Re: [squid-users] Detecting and blocking child proxy servers

On mån, 2007-07-30 at 23:55 +0545, Tek Bahadur Limbu wrote:

> I have applied your techniques you describe above. I still have problems
> detecting my child proxies. In a layman view, how to I see them in the
> first place.

If you are lucky the child proxies add X-Forwarded-For or Via headers,
which you can detect using the req_header acl.

But many such proxies do not want to be found (and it's trivial to hide
these using Squid), and you then have to use statistics based on the
access patterns to guess when there is more than one user on the same
client IP.

Regards
Henrik