Please Help Me (About Squid İpv6 Proxy Server)

[shzofren]

i want to set up proxy server.ipv4 to ipv6 with squid. Required to set up account for instagram. Although I have been struggling for months, I can not.This was the last point I could come to:

As you can see, both my ipv4 address and my ipv6 address are visible.The squid.conf file looks like this;
##########################
acl user1 myportname 10000
acl user2 myportname 10001
acl user3 myportname 10002

http_access allow user1
http_access allow user2
http_access allow user3

http_access allow all

http_port 45.***.***.***:10000 name=10000
http_port 45.***.***.***:10001 name=10001
http_port 45.***.***.***:10002 name=10002

tcp_outgoing_address 2001:****:****:****:****:****:****:**** user1
tcp_outgoing_address 2001:****:****:****:****:****:****:**** user2
tcp_outgoing_address 2001:****:****:****:****:****:****:**** user3
###########################

What am I doing wrong ? Please help me.

 

[BetterKnow]

I'm assuming you're doing this through an ISP that allocates you IPV6.

First, call your ISP and check that the IPV6 is even active. It could be assigned to your router but activated yet.

You should also have a /64 or a /112 and not a single in IP, so you should check this as well.

Lastly, make sure the ports on your firewall are open. On Windows, you can do this through "Advanced Firewall setting".

 

[Sebastiann]

I find that 3proxy is much more lightweight and simple to configure for this sort of thing.

Here's my standard config for reference: https://github.com/prescience-data/3proxy-config

Are you trying to get rid of your IPv6 address or get rid of your IPv4 address?

 

[William Parsons]

Are the IPs configured with the network interface?
Which version of Squid are you using?
Are there any errors when you run squid -k parse?

Try adding the http_access and http_port ACLs to the bottom of the config. Maybe the user1 and user2 ACLs aren't reading the name defined in http_port because of the order they're listed in.

You might also need to use localip for IPv4/IPv6 and define both the IP and port ACLs, but I haven't tested it.

acl ipv4_ip_1 localip 45.***.***.**1
acl ipv4_ip_2 localip 45.***.***.**2
acl ipv6_ip_1 localip 2001:****:****:****:****:****:****:***1
acl ipv6_ip_2 localip 2001:****:****:****:****:****:****:***2
acl ipv4_port_1 localport 10000
acl ipv4_port_2 localport 10001

tcp_outgoing_address 2001:****:****:****:****:****:****:***1 ipv4_ip_1 ipv4_port_1
tcp_outgoing_address 2001:****:****:****:****:****:****:***2 ipv4_ip_1 ipv4_port_1

http_access allow ipv4_ip_1 ipv4_port_1
http_access allow ipv4_ip_2 ipv4_port_2

http_access deny all

http_port 45.***.***.**1:10000
http_port 45.***.***.**2:10001

 

[shzofren]

I'm assuming you're doing this through an ISP that allocates you IPV6.

First, call your ISP and check that the IPV6 is even active. It could be assigned to your router but activated yet.

You should also have a /64 or a /112 and not a single in IP, so you should check this as well.

Lastly, make sure the ports on your firewall are open. On Windows, you can do this through "Advanced Firewall setting".

ipv6 / 64 is enabled. I am using ubuntu and have no idea about firewall configuration. help me.

 

[shzofren]

I find that 3proxy is much more lightweight and simple to configure for this sort of thing.

Here's my standard config for reference: https://github.com/prescience-data/3proxy-config

Are you trying to get rid of your IPv6 address or get rid of your IPv4 address?

on page 404. and yes I don't want my ipv4 address to appear.

 

[shzofren]

Are the IPs configured with the network interface?
Which version of Squid are you using?
Are there any errors when you run squid -k parse?

Try adding the http_access and http_port ACLs to the bottom of the config. Maybe the user1 and user2 ACLs aren't reading the name defined in http_port because of the order they're listed in.

You might also need to use localip for IPv4/IPv6 and define both the IP and port ACLs, but I haven't tested it.

acl ipv4_ip_1 localip 45.***.***.**1
acl ipv4_ip_2 localip 45.***.***.**2
acl ipv6_ip_1 localip 2001:****:****:****:****:****:****:***1
acl ipv6_ip_2 localip 2001:****:****:****:****:****:****:***2
acl ipv4_port_1 localport 10000
acl ipv4_port_2 localport 10001

tcp_outgoing_address 2001:****:****:****:****:****:****:***1 ipv4_ip_1 ipv4_port_1
tcp_outgoing_address 2001:****:****:****:****:****:****:***2 ipv4_ip_1 ipv4_port_1

http_access allow ipv4_ip_1 ipv4_port_1
http_access allow ipv4_ip_2 ipv4_port_2

http_access deny all

http_port 45.***.***.**1:10000
http_port 45.***.***.**2:10001

I added the IP to the network interface (with ifconfig). I use Squid 4.10. Ubuntu 20.04 x64 is in my ubuntu version. I don't know about squid -k parsing. and I will try the example of squid.conf you provided.

 

[Sebastiann]

on page 404. and yes I don't want my ipv4 address to appear.

Sorry I just set it to public now...

To restrict to IPv6:

https://3proxy.ru/howtoe.asp#IPV6

How to use IPv6
IPv6 is supported since 0.8. SOCKSv5 supports IPv6 with special request type (must be implemented by client).
3proxy supports proxying from IPv4 and IPv6 networks to IPv4, IPv6 and mixed networks. IPv6 address may be used in internal, external, parent commands, ACLs, -i and -e options,etc. external command and -e options may be given twice for each service - once with IPv4 and once with IPv6 address. internal can be given only once, to bind to all IPv4 and IPv6 addresses use [0:0:0:0:0:0:0:0] or [::].
Any service may be configured with -4, -46, -64, -6 options to specify decied priority for name to IPv4/IPv6 address resolution (IPv4 only, IPv4 priority, IPv6 priority, IPv6 only).

 

[shzofren]

Sorry I just set it to public now...

To restrict to IPv6:

https://3proxy.ru/howtoe.asp#IPV6

I already know 3proxy config. The important thing is to configure the firewall.If we do not configure the firewall, my ipv4 address will be visible.does anyone here know about firewall configuration?I do not have network information, unfortunately.this address has ipv4 to ipv6 configuration but it has not been working for 1 month.https://github.com/dukaev/ipv4-ipv6-proxy

 

[Sebastiann]

I'm not sure if this would work but can you just disable IPv4 on the interface?

 

[shzofren]

I'm not sure if this would work but can you just disable IPv4 on the interface?

I don't know how to disable ipv4. and how do we connect to the proxy if we disable ipv4?

 

[shzofren]

I'm not sure if this would work but can you just disable IPv4 on the interface?

here is how to visible for squid only ipv6
---------------------------------------------

IPv4 is not yet an optional protocol so technically no. But there are
several ways to safely achieve IPv6-only traffic:

* some DNS resolvers can be configured not to deliver A records.

* ensure the NIC of the machine running Squid has no IPv4 addresses.

* ensure that IPv4 space is all non-routable.

* ensure your Squid machines firewall is configured to reject (_not_
drop) IPv4 packets.

 

[Sebastiann]

I don't know how to disable ipv4. and how do we connect to the proxy if we disable ipv4?

Just assign it an IPv6 address? Again not sure if would work as I picture in my head, but if you disabled IPv4 on your NIC, surely it would only attempt to connect out with IPv6?

What OS are you using? If Windows, just give this a try and see what happens, I give it a 30% chance of working but worth a try haha:

 

[shzofren]

Just assign it an IPv6 address? Again not sure if would work as I picture in my head, but if you disabled IPv4 on your NIC, surely it would only attempt to connect out with IPv6?

What OS are you using? If Windows, just give this a try and see what happens, I give it a 30% chance of working but worth a try haha:

I am using ubuntu (linux). and how do I connect to ssh connection and proxy if I disable ipv4 completely

 

[Sebastiann]

https://www.digitalocean.com/docs/networking/ipv6/how-to/disable-ipv4/
You would provision an IPv6 address and connect using that

 

[shzofren]

https://www.digitalocean.com/docs/networking/ipv6/how-to/disable-ipv4/
You would provision an IPv6 address and connect using that

but I installed proxy from ipv4 to ipv6 and need thousands of proxies

 

[Sebastiann]

What are you actually trying to achieve here?

I'm not entirely sure this is going to do what you think it will if your plan is to set up a ton of proxies on VPS's and assign them all outbound IPv6 addresses in an attempt to make it not seem like you are using datacenter IPs...

If that's the plan, I would take it back to the drawing board, if not - give us a bit of clarity around what the end goal is to make it easier to help.

 

[shzofren]

What are you actually trying to achieve here?

I'm not entirely sure this is going to do what you think it will if your plan is to set up a ton of proxies on VPS's and assign them all outbound IPv6 addresses in an attempt to make it not seem like you are using datacenter IPs...

If that's the plan, I would take it back to the drawing board, if not - give us a bit of clarity around what the end goal is to make it easier to help.

i just want to install multiple ipv6 proxy with squid and i just want my ipv6 address to be visible.

 

[BetterKnow]

If you're serious about this you need to switch to a Linux VPS. Windows won't get you very far.

Once you add the configuration, you will a host IPV4 address to access the IPV6 proxies like a backconnect, otherwise you will greatly limit the proxies as not many tools can directly interact with fully IPV6 proxies.

Once you do that, you want to verify your IPV6 and IPV4 routes and gateways.

Lastly, you can start extracting IPs from whatever subnet you get. If you only get a /64 don't expect to go very far with it.

 

[shzofren]

If you're serious about this you need to switch to a Linux VPS. Windows won't get you very far.

Once you add the configuration, you will a host IPV4 address to access the IPV6 proxies like a backconnect, otherwise you will greatly limit the proxies as not many tools can directly interact with fully IPV6 proxies.

Once you do that, you want to verify your IPV6 and IPV4 routes and gateways.

Lastly, you can start extracting IPs from whatever subnet you get. If you only get a /64 don't expect to go very far with it.

I already use ubuntu (linux). I added a lot of ipv6 to subnets and the main is ipv6 / 64. I also edited the squid.conf file. my only problem is that both my ipv4 and ipv6 addresses are visible. I just want my ipv6 address to be visible. I think this will be done with iptables. I have no information on iptables.