Most of those proxies append the client IP address to the X-Forwarded-For HTTP header, so we can use it to get the IP into the access log using a CustomLog as seen below:

LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" proxy
SetEnvIf  X-Forwarded-For "^.*\..*\..*\..*" forwarded
CustomLog ${APACHE_LOG_DIR}/mywebsite_access.log combined env=!forwarded
CustomLog ${APACHE_LOG_DIR}/mywebsite_access.log proxy env=forwarded

Reference: https://www.techstacks.com/howto/log-client-ip-and-xforwardedfor-ip-in-apache.html

Authenticator.setDefault(new Authenticator() {
    protected PasswordAuthentication getPasswordAuthentication() {
 
        return new PasswordAuthentication("domain\\user","password".toCharArray());
    }
});

Reference: https://stackoverflow.com/questions/120797/how-do-i-set-the-proxy-to-be-used-by-the-jvm/12295125#12295125

(I)nstall, (U)pgrade or (S)hell? s
# cd /dev
# sh /dev/MAKEDEV sd1 sd2
# fdisk -iy sd0
Writing MBR at offset 0.
# fdisk -iy sd1
Writing MBR at offset 0.
# disklabel -E sd0
Label editor (enter ‘?’ for help at any prompt)
> a a
offset: [64] [ENTER]
size: [41929586] [ENTER]
FS type: [4.2BSD] RAID
> q
Write new label?: [y] y
# cd /tmp
# disklabel sd0 > protofile
# disklabel -R sd1 protofile
# bioctl -c 1 -l /dev/sd0a,/dev/sd1a softraid0
sd2 at scscibus2 targ 1 lun 0: <OPENBSD, SR RAID 1, 005> SCSI2 0/direct fixed
sd2: 20473MB, 512 bytes/sector, 41929058 sectors
softraid0: RAID 1 volume attached as sd2
# dd if=/dev/zero of=/dev/rsd2c bs=1m count=1
1+0 records in
1+0 records out
1048576 bytes transferred in 0.009 secs (111337439 bytes/sec)
# exit

configure: WARNING: Check library not found. Unit tests will not be built or run.
checking for openvpn-plugin.h... no
configure: error: Could not locate a working openvpn source tree.
See `config.log' for more details.
===> Script "configure" failed unexpectedly.
Please report the problem to snb@FreeBSD.org [maintainer] and attach the
"/usr/ports/security/openvpn-auth-ldap/work/auth-ldap-2.0.3/config.log"
including the output of the failure of your make command. Also, it might be
a good idea to provide an overview of all packages installed on your system
(e.g. a /usr/sbin/pkg_info -Ea).
*** Error code 1

Looking at the config.log, we have:

configure:5511: checking for openvpn-plugin.h
configure:5544: cc -o conftest -O2 -pipe -DLDAP_DEPRECATED -fno-strict-aliasing -I/usr/ports/security/openvpn/work/openvpn-2.3.0 -export-dynamic conftest.c >&5
conftest.c:15:34: error: openvpn-plugin.h: No such file or directory

Other error that might happen:

checking how to run the Objective C preprocessor... /lib/cpp
configure: error: Objective C preprocessor "/lib/cpp" fails sanity check

To fix this, a patch can be applied:

cd /usr/ports/security/openvpn-auth-ldap
wget https://mwclabs.net/pub/openvpn-auth-ldap.patch
patch -p0 < openvpn-auth-ldap.patch
make && make install

tar: Unrecognized archive format

After a bit of digging, I found out the distributed version of bsdtar wasn’t recognizing xz compression between -7 and -9.

As a workaround, while not upgrading to FreeBSD 8.3, you can do the following:

• Install the Port archivers/libarchive; and
• Append the line below in the file /etc/make.conf:

TAR=/usr/local/bin/bsdtar

That being done, you now will be able to successfully install the failing Port.

More info.

UPDATE

If you are getting the error below while installing archivers/libarchive:

error: spawn.h: No such file or directory

You should try installing it with the following commands:

make clean
make ac_cv_header_spawn_h=no
make install

apt-get install udftools

Burn your image:

growisofs -Z /dev/dvdrw1=/home/theone/myimage.img

• /dev/dvdrw1 is the DVD device
• /home/theone/myimage.img is your image

Reference:

• http://www.centraldolinux.org/como-gravar-um-arquivo-img-em-dvd/

On your network gateway/firewall:

1. Set the following sysctl:

sysctl net.inet.ip.redirect=0

2. Add the following rule in your PF config:

pass in quick on $int_if route-to ($int_if $IP_Proxy) proto tcp from ! $IP_Proxy to any port www

On your proxy server:

1. Set the following sysctl:

sysctl net.inet.ip.redirect=0

2. Add a PF rule to redirect port 80 traffic to port 3128:

rdr inet proto tcp from ! $IP_Proxy to any port www -> $IP_Proxy port 3128

This will mount your HD on read-only mode:

mount -t nfs /dev/da0s1 /mnt

To be able to mount your NTFS and write, you will need NTFS-3G.

Install the port:

cd /usr/ports/sysutils/fusefs-ntfs

make install

Load the kernel module:

kldload /usr/local/modules/fuse.ko

Mount the desired device:

mount -t ntfs-3g /dev/da0s1 /mnt

Alternative mounting command:

ntfs-3g /dev/da0s1 /mnt

1. Install

You can using the pre-compiled packages (pkg_add) or from the source using Ports.

Via Package Manager (pkg_add)

Set the repository mirror:

export PKG_PATH=ftp://ftp.das.ufsc.br/pub/OpenBSD/4.4/packages/i386/

Install the package:

pkg_add -i -v squid

Selected version was: squid-2.7.STABLE3-ldap.

Via Ports

cd /usr/ports/www/squid
env FLAVOR=transparent make install

2. Configuration

2.1. Squid

To make squid start on boot, edit the file /etc/rc.local and append the following files after # Add your local startup actions here:

# Squid
/usr/local/sbin/squid

Now, edit the Squid configuration file /etc/squid/squid.conf, you can use a configuration like the following:

http_port 3128 transparent

visible_hostname neatproxy.myorg.corp

error_directory /usr/local/share/squid/errors/Portuguese

# Logs
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log

# SVN
extension_methods REPORT MERGE MKACTIVITY CHECKOUT PROPFIND

# ACLs
acl all src 0.0.0.0/0.0.0.0
acl localnet src 192.168.1.0/24
acl SSL_Ports port 443 563 2096
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

# Full access users
acl vips arp "/etc/squid/users.vips"

# BlackList
acl blacklist dstdomain "/etc/squid/domains.blacklist"

##
# Allow and deny rules

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access allow vips
http_access deny blacklist

http_access allow localnet
http_access deny all
##

Create the /etc/squid/users.vips e /etc/squid/domains.blacklist if used.

Run Squid with the -z flag in order to init swap directories:

/usr/local/sbin/squid -z

Start the Squid service:

/usr/local/sbin/squid

After configuration changes, run the following command to reload rules:

/usr/local/sbin/squid -k reconfigure

2.2. PF

Edit PF configuration file /etc/pf.conf and use/adapt the following rules:

rdr on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port 3128

pass in on $int_if inet proto tcp from any to 127.0.0.1 port 3128
pass out on $ext_if inet proto tcp from any to any port www

Permissions for Squid to access /dev/pf:

chgrp _squid /dev/pf
chmod g+rw /dev/pf

Reference:

• http://www.openbsd-br.org/index.php?q=node/15