
82.205.148.0-82.205.148.63
82.205.152.128-82.205.153.175
82.205.153.192-82.205.153.207
82.205.153.240-82.205.153.255
82.205.154.64-82.205.154.79
82.205.155.0-82.205.156.128
82.205.156.192-82.205.157.255
82.205.159.0-82.205.159.63
82.205.159.96-82.205.159.191
82.205.159.224-82.205.159.255
82.205.162.96-82.205.162.127
82.205.166.0-82.205.166.255
82.205.172.0-82.205.172.7
82.205.172.32-82.205.172.127
82.205.172.192-82.205.172.255
82.205.176.72-82.205.176.79
82.205.181.0-82.205.181.63
82.205.181.128-82.205.181.159
82.205.209.192-82.205.210.127
82.205.212.72-82.205.212.79
82.205.218.224-82.205.218.239
82.205.219.32-82.205.219.47
82.205.222.96-82.205.222.127
82.205.226.0-82.205.226.63
82.205.226.96-82.205.226.111
82.205.230.0-82.205.230.63
82.205.231.0-82.205.231.255
82.205.233.0-82.205.234.255
82.205.237.128-82.205.238.255
82.205.248.0-82.205.248.15
82.205.248.32-82.205.248.63
83.147.192.0-83.147.255.255
83.170.23.0-83.170.23.7
83.170.26.0-83.170.26.255
83.170.33.0-83.170.33.31
83.170.34.96-83.170.34.127
83.170.34.160-83.170.34.223
83.170.41.192-83.170.41.255
83.170.43.128-83.170.43.159
83.170.43.224-83.170.43.254
83.170.45.64-83.170.45.95
83.170.45.160-83.170.45.191
83.170.46.64-83.170.46.95
83.170.46.128-83.170.46.159
83.170.46.192-83.170.46.223
83.170.47.32-83.170.47.63
83.170.48.160-83.170.48.191
83.170.49.64-83.170.49.95
83.170.49.224-83.170.50.63
83.170.50.128-83.170.50.191
83.170.52.0-83.170.52.127
83.170.52.152-83.170.52.159
83.170.52.230-83.170.52.230
84.11.2.0-84.11.2.255
84.11.13.0-84.11.13.31
84.11.13.232-84.11.13.239
84.11.14.64-84.11.14.79
84.11.14.200-84.11.14.207
84.11.15.0-84.11.15.255
84.11.25.0-84.11.25.31
84.11.25.96-84.11.25.127
84.11.25.192-84.11.25.223
84.11.26.64-84.11.26.127
84.11.27.32-84.11.27.63
84.11.28.32-84.11.28.127
84.11.29.32-84.11.29.127
84.11.30.176-84.11.30.207
84.11.30.216-84.11.30.223
84.11.30.247-84.11.30.247
84.11.30.249-84.11.30.249
84.11.31.32-84.11.31.127
84.11.31.160-84.11.32.191
84.11.34.0-84.11.34.127
84.11.34.192-84.11.35.255
84.11.36.128-84.11.36.159
84.11.36.192-84.11.37.31
84.11.37.128-84.11.37.159
84.11.38.0-84.11.38.63
84.11.38.96-84.11.38.127
84.11.39.32-84.11.39.95
84.11.40.0-84.11.40.127
84.11.42.0-84.11.43.31
84.11.45.32-84.11.45.47
84.11.56.0-84.11.56.31
84.11.57.0-84.11.57.31
84.11.57.160-84.11.57.191
84.11.60.192-84.11.60.255
84.11.62.0-84.11.63.255
84.11.67.96-84.11.67.127
84.11.68.0-84.11.70.127
84.11.71.128-84.11.71.191
84.11.72.48-84.11.72.63
84.11.72.128-84.11.72.255
84.11.73.96-84.11.73.127
84.11.74.0-84.11.74.31
84.11.74.160-84.11.74.191
84.11.74.224-84.11.74.255
84.11.75.128-84.11.75.191
84.11.75.224-84.11.76.255
84.11.77.96-84.11.77.159
84.11.77.192-84.11.77.254
84.11.80.192-84.11.80.255
84.11.110.96-84.11.110.167
84.11.113.112-84.11.113.127
84.47.196.0-84.47.255.255
84.241.0.0-84.241.63.255
84.246.65.0-84.246.65.255
84.246.71.128-84.246.71.143
84.246.71.168-84.246.71.176
85.9.64.0-85.9.127.255
85.15.0.0-85.15.63.255
85.133.128.0-85.133.255.255
85.185.0.0-85.185.255.255
85.198.0.0-85.198.63.255
85.236.144.0-85.236.159.255
86.62.1.88-86.62.1.95
86.109.32.0-86.109.63.255
87.107.0.0-87.107.255.255
87.238.116.0-87.238.116.127
87.247.160.0-87.247.191.255
87.248.128.0-87.248.159.255
89.144.128.0-89.144.191.255
89.165.0.0-89.165.127.255
89.221.80.0-89.221.95.255
89.235.64.0-89.235.127.255
91.98.0.0-91.99.255.255
91.151.146.56-91.151.146.63
91.151.155.32-91.151.155.39
91.151.155.88-91.151.155.95
91.184.64.0-91.184.95.255
91.186.192.0-91.186.223.255
91.206.122.0-91.206.123.255
91.208.165.0-91.208.165.255
91.209.242.0-91.209.242.255
91.212.16.0-91.212.16.255
91.212.19.0-91.212.19.255
92.42.48.0-92.42.55.255
92.50.0.0-92.50.63.255
92.61.176.0-92.61.191.255
92.62.176.0-92.62.191.255
92.242.192.0-92.242.223.255
93.110.0.0-93.110.255.255
93.190.24.0-93.190.31.255
94.74.128.0-94.74.191.255
94.101.128.0-94.101.135.255
94.101.176.0-94.101.191.255
94.101.240.0-94.101.255.255
94.124.99.0-94.124.101.255
94.139.160.0-94.139.191.255
94.182.0.0-94.184.127.255
94.232.168.0-94.232.175.255
94.241.128.0-94.241.191.255
95.38.0.0-95.38.255.255
95.80.128.0-95.80.191.255
95.82.0.0-95.82.127.255
95.130.56.0-95.130.63.255
95.130.240.0-95.130.247.255
188.34.0.0-188.34.255.255
188.93.64.0-188.93.71.255
188.121.96.0-188.121.159.255
188.136.128.0-188.136.255.255
193.19.128.0-193.19.131.255
193.34.197.128-193.34.197.255
193.189.122.0-193.189.123.255
193.218.205.64-193.218.205.127
193.252.129.0-193.252.129.255
193.252.131.0-193.252.131.255
193.252.135.0-193.252.136.255
194.73.51.160-194.73.51.175
194.133.20.208-194.133.20.215
194.133.88.0-194.133.88.31
194.143.140.0-194.143.141.255
194.146.148.0-194.146.151.255
194.146.164.0-194.146.167.255
194.225.0.0-194.225.119.255
194.225.121.0-194.225.255.255
195.10.11.0-195.10.11.255
195.10.15.160-195.10.15.175
195.27.14.0-195.27.14.7
195.96.139.16-195.96.139.31
195.96.147.0-195.96.149.255
195.146.32.0-195.146.63.255
195.200.225.0-195.200.228.255
195.213.219.0-195.213.219.15
195.219.49.240-195.219.49.255
195.219.71.0-195.219.71.255
195.219.128.0-195.219.128.255
195.219.129.128-195.219.129.255
196.3.91.0-196.3.91.255
204.15.197.0-204.15.197.15
206.222.21.72-206.222.21.79
206.222.23.168-206.222.23.175
206.222.29.224-206.222.29.231
207.182.152.128-207.182.152.135
209.18.107.150-209.18.107.159
209.28.123.0-209.28.123.63
209.51.198.64-209.51.198.71
209.51.207.248-209.51.207.255
209.51.213.192-209.51.213.223
210.5.196.64-210.5.196.127
210.5.197.64-210.5.197.127
210.5.198.32-210.5.198.39
210.5.198.64-210.5.198.79
210.5.198.96-210.5.198.223
210.5.204.0-210.5.204.127
210.5.205.0-210.5.205.63
210.5.208.0-210.5.208.63
210.5.208.128-210.5.209.127
210.5.214.128-210.5.214.135
210.5.214.192-210.5.214.255
210.5.218.64-210.5.218.255
210.5.232.0-210.5.232.127
210.5.233.0-210.5.233.191
212.6.32.0-212.6.38.255
212.6.41.0-212.6.41.127
212.6.42.0-212.6.42.255
212.6.45.0-212.6.45.255
212.6.47.0-212.6.51.63
212.6.55.112-212.6.55.127
212.6.60.0-212.6.63.255
212.16.64.0-212.16.95.255
212.33.192.0-212.33.223.255
212.44.196.0-212.44.196.127
212.44.197.0-212.44.197.255
212.44.223.0-212.44.223.255
212.50.224.0-212.50.255.255
212.80.0.0-212.80.31.255
212.95.128.0-212.95.159.255
212.120.192.0-212.120.223.255
213.176.0.0-213.176.127.255
213.195.0.0-213.195.63.255
213.207.192.0-213.207.255.255
213.217.32.0-213.217.63.255
213.233.160.0-213.233.191.255
216.55.163.116-216.55.163.123
217.11.16.0-217.11.31.255
217.24.144.0-217.24.144.255
217.24.146.0-217.24.159.255
217.25.48.0-217.25.63.255
217.64.144.0-217.64.159.255
217.66.192.0-217.66.223.255
217.146.208.0-217.146.223.255
217.161.16.0-217.161.17.255
217.171.191.220-217.171.191.223
217.172.96.0-217.172.101.255
217.172.103.0-217.172.117.255
217.172.120.0-217.172.127.255
217.174.16.0-217.174.31.255
217.218.0.0-217.219.255.255[/SPOILER]

source: IP Range - Ip Address Range Lookup - Ip Range Finder

squid proxy

I have successfully set up a squid proxy. who do i contact now?

RTFM

if you didn't read that, are you sure you have set it up properly, malfunctioning proxies isn't what is needed.

Austinheap has a testing and proxy-submission form online now. Test your proxy and, once working, submit it: proxyheap (proxy checker) a project for iran

Re: Running squid on Windows

That's correct, it will run and you'll have no command prompt. You can get more information if you start squid with the command line "-d 1 i".

I configured everything correctly and got it to start with no errors. But the proxyheap tester says Fatal error: couldn't connect to host. I have followed the instructions and also forwarded port 3128 for UDP and TCP. Any clue why this is happening?

Updated Installation Instructions for Windows (6/22)

A new proxy configuration file has been posted which offers better safety for people along with making Squid easier to set up. Since there are so many updates going around, here is a complete list of instructions as of 6/22:

1. Install squid on your system. http://dev.austinheap.com/iran/squid-2.7.STABLE6-bin-DELAYP.zip
For simplicity, extract it to C:\ (thus creating C:\Squid).

2. In the folder "C:\squid\etc" you will see several ".conf.default" files. Remove the ".default" portion so they all end in ".conf". Or, better yet, make a copy of them with the new names so you have backups to revert to if you need to.

3. Extract the ZIP attached to this message to "C:\Squid\etc\Squid.conf", overwriting the existing file. This file was created on 6/22/09 for the Windows version of Squid and includes updates which improve the safety of proxy operators. It is a slightly modified version of the original found here: http://dev.austinheap.com/iran/squid-iran-ideal.txt. It was modified to use Windows-style paths and a unique port.

4. Create the folder "C:\squid\var\cache"

5. Open a Command Prompt (Start, Run, then "cmd" and Enter)

6. Set up Squid with this line: (only needs to be done once)

c:\squid\sbin\squid -D -z

7. Next, start Squid in debug mode to make sure things are working:

c:\squid\sbin\squid -d 1 i

... you'll see several debug messages. If it worked, you will see no command prompt. (i.e. squid is still running)

8. If you like, you can stop Squid by hitting Ctrl+C, then run squid without debug mode:

c:\squid\sbin\squid i

9. Next, the port specified in this file needs to be opened on your router. The port defaults to 19570 but you can change it on the "http_port" line(s).

Once your proxy appears to be working, test it on this page: proxyheap (proxy checker) a project for iran. If the test succeeds, you can then submit it to Austin Heap. This is preferable to announcing your proxy publicly as it will help to avoid your IP from being blocked.

I need to sleep but will try to help folks troubleshoot problems.

Basji, Revolutionary Guards......murder people or freedom. YOUR CHOICE. Lay down your arms.


Basji, Revolutionary Guards, if Ahmadjad wins, you continue murdering your people. If Mosavi wins, what happens to you? Lay down your arms. Choose freedom.


Khamenei, your country could make lots of $$$ with tourism. We love your people. Stop this.

for linux users, tinyproxy works much quicker and easier than squid. very lightweight. it can be up and running in a matter of minutes.

https://www.banu.com/tinyproxy/

I have Windows on I:\ and the cmd-box only says: FATAL: Unable to open configuration file: c:/squid/etc/squid.conf: <13> [...] .. and later: "abnormal program termination".

I followed the instructions by Fidel Dangelow and changed all C:\ to I:\.

I really would like to help, but it doesnt work with Windows in I:\ (yeah, this is my own mess, I screwed up the partitions while installing Win XP).

Peace,
MHans

MHans again ...

On Step 6., by Fidel Dangelow, it says: "<13> Permission denied" ... "abnormal program termination". Is this only about Windows being set on I:\, or could I pass this problem somehow?

*EDIT*: A real detailed tutorial on how to set up a Proxy would be helpful. If it works with Win XP on different Partitions, I could create a visual tutorial and host it on my Webspace.

A very detailed set of instructions for setting up Squid on Windows is now available at this page: Cross sections of a wandering mind: Proxies for Iran: A walkthrough. It's way better than my post.

The only error I ran into was "OpenSCManager failed". I was able to fix this by using "Run as Administrator" on the Command Prompt for admin access. At any rate, the above link should be just the ticket.

ments freshman

I just bought an iMac and just downloaded Squid to help. What do I do next? I'm old and this shit doesn't come easy to me.

thank you for sharing

تشکر از شما برای به اشتراک گذاری این
برای من کار کرد