ChatNet Gate/Proxy Rules And Guidelines
=======================================

To improve security on our network, Chatnet's Coder Committee implemented the use of 
gate scanners into the ircd and services with the purpose of automatically banning 
abusive proxy users from the network. If you are caught on the network with an unsecure 
gate, or open proxies, you will be removed forcably from the network. If you are an 
abuser of this gate/proxy, stop using it. If you are a user that didnt realize you had 
an open port for such a thing, below you will find the "how's" and "why's", and 
"how to fix" on these issues, if you are glined or klined from a server for having 
unsecure gates on your system. 

Note: You can have the gline lifted AFTER you have secured your machine by emailing 
the person that glined you, their email being 'oper-name-here@alias.chatnet.org'.
(For example, Justmoi is justmoi@alias.chatnet.org ) or simply by emailing 'gate@chatnet.org'. 

There has been increasing amounts of press and publicity concerning unauthorized 
use of proxy/firewalls to perform illicit activities which may be attributable to
a firewall user. A number of these instances have involved the use of WinGate. 
This page is an information source to tell users of the issues, and how they can defend
themselves against abuse of their systems. 

Why should I do anything?

There are unfortunately people out there who spend a great deal of time looking for
a way to bypass security measures used increasingly by ISPs to thwart spammers - 
people who send large volumes of unsolicited mail to large numbers of email addresses.
One way to bypass ISP security for sending mail is to appear to be a valid ISP client.
This can be done through proxy software such as WinGate, if it is not securely configured. 

So. In general, in order to stop people doing things that may be attributed to you,
which could result in things like you getting your account shut down, you should ensure
that your proxy server installation is secure from unauthorized use. 

Fixing a Wingate server 

Upgrade your Wingate server if version prior to 2.1 : http://www.deerfield.com/support/wingate/kb/index.htm?a=1314
Get help about Wingate at http://www.practicallynetworked.com/sharing/secureproxy.htm.

Fixing a Socks 4/5 server

If you run unix Socks 4 or Socks 5, check your ACL.
Following are a few URL which could help you fix your misconfigured proxy server on a Windows machine :
Socks Proxy server : http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnproxy/html/msdn_proxycase.asp
Upgrade and get help about your winproxy at : http://www.winproxy.com/
Upgrade your sygate server : http://www.sygate.com

Fixing a Squid server

Get help for Squid ACLs at : http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.2
Get detailed help at : http://www.documents.cyberabuse.org/?page=vulnerabilities&doc=1
Upgrade your Squid 1.x server at : http://www.squid-cache.org/

Fixing a HTTP proxy server

Take a look at your manual for the ACL feature...
Vulnerable proxy servers can be of all types and brands. If your proxy server is not 
supported anymore and you are not sure about your configuration, firewall it so only your 
LAN can use it. Get help about WinRoute at www.tinysoftware.com. They have a manual in 
adobe format found under downloads/support.
Get detailed help about CacheFlow at : http://www.documents.cyberabuse.org/?page=vulnerabilities&doc=2