Big news: RELIANOID just won the SourceForge Community Choice Award!
Out of over 500,000 projects, ours stood out for downloads and engagement — we’re honored and grateful.

Thanks to our amazing community and everyone supporting open-source innovation!
#RELIANOID #SourceForge #OpenSource #Networking #Proxy #DevOps #AwardWinner #CommunityDriven
https://sourceforge.net/projects/relianoid/

Traefik Proxy 3.4 “Chaource” arrives with distributed rate-limiting via Redis, P2C load balancing, custom server URLs, and more polished features.
https://linuxiac.com/traefik-proxy-3-4-debuts-with-distributed-rate-limiting-and-smarter-load-balancing/

Police dismantles #botnet selling hacked routers as residential proxies

https://www.bleepingcomputer.com/news/security/police-dismantles-botnet-selling-hacked-routers-as-residential-proxies/

Using eBPF to see through encryption without a proxy

https://github.com/qpoint-io/qtap

NIGERIA BANS BURKINA RALLY

It appears that the 2 years Burkina Faso has spent under revolutionary leadership has sent jitters down the spines of Nigeria's leadership. Pan-Africanism is apparently now banned in Nigeria.

https://x.com/african_stream/status/1920321879698498018

#nigeria
#proxy #comprador
#panafricanism #africa #burkinafaso #geopolitics
#Colonialism
#AntiImperialism #tiktok
#usa #yemen
@blackmastodon @BLKNewsNow
@blackvoices

Un muy buen #Proxy para #Gemini (con estética Winchot, pero bue, es con cariño).
https://www.obsessivefacts.com/gemini-proxy?uri=gemini%3A%2F%2Ftexto-plano.xyz%2F

Fake GIF Leveraged in Multi-Stage Reverse-Proxy Card Skimming Attack

A sophisticated multi-stage carding attack on a Magento eCommerce website has been uncovered. The malware used a fake gif image file, local browser sessionStorage data, and a malicious reverse-proxy server to steal credit card data, login details, cookies, and other sensitive information. The attack targeted an outdated Magento 1.9.2.4 installation, exploiting its lack of support and security vulnerabilities. The malware injected JavaScript code disguised as Bing tracking code and utilized a tampered payment file to create a user-specific attack. This advanced technique allowed the attackers to intercept and manipulate all website traffic while remaining undetected by victims and administrators.

Pulse ID: 680c5278fbbef40e36ef3f9f
Pulse Link: https://otx.alienvault.com/pulse/680c5278fbbef40e36ef3f9f
Pulse Author: AlienVault
Created: 2025-04-26 03:26:48

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

Just released: #swad v0.4

swad is the "Simple Web Authentication Daemon", offering a minimal #http server to do #cookie authentication with some #login form, intended for usage behind a reverse #proxy, designed with #nginx' "auth_request" in mind. It's written in pure #C with minimal dependencies (just OpenSSL/LibreSSL for TLS support and libpam for PAM support).

This release was a quick one, but a new credentials checker module deserves a new release. Now we have "exec" to delegate checking credentials to some external tool.

Read more in the full release notes, grab the .tar.xz and build/install it :
https://github.com/Zirias/swad/releases/tag/v0.4

Just released: #swad v0.3!

https://github.com/Zirias/swad/releases/tag/v0.3

swad is the "Simple Web Authentication Daemon", your tiny, efficient and (almost) dependency-free solution to add #cookie + login #form #authentication to whatever your #reverse #proxy offers. It's written in pure #C, portable across #POSIX platforms. It's designed with #nginx' 'auth_request' in mind, example configurations are included.

This release brings a file-based credential checker in addition to the already existing one using #PAM. Also lots of improvements, see details in the release notes.

I finally added complete build instructions to the README.md:

https://github.com/Zirias/swad

And there's more documentation available: manpages as well as a fully commented example configuration file.

Je suis pas un gros "viewer" sur Twitch, mais quand je peux, je regarde #Proxy d'@arretsurimages.

Là, suis dèg', j'ai raté celui du 1er avril en live, mais on le peut voir replay.

Ça parle du rapport sur la pub qui a fuité après avoir "calé une table" quelques mois dans le bureau du 1er ministre.

J'aime bien que @lorisguemart rappelle, à chaque fois qu'il aborde l'ARPP, que c'est une association et pas une "Autorité" .

(c'est d'ailleurs rappelé dans ledit rapport)

https://www.arretsurimages.net/articles/climat-un-rapport-explosif-veut-interdire-des-pubs-les-medias-peu-interesses

#PgDog is a #network #proxy and it can see every byte sent between #Postgres and the clients. It understands #SQL and can infer where queries should go, without requiring changes to application code. In this article, we discuss how we handle the Postgres wire protocol and manipulate it to serve queries to multiple databases at the same time. https://pgdog.dev/blog/hacking-postgres-wire-protocol

The developers of the mitmproxy tool describe it as the Swiss army knife for debugging, testing, data protection analysis, and penetration testing HTTP(S) connections. Holger Reibold shows you how mitmproxy can be a useful addition to your security toolbox.
https://www.admin-magazine.com/Archive/2025/85/Traffic-analysis-with-mitmproxy?utm_source=mlm
#OpenSource #mitmproxy #debugging #testing #security #proxy #MITM

#GoAccess pour les journaux #Nginx #Proxy Manager passe en version 1.1.35
https://github.com/xavier-hernandez/goaccess-for-nginxproxymanager

Just released: #swad v0.2

SWAD is the "Simple Web Authentication Daemon", meant to add #cookie #authentication with a simple #login form and configurable credential checker modules to a reverse #proxy supporting to delegate authentication to a backend service, like e.g. #nginx' "auth_request". It's a very small piece of software written in pure #C with as little external dependencies as possible. It requires some #POSIX (or "almost POSIX", like #Linux, #FreeBSD, ...) environment, OpenSSL (or LibreSSL) for TLS and zlib for response compression.

Currently, the only credential checker module available offers #PAM authentication, more modules will come in later releases.

swad 0.2 brings a few bugfixes and improvements, especially helping with security by rate-limiting the creation of new sessions as well as failed login attempts. Read details and grab it here:

https://github.com/Zirias/swad/releases/tag/v0.2

New blog post

𝐂𝐨𝐧𝐟𝐢𝐠𝐮𝐫𝐢𝐧𝐠 𝐀𝐒𝐏.𝐍𝐄𝐓 𝐂𝐨𝐫𝐞 𝐅𝐨𝐫𝐰𝐚𝐫𝐝𝐞𝐝 𝐇𝐞𝐚𝐝𝐞𝐫𝐬 𝐌𝐢𝐝𝐝𝐥𝐞𝐰𝐚𝐫𝐞

Running ASP.NET Core behind a proxy?

Then you need to configure ForwardedHeadersMiddleware the right way.
Trust proxy IPs
Handle X-Forwarded-* headers
Avoid broken IPs, schemes & hosts

Read it https://nestenius.se/net/configuring-asp-net-core-forwarded-headers-middleware/