Shorewall users - Nov 2002 - Blocking the browser referrer info

I was trying the http://www.pcflank.com/ to test the firewall and
everything checks out good but browser test shows that my browser is
revealing the referrer information. Is there a way to block this
information going out?
Thanks.

--On Thursday, November 07, 2002 10:46 PM -0500 Suren <suren@adelphia.net>
wrote:
> I was trying the http://www.pcflank.com/ to test the firewall and
> everything checks out good but browser test shows that my browser is
> revealing the referrer information. Is there a way to block this
> information going out?
Your firewall can''t block it -- it is included as part of the GET
commands
that your browser in sending to remote http servers.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net

Suren  (8.11.2002  4:46):
>I was trying the http://www.pcflank.com/ to test the firewall and
>everything checks out good but browser test shows that my browser is

Shorewall is a kind of "packet filter" that works with network and
transport
layer of the ISO - OSI Model.

http://www.thelinuxreview.com/howto/intro=5Fto=5Fnetworking/c4412.htm

"Referer" is a part of HTTP protocol and HTTP protocol works with
application
layer of the ISO - OSI Model.

And that''s why Shorewall cannot block "Referer" information.

If U wanna block "Referer" use any kind of "application
firewall", for example
Squid PROXY with (or without) Shorewall.

http://www.squid-cache.org/

Check Squid documentation and U will find 2 very useful configuration
directives:

anonymize=5Fheaders
http://squid.visolve.com/squid24s1/miscellaneous.htm#anonymize=5Fheaders

and

fake=5Fuser=5Fagent
http://squid.visolve.com/squid24s1/miscellaneous.htm#fake=5Fuser=5Fagent


So U can use this in your Squid config:

anonymize=5Fheaders deny=20Referer


Enjoy :o)

                             TimeLord

On Thu, 7 Nov 2002, Suren wrote:
> I was trying the http://www.pcflank.com/ to test the firewall and
> everything checks out good but browser test shows that my browser is
> revealing the referrer information. Is there a way to block this
> information going out?
> Thanks.
You will need something like privoxy for that ...

Thanks for pointing to the right direction. Now that is working well
with the update to squid.