https proxy server
DeleGate 9.9.3 / 9.9.4 Pre11
universal application level gateway, or proxy server which can relay most of fundamental application protocols used in the Internet more>> <<less
Safesquid Content Filtering Proxy 4.2.2.RC7
Antivirus and content filtering proxy server more>> Safesquid is an antivirus and content filtering proxy server. It has many advanced features like URL blacklists, bandwidth management, regular expression substitution on Website content and requested URLs, ICP and CARP support to interoperate with other proxy servers, configuration synchronization to ease management of proxy servers in a cluster, ICAP support to use third-party content adaptation software, image and link prefetching, HTTP and FTP content caching, NTLM and Basic authentication, and an intutive Web interface to configure the proxy server.<<less
Content Filtering Proxy SafeSquid 4.2.2.RC8.2
CONTENT FILTERING PROXY SERVER, WEB FILTER, INTERNET FILTER, REAL-TIME FILTER more>> SafeSquid is a Content Filtering Proxy Server - BROWSER BASED INTERFACE, VERY FAST THROUGHPUT, DNS CACHING, CONTENT CACHING, PREFETCHING, BANDWIDTH CONTROL, VIRUS SCAN, Source, Target & Time based GRANULAR FireWall style rules to allow / deny content like music, videos, flash & java applets, messengers, chats, cookies, activex, scripts, etc. REMOTE AUTHENTICATION, REAL-TIME TEXT & IMAGE ANALYSIS for blocking PORNOGRAPHY. LIVE REMOTE SUPPORT.<<less
3proxy for Linux 0.5.3k
3proxy for Linux tiny free proxy server previously known as 3[APA3A] tiny. more>> 3proxy for Linux tiny free proxy server previously known as 3[APA3A] tiny freeware proxy (pronounce it as "Zaraza tiny freeware proxy") is really tiny cross-platform (Win32/Win64&Unix) proxy servers set. It includes HTTP proxy with HTTPS and FTP support, SOCKSv4/SOCKSv4.5/SOCKSv5 proxy (socks/socks.exe), POP3 proxy, SMTP proxy, AIM/ICQ proxy (icqpr/icqpr.exe), MSN messenger / Live messenger proxy (msnpr/msnpr.exe), FTP proxy, caching DNS proxy, TCP and UDP portmappers. You can use every proxy as a standalone program (socks, proxy, tcppm, udppm, pop3p) or use combined program (3proxy for Linux). Combined proxy additionally supports features like access control, bandwidth limiting, limiting daily/weekly/monthly traffic amount, proxy chaining, log rotation, syslog and ODBC logging, etc. Its created to be small, simple (Id like to say secure - but its constantly in development and beta testing stage) and yet very functional. It may be compiled with Visual C or gcc. Native Win32 version included in archive and supports installation as NT/2K/XP service. Currently 3proxy is tested to work under Windows 98/NT/2000/2003/XP/x64, FreeBSD/i386, NetBSD/i386, OpenBSD/i386, Linux/i386, Linux/PPC, Linux/Alpha, Mac OS X/PPC, Solaris 10/i386. See Release Notes and Changes for features list.
3proxy for Linux is absolutely free (FreeWare) and open source. It can be used under terms of GNU/GPL. Starting from 0.6 version BSD-style license is used and any compatible license (Apache license, GPL, LGPL) may be used instead.<<less
Barracuda Proxy 1.0
BdProxy - SOCKS, HTTP, and HTTPS Proxy Server. The BdProxy acts as a SOCKS, HTTP, and HTTPS proxy server. The proxy allows you to use your Internet a... more>> <<less
Content Filtering Proxy SafeSquid 4.2.2.RC8.9
Content filtering proxy server - BROWSER BASED INTERFACE, VERY FAST THROUGHPUT, DNS CACHING, CONTENT CACHING, PREFETCHING, BANDWIDTH CONTROL, VIRUS SCAN, WEB FILTERING, REAL-TIME TEXT & IMAGE ANALYSIS more>>
SafeSquid is a Content Filtering Proxy Server. SafeSquid has a BROWSER BASED INTERFACE. SafeSquid offers arguably, worlds biggest set of Content Filtering features.
SafeSquids multi-threaded architecture, delivers industrys FASTEST THROUGHPUT, even while providing extreme content analysis and security. SafeSquid has an intelligent DNS cache, an extremely manageable content CACHING system, and configurable content pre-fetching that allows fast browsing of often viewed web-sites.
SafeSquid lets you create unlimited and extremely granular Internet Policies to define and deal with unlimited number of unique factors depending upon user / network / web-site / mime-type / size / time etc. SafeSquid allows you to create unlimited number of policies for allowing or BLOCKING SPECIFIC CONTENT, like music, ActiveX, JavaScripts, advertisement banners, etc., and even any part of the protocol header to ensure graded exchange of private information, from each web-site. Real-time text analysis and Image analysis besides categorized web-site databases ensure complete blocking of PORNOGRAPHY or replacing specific parts.
Users can be authenticated from a remote WINDOWS ADS / OpenLDAP servers. SafeSquid lets you, to THROTTLE SPEED for low priority users or applications. You can use a variety of ANTIVIRUS Software like ClamAV and any other ICAP based antivirus to stop viruses before they reach the client systems. SafeSquid allows you to customize the various templates, that are displayed when access or content is denied to the user. SafeSquids logs can be analyse to create a exhaustive USER ACTIVITY REPORTS.
It takes less than 3 minutes to install SafeSquid on a Linux based server. SafeSquid is backed by a very responsive and committed customer support. SUPPORT INCLUDES REMOTE LIVE-HAND-HOLDING. Various SafeSquid editions are available to serve small 20 user networks or thousands of concurrent users. SafeSquid has special features for use in CLUSTERS.
Requirements: Linux, kernel 2.6 or higher
Whats new in this version: http://www.safesquid.com/html/viewforum.php?f=293
<<less5Loaves 1.0
An open source, cross platform, secure, internet tunneling platform more>> An open source, cross platform, secure, internet tunneling platform with file transfer, web server, remote admin, proxy, and load balancing. Enables connections through or around firewalls and across sub-networks.<<less
OpenSER 1.2.2
OpenSER aims to be a collaborative project of its users, to develop a scalable and robust SIP server. more>>
Anyone can contribute to one of next items:
- code development - OpenSER core, modules and adjacent applications
- documentation- writing or enriching documentation
- miscellaneous - different management tasks (e.g., web site maintenance)
- ideas - new ideas bring brilliant solutions
Main features:
- robust and performant SIP (RFC3261) Registrar server, Location server, Proxy server and Redirect server
- stateless and transactional statefull SIP Proxy processing
- support for UDP/TCP/TLS transport layers
- scripting language for configurations file. With a syntax similar to sripting languages, the configuration offers a powerful and flexible way to deploy custom SIP services.
- management interface via FIFO file and unix sockets
- pseudo-variables to access and manage parts of the SIP messages and attributes specific to users and server
- authentication, authorization and accounting (AAA) via database (MySQL, Postgress, text files), RADIUS and DIAMETER
- CPL - Call Processing Language (RFC3880)
- NAT traversal support for SIP and RTP traffic
- ENUM support
- load balancing and least cost routing extensions
- support for replication - REGISTER offer new functions for replicating client information (real source and received socket).
- logging capabilities - can log custom messages including any header or pseudo-variable and parts of SIP message structure.
- modular architecture - plug-and-play module interface to extend the servers functionality
Enhancements:
- This is the second patch release in 1.2.x series, including minor enhancements and bugfixes done since 1.2.1 was released.
YACY 0.54
YACY is a distributed Web crawler and also a caching HTTP/HTTPS proxy. more>>
YACY peers connect each other and form a P2P-based index exchange network based on distributed hash tables. Explicit web crawls can be done locally or collaboratively, forming a global search and distributed indexing engine for the Web.
YACY also provides URL filtering with blacklist sharing among other proxy peers, individual Web and servlet page hosting, a file sharing zone, and a database engine.
Main features:
- Search your own or the global index
- Crawl your own pages or start distributed crawling
- Run your peer to support other YaCy crawlers
- Provide Information on your peer using the built-in http-server, file-sharing zone and wiki
- Built-in caching http proxy
- Indexing benefits from the proxy cache; private information is not stored or indexed
- Usage of the proxy is not a requisite for web indexing, but it enables you to access the new top-level-domains .yacy
- Filter unwanted content like ad- or spyware; share your web-blacklist with other peers
- Easy installation! No additional database required!
- No central server!
- GPLed, freeware
Enhancements:
- An auto-updater and support for multiple search networks have been added, and the option to index intranet sites in separated networks has been enabled.
- Some interface functions have also been enhanced.
aria2 0.11.2
aria2 is a software for downloading files. more>>
The transfer can be paused, resumed, queued, and saved. It has a friendly GTK-based GUI and useful log consoles.
It supports URL list importing, CRC checking, HTTP proxy servers, HTTP recursive downloads with various useful options, and cut-and-pasting. It can also handle annoying CGI fake download pages.
Main features:
- Command-line interface
- HTTP/HTTPS GET support
- HTTP Proxy support
- HTTP BASIC authentication support
- HTTP Proxy authentication support(using GET or CONNECT)
- FTP downloading support
- FTP via HTTP proxy(using GET or CONNECT)
- Segmented downloading
- Cookie support(currently aria2 ignores "expires")
- It can run as a daemon process.
- Very low resource usage
Enhancements:
- This release adds SHA256 support and fixes lots of bugs.
- The cygwin/mingw patch was also merged.
DeleGate 9.5.6 / 9.6.3 Alpha
DeleGate is a multi-purpose application level gateway and proxy. more>>
DeleGate translates protocols between clients and servers, applying SSL(TLS) to arbitrary protocols, merging several servers into a single server view with aliasing and filtering.
Born as a tiny proxy for Gopher in March 1994, it has steadily grown into a general purpose proxy server. Besides beeing a proxy, DeleGate can be used as a simple origin server for some protocols (HTTP, FTP and NNTP).
Main features:
- UNBOUND PROXY: A user can select target servers arbitrarily in ad hoc way showing destination in user level data specific to the protocol of the client.
- BOUND PROXY: An administrator of DeleGate can specify which destination server is used depending on accessing client.
- CACHE: A message data transferred on a protocol is cached in its inherent format and shared among DeleGate as gateway servers of different protocols.
- CONNECTION SHARING: An established connection to a server in anonymous user can be reused and shared among multiple clients.
- DATA CONVERSION: DeleGate has several built-in data conversion filters which can be applied to a specific part of data in a message on each protocol.
- PROTOCOL CONVERSION: A client of a protocol can talk with servers of other protocols via DeleGate.
- AUTHENTICATION / SECURE PROTOCOL CONVERSION: DeleGate can relay between a non-SSL client and a SSL server, or between a SSL-client and a non-SSL server.
- ACCESS CONTROL: Accesses to be permitted to pass DeleGate are described by a set of triples of destination protocol, destination server and source client.
- LOGGING: Detailed logging of DeleGate actions and protocol dependent logging in standard formats.
- AUTOMATIC INVOCATION: DeleGate can be invoked automatically on demand or at the startup time of the host system.
- RESOLVER CONTROL: You can control the combination and sequence of multiple resolution mechanisms, independently of platforms.
- ROUTING CONTROL: A route toward the server can be selected from alternatives depending on protocol, server and client (host and user).
- MOUNTING SERVERS: Multiple target servers of multiple protocols can be merged into a single server of a protocol, with resource name filtering and aliasing.
- PROXY ON DEMAND: Automatically invoked proxy just for the current session.
- ORIGIN SERVER: You can use DeleGate as simple origin servers for several protocols.
- EXTENSION BY USERS: You can attach your own graphic images, messages, and programs to DeleGate without modifiying the DeleGate program.
- TCP WRAPPER: You can use DeleGate like inetd + TCPwrapper which make your own filter program work as a server with access control.
- SCHEDULER: You can use DeleGate like crond which invokes specified commands at specified timing.
- MULTI-PLATFORM: DeleGate runs on multiple platforms and can be compiled from a common source program without any platform dependent configuration.
Whats New in 9.6.3 Alpha Development Release:
- This release fixes frozen threads or broken data which could be caused with thread based implementations of SSL and gzip filters.
Apache::ProxyConf 1.0
Apache::ProxyConf is a Perl module that can generate proxy configuration for browsers. more>>
SYNOPSIS
# In httpd.conf:
< Location / >
SetHandler perl-script
PerlHandler Apache::ProxyConf
PerlSetVar ProxyConfConfig "/some/location/proxyconf.ini"
< /Location >
The Apache::ProxyConf is used to configure the proxy settings in browsers automatically. The modules returns a script that conforms to the Navigator Proxy Auto-Config File Format. The module is suitable for large scale installations that have multiple (cascading) proxies. It can be used to return the closest proxy based on the network topology. Failover and load distribution is also provided.
Browser configuration
The (virtual) webserver must be entered in the Autoconfigure URL of the browser to make use of the ProxyConf script.
http://proxyconf.some.domain/
In IE the URL must be specified in the Address field, just below the Use automatic configuration script tickbox.
THE CONFIGURATION FILE
The ProxyConf module first reads a .ini-style configuration file to determine the proxy settings of the network. The configuration file contains three sections: proxy, noproxy and https.
The proxy section
The sections proxy and https have an identical format. They contain lines of the form subnet=proxyip:port.
Single proxy
[proxy]
172.16.32.0/20=172.16.32.10:3128
The subnet 172.16.32.0/20 has a single proxy defined. The proxy server is 172.16.32.10 and it listens on port 3128.
Multiple proxies
[proxy]
172.16.0.0/20=172.16.0.10:3128,172.16.0.20:3128
Multiple proxy servers are defined in a comma separated list. In this example clients in the 172.16.0.0/20 subnet use 172.16.0.10 as their primary proxy server. When this server becomes unavailable, the clients will move over to 172.16.0.20 for their proxy requests.
Multiple proxies with load distribution
[proxy]
172.16.0.0/20=(172.16.0.10:3128,172.16.0.20:3128)
When proxy servers are placed between brackets, the load is distribution amongst the proxies. Some clients will have the first proxy as primary and some clients will have the second proxy as primary. The other proxy is used as a backup. The order in which the proxies are tried depends on the IP address of the client. The script is deterministic, so for a given IP address the priority list is always the same.
To determine the proxy list for a given IP address multiple rules may be applied. Subnets are tried from the highest to the lowest mask. The module puts all proxies that are found in a list.
The noproxy section
The noproxy section contains hosts that should be contacted by the clients directly. Noticeably, web servers that use NTLM authentication will not work when clients connect to them via a proxy server. The syntax for specifying noproxy hosts is subnet=fqhn1,fqhn2,... Alternatively, the multiline syntax can be used, as shown in this example.
[noproxy]
0.0.0.0/0=<<less
proxytunnel 1.7.2.161
This is proxytunnel, a program that connects stdin and stdout to an origin server through HTTPS proxy. more>>
Short guide to installing proxytunnel
On most modern unix systems, use the normal Makefile
On MAC OS X, use Makefile.darwin
If you dont have gnu-getopts, use Makefile.no-gnu-getopts
If you want to enable setproctitle functionality, add a CFLAGS define -DSETPROCTITLE (uncomment sample in Makefile)
Run make and optionally make install.
If you manually want to install, copy proxytunnel to /usr/local/bin and optionally the manual-page from the debian-subdirectory to your manpath.
Enhancements:
- Fixed buffer/malloc issue
- Clean-up usage info/help text
- Remove spurious syslog
- Added build-number to versionstring
Apache::ReverseProxy 0.07
Apache::ReverseProxy is an Apache mod_perl reverse proxy. more>>
SYNOPSIS
# In Apache config file
< Location / >
SetHandler perl-script
PerlHandler Apache::ReverseProxy
PerlSetVar ReverseProxyConfig /usr/local/apache/conf/rproxy.conf
< /Location >
# In rproxy.conf / http://www.cpan.org/
This is a reverse proxy module for Apache with mod_perl. It is intended to replace Apache::ProxyPass. Given a list of URI mappings, this module will translate an incoming URI, retrieve the contents for the translated URI, and return the contents to the original requestor. This module allows you to specify exact matching (instead of regular expression matching) and handles query string translations.
CONFIGURATION
You will need to set the ReverseProxyConfig perl variable in Apache to the path of the reverse proxy mapping file. For example:
< Location / >
SetHandler perl-script
PerlHandler Apache::ReverseProxy
PerlSetVar ReverseProxyConfig /usr/local/apache/conf/rproxy.conf
# Optional configuration items:
#PerlSetVar ReverseProxyChain http://proxy.mycompany.com:8888/
#PerlSetVar ReverseProxyNoChain mycompany.com
< /Location >
ReverseProxyChain specifies a proxy server to use. This is sometimes called proxy chaining when one proxy server uses another proxy server. The ReverseProxyNoChain directive can specify a domain to not use proxy chaining on.
Reverse proxy configuration files have three fields, each separated by white space. The first field is the uri to look for, the second field is the replacement uri, and the third field is optional and allows you to specify comma separated options for the mapping. The only option that is currently supported is the exact parameter, which will make the reverse proxy use exact matching for the first parameter instead of using regular expressions. This feature is convenient when the first parameter contains characters that may need to be escaped or quotemetaed. Exact options are evaluated first. If there isnt an exact match, regular expression matches are performed. Configuration files may contain comments, which start with a pound sign. For example:
/news/ http://www.news.com/
/ http://www.perl.com/
/stats http://localhost/stats exact
# /stats maps exactly to http://localhost/stats
# /stats/b maps to http://www.perl.com/stats/b
/french/news http://www.news.com/?language=french
# /french/news/index -> http://www.news.com/index?language=french
# /french/news/index?a=b -> http://www.news.com/index?language=french&a=b
PhishBouncer 2.1
PhishBouncer project is an advanced Java HTTP(S) proxy with anti-phishing capabilities. more>>
PhishBouncer is an anti-phishing platform based on an HTTP/HTTPS proxy integrating anti-phishing checks that do not depend on block lists or Phish signatures. The checking algorithms make use of the attributes of the web-site being visited, the structure and properties of the referring URL, and the web-sites association with other legitimate web-sites that the user interacts with. The checks are implemented as plug-in interceptors, and it is easy to modify them and add or remove new checks. Apart from defense against Phishing, PhishBouncer is also a platform for developing and testing new anti-Phishing checks.
For ease of rapid prototyping and testing of anti-Phishing checks with real and reliable test data, a crawl-and-drive framework is also provided-- all you need is an APWG membership to be able to download Phish Reports from APWG and follow the instructions provided. This framework will periodically download new Phish URLs from APWG, and visit the Phish sites using the PhishBouncer proxy first without and then with the anti-Phishing checks. All results are logged so that dead or broken sites (i.e., sites that produced errors in either visit) can be culled, and the remaining data can be used to obtain an accurate count of how many Phish sites were flagged by the currently active checks.
The HTTP/HTTPS proxy framework can also be used to insert other types of adaptive behavior in the HTTP/HTTPS based interaction by replacing the plug-in interceptors executing anti-phishing checks by other interceptors that performs logging, filtering (as in parental control), load-balancing, QoS-based redirection etc.
PhishBouncer was developed by BBN under an R&D project supported by the Homeland Security Advanced Research Project Agency (HSARPA), under its Cyber Security R&D program.
Main features:
- Implemented in Java, therefore less vulnerable to traditional exploits (e.g., buffer overflow attacks)
- Architectural solution with stronger guarantees than browser plug-ins (can catch phishing attacks even if the browser is closed or not part of the communication)
- Browser independent - supports all web browsers
- Operating system independent - supports all operating systems that can run Java
- Highly customizable deployment options - runs on user hosts, wireless routers, or network server
- Open framework and plug-in architecture - allows easy addition of new checks
- Attribute-based detection - provides protection against unknown phishing attacks
- Supports reactive and proactive anti-phishing checks
- Supports HTTP and HTTPS