Good afternoon dear Habrausers.
Today I propose to you to discuss the creation of a single proxy server capable of remaining steadfast in snowstorms, heat and blocking and sacredly observing the principles of freedom of information, unity and peace in the world. Yes, yes, we will talk about i2p again, but from the standpoint of server settings.
Let's imagine that there is a good Samaritan abroad whose i2p router is always turned on and he is ready to bring joy to people by creating proxy.antizapret.i2p for us
This article was written by a user torna he asked to publish, so please send all the positives to him.
Surprisingly, creating a tunnel of this kind turned out to be elementary. For this we need:
- squid - proxy server
- i2p router
Add to squid.conf
acl block_ip dst 93.158.134.198 # If the user wants to get to this ip, we use a proxy (you can create a separate file containing the entire list of banned addresses)
http_access allow block_ip # allow only necessary IP addresses
http_access deny all # deny everyone else
http_port 3128 # Sets the port for the i2p router
Load i2p and start setting up the tunnel:
- On the page http://127.0.0.1:7657/i2ptunnel/wizard select a server tunnel
- standard tunnel type
- Description and name at your discretion
- Address: 127.0.0.1
- port: 3128
- Check the box for autorun
Now the proxy server broadcasting in i2p will create in a couple of minutes a b32 address of this type zrucncbt6qlocnzqobb7nddtp2kexwlkfabgvqlhizxcnp4qdv6q.b32.i2p. To give the link a readable format, you need to add it to your address book and wait a week until most routers on the network make changes. After this you can start advertising your proxy.
Custom Settings.
In order for the user to be able to use the proxy server, it must be registered on the same page http://127.0.0.1:7657/i2ptunnel/wizard only this time select the client tunnel:
- HTTP tunnel type
- The name and description depends on your imagination
- Tunnel destination address: zrucncbt6qlocnzqobb7nddtp2kexwlkfabgvqlhizxcnp4qdv6q.b32.i2p or name from the address book
- port: 3123
- If you have one computer, choose a network interface address starting with 127.0.0.1, if not 192.xx.xx.xx
- Check the box for autorun
Since proxies and VPNs will be banned in the near future, constantly encrypted traffic from a certain IP will look ridiculous; the traffic needs automation. Let's create a client pac file.
I looked at the sources of this .pac file at http://antizapret.prostovpn.org/ for which I express gratitude to the owner, I also have hopes that the owner of this resource will become a good Samaritan.
function FindProxyForURL(url, host) {
blockedarray = [
"93.158.134.198",
];
if (blockedarray.indexOf(dnsResolve(host)) != -1) {
return "PROXY 127.0.0.1:3123";
}
return "DIRECT";
}
PS. I apologize in advance for the humorous style of the article; the topic is quite sensitive from a legal point of view and sad at the same time. Thank you for your attention.